last executing test programs: 2m5.55753828s ago: executing program 3 (id=514): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x8, 0x111000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400), 0x42942, 0x0) write$vga_arbiter(r3, &(0x7f0000000000), 0x9) socket$inet(0x2b, 0x80000, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/30) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000004fb605000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000044e1e6e100000085000000c3000000955b9b7b963f7d5f9c00922bbb79dac7680a3507694e023d9496e08cfe7053fa85f790ff67ac9324e495402f0f050000000000000029f509d77d65b49705e5b7b02b9659adddce3f1f8c62655811960421d94c51cac05f7bf6a44e3403116465b1151e5fab974c78e5cbd4524bcf049499f68d119113fa4fb6772477178d6808c6e43744241f3605cc2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x7, 0x9}, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2m4.37853435s ago: executing program 3 (id=522): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 2m4.25541598s ago: executing program 3 (id=523): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xfe3a) 2m4.071210614s ago: executing program 3 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r1 = getpgrp(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/console\x00', 0x0, 0x0) read(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) sched_setscheduler(0x0, 0x1, 0x0) unshare(0xc040400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB=',\x00\x00'], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 2m2.966094964s ago: executing program 3 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000019080)='comm\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000019200)="b08ab5fe62cfede73ce8b9bee1a0b354f3d07ab613623d818877d382f7b49fe57671fb34ff99361c062bdcf4c7a308db84aaa844e56f40fe4b36e31b91b413b8c923eea4f8864dfe95aa86c5a5ddfa6b8dd31a31471c54e10a6a968790fe82778275c0e7f5a0a00bc37ecd388a1c8399088f605c84201a0dad0b1b39d41e4180723839d1d75628faf895fd199b314c7622bc17a6dd7d45dee3ee326380a40144a7d4b986", 0xa4) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000019100), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='utf8', &(0x7f0000000440)='\x00dev\a\x00\x00\x00\x00\x00h&{|\xed\x0f\xb8\x93:\x1a\xea\xf8\n\xb7\xec\x16\xb5r\v\x12\xd7\xe7\x85]OI\xdaZ\xb9\"^\xd9\x91r\x93<\xfa\xd6\xd7\x17z\x04\xe8\x05N!\x01.\xcc\x8cR\xbc\xff\'\xbf;*\xdf\xdf\xe6 \x92>\xffre\x19FZ\x94\x1c\x13h', 0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0x87, 0xd, 0xa, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}}}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 2m2.122772596s ago: executing program 3 (id=531): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) r3 = accept(r2, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2m2.031454898s ago: executing program 32 (id=531): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) r3 = accept(r2, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 18.843250775s ago: executing program 2 (id=808): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xa40}}], 0x6b}}) shutdown(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r5, 0x0, 0x0) write$tun(r5, &(0x7f00000000c0)=ANY=[], 0xffe) 18.205227236s ago: executing program 2 (id=809): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@multicast, @broadcast, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x1e, 0x4, 0x0, 0x0, 0x88, 0x3, 0x0, 0x0, 0x73, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x1c, 0x78, 0x0, 0x7, [0x839e, 0x151ff2c4, 0xb, 0x9f97, 0xb9, 0x9]}, @noop, @timestamp_addr={0x44, 0x44, 0xb4, 0x1, 0x3, [{@local, 0x7}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x1}, {@broadcast}, {@empty, 0x3}, {@multicast1}, {@multicast2, 0x5}, {@broadcast, 0x1}]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xd, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x979b681a847ec956}, 0xc, &(0x7f0000002000)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x19c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x158, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcca}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x234}, 0x1, 0x0, 0x0, 0x8000}, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x20) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x7, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x800) 12.553704544s ago: executing program 2 (id=822): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, 0x0, 0x0) 12.390417127s ago: executing program 2 (id=826): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086311f3010000000000010902240001010000000904000002ffffff00090581e6070001000009b002030800010000"], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x20048000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x6b) pread64(r5, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000898500000071000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) preadv(r7, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/194, 0xc2}], 0x1, 0x802e, 0x79654e17) 11.910432666s ago: executing program 0 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x8, 0x0, 0x0, @local, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x3100}]}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x168, 0x10, 0x290, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a, 0x0, 0x0, 0xffffff00], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d5, 0x3502, 0x3a, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0xffff) getdents(r2, &(0x7f0000000040)=""/2, 0x2) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r0, 0xe515a000) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) close(r1) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/dlm-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x7fffffff, 0xa, {r4}, {r3}, 0xffffffffffffffff, 0x3}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r6, 0x0, 0x4004) write(r5, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/104, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES8=r7, @ANYRES8=r0, @ANYRESHEX=r0], 0xa0}, 0x1, 0x0, 0x0, 0x2402c085}, 0x8041) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 10.67833061s ago: executing program 0 (id=831): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) syz_usb_connect$uac3(0x2, 0xde, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000101e0400304000010203010902cc00030100100d080b0100010130020904000000010130000a2401ff2c00feffffff0d24090205020000000100000015240a06010100000002b87c00020000000100000009040100000102300009040101010102300009240201080d0681050c240201ff02da0770745a39062402010401090501090000049b050a2525010000000607000904020000010230000904020101010230000924020100040407000e2402010703fa089ba1b8a99ae60a2402020300ffff0c0609058209ff037202050a2525ff070000060100"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x7, 0xff, 0x40, 0x10}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x87, 0x5, 0x5, 0xf000, 0x8, [0x18, 0x3fc0, 0x0, 0xff0000, 0xff3f5f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ec96603e3d4fd859f9817bd5e1b6b7fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "dd6713dd73830ab3bbddd1c7bfb65b40"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}]}) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x0, 0x10, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x9d, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x727, 0x5, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x0, 0x0, 0x81, 0x20, 0x26}, 0x39, &(0x7f0000000340)={0x5, 0xf, 0x39, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "378b00"}, @generic={0x3, 0x10, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0xae, 0x100}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0x0, 0x400, [0x0]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x429}}, {0x52, &(0x7f00000004c0)=@string={0x52, 0x3, "7025e3b0cb91021aaf9cc66ff0a94aadcc5b347e2f5407e30d89929a61d1be4810919c24397c45c14663abdaa3a1e26e915748455f46a701a1e16a54fc17f12639bc7d942b2df44f22ccaafd26ec79dd"}}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x2d5a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xfa, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x85b, 0x3, 0x1, {0x22, 0x9cc}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x0, 0x14}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x3, 0xd1, 0x81, 0x8, 0xa}, 0x80, &(0x7f0000000640)={0x5, 0xf, 0x80, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x40, 0x3}, @generic={0x37, 0x10, 0xa, "df251bbc3e0aba604cb9d31249fc62e47ce1b96e5943208d1b93595b7e55f41fdf3be62dea82a8d49d3efcbd6d8792789faffa54"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b701443c6e62e64437e5089994b35fe4"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x4, 0x0, 0xe, [0xff3f00, 0xffc060, 0xc000, 0x321628291a4a6896]}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xd5, &(0x7f0000000b00)=ANY=[@ANYBLOB="d503f3ef9e5711b8deea196fdb19b292bdcf10ce5c69482ae9ea47e84323a02b29b392862c39c6ce81288af6d1d39d4a08fcf7b6a86bf891ecde555d1fa5cdd7b0fded6f9b1110a81474cb7fbda9789e497335a5029cd2d0bdaafd09df6b8bb7caed5b2f1365b6986ef477ea8dd5ebf843b0665347bdc8c8cc26592d03a40cedc4b07c0a2a0b423424f5ab0a4608019a9a6baf57b11042170fd4dd051068494f72f1922e0aaa42db8cb010531931464c330e0125504ea9aa572871306e52e87847cd41c2263adbbed1d31e0e5a9337ae6fa7e849068726a67760e1da12a58be48bbae01068"]}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x5d5fe5ae27ee37b9}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x37597abe5f39a785}}, {0x37, &(0x7f00000008c0)=@string={0x37, 0x3, "26d4bc6c2cc044445ea1a166b752e112b6286599de76531c6045f29abd6e0fc6af149d07026170ca7c8e541eedd19c28a7db98fee2"}}, {0x96, &(0x7f0000000900)=@string={0x96, 0x3, "7ba716d0868f19f4c6d1debff928fbea353a3f299def72becc31e3b2d5b2ee7412d998a1ad303b53490cd50167970436fdeb1fc92d957438b37929d96edf321663235b956cf06f8ddbc00d0097fd59414610c885b51fee550150c3ef80d82c31b1e9fd2710345f454c75d47d24606dbb301a11c5103f1329a66f111f01086cfcdd91b709755e7294749f439e156d40c48b388967"}}, {0xbf, &(0x7f00000009c0)=@string={0xbf, 0x3, "797e00204657fe8735ca8b64c582b451fc6d7bd1a3263d3d2566618da44a6483e743c9e1492868a3e07976f44c781a171eea0409769e7db6e19cbc39fc0d03132693b130cf34db8c03ad4f27ed478ccc1c9a22b3c27f46892980c508a4790ef97ff1dbd72c363f6328dc6396d8e6a29586939b122a8c34f6fa86213936dd0706e71ab0320ca6db413d2a7d2201f9a29d3b8729d2974217939a38ccfb3515a0641f9a5bf25a86a38d0ea4fdb347044f51660ce7a97fae8e7fab4d4580b3"}}]}) 8.611003027s ago: executing program 4 (id=836): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, 0x0, 0x0) 8.464923536s ago: executing program 4 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed", @ANYRESHEX=0x0, @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) 6.250633114s ago: executing program 1 (id=841): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000340)={0x1, 0xffff0000, 0x6}) r3 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r4 = dup(r3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(0x0, 0x0) close(0xffffffffffffffff) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x3}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000600)={r6, 0x8001}, &(0x7f0000000640)=0x8) r7 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r9 = syz_open_procfs(r7, &(0x7f0000000040)='ns\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) readlinkat(r9, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 6.204940393s ago: executing program 0 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 6.1753764s ago: executing program 2 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) r2 = syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000940)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat(r2, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x6, 0xfe) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRES32=r0, @ANYRES64=r4], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) openat$drirender128(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_usb_connect(0x1, 0xc3d, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x6f, 0xd3, 0xde, 0x40, 0x7392, 0xc711, 0x3d76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2b, 0x4, 0x7, 0x1, 0xe0, 0x2, "", [{{0x9, 0x4, 0xca, 0xe6, 0xa, 0xa3, 0x83, 0x54, 0xf, [], [{{0x9, 0x5, 0x2, 0x10, 0x200, 0xf, 0xf2, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3d9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xc, 0xf6, 0xa}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xbc, 0x66, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xa5, 0xde, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x6, 0x8, [@generic={0x71, 0x6, "0772b683360250ea2fa8f74d19f5bd5f2a06f1455ba20cf10e50c1fe97d41fc19013be2cab8982ae52163b0e0b65c660fd8875cf25073a02b4bb879cd2b869104f3596ffab464a36b2e2dc97fbecfec590c54ffcab2883a56a58a1b9407921492a457c0796827866893a4dd62d4309"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb7, 0xc528}]}}, {{0x9, 0x5, 0xf, 0x1d, 0x10, 0x8, 0x81, 0xae}}, {{0x9, 0x5, 0x9, 0x3, 0x0, 0xd8, 0xc, 0x7, [@generic={0x51, 0xd, "4659f3dd880338045c60eb2337842ccf56bfcc06f28e98542b67c724e40057ba9d105939f734d485a26e0e50c49ed1d0966818310275addf36f97d2c9a82977d004e03275deb7e1d67793da703ecdc"}]}}, {{0x9, 0x5, 0x8, 0x13, 0x3ff, 0x2, 0x6, 0xfe}}, {{0x9, 0x5, 0x80, 0xc, 0x420, 0xd, 0x40, 0x6, [@generic={0x1b, 0xb, "ef736ca541b1c5425147beca75130c58b61136c4c8282bbded"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x19f, 0x5e, 0x0, 0x1, [@generic={0x74, 0xf, "d1778c2f57efe08fffffdafecb916125c9520a371bb551769c824c0a2e71a2a6b8355ca9c89d3372b363982c19f8a3c65eae5f373ac557d2d711e9433021088048352a61e8bd572fcd23aab47475938c4a46e3dc536bcd13013ca9448b6df925f13ed2d9ddc74f16f33549698d401011f0a9"}, @generic={0x19, 0x6, "c686af6f7ce23fad0c9a295966e7ffdeed418701ebbb53"}]}}]}}, {{0x9, 0x4, 0x86, 0x80, 0x5, 0x68, 0xc9, 0x35, 0xf9, [@hid_hid={0x9, 0x21, 0x9, 0xd, 0x1, {0x22, 0x3}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x7, 0x7}]}], [{{0x9, 0x5, 0x4, 0x16, 0x8, 0x1, 0xca, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa2, 0xf80c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xff, 0xa4, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1000}, @generic={0xf6, 0xb, "6e8c69af5416e8e641d36aba759123043bd3a439c06557a4d26f6227cd7b0f99c87bb00ad8cb6b60a3415afc6e4e8d98cbaf01035ee91314d8b74dda174b4e414c78a8c53e9c9f06451ef85c19dc0a9868bba26d243d9c893fa23ca99148b5c005c8899286d41567351f663ee1d6895f76410e9d3d4e28c6f4cb25589a7df5fd3ce5500ded0f308a1352bb141c5ded5fcaef8d92dffa2df8662d938ea640fd53d9c79fadfce53205b7035498bcb95954f6452b368db724c84aa6f32380b3d383336c0646d0b63bfb393c5447dd9cbc7f6d8ec3539ca1e779e78d5761ea210692a720dc061682f1a63c07668eda2a10df6932a753"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x8, 0x9, 0x6}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x7, 0x6, 0x1, [@generic={0xa4, 0x7, "1db652fed85ad376ffde1307da871566f154f67a0f383e2341e6ebeaa1910a3953ce8a81a309aefcf4ced369c9add08f6f97e3af9f7fc0900baf8a7b4b8034ff42dbb2439b626f4d232c5a6a69d0cb22e79b502065007d7da13da5c091ac0809f9d73de9f2ea3647751889f140fd9c1e48a9b333ed6e42ea1c67bad217d9568a62b8d2bc5844e238924a5f344f34b5e706f51242d1f22b6de79c1d7607f787287253"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x7, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x6}]}}]}}, {{0x9, 0x4, 0xa9, 0x5e, 0xa, 0xc4, 0x9c, 0x57, 0xc, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "38f02126a2"}, {0x5, 0x24, 0x0, 0x7206}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xbed9, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x9, 0x3, [0x6, 0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x38}, @dmm={0x7, 0x24, 0x14, 0x2, 0x4f9f}, @obex={0x5, 0x24, 0x15, 0x7ff}]}, @generic={0xf5, 0x30, "624e742edaadc76db466d71e59bab24a5123c3ea91917af4f39ba8f7564a4650e5af3087d54ebb36824d5ad9a6b6b16555a112acde735b09f67ba9210b4b68815b4edf18f8a0c76ac573300a3e467c3621e00f405433db6843cea1757c26ae38817108b37c4529f9221fd0c77339d6ee7de0d96c938b936b1a67a34024c1421b68dbe95f18277235e4217c93dfc77ecaf87c3f9e8df2c173f45c77ecc4a5590fb9f664988a6512c2acc634b79c19c54f9c24684931354ae9fbeb272da0da59a2b1d2daee87f8642cb95b7ffe4e7f32fec41fd3c1b1d5a27baed574e62dbb69de31c840b333ab69c29199fe70e9c616a8738c37"}], [{{0x9, 0x5, 0xd, 0x8, 0x400, 0x1, 0x7, 0x4, [@generic={0x35, 0xb, "b8c0ce483b7b3e0faeb12d598961e72c777d649684a5e14b25d4c8f3ef5e2c7ca32225ff2f1ee9493e996004d461a2b78efed7"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x11, 0xb99}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0x7}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x5, 0x1, 0x3, [@generic={0xd1, 0xf, "e5fb129596f3a3878f2bb9fda9b988edec93e1f387d34b78b1ab88fd387ed6db72e7c6950cd06e19721317aa8dba03e918ac7998c9a99fe7741bd6f39f73b151b55b41f3f7b3112dfdb4f890febf3843d7af979921e616b737e71b7b14356a422dbd66c8cf3a40f95a2bc244d72443337ea5284a200d7fc7f9eb10f50fb245604a3e6e137df4a8214a65b879d795adeb7a6e73f4416e3d60fa90ed98d90392ae98acb4990da524e7bf5f0cee1e5c86cc37a3e62df5b5a448485bf37d9ee5cb516993f962a5c18142abee970137e404"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9e, 0xff, 0x7, [@generic={0xb5, 0xb, "c60d51572f3211bf65d82aee3d46dcc0479a8985f3237b1d8609dbd68b893c3757d90f0b62788bd1241bef6c0e6927c0ba069d43f4f14a15effaf2ca37ead48a3b66df2710d7aba2109f7cafaf4c6315b18ef83c0bdc640728e95dac3ddd88e2cd5056c300d8a27f8863ecf19f57aee51954e5dad60ba9cd50b7b01918a2a49484391971c19bdef6f041e6d5cc7d16111136b6f35431272703d7299507f584a050df2df184883c525f4cc8884574c68eee2d78"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x17, 0xfffa}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x2, 0x1e, 0x80}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x2, 0x80, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x500, 0xfa, 0x6, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}, @generic={0xd5, 0x1, "4f721fd671d7e5efb9d54c391050d885804a36b865cd96865f08e14c26922200de38b064f2528c84d8466bb0f42aff814616e0bbb11e2b0e2a25c79bb528dff149e87c54620c2aa57c193b129790a038dc0ee77405e4af5538979050bcddff9851ddb9fd87b72da934651e5eaacf40c27928a53fd2917783489b97226721550aef9bfb3649606ceccf8767e53c2137c9278618e8eed7b10b9aa459036d6a834e96f216bb142972062aec556914863630280abd845872eed7b655201f20865df8075bdbae5f76505307171ee91d08518cdf1431"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x3, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x9}, @generic={0x32, 0x1, "9566c7b35ee452bb99cce487caf8e57d3a5e7a8afa68287d5f41ac41053d55a9c288d174f8db3ef0c90dd46973164419"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0x6, 0xf8}}]}}, {{0x9, 0x4, 0xc3, 0x1, 0x9, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x87, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x15, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x1c, 0x7f, 0xf3ad}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x23, 0x1, [@generic={0x73, 0x2, "e357a754a577bce36359c5a8a2ed8732557db11822a5db3732c1ecb88947af671b6526393160951652e5307ce6702b2cbdd168902663d8f36f8f99d6669fb0ab4ccbcc2a54b186e384c39bb4d068355af8f8bfa62b9d04450e6dd69a058ed65e26a1b5f80daba6e498070c843b4d9eb55a"}, @generic={0xe8, 0x11, "0d0c8210f639c0e04ea933be3c0ab52f990127a59114c5d99435b3efd70db0411d798d09f0671ac3df510eda23d6d4d9ed4a5345a37d510ef4db4a894401e2d3b946eafa20d40fce720c55972bee72320be54de68ee0610f64337d454dfd43ba782a7b2a10b12d661706b3d1d4e1a675f258c18cbb3ccff96cc2fcc06bf3513c5b992f177a74f331f848de037ff6f7807180457b3ed25ce54b3ce476dd41e46a7b41b48054f922d7af811e83a6f3722a497d01e1fb4eda5371cf3abf6791be210f6a89efd548e281def18816835bdf4e4a3ef84db7f2b8c26bb5e933a53e65f8b5af0e8ef63f"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x4, 0x3, 0x5, [@generic={0x41, 0x24, "49cf45c2a55c00733e33fbee5709ee3cf992e6a4dfef8f50d3fc5e314e19baf2475acf36cb78388fbbba90ffa330aa3e4c048e6ca806adcc64ff09ee6390e7"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x2b, 0x1, 0x0, [@generic={0x15, 0x9, "e5cbaf334e5e0688c7751e8cd6e56fba0583c5"}, @generic={0xc3, 0x2b, "d16794db2cca85886c4ce3805f33fb7dcc00e9a9dd88d19adfc1a210752380d8cda35667d83e2ccd641e0b947c8e9c3ea662fa6b977c47187f966d799a6ba809f9c01b741e69d1294a640fdeda16d60f69bf5b61ef88a1bfbe5d52fc16289430e26d51677a40fa6f2e3ecdbedbd58e951ddf05e9e15d88a291672e7118bc47053147e3b1d6b7ca9c2a1f36e57251a9cc406987ad743b8db2d7ae624fda3ae8880f7928fb35932727c9e15f5d0d2a9fd944b4c83ba688c9b24bd040db0a5d60371b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x4d, 0x9, [@generic={0x49, 0xd, "2587027e6fbd74c3008e8e855c382a5e9c4e0bd6292a12375691b9d69a564c7d3efc86236032afca0cf2926f26febfc99ffd906db9337261c1435fb1494537a7214349c55bebb3"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x3, 0x2, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6b27}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x10, 0x4, 0x2, [@generic={0xa0, 0x2, "6deed72a1315822a9c2decda334261e53d598e8c6b3db7d11831c3e4d5ad6b400dcdd03c2145aecc000f7163e9b3fa4bbdcf643f2617f469948c8564ca80c38fe0df4e135848cbe73e384cb0ee109486b65d1117083fbbf2954022ce17ce5d4da588ecfb904a49155cdc5a09da9b106496d219e523f6b8e089b9dd647c98af1d3956d9134e0eb575defba7313de669fd2c26048b1ff462e44fb97c8c2625"}]}}, {{0x9, 0x5, 0xe, 0xa, 0x3ff, 0x4, 0x9d, 0x9}}]}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x101, 0x80, 0x3, 0x3, 0x40, 0x6}, 0x5, &(0x7f0000001840)={0x5, 0xf, 0x5}, 0x6, [{0xfc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, {0x95, &(0x7f0000001980)=@string={0x95, 0x3, "647f5ad88c82676e4e9b009380dc0041340b010c9ecc5f3696c5213081ed921295712d76d2cad13b11bc3f28214a63db180de74c7e440d61c24e7f818da81cc4abfb50641d033656e9d114b1afaaf76120be8b7cefd4d284a1ff21c3654fd7b5712920a5e0579111a9220e9046bd941c5597c85e5e932b75209bcf03519bcec863ae4631cbe7af05a5ef951032f6d2edf33a44"}}, {0x7b, &(0x7f0000001a40)=@string={0x7b, 0x3, "71900c6971b38a82474a00c0fc2ad308fcfce533023a236006c863c982060c55d673024daecd49ea093be904fc20b96d496121e82c5b29bb7de69ad6b7cd2a05d45898d4175473a874d4bc0a2b2fb888fe9404534ce5d03fab53876e90707b0a3cc19b148a300fb215ef98ba5c31c8f1bac31ed6a3d07c8a3f"}}, {0x96, &(0x7f0000001ac0)=@string={0x96, 0x3, "4f4f76b665361a3bab6239f8a859b6929cc19559fd0bf33aecc08c2a619dd7d601b84e40380f08009adcc51954ecfab8c2e23f4edb360f2799bd788d4fd287da50e15f2264866e03aee39a1fa72edbc112f83857e18fbd6bcaf2de2e00ac5125aeefeac48d52df47b23416caeaf8563e2bddc8b54e43ddb4618dbf393ede2a6a0068e894ba695a28d782aa9fecf7364c36575bc2"}}, {0x80, &(0x7f0000001b80)=@string={0x80, 0x3, "f6d388eb313b1969608907ddd7485b00da4915139eac2d3f6aeb8d13af0ce2aa41d328efc77445d313c137c500ecbb00be773b616ce3b7285f34e3c171c4893727d71becc4e77a4c2bb45532c2defecd5f4c9bc23e6c30d11011e33d2b770b3b1e7515609a7f6697da59266353db6005aa54962eca775e8c9eacaa67ae1f"}}, {0x35, &(0x7f0000001c00)=@string={0x35, 0x3, "8e9139698710465a7b1dae57a49a9ceeace0aada2d0f63fcdacac92a897935fecad1ecca3d8eee547d3cdfbbc2fe3cd366db54"}}]}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x4, 0x4) 6.046583221s ago: executing program 0 (id=844): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='gadgetfs\x00', 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "4d8a2d559128e1aa143b4e4c4f598f26cf20a3d3b348e65ac5fe9a9a1db5f93c638c891ecb96fe7bd88af729ef878f10e4e1383d4c28bf863b402109d842a52b7a913acda52b7f006cab9d8f696d36aa856eaf47d289f0703abb83569d775357bbff9a67e90120cb942a1ef08adf274d5cdb12c6c0153563b3fa22e1c19b1cd11a7bd89fc05658e46f33f8f75c6c782bac815e00000000000000000000000000000000000000000000000000000080"}, 0xb3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008"], 0x50) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.17073483s ago: executing program 1 (id=845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000740), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) 4.992785564s ago: executing program 1 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./upper\x00', 0x80) r0 = fsopen(&(0x7f0000000100)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='}&-\x99&!^(\x00', &(0x7f0000000200)='./lower\x00', 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) getgroups(0x2, &(0x7f0000000600)=[0xee00, 0xffffffffffffffff]) 4.949303935s ago: executing program 1 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, r2, 0x10, 0x70bd2d, 0x4, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 4.820605983s ago: executing program 4 (id=848): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 4.355270159s ago: executing program 4 (id=850): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) socket$inet(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='nfs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r3 = gettid() socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) tkill(r3, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="04010000030701030000000000000000020000030c00024000000000000000010c000240000000000000000434000780082d2f4000000100080002400000000008000140000000bf0800014000000004080002400000000908000240000000fb0900012073797a31000000000c00034000000000000000064cc56efe49c6837ea5bbf790bcd25b070000078008000240fffff893080002400000007f08000240fffffffb080001ca4a00000808000140fffffe3f0800024000000004080001400000000408000140000000080800014000000009040007800c00024000000000000000940c0006400000000092b1a1f4d67b0e8981000000000000050c0003400000000083ad9d14598e7e1e3067f94292709b083630c155fca7b56e69e8007365875ceee4c60a00e1149366c5fe9bf6f77211023a5a80cbac8bbfcd051d61895f27b7e0ce51a7a681859638a67ef38578b0a311e2989a1e9b17490879e459fad317e13e0df6d17606"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.965524632s ago: executing program 1 (id=851): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x183040, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(r1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x110, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) socket$inet6(0xa, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) pread64(r4, 0x0, 0x0, 0x1) userfaultfd(0x80801) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x8) 2.512396928s ago: executing program 5 (id=852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x10, 0x70bd2d, 0x4, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 2.331228491s ago: executing program 2 (id=853): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) syz_usb_connect$uac3(0x2, 0xde, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000101e0400304000010203010902cc00030100100d080b0100010130020904000000010130000a2401ff2c00feffffff0d24090205020000000100000015240a06010100000002b87c00020000000100000009040100000102300009040101010102300009240201080d0681050c240201ff02da0770745a39062402010401090501090000049b050a2525010000000607000904020000010230000904020101010230000924020100040407000e2402010703fa089ba1b8a99ae60a2402020300ffff0c0609058209ff037202050a2525ff070000060100"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x7, 0xff, 0x40, 0x10}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x87, 0x5, 0x5, 0xf000, 0x8, [0x18, 0x3fc0, 0x0, 0xff0000, 0xff3f5f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ec96603e3d4fd859f9817bd5e1b6b7fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "dd6713dd73830ab3bbddd1c7bfb65b40"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}]}) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x77, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x0, 0x10, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x9d, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x727, 0x5, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x0, 0x0, 0x81, 0x20, 0x26}, 0x39, &(0x7f0000000340)={0x5, 0xf, 0x39, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "378b00"}, @generic={0x3, 0x10, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0xae, 0x100}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0x0, 0x400, [0x0]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x429}}, {0x52, &(0x7f00000004c0)=@string={0x52, 0x3, "7025e3b0cb91021aaf9cc66ff0a94aadcc5b347e2f5407e30d89929a61d1be4810919c24397c45c14663abdaa3a1e26e915748455f46a701a1e16a54fc17f12639bc7d942b2df44f22ccaafd26ec79dd"}}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x2d5a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xfa, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x85b, 0x3, 0x1, {0x22, 0x9cc}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x0, 0x14}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x3, 0xd1, 0x81, 0x8, 0xa}, 0x80, &(0x7f0000000640)={0x5, 0xf, 0x80, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x40, 0x3}, @generic={0x37, 0x10, 0xa, "df251bbc3e0aba604cb9d31249fc62e47ce1b96e5943208d1b93595b7e55f41fdf3be62dea82a8d49d3efcbd6d8792789faffa54"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b701443c6e62e64437e5089994b35fe4"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x4, 0x0, 0xe, [0xff3f00, 0xffc060, 0xc000, 0x321628291a4a6896]}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xd5, &(0x7f0000000b00)=ANY=[@ANYBLOB="d503f3ef9e5711b8deea196fdb19b292bdcf10ce5c69482ae9ea47e84323a02b29b392862c39c6ce81288af6d1d39d4a08fcf7b6a86bf891ecde555d1fa5cdd7b0fded6f9b1110a81474cb7fbda9789e497335a5029cd2d0bdaafd09df6b8bb7caed5b2f1365b6986ef477ea8dd5ebf843b0665347bdc8c8cc26592d03a40cedc4b07c0a2a0b423424f5ab0a4608019a9a6baf57b11042170fd4dd051068494f72f1922e0aaa42db8cb010531931464c330e0125504ea9aa572871306e52e87847cd41c2263adbbed1d31e0e5a9337ae6fa7e849068726a67760e1da12a58be48bbae01068"]}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x5d5fe5ae27ee37b9}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x37597abe5f39a785}}, {0x37, &(0x7f00000008c0)=@string={0x37, 0x3, "26d4bc6c2cc044445ea1a166b752e112b6286599de76531c6045f29abd6e0fc6af149d07026170ca7c8e541eedd19c28a7db98fee2"}}, {0x96, &(0x7f0000000900)=@string={0x96, 0x3, "7ba716d0868f19f4c6d1debff928fbea353a3f299def72becc31e3b2d5b2ee7412d998a1ad303b53490cd50167970436fdeb1fc92d957438b37929d96edf321663235b956cf06f8ddbc00d0097fd59414610c885b51fee550150c3ef80d82c31b1e9fd2710345f454c75d47d24606dbb301a11c5103f1329a66f111f01086cfcdd91b709755e7294749f439e156d40c48b388967"}}, {0xbf, &(0x7f00000009c0)=@string={0xbf, 0x3, "797e00204657fe8735ca8b64c582b451fc6d7bd1a3263d3d2566618da44a6483e743c9e1492868a3e07976f44c781a171eea0409769e7db6e19cbc39fc0d03132693b130cf34db8c03ad4f27ed478ccc1c9a22b3c27f46892980c508a4790ef97ff1dbd72c363f6328dc6396d8e6a29586939b122a8c34f6fa86213936dd0706e71ab0320ca6db413d2a7d2201f9a29d3b8729d2974217939a38ccfb3515a0641f9a5bf25a86a38d0ea4fdb347044f51660ce7a97fae8e7fab4d4580b3"}}]}) 2.257079602s ago: executing program 4 (id=854): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000480)={0x0, 0xdd34, 0x10000, 0x2000003}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r4, 0x28f42000) read(r4, &(0x7f00000002c0)=""/148, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001700)='privkey_serial\x00', &(0x7f0000001800)='4\x00', 0x0) splice(r4, &(0x7f0000000100)=0x81, r4, &(0x7f00000001c0)=0x8, 0x0, 0x7) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='stat\x00') sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x1, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r8 = eventfd2(0x8d57, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000440)=r8, 0x1) r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb38a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x5, 0xaf, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc1}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.244771329s ago: executing program 0 (id=855): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xa40}}], 0x6b}}) shutdown(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r5, 0x0, 0xffe) 1.035202728s ago: executing program 1 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) 802.713247ms ago: executing program 5 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./upper\x00', 0x80) r0 = fsopen(&(0x7f0000000100)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='}&-\x99&!^(\x00', &(0x7f0000000200)='./lower\x00', 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) getgroups(0x2, &(0x7f0000000600)=[0xee00, 0xffffffffffffffff]) 504.648101ms ago: executing program 0 (id=858): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1000, 0x0) syz_ublk_setup_io_uring(0x3a7e, &(0x7f0000000080)={0x0, 0x86c2, 0x2000, 0x2000002, 0x12f, 0x0, r0}, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) (async) unshare(0xc040480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) (async) openat(r4, 0x0, 0x480142, 0x92) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) unshare(0x8040600) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_regs}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x40) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) write(r5, &(0x7f0000000600)='!', 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2, 0x54, 0x4f, 0x40, 0x4dd, 0x8003, 0x5499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x55, 0xff, 0x0, 0xff, 0x2, 0xd0, 0x2}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 202.971556ms ago: executing program 4 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed", @ANYRESHEX=0x0, @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000100000094"], 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) 184.241184ms ago: executing program 5 (id=860): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 119.598723ms ago: executing program 5 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 72.768085ms ago: executing program 5 (id=862): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10", 0x167}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f", 0x41}, {&(0x7f0000000fc0)="d6", 0x1}, {&(0x7f0000002240)="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", 0x6a8}], 0x3}}], 0x2, 0x0) 0s ago: executing program 5 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00060000000600110003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1720}]}, 0x30}, 0x1, 0x0, 0x0, 0x200048d0}, 0x400c084) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000633fa640402000558b4d000000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): HW filter on device team0 [ 227.418781][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.418834][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.422526][ T2150] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 227.448767][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.448850][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.582890][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 227.583416][ T2150] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.584458][ T2150] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.584480][ T2150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.586191][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.586213][ T2150] usb 5-1: Product: syz [ 227.586227][ T2150] usb 5-1: Manufacturer: syz [ 227.586240][ T2150] usb 5-1: SerialNumber: syz [ 227.592322][ T5718] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.664182][ T2150] usb 5-1: 0:2 : does not exist [ 227.664248][ T2150] usb 5-1: unit 0 not found! [ 227.722564][ T5718] usb 1-1: device descriptor read/64, error -71 [ 227.833495][ T5718] usb usb1-port1: attempt power cycle [ 227.837541][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.996417][ T7735] veth0_vlan: entered promiscuous mode [ 228.002194][ T7735] veth1_vlan: entered promiscuous mode [ 228.031965][ T7735] veth0_macvtap: entered promiscuous mode [ 228.041844][ T7735] veth1_macvtap: entered promiscuous mode [ 228.052393][ T5711] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 228.056432][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.079233][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.142870][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143139][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143169][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143194][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.172322][ T5718] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 228.192856][ T5718] usb 1-1: device descriptor read/8, error -71 [ 228.203588][ T5711] usb 2-1: not running at top speed; connect to a high speed hub [ 228.203615][ T5711] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 228.206388][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.206410][ T5711] usb 2-1: Product: syz [ 228.206423][ T5711] usb 2-1: Manufacturer: syz [ 228.206435][ T5711] usb 2-1: SerialNumber: syz [ 228.218228][ T5711] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 228.225438][ T5711] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 228.232463][ T5711] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 228.237557][ T5711] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 228.244775][ T5711] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 228.293475][ T5859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.293495][ T5859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.432439][ T5718] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 228.455560][ T5718] usb 1-1: device descriptor read/8, error -71 [ 228.456393][ C1] usa49wg_indat_callback: 11 callbacks suppressed [ 228.456414][ C1] usb 2-1: malformed indat packet [ 228.456665][ C1] usb 2-1: malformed indat packet [ 228.456901][ C1] usb 2-1: malformed indat packet [ 228.457147][ C1] usb 2-1: malformed indat packet [ 228.457393][ C1] usb 2-1: malformed indat packet [ 228.457631][ C1] usb 2-1: malformed indat packet [ 228.457884][ C1] usb 2-1: malformed indat packet [ 228.474718][ T6957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.474755][ T6957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.536815][ T31] audit: type=1400 audit(1789649312.917:766): avc: denied { mounton } for pid=7735 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 228.562680][ T5718] usb usb1-port1: unable to enumerate USB device [ 228.640961][ T7924] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 228.672141][ T5718] usb 2-1: USB disconnect, device number 28 [ 229.536656][ T5718] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 229.560421][ T5718] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 229.580186][ T5718] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 229.597733][ T5718] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 229.600631][ T5718] keyspan 2-1:1.0: device disconnected [ 229.626041][ T7924] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 229.654435][ T7924] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 229.853667][ T31] audit: type=1400 audit(1789649314.237:767): avc: denied { write } for pid=7941 comm="syz.5.564" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.124468][ T31] audit: type=1400 audit(1789649314.507:768): avc: denied { write } for pid=7934 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.693799][ T5718] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 230.701464][ T5783] usb 5-1: USB disconnect, device number 21 [ 230.823077][ T5718] usb 1-1: device descriptor read/64, error -71 [ 231.514199][ T5718] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 231.815297][ T5609] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 232.020321][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 232.023932][ T5609] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 232.040466][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.040497][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.040528][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.045732][ T5718] usb 1-1: device descriptor read/64, error -71 [ 232.081572][ T5609] usb 2-1: config 0 descriptor?? [ 232.156246][ T5718] usb usb1-port1: attempt power cycle [ 232.942647][ T5718] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.963315][ T5718] usb 1-1: device descriptor read/8, error -71 [ 233.160075][ T31] audit: type=1400 audit(1789649317.537:769): avc: denied { ioctl } for pid=7988 comm="syz.4.574" path="socket:[18360]" dev="sockfs" ino=18360 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.287777][ T5609] usbhid 2-1:0.0: can't add hid device: -71 [ 233.287861][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 233.308811][ T5609] usb 2-1: USB disconnect, device number 29 [ 233.412525][ T5718] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 233.433321][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 233.433894][ T5718] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 233.435171][ T5718] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.435196][ T5718] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.435214][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.435229][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.437036][ T5718] usb 1-1: config 0 descriptor?? [ 233.752285][ T2150] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 233.923191][ T2150] usb 3-1: Using ep0 maxpacket: 8 [ 233.928840][ T2150] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 233.957855][ T2150] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 233.957881][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.957896][ T2150] usb 3-1: config 0 has no interfaces? [ 233.993280][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.993307][ T2150] usb 3-1: Product: syz [ 233.993319][ T2150] usb 3-1: Manufacturer: syz [ 233.993332][ T2150] usb 3-1: SerialNumber: syz [ 234.000503][ T2150] usb 3-1: config 0 descriptor?? [ 234.149299][ T5718] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0B05:18C6.0002/input/input24 [ 234.425182][ T5718] asus 0003:0B05:18C6.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.0-1/input0 [ 234.484019][ T5718] usb 1-1: USB disconnect, device number 23 [ 234.646015][ T8019] fido_id[8019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 234.918761][ T8028] capability: warning: `syz.5.582' uses 32-bit capabilities (legacy support in use) [ 235.009898][ T8043] overlay: Bad value for 'index' [ 235.067285][ T5711] usb 3-1: USB disconnect, device number 29 [ 235.091465][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 235.292424][ T2150] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.512787][ T2150] usb 6-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 235.512813][ T2150] usb 6-1: too many configurations: 40, using maximum allowed: 8 [ 235.520802][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.520827][ T2150] usb 6-1: Product: syz [ 235.520840][ T2150] usb 6-1: Manufacturer: syz [ 235.520853][ T2150] usb 6-1: SerialNumber: syz [ 235.566916][ T2150] ums-datafab 6-1:1.0: USB Mass Storage device detected [ 235.583605][ T5718] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 235.589330][ T2150] ums-datafab 6-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 235.589330][ T2150] Please send a copy of this message to and [ 235.589980][ T2150] scsi host1: usb-storage 6-1:1.0 [ 235.736095][ T5718] usb 5-1: not running at top speed; connect to a high speed hub [ 235.736127][ T5718] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 235.741376][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.741401][ T5718] usb 5-1: Product: syz [ 235.741415][ T5718] usb 5-1: Manufacturer: syz [ 235.741428][ T5718] usb 5-1: SerialNumber: syz [ 235.768743][ T2150] usb 6-1: USB disconnect, device number 2 [ 235.822928][ T5718] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 235.852833][ T5718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 235.857476][ T5718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 235.870381][ T31] audit: type=1400 audit(1789649320.247:770): avc: denied { mounton } for pid=8068 comm="syz.0.589" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 235.911163][ T8071] befs: (nbd0): unable to read superblock [ 235.911561][ T5718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 235.944170][ T5718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 236.042579][ C1] usb 5-1: malformed indat packet [ 236.042834][ C1] usb 5-1: malformed indat packet [ 236.043045][ C1] usb 5-1: malformed indat packet [ 236.043322][ C1] usb 5-1: malformed indat packet [ 236.043546][ C1] usb 5-1: malformed indat packet [ 236.043761][ C1] usb 5-1: malformed indat packet [ 236.043983][ C1] usb 5-1: malformed indat packet [ 236.052486][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 236.213362][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 236.214650][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.214670][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.214690][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.222057][ T9] usb 3-1: config 0 descriptor?? [ 236.347358][ T971] usb 5-1: USB disconnect, device number 22 [ 236.386964][ T971] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 236.405772][ T971] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 236.431032][ T971] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 236.461805][ T971] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 236.476597][ T971] keyspan 5-1:1.0: device disconnected [ 236.684122][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 236.684269][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 236.684325][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 236.684392][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 236.685172][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 236.723659][ T9] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 237.032304][ T2150] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.185029][ T2150] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.186199][ T2150] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.186219][ T2150] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.186240][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.196756][ T8078] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.241418][ T2150] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.143610][ T9] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71 [ 238.143631][ T9] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71 [ 238.143683][ T9] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense [ 238.143697][ T9] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 238.177769][ T9] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 238.193697][ T8096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.595'. [ 238.253441][ T2150] usb 6-1: USB disconnect, device number 3 [ 238.418623][ T31] audit: type=1400 audit(1789649322.797:771): avc: denied { write } for pid=8079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.206235][ T5609] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 239.384515][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 239.388796][ T5609] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 239.388833][ T5609] usb 2-1: too many configurations: 116, using maximum allowed: 8 [ 239.408575][ T5609] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 239.408612][ T5609] usb 2-1: can't read configurations, error -61 [ 239.426036][ T31] audit: type=1400 audit(1789649323.807:772): avc: denied { write } for pid=8127 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.578895][ T9] usb 3-1: USB disconnect, device number 30 [ 239.592523][ T5609] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 239.642796][ T31] audit: type=1400 audit(1789649324.027:773): avc: denied { bind } for pid=8140 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.762297][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 239.764045][ T5609] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 239.764074][ T5609] usb 2-1: too many configurations: 116, using maximum allowed: 8 [ 239.766016][ T5609] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 239.766046][ T5609] usb 2-1: can't read configurations, error -61 [ 239.766314][ T5609] usb usb2-port1: attempt power cycle [ 239.903205][ T8155] FAULT_INJECTION: forcing a failure. [ 239.903205][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.903233][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.0.600 Not tainted syzkaller #0 PREEMPT(full) [ 239.903251][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.903261][ T8155] Call Trace: [ 239.903267][ T8155] [ 239.903273][ T8155] dump_stack_lvl+0x100/0x190 [ 239.903302][ T8155] should_fail_ex.cold+0x5/0xa [ 239.903325][ T8155] _copy_from_iter+0x1f4/0x1690 [ 239.903346][ T8155] ? __asan_memset+0x23/0x50 [ 239.903364][ T8155] ? __pfx__copy_from_iter+0x10/0x10 [ 239.903381][ T8155] ? __pfx___alloc_skb+0x10/0x10 [ 239.903410][ T8155] netlink_sendmsg+0x808/0xda0 [ 239.903433][ T8155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.903454][ T8155] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.903475][ T8155] ____sys_sendmsg+0xa4d/0xbe0 [ 239.903498][ T8155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.903518][ T8155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.903548][ T8155] ? lock_acquire+0x1d1/0x380 [ 239.903565][ T8155] ? get_pid_task+0x2a/0x250 [ 239.903590][ T8155] ___sys_sendmsg+0x190/0x1e0 [ 239.903617][ T8155] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.903642][ T8155] ? get_pid_task+0x106/0x250 [ 239.903673][ T8155] ? find_held_lock+0x2b/0x80 [ 239.903710][ T8155] __sys_sendmsg+0x160/0x210 [ 239.903731][ T8155] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.903763][ T8155] do_syscall_64+0x123/0x790 [ 239.903788][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.903805][ T8155] RIP: 0033:0x7f9c90f9e159 [ 239.903819][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.903835][ T8155] RSP: 002b:00007f9c91f10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.903851][ T8155] RAX: ffffffffffffffda RBX: 00007f9c91226180 RCX: 00007f9c90f9e159 [ 239.903862][ T8155] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 239.903871][ T8155] RBP: 00007f9c91f10090 R08: 0000000000000000 R09: 0000000000000000 [ 239.903881][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.903890][ T8155] R13: 00007f9c91226218 R14: 00007f9c91226180 R15: 00007ffcb0c215c8 [ 239.903912][ T8155] [ 241.082361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 241.489564][ T8170] FAULT_INJECTION: forcing a failure. [ 241.489564][ T8170] name failslab, interval 1, probability 0, space 0, times 0 [ 241.490849][ T8170] CPU: 0 UID: 0 PID: 8170 Comm: syz.2.604 Not tainted syzkaller #0 PREEMPT(full) [ 241.490873][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 241.490884][ T8170] Call Trace: [ 241.490890][ T8170] [ 241.490898][ T8170] dump_stack_lvl+0x100/0x190 [ 241.490929][ T8170] should_fail_ex.cold+0x5/0xa [ 241.490956][ T8170] should_failslab+0xc2/0x120 [ 241.490981][ T8170] __kmalloc_noprof+0xfc/0x840 [ 241.491001][ T8170] ? __memcg_list_lru_alloc+0x418/0x680 [ 241.491033][ T8170] __memcg_list_lru_alloc+0x418/0x680 [ 241.491064][ T8170] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 241.491096][ T8170] ? rcu_read_unlock+0x17/0x60 [ 241.491128][ T8170] memcg_list_lru_alloc+0xd3/0x100 [ 241.491157][ T8170] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 241.491194][ T8170] ? kasan_save_track+0x14/0x30 [ 241.491218][ T8170] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 241.491239][ T8170] ? __d_alloc+0x35/0xa50 [ 241.491268][ T8170] __d_alloc+0x35/0xa50 [ 241.491295][ T8170] d_alloc+0x4a/0x1e0 [ 241.491322][ T8170] lookup_one_qstr_excl+0x171/0x250 [ 241.491348][ T8170] ? mnt_want_write+0x164/0x420 [ 241.491370][ T8170] filename_create+0x1cf/0x400 [ 241.491390][ T8170] ? __pfx_filename_create+0x10/0x10 [ 241.491410][ T8170] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 241.491435][ T8170] ? find_held_lock+0x2b/0x80 [ 241.491463][ T8170] filename_mkdirat+0xb9/0x5e0 [ 241.491488][ T8170] ? __pfx_filename_mkdirat+0x10/0x10 [ 241.491511][ T8170] ? strncpy_from_user+0x19d/0x2d0 [ 241.491535][ T8170] ? do_getname+0x191/0x390 [ 241.491569][ T8170] __x64_sys_mkdirat+0x89/0xc0 [ 241.491592][ T8170] do_syscall_64+0x123/0x790 [ 241.491619][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.491639][ T8170] RIP: 0033:0x7f7f2c79e159 [ 241.491654][ T8170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.491671][ T8170] RSP: 002b:00007f7f2d716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 241.491689][ T8170] RAX: ffffffffffffffda RBX: 00007f7f2ca26090 RCX: 00007f7f2c79e159 [ 241.491700][ T8170] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 241.491711][ T8170] RBP: 00007f7f2d716090 R08: 0000000000000000 R09: 0000000000000000 [ 241.491721][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.491731][ T8170] R13: 00007f7f2ca26128 R14: 00007f7f2ca26090 R15: 00007ffc42b00578 [ 241.491757][ T8170] [ 241.983977][ T5609] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 242.642778][ T2150] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 242.818868][ T2150] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 242.819934][ T2150] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 242.819957][ T2150] usb 5-1: config 0 has no interface number 0 [ 242.819988][ T2150] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 242.820012][ T2150] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.820055][ T2150] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.890274][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 242.890301][ T2150] usb 5-1: Product: syz [ 242.890317][ T2150] usb 5-1: SerialNumber: syz [ 242.953237][ T2150] usb 5-1: config 0 descriptor?? [ 242.969662][ T2150] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 242.988183][ T2150] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input25 [ 243.497608][ T31] audit: type=1400 audit(1789649327.877:774): avc: denied { write } for pid=8169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.103228][ T31] audit: type=1400 audit(1789649328.017:775): avc: denied { write } for pid=8212 comm="syz.5.611" name="configs" dev="configfs" ino=16231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.103297][ T31] audit: type=1400 audit(1789649328.027:776): avc: denied { write } for pid=8212 comm="syz.5.611" name="functions" dev="configfs" ino=16230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.200061][ T5609] usb 2-1: device descriptor read/8, error -71 [ 244.307936][ T31] audit: type=1400 audit(1789649328.687:777): avc: denied { write } for pid=8229 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.463586][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 244.649153][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 244.649271][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 244.695024][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.695265][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 244.695375][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.804421][ T971] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 245.068442][ T10] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 245.068837][ T10] usb 1-1: selecting invalid altsetting 0 [ 245.161466][ T971] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.328446][ T10] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 245.329915][ T10] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 245.330104][ T10] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 245.330710][ T10] usb 1-1: selecting invalid altsetting 0 [ 245.350270][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.350293][ T971] usb 6-1: Product: syz [ 245.350306][ T971] usb 6-1: Manufacturer: syz [ 245.350318][ T971] usb 6-1: SerialNumber: syz [ 245.473863][ T10] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 245.667121][ T10] usb 1-1: selecting invalid altsetting 0 [ 245.667204][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 245.821092][ T10] usb 1-1: USB disconnect, device number 24 [ 245.878242][ T31] audit: type=1400 audit(1789649330.257:778): avc: denied { ioctl } for pid=8247 comm="syz.2.606" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.881165][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.881361][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.881543][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.881769][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.882343][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.882454][ T5786] usb 5-1: USB disconnect, device number 23 [ 245.882533][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.882551][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 245.886751][ T5711] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 245.986533][ T5786] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 246.130823][ T25] usb 6-1: USB disconnect, device number 4 [ 246.148814][ T5610] Bluetooth: hci1: unexpected event for opcode 0x200a [ 246.181504][ T31] audit: type=1400 audit(1789649330.557:779): avc: denied { read } for pid=8276 comm="syz.4.615" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.181550][ T31] audit: type=1400 audit(1789649330.557:780): avc: denied { open } for pid=8276 comm="syz.4.615" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.220698][ T8282] binder: 8276:8282 ioctl 4018620d 0 returned -22 [ 246.222256][ T31] audit: type=1400 audit(1789649330.587:781): avc: denied { ioctl } for pid=8276 comm="syz.4.615" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.432114][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.561077][ T31] audit: type=1400 audit(1789649330.937:782): avc: denied { write } for pid=8243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.614063][ T5786] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 246.693538][ T971] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 246.741748][ T31] audit: type=1400 audit(1789649331.117:783): avc: denied { write } for pid=8314 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.783373][ T5786] usb 2-1: not running at top speed; connect to a high speed hub [ 246.783405][ T5786] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 246.786350][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.786375][ T5786] usb 2-1: Product: syz [ 246.786388][ T5786] usb 2-1: Manufacturer: syz [ 246.786402][ T5786] usb 2-1: SerialNumber: syz [ 246.840333][ T5786] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 246.857217][ T5786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 246.864028][ T971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.864475][ T971] usb 3-1: not running at top speed; connect to a high speed hub [ 246.864498][ T971] usb 3-1: New USB device found, idVendor=05cc, idProduct=3350, bcdDevice=98.33 [ 246.865304][ T971] usb 3-1: config 11 has an invalid interface number: 100 but max is 0 [ 246.865323][ T971] usb 3-1: config 11 has no interface number 0 [ 246.865345][ T971] usb 3-1: config 11 interface 100 has no altsetting 0 [ 246.867125][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.867145][ T971] usb 3-1: Product: syz [ 246.867157][ T971] usb 3-1: Manufacturer: syz [ 246.867168][ T971] usb 3-1: SerialNumber: syz [ 246.943710][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 246.962973][ T5786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 246.969381][ T5711] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 246.969588][ T5711] ath9k_htc: Failed to initialize the device [ 246.971485][ T5786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 246.983618][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 247.015059][ T5786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 247.077015][ C0] usb 2-1: malformed indat packet [ 247.077242][ C0] usb 2-1: malformed indat packet [ 247.077451][ C0] usb 2-1: malformed indat packet [ 247.077661][ C0] usb 2-1: malformed indat packet [ 247.077868][ C0] usb 2-1: malformed indat packet [ 247.078069][ C0] usb 2-1: malformed indat packet [ 247.079286][ C0] usb 2-1: malformed indat packet [ 247.129698][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 247.129728][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 247.150771][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.150797][ T10] usb 1-1: Product: syz [ 247.150811][ T10] usb 1-1: Manufacturer: syz [ 247.150845][ T10] usb 1-1: SerialNumber: syz [ 247.180363][ T10] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 247.203624][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 247.209652][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 247.258871][ T971] usb 3-1: USB disconnect, device number 31 [ 247.261189][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 247.407524][ C0] usb 1-1: malformed indat packet [ 247.407757][ C0] usb 1-1: malformed indat packet [ 247.407969][ C0] usb 1-1: malformed indat packet [ 247.559076][ T25] usb 2-1: USB disconnect, device number 34 [ 247.636703][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 247.664960][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 247.718884][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 247.759332][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 247.779407][ T25] keyspan 2-1:1.0: device disconnected [ 247.842826][ T5711] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 248.000315][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.015322][ T5711] usb 6-1: not running at top speed; connect to a high speed hub [ 248.015354][ T5711] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 248.052618][ T5711] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 248.052648][ T5711] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 248.052667][ T5711] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 248.052685][ T5711] usb 6-1: config 14 has no interface number 0 [ 248.052706][ T5711] usb 6-1: config 14 has no interface number 1 [ 248.052756][ T5711] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 248.052779][ T5711] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 248.052802][ T5711] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.052827][ T5711] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 248.052852][ T5711] usb 6-1: config 14 interface 57 has no altsetting 0 [ 248.052869][ T5711] usb 6-1: config 14 interface 228 has no altsetting 0 [ 248.094719][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.094747][ T5711] usb 6-1: Product: syz [ 248.094760][ T5711] usb 6-1: Manufacturer: syz [ 248.094774][ T5711] usb 6-1: SerialNumber: syz [ 248.101154][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 248.307354][ T10] usb 1-1: USB disconnect, device number 25 [ 248.376403][ T10] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 248.397296][ T10] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 248.448433][ T10] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 248.478441][ T10] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 248.488035][ T10] keyspan 1-1:1.0: device disconnected [ 248.517633][ T8435] FAULT_INJECTION: forcing a failure. [ 248.517633][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 248.517664][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.2.624 Not tainted syzkaller #0 PREEMPT(full) [ 248.517683][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 248.517693][ T8435] Call Trace: [ 248.517699][ T8435] [ 248.517705][ T8435] dump_stack_lvl+0x100/0x190 [ 248.517737][ T8435] should_fail_ex.cold+0x5/0xa [ 248.517762][ T8435] should_failslab+0xc2/0x120 [ 248.517785][ T8435] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 248.517807][ T8435] ? alloc_inode+0x183/0x250 [ 248.517827][ T8435] alloc_inode+0x183/0x250 [ 248.517845][ T8435] create_pipe_files+0x4c/0x970 [ 248.517870][ T8435] do_pipe2+0xbd/0x1e0 [ 248.517893][ T8435] ? __pfx_do_pipe2+0x10/0x10 [ 248.517915][ T8435] ? ksys_write+0x1ac/0x250 [ 248.517941][ T8435] __x64_sys_pipe2+0x54/0x80 [ 248.517963][ T8435] do_syscall_64+0x123/0x790 [ 248.517989][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.518007][ T8435] RIP: 0033:0x7f7f2c79e159 [ 248.518022][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.518038][ T8435] RSP: 002b:00007f7f2d737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 248.518055][ T8435] RAX: ffffffffffffffda RBX: 00007f7f2ca25fa0 RCX: 00007f7f2c79e159 [ 248.518065][ T8435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 248.518075][ T8435] RBP: 00007f7f2d737090 R08: 0000000000000000 R09: 0000000000000000 [ 248.518085][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.518094][ T8435] R13: 00007f7f2ca26038 R14: 00007f7f2ca25fa0 R15: 00007ffc42b00578 [ 248.518117][ T8435] [ 248.665881][ T5711] legousbtower 6-1:14.57: interrupt endpoints not found [ 248.832724][ T5609] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 249.090316][ T5711] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 249.244564][ T5711] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 249.268441][ T5609] usb 5-1: device descriptor read/64, error -71 [ 249.334874][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 249.334899][ T31] audit: type=1400 audit(1789649333.707:785): avc: denied { write } for pid=8462 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.502378][ T5609] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 249.642240][ T5609] usb 5-1: device descriptor read/64, error -71 [ 249.798790][ T5609] usb usb5-port1: attempt power cycle [ 250.165644][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.165700][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.281725][ T31] audit: type=1400 audit(1789649334.657:786): avc: denied { bind } for pid=8370 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 250.442762][ T5609] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 250.472777][ T5609] usb 5-1: device descriptor read/8, error -71 [ 250.542332][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 250.713959][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 250.714734][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.714750][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.716282][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.716297][ T9] usb 3-1: Product: syz [ 250.716305][ T9] usb 3-1: Manufacturer: syz [ 250.716314][ T9] usb 3-1: SerialNumber: syz [ 250.731194][ T9] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90 [ 250.731378][ T9] kalmia 3-1:1.0: probe with driver kalmia failed with error -90 [ 250.732339][ T5609] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.752719][ T5609] usb 5-1: device descriptor read/8, error -71 [ 250.852935][ T5609] usb usb5-port1: unable to enumerate USB device [ 250.946510][ T8495] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 250.980297][ T8495] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 251.021812][ T5609] usb 3-1: USB disconnect, device number 32 [ 252.070791][ T5690] usb 6-1: USB disconnect, device number 5 [ 252.299238][ T5690] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 253.145260][ T5609] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 253.345824][ T5609] usb 5-1: device descriptor read/64, error -71 [ 253.612287][ T5609] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 253.805661][ T5609] usb 5-1: device descriptor read/64, error -71 [ 253.912525][ T5609] usb usb5-port1: attempt power cycle [ 254.272274][ T5609] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 254.322356][ T5609] usb 5-1: device descriptor read/8, error -71 [ 254.692317][ T5609] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 254.760641][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.644'. [ 254.762353][ T5609] usb 5-1: device descriptor read/8, error -71 [ 254.872576][ T5609] usb usb5-port1: unable to enumerate USB device [ 254.996083][ T8575] Config c/1 of g1 needs at least one function. [ 254.997650][ T8575] udc dummy_udc.0: failed to start g1: -22 [ 254.997679][ T8575] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 255.002671][ T8575] UDC core: g1: couldn't find an available UDC or it's busy [ 255.572431][ T31] audit: type=1400 audit(1789649339.947:787): avc: denied { read } for pid=8584 comm="syz.0.647" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.576977][ T31] audit: type=1400 audit(1789649339.957:788): avc: denied { open } for pid=8584 comm="syz.0.647" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.650097][ T8556] futex_wake_op: syz.5.641 tries to shift op by 144; fix this program [ 255.790390][ T31] audit: type=1400 audit(1789649340.027:789): avc: denied { ioctl } for pid=8584 comm="syz.0.647" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.962659][ T971] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 256.102904][ T5690] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 256.125509][ T971] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.125951][ T971] usb 6-1: not running at top speed; connect to a high speed hub [ 256.125977][ T971] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 256.126866][ T971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.126888][ T971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.181155][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.181200][ T971] usb 6-1: Product: syz [ 256.181215][ T971] usb 6-1: Manufacturer: syz [ 256.181230][ T971] usb 6-1: SerialNumber: syz [ 256.688448][ T5711] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 257.048314][ T5690] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 257.067528][ T5690] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 257.067557][ T5690] usb 3-1: config 0 has no interface number 0 [ 257.067590][ T5690] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 257.067635][ T5690] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 257.067660][ T5690] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.072045][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 257.072072][ T5690] usb 3-1: Product: syz [ 257.072093][ T5690] usb 3-1: SerialNumber: syz [ 257.155504][ T5690] usb 3-1: config 0 descriptor?? [ 257.174211][ T5690] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 257.179755][ T5690] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input26 [ 257.236416][ T5711] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 257.252487][ T5711] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 257.252539][ T5711] usb 1-1: config 0 has no interface number 0 [ 257.252571][ T5711] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 257.252592][ T5711] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 257.252616][ T5711] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.301506][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 257.301524][ T5711] usb 1-1: Product: syz [ 257.301532][ T5711] usb 1-1: SerialNumber: syz [ 257.311305][ T5711] usb 1-1: config 0 descriptor?? [ 257.334512][ T5711] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 257.355345][ T5711] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input27 [ 257.400296][ T971] usb 6-1: unit 0 not found! [ 257.492807][ T971] usb 6-1: USB disconnect, device number 6 [ 257.584713][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.992495][ T5609] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 258.511335][ T5609] usb 5-1: not running at top speed; connect to a high speed hub [ 258.511369][ T5609] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 258.598834][ T5690] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 258.618373][ T5609] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 258.723169][ T5690] usb 6-1: device descriptor read/64, error -71 [ 258.744409][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.744435][ T5609] usb 5-1: Product: syz [ 258.744450][ T5609] usb 5-1: Manufacturer: syz [ 258.744465][ T5609] usb 5-1: SerialNumber: syz [ 258.981461][ T5690] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 259.088813][ T5609] oti6858 5-1:1.0: oti6858 converter detected [ 259.094177][ T5609] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 259.114166][ T5690] usb 6-1: device descriptor read/64, error -71 [ 259.157467][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.157644][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.157764][ T5711] usb 3-1: USB disconnect, device number 33 [ 259.157808][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.157817][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 259.206197][ T5711] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 259.223407][ T5690] usb usb6-port1: attempt power cycle [ 259.445493][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.445706][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.445900][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.446089][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.446281][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.446470][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.446656][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.447795][ T5783] usb 1-1: USB disconnect, device number 26 [ 259.447901][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 259.534077][ T8707] pimreg1: tun_chr_ioctl cmd 1074025677 [ 259.534155][ T8707] pimreg1: linktype set to 778 [ 259.565925][ T5783] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 259.584255][ T5690] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.602953][ T5690] usb 6-1: device descriptor read/8, error -71 [ 259.639462][ T31] audit: type=1400 audit(1789649344.017:790): avc: denied { read } for pid=8718 comm="syz.0.660" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.639687][ T31] audit: type=1400 audit(1789649344.017:791): avc: denied { open } for pid=8718 comm="syz.0.660" path="net:[4026532952]" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.640174][ T31] audit: type=1400 audit(1789649344.017:792): avc: denied { create } for pid=8718 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.843204][ T5690] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 259.865153][ T5690] usb 6-1: device descriptor read/8, error -71 [ 259.884097][ T971] usb 5-1: USB disconnect, device number 32 [ 259.980337][ T5690] usb usb6-port1: unable to enumerate USB device [ 260.029453][ T971] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 260.041372][ T5783] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 260.075023][ T971] oti6858 5-1:1.0: device disconnected [ 260.207813][ T5783] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 260.224486][ T5783] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 260.224504][ T5783] usb 1-1: config 0 has no interface number 0 [ 260.224522][ T5783] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.227015][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.227031][ T5783] usb 1-1: Product: syz [ 260.227040][ T5783] usb 1-1: Manufacturer: syz [ 260.227049][ T5783] usb 1-1: SerialNumber: syz [ 260.278671][ T5783] usb 1-1: config 0 descriptor?? [ 260.298450][ T5783] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 260.367796][ T31] audit: type=1400 audit(1789649344.747:793): avc: denied { rename } for pid=8745 comm="syz.1.662" name="file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 260.771662][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 260.819820][ T5609] usb 1-1: USB disconnect, device number 27 [ 260.824253][ T5609] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 260.921627][ T31] audit: type=1400 audit(1789649345.297:794): avc: denied { set_context_mgr } for pid=8769 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.959827][ T31] audit: type=1400 audit(1789649345.337:795): avc: denied { write } for pid=8769 comm="syz.1.666" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.967151][ T8770] binder: 8769:8770 unknown command 50331648 [ 260.967168][ T8770] binder: 8769:8770 ioctl c0306201 200000000180 returned -22 [ 260.986017][ T31] audit: type=1400 audit(1789649345.337:796): avc: denied { map } for pid=8769 comm="syz.1.666" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 261.153152][ T5783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 261.344361][ T5783] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 261.345262][ T5783] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 261.345286][ T5783] usb 3-1: config 1 has no interface number 0 [ 261.346997][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.347021][ T5783] usb 3-1: Product: syz [ 261.347034][ T5783] usb 3-1: Manufacturer: syz [ 261.347048][ T5783] usb 3-1: SerialNumber: syz [ 261.371263][ T5783] usb 3-1: 3:1 : does not exist [ 261.371284][ T5783] usb 3-1: 3:2 : does not exist [ 261.582972][ T8753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.585013][ T8753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.622303][ T5609] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 261.642910][ T5690] usb 3-1: USB disconnect, device number 34 [ 261.804273][ T5609] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 261.809902][ T5609] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.809960][ T5609] usb 2-1: config 0 has no interface number 0 [ 261.810314][ T5609] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 261.810343][ T5609] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.810400][ T5609] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 261.900454][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 261.900539][ T5609] usb 2-1: Product: syz [ 261.900593][ T5609] usb 2-1: SerialNumber: syz [ 261.940734][ T5609] usb 2-1: config 0 descriptor?? [ 262.000020][ T5609] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 262.081574][ T5609] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input28 [ 263.590314][ T31] audit: type=1400 audit(1789649347.967:797): avc: denied { watch } for pid=8835 comm="syz.0.674" path="/124/file5" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.702564][ T5783] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 263.776025][ T31] audit: type=1400 audit(1789649348.157:798): avc: denied { watch } for pid=8843 comm="syz.0.675" path="/125/file5" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.841432][ T31] audit: type=1400 audit(1789649348.217:799): avc: denied { bind } for pid=8848 comm="syz.5.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.879269][ T5783] usb 5-1: not running at top speed; connect to a high speed hub [ 263.879302][ T5783] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 263.884469][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.884499][ T5783] usb 5-1: Product: syz [ 263.884513][ T5783] usb 5-1: Manufacturer: syz [ 263.884527][ T5783] usb 5-1: SerialNumber: syz [ 263.976861][ T5783] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 264.006889][ T5783] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 264.013303][ T5783] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 264.048469][ T5783] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 264.055191][ T5783] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 264.165100][ T31] audit: type=1400 audit(1789649348.479:800): avc: denied { bind } for pid=8848 comm="syz.5.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.521099][ C1] usa49wg_indat_callback: 4 callbacks suppressed [ 264.521125][ C1] usb 5-1: malformed indat packet [ 264.521369][ C1] usb 5-1: malformed indat packet [ 264.521611][ C1] usb 5-1: malformed indat packet [ 264.521845][ C1] usb 5-1: malformed indat packet [ 264.522085][ C1] usb 5-1: malformed indat packet [ 264.522292][ C1] usb 5-1: malformed indat packet [ 264.522539][ C1] usb 5-1: malformed indat packet [ 264.552675][ T31] audit: type=1400 audit(1789649348.881:801): avc: denied { mounton } for pid=8851 comm="syz.0.678" path="/proc/418/task" dev="proc" ino=20124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 264.673809][ T31] audit: type=1400 audit(1789649348.994:802): avc: denied { read } for pid=8851 comm="syz.0.678" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 264.674523][ T31] audit: type=1400 audit(1789649348.994:803): avc: denied { open } for pid=8851 comm="syz.0.678" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 264.874769][ T5783] usb 5-1: USB disconnect, device number 33 [ 264.902872][ T5783] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 264.908882][ T5783] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 264.911850][ T5783] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 264.951058][ T5783] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 264.952058][ T5783] keyspan 5-1:1.0: device disconnected [ 264.976174][ T8852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.976249][ T8852] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 264.988045][ C0] cm109_urb_ctl_callback: 7 callbacks suppressed [ 264.988069][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.988276][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.988471][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.988665][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.988862][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.989051][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.989242][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.989442][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.989683][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.989873][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.996565][ T9] usb 2-1: USB disconnect, device number 35 [ 264.996632][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 265.084017][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 265.211104][ T8852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.218183][ T8852] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 265.246858][ T8852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.246946][ T8852] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 265.248510][ T8852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.248593][ T8852] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 265.249988][ T8852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.250133][ T8852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 265.309521][ T8852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.140076][ T8943] bond1 (unregistering): Released all slaves [ 266.177921][ T5786] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 266.215431][ T8948] overlayfs: failed to resolve './file2': -2 [ 266.260018][ T5783] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 266.358637][ T5786] usb 6-1: device descriptor read/64, error -71 [ 266.504673][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 266.505360][ T5783] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.506310][ T5783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 266.506338][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 266.506363][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 266.509480][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.509501][ T5783] usb 5-1: Product: syz [ 266.509515][ T5783] usb 5-1: Manufacturer: syz [ 266.509529][ T5783] usb 5-1: SerialNumber: syz [ 266.590996][ T5783] usb 5-1: config 0 descriptor?? [ 266.609052][ T5783] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.609113][ T5783] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 267.007295][ T5786] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 267.178127][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 267.205386][ T5786] usb 6-1: device descriptor read/64, error -71 [ 267.347569][ T5786] usb usb6-port1: attempt power cycle [ 267.357397][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 267.489519][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.489551][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 267.489579][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 267.715876][ T5783] em28xx 5-1:0.0: chip ID is em2828X [ 267.776949][ T5786] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 267.798919][ T5786] usb 6-1: device descriptor read/8, error -71 [ 268.066107][ T9043] tmpfs: Unknown parameter 'inode32#ƵP·0œÂó [ 268.623159][ T9063] dump_stack_lvl+0x100/0x190 [ 268.623194][ T9063] should_fail_ex.cold+0x5/0xa [ 268.623221][ T9063] should_failslab+0xc2/0x120 [ 268.623245][ T9063] kmem_cache_alloc_noprof+0x92/0x6a0 [ 268.623267][ T9063] ? io_submit_one+0x124/0x1fb0 [ 268.623298][ T9063] io_submit_one+0x124/0x1fb0 [ 268.623323][ T9063] ? __pfx___schedule+0x10/0x10 [ 268.623347][ T9063] ? __lock_acquire+0x5c0/0x1f40 [ 268.623367][ T9063] ? preempt_schedule_irq+0x79/0x90 [ 268.623393][ T9063] ? __pfx_io_submit_one+0x10/0x10 [ 268.623419][ T9063] ? irqentry_exit+0x24d/0xa10 [ 268.623460][ T9063] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 268.623486][ T9063] __x64_sys_io_submit+0x1b1/0x3a0 [ 268.623517][ T9063] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 268.623568][ T9063] do_syscall_64+0x123/0x790 [ 268.623595][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.623613][ T9063] RIP: 0033:0x7feb08f9e159 [ 268.623629][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.623646][ T9063] RSP: 002b:00007feb09e5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 268.623664][ T9063] RAX: ffffffffffffffda RBX: 00007feb09225fa0 RCX: 00007feb08f9e159 [ 268.623676][ T9063] RDX: 0000200000000c40 RSI: 0000000000000001 RDI: 00007feb09df6000 [ 268.623687][ T9063] RBP: 00007feb09e5a090 R08: 0000000000000000 R09: 0000000000000000 [ 268.623698][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.623708][ T9063] R13: 00007feb09226038 R14: 00007feb09225fa0 R15: 00007fffae148f88 [ 268.623738][ T9063] [ 269.414714][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 269.610684][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 269.662406][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.662506][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 269.664214][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 270.223877][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224022][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224157][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224289][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224492][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224627][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224758][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.224901][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.225033][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.225165][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 270.304659][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 270.304675][ T31] audit: type=1400 audit(1789649354.205:805): avc: denied { setopt } for pid=9091 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.438290][ T5690] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 270.601343][ T5690] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 270.605211][ T5690] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 270.605268][ T5690] usb 2-1: config 0 has no interface number 0 [ 270.605410][ T5690] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 270.605466][ T5690] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.605521][ T5690] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.685808][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 270.686670][ T5690] usb 2-1: Product: syz [ 270.686683][ T5690] usb 2-1: SerialNumber: syz [ 270.695903][ T5609] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 270.825170][ T5690] usb 2-1: config 0 descriptor?? [ 270.852675][ T5690] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 270.874136][ T5690] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input29 [ 270.912209][ T5609] usb 5-1: not running at top speed; connect to a high speed hub [ 270.912251][ T5609] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 270.924102][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.924125][ T5609] usb 5-1: Product: syz [ 270.924138][ T5609] usb 5-1: Manufacturer: syz [ 270.924150][ T5609] usb 5-1: SerialNumber: syz [ 270.989252][ T5609] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 271.037069][ T5609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 271.058221][ T5609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 271.076226][ T5609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 271.105127][ T5609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 271.314761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.443037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.517846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 271.571299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.795751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.330232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.468269][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 272.581364][ C0] usb 5-1: malformed indat packet [ 272.581613][ C0] usb 5-1: malformed indat packet [ 272.581841][ C0] usb 5-1: malformed indat packet [ 272.582056][ C0] usb 5-1: malformed indat packet [ 272.582272][ C0] usb 5-1: malformed indat packet [ 272.582483][ C0] usb 5-1: malformed indat packet [ 272.582721][ C0] usb 5-1: malformed indat packet [ 272.697304][ T31] audit: type=1400 audit(1789649356.506:806): avc: denied { bind } for pid=9128 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 272.704968][ T31] audit: type=1400 audit(1789649356.515:807): avc: denied { write } for pid=9128 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 272.800902][ T5690] usb 5-1: USB disconnect, device number 35 [ 272.838076][ T5690] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 272.860447][ T5690] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 272.877798][ T5690] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 272.883340][ T5690] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 272.884554][ T5690] keyspan 5-1:1.0: device disconnected [ 276.038822][ C1] cm109_urb_ctl_callback: 39 callbacks suppressed [ 276.038853][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.039071][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.039272][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.039461][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.039653][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.039845][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.040036][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.046718][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.046923][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.047118][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.217303][ T5690] usb 2-1: USB disconnect, device number 36 [ 276.217382][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 276.423958][ T5690] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 277.537368][ T5783] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 277.538695][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 277.702073][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 277.704151][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 277.720133][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 277.720170][ T10] usb 5-1: config 0 has no interface number 0 [ 277.762613][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.762671][ T10] usb 5-1: Product: syz [ 277.762708][ T10] usb 5-1: Manufacturer: syz [ 277.762743][ T10] usb 5-1: SerialNumber: syz [ 277.844071][ T10] usb 5-1: config 0 descriptor?? [ 277.917143][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 277.973358][ T5783] usb 2-1: not running at top speed; connect to a high speed hub [ 277.973396][ T5783] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 278.005954][ T5783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 278.072511][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.072537][ T5783] usb 2-1: Product: syz [ 278.072551][ T5783] usb 2-1: Manufacturer: syz [ 278.072565][ T5783] usb 2-1: SerialNumber: syz [ 278.394213][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 278.518711][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 278.736973][ T5783] oti6858 2-1:1.0: oti6858 converter detected [ 278.753022][ T5783] usb 2-1: oti6858 converter now attached to ttyUSB2 [ 278.927815][ T31] audit: type=1400 audit(1789649362.325:808): avc: denied { create } for pid=9226 comm="syz.4.711" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 279.027989][ T9255] pimreg1: tun_chr_ioctl cmd 1074025677 [ 279.029821][ T9255] pimreg1: linktype set to 778 [ 279.051509][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 279.051616][ T9221] quatech-serial ttyUSB0: qt2_open failed to set RS232 mode for port 0 error -71 [ 279.051836][ T5783] usb 5-1: USB disconnect, device number 36 [ 279.072320][ T5783] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 279.098350][ T5783] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 279.098916][ T5783] quatech2 5-1:0.51: device disconnected [ 279.171201][ T971] usb 2-1: USB disconnect, device number 37 [ 279.185111][ T971] oti6858 ttyUSB2: oti6858 converter now disconnected from ttyUSB2 [ 279.189577][ T971] oti6858 2-1:1.0: device disconnected [ 279.811105][ T9257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.811316][ T9257] block device autoloading is deprecated and will be removed. [ 280.263720][ T31] audit: type=1400 audit(1789649363.588:809): avc: denied { append } for pid=9305 comm="syz.2.717" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.272993][ T31] audit: type=1400 audit(1789649363.588:810): avc: denied { mount } for pid=9297 comm="syz.0.715" name="/" dev="rpc_pipefs" ino=20410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 280.479145][ T9308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.479339][ T9308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.479506][ T9308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.479670][ T9308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.479847][ T9308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.503628][ T5711] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 281.886751][ T5711] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 282.437525][ T9340] __nla_validate_parse: 55 callbacks suppressed [ 282.437566][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 282.438089][ T9340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.533807][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.533822][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 283.533849][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 283.533853][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 283.533875][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 283.558825][ T9340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.588441][ T5711] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 283.588468][ T5711] usb 6-1: config 0 has no interface number 0 [ 283.588500][ T5711] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 283.588522][ T5711] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 283.588547][ T5711] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.816382][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 283.816410][ T5711] usb 6-1: Product: syz [ 283.816423][ T5711] usb 6-1: SerialNumber: syz [ 284.512889][ T5711] usb 6-1: config 0 descriptor?? [ 284.566180][ T5711] usb 6-1: can't set config #0, error -71 [ 284.640974][ T5711] usb 6-1: USB disconnect, device number 15 [ 284.866442][ T9372] tmpfs: Bad value for 'mpol' [ 284.980528][ T5783] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 285.119888][ T31] audit: type=1400 audit(1789649368.060:811): avc: denied { listen } for pid=9371 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 285.173061][ T5783] usb 2-1: not running at top speed; connect to a high speed hub [ 285.173099][ T5783] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 285.214482][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.214541][ T5783] usb 2-1: Product: syz [ 285.214576][ T5783] usb 2-1: Manufacturer: syz [ 285.214617][ T5783] usb 2-1: SerialNumber: syz [ 285.413454][ T5783] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 285.607094][ C1] usb 2-1: malformed indat packet [ 285.607372][ C1] usb 2-1: malformed indat packet [ 285.607609][ C1] usb 2-1: malformed indat packet [ 285.607839][ C1] usb 2-1: malformed indat packet [ 285.608081][ C1] usb 2-1: malformed indat packet [ 285.608287][ C1] usb 2-1: malformed indat packet [ 285.608510][ C1] usb 2-1: malformed indat packet [ 285.698397][ T5783] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 285.878646][ T5783] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 286.014272][ T5783] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 286.043348][ T5783] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 286.059765][ T9376] geneve2: entered promiscuous mode [ 286.059788][ T9376] geneve2: entered allmulticast mode [ 286.119048][ T5783] usb 2-1: USB disconnect, device number 38 [ 286.148316][ T5783] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 286.150090][ T9407] FAULT_INJECTION: forcing a failure. [ 286.150090][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 286.150117][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.5.727 Not tainted syzkaller #0 PREEMPT(full) [ 286.150138][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 286.150150][ T9407] Call Trace: [ 286.150156][ T9407] [ 286.150163][ T9407] dump_stack_lvl+0x100/0x190 [ 286.150197][ T9407] should_fail_ex.cold+0x5/0xa [ 286.150223][ T9407] should_failslab+0xc2/0x120 [ 286.150246][ T9407] __kmalloc_cache_noprof+0x91/0x6d0 [ 286.150320][ T9407] ? copy_mount_options+0x55/0x190 [ 286.150342][ T9407] copy_mount_options+0x55/0x190 [ 286.150363][ T9407] __x64_sys_mount+0x1ab/0x310 [ 286.150388][ T9407] ? __pfx___x64_sys_mount+0x10/0x10 [ 286.150421][ T9407] do_syscall_64+0x123/0x790 [ 286.150449][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.150468][ T9407] RIP: 0033:0x7f1b9e39e159 [ 286.150483][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.150498][ T9407] RSP: 002b:00007f1b9f27b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.150516][ T9407] RAX: ffffffffffffffda RBX: 00007f1b9e625fa0 RCX: 00007f1b9e39e159 [ 286.150528][ T9407] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 286.150540][ T9407] RBP: 00007f1b9f27b090 R08: 0000200000000300 R09: 0000000000000000 [ 286.150551][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.150561][ T9407] R13: 00007f1b9e626038 R14: 00007f1b9e625fa0 R15: 00007fffbb4d9ca8 [ 286.150585][ T9407] [ 286.343385][ T5783] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 286.368487][ T5783] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 286.375618][ T5783] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 286.398716][ T5783] keyspan 2-1:1.0: device disconnected [ 287.124949][ T5690] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 287.308549][ T5690] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 287.310182][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.310224][ T5690] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 287.310270][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.012427][ T5690] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 289.012469][ T5690] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 289.013922][ T5690] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 292.390763][ T5783] usb 2-1: USB disconnect, device number 39 [ 292.836625][ T5786] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 292.976222][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 293.034115][ T5786] usb 3-1: not running at top speed; connect to a high speed hub [ 293.074085][ T5786] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 293.114625][ T5786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 293.134980][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 293.143876][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.170263][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.170319][ T5786] usb 3-1: Product: syz [ 293.170385][ T5786] usb 3-1: Manufacturer: syz [ 293.170708][ T5786] usb 3-1: SerialNumber: syz [ 293.247475][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 293.247569][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 293.247599][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 293.351115][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.351196][ T9] usb 2-1: Product: syz [ 293.351234][ T9] usb 2-1: Manufacturer: syz [ 293.351271][ T9] usb 2-1: SerialNumber: syz [ 293.530346][ T9] usb 2-1: config 0 descriptor?? [ 293.576980][ T5786] oti6858 3-1:1.0: oti6858 converter detected [ 293.706001][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 293.706193][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 293.862583][ T5786] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 296.588402][ T9] em28xx 2-1:0.0: chip ID is em2828X [ 296.648091][ T9503] tmpfs: Unknown parameter 'inode32#ƵP·0œÂó [ 325.233793][T10246] dump_stack_lvl+0x100/0x190 [ 325.233813][T10246] should_fail_ex.cold+0x5/0xa [ 325.233828][T10246] _copy_to_user+0x32/0xd0 [ 325.233844][T10246] simple_read_from_buffer+0xcb/0x170 [ 325.233860][T10246] proc_fail_nth_read+0x1af/0x230 [ 325.233874][T10246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.233889][T10246] ? rw_verify_area+0xce/0x6d0 [ 325.233906][T10246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.233919][T10246] vfs_read+0x1e4/0xb40 [ 325.233930][T10246] ? lock_acquire+0x1d1/0x380 [ 325.233941][T10246] ? __fget_files+0x34/0x3d0 [ 325.233955][T10246] ? __pfx_vfs_read+0x10/0x10 [ 325.233967][T10246] ? find_held_lock+0x2b/0x80 [ 325.233982][T10246] ? __fget_files+0x215/0x3d0 [ 325.234001][T10246] ? __fget_files+0x21f/0x3d0 [ 325.234019][T10246] ksys_read+0x12a/0x250 [ 325.234029][T10246] ? __pfx_ksys_read+0x10/0x10 [ 325.234044][T10246] do_syscall_64+0x123/0x790 [ 325.234060][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.234072][T10246] RIP: 0033:0x7feb08f5e98e [ 325.234082][T10246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.234092][T10246] RSP: 002b:00007feb09e38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.234104][T10246] RAX: ffffffffffffffda RBX: 00007feb09e396c0 RCX: 00007feb08f5e98e [ 325.234111][T10246] RDX: 000000000000000f RSI: 00007feb09e390a0 RDI: 0000000000000007 [ 325.234117][T10246] RBP: 00007feb09e39090 R08: 0000000000000000 R09: 0000000000000000 [ 325.234124][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.234130][T10246] R13: 00007feb09226128 R14: 00007feb09226090 R15: 00007fffae148f88 [ 325.234144][T10246] [ 325.360060][ T9] usb 6-1: device descriptor read/64, error -71 [ 325.477969][ T9] usb usb6-port1: attempt power cycle [ 325.968845][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 326.001530][ T9] usb 6-1: device descriptor read/8, error -71 [ 326.461917][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 326.493225][ T9] usb 6-1: device descriptor read/8, error -71 [ 326.621528][ T9] usb usb6-port1: unable to enumerate USB device [ 326.727723][ T31] audit: type=1400 audit(1789649407.043:890): avc: denied { map } for pid=10254 comm="syz.1.820" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 326.830077][ T5711] usb 3-1: USB disconnect, device number 43 [ 327.623073][ T5783] usb 1-1: USB disconnect, device number 31 [ 328.278017][T10307] No such timeout policy "syz1" [ 328.532818][T10274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.581541][T10274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.606901][T10274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.637317][T10274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.638432][T10274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.952160][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 328.983901][ T2150] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 329.123221][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 329.130013][ T9] usb 3-1: New USB device found, idVendor=1163, idProduct=01f3, bcdDevice= 0.00 [ 329.176856][ T2150] usb 5-1: not running at top speed; connect to a high speed hub [ 329.177655][ T2150] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 329.179958][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 7 [ 329.180767][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.181389][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.319022][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.319049][ T2150] usb 5-1: Product: syz [ 329.319063][ T2150] usb 5-1: Manufacturer: syz [ 329.319076][ T2150] usb 5-1: SerialNumber: syz [ 329.345621][T10299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.395196][ T2150] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 329.427654][ T2150] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 329.445856][ T2150] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 329.450867][ T2150] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 329.481428][ T2150] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 329.642393][ C0] usb 5-1: malformed indat packet [ 329.892159][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 330.036516][ T9] usb 1-1: device descriptor read/64, error -71 [ 330.116868][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 330.330686][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 330.845763][ T5596] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.845769][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 330.845799][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 330.845847][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 331.081070][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 331.100212][ T9] usb 1-1: device descriptor read/64, error -71 [ 331.217580][ T9] usb usb1-port1: attempt power cycle [ 331.444501][ T5786] usb 5-1: USB disconnect, device number 40 [ 331.496528][ T5786] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 331.532706][ T5786] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 331.553542][ T5786] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 331.577673][ T5786] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 331.578691][ T5786] keyspan 5-1:1.0: device disconnected [ 331.596757][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 331.625236][ T9] usb 1-1: device descriptor read/8, error -71 [ 331.880190][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 331.922288][ T9] usb 1-1: device descriptor read/8, error -71 [ 332.044389][ T9] usb usb1-port1: unable to enumerate USB device [ 332.210499][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.839'. [ 332.222178][ T5786] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 332.393264][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 332.396001][ T5786] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.399720][ T5786] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 332.399778][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 332.399807][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 333.476610][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.476668][ T5786] usb 5-1: Product: syz [ 333.476703][ T5786] usb 5-1: Manufacturer: syz [ 333.476738][ T5786] usb 5-1: SerialNumber: syz [ 333.503194][ T31] audit: type=1400 audit(1789649412.908:891): avc: denied { append } for pid=10424 comm="syz.5.839" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.572854][ T5786] usb 5-1: config 0 descriptor?? [ 333.679162][ T5786] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.679262][ T5786] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 333.929743][ T10] usb 3-1: USB disconnect, device number 44 [ 334.311606][ T5786] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 334.311960][ T5786] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 334.312377][ T5786] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 334.312392][ T5786] em28xx 5-1:0.0: No AC97 audio processor [ 334.355409][ T5786] usb 5-1: USB disconnect, device number 41 [ 334.359581][ T5786] em28xx 5-1:0.0: Disconnecting em28xx [ 334.385548][ T5786] em28xx: Freeing device [ 334.402915][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 334.625169][T10474] 9pnet_fd: p9_fd_create_tcp (10474): problem connecting socket to 127.0.0.1 [ 334.659655][ T10] usb 3-1: device descriptor read/64, error -71 [ 334.911913][T10449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.914011][T10449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.914206][T10449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.914372][T10449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.914532][T10449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.020405][ T31] audit: type=1400 audit(1789649414.808:892): avc: denied { write } for pid=10480 comm="syz.1.845" name="functions" dev="configfs" ino=16230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 335.046005][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 335.058200][ T31] audit: type=1400 audit(1789649414.845:893): avc: denied { write } for pid=10480 comm="syz.1.845" name="c.1" dev="configfs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 335.059624][ T31] audit: type=1400 audit(1789649414.845:894): avc: denied { write } for pid=10480 comm="syz.1.845" name="c.1" dev="configfs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 335.183779][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.309951][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 335.310213][ T10] usb usb3-port1: attempt power cycle [ 335.557080][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 335.676574][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.677496][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.677519][ T9] usb 1-1: config 0 has no interface number 0 [ 335.679660][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.679682][ T9] usb 1-1: Product: syz [ 335.679696][ T9] usb 1-1: Manufacturer: syz [ 335.679709][ T9] usb 1-1: SerialNumber: syz [ 335.737634][ T9] usb 1-1: config 0 descriptor?? [ 335.750609][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 335.803091][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 335.842389][ T10] usb 3-1: device descriptor read/8, error -71 [ 335.931784][ T31] audit: type=1400 audit(1789649415.659:895): avc: denied { connect } for pid=10497 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.202405][T10507] tmpfs: Bad value for 'mpol' [ 336.273223][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 336.636685][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 336.805556][ T10] usb 3-1: device descriptor read/8, error -71 [ 337.110407][ T10] usb usb3-port1: unable to enumerate USB device [ 337.149467][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.149505][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 337.149526][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 337.151587][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 337.831307][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 337.831427][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 337.861612][ T9] usb 1-1: USB disconnect, device number 36 [ 339.111506][ T5711] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 339.576219][ T5711] usb 3-1: device descriptor read/64, error -71 [ 339.589084][T10532] key id 00000004 not found [ 339.717964][T10550] FAULT_INJECTION: forcing a failure. [ 339.717964][T10550] name failslab, interval 1, probability 0, space 0, times 0 [ 339.717998][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.0.858 Not tainted syzkaller #0 PREEMPT(full) [ 339.718021][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 339.718031][T10550] Call Trace: [ 339.718038][T10550] [ 339.718046][T10550] dump_stack_lvl+0x100/0x190 [ 339.718079][T10550] should_fail_ex.cold+0x5/0xa [ 339.718106][T10550] should_failslab+0xc2/0x120 [ 339.718130][T10550] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 339.718153][T10550] ? setup_ipc_sysctls+0x5e/0x300 [ 339.718183][T10550] kmemdup_noprof+0x29/0x60 [ 339.718212][T10550] setup_ipc_sysctls+0x5e/0x300 [ 339.718240][T10550] copy_ipcs+0x57a/0x7e0 [ 339.718261][T10550] create_new_namespaces+0x20a/0xac0 [ 339.718283][T10550] ? security_capable+0x80/0x260 [ 339.718312][T10550] unshare_nsproxy_namespaces+0xf2/0x220 [ 339.718347][T10550] ksys_unshare+0x4a2/0xa70 [ 339.718370][T10550] ? __pfx_ksys_unshare+0x10/0x10 [ 339.718410][T10550] __x64_sys_unshare+0x31/0x40 [ 339.718430][T10550] do_syscall_64+0x123/0x790 [ 339.718457][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.718476][T10550] RIP: 0033:0x7f9c90f9e159 [ 339.718491][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.718508][T10550] RSP: 002b:00007f9c91f52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 339.718527][T10550] RAX: ffffffffffffffda RBX: 00007f9c91225fa0 RCX: 00007f9c90f9e159 [ 339.718538][T10550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040600 [ 339.718549][T10550] RBP: 00007f9c9103506b R08: 0000000000000000 R09: 0000000000000000 [ 339.718559][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.718569][T10550] R13: 00007f9c91226038 R14: 00007f9c91225fa0 R15: 00007ffcb0c215c8 [ 339.718593][T10550] [ 339.833144][ T5711] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 339.974606][ T5711] usb 3-1: device descriptor read/64, error -71 [ 340.057427][ T5718] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 340.091079][ T5711] usb usb3-port1: attempt power cycle [ 340.155929][T10580] netlink: 1 bytes leftover after parsing attributes in process `syz.5.863'. [ 340.220287][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.220330][ T5718] usb 1-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=54.99 [ 340.221338][ T5718] usb 1-1: config 4 has an invalid interface number: 85 but max is 0 [ 340.221360][ T5718] usb 1-1: config 4 has no interface number 0 [ 340.221384][ T5718] usb 1-1: config 4 interface 85 has no altsetting 0 [ 340.223422][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.223444][ T5718] usb 1-1: Product: syz [ 340.223458][ T5718] usb 1-1: Manufacturer: syz [ 340.223472][ T5718] usb 1-1: SerialNumber: syz [ 340.260402][ T25] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 340.420742][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 340.422180][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.427752][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 340.427781][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 340.427804][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 340.431260][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.432806][ T25] usb 5-1: Product: syz [ 340.432823][ T25] usb 5-1: Manufacturer: syz [ 340.432839][ T25] usb 5-1: SerialNumber: syz [ 340.439736][ T25] usb 5-1: config 0 descriptor?? [ 340.445309][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 340.445337][ T25] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 340.452846][ T5711] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 340.495508][ T2275] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 340.497865][ T5711] usb 3-1: device descriptor read/8, error -71 [ 340.667514][ T2275] usb 6-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=4d.8b [ 340.668341][ T2275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 340.668363][ T2275] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 340.668384][ T2275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 26232, setting to 64 [ 340.668418][ T2275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.674693][ T2275] usb 6-1: config 0 descriptor?? ** replaying previous printk message ** [ 340.674693][ T2275] usb 6-1: config 0 descriptor?? [ 340.717802][ T2275] smsusb:smsusb_probe: board id=8, interface number 0 [ 340.727031][ T2275] smsusb:siano_media_device_register: media controller created [ 340.729197][ T2275] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 340.729216][ T2275] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 340.733597][ T2275] ------------[ cut here ]------------ [ 340.733607][ T2275] !PageLargeKmalloc(page) [ 340.733614][ T2275] WARNING: mm/slub.c:6733 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:3/2275 [ 340.752167][ T5711] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 340.774108][ T5711] usb 3-1: device descriptor read/8, error -71 [ 340.808053][ T2275] Modules linked in: [ 340.811940][ T2275] CPU: 0 UID: 0 PID: 2275 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 340.821341][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 340.831483][ T2275] Workqueue: usb_hub_wq hub_event [ 340.836619][ T2275] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 340.842393][ T2275] Code: 28 90 0f 0b 90 80 3d 2e 16 ba 0e 00 0f 84 84 6b b1 fe 48 8b 74 24 28 48 89 ef e8 bc 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 75 71 37 8e 5b 5d 41 5c 41 [ 340.862033][ T2275] RSP: 0018:ffffc90007686cd8 EFLAGS: 00010202 [ 340.868195][ T2275] RAX: 00000000000000ff RBX: ffffea0001281880 RCX: 000000000000002e [ 340.876811][ T2275] RDX: 0000000000000000 RSI: ffff88804a062000 RDI: ffffea0001281880 [ 340.885255][ T2275] RBP: ffff88804a062000 R08: 0000000000000005 R09: 0000000000000000 [ 340.892933][ T5711] usb usb3-port1: unable to enumerate USB device [ 340.899631][ T2275] R10: ffffffffffffffff R11: ffffffff81762b0a R12: ffff888020e83000 [ 340.907667][ T2275] R13: ffff888020e86000 R14: dffffc0000000000 R15: ffff888020e830f0 [ 340.915682][ T2275] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 340.924673][ T2275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.931264][ T2275] CR2: 000000110c2e0f3c CR3: 000000007e3e6000 CR4: 00000000003526f0 [ 340.939344][ T2275] Call Trace: [ 340.942632][ T2275] [ 340.945601][ T2275] usb_free_urb.part.0+0xf8/0x110 [ 340.950633][ T2275] usb_free_urb+0x1f/0x30 [ 340.954977][ T2275] smsusb_term_device+0x108/0x200 [ 340.960053][ T2275] smsusb_init_device+0xb4e/0xbb0 [ 340.965091][ T2275] ? __pfx_smsusb_init_device+0x10/0x10 [ 340.970679][ T2275] ? kfree+0x1e5/0x6d0 [ 340.974760][ T2275] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 340.980830][ T2275] ? usb_clear_halt+0x61/0x160 [ 340.986315][ T2275] smsusb_probe+0xd7f/0xe1f [ 340.991268][ T2275] ? __pfx_smsusb_probe+0x10/0x10 [ 340.996315][ T2275] ? mark_held_locks+0x40/0x70 [ 341.001129][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.006979][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.012847][ T2275] ? __pm_runtime_set_status+0x13c/0x970 [ 341.018511][ T2275] usb_probe_interface+0x386/0x9b0 [ 341.023712][ T2275] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.029395][ T2275] ? kernfs_put+0x3f/0x60 [ 341.033820][ T2275] ? sysfs_create_link+0x68/0xc0 [ 341.037399][ T5718] safe_serial 1-1:4.85: safe_serial converter detected [ 341.037544][ T5718] safe_serial 1-1:4.85: probe with driver safe_serial failed with error -22 [ 341.042867][ T5718] usb 1-1: USB disconnect, device number 37 [ 341.060270][ T2275] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.066066][ T2275] really_probe+0x241/0xa60 [ 341.070613][ T2275] __driver_probe_device+0x210/0x460 [ 341.075988][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.081825][ T2275] driver_probe_device+0x4a/0x140 [ 341.086899][ T2275] __device_attach_driver+0x1df/0x320 [ 341.092827][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 341.093160][ T25] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 341.094950][ T25] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 341.094965][ T25] em28xx 5-1:0.0: No AC97 audio processor [ 341.108320][ T25] usb 5-1: USB disconnect, device number 42 [ 341.111788][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 341.114980][ T25] em28xx: Freeing device [ 341.134665][ T2275] ? __pfx___device_attach_driver+0x10/0x10 [ 341.140646][ T2275] bus_for_each_drv+0x159/0x1e0 [ 341.145542][ T2275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.150982][ T2275] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.156220][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.162066][ T2275] __device_attach+0x1e4/0x4d0 [ 341.166836][ T2275] ? __pfx___device_attach+0x10/0x10 [ 341.172153][ T2275] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.177354][ T2275] device_initial_probe+0xaf/0xd0 [ 341.182391][ T2275] bus_probe_device+0x64/0x160 [ 341.187163][ T2275] device_add+0x121d/0x1970 [ 341.191716][ T2275] ? __pfx_device_add+0x10/0x10 [ 341.196573][ T2275] ? mark_held_locks+0x40/0x70 [ 341.201888][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.207727][ T2275] usb_set_configuration+0xd97/0x1c60 [ 341.213502][ T2275] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 341.219585][ T2275] usb_generic_driver_probe+0xa1/0xe0 [ 341.224999][ T2275] usb_probe_device+0xef/0x400 [ 341.229783][ T2275] ? __pfx_usb_probe_device+0x10/0x10 [ 341.235184][ T2275] really_probe+0x241/0xa60 [ 341.239703][ T2275] __driver_probe_device+0x210/0x460 [ 341.245086][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.250897][ T2275] driver_probe_device+0x4a/0x140 [ 341.255968][ T2275] __device_attach_driver+0x1df/0x320 [ 341.261339][ T2275] ? __pfx___device_attach_driver+0x10/0x10 [ 341.267262][ T2275] bus_for_each_drv+0x159/0x1e0 [ 341.272126][ T2275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.277528][ T2275] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.282736][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.288590][ T2275] __device_attach+0x1e4/0x4d0 [ 341.293349][ T2275] ? __pfx___device_attach+0x10/0x10 [ 341.298663][ T2275] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.303922][ T2275] device_initial_probe+0xaf/0xd0 [ 341.308978][ T2275] bus_probe_device+0x64/0x160 [ 341.314108][ T2275] device_add+0x121d/0x1970 [ 341.319012][ T2275] ? __pfx_device_add+0x10/0x10 [ 341.323884][ T2275] ? usb_detect_static_quirks+0x335/0x3e0 [ 341.329650][ T2275] usb_new_device.part.0+0xcc2/0x1686 [ 341.335051][ T2275] ? do_raw_spin_lock+0x128/0x260 [ 341.340104][ T2275] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 341.345937][ T2275] ? mark_held_locks+0x40/0x70 [ 341.350745][ T2275] hub_event.cold+0x1e3/0xe90 [ 341.355446][ T2275] ? __pfx_hub_event+0x10/0x10 [ 341.360204][ T2275] ? lockdep_count_backward_deps+0x1b0/0x200 [ 341.366239][ T2275] ? lock_acquire+0x1d1/0x380 [ 341.370912][ T2275] ? process_one_work+0xa2c/0x1b10 [ 341.376050][ T2275] ? process_one_work+0x906/0x1b10 [ 341.381183][ T2275] ? process_one_work+0x906/0x1b10 [ 341.386312][ T2275] process_one_work+0xac7/0x1b10 [ 341.391267][ T2275] ? __pfx_process_one_work+0x10/0x10 [ 341.396672][ T2275] ? lock_acquire+0x1d1/0x380 [ 341.401358][ T2275] ? __pfx_hub_event+0x10/0x10 [ 341.406159][ T2275] worker_thread+0x5ef/0xe50 [ 341.410864][ T2275] ? __pfx_worker_thread+0x10/0x10 [ 341.416032][ T2275] ? kthread+0x13a/0x450 [ 341.420692][ T2275] ? __pfx_worker_thread+0x10/0x10 [ 341.426192][ T2275] kthread+0x373/0x450 [ 341.430273][ T2275] ? __pfx_kthread+0x10/0x10 [ 341.434862][ T2275] ret_from_fork+0x730/0xd60 [ 341.439495][ T2275] ? __pfx_ret_from_fork+0x10/0x10 [ 341.444612][ T2275] ? __switch_to+0x800/0x10f0 [ 341.449332][ T2275] ? __pfx_kthread+0x10/0x10 [ 341.453930][ T2275] ret_from_fork_asm+0x1a/0x30 [ 341.458763][ T2275] [ 341.461787][ T2275] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.469066][ T2275] CPU: 0 UID: 0 PID: 2275 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 341.478429][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 341.488479][ T2275] Workqueue: usb_hub_wq hub_event [ 341.493494][ T2275] Call Trace: [ 341.496753][ T2275] [ 341.499663][ T2275] dump_stack_lvl+0x100/0x190 [ 341.504325][ T2275] vpanic+0x553/0x970 [ 341.508282][ T2275] ? __pfx_vpanic+0x10/0x10 [ 341.512765][ T2275] panic+0xd1/0xe0 [ 341.516466][ T2275] ? __pfx_panic+0x10/0x10 [ 341.520862][ T2275] check_panic_on_warn.cold+0x19/0x34 [ 341.526224][ T2275] ? free_large_kmalloc+0xbf/0x100 [ 341.531349][ T2275] __warn.cold+0x191/0x318 [ 341.535788][ T2275] __report_bug+0x30f/0x440 [ 341.540299][ T2275] ? free_large_kmalloc+0xbf/0x100 [ 341.545588][ T2275] ? __pfx___report_bug+0x10/0x10 [ 341.550604][ T2275] ? bus_for_each_drv+0x159/0x1e0 [ 341.555618][ T2275] ? __device_attach+0x1e4/0x4d0 [ 341.560538][ T2275] ? device_initial_probe+0xaf/0xd0 [ 341.565719][ T2275] ? bus_probe_device+0x64/0x160 [ 341.570645][ T2275] ? device_add+0x121d/0x1970 [ 341.575307][ T2275] ? usb_new_device.part.0+0xcc2/0x1686 [ 341.580880][ T2275] ? hub_event.cold+0x1e3/0xe90 [ 341.585748][ T2275] ? process_one_work+0xac7/0x1b10 [ 341.590876][ T2275] ? worker_thread+0x5ef/0xe50 [ 341.595634][ T2275] ? kthread+0x373/0x450 [ 341.599861][ T2275] ? ret_from_fork+0x730/0xd60 [ 341.604610][ T2275] ? ret_from_fork_asm+0x1a/0x30 [ 341.609532][ T2275] ? find_held_lock+0x2b/0x80 [ 341.614196][ T2275] ? smscore_unregister_device+0x537/0x7f0 [ 341.619987][ T2275] ? free_large_kmalloc+0xbf/0x100 [ 341.625089][ T2275] report_bug+0xb3/0x220 [ 341.629332][ T2275] ? free_large_kmalloc+0xbf/0x100 [ 341.634429][ T2275] handle_bug+0x16a/0x2a0 [ 341.638754][ T2275] exc_invalid_op+0x17/0x50 [ 341.643254][ T2275] asm_exc_invalid_op+0x1a/0x20 [ 341.648089][ T2275] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 341.653807][ T2275] Code: 28 90 0f 0b 90 80 3d 2e 16 ba 0e 00 0f 84 84 6b b1 fe 48 8b 74 24 28 48 89 ef e8 bc 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 75 71 37 8e 5b 5d 41 5c 41 [ 341.673515][ T2275] RSP: 0018:ffffc90007686cd8 EFLAGS: 00010202 [ 341.679586][ T2275] RAX: 00000000000000ff RBX: ffffea0001281880 RCX: 000000000000002e [ 341.687715][ T2275] RDX: 0000000000000000 RSI: ffff88804a062000 RDI: ffffea0001281880 [ 341.695673][ T2275] RBP: ffff88804a062000 R08: 0000000000000005 R09: 0000000000000000 [ 341.703643][ T2275] R10: ffffffffffffffff R11: ffffffff81762b0a R12: ffff888020e83000 [ 341.711598][ T2275] R13: ffff888020e86000 R14: dffffc0000000000 R15: ffff888020e830f0 [ 341.719561][ T2275] ? ret_from_fork_asm+0x1a/0x30 [ 341.724497][ T2275] usb_free_urb.part.0+0xf8/0x110 [ 341.729508][ T2275] usb_free_urb+0x1f/0x30 [ 341.733820][ T2275] smsusb_term_device+0x108/0x200 [ 341.738836][ T2275] smsusb_init_device+0xb4e/0xbb0 [ 341.743850][ T2275] ? __pfx_smsusb_init_device+0x10/0x10 [ 341.749386][ T2275] ? kfree+0x1e5/0x6d0 [ 341.753453][ T2275] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 341.758993][ T2275] ? usb_clear_halt+0x61/0x160 [ 341.763760][ T2275] smsusb_probe+0xd7f/0xe1f [ 341.768250][ T2275] ? __pfx_smsusb_probe+0x10/0x10 [ 341.773265][ T2275] ? mark_held_locks+0x40/0x70 [ 341.778025][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.783821][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.789618][ T2275] ? __pm_runtime_set_status+0x13c/0x970 [ 341.795243][ T2275] usb_probe_interface+0x386/0x9b0 [ 341.800348][ T2275] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.805982][ T2275] ? kernfs_put+0x3f/0x60 [ 341.810309][ T2275] ? sysfs_create_link+0x68/0xc0 [ 341.815241][ T2275] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.820866][ T2275] really_probe+0x241/0xa60 [ 341.825365][ T2275] __driver_probe_device+0x210/0x460 [ 341.830635][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.836778][ T2275] driver_probe_device+0x4a/0x140 [ 341.841802][ T2275] __device_attach_driver+0x1df/0x320 [ 341.847162][ T2275] ? __pfx___device_attach_driver+0x10/0x10 [ 341.853037][ T2275] bus_for_each_drv+0x159/0x1e0 [ 341.857899][ T2275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.863268][ T2275] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.868461][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.874256][ T2275] __device_attach+0x1e4/0x4d0 [ 341.879005][ T2275] ? __pfx___device_attach+0x10/0x10 [ 341.884276][ T2275] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.889469][ T2275] device_initial_probe+0xaf/0xd0 [ 341.894484][ T2275] bus_probe_device+0x64/0x160 [ 341.899231][ T2275] device_add+0x121d/0x1970 [ 341.903723][ T2275] ? __pfx_device_add+0x10/0x10 [ 341.908559][ T2275] ? mark_held_locks+0x40/0x70 [ 341.913304][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.919105][ T2275] usb_set_configuration+0xd97/0x1c60 [ 341.924479][ T2275] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 341.930533][ T2275] usb_generic_driver_probe+0xa1/0xe0 [ 341.935891][ T2275] usb_probe_device+0xef/0x400 [ 341.940640][ T2275] ? __pfx_usb_probe_device+0x10/0x10 [ 341.946000][ T2275] really_probe+0x241/0xa60 [ 341.950499][ T2275] __driver_probe_device+0x210/0x460 [ 341.955790][ T2275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.961767][ T2275] driver_probe_device+0x4a/0x140 [ 341.966795][ T2275] __device_attach_driver+0x1df/0x320 [ 341.972167][ T2275] ? __pfx___device_attach_driver+0x10/0x10 [ 341.978046][ T2275] bus_for_each_drv+0x159/0x1e0 [ 341.982893][ T2275] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.988278][ T2275] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.993556][ T2275] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.999358][ T2275] __device_attach+0x1e4/0x4d0 [ 342.004108][ T2275] ? __pfx___device_attach+0x10/0x10 [ 342.009379][ T2275] ? do_raw_spin_unlock+0x145/0x1e0 [ 342.014571][ T2275] device_initial_probe+0xaf/0xd0 [ 342.019583][ T2275] bus_probe_device+0x64/0x160 [ 342.024330][ T2275] device_add+0x121d/0x1970 [ 342.028825][ T2275] ? __pfx_device_add+0x10/0x10 [ 342.033666][ T2275] ? usb_detect_static_quirks+0x335/0x3e0 [ 342.039383][ T2275] usb_new_device.part.0+0xcc2/0x1686 [ 342.044750][ T2275] ? do_raw_spin_lock+0x128/0x260 [ 342.049760][ T2275] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 342.055556][ T2275] ? mark_held_locks+0x40/0x70 [ 342.060304][ T2275] hub_event.cold+0x1e3/0xe90 [ 342.064986][ T2275] ? __pfx_hub_event+0x10/0x10 [ 342.069737][ T2275] ? lockdep_count_backward_deps+0x1b0/0x200 [ 342.075792][ T2275] ? lock_acquire+0x1d1/0x380 [ 342.080460][ T2275] ? process_one_work+0xa2c/0x1b10 [ 342.085563][ T2275] ? process_one_work+0x906/0x1b10 [ 342.090669][ T2275] ? process_one_work+0x906/0x1b10 [ 342.095774][ T2275] process_one_work+0xac7/0x1b10 [ 342.100721][ T2275] ? __pfx_process_one_work+0x10/0x10 [ 342.106089][ T2275] ? lock_acquire+0x1d1/0x380 [ 342.110758][ T2275] ? __pfx_hub_event+0x10/0x10 [ 342.115513][ T2275] worker_thread+0x5ef/0xe50 [ 342.120108][ T2275] ? __pfx_worker_thread+0x10/0x10 [ 342.125224][ T2275] ? kthread+0x13a/0x450 [ 342.129456][ T2275] ? __pfx_worker_thread+0x10/0x10 [ 342.134555][ T2275] kthread+0x373/0x450 [ 342.138616][ T2275] ? __pfx_kthread+0x10/0x10 [ 342.143198][ T2275] ret_from_fork+0x730/0xd60 [ 342.147776][ T2275] ? __pfx_ret_from_fork+0x10/0x10 [ 342.152875][ T2275] ? __switch_to+0x800/0x10f0 [ 342.157557][ T2275] ? __pfx_kthread+0x10/0x10 [ 342.162138][ T2275] ret_from_fork_asm+0x1a/0x30 [ 342.166900][ T2275] [ 342.170006][ T2275] Kernel Offset: disabled [ 342.174307][ T2275] Rebooting in 86400 seconds..