last executing test programs: 2m42.438129217s ago: executing program 0 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000014058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 2m42.384680438s ago: executing program 0 (id=941): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="020028bd7000010000000200000008000b01fc0c00000400d100"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(0x0, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x81, 0xfffffffb, 0x4000000}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl(r7, 0x6, &(0x7f0000000540)="99cc36b975e0eb91d2809cb94706b5a401f5b026b5e188acc86f5f94509531c9ca9d70851f21f5480a3967b9c4a326d5ad82cbaea5177470c39aef4277f17117a9089c4e0324bd8c8dff55a89c5aed0c15b1a98249c71db33d96659f3dab55dfafa71b14ec2d816083b5851f0beddbf7d2f7d063d6a9bafe3acb5367cff95244850c3259777bb7538b968c01a4e6ab509eaa656cbc75ac8c2dd44371f33d040e6f1744fdeb05774e149bcd0623a7bb10958f0e238009b01ed85941dee03d394fe6ef4f26cbced116cada6bcfbf612c17bbdff9af36c457bd2afd9fcbb3dd89398597586179e6e14ae93cf930cac25dd9a3eac337a66235") r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1f9, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x4000000000000005, 0x0, 0x6f, 0x80], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) mmap$usbmon(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0xfffffffffffffff5) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000017e2dd0863238c9f716726ea07802040d9014f03010902120001000000000904000000ff1848a8a43ed9823466933e75c07d1c7b7eb0df87ff033106235db72f852b4f436672ed34303ad3c3bac60f9c9827538012afbc0770263244159383102b0541d4894d367ba3dc428e61ba28c08e139dc11daac6c13de3eadc7301053b95e23c33c2d60ebde4ce33843c5a6556fa3768515b29dfc53272c4df1201567875f0a6ca7991ca7c669382acebae9149ff2f06410d7fa0da06a72a22cb4c2257c305e63d5be675cf29b4f8e52d97d65672a798d713d716e3585800"/237, @ANYRES32=r1, @ANYBLOB="bb9eea3e21cba99aa7f7df07cd444679aa463a138f92fbaec67fb14a386e825c3d67f30bcb8a6ba30b8c7bcf5c25efa9cd7f66b0c4570f9f892bc106f1bb8962c149ff5cc391eee772f76b27c32d1773533ca6291d08a7287391f622677625308b2ecad19f1b47d3e777d0ae6e7c845c8e6287aa61915c6e10c3999b7ca50c6530050b7df58dcc8a223c57bd4496bf3fc4322a9101fd3e33b8bab7ce6e75f89eaa5ca6f9e852a0632c14608e96f2bb2548e96b858815ddf053dc30f9662d0d547ef2507309d61c498c2e1ff3dde992d013b2b1"], 0x0) 2m41.809028274s ago: executing program 0 (id=942): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x1, r0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 2m41.162668402s ago: executing program 0 (id=946): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4a) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1e, 0x78d, @loopback, 0x80000001}, 0x1c) 2m41.100629869s ago: executing program 0 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0x3, 0xe65, 0x8, 0xcd75, 0x3, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x120) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2!\"\"o\xe6\\#\x9a@\x94/', 0x30, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m40.074067307s ago: executing program 0 (id=954): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="20002b8008000100000000001400038006000100010000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x20000884) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4004081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) 2m39.805184166s ago: executing program 32 (id=954): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="20002b8008000100000000001400038006000100010000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x20000884) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4004081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) 3.837597723s ago: executing program 1 (id=1732): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x80500) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x3}, {0x3ff}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x1b1, 0x0, &(0x7f0000000280)={0x2, 0x84, {0x0, 0xc, 0x70, "bc96e10184e0c346b6f7ee38dd2e14b3effb0660e8ae31eddd8ca55c69be61257bdb95c2f65358abdef092a4a0712be9fa9be6e9fe64e6cf25e89b4610ce6c1c7527237bb50dadd3a750640df9376d8f68f31a5c83b70d6e7e1a5dcccdfd99e6ba9f459b9878490ee92c9eaf7119dd23", 0x7, "f68cc5953484a6"}, 0x5a, "8e651798d9c4a5c2fdbfeedb93f57e69cbbcbfc6a115d839f3fd319274d75a20e7efc98b9e1daa02659b253f1e1deac07f123718b57c41f899e3349ab873357fce27eab7de8d4faa4adc4884e9ab17e57d211192aeeac2ee4294"}, 0xea}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x58b26283e8085f6a, 0x30, r0, 0xf8fee000) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) set_mempolicy(0x1, &(0x7f0000000480)=0x200, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x408000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000500)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000540)=0x3, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f0000000600)={0x133c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x45, 0x3, "f424695d9b58a200958ac92131eb02de48aa977f13245c12830a5f1ce4b1d8c29701b418bf414b94891dbcb57c7b495e58c63a6e11f233f0a471eee479443ba406"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a40978fa37d9d646ed740b251810a671735debfd887f2d79cfe17115c57469e39d50"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x69}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6f2a6cd2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa82b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6dfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x766}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ecc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NODE={0x106c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf50b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "ebd367185b17b339621f6a742b78e3917b24736fb575ee4dbf4a2122b615a415d557571886485905eb6c438444666cdcddfb2dafb7628b506ae2f4e09b65162fbf4cf4e167f666aa168455ae61243731f1d42b4a43f38bf0efa430b881e27d4a600fba795d1c59f589c75d52fa025f17f5cdbe08b45cb2be23aa7d997e758508163c05a65c179287fbe16a6e6b15fb60a7ae532f09c991e3ec96dbc9b0a9853e390eefe59d769559ee53df9ff1f97e26822d70829dcacff831394b298e136c3fd13b1a4ea7f4caeb22bcd719ef45850989fc1b57017a2280b9bfb5a9ba186544c39360053cddaa6ac4e2d1f05e7a8aed81b71e8d443374d9639c3f16c7e960a2cc32681cc1c8de2bdf9b3abc2b747d650d3b849fa3b4956af4cf4600cd999f434d42581a956d0dd6183c94b3ffca7f505ebb71247770455c816fc27fa2a10e5318469d68b92671bf4698bf32775f9cd2d8965b760c839cd09810656e392c66ed936d56b0941fc4f197cd1fa15611cf7ac3f63ffb4f504e2cbcb65031b0d369b73a2c8be8bb2d7fa73ef920c9a008c25e9f0ca5748ed8b447fb392cc9313323323a42cde98ad2aae28cbe6760992dbe410162638584b34ff5f37323656bd3fa22659b4654a6dc1fa1ac849927a6ed947aff90f63555e707a3ca577a65aa99aefded4156df7961fb3760974b20ae82e4e7b82f9a3d5b18520cd91445544ef99dfb7177976a6ec7904903d8c57c099518f1597f676cf88aec5631c077bf33e8cdd892b237c45d30f5614f6ecd7180ce3e8824fcd07931e9dda72a0ef36886d004515a42fa2ef26be40b812fdf1b9908a84db869d49cb5469ee01022797532a52687a53fafb68dc0bcffef038491e71cbde21206dc0b25836d843cb9f0d5b7fb27a4d21b0fc544a8553a98ff3b94981db046b368dc424b477eea8933d9bb2fb73782aa93ee0d6af582cbcb51e88eee68651407658d11dc15c29a86bc77e94317771e50bcdcc1a2dda9d9bc50c61e68caeaf0f023a4fbb0589a424c291d189c2cf6aab60536534de76f038434c5e67aa6f955ac407060a90a45e7ce3c60fcca34c11ef5a71538b3f072415fb8b4374dcc201f28e1f934343ebfc2834f02539076d4ea2c73ce0e61c3750e1308da6704b8f257d4ae09393f7fb1ae210518878ae613021c84010c57db54a189fcff51e210be860978cf3f62674447a8c046a705faaa747f2085956494727e7c4bdfa5e9b00a33c329df526b232ab1ce3503512a87600a246b217278335985c1d16cefa0364c8560444086358a05d7aa5b7edd35a670c98d51d09569bd07c4834965511bcb891019060afa9007c51bdb31c021ba5556f8815d162130a1075a67a65ecefb12923b1490b82b11f10965900d8276f2d282251d7b0c5f293000d93b6cf3be205f8b96b75c79c52b012f6a3cb1fef7199dd933987929fa3253ecd1a6369dfa298875c381592d99eb03e565b4831e1f0a47ef86bb6f359f1054df6c461d76a84125f0d47a23a923f6686640668d6d8500b3b6df982b8e839a3ab712466c26c70a6fcdcb31b6c15c24aae72eb5cf504d4b800c2ffda0e33e06f2b0481f6d3d503d1deb03f4e78d7d1f50eaa33ef30b128db7889de6fbee3c8261857a209ba78420690f8407f4e4525c55da8494b43af2c0a488a7c75b7232f21a958606897617e6def3293261ed86dc079e17e7fcbe98f741532e4fc8bc98bb4d06b41f60c3a73d773769fe5e693ba49d264313577b15c922b664562455fdd4662ba264cba11a94a219358df9be57a6a71a8a0c1527227558e23529a669e4baaecdfbbc243fed607fb1e099268b0610f5ed738d1e1fe011a1a6c6805d1ad07694dda2b67aa187eaf538e0a95f6ae6f8ab962b95643513d537d0a7dab176f60b656bea752c74e82bf908621f098b388ddf22854ea769f0fbcc8ec37346ef754d97eb47e76a069d1a6c9f3410f6d5177cc6b5339722c0cdc712071877c2f5ee41955ffdac185b0fcb800e5d4cf0342dbc340fa67f3923326b346b2b0808013c2eb0f7638093061c037e2a921f979ad59937613d464c317b129152734ab7f7521a4e851a63c6a1a848027516582f1b28bbe5ffd4ea22b2ee2e9d825cd420d1e16efe23e7157f471b4c15a817a996aa8b87da3dd6fee2a9d7c0046ba7865e8e2714ad6b9ed3726742eefe68fb3b34a1f9eb7fcaa92c7c45f942b677333eaf47bba817505519ecec1bf2a3dcbb5638892bc180fa6daf38f1945a6c1a555bb6bf9317f884d2978922557260ce87035376a2f83bd0a79c73238e85052da1dc4903be8b79b1c9bceba19278708f0f1ca0dfda7933fca0ca058a11e509f25ba44696e66b5b32fc500eca02f3b8e7823b21e6eb57a7d6c58b1a9d5bc2815fa688db73cf6873465613a6002da138009de2ca6526e715deac32d0e0529d0fad283303d6a0c7497f81ab839c6e99fe94465ad73517a304f1c40e6ed82f5fd1a05b12466b9e89405f1f6f92a7d2573e228951b9732d374982b79c4f7207c0d5bc70721cc99ca51c60445f75fa8fb5b42d9e0974e46a2eb2c5539a920b5f83412db8c4f8cc5c47f134ea09f02483707a207691a7ebec59ce5b63ad9502b63ea90832dfac365d92ed235e385153853674a1a84f190d663a328291e7beab97ad5596f82e6d373051c6368cccdb61830d36e5c7c7675014b379ed3fe7dbccb2331f370f6d3670566f56d5b31b6c8d74061de99cba0e2d8e910287c8608521a03ac35fc133b118f251c2924bf1ff02c954cbe47fb0141300ae8af995fd7c96fcf92ffc73e4d140b3bdd35cc517396efabf3c44be1f081a52677d7d17a36b516380a0160c0950c676ac02029edd697ea3af6e2fed4c467328d299e7de5992c41207c36a2b9252f5a1de2eac034ba26c7585eb67dc080cf162d3075aa79091f10d200727775500c6ffb9b4cd29193c3b5461f85885e7df21874146c61f0cbbde5321f2d6f49662895aeb7cb670e3f4b04fcce6c0b1c98a38bd37cfc32241e128148aa21b2806dd402214a6d056044f0199961551d22cd06722b01c6f630912d4a33a846a24770f23f82c03ce062bd4f7be560fda8d48f66132d769c485ec0d00e8e0207345527aa2458715d41e5182db9401084b6314aa53102d216a2ebf148d87ce826dc0c8b4d29f7a5f53b5819e0e0f6d893f1814c3acbae6ba7327cba14a5404b297e804b5ee86ae9979cd256e6e451b6722512eef3c1e1e83c88eb87ac440250f15b8c9bf15db9c18effa855ac0664b07614cf6f878ddb6bcdbdfd42cf5098532139adfdeadb9ac5389052b2dff8a0bb54e824f8b176904ab78db97f26b9a2502546acb537daac8a06636b2b48e3692447c27ad0a90c0a36d3452c055fb7124895733cd9227deda981323973c71ddc8b840249ceb486fd5daf96be80fae84dbc3ce15cbf82cae14e40679532e95451d5afbfbcc63fc7cc788677c9b2d8a35685e42ba3a7f54f320fbc8fdd63f93375c82c9c25e60e1dc770aa7bcddfd1a88ea97007ad04cdaa4d763ad370a20989bbeb449352819c88519679e3b914d51422ea499ac4e851a1b11bb6d8f9459155172ee4e52f7324480893562d953470fa8087b28560246e18de1b0ceb98dba44190c098ec5ccddc0c46695aeed761b56b996477b451e36ab35b01382f2194226b445caf033a3fa311436296a2d717d91802b21c157d21602c46c0649554415951b0955f0a0b13f7b5044af7fbfc876c695f9fc6f0e79a3ab6eee50717ff52ccb805c8c665f40bff4fbe53540a4b4894991e5f030962563ea0124a20313a723630f7d3448b5f5ec806ef4db0412343181b738f44e925e55bde7f97df84a704c7c571b29100b44723c8cc3e41d09deff541dda78abd0a09f83f5824860ab0bde97b19e3b6a2d4a386e8bc046c6b749dfc4d22028d9c1444b11f489e86eca0f890ca7510932e2a2b0b8f285d541599d9541f671e533a1cd9977cc955d54b35c2edc10b054de3d0056560eae4bdf8dce1b42129b7ac957799e7c3a24ba4b308b842bc343d55f8f08caf191ef243b4e9463972b66ddb2f5e89181dfaeaff78f9ce0c2ace84e73ef470f342047349401d00856bb2a1e0db960c61b176834a9041989dd129d5a496506f180612bc93045abea3551b26f26463eed78a14e6f3b6cd2b413544734737f213ccdefac9d7d9a0513be8912d29f14087297480f5b11b6c7c36713fbb51bfc9cee1661552dcfb9a06bbda1e0735cde9d6c501724d708b44650dc1dd61b9c48bce80f58cf7cb348bab96372746c50352676e68370c6c01ae5df24e22c1b24a52441c8d97cf06409f79abe750694c46d61f6a4d8ed4ed2179930cd9e793ba89201ae75efd63c1a32b077b7c6a8b1ceaf89dbfb2e725c82e9ae66b601c7e5aff170422496a1c3f5dd7eddc75968dc82ae1523e6024d5db4cfa8aab4091ab530a9272d120a1510894ad7ab88cb2811a47636289c15d116ee22bc152163c4b9e3d996208b81ad17211f206f427459189f689cb2263175adbc4988d29f7b1ba3a2ca406f01aecbb89dade963343f76088c4696230139f5f5f3c1b09b2ec7de0273505383c2dbf78f1ad92d8e5861106bc3959f475d04b2c6adc4e56cec1a2d46d29c9d9267364d657cbd3d8fe2c20e06b1c1aba7ea34fbd28f5b6c1ec9e1a7bd224622a6e5db5e74d9f44b67965dd67bad83fbe228c156753ad45674f1da9e169f08df9e8268bd0a58b116ee4ea716250b483284a3f83736e725114728560112de18e7f866bc753913ccc87238d629a0a6f43d8236ad7e108d05668a8418639abe245fcd156cd78eb75164e9a126ef4e56fe439ff9a76869c3e679b3bc391f064ea5cd8d364b61b0a4bc3efe27bddd8e115d78135baf3cf947ada44b33864ab9a8a8328d431656b0fc50ac1ffe0559ce988b5cc24eb05ec248398dac101d8de9f8d355cb44496e8af7c4ca065659e6ecbbd3176e9b2b10a19433620ba0f5bb5ad1ca8620a988cee20b59af1bbd9e8a548c108a1533b5a688d14e7151e329f68185d3fe789697d1796d956e2ba8dcb446d22ab8b9eff4366f2ba1b8b37a9212f278497211447eef262fdb401415d24dfbf53c7530b5a740c5bf9e01f30b24c2b36dc83141dd7375eb7fa2df75ba9dc35247048fcd7cd7833553f8abed5465f24e46cb35055bb39ee21984a025008aad27071f1b04a503bbaaa6508231881b6298e058acb88ecfe4829c745d317964eaeeb5d880c8bba9a8e49a5223f5ffefa28d7f819f9da9fd7232d7c58a6ba59c62cc67bdcc199091730a7fa4fa612918bb8a78c0b96ecc64c0e80d20e51577382e32602efbf2e1155f5cadb3d9ec6a1a12cac652f4a2f0484331c1b4a3a57ffa0e5bc26d7cad521e368a2b932c4e96d8422c1ecd7f8cc4fe6e4335bbb1a6915a3282c71cf600b28c8dc43b1d309cf387de279726ae7b95e7835149582f10148bfdd6871791cf16f6449ceb14472c2e42181f9793cfdc67020dbc82fd2de3b5192a7475196f1c76d8460446ecc1a957615be59869ab74a9da4c5d2a9e60414b2be19fd141ad5ec6b229d9b770f992ff9ea14c30e7bd9e6c630d135bbd3ed0d99e406ee013dc50b1c606cca8adbb86877b76c9069dd1e78530e2bbb062c55ccc298f4981bd04d64b280dff373e500f84093621f1c78ae285671f2a5ce48e9b8819671288bb5fb21534ce83cf87d3a14e973e7dd72dbb323e42c50319ecb201a947a823273e664f522c428bdf6500d72ccab3b604f4fbc0c3a8ce33dbd8b32a54f0a6dab87a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1de73a4920178489052486f5d9739afbaf9449a7a58817"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff5b4}]}]}, 0x133c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) syz_open_dev$vim2m(&(0x7f0000001a80), 0x7, 0x2) syz_extract_tcp_res$synack(&(0x7f0000001ac0), 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001b00)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80), r5) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001e00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x1c8, r6, 0x110cba2877465bb8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f251a4595210c850a87dc43862f18ea107a339ecef5285"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "588e6f03e422e9c6dd0de5b572b0ad6d010151c19abc9ae06c3f2f62cc"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ca510af064324054becdb881ec3193d02ef36666d234a5"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7150}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x120a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xda9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfae7, @private2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x50}, 0x14008800) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000001e40)=0x7f, &(0x7f0000001e80)=0x4) write$tun(r5, &(0x7f0000001ec0)={@val={0x0, 0x3}, @val={0x1, 0x1, 0x7ff, 0x1000, 0x7, 0x5}, @ipv4=@icmp={{0x9, 0x4, 0x0, 0x3, 0x13d, 0x68, 0x0, 0x65, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb, [@multicast2, @multicast1]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x4, 0x0, {0x43, 0x4, 0x0, 0x15, 0xfff9, 0x66, 0x9, 0x2, 0x32, 0x10, @rand_addr=0x64010102, @empty, {[@timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x1, [{@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1}, {@private=0xa010102, 0xe}, {@private=0xa010100, 0x80}, {@private=0xa010101, 0x4}, {@local, 0x5}]}, @end, @generic={0x44, 0x2}, @noop, @timestamp_prespec={0x44, 0x34, 0xc5, 0x3, 0x7, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffffffc}, {@multicast2, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x7}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0x8, [{@remote, 0x6}, {@remote, 0x5}, {@private=0xa010100, 0x4000000}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffb}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xced}]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0xf, [0xf, 0x97, 0x4, 0xa]}, @lsrr={0x83, 0xb, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x4, "b365"}, {0x2, 0x12, "d95ddf88df13791ee75b1f5b3b7a5215"}, {0x0, 0x9, "029dde11c647da"}]}, @rr={0x7, 0x13, 0xb2, [@loopback, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "1fceaf46d0"}}}, 0x14b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x68, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040) read$fb(r5, &(0x7f0000002300)=""/137, 0x89) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000023c0)) 3.816347923s ago: executing program 1 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010873797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000112f66c768e"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) 3.731760906s ago: executing program 1 (id=1734): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) (async) r3 = socket(0x13, 0x1, 0xfffffffb) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000a9bc4fa34fd71436e17c180001002bbd7000fbdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) 2.997937012s ago: executing program 2 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="040000001000010000000000000000000100000a40000000030a0fdb00000000000000000a0000090900030073797a30000000000900010073797a310000000014000480080002403cb140bbe3fe014000000003140000001100010000000000000000000100000a967ef3bde8528bc42801df3c56d1f92491936cf9b5fbff1a9a9d9110cb87bd2aea7f20efd66fc0c3b6e313750b463f9ddc858e74e1aaae4da23316c3641a096284523458f970cb676a5c54ee1fbfe4822cafc581ba63733823698dd45155330a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="01002dbd7000fd000008001d00", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) socket$inet6(0xa, 0x3, 0x400003) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x1, 0x1, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x2, 0x104, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x5, 0x1a449, 0x4, 0x40000003, 0x8c, 0x2, 0xf27, 0x6, 0xc, 0x6, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="66660fc7b73b2ff30f1efb0f23e72667f2af0f320f350f01c8bad104b009ee66b93c03000066b80b00008066ba000000000f303f", 0x34}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="1731", 0x2}], 0x1}, 0xc000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r1, @ANYRES32=r3, @ANYRESOCT=r7], 0x2c}}, 0x80) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x4) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000000000)=0x400001, 0x4) 2.088605947s ago: executing program 2 (id=1747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809224e00fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 1.942215818s ago: executing program 2 (id=1749): prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0xfffffffffffffffe) 1.937608958s ago: executing program 2 (id=1750): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7a492786d21bc2d4af04d91800f2ff58782ca8c6f9dfaebf021e9ca08126caf224d913f49750b4c602aef5586a48ad07b22fe4a67e193b6e1b525cc81c4e8cfe4feee5c31ea64bed9ef5f0edc6b248c168ac22c713b2fae7c9e8095e97857fd362f360c4ee80a19f623707b658fec7ad23f37cc50e82b5baebc3bdbb9e305b4dc29672d345033beffe6eff0000000000000000", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x1}, {0x8, 0x8, 0xfffffffe}, {0x3ff, 0x80000000}, {0x1000}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.705712824s ago: executing program 2 (id=1752): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001c40)) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) (async) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x2082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xd3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000080)={0x2, 0x3}, 0x2) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001bc0)={{r6}, 0x2, &(0x7f0000001b80)=[0x7, 0xb595], 0x8001, 0x8}) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) r9 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) r10 = syz_open_procfs(r9, &(0x7f0000000040)='status\x00') sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="640400002d00000325bd700006000000ba6b2ae74e511719c5610ca5752aed35e8a9ab9d7536ed9c995feeb214484cf141b8079ed5a560601473f24889a6938e172c6e14b6c7dc6ae008009c00ffffffff1004668004005c80c6695ecb6fcf1ba27cb4845e45682e24b6c615280ee90e272bb9a30fe3af52394605d188ef47bb64917445757a6a3561ada2b8a0d011f4bd9798c8c5fc3f241ca107ada07a803da38ac9a5c66261df7bac7ae93b2c5722a7739253c694dadd3c5fd2ece0f4c484848fe3e7e589f77214405bb9a492a74bf6041e4bc3f976aa63e840428713f554301ea28adaa7847d8ada058a9d6e00b5e5ff98f63510ce90d5c4a5f64885c2287371da384b742dcbc147cdcff33d14f203dc0b2ca05bb72a0fa357cee727d7606dbd6ce5bdd0d248b10cdfeeb5390d820ea40400c180af7e58e1273bb65f10d67f142a8f18e1b9b26e6d07e1c4bd83845c449f8bbac745321551715a42af50ad89c978944e142e69f7ee9258a97fa4b317b5061a8e2333e042159c2a5d856cc42877e2ac169b1fc87f91e902b2f7fdc66adec2a42667b10e12fc529138f289b6167e4c41128d70a5acde215024d1c15748c438ddf0d81a9658be9425d301b0f803f9ed83b09bd2c8b814ed1b522fb745f38e50768dce9d861a7687e80140fd69e4a8f7e02aadef22a67149a9ef1d12c95fdcbbcee857a32040c0ebaf072084824a7d796de387654e79d2dcef9ca516c698ca42057c27bd1c2ff3cd4d8b5bf3558f686e487e9ea8794da4ec22cb5a95d495e071e074d6e8312dfb94095611e7f854a9ca16d7b2e9f58e87195f0845366ca5d79d2520d594eec9f02d2a1afff5dadb12239ff4d170ece87bfc9fb508aac8ee444bb28956b331f7826536c273cc07ee3148ef92630bb3351283b5b8f6a56aded1d669405619f22bd4252b1641c20d5afe5ce882864e68e48e42f503f2474f74db97d77f57ae4604c70701ffbcc9e891059af75cf0f7b3688a61c826163cfe19c28fd4f2ffc839b026e83f53cbdcab36188e95a2bb7ea68833c185f00f4588499b9c8fad760111c4865cb2a34fa9c59403f32da1e0748ba4146532eb0041009bff4ddfdabf0e74a5eebc6a442f2548fe6b2de6cdfd13e6f923842945e84e59d1216351cbe5637047a419cc30b7f023077a304a326c81758c5ea481dc33a37a1c3c1372d6c75c01adc878a37c16a1519be787e5b2abae5ad4abd4c02925f6fd0a4349e5839cf913c175a710bc7c7732e38ea39b08bd4e421e6ea78d9acb17cb352426fd862f9b555ac584f5a5adf219cecd4956147eb5e6b4bbace5b1fa1a9c7c12f739e49677475efba4679e09723c6937a84a179ce6276dfec9c26e3e9d0e4e8753e15a0f19eef61788fab3b5a3efa06235fa3ca65c149ec0cf9034f9d86e64115f00e5539d60227635cd39a7675ab9d6f4dd9ae36d7927c50104bcbbbc0c1b3990eb3aa969362bbb7a43b7f7d9eabb622538128d1c7d60d985fb8ef0fd68ad14cd40de95dbc976cb02089f94ced33405602331fe1e20b43d07918765057b38d875a51000c5002f6465762f6e756c6c6230000000000000000000"], 0x464}, {&(0x7f0000000580)={0x38, 0x25, 0x2, 0x70bd29, 0x25dfdbfd, "", [@nested={0x20, 0x133, 0x0, 0x1, [@nested={0x4, 0x119}, @nested={0x4, 0x126}, @nested={0x4, 0xc9}, @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x80}, @typed={0x4, 0x6}, @generic="af3949e4"]}, @typed={0x8, 0x60, 0x0, 0x0, @fd}]}, 0x38}, {&(0x7f0000000ac0)={0x29c, 0x36, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@generic="b3f5134b2052e1e7590b0f9d8a2392b8e6549d01016485eb0ffe159ea52f4245d446cae780e4a16ec97ad10a84b507e5efc47c890b855aac1e6c908b6e39a7f00760749ef8902d991916af503a3fcac5f8b8e2590adda8da8701131a5e9c9a365c27e43a2bb7a403ded5557ea16352902edb18fbb93fa809702715c3be5233d0bf9c01b3e7ed315bff5f7a8aeed3d78860e67504bbb375cee1817600b04657bec42a00fd9b6a415c213ca26379c46a52d7535236a2780c6d888b0344605ea4480f4cf776ee42b3ec5a814148b341d62918a1aa9d4e3939c1", @generic="82bfe05a4b46ffd2f416b0d272d7f3bfcfea58827cae3e95900db33c12d9bd903836b71e7181e49dd34bbc4bfb312f1fedc5ce40a07ca29675801b8e87446eaad06d303881b5778896da6fc8974b795721908a83279972a7ed5db6b1db1631d4", @nested={0x34, 0xdd, 0x0, 0x1, [@nested={0x4, 0x76}, @typed={0xc, 0xd, 0x0, 0x0, @u64}, @typed={0x8, 0x134, 0x0, 0x0, @uid=r8}, @typed={0x14, 0x119, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x7d}]}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x50, 0x0, 0x0, @pid=r9}, @generic="69d6810662ae45734fa4dea3a170c7a3291acbf87f8c8f4dd0c3fa94efe388d43562ac96fb8a17531f89fe7e2fb2291ee1d0a81a0c068adae111eef898536356bf8c7d2856922f1a0f", @nested={0xc4, 0x8b, 0x0, 0x1, [@generic="504343043ddfe2809dc066d8d21d46567995a1daae09809a92e0b1d59c18cc78aec7f56c4631de7cfcfaf082e7a51b43b888bd1098eda1bd7cd9e022fc4c1c27ebe0796384f356a7052d8f3a8151abc8", @generic="cfce348685b1e0bbbde02f4953dfd58a095a17cb6e0f95c4b51dd535304c51cb44e6b2189814eeb9a7dccbc1246cd988f9fe44d4405ab12cab51db34e436c48d4f93cd0609cf5c4ebf1868ace889772b8b758dafb3bcaf9c0284cf6f75db2a2e26a4c4ae83233a800e138d6e53da9e47"]}]}, 0x29c}, {&(0x7f0000000880)={0x234, 0x15, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="1ad90c8737472ee9c462f0c59228bc7e42110285514cf402109a6341a08c675f28ea4b1d3a0dba1c9bb6f6ffc4cb7680", @nested={0x8, 0x13e, 0x0, 0x1, [@nested={0x4, 0x95}]}, @generic="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", @nested={0x14, 0xe6, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=r8}]}, @generic="810a8c0dd62cdf19abffd7ff7131ee7e08b1d5fbb3cf7be3a96b19c84d04216fdcf91f90a6628129c41e670820981dab5c363ae07dc5767622c2ba16e2f106699bf4590a424e6a01f9bbd4710b1b95f1450d6d0386444ee7510af4d0e384a125cc9dbd4acc0ccdd62f466a4e3757c8f84a1bff5d09f7d00b42950f2007db4a91fb7660ae2f10b2e9ecb21f8df5b15203f9f039843f1c7f1840942ffadffe8c4acc8df7ce2f173f57c70e33dd49b17729f8f32fff91db7a6f61c1a98af555fa287e4dd98c3bbbff5461c0689f487bc9bbb56ef3920d062497"]}, 0x234}, {&(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x1018}], 0x5, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r11) sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYBLOB="0500"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000500)={0x1, 0x7, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0) 1.662528964s ago: executing program 2 (id=1754): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000540)="99cc36b975e0eb91d2809cb94706b5a401f5b026b5e188acc86f5f94509531c9ca9d70851f21f5480a3967b9c4a326d5ad82cbaea5177470c39aef4277f17117a9089c4e0324bd8c8dff55a89c5aed0c15b1a98249c71db33d96659f3dab55dfafa71b14ec2d816083b5851f0beddbf7d2f7d063d6a9bafe3acb5367cff95244850c3259777bb7538b968c01a4e6ab509eaa656cbc75ac8c2dd44371f33d040e6f1744fdeb05774e149bcd0623a7bb10958f0e238009b01ed85941dee03d394fe6ef4f26cbced116cada6bcfbf612c17bbdff9af36c457bd2afd9fcbb3dd89398597586179e6e14ae93cf930cac25dd9a3eac337a66235") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xa4, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x229}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfe1a}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params]}, 0xa4}, 0x1, 0x0, 0x0, 0x404d0}, 0x48090) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) mmap$usbmon(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0xfffffffffffffff5) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000017e2dd0863238c9f716726ea07802040d9014f03010902120001000000000904000000ff1848a8a43ed9823466933e75c07d1c7b7eb0df87ff033106235db72f852b4f436672ed34303ad3c3bac60f9c9827538012afbc0770263244159383102b0541d4894d367ba3dc428e61ba28c08e139dc11daac6c13de3eadc7301053b95e23c33c2d60ebde4ce33843c5a6556fa3768515b29dfc53272c4df1201567875f0a6ca7991ca7c669382acebae9149ff2f06410d7fa0da06a72a22cb4c2257c305e63d5be675cf29b4f8e52d97d65672a798d713d716e3585800"/237, @ANYRES32=r1, @ANYBLOB="bb9eea3e21cba99aa7f7df07cd444679aa463a138f92fbaec67fb14a386e825c3d67f30bcb8a6ba30b8c7bcf5c25efa9cd7f66b0c4570f9f892bc106f1bb8962c149ff5cc391eee772f76b27c32d1773533ca6291d08a7287391f622677625308b2ecad19f1b47d3e777d0ae6e7c845c8e6287aa61915c6e10c3999b7ca50c6530050b7df58dcc8a223c57bd4496bf3fc4322a9101fd3e33b8bab7ce6e75f89eaa5ca6f9e852a0632c14608e96f2bb2548e96b858815ddf053dc30f9662d0d547ef2507309d61c498c2e1ff3dde992d013b2b1"], 0x0) 1.578535424s ago: executing program 1 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="146aebf26af200000010000100000000000000000010000000000000000a0000050900030073797a30000000000900010073797a310000000014000480b4c64064ddfd30a80800014000000003140000001100010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x4, "abacd211119c871663376126aab5ab0006278ee042000000e4ffffffffffffff", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x3d, 0x6, "63bd580b6ad519b95d46808fd735fd5665839c0f000d09b18c5c159a1ee2ada878b31be1ca1d58a7024fd0313bfb515b566b00cbdaed53971e"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x44080) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x5) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r3, &(0x7f00000000c0), 0x28) 1.46688698s ago: executing program 4 (id=1757): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900), 0x55}, {&(0x7f0000001980)="5f110a0000", 0x5}, {&(0x7f00000019c0)}, {&(0x7f0000001a80)='Ta', 0x2}, {&(0x7f0000001b00)='ilj{', 0x1}, {&(0x7f0000001d00)="40a3", 0x2}], 0x6}}], 0x1, 0x0) 1.410473921s ago: executing program 4 (id=1758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe8090fff00fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 1.298218754s ago: executing program 4 (id=1759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x3, 0x3a) write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000400aaff020000000000000e000000000000013a"], 0x6e) 1.189201982s ago: executing program 4 (id=1760): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7a492786d21bc2d4af04d91800f2ff58782ca8c6f9dfaebf021e9ca08126caf224d913f49750b4c602aef5586a48ad07b22fe4a67e193b6e1b525cc81c4e8cfe4feee5c31ea64bed9ef5f0edc6b248c168ac22c713b2fae7c9e8095e97857fd362f360c4ee80a19f623707b658fec7ad23f37cc50e82b5baebc3bdbb9e305b4dc29672d345033beffe6eff0000000000000000", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x1}, {0x8, 0x8, 0xfffffffe}, {0x3ff, 0x80000000}, {0x1000}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.070591729s ago: executing program 4 (id=1761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={r6, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000080)=0x8) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="010000000000000021000040"]) 900.048253ms ago: executing program 3 (id=1762): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0xfffffffe, @remote, 0x5}, r2}}, 0x48) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="30e6bda8cd77b30a4abe"], 0x0}, 0x0) 848.519107ms ago: executing program 4 (id=1763): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073864020720c14008e390102030109021200010000000a09041df300716c7500"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req={0x3, 0x0, 0x7, 0xac03}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000100039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82", 0x77) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28100000fb8c51376b4a133d72ecfef95c1938bd8081300dfac3d5f4461edaf864ac28b7e1907a32b230eb4cb9cbe98dfe6ad20cdcd948fb4aa586149589ab7c2f1f84d5a25fde938da4918700", @ANYRES32=r1, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a7866726d30000000"], 0x28}}, 0x20044811) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000000), 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="2006b600000010d5e85f0933bbf3342aef926c774dcf185ee98443c648f5a33638f885b0be77ff0f8342901b0ffcf43cf3e2f637203360c9f42649a1c29f698ed626e271f389ea5115256c9f5520b312fa44cbf171d5bacff0bdb53401a2f7766ed92ada7853e1fd98ca159c10af79f06b85c20237ca1ee49782f12f32f6c480a2319a4cfba6b89163e2ec195f66bdf150ab140682a12f84b06c46a9c3623fb3622be8421056638eb846d8c14d2caaa9b1cf7c32ff35880ac000196e"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xa) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000f9a000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000080)={0x19, 0x4, 0xff}) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x38) syz_usb_control_io$hid(r0, 0x0, 0x0) 697.236568ms ago: executing program 1 (id=1764): r0 = mq_open(&(0x7f0000000000)='.+!^\x00', 0x1, 0x6, &(0x7f0000000040)={0x80, 0x7, 0x1, 0xf800000000000000}) cachestat(r0, &(0x7f0000000080)={0x2, 0x324f}, &(0x7f00000000c0), 0x0) setitimer(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) r1 = socket(0x0, 0x4, 0x9) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x1}, &(0x7f0000001280)="97b7c2d868591b065ad7716dc4afe0089587a4f2841ae0560419f62fef436712b7e296f3c23272ea28cb6df52a249c67767f60c8e6a74ee456777870c643e2a4afd4350ea4d80b2c153136e0d998e8b35626ac0ab1539c3a9afb33502f4bc0f6852acf368ce91b607ae46021ca5dae39588da19097e889a32d7b7ca7cfca84aaf84ca25e1141f7951016885481a55608f74012cb9e9cc5e4d9b2631ba7c7cd4c6037fb6834c9f6c971e20c4b192ab105e6f39c2262c6e3dce8dd63d889d3b3096c76b0887b0504bf33a79fcd16b6372b6bdcb107073055182de58e6b80bd5308d8693a1f80c3d7e225658ea051fa3dabcbbbb0cde73981a7dafb58f7283b4596040cb5a668f727c8a07f2235ef7025cdfd7eed256c23b5bf05181f022cc9c33b1be6ea5e5e2fa76743cc8bc574de0c2013d94ab581deb631b0f26b9e41b45d1a087c85ffc50b55c61ebb3c61ccde1ffb4cae884ef60a5f982d2d20c930c759f23157a4ab51271a3b4dcd6cb88feaf09471ebb789c414ed0f36277ce559a860a15c9841bf20e782aea4cc877fe71dbfd07dac301ab63373ded4c3e6c593b35577f0855a2204e93d6f1162f4300c254d6636a0a561e9d57d8f94c895448bb1038424a5c672262e22d305940c334fcf9dc132e8cf43cf0def33511f685695532c3f776d618a031dd980286bc46fdda78f1c3b48a4bf53ba0e50407730cfc7a08b1ad1a675309dd15b73e74aed0899bfb4e4150e120a8cbaa454ff1e567ed57dcffe2861910375fe24bb4000e12d9f34c2b76a1e31bd76fdcad75ab2b0f7e5be938ff73fa0d84ad2bb3a7bbe3bb3dfc7e3662eda7f6efa977a4dd8d138df8eb99db6b30e86f1a81210b96f9f9be57910cfef79d54928c6317e1e5444fd5cfcf7fca87608de7abc37fe15dba41ca609f50fd720bc6027676ecbd9251c3c4dc2c9c16fa5b2bbd5f2c15f880f0aa3bf5e7c67ab9d9d8f0c75a123d86b45b2247bcd1cd29105d6314b0436f773f5e960a23aeb5b12c6365e5bb0d14f4f823cdcfdd379960ed446e185c6a30049d973eafbec5c247f8a39ff26c802b2328b866c37aaf4ef5437b0d8884a847f334cc24afa79a5710d6dc8d8f780ae43514a2276dc4cc8205bc5968e0f9079d8fb9feb6d350da83adbd9699933ca1752a1cf6b62eaf23c9b20a53eb2804ee0ef3ce95202f123695e4ba70c8812cc799535d3b563ee255ee872e381e86522601acdfb072750b4869b34a134f2155ed115d28fa1c7af3d4cebd66433a7586d98c1ebe009713a08171081c0bd60587268af0746435d5a67101854a5bb2632bc35e995627e092ce1c40d1e2e01b2df525a8db530d4d387b76e99034249e03490dc71a5d7fd420e6c618dbd498e9b4638146d1ff0da430803db47f353865645de5e761bd70123f9bda4f7423feffd14f8a478c32f9e079d50634da9daac3ee86437131427bb939284112b8ffa9899ae06da1848c9914efcfdfdca17d4e0ef061954b3d75d7d7146790efa092b09659cffc4cbf763f580c1614d20a73c636cb70c4b40bd653e490a7a0f78e3c464916d8f9e20676db819a37c3d3a04c0d8a95a6d4061e022dc4f23a30a74f685ee0da20a7660392479dca41fb2aefdc6a4aaf1391a1216b4bc41fc71f5b60a0722aaa52245f3739bd7ef30cd980f4f2299083313ade36d43fa22253dcd3ef2d314b6beac0a0dbbcd410dc2c998781ca41faac4f00bca2c51164de456a7e86e4c6b0f11b2ae30b6a234fa390b15d7969cc34ad2454eef113b97e43918dbfb03547bedc511b884935824c4ecbb2c49aafe14e1bf7480b38267effd8405fc01ea38e722df0c3ca259c74b3760ae56a330662ce49ee5fe4e0d31293389e75910904d333b9fd868a33513397b45c00f1ccf4f0c8e2b3fff0da56b4df06c1d85ccaae13c8a34b9bf7dcb43d276f3fe6a64af939deddcf10ed16c29b7b39249ee4ba8cd98cf2908b191ac0299b89cecc3653a8c13fe9e1ce271ff2492aeea4d5a8e88665fd875088cbbe18216a734390c155c48b9a3f8851281dcc59ec812992ce4b65baaacd5ada9e2b723a6e8488325402273bc79d81ec7d708c2f591c14965cd19519735099606de59ce19c58b30427d4ca2f4c37daa739910c0146e03511b979853fd1cbd3af456355499f24b49302fa1bf7baeaafbfa4de6116150a6b1c84b77acb0f334190136e3573b76b4f39eff4333181bb2bb7ee17a570a5aa4c13b14ecbf01721cb2521d3ee8743236642e4d6417a4791afe4e847a37363238e9b7525bbe4d2186d0b7c23d4473eb41cf6a2ea7571f25ee6bcdd4a487d764fa0529fa5e482d4cf3b60a579bfe78b4b19014052089bc9fe97dbc88ee2a74e032aae7cc9043f1affd62e8dad5f4a45310376e02cbecd216e5c048492120cb202244b1f0dac0da273297a579ef95df424550d431a58f05041a150e89059473ca8b52f81cc510805e844f7f00fc829f9ab174f86293befb896f23a91c92160f153780e74c856e4d99e5c29de635e8af443c9c606ab9325c302f6b1e62992f77be2f18872202b575395bb408b51a271f241a3f29e5f0975675e340e32d87f9a51fcd5cdb0d4cae432acd61ec3584ae514365b999d1b1af0ad3b76ba26358d6ccad4a126032a2df04698ad282e1dc9ffc23ed6532625070a00c9506833a2a2c41f7f03ed155668e7afe322b0d269befbf371250a85a608a2ccc31f1051788c431019c0aa0a55354c55c775121f29c27a5b9a041c7b61c9cd11deffc6f8d4623e51171950419e3077606d0a53d148df396be1f8ca8618378aeb618416912a3a748728c339b7dfe3e5f2e0dcba7ba8c9e4c10b64fb732a8d80e1e7b67c07e258e3189e70c0281c9f3977092fbde8b9ea9bd444e449643953f11461ff8447aacd4b0c2de688017c664df31ddd94dd6864018bf425559a995be2f4e58228c117810b9e16e800c433687cc5f0ce91e3dfba0bf30500fd927b04071c0d440fbfdf5981c549580503225aecbc80eacc1d7b8f1c817f77b4102f11d8eae64851f68f33ef0a2d5b6b0aa0e0163d425963d679165a3f6ea8e3e14897fa92db9b10c877da54963f94e65941a61fd497f830e4400fdf76866ca5804bcf7cddf5ac6d69c2ad35adea35894237469bd58eda6bfadd1b90e27e1dbc4ab71022d65729d79e29c645790c4498606aab1c5a16d229804101b5bf902a038bb06badd48acc95395e5007f7fbb9e1c48759a880c8063419673c9e141c1560ecd6d9b0a7c30db44ffab6ac9df88003471046f6644dec471330f8c17f512b39925a7cb68f947ec63536af90aa4123a721eba161db39dd723889418aa6b5566e3a00131113c83b506b1530bb6f6b0385c5f96fdda5783722731e5a5dc59f1f6eb0a6582defb332d0f5a072fb0f8307e9d44b76657e9626d3b3a9012630be2fe9ca1416576471409c4c46137847052c59b8bc3cca9768fa6e69135cfe9af1d922016442435b4b421e7671accab427bc7fcfae4c06158b1dda8b33c26f64844d6bbe4931476535f71e1e9da12b0ff66b2312a39eb005f907fc415d15b9b69e16ca4e791d77df693723a21c9421df704a3468b0fcb17559acebcf0bd8aba20c0825438e447b77708f0f088b958db53d6c56ff1d5e4a2da216defd1f24228e96b3162b8e9b2267e8547d714da57fea328ad30986406fa76c4eea7eff2b70ac1f3ca6d1af6c934991b5d554917c5a2927758e7ac9398a2a3376140a55a1050053a467bf29ea843f950c7ecd4059667bac2710db16e44b3bcd58103959a20eff24e89283303e7b4af0cef7fb34a4af4d18bee42d2280ec583313346c0652067d4802ced4ccc358d7db78aa3db2952247f306ec545c410ed446176f99f59e2e4a2bdbcc9ee18726fc5ddd1469bf22cc9cbfff580c9e6f7e89bea9cd8734e7d089a8ea5c6baa9e219ba109d0641bb1bbf95b74700be488e20fd7aa2b63a1ec0ab84c25ca70283ddaa721b706ae6c318695d7955a5c9a2a29fa51dc89dc141c880bc2f9a70e0f4024914789b4f8b3649d3ed32f2370d69ae5493a11e4ce8303651004461693753414ea73f18848cef7136c55f0f12e3b57ed5b5fc5cf3c812f90663e8862555489e15d27f7c61ec0f24f0d8066eb7806105ec21bec1fafb601c8b796d5c97b47dd73dfba838d46e8fa5c4012dc0a7e349209a5286307814ccf4b649386e8e43043a4a483838e499cc1c17170cdd8b8349a68c10f0debb898006ab15751b792ac8a30b207170d001ce09da14215a0081546f5bd233180bd7ae5537abca9b96c22e5d3ffda5ae6039aad3ed5b602a3089865358a861f62f3c10a4cbdc28d85d44e27e43d51e6209d107ca02264cbf578cc3e4355c4fc424a60cb960ad34343a39dd18f6fe16feb177d4f1c7e76e60c5a9ccf562da933cb021e7d2b3b559d6d9c9e4e7a5e706db3f152b4e2e55a38aed79026a97e975fb084217a991f747b448f72a6df5dda6ede4ad21ee4cdd295778fb39eb7937406f4e532f380d5c096826a1328783726996d6d5535ec0b4279ef4fbbb774e02e95028c6259967b8cc9adb9eac7ebab5afdc798fd96e862da11f1b22dca6dd81a979dd3eaa1c21525d88cf292c8d9fddd7dcb3c11fe8c16e8682cde86e7b5fe1a175056b21befc289e4a8e0468091e68c1b3cc5521a227c39a0c6ebfd0f3e07130eb6ec65a11a86e874d76fcbe14d10f3204d2588e3423fb4bed1d2255d0c2a44b180163b3eb6cbfe316ad6ffe32aa132d965f16d3d6855fa2b5fd2030c6b4e09bee7100f5dd8c568c351a6f8ce5b073789a7e6b3da6676bfc5a95225704e42089bc165ed6d7d3f0b24b8c7156addcb259e0e2cc5a80070a4ced7deb9aca1213a544af2675a2aa7b7799376cfe83fff1d390fa849d0325404e41769050871b2590b57e070ba45f041691d5473d0a1f8d1b6edc18385c5ec7c8de7d901d8134b612a3a48c89e0d26eb3c77463c1f2795dfd0a66ec629bf527c11509302e19ae5e9ed2d813deab622fca1e374bbfac77081a76e39411e6c029e8452dd824035ba4983ac7984ad7ec5f31285072f91a3c19a914843ae27228b54b12d1bfa34b24c1eeee8d535f3a4a9817c417e5c561f034141b19d06d8dff8e1ae49702de5a04de2b386d0e6c0b814ffa39772c7d6fc3598efb281cd3e238ed80bdbfa1c2e58d116aa7d78f1008838f43599f78a19ad90382938e1d28d9fd1faf0ad750558c092c777d87ee85ba2d3b3e87275b0390c9281257bc83173d8919db3d430462605e932e83b1e25650b87e17280a5a78f66e2100d0cbaa5639f9038e040ad8b2d4f3958923b0f4c2c954a67b10d6a8fd135fdaa4f751c67ad5bdfbc62bc3ae4e3a2ab9cc4b5e962470f7ff90e8b63cb8b28b18f475a72b729e608acdbe1af2c30daf6059423d092e789f8cc3c3e4d957dfb90b8011c9a107d1058e7f4d4b2d19d79ce59386532f5704c4863d1a3cfe4c4328fc9ea1afad3c20a9d11be5ac8661254292a91a873b8e69b69ed8a9e8000cfdc2c591f88e8fb193ce1b5c68f847205ee1f444fdc2832d7b50bf3bf6ba7eb593f5c0163c0066c43404ce7c617cf448643e251b84f741089598e1355d79d682ff9f36c2d6945bc40b19d0f03ca75722b87064178457b160a493164ff6accfe912d4d62eadefef88bdbbb5d8ac4a625e5d16f8de172ea181292aac4f1b7561858e874d756bef0a74c9d4a193f9fb70720f26041e531dc76925503594fe98c1314e2cfd49c7d0fb994ab04641067806c3d3d81ccd727db3cfd2a2761ba30657", 0x1000, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000002280)={0x0, r2, r3}, &(0x7f00000022c0)=""/4096, 0x1000, &(0x7f0000003300)={&(0x7f00000032c0)={'mcryptd(digest_null)\x00'}}) utimes(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={{}, {0x77359400}}) r4 = mq_open(&(0x7f00000033c0)='user\x00', 0x40, 0x3, &(0x7f0000003400)={0x80000001, 0x3, 0x4, 0xe1}) mq_timedsend(r4, &(0x7f0000003440)="0d0368a25aff5890d9679df20044acdbf1625c778a08c938a5f556309cd10cb65dcada55e3aea39060a10ecd1b939447415538985340345464cf0823b3c5cd5f583086ddcb6f30e50066465a1409686825c7e612ff6040a02a94989113d30e986fb576243e7e053d00f80b4dfe0f7724ebfc3860998c6c34577a7f49dab6266bca", 0x81, 0xffff, &(0x7f0000003500)={0x0, 0x989680}) r5 = fcntl$getown(r0, 0x9) sched_setscheduler(r5, 0x0, &(0x7f0000003540)=0x9a) keyctl$session_to_parent(0x12) rmdir(&(0x7f0000003580)='./file0\x00') mq_notify(r4, &(0x7f00000035c0)={0x0, 0x11, 0x2, @tid=r5}) r6 = add_key(&(0x7f0000003600)='rxrpc_s\x00', &(0x7f0000003640)={'syz', 0x0}, &(0x7f0000003680)="a2ff464a4c00e54f909826c14bbd6d5283041ea213953d76", 0x18, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f00000036c0)='trusted\x00', &(0x7f0000003700)={'syz', 0x3}, 0xfffffffffffffffe) mq_notify(r0, &(0x7f0000003740)={0x0, 0x18, 0x0, @tid=r5}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000003780)=0xffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r7 = accept4$unix(r1, &(0x7f00000037c0)=@abs, &(0x7f0000003840)=0x6e, 0x80800) getpeername$unix(r7, &(0x7f0000003880), &(0x7f0000003900)=0x6e) sched_getattr(r5, &(0x7f0000003940)={0x38}, 0x38, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003980)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, &(0x7f00000039c0)=""/235) socket$nl_generic(0x10, 0x3, 0x10) futimesat(r8, &(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)={{0x77359400}, {0x77359400}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000003b40)=""/4096, &(0x7f0000004b40)=0x1000) r9 = getegid() syz_fuse_handle_req(r8, &(0x7f0000004b80)="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", 0x2000, &(0x7f0000007a40)={&(0x7f0000006b80)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x2, 0x800000, 0x2, 0x6ee5, 0x0, 0x5, 0x0, 0x0, 0x20, 0xf}}, &(0x7f0000006c00)={0x18, 0x0, 0x7, {0x7}}, &(0x7f0000006c40)={0x18, 0x0, 0x5, {0x1}}, &(0x7f0000006c80)={0x18, 0xfffffffffffffff5, 0x1, {0x3}}, &(0x7f0000006cc0)={0x18, 0xfffffffffffffffe, 0x2, {0x5}}, &(0x7f0000006d00)={0x28, 0x0, 0xfffffffffffffffb, {{0xa, 0x800, 0x2, r5}}}, &(0x7f0000006d40)={0x60, 0xffffffffffffffda, 0x0, {{0x1, 0x3, 0x3, 0x6, 0x24000000, 0x9, 0x2b, 0x7}}}, &(0x7f0000006dc0)={0x18, 0x0, 0x6, {0x3}}, &(0x7f0000006e00)={0x18, 0xfffffffffffffff5, 0x7, {'trusted\x00'}}, &(0x7f0000006e40)={0x20, 0xfffffffffffffffe, 0x7, {0x0, 0xb}}, &(0x7f0000006e80)={0x78, 0x0, 0x2, {0xffffffffffff8000, 0xcd48d0d, 0x0, {0x2, 0xbed, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x6, 0xffffffff, 0x5, 0x4000, 0x8, 0xee01, r9, 0x9, 0x1b}}}, &(0x7f0000006fc0)={0x90, 0x0, 0xdc54, {0x5, 0x1, 0x9, 0x9, 0x7, 0xfffffffa, {0x2, 0x3, 0x9, 0x5, 0x4c6d008f, 0x2fb, 0x57, 0x1, 0x8001, 0xc000, 0x10001, 0x0, 0x0, 0xd, 0x1}}}, &(0x7f0000007080)={0xf0, 0x7d20477682588c90, 0x1, [{0x3, 0xfffffffffffffff8, 0x1, 0x4, '\x00'}, {0x6, 0x3, 0x3, 0xd, 'syz'}, {0x6, 0xfffffffffffff000, 0x3, 0x6, 'syz'}, {0x1, 0x7, 0x5, 0x401, '.+!^\x00'}, {0x3, 0x1, 0x3, 0x5, 'syz'}, {0x6, 0x7, 0x6, 0x2, '\'}~&/&'}, {0x0, 0x1, 0x4, 0x7ff, '$\x03*+'}]}, &(0x7f0000007500)={0x2a0, 0x0, 0x625, [{{0x0, 0x2, 0x9, 0x2, 0x400, 0x401, {0x6, 0xfffffffffffffffe, 0xe000, 0x9, 0x2, 0x10000, 0xfffffff5, 0x3, 0x3ff, 0x2000, 0x9, 0xffffffffffffffff, 0x0, 0x8, 0xfffffff9}}, {0x6, 0x3ff, 0x15, 0x3, 'mcryptd(digest_null)\x00'}}, {{0x3, 0x3, 0xff, 0x6, 0x3, 0x4b5e, {0x2, 0x3, 0x9, 0x8000000000000000, 0x6, 0x3, 0x2, 0xd7c4, 0x3, 0xc000, 0x7fff, 0x0, 0x0, 0x2, 0x6}}, {0x0, 0x0, 0x1, 0x8001, ']'}}, {{0x6, 0x2, 0x8, 0x0, 0x1, 0x4, {0x6, 0x2, 0x0, 0xe94, 0x5, 0x3ff, 0x5, 0x8, 0x1ff, 0xc000, 0x4, 0x0, 0xee00, 0xd1, 0xc}}, {0x3, 0x9a, 0x0, 0x9}}, {{0x2, 0x3, 0x1, 0x7, 0x1, 0x0, {0x7, 0x7, 0x400, 0x6, 0x7fffffffffffffff, 0x8, 0x3ff, 0xa, 0x0, 0x4000, 0x2f9f, 0x0, 0xffffffffffffffff, 0x8, 0xec1a}}, {0x6, 0x8000000000000000, 0x10, 0x1ff, '\xd6%-\\)[{\xc0-{}*-*).'}}]}, &(0x7f0000007800)={0xa0, 0xfffffffffffffffe, 0x8, {{0x5, 0x0, 0x7, 0x6, 0x9, 0xa, {0x6, 0x7, 0x4, 0x3f, 0x80000001, 0x5, 0xb4, 0x7, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x3, 0x5000000}}, {0x0, 0x2}}}, &(0x7f00000078c0)={0x20, 0x0, 0x2, {0x8, 0x0, 0x800, 0x5}}, &(0x7f0000007900)={0x130, 0x0, 0x8, {0x8, 0x2, 0x0, '\x00', {0x40, 0x5, 0x4, 0x5, 0x0, 0xee00, 0xc000, '\x00', 0x8, 0x6, 0xfffffffffffffff8, 0x1, {0x7fff, 0x4}, {0x9, 0x5}, {0xfffffffffffffffb, 0x2479}, {0x3}, 0x9, 0x80000001, 0x2, 0x7}}}}) 565.886412ms ago: executing program 1 (id=1765): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x28800, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00'}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="002205000000e4fa79f7"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x21, 0x86, {0x86, 0x1d, "0805aaebd024a88d73b0013708b09e6df2be4dfbcf0d07b2568b6cafd7dd8bd626028f995f1da554abe20355d1ccee46dcce8cfcf16f78414991f1838b3aa6e5cc245f7461ea86bcaa0da4001ea0eeeaee4456e884d1ad4ca83b57a6d33e55bfb6dbc0d2b191c307d1ca17f315f3df0a5026206b188dafca15ab48ba8739945106674226"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003880000008803a283e0391ccae2c7b88c7787030eea9cb2b94d51bbebd8ba855eb4b77260ca5a5b4b481e54bdb754c2a8c13c6a9890b0ca806d246eca7fdf6e65b60821e79a6af77e09a2db4d37b6901d2eb83cebcf07941a608c8c02009eb9982637ecd77554710380d90456ed656d13e395de11df1aa0a51b33c387f62a12b3ad077d9ba0deecf2616750947382dcce12f1a2145ae56567a9142d2e76460676bb1a4a2b6b75af6bdb414844f226608be1158273198b500a7ccd9c"], &(0x7f0000000240)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xa, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x1ff, 0xf, 0x7, [0x3f00, 0xffffcf, 0x7f8000, 0xffc000]}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x1678, 0xff00, 0x80, [0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x7f, 0x40, 0x5e}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d7f5b2d44717d4ec1aab66443b523c16"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x9, 0x6, "cddbe6b7", "b9baabe5"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}}}, &(0x7f0000000780)={0xfffffffffffffdc2, &(0x7f0000000340)={0x0, 0xe, 0x3e, "199f46c5d927ea9caa15f0dcda300e91817902fad7cefd578c8286a38a9ef121623238d3c5d6f93e4afcc80cf7630e00fbfc66b12756fab8a75078e25f5a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000180)=ANY=[@ANYBLOB="20001b0000004f4b8fd6cf010002ddaa23e3f2"], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "76cc"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="110a8826b246"}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ea61"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 385.0533ms ago: executing program 3 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={0x24, r1, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x24}}, 0x0) 310.723037ms ago: executing program 3 (id=1767): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001140)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0xfffffffffffffeed) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000006c0)={0x7, 0x4, &(0x7f00000001c0)=[0x1ab, 0x3, 0x8, 0x57], &(0x7f0000000600)=[0x9, 0x5, 0x8, 0x8], &(0x7f0000000640)=[0xf40, 0x0, 0x1], &(0x7f0000000680)=[0x3]}) creat(&(0x7f0000000140)='./bus\x00', 0xb0) mount(&(0x7f0000000380)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000340)='discard') r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@wr_crn={0x46, 0x20, {0x3, 0x1}}, @out_dx={0xaa, 0x28, {0x4876, 0x1, 0x6}}, @wrmsr={0x1e, 0x20, {0x4c9, 0x7fff}}, @out_dx={0xaa, 0x28, {0x14f1, 0x2, 0x800}}, @wr_drn={0x6e, 0x20, {0x3}}, @wrmsr={0x1e, 0x20, {0xac0, 0x5}}, @set_irq_handler={0xbe, 0x20, {0xc}}, @in_dx={0x82, 0x20, {0x9171}}, @wrmsr={0x1e, 0x20, {0xb82, 0x200008000}}, @out_dx={0xaa, 0x28, {0x711f, 0x3, 0x7}}, @set_irq_handler={0xbe, 0x20, {0xff, 0x2}}, @code={0xa, 0x5c, {"66bad104ec0f0736f3460fc777000fc758860fc71cfb66baf80cb853efc483ef66bafc0cec0fc75900660f3882a487fc8f000066baf80cb8347c798eef66bafc0cb800680000ef66f30f07"}}, @uexit={0x0, 0x18, 0x81}, @out_dx={0xaa, 0x28, {0x1634, 0x0, 0x1fe}}, @in_dx={0x82, 0x20, {0xacb, 0x2}}, @in_dx={0x82, 0x20, {0x614c, 0x6}}, @rdmsr={0x32, 0x18, {0xab2}}, @wrmsr={0x1e, 0x20, {0x24a, 0x2}}, @wrmsr={0x1e, 0x20, {0xc0011033, 0x1}}, @wrmsr={0x1e, 0x20, {0xad0, 0x6}}, @code={0xa, 0x87, {"c4e25bf7460dc481fd7f2d0030000048b8e8142a31000000000f23c80f21f835040000000f23f8b908090000b801000000ba000000000f30c4c185f4e4b9800000c00f3235000400000f30670f01c5c744240043263bc1c744240209000000c7442406000000000f011c246666460f3805ed660fe9d4"}}], 0x353}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="f70fc735bdbdf40fc7b798e22ef30f5cc5baf80c66b860e5a78566ef66b9720000400f32edba4100b80900ef360f78bcd78c0f7935fe0466b98400004066e8a800990066ba000000000f30", 0x4b}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 182.073105ms ago: executing program 3 (id=1768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809004001fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 159.523044ms ago: executing program 3 (id=1769): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7a492786d21bc2d4af04d91800f2ff58782ca8c6f9dfaebf021e9ca08126caf224d913f49750b4c602aef5586a48ad07b22fe4a67e193b6e1b525cc81c4e8cfe4feee5c31ea64bed9ef5f0edc6b248c168ac22c713b2fae7c9e8095e97857fd362f360c4ee80a19f623707b658fec7ad23f37cc50e82b5baebc3bdbb9e305b4dc29672d345033beffe6eff0000000000000000", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x1}, {0x8, 0x8, 0xfffffffe}, {0x3ff, 0x80000000}, {0x1000}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 3 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x3, 0x3a) write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000400aaff0200000000000030000000000000013a"], 0x6e) 0s ago: executing program 3 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) (async) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x40000000) (async, rerun: 32) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r0}, 0x3, &(0x7f0000000000)=[0x80000001, 0x2, 0x7], 0x0, 0x0, 0x1}) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd2b, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x81, 0x10, 0x400, 0xc5c1, 0x40, 0x8, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) kernel console output (not intermixed with test programs): 353.718104][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 353.725472][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 353.729831][ T5871] usb 4-1: config 0 descriptor?? [ 353.753640][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 353.762393][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 353.778429][ T5879] usb 3-1: can't read configurations, error -61 [ 353.789261][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.809482][ T5879] usb usb3-port1: attempt power cycle [ 353.818694][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.843206][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 353.859833][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.888305][ T9] usb 2-1: config 0 descriptor?? [ 353.913915][T10268] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1349'. [ 353.924817][T10268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1349'. [ 354.171331][ T5879] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 354.219180][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 354.229689][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 354.250040][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 354.265763][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.278234][ T5879] usb 3-1: can't read configurations, error -61 [ 354.284844][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.305208][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.307670][ T9] ft260 0003:0403:6030.0012: unknown main item tag 0x7 [ 354.325729][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.355807][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.365173][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.373652][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.383148][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.390851][ T5871] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 354.399394][ T5871] cougar 0003:060B:500A.0011: unexpected long global item [ 354.407696][ T5871] cougar 0003:060B:500A.0011: parse failed [ 354.414071][ T5871] cougar 0003:060B:500A.0011: probe with driver cougar failed with error -22 [ 354.459932][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 354.499659][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 354.505685][ T9] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 354.514496][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 354.536809][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 354.543484][T10283] netlink: 'syz.4.1353': attribute type 2 has an invalid length. [ 354.546062][ T5879] usb 3-1: can't read configurations, error -61 [ 354.568778][ T5879] usb usb3-port1: unable to enumerate USB device [ 354.696774][ T794] usb 4-1: USB disconnect, device number 19 [ 354.706462][ T9] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 354.916320][ T9] ft260 0003:0403:6030.0012: failed to retrieve status: -71, no wakeup [ 354.929567][ T9] ft260 0003:0403:6030.0012: failed to retrieve status: -71 [ 354.939576][ T9] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 354.991549][ T9] usb 2-1: USB disconnect, device number 21 [ 355.068291][ T5879] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 355.218269][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 355.225752][ T5879] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 355.235368][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.245462][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.255641][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.265808][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.285180][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.295027][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.516717][ T5879] usb 5-1: usb_control_msg returned -32 [ 355.523823][ T5879] usbtmc 5-1:16.0: can't read capabilities [ 356.061353][T10298] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 356.231518][T10300] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 356.298381][ T794] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 356.387889][T10308] block nbd3: NBD_DISCONNECT [ 356.433916][ T9] usb 5-1: USB disconnect, device number 52 [ 356.471829][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.493149][ T794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 356.511249][ T794] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 356.538976][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.547116][ T794] usb 3-1: Product: syz [ 356.552678][ T794] usb 3-1: Manufacturer: syz [ 356.557438][ T794] usb 3-1: SerialNumber: syz [ 356.568832][ T794] usb 3-1: config 0 descriptor?? [ 356.577867][ T794] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 356.594403][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.608906][ T794] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 356.631748][ T794] usb 3-1: media controller created [ 356.638360][ T5871] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 356.662527][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.669850][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 356.725697][ T794] DVB: Unable to find symbol tda10046_attach() [ 356.734787][ T794] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 356.744616][ T794] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 356.776330][ T794] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 356.792529][ T794] usb 3-1: USB disconnect, device number 24 [ 356.811771][ T5871] usb 4-1: config index 0 descriptor too short (expected 64706, got 72) [ 356.831240][ T5871] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.841719][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.850192][ T5871] usb 4-1: Product: syz [ 356.854391][ T5871] usb 4-1: Manufacturer: syz [ 356.859402][ T5871] usb 4-1: SerialNumber: syz [ 356.874797][ T5871] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.896337][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.950360][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 357.014252][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 357.098783][ T5879] usb 4-1: USB disconnect, device number 20 [ 357.111605][ T9] usb 2-1: config index 0 descriptor too short (expected 49, got 36) [ 357.123822][ T9] usb 2-1: config 0 interface 0 altsetting 97 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.136346][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.150156][ T9] usb 2-1: New USB device found, idVendor=0df2, idProduct=1421, bcdDevice= 5.33 [ 357.178145][ T9] usb 2-1: New USB device strings: Mfr=122, Product=117, SerialNumber=0 [ 357.193439][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 357.194014][ T9] usb 2-1: Product: syz [ 357.218655][ T9] usb 2-1: Manufacturer: syz [ 357.236686][ T9] usb 2-1: config 0 descriptor?? [ 357.478309][ T794] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 357.628138][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 357.634066][ T794] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 357.654318][ T794] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 357.662344][ T794] usb 5-1: can't read configurations, error -61 [ 357.795536][T10330] syzkaller1: entered promiscuous mode [ 357.801320][T10330] syzkaller1: entered allmulticast mode [ 357.811439][ T794] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 357.969950][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 357.976021][ T794] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 357.993465][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 358.003956][ T43] ath9k_htc: Failed to initialize the device [ 358.010330][ T794] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 358.019368][ T5879] usb 4-1: ath9k_htc: USB layer deinitialized [ 358.019390][ T794] usb 5-1: can't read configurations, error -61 [ 358.019864][ T794] usb usb5-port1: attempt power cycle [ 358.119819][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 358.326420][T10339] cgroup: subsys name conflicts with all [ 358.388348][ T794] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 358.405678][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 358.422491][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 358.427829][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 358.440116][ T794] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 358.469325][ T9] usb 2-1: USB disconnect, device number 22 [ 358.490215][ T794] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 358.502170][ T794] usb 5-1: can't read configurations, error -61 [ 358.638216][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 358.648229][ T794] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 358.670304][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 358.676322][ T794] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 358.687443][ T794] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 358.695954][ T794] usb 5-1: can't read configurations, error -61 [ 358.703053][ T794] usb usb5-port1: unable to enumerate USB device [ 358.744541][T10350] sctp: [Deprecated]: syz.2.1379 (pid 10350) Use of int in max_burst socket option deprecated. [ 358.744541][T10350] Use struct sctp_assoc_value instead [ 358.808436][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 358.815987][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 358.825043][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.835465][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.838612][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.846156][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.865547][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.885510][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.895385][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.048114][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 359.055177][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 359.064697][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.074800][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.128074][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.140032][ T43] usb 4-1: usb_control_msg returned -32 [ 359.146607][ T43] usbtmc 4-1:16.0: can't read capabilities [ 359.149486][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.198105][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.207362][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.447656][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.457851][ T9] usb 2-1: usb_control_msg returned -32 [ 359.466328][ T9] usbtmc 2-1:16.0: can't read capabilities [ 359.475862][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.528114][ T794] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 359.679008][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 359.694031][ T794] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 359.704069][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.712560][ T794] usb 3-1: Product: syz [ 359.717041][ T794] usb 3-1: Manufacturer: syz [ 359.722343][ T794] usb 3-1: SerialNumber: syz [ 359.732253][ T794] usb 3-1: config 0 descriptor?? [ 359.742640][ T794] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 359.746321][ T9] usb 2-1: USB disconnect, device number 23 [ 359.854655][T10375] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 360.056556][ T5918] usb 4-1: USB disconnect, device number 21 [ 360.209161][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 360.368216][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 360.375909][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 360.384943][ T9] usb 2-1: config 0 has no interface number 0 [ 360.391625][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 360.401938][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.411621][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.419737][ T9] usb 2-1: Product: syz [ 360.423955][ T9] usb 2-1: Manufacturer: syz [ 360.428685][ T9] usb 2-1: SerialNumber: syz [ 360.436257][ T9] usb 2-1: config 0 descriptor?? [ 360.445869][ T9] smsc75xx v1.0.0 [ 360.657089][T10383] can0: slcan on ptm0. [ 360.946573][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.966126][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.985224][ T794] gspca_sonixj: reg_w1 err -71 [ 361.078299][ T794] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 361.089526][ T794] usb 3-1: USB disconnect, device number 25 [ 361.321066][T10381] can0 (unregistered): slcan off ptm0. [ 361.465729][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 361.673130][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 361.710768][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 361.726294][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 361.738914][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 361.768366][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 361.782636][ T9] usb 2-1: USB disconnect, device number 24 [ 361.938595][ T5918] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 362.140989][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 362.171828][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.209520][ T5918] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 362.235661][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 362.244919][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.259435][ T5918] usb 3-1: Product: syz [ 362.263874][ T5918] usb 3-1: Manufacturer: syz [ 362.269605][ T5918] usb 3-1: SerialNumber: syz [ 362.304497][ T5918] usb 3-1: config 0 descriptor?? [ 362.547332][ T5918] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 362.560171][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 362.560406][ T5918] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 362.588436][ T5918] usb 3-1: USB disconnect, device number 26 [ 362.639210][ T5878] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 362.728187][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 362.734142][ T9] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 362.744557][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 362.752399][ T9] usb 5-1: can't read configurations, error -61 [ 362.808214][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 362.814938][ T5878] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 362.823436][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.833981][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.843904][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.853888][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.867161][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.876641][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.908401][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 362.938786][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 363.068356][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 363.074445][ T9] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 363.084855][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.092767][ T9] usb 5-1: can't read configurations, error -61 [ 363.099588][ T5878] usb 4-1: usb_control_msg returned -32 [ 363.105330][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 363.108877][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 363.112018][ T9] usb usb5-port1: attempt power cycle [ 363.122986][ T5918] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 363.137253][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.150051][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.160281][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.171543][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.185003][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.194391][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.410806][ T5918] usb 3-1: usb_control_msg returned -32 [ 363.416792][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 363.458282][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 363.488950][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 363.495057][ T9] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 363.505935][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.514830][ T9] usb 5-1: can't read configurations, error -61 [ 363.550565][T10452] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1399'. [ 363.562233][T10450] nfs: Unknown parameter '¸' [ 363.648237][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 363.680166][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 363.686115][ T9] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 363.696511][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.704487][ T9] usb 5-1: can't read configurations, error -61 [ 363.711490][ T9] usb usb5-port1: unable to enumerate USB device [ 363.778229][ T5918] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 363.805315][T10454] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 363.908801][ T5918] usb 2-1: device descriptor read/64, error -71 [ 364.007448][ T9] usb 4-1: USB disconnect, device number 22 [ 364.114418][T10455] FAULT_INJECTION: forcing a failure. [ 364.114418][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 364.127346][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.2.1398 Not tainted syzkaller #0 PREEMPT(full) [ 364.127379][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.127399][T10455] Call Trace: [ 364.127410][T10455] [ 364.127416][T10455] dump_stack_lvl+0x189/0x250 [ 364.127446][T10455] ? __pfx____ratelimit+0x10/0x10 [ 364.127468][T10455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.127488][T10455] ? __pfx__printk+0x10/0x10 [ 364.127511][T10455] ? __pfx___might_resched+0x10/0x10 [ 364.127534][T10455] should_fail_ex+0x414/0x560 [ 364.127561][T10455] should_failslab+0xa8/0x100 [ 364.127587][T10455] __kmalloc_noprof+0xdf/0x800 [ 364.127606][T10455] ? kfree+0x4d/0x6d0 [ 364.127622][T10455] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.127647][T10455] tomoyo_realpath_from_path+0xe3/0x5d0 [ 364.127668][T10455] ? tomoyo_domain+0xd8/0x130 [ 364.127692][T10455] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 364.127713][T10455] tomoyo_path_number_perm+0x1e8/0x5a0 [ 364.127737][T10455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 364.127803][T10455] ? __fget_files+0x2a/0x420 [ 364.127826][T10455] ? __fget_files+0x3a0/0x420 [ 364.127842][T10455] ? __fget_files+0x2a/0x420 [ 364.127863][T10455] security_file_ioctl+0xcb/0x2d0 [ 364.127889][T10455] __se_sys_ioctl+0x47/0x170 [ 364.127914][T10455] do_syscall_64+0xfa/0xfa0 [ 364.127943][T10455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.127965][T10455] ? clear_bhb_loop+0x60/0xb0 [ 364.127990][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.128009][T10455] RIP: 0033:0x7f203af8f6c9 [ 364.128030][T10455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.128048][T10455] RSP: 002b:00007f203be5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.128071][T10455] RAX: ffffffffffffffda RBX: 00007f203b1e6180 RCX: 00007f203af8f6c9 [ 364.128086][T10455] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 364.128099][T10455] RBP: 00007f203be5e090 R08: 0000000000000000 R09: 0000000000000000 [ 364.128112][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.128125][T10455] R13: 00007f203b1e6218 R14: 00007f203b1e6180 R15: 00007ffd91fd6db8 [ 364.128158][T10455] [ 364.361152][T10455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.365061][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 364.498150][ T5918] usb 2-1: device descriptor read/64, error -71 [ 364.608885][ T5918] usb usb2-port1: attempt power cycle [ 364.948660][ T5918] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 364.958109][ T794] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 364.968781][ T5918] usb 2-1: device descriptor read/8, error -71 [ 365.108385][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 365.116014][ T794] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 365.126400][ T794] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.137314][ T794] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.147459][ T794] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.158778][ T794] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.172154][ T794] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.181436][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.218133][ T5918] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 365.240551][ T5918] usb 2-1: device descriptor read/8, error -71 [ 365.348946][ T5918] usb usb2-port1: unable to enumerate USB device [ 365.398521][ T794] usb 4-1: usb_control_msg returned -32 [ 365.404219][ T794] usbtmc 4-1:16.0: can't read capabilities [ 365.647909][ T5918] usb 3-1: USB disconnect, device number 27 [ 365.754590][T10470] netlink: 'syz.4.1406': attribute type 7 has an invalid length. [ 365.762867][T10470] netlink: 'syz.4.1406': attribute type 5 has an invalid length. [ 365.772124][T10470] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1406'. [ 366.108381][ T794] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 366.119547][T10477] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 366.268133][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 366.276132][ T794] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.284963][ T794] usb 5-1: config 0 has no interface number 0 [ 366.291389][ T794] usb 5-1: config 0 interface 184 has no altsetting 0 [ 366.300876][ T794] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.310135][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.318498][ T794] usb 5-1: Product: syz [ 366.322912][ T794] usb 5-1: Manufacturer: syz [ 366.327608][ T794] usb 5-1: SerialNumber: syz [ 366.335935][ T794] usb 5-1: config 0 descriptor?? [ 366.351863][ T794] smsc75xx v1.0.0 [ 366.738217][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 366.853425][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 366.888236][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 366.896744][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 366.905320][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.916081][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.926037][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.936060][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.949312][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.958588][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.108403][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 367.175524][ T9] usb 2-1: usb_control_msg returned -32 [ 367.181494][ T9] usbtmc 2-1:16.0: can't read capabilities [ 367.268399][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 367.274419][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 367.284803][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 367.292696][ T43] usb 3-1: can't read configurations, error -61 [ 367.362564][ T794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 367.428192][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 367.578242][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 367.584392][ T794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 367.596887][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 367.604911][ T794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 367.615442][ T794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 367.626479][ T794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 367.637318][ T794] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.646223][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 367.656723][ T43] usb 3-1: can't read configurations, error -61 [ 367.664478][ T794] usb 5-1: USB disconnect, device number 61 [ 367.671142][ T43] usb usb3-port1: attempt power cycle [ 367.741302][ T5871] usb 4-1: USB disconnect, device number 23 [ 368.018310][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 368.038811][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 368.044659][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 368.055091][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.062994][ T43] usb 3-1: can't read configurations, error -61 [ 368.151587][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.168201][T10495] serio: Serial port ptm0 [ 368.198506][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 368.230332][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 368.237380][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 368.251474][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.259728][ T43] usb 3-1: can't read configurations, error -61 [ 368.266678][ T43] usb usb3-port1: unable to enumerate USB device [ 368.268191][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 368.438227][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 368.445647][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 368.458115][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.474455][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.485190][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.495773][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.509107][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.518296][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.731561][ T9] usb 4-1: usb_control_msg returned -32 [ 368.737280][ T9] usbtmc 4-1:16.0: can't read capabilities [ 369.439953][T10508] FAULT_INJECTION: forcing a failure. [ 369.439953][T10508] name failslab, interval 1, probability 0, space 0, times 0 [ 369.457216][T10508] CPU: 1 UID: 0 PID: 10508 Comm: syz.3.1414 Not tainted syzkaller #0 PREEMPT(full) [ 369.457250][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.457265][T10508] Call Trace: [ 369.457275][T10508] [ 369.457286][T10508] dump_stack_lvl+0x189/0x250 [ 369.457316][T10508] ? __pfx____ratelimit+0x10/0x10 [ 369.457340][T10508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.457361][T10508] ? __pfx__printk+0x10/0x10 [ 369.457387][T10508] ? __pfx___might_resched+0x10/0x10 [ 369.457406][T10508] ? fs_reclaim_acquire+0x7d/0x100 [ 369.457435][T10508] should_fail_ex+0x414/0x560 [ 369.457465][T10508] should_failslab+0xa8/0x100 [ 369.457494][T10508] __kmalloc_noprof+0xdf/0x800 [ 369.457517][T10508] ? tomoyo_encode+0x28b/0x550 [ 369.457544][T10508] tomoyo_encode+0x28b/0x550 [ 369.457569][T10508] tomoyo_realpath_from_path+0x58d/0x5d0 [ 369.457600][T10508] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 369.457618][T10508] tomoyo_path_number_perm+0x1e8/0x5a0 [ 369.457638][T10508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.457706][T10508] ? __fget_files+0x2a/0x420 [ 369.457731][T10508] ? __fget_files+0x3a0/0x420 [ 369.457749][T10508] ? __fget_files+0x2a/0x420 [ 369.457773][T10508] security_file_ioctl+0xcb/0x2d0 [ 369.457802][T10508] __se_sys_ioctl+0x47/0x170 [ 369.457831][T10508] do_syscall_64+0xfa/0xfa0 [ 369.457864][T10508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.457881][T10508] ? clear_bhb_loop+0x60/0xb0 [ 369.457903][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.457920][T10508] RIP: 0033:0x7f4b5f58f6c9 [ 369.457937][T10508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.457952][T10508] RSP: 002b:00007f4b5d7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.457978][T10508] RAX: ffffffffffffffda RBX: 00007f4b5f7e6180 RCX: 00007f4b5f58f6c9 [ 369.457993][T10508] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 369.458007][T10508] RBP: 00007f4b5d7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.458019][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.458031][T10508] R13: 00007f4b5f7e6218 R14: 00007f4b5f7e6180 R15: 00007ffde90d2c58 [ 369.458066][T10508] [ 369.715747][T10508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.731423][ T43] usb 2-1: USB disconnect, device number 29 [ 369.758827][T10508] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 369.960915][ T5871] usb 4-1: USB disconnect, device number 24 [ 370.078241][ T43] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 370.238099][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.246192][ T43] usb 2-1: config 0 has no interface number 0 [ 370.262142][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 370.277274][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 370.288870][ T5918] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 370.296793][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.306627][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.319934][ T43] usb 2-1: config 0 descriptor?? [ 370.328936][T10511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 370.356788][ T43] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 370.470304][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.481450][ T5918] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 370.490677][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.510106][ T5918] usb 3-1: config 0 descriptor?? [ 370.561488][ T9] usb 2-1: USB disconnect, device number 30 [ 370.567645][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 370.858221][ T5879] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 370.938666][ T5918] hid-corsair-void 0003:1B1C:0A51.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:0a51] on usb-dummy_hcd.2-1/input0 [ 371.008472][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 371.018263][ T5878] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 371.029966][ T5879] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 371.038926][ T5879] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 371.051617][ T5879] usb 5-1: config 0 has no interface number 0 [ 371.060969][ T5879] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 371.070696][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.079274][ T5879] usb 5-1: Product: syz [ 371.083613][ T5879] usb 5-1: Manufacturer: syz [ 371.088628][ T5879] usb 5-1: SerialNumber: syz [ 371.096702][ T5879] usb 5-1: config 0 descriptor?? [ 371.109279][ T5879] usb 5-1: unsupported MDLM descriptors [ 371.136947][ T43] usb 3-1: USB disconnect, device number 32 [ 371.143540][ T794] hid-corsair-void 0003:1B1C:0A51.0013: failed to request firmware (reason: -71) [ 371.153443][ T5918] hid-corsair-void 0003:1B1C:0A51.0013: failed to request battery (reason: -71) [ 371.190514][ T5878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.199117][ T5878] usb 2-1: config 0 has no interface number 0 [ 371.206325][ T5878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 371.220222][ T5878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 371.231320][ T5878] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.240997][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.252020][ T5878] usb 2-1: config 0 descriptor?? [ 371.260596][T10511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 371.273791][ T5878] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 371.315642][T10523] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 371.325062][T10523] overlayfs: missing 'lowerdir' [ 371.337587][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.346754][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.360399][ T5918] usb 5-1: USB disconnect, device number 62 [ 371.822150][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 371.938563][ T5878] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 371.946307][T10539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 372.089647][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 372.096748][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 372.098935][ T5918] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 372.105931][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.122900][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.133061][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.144246][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.157520][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.167000][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.259599][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 372.267436][ T5918] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 372.279049][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 372.287708][ T5918] usb 4-1: can't read configurations, error -61 [ 372.318192][ T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 372.386832][ T5878] usb 3-1: usb_control_msg returned -32 [ 372.392907][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 372.428324][ T5918] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 372.488195][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 372.496005][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 372.504931][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.515298][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.525429][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.535724][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.549072][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.558340][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.608510][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 372.614798][ T5918] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 372.624928][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 372.633535][ T5918] usb 4-1: can't read configurations, error -61 [ 372.640775][ T5918] usb usb4-port1: attempt power cycle [ 372.782382][ T43] usb 5-1: usb_control_msg returned -32 [ 372.789569][ T43] usbtmc 5-1:16.0: can't read capabilities [ 372.988307][ T5918] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 373.009072][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 373.015224][ T5918] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 373.025587][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 373.033448][ T5918] usb 4-1: can't read configurations, error -61 [ 373.168283][ T5918] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 373.189382][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 373.195470][ T5918] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 373.206841][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 373.214831][ T5918] usb 4-1: can't read configurations, error -61 [ 373.221921][ T5918] usb usb4-port1: unable to enumerate USB device [ 373.589322][ T5878] usb 2-1: USB disconnect, device number 31 [ 373.838390][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'. [ 374.408168][ T5879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 374.558099][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 374.565113][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.576631][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.588841][ T5879] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 374.597951][ T5879] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 374.606142][ T5879] usb 2-1: Manufacturer: syz [ 374.614028][ T5879] usb 2-1: config 0 descriptor?? [ 374.714362][ T5918] usb 3-1: USB disconnect, device number 33 [ 375.030058][ T5879] hid_parser_main: 74 callbacks suppressed [ 375.030084][ T5879] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 375.082679][ T794] usb 5-1: USB disconnect, device number 63 [ 375.120708][ T5918] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 375.227605][ T5879] ft260 0003:0403:6030.0014: chip code: 6424 8183 [ 375.290038][ T5918] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 375.299624][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.311925][ T5918] usb 3-1: config 0 descriptor?? [ 375.427115][ T5879] ft260 0003:0403:6030.0014: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 375.518412][ T794] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 375.627954][ T5879] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 375.678316][ T794] usb 5-1: Using ep0 maxpacket: 16 [ 375.686317][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.699657][ T794] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 375.709343][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.721829][ T794] usb 5-1: config 0 descriptor?? [ 375.757145][ T5918] usb 3-1: Cannot set autoneg [ 375.763078][ T5918] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 375.784971][ T5918] usb 3-1: USB disconnect, device number 34 [ 375.844244][ T43] usb 2-1: USB disconnect, device number 32 [ 376.159742][ T794] nintendo 0003:057E:200E.0015: unknown main item tag 0x0 [ 376.178214][ T794] nintendo 0003:057E:200E.0015: unknown main item tag 0x0 [ 376.208185][ T794] nintendo 0003:057E:200E.0015: unknown main item tag 0x0 [ 376.228393][ T794] nintendo 0003:057E:200E.0015: unknown main item tag 0x0 [ 376.243950][ T794] nintendo 0003:057E:200E.0015: unknown main item tag 0x0 [ 376.277163][ T794] nintendo 0003:057E:200E.0015: hidraw0: USB HID v80.05 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 376.351533][ T794] nintendo 0003:057E:200E.0015: Failed charging grip handshake [ 376.371215][ T794] nintendo 0003:057E:200E.0015: Failed to initialize controller; ret=-110 [ 376.413054][ T794] nintendo 0003:057E:200E.0015: probe - fail = -110 [ 376.428285][ T794] nintendo 0003:057E:200E.0015: probe with driver nintendo failed with error -110 [ 376.465634][ T794] usb 5-1: USB disconnect, device number 64 [ 376.498857][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 376.530578][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 376.592951][ T5144] Bluetooth: hci1: Malformed Event: 0x13 [ 376.660469][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 376.673891][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 376.682470][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.697093][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.707482][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 376.718075][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.731486][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.741853][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.808201][ T5921] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 376.961673][ T43] usb 4-1: usb_control_msg returned -32 [ 376.968108][ T43] usbtmc 4-1:16.0: can't read capabilities [ 376.968144][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 376.989261][ T5921] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 377.006618][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 377.033561][ T5921] usb 2-1: can't read configurations, error -61 [ 377.168281][ T5921] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 377.178180][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 377.318228][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 377.324195][ T5921] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 377.334082][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 377.338170][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 377.341746][ T5921] usb 2-1: can't read configurations, error -61 [ 377.350267][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 377.354984][ T5921] usb usb2-port1: attempt power cycle [ 377.366011][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 377.383911][ T43] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 377.393427][ T43] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 377.401781][ T43] usb 3-1: Product: syz [ 377.406861][ T43] usb 3-1: Manufacturer: syz [ 377.411873][ T43] usb 3-1: SerialNumber: syz [ 377.419452][ T43] usb 3-1: config 0 descriptor?? [ 377.436662][ T43] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 377.677374][T10622] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 377.738368][ T5921] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 377.759653][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 377.765628][ T5921] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 377.775352][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 377.783236][ T5921] usb 2-1: can't read configurations, error -61 [ 377.834672][ T5878] usb 3-1: USB disconnect, device number 35 [ 377.840825][ T1059] usb 3-1: Failed to read usb control message: -71 [ 377.848301][ T1059] usb 3-1: Unable to read the bmi data from the device: -71 [ 377.855997][ T1059] usb 3-1: unable to get target info from device [ 377.864035][ T1059] usb 3-1: could not get target info (-71) [ 377.872631][ T1059] usb 3-1: could not probe fw (-71) [ 377.883254][ T43] usb 4-1: USB disconnect, device number 29 [ 377.930979][ T5921] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 377.972409][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 377.980579][ T5921] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 377.996853][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 378.005076][ T5921] usb 2-1: can't read configurations, error -61 [ 378.012110][ T5921] usb usb2-port1: unable to enumerate USB device [ 378.938653][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 378.951285][T10648] netlink: 'syz.2.1463': attribute type 83 has an invalid length. [ 379.020571][T10650] netlink: 'syz.2.1463': attribute type 83 has an invalid length. [ 379.088375][ T43] usb 4-1: device descriptor read/64, error -71 [ 379.328254][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 379.458265][ T43] usb 4-1: device descriptor read/64, error -71 [ 379.578485][ T43] usb usb4-port1: attempt power cycle [ 379.892999][T10662] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 379.919693][T10662] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1466'. [ 379.938699][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 379.971679][ T43] usb 4-1: device descriptor read/8, error -71 [ 379.972972][T10662] netlink: 'syz.2.1466': attribute type 8 has an invalid length. [ 380.018365][T10668] netlink: 'syz.1.1469': attribute type 10 has an invalid length. [ 380.026666][T10668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.054059][T10668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.075168][T10668] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 380.194434][T10679] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 380.228785][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.239547][ T5921] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 380.260095][ T43] usb 4-1: device descriptor read/8, error -71 [ 380.262174][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 380.378463][ T43] usb usb4-port1: unable to enumerate USB device [ 380.402828][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 380.420227][ T5921] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 380.428868][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.439014][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.448979][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.464357][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.481662][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.491182][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.538746][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 380.688161][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 380.694930][ T9] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 380.706612][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.714825][ T5921] usb 5-1: usb_control_msg returned -32 [ 380.720584][ T9] usb 2-1: can't read configurations, error -61 [ 380.727156][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 380.858164][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 381.018202][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 381.024291][ T9] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 381.034719][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.042632][ T9] usb 2-1: can't read configurations, error -61 [ 381.049571][ T9] usb usb2-port1: attempt power cycle [ 381.398264][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 381.416178][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1468'. [ 381.420470][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 381.432929][ T9] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 381.435205][T10691] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 381.444608][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.456333][ T9] usb 2-1: can't read configurations, error -61 [ 381.591800][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 381.618854][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 381.626706][ T9] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 381.641097][ T5918] usb 5-1: USB disconnect, device number 65 [ 381.653219][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.663123][ T9] usb 2-1: can't read configurations, error -61 [ 381.675442][ T9] usb usb2-port1: unable to enumerate USB device [ 381.909752][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 382.058249][ T5879] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 382.082096][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.090425][ T9] usb 3-1: config 0 has no interface number 0 [ 382.096574][ T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.107650][ T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.117555][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 382.126941][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.139579][ T9] usb 3-1: config 0 descriptor?? [ 382.198316][ T5879] usb 4-1: device descriptor read/64, error -71 [ 382.448154][ T5879] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 382.468280][ T5918] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 382.578199][ T5879] usb 4-1: device descriptor read/64, error -71 [ 382.618251][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 382.627170][ T5918] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 382.636267][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.646546][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.656714][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.667216][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.680737][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 382.690004][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.698677][ T5879] usb usb4-port1: attempt power cycle [ 382.751343][ T9] usbhid 3-1:0.2: can't add hid device: -71 [ 382.757708][ T9] usbhid 3-1:0.2: probe with driver usbhid failed with error -71 [ 382.771021][ T9] usb 3-1: USB disconnect, device number 36 [ 382.906022][ T5918] usb 5-1: usb_control_msg returned -32 [ 382.911853][ T5918] usbtmc 5-1:16.0: can't read capabilities [ 383.038230][ T5879] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 383.058917][ T5879] usb 4-1: device descriptor read/8, error -71 [ 383.312846][ T5879] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 383.340001][ T5879] usb 4-1: device descriptor read/8, error -71 [ 383.422149][T10709] vivid-003: ================= START STATUS ================= [ 383.432370][T10709] vivid-003: Radio HW Seek Mode: Bounded [ 383.440510][T10709] vivid-003: Radio Programmable HW Seek: false [ 383.448400][T10709] vivid-003: RDS Rx I/O Mode: Block I/O [ 383.454137][T10709] vivid-003: Generate RBDS Instead of RDS: false [ 383.461097][ T5879] usb usb4-port1: unable to enumerate USB device [ 383.462261][T10709] vivid-003: RDS Reception: true [ 383.474270][T10709] vivid-003: RDS Program Type: 0 inactive [ 383.480849][T10709] vivid-003: RDS PS Name: inactive [ 383.487458][T10709] vivid-003: RDS Radio Text: inactive [ 383.495137][T10709] vivid-003: RDS Traffic Announcement: false inactive [ 383.502508][T10709] vivid-003: RDS Traffic Program: false inactive [ 383.510071][T10709] vivid-003: RDS Music: false inactive [ 383.515661][T10709] vivid-003: ================== END STATUS ================== [ 383.656005][ T5879] usb 5-1: USB disconnect, device number 66 [ 383.902575][T10725] : renamed from veth0_vlan (while UP) [ 384.098247][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 384.268233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 384.275592][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 384.283960][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.293912][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.303931][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.314482][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.329948][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.339340][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.553731][ T9] usb 2-1: usb_control_msg returned -32 [ 384.555909][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.561787][ T9] usbtmc 2-1:16.0: can't read capabilities [ 384.577798][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.785793][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 384.804825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.944404][T10737] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1488'. [ 385.028703][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 385.048216][ T5921] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 385.168216][ T9] usb 5-1: device descriptor read/64, error -71 [ 385.198156][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 385.204402][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 385.214554][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 385.222502][ T5921] usb 3-1: can't read configurations, error -61 [ 385.310122][T10738] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 385.368369][ T5921] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 385.408152][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 385.513086][ T5879] usb 2-1: USB disconnect, device number 41 [ 385.520992][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 385.528151][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 385.540647][ T9] usb 5-1: device descriptor read/64, error -71 [ 385.550685][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 385.558865][ T5921] usb 3-1: can't read configurations, error -61 [ 385.565552][ T5921] usb usb3-port1: attempt power cycle [ 385.648603][ T9] usb usb5-port1: attempt power cycle [ 385.795202][T10742] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1494'. [ 385.805211][T10741] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1494'. [ 385.872831][T10744] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 385.884636][T10744] VFS: Can't find a romfs filesystem on dev nullb0. [ 385.884636][T10744] [ 385.918338][ T5921] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 385.959568][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 385.965597][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 385.979367][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 385.987418][ T5921] usb 3-1: can't read configurations, error -61 [ 386.008220][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 386.047209][ T9] usb 5-1: device descriptor read/8, error -71 [ 386.128136][ T5921] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 386.170991][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 386.177376][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 386.198872][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 386.210308][ T5921] usb 3-1: can't read configurations, error -61 [ 386.218941][ T5921] usb usb3-port1: unable to enumerate USB device [ 386.308364][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 386.328909][ T9] usb 5-1: device descriptor read/8, error -71 [ 386.439915][ T9] usb usb5-port1: unable to enumerate USB device [ 386.485442][T10762] FAULT_INJECTION: forcing a failure. [ 386.485442][T10762] name failslab, interval 1, probability 0, space 0, times 0 [ 386.498441][T10762] CPU: 1 UID: 0 PID: 10762 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 386.498463][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.498474][T10762] Call Trace: [ 386.498480][T10762] [ 386.498486][T10762] dump_stack_lvl+0x189/0x250 [ 386.498511][T10762] ? __pfx____ratelimit+0x10/0x10 [ 386.498530][T10762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.498550][T10762] ? __pfx__printk+0x10/0x10 [ 386.498573][T10762] ? __pfx___find_rr_leaf+0x10/0x10 [ 386.498599][T10762] should_fail_ex+0x414/0x560 [ 386.498625][T10762] should_failslab+0xa8/0x100 [ 386.498647][T10762] ? __pfx_ip6_dst_gc+0x10/0x10 [ 386.498668][T10762] kmem_cache_alloc_noprof+0x88/0x700 [ 386.498688][T10762] ? dst_alloc+0x105/0x170 [ 386.498711][T10762] ? __pfx_ip6_dst_gc+0x10/0x10 [ 386.498734][T10762] dst_alloc+0x105/0x170 [ 386.498758][T10762] ip6_rt_cache_alloc+0x3ac/0xa40 [ 386.498781][T10762] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 386.498796][T10762] ? rt6_find_cached_rt+0x21c/0x270 [ 386.498822][T10762] ? ip6_pol_route+0x162/0x1180 [ 386.498835][T10762] ? ip6_pol_route+0x162/0x1180 [ 386.498848][T10762] ip6_pol_route+0xf5d/0x1180 [ 386.498866][T10762] ? __pfx_ip6_pol_route+0x10/0x10 [ 386.498903][T10762] fib6_rule_lookup+0x348/0x6f0 [ 386.498921][T10762] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 386.498936][T10762] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 386.498956][T10762] ? ip6_route_output_flags+0x2e/0x5d0 [ 386.498981][T10762] ip6_route_output_flags+0x364/0x5d0 [ 386.498996][T10762] ? ip6_route_output_flags+0x2e/0x5d0 [ 386.499013][T10762] ip6_dst_lookup_tail+0x299/0x1510 [ 386.499036][T10762] ? txopt_get+0x7a/0x3f0 [ 386.499060][T10762] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 386.499078][T10762] ? txopt_get+0x7a/0x3f0 [ 386.499096][T10762] ? txopt_get+0x7a/0x3f0 [ 386.499114][T10762] ? txopt_get+0x7a/0x3f0 [ 386.499134][T10762] ? txopt_get+0x335/0x3f0 [ 386.499154][T10762] ? aa_label_sk_perm+0x4cc/0x630 [ 386.499172][T10762] ? __pfx_txopt_get+0x10/0x10 [ 386.499195][T10762] ip6_dst_lookup_flow+0x47/0xe0 [ 386.499222][T10762] rawv6_sendmsg+0xdbf/0x1830 [ 386.499265][T10762] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 386.499303][T10762] ? aa_file_perm+0x139/0x1540 [ 386.499341][T10762] ? __pfx_aa_sk_perm+0x10/0x10 [ 386.499360][T10762] ? sock_rps_record_flow+0x19/0x410 [ 386.499383][T10762] ? inet_sendmsg+0x2f4/0x370 [ 386.499401][T10762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.499426][T10762] __sock_sendmsg+0x19c/0x270 [ 386.499453][T10762] sock_write_iter+0x279/0x360 [ 386.499479][T10762] ? __pfx_sock_write_iter+0x10/0x10 [ 386.499510][T10762] ? bpf_lsm_file_permission+0x9/0x20 [ 386.499533][T10762] ? security_file_permission+0x75/0x290 [ 386.499563][T10762] vfs_write+0x5c9/0xb30 [ 386.499583][T10762] ? __pfx_sock_write_iter+0x10/0x10 [ 386.499607][T10762] ? __pfx_vfs_write+0x10/0x10 [ 386.499630][T10762] ? __fget_files+0x2a/0x420 [ 386.499655][T10762] ksys_write+0x145/0x250 [ 386.499671][T10762] ? __pfx_ksys_write+0x10/0x10 [ 386.499688][T10762] ? do_syscall_64+0xbe/0xfa0 [ 386.499711][T10762] do_syscall_64+0xfa/0xfa0 [ 386.499731][T10762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.499747][T10762] ? clear_bhb_loop+0x60/0xb0 [ 386.499765][T10762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.499780][T10762] RIP: 0033:0x7f4b5f58f6c9 [ 386.499795][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.499808][T10762] RSP: 002b:00007f4b60347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.499824][T10762] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58f6c9 [ 386.499836][T10762] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000004 [ 386.499846][T10762] RBP: 00007f4b60347090 R08: 0000000000000000 R09: 0000000000000000 [ 386.499856][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.499865][T10762] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 386.499891][T10762] [ 387.027105][T10767] bridge0: entered allmulticast mode [ 387.041306][T10767] pim6reg: entered allmulticast mode [ 387.053004][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 387.062330][T10767] bridge_slave_1: left allmulticast mode [ 387.068222][T10767] bridge_slave_1: left promiscuous mode [ 387.074188][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.116169][T10767] bridge_slave_0: left allmulticast mode [ 387.123529][T10767] bridge_slave_0: left promiscuous mode [ 387.134698][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.231089][T10767] bridge0 (unregistering): left allmulticast mode [ 387.468410][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 387.618149][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 387.625584][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 387.635843][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.646842][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.656764][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.666829][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.679934][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 387.689365][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.845797][T10784] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 387.874521][ T5921] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 387.903298][ T9] usb 2-1: usb_control_msg returned -32 [ 387.918339][ T9] usbtmc 2-1:16.0: can't read capabilities [ 388.048264][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 388.060293][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.075305][ T5921] usb 4-1: config 7 has an invalid interface number: 169 but max is 0 [ 388.084328][ T5921] usb 4-1: config 7 has no interface number 0 [ 388.097853][ T5921] usb 4-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 388.107420][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.116848][ T5921] usb 4-1: Product: syz [ 388.121236][ T5921] usb 4-1: Manufacturer: syz [ 388.125947][ T5921] usb 4-1: SerialNumber: syz [ 388.180637][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1516'. [ 388.346311][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.361694][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.394129][ T5921] usb 4-1: USB disconnect, device number 38 [ 388.526409][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 388.629073][T10810] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 388.778237][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 388.938174][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 388.950619][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 388.976137][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 388.988399][ T43] usb 3-1: can't read configurations, error -61 [ 389.057868][T10816] FAULT_INJECTION: forcing a failure. [ 389.057868][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 389.070785][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.3.1522 Not tainted syzkaller #0 PREEMPT(full) [ 389.070819][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.070834][T10816] Call Trace: [ 389.070848][T10816] [ 389.070860][T10816] dump_stack_lvl+0x189/0x250 [ 389.070896][T10816] ? __pfx____ratelimit+0x10/0x10 [ 389.070923][T10816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.070942][T10816] ? __pfx__printk+0x10/0x10 [ 389.070965][T10816] ? __pfx___might_resched+0x10/0x10 [ 389.070983][T10816] ? fs_reclaim_acquire+0x7d/0x100 [ 389.071038][T10816] should_fail_ex+0x414/0x560 [ 389.071066][T10816] should_failslab+0xa8/0x100 [ 389.071091][T10816] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 389.071111][T10816] ? ip6_pol_route+0x162/0x1180 [ 389.071126][T10816] ? __alloc_skb+0x112/0x2d0 [ 389.071149][T10816] __alloc_skb+0x112/0x2d0 [ 389.071170][T10816] alloc_skb_with_frags+0xca/0x890 [ 389.071201][T10816] sock_alloc_send_pskb+0x84d/0x980 [ 389.071238][T10816] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 389.071265][T10816] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 389.071286][T10816] ? ip6_dst_lookup_tail+0xbca/0x1510 [ 389.071306][T10816] rawv6_send_hdrinc+0x25b/0x17a0 [ 389.071341][T10816] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 389.071365][T10816] ? ip6_dst_hoplimit+0x65/0x3e0 [ 389.071391][T10816] ? ip6_dst_hoplimit+0x65/0x3e0 [ 389.071418][T10816] rawv6_sendmsg+0x12ee/0x1830 [ 389.071451][T10816] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 389.071478][T10816] ? aa_file_perm+0x139/0x1540 [ 389.071508][T10816] ? __pfx_aa_sk_perm+0x10/0x10 [ 389.071528][T10816] ? sock_rps_record_flow+0x19/0x410 [ 389.071551][T10816] ? inet_sendmsg+0x2f4/0x370 [ 389.071568][T10816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.071594][T10816] __sock_sendmsg+0x19c/0x270 [ 389.071621][T10816] sock_write_iter+0x279/0x360 [ 389.071648][T10816] ? __pfx_sock_write_iter+0x10/0x10 [ 389.071678][T10816] ? bpf_lsm_file_permission+0x9/0x20 [ 389.071701][T10816] ? security_file_permission+0x75/0x290 [ 389.071732][T10816] vfs_write+0x5c9/0xb30 [ 389.071751][T10816] ? __pfx_sock_write_iter+0x10/0x10 [ 389.071774][T10816] ? __pfx_vfs_write+0x10/0x10 [ 389.071796][T10816] ? __fget_files+0x2a/0x420 [ 389.071820][T10816] ksys_write+0x145/0x250 [ 389.071837][T10816] ? __pfx_ksys_write+0x10/0x10 [ 389.071854][T10816] ? do_syscall_64+0xbe/0xfa0 [ 389.071877][T10816] do_syscall_64+0xfa/0xfa0 [ 389.071898][T10816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.071914][T10816] ? clear_bhb_loop+0x60/0xb0 [ 389.071935][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.071958][T10816] RIP: 0033:0x7f4b5f58f6c9 [ 389.071978][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.071996][T10816] RSP: 002b:00007f4b60347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.072027][T10816] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58f6c9 [ 389.072045][T10816] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000004 [ 389.072056][T10816] RBP: 00007f4b60347090 R08: 0000000000000000 R09: 0000000000000000 [ 389.072066][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.072076][T10816] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 389.072101][T10816] [ 389.180870][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 389.470583][ T5918] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 389.558292][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 389.564454][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 389.574917][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.582726][ T43] usb 3-1: can't read configurations, error -61 [ 389.590397][ T43] usb usb3-port1: attempt power cycle [ 389.628140][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 389.635332][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.645632][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.656958][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.666633][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.675607][ T5918] usb 5-1: Product: syz [ 389.679956][ T5918] usb 5-1: Manufacturer: syz [ 389.684610][ T5918] usb 5-1: SerialNumber: syz [ 389.698239][ T5921] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 389.850220][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.861253][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.871197][ T5921] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 389.880551][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.894221][ T5921] usb 4-1: config 0 descriptor?? [ 389.906207][ T5918] usb 5-1: 0:2 : does not exist [ 389.930751][ T5918] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 389.939285][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 389.970794][ T5918] usb 5-1: USB disconnect, device number 71 [ 389.977818][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 389.983879][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 390.009624][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 390.020163][ T43] usb 3-1: can't read configurations, error -61 [ 390.036513][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.158210][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 390.179640][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 390.185595][ T43] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 390.195222][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 390.203986][ T43] usb 3-1: can't read configurations, error -61 [ 390.211442][ T43] usb usb3-port1: unable to enumerate USB device [ 390.240676][ T43] usb 2-1: USB disconnect, device number 42 [ 390.608794][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.634415][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.865378][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 390.888289][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 390.916927][ T5921] usb 4-1: USB disconnect, device number 39 [ 391.428164][ T43] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 391.491486][T10864] vxcan0: tx address claim with different name [ 391.598798][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 391.617406][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 391.631893][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.651338][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.665737][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.677854][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.728124][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.740976][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.895049][T10874] FAULT_INJECTION: forcing a failure. [ 391.895049][T10874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.908991][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.3.1542 Not tainted syzkaller #0 PREEMPT(full) [ 391.909024][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.909040][T10874] Call Trace: [ 391.909050][T10874] [ 391.909060][T10874] dump_stack_lvl+0x189/0x250 [ 391.909094][T10874] ? __pfx____ratelimit+0x10/0x10 [ 391.909122][T10874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.909149][T10874] ? __pfx__printk+0x10/0x10 [ 391.909175][T10874] ? __might_fault+0xb0/0x130 [ 391.909224][T10874] should_fail_ex+0x414/0x560 [ 391.909261][T10874] _copy_from_iter+0x1de/0x1790 [ 391.909301][T10874] ? __pfx__copy_from_iter+0x10/0x10 [ 391.909327][T10874] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 391.909357][T10874] ? skb_put+0x11b/0x210 [ 391.909388][T10874] rawv6_send_hdrinc+0x861/0x17a0 [ 391.909436][T10874] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 391.909472][T10874] ? ip6_dst_hoplimit+0x65/0x3e0 [ 391.909508][T10874] ? ip6_dst_hoplimit+0x65/0x3e0 [ 391.909547][T10874] rawv6_sendmsg+0x12ee/0x1830 [ 391.909593][T10874] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 391.909632][T10874] ? aa_file_perm+0x139/0x1540 [ 391.909674][T10874] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.909701][T10874] ? sock_rps_record_flow+0x19/0x410 [ 391.909734][T10874] ? inet_sendmsg+0x2f4/0x370 [ 391.909760][T10874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.909801][T10874] __sock_sendmsg+0x19c/0x270 [ 391.909839][T10874] sock_write_iter+0x279/0x360 [ 391.909874][T10874] ? __pfx_sock_write_iter+0x10/0x10 [ 391.909917][T10874] ? bpf_lsm_file_permission+0x9/0x20 [ 391.909947][T10874] ? security_file_permission+0x75/0x290 [ 391.909988][T10874] vfs_write+0x5c9/0xb30 [ 391.910014][T10874] ? __pfx_sock_write_iter+0x10/0x10 [ 391.910045][T10874] ? __pfx_vfs_write+0x10/0x10 [ 391.910074][T10874] ? __fget_files+0x2a/0x420 [ 391.910105][T10874] ksys_write+0x145/0x250 [ 391.910126][T10874] ? __pfx_ksys_write+0x10/0x10 [ 391.910148][T10874] ? do_syscall_64+0xbe/0xfa0 [ 391.910180][T10874] do_syscall_64+0xfa/0xfa0 [ 391.910206][T10874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.910226][T10874] ? clear_bhb_loop+0x60/0xb0 [ 391.910249][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.910269][T10874] RIP: 0033:0x7f4b5f58f6c9 [ 391.910289][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.910309][T10874] RSP: 002b:00007f4b60347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.910334][T10874] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58f6c9 [ 391.910350][T10874] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000004 [ 391.910365][T10874] RBP: 00007f4b60347090 R08: 0000000000000000 R09: 0000000000000000 [ 391.910379][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.910392][T10874] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 391.910425][T10874] [ 392.218093][ T6743] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 392.239135][ T43] usb 5-1: usb_control_msg returned -32 [ 392.244870][ T43] usbtmc 5-1:16.0: can't read capabilities [ 392.260567][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 392.373165][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1545'. [ 392.384885][T10881] tmpfs: Bad value for 'mpol' [ 392.408087][ T6743] usb 2-1: Using ep0 maxpacket: 16 [ 392.416680][ T6743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 392.428733][ T6743] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 392.451211][ T6743] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 392.470957][ T6743] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 392.498227][ T6743] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 392.509879][ T6743] usb 2-1: config 1 interface 0 has no altsetting 0 [ 392.520671][T10888] fuse: blksize only supported for fuseblk [ 392.534772][ T6743] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 392.544256][ T6743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.567835][ T6743] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 392.588676][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 392.780631][ T6743] scsi host1: usb-storage 2-1:1.0 [ 392.858372][ T5921] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 393.008353][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 393.019297][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 393.031378][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 393.039469][ T5921] usb 3-1: can't read configurations, error -61 [ 393.125405][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.134570][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.188382][ T5921] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 393.348255][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 393.354309][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 393.364541][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 393.372399][ T5921] usb 3-1: can't read configurations, error -61 [ 393.379148][ T5921] usb usb3-port1: attempt power cycle [ 393.718681][ T5921] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 393.739821][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 393.745811][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 393.757216][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 393.765274][ T5921] usb 3-1: can't read configurations, error -61 [ 393.838193][ T36] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 393.891339][T10907] FAULT_INJECTION: forcing a failure. [ 393.891339][T10907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.906935][ T5921] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 393.918768][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.3.1553 Not tainted syzkaller #0 PREEMPT(full) [ 393.918799][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.918811][T10907] Call Trace: [ 393.918820][T10907] [ 393.918830][T10907] dump_stack_lvl+0x189/0x250 [ 393.918863][T10907] ? __pfx____ratelimit+0x10/0x10 [ 393.918889][T10907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.918914][T10907] ? __pfx__printk+0x10/0x10 [ 393.918949][T10907] should_fail_ex+0x414/0x560 [ 393.918983][T10907] _copy_to_user+0x31/0xb0 [ 393.919009][T10907] simple_read_from_buffer+0xe1/0x170 [ 393.919036][T10907] proc_fail_nth_read+0x1b3/0x220 [ 393.919069][T10907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.919103][T10907] ? rw_verify_area+0x2a6/0x4d0 [ 393.919133][T10907] ? __lock_acquire+0xab9/0xd20 [ 393.919154][T10907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.919185][T10907] vfs_read+0x200/0xa30 [ 393.919203][T10907] ? fdget_pos+0x247/0x320 [ 393.919232][T10907] ? __pfx___mutex_lock+0x10/0x10 [ 393.919261][T10907] ? __pfx_vfs_read+0x10/0x10 [ 393.919282][T10907] ? __fget_files+0x2a/0x420 [ 393.919309][T10907] ? __fget_files+0x3a0/0x420 [ 393.919331][T10907] ? __fget_files+0x2a/0x420 [ 393.919362][T10907] ksys_read+0x145/0x250 [ 393.919386][T10907] ? __pfx_ksys_read+0x10/0x10 [ 393.919410][T10907] ? do_syscall_64+0xbe/0xfa0 [ 393.919441][T10907] do_syscall_64+0xfa/0xfa0 [ 393.919468][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.919489][T10907] ? clear_bhb_loop+0x60/0xb0 [ 393.919516][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.919535][T10907] RIP: 0033:0x7f4b5f58e0dc [ 393.919563][T10907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.919581][T10907] RSP: 002b:00007f4b60347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.919604][T10907] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58e0dc [ 393.919620][T10907] RDX: 000000000000000f RSI: 00007f4b603470a0 RDI: 0000000000000005 [ 393.919662][T10907] RBP: 00007f4b60347090 R08: 0000000000000000 R09: 0000000000000000 [ 393.919674][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.919688][T10907] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 393.919725][T10907] [ 393.926763][ T36] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 393.948829][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 394.127666][T10896] sddr09: could not read card info [ 394.135947][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 394.144336][ T6743] usb 2-1: USB disconnect, device number 43 [ 394.188889][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 394.188936][ T5921] usb 3-1: can't read configurations, error -61 [ 394.211298][ T1059] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 394.228215][ T1059] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 394.234793][ T1059] sd 1:0:0:0: [sdb] Write Protect is off [ 394.242221][ T5921] usb usb3-port1: unable to enumerate USB device [ 394.249225][ T1059] sd 1:0:0:0: [sdb] Asking for cache data failed [ 394.255718][ T1059] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 394.292938][ T1059] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 394.373373][T10912] veth1_macvtap: left promiscuous mode [ 394.380431][T10912] macsec0: entered promiscuous mode [ 394.404126][T10912] veth1_macvtap: entered promiscuous mode [ 394.421682][T10912] macsec0: left promiscuous mode [ 394.483141][ T6004] udevd[6004]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 394.626508][ T6004] udevd[6004]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 394.642682][ T5921] usb 5-1: USB disconnect, device number 72 [ 394.805755][T10925] overlayfs: overlapping lowerdir path [ 394.834198][T10925] overlayfs: failed to verify upper (327/file0, ino=1738, err=-116) [ 394.843150][T10925] overlayfs: failed to verify index dir 'upper' xattr [ 394.851131][T10925] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 395.108204][ T794] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 395.268271][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 395.275709][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 395.285894][ T794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 395.295803][ T794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 395.310397][ T794] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 395.319667][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.328612][ T794] usb 2-1: Product: syz [ 395.332831][ T794] usb 2-1: Manufacturer: syz [ 395.337560][ T794] usb 2-1: SerialNumber: syz [ 395.346207][ T794] usb 2-1: config 0 descriptor?? [ 395.353211][T10925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.372956][ T794] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 395.379536][ T794] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 395.386093][ T794] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 395.392130][ T794] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 395.399559][ T794] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 395.438138][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 395.609075][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 395.623483][ T43] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 395.643052][ T43] usb 5-1: config 0 has no interface number 0 [ 395.649572][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.661178][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 395.673736][ T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 39, changing to 9 [ 395.685156][ T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 33912, setting to 1024 [ 395.701204][ T43] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.714850][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.732750][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.765472][ T43] usb 5-1: config 0 descriptor?? [ 395.778686][T10942] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 395.796706][ T43] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 396.010828][ T43] usb 5-1: USB disconnect, device number 73 [ 396.052714][ T43] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 396.173594][ T5489] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 396.188444][ T5921] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 396.359013][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 396.367123][ T5921] usb 3-1: config 0 has too many interfaces: 220, using maximum allowed: 32 [ 396.376017][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 220 [ 396.385431][ T5921] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.397161][ T5921] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.407451][ T5921] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.420675][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.427367][ T5921] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 396.436533][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.449185][ T5921] usb 3-1: config 0 descriptor?? [ 396.758814][T10974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 396.920347][ T5921] asus 0003:048D:CE50.0016: unknown main item tag 0x0 [ 396.938707][ T5921] asus 0003:048D:CE50.0016: unknown main item tag 0x0 [ 396.949000][ T5921] asus 0003:048D:CE50.0016: unknown main item tag 0x0 [ 396.964631][ T5921] asus 0003:048D:CE50.0016: unknown main item tag 0x0 [ 396.978366][ T5921] asus 0003:048D:CE50.0016: unknown main item tag 0x0 [ 396.991327][ T5921] asus 0003:048D:CE50.0016: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 397.018076][ T5921] asus 0003:048D:CE50.0016: Asus input not registered [ 397.037319][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 397.056972][ T5921] asus 0003:048D:CE50.0016: probe with driver asus failed with error -12 [ 397.118364][ T5921] usb 3-1: USB disconnect, device number 49 [ 397.719695][T10996] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[10996] [ 397.810181][ T5918] usb 2-1: USB disconnect, device number 44 [ 397.821061][ T5918] mcba_usb 2-1:0.0 can0: device disconnected [ 397.964082][ T5921] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 398.128948][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 398.146616][ T5921] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 398.155997][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.178044][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.187890][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.201094][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.215655][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.238169][ T5918] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 398.249308][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.328671][ T5878] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 398.414668][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.429573][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.440445][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.454034][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.466988][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.483743][ T5921] usb 3-1: usb_control_msg returned -32 [ 398.484433][ T5918] usb 2-1: config 0 descriptor?? [ 398.506382][ T5878] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 398.518094][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 398.528358][ T5878] usb 5-1: config 2 has no interface number 0 [ 398.534621][ T5878] usb 5-1: config 2 interface 194 altsetting 6 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 398.598067][ T5878] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 89, changing to 10 [ 398.658030][ T5878] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 398.698064][ T5878] usb 5-1: config 2 interface 194 has no altsetting 0 [ 398.731097][ T5878] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 398.758065][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.766193][ T5878] usb 5-1: Product: syz [ 398.798083][ T5878] usb 5-1: Manufacturer: syz [ 398.802770][ T5878] usb 5-1: SerialNumber: syz [ 398.835619][T11004] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 398.973570][ T5918] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 399.064763][ T5878] cypress_m8 5-1:2.194: HID->COM RS232 Adapter converter detected [ 399.105482][ T5878] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 399.150292][ T5878] usb 5-1: USB disconnect, device number 74 [ 399.176299][ T5918] usb 2-1: USB disconnect, device number 45 [ 399.199104][ T5878] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 399.239734][ T5878] cypress_m8 5-1:2.194: device disconnected [ 399.672407][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 399.874495][T11035] syz.3.1585 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 399.892823][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'. [ 399.907539][T11038] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 399.936886][T11040] usbtmc 3-1:16.0: INITIATE_CLEAR returned 75 [ 399.948250][ T5918] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 399.982702][T11043] tipc: Enabled bearer , priority 10 [ 400.098177][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 400.104140][ T5918] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 400.117140][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 400.128233][ T5918] usb 5-1: can't read configurations, error -61 [ 400.271904][T11053] nfs: Bad value for 'source' [ 400.278477][ T5918] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 400.458255][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 400.464518][ T5918] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 400.475083][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 400.483765][ T5918] usb 5-1: can't read configurations, error -61 [ 400.490792][ T5918] usb usb5-port1: attempt power cycle [ 400.698318][ T794] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 400.838447][ T5918] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 400.859107][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 400.865768][ T794] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.875516][ T5918] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 400.883553][ T794] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 400.895059][ T794] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 400.905492][ T794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.916207][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 400.925176][ T5918] usb 5-1: can't read configurations, error -61 [ 400.933075][ T794] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.944070][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.961623][ T794] usb 2-1: Product: syz [ 400.965887][ T794] usb 2-1: Manufacturer: syz [ 400.970714][ T794] usb 2-1: SerialNumber: syz [ 401.069411][ T5918] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 401.098729][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 401.104561][ T5918] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 401.114214][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 401.122088][ T5918] usb 5-1: can't read configurations, error -61 [ 401.129431][ T5918] usb usb5-port1: unable to enumerate USB device [ 401.194747][ T5878] usb 3-1: USB disconnect, device number 50 [ 401.209979][ T794] usb 2-1: 0:2 : does not exist [ 401.258709][ T794] usb 2-1: USB disconnect, device number 46 [ 401.292062][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.494630][T11083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.733979][T11083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.989290][T11083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.047587][T11104] fuse: Bad value for 'fd' [ 403.100943][T11083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.261743][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.288668][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.316479][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.345036][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.753757][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 403.846600][T11128] Unsupported ieee802154 address type: 0 [ 404.106161][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 404.116050][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 404.125083][T11138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.950909][ T5921] hid (null): invalid report_size 825550722 [ 404.963132][ T5921] hid-generic 0006:0000:0001.0018: unknown main item tag 0x5 [ 404.970895][ T5921] hid-generic 0006:0000:0001.0018: reserved main item tag 0xe [ 404.982477][ T5921] hid-generic 0006:0000:0001.0018: invalid report_size 825550722 [ 404.992833][ T5921] hid-generic 0006:0000:0001.0018: item 0 4 1 7 parsing failed [ 405.005614][ T5921] hid-generic 0006:0000:0001.0018: probe with driver hid-generic failed with error -22 [ 405.130280][ T5918] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 405.270923][ T5918] usb 5-1: device descriptor read/64, error -71 [ 405.508236][ T5918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 405.638100][ T5918] usb 5-1: device descriptor read/64, error -71 [ 405.751680][ T5918] usb usb5-port1: attempt power cycle [ 405.864549][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 406.108244][ T5918] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 406.118139][ T794] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 406.128873][ T5918] usb 5-1: device descriptor read/8, error -71 [ 406.268177][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 406.274165][ T794] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 406.284755][ T794] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 406.292509][ T794] usb 2-1: can't read configurations, error -61 [ 406.368146][ T5918] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 406.389013][ T5918] usb 5-1: device descriptor read/8, error -71 [ 406.428207][ T794] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 406.498750][ T5918] usb usb5-port1: unable to enumerate USB device [ 406.578303][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 406.584457][ T794] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 406.595608][ T794] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 406.603387][ T794] usb 2-1: can't read configurations, error -61 [ 406.610341][ T794] usb usb2-port1: attempt power cycle [ 406.958339][ T794] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 406.989572][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 406.995571][ T794] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 407.007393][ T794] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 407.015484][ T794] usb 2-1: can't read configurations, error -61 [ 407.158825][ T794] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 407.178760][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 407.184821][ T794] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 407.203935][ T794] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 407.214228][ T794] usb 2-1: can't read configurations, error -61 [ 407.222696][ T794] usb usb2-port1: unable to enumerate USB device [ 407.568107][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 407.718140][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 407.725706][ T5878] usb 3-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 407.739499][ T5878] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 407.749263][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.757396][ T5878] usb 3-1: Product: syz [ 407.761756][ T5878] usb 3-1: Manufacturer: syz [ 407.766441][ T5878] usb 3-1: SerialNumber: syz [ 407.778846][ T5878] ch9200 3-1:130.0: probe with driver ch9200 failed with error -22 [ 407.995439][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.007056][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.069660][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.079827][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.491805][T11205] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1645'. [ 408.604553][ T5918] usb 3-1: USB disconnect, device number 51 [ 408.801378][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 408.831903][T11222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1650'. [ 408.995853][ T30] audit: type=1326 audit(1762477911.365:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7e18f6c9 code=0x0 [ 409.058153][ T5878] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 409.210124][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 409.221551][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 409.230972][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.242010][ T5878] usb 5-1: config 0 descriptor?? [ 409.657521][ T5878] logitech 0003:046D:C626.0019: unbalanced collection at end of report description [ 409.670888][ T5878] logitech 0003:046D:C626.0019: parse failed [ 409.677046][ T5878] logitech 0003:046D:C626.0019: probe with driver logitech failed with error -22 [ 409.864140][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.876353][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.916399][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.935674][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.959064][ T5879] usb 5-1: USB disconnect, device number 83 [ 410.249383][T11251] 9p: Bad value for 'wfdno' [ 410.332494][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 410.521369][T11257] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 410.579234][ T5879] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 410.750615][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 410.757569][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 410.771066][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 410.779827][ T5879] usb 3-1: can't read configurations, error -61 [ 410.849328][ T5918] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 410.906246][T11266] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1666'. [ 410.919420][ T5879] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 410.988205][ T5918] usb 5-1: device descriptor read/64, error -71 [ 411.108419][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 411.114468][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 411.125219][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 411.134110][ T5879] usb 3-1: can't read configurations, error -61 [ 411.141370][ T5879] usb usb3-port1: attempt power cycle [ 411.208624][ T43] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 411.238299][ T5918] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 411.361098][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 411.370459][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.378827][ T5918] usb 5-1: device descriptor read/64, error -71 [ 411.387837][ T43] usb 2-1: config 0 descriptor?? [ 411.401194][ T43] gspca_main: spca508-2.14.0 probing 8086:0110 [ 411.488785][ T5879] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 411.489931][ T5918] usb usb5-port1: attempt power cycle [ 411.510124][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 411.516071][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 411.526710][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 411.534704][ T5879] usb 3-1: can't read configurations, error -61 [ 411.595630][ T43] gspca_spca508: reg_read err -32 [ 411.601626][ T43] gspca_spca508: reg_read err -32 [ 411.668367][ T5879] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 411.689090][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 411.695243][ T5879] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 411.705296][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 411.713236][ T5879] usb 3-1: can't read configurations, error -61 [ 411.720113][ T5879] usb usb3-port1: unable to enumerate USB device [ 411.812966][ T43] gspca_spca508: reg_read err -71 [ 411.819733][ T43] gspca_spca508: reg_read err -71 [ 411.825295][ T43] gspca_spca508: reg write: error -71 [ 411.831527][ T43] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 411.842283][ T43] usb 2-1: USB disconnect, device number 51 [ 411.848806][ T5918] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 411.878979][ T5918] usb 5-1: device descriptor read/8, error -71 [ 412.119568][ T5918] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 412.139568][ T5918] usb 5-1: device descriptor read/8, error -71 [ 412.249165][ T5918] usb usb5-port1: unable to enumerate USB device [ 412.624259][T11287] netlink: 'syz.3.1673': attribute type 21 has an invalid length. [ 412.635933][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 412.668251][ T43] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 412.843174][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.853845][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.869062][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 412.878448][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.886599][ T43] usb 2-1: SerialNumber: syz [ 412.902678][ T43] usb 2-1: 0:2 : does not exist [ 413.304966][ T43] usb 2-1: USB disconnect, device number 52 [ 413.665577][T11308] netlink: 'syz.4.1680': attribute type 30 has an invalid length. [ 414.018164][ T5879] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 414.160771][T11314] tipc: Enabling of bearer <Üth:macvlan0> rejected, media not registered [ 414.170357][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 414.170418][ T5879] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 414.190596][ T5879] usb 5-1: config 0 has no interface number 0 [ 414.201290][ T5879] usb 5-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 414.210821][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.219220][ T5879] usb 5-1: Product: syz [ 414.223462][ T5879] usb 5-1: Manufacturer: syz [ 414.228336][ T5879] usb 5-1: SerialNumber: syz [ 414.236159][ T5879] usb 5-1: config 0 descriptor?? [ 414.348346][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 414.355670][ T43] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 414.365151][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.379711][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.391120][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.400704][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.413047][ T43] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 414.423177][ T43] usb 2-1: no configuration chosen from 1 choice [ 414.465177][ T5879] usblcd 5-1:0.53: USBLCD model not supported. [ 414.486883][ T5879] usb 5-1: USB disconnect, device number 88 [ 414.868306][ T5918] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 415.018739][T11326] tmpfs: Group quota inode hardlimit too large. [ 415.028100][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 415.039539][ T5918] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.050842][ T5918] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.060771][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 415.067566][ T5918] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 415.076927][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.088695][ T5918] usb 3-1: config 0 descriptor?? [ 415.268262][ T5879] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 415.428133][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 415.435929][ T5879] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 415.444314][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.454413][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.464505][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.474532][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.488605][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.497774][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.538146][ T5918] cougar 0003:060B:500A.001A: unexpected long global item [ 415.546307][ T5918] cougar 0003:060B:500A.001A: parse failed [ 415.553144][ T5918] cougar 0003:060B:500A.001A: probe with driver cougar failed with error -22 [ 415.718839][T11326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.730351][T11326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.741699][ T5879] usb 5-1: usb_control_msg returned -32 [ 415.747422][ T5879] usbtmc 5-1:16.0: can't read capabilities [ 415.789359][ T5918] usb 3-1: USB disconnect, device number 56 [ 416.451464][T11343] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 416.652944][ T794] usb 5-1: USB disconnect, device number 89 [ 416.934249][ T794] usb 2-1: USB disconnect, device number 53 [ 417.488868][ T5918] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 417.564144][ T794] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 417.758157][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 417.766192][ T794] usb 5-1: config 5 has an invalid interface number: 17 but max is 0 [ 417.775137][ T5918] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 417.783454][ T794] usb 5-1: config 5 has no interface number 0 [ 417.798222][ T5918] usb 2-1: config 0 has no interface number 0 [ 417.804402][ T5918] usb 2-1: config 0 interface 29 has no altsetting 0 [ 417.811362][ T794] usb 5-1: config 5 interface 17 has no altsetting 0 [ 417.821126][ T794] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=53.7a [ 417.831069][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.839575][ T794] usb 5-1: Product: syz [ 417.843895][ T794] usb 5-1: Manufacturer: syz [ 417.848996][ T794] usb 5-1: SerialNumber: syz [ 417.854815][ T5918] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 417.866358][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.879369][ T5918] usb 2-1: Product: syz [ 417.885114][ T5918] usb 2-1: Manufacturer: syz [ 417.889918][ T5918] usb 2-1: SerialNumber: syz [ 417.910293][ T5918] usb 2-1: config 0 descriptor?? [ 418.016980][T11366] netlink: 'syz.3.1702': attribute type 3 has an invalid length. [ 418.025581][T11366] netlink: 'syz.3.1702': attribute type 3 has an invalid length. [ 418.117575][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.130075][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.147397][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.163426][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.182755][ T5918] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v63 fw v8.0.0 (2 channels) [ 418.194951][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.211995][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.283276][ T794] dm9601 5-1:5.17: probe with driver dm9601 failed with error -22 [ 418.303252][ T794] sr9700 5-1:5.17: probe with driver sr9700 failed with error -22 [ 418.323782][ T794] usb 5-1: USB disconnect, device number 90 [ 418.360412][ T5918] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 418.381269][ T5918] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 418.402650][ T5918] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 418.460756][ T5918] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -8 [ 418.562192][ T5879] usb 2-1: USB disconnect, device number 54 [ 418.854054][ T5918] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 419.008122][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 419.018434][ T5918] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 419.027888][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.036327][ T5918] usb 3-1: Product: syz [ 419.040749][ T5918] usb 3-1: Manufacturer: syz [ 419.045395][ T5918] usb 3-1: SerialNumber: syz [ 419.053506][ T5918] usb 3-1: config 0 descriptor?? [ 419.128486][ T5879] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 419.267064][T11382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1707'. [ 419.298388][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 419.302111][ T5918] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 419.305886][ T5879] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 419.327253][ T5918] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 419.351221][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 419.365538][ T5918] usb 3-1: USB disconnect, device number 57 [ 419.371895][ T5879] usb 5-1: can't read configurations, error -61 [ 419.452802][T11396] netlink: 'syz.3.1714': attribute type 22 has an invalid length. [ 419.498789][ T5879] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 419.515834][T11398] fuse: Bad value for 'fd' [ 419.588751][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 419.658676][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 419.665353][ T5879] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 419.687216][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 419.696271][ T5879] usb 5-1: can't read configurations, error -61 [ 419.703444][ T5879] usb usb5-port1: attempt power cycle [ 419.750349][ T43] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.762565][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.772368][ T43] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 419.781730][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.793671][ T43] usb 2-1: config 0 descriptor?? [ 420.058946][ T5879] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 420.079483][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 420.085325][ T5879] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 420.095426][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 420.103267][ T5879] usb 5-1: can't read configurations, error -61 [ 420.118209][ T5878] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 420.211578][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.219502][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.227038][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.234868][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.242597][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.248122][ T5879] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 420.250198][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.265417][ T43] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 420.275684][ T43] playstation 0003:054C:05C4.001B: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 420.279703][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 420.295159][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 420.301579][ T5879] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 420.312254][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 420.321879][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.333414][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 420.341356][ T5879] usb 5-1: can't read configurations, error -61 [ 420.348694][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.359714][ T5879] usb usb5-port1: unable to enumerate USB device [ 420.366434][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.381045][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.395020][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 420.406458][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.415637][ T43] playstation 0003:054C:05C4.001B: Failed to retrieve feature with reportID 18: -71 [ 420.440438][ T43] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -71 [ 420.450080][ T43] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4 [ 420.460763][ T43] playstation 0003:054C:05C4.001B: Failed to create dualshock4. [ 420.471266][ T43] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -71 [ 420.485060][ T43] usb 2-1: USB disconnect, device number 55 [ 420.637400][ T5878] usb 3-1: usb_control_msg returned -32 [ 420.653105][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 421.363571][T11442] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 421.565601][ T5878] usb 3-1: USB disconnect, device number 58 [ 422.278219][ T5878] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 422.413594][ T30] audit: type=1400 audit(1762477924.785:13): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="stack" pid=11476 comm="syz.2.1741" [ 422.461834][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.472658][ T5878] usb 5-1: not running at top speed; connect to a high speed hub [ 422.482900][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.496814][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.502442][T11480] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 422.510591][ T5878] usb 5-1: string descriptor 0 read error: -22 [ 422.513393][T11480] overlayfs: failed to set xattr on upper [ 422.522020][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.525480][T11480] overlayfs: ...falling back to redirect_dir=nofollow. [ 422.534943][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.542032][T11480] overlayfs: ...falling back to index=off. [ 422.556491][T11480] overlayfs: ...falling back to uuid=null. [ 422.564857][T11480] overlayfs: failed to clone lowerpath [ 422.566960][ T5878] usb 5-1: 0:2 : does not exist [ 422.819995][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'. [ 422.982500][ T5878] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 422.993748][ T5878] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 423.006535][ T5878] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 423.042473][ T5878] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 423.056317][ T5878] usb 5-1: USB disconnect, device number 95 [ 423.875128][ T5144] Bluetooth: hci3: Malformed LE Event: 0x0d [ 423.952773][ T13] tipc: Subscription rejected, illegal request [ 424.268437][ T5921] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 424.428188][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 424.440587][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 424.452786][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 424.473822][ T5921] usb 3-1: can't read configurations, error -61 [ 424.620737][ T5921] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 424.778164][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 424.784298][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 424.795252][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 424.804131][ T5921] usb 3-1: can't read configurations, error -61 [ 424.812514][ T5921] usb usb3-port1: attempt power cycle [ 425.098237][ T43] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 425.158198][ T5921] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 425.178808][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 425.184478][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 425.194337][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 425.202183][ T5921] usb 3-1: can't read configurations, error -61 [ 425.249897][ T43] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 425.259368][ T43] usb 5-1: config 0 has no interface number 0 [ 425.266048][ T43] usb 5-1: config 0 interface 29 has no altsetting 0 [ 425.276588][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.8e [ 425.286803][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.295429][ T43] usb 5-1: Product: syz [ 425.301329][ T43] usb 5-1: Manufacturer: syz [ 425.306265][ T43] usb 5-1: SerialNumber: syz [ 425.315929][ T43] usb 5-1: config 0 descriptor?? [ 425.322084][ T5918] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 425.348124][ T5921] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 425.368913][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 425.375584][ T5921] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 425.379826][T11550] ./bus: Can't lookup blockdev [ 425.390747][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 425.399822][ T5921] usb 3-1: can't read configurations, error -61 [ 425.406713][ T5921] usb usb3-port1: unable to enumerate USB device [ 425.513544][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 425.522168][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 425.538460][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58332, setting to 1024 [ 425.556292][ T5918] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 425.580633][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.580931][ T43] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v52 fw v42.239.146 (2 channels) [ 425.602145][ T5918] usb 2-1: config 0 descriptor?? [ 425.784151][T11541] o2cb: This node has not been configured. [ 425.791883][T11541] o2cb: Cluster check failed. Fix errors before retrying. [ 425.801547][T11541] (syz.4.1763,11541,0):user_dlm_register:674 ERROR: status = -22 [ 425.809521][T11541] (syz.4.1763,11541,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz1" [ 425.823823][ T43] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 425.833394][ T43] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 425.842368][ T43] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 425.878904][T11564] ------------[ cut here ]------------ [ 425.881840][T11563] ------------[ cut here ]------------ [ 425.884530][T11564] WARNING: ./include/linux/ns_common.h:311 at nsproxy_ns_active_put+0xa19/0xd30, CPU#1: syz.3.1771/11564 [ 425.890551][T11563] WARNING: ./include/linux/ns_common.h:288 at alloc_pid+0xad6/0xc70, CPU#0: syz.3.1771/11563 [ 425.901612][T11564] Modules linked in: [ 425.901646][T11564] CPU: 1 UID: 60929 PID: 11564 Comm: syz.3.1771 Not tainted syzkaller #0 PREEMPT(full) [ 425.901673][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.901688][T11564] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 425.901747][T11564] Code: 0f 0b 90 e9 71 fc ff ff e8 d4 08 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 c6 08 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 b8 08 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 aa 08 77 ff 90 0f 0b 90 e9 98 fd ff ff [ 425.901767][T11564] RSP: 0018:ffffc9000e117d38 EFLAGS: 00010293 [ 425.901790][T11564] RAX: ffffffff824ac5e8 RBX: ffff888033e03618 RCX: ffff888027a49e80 [ 425.901809][T11564] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 425.901825][T11564] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 425.901842][T11564] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 425.901885][T11564] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 425.901905][T11564] FS: 00007f4b603476c0(0000) GS:ffff888125b7c000(0000) knlGS:0000000000000000 [ 425.901926][T11564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.901942][T11564] CR2: 00007f4b5d7f6d58 CR3: 0000000041a60000 CR4: 00000000003526f0 [ 425.901963][T11564] Call Trace: [ 425.901980][T11564] [ 425.901995][T11564] free_nsproxy+0x26/0x560 [ 425.902054][T11564] __se_sys_setns+0x1268/0x17d0 [ 425.902080][T11564] ? __se_sys_setns+0x565/0x17d0 [ 425.902114][T11564] ? __pfx___se_sys_setns+0x10/0x10 [ 425.902146][T11564] ? do_syscall_64+0xbe/0xfa0 [ 425.902205][T11564] do_syscall_64+0xfa/0xfa0 [ 425.902236][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.902260][T11564] ? clear_bhb_loop+0x60/0xb0 [ 425.902290][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.902312][T11564] RIP: 0033:0x7f4b5f58f6c9 [ 425.902359][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.902379][T11564] RSP: 002b:00007f4b60347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 425.902407][T11564] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58f6c9 [ 425.902425][T11564] RDX: 0000000000000000 RSI: 0000000040000000 RDI: 0000000000000004 [ 425.902440][T11564] RBP: 00007f4b5f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.902456][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.902495][T11564] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 425.902533][T11564] [ 425.902553][T11564] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.902569][T11564] CPU: 1 UID: 60929 PID: 11564 Comm: syz.3.1771 Not tainted syzkaller #0 PREEMPT(full) [ 425.902594][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.902608][T11564] Call Trace: [ 425.902621][T11564] [ 425.902631][T11564] dump_stack_lvl+0x99/0x250 [ 425.902661][T11564] ? __asan_memcpy+0x40/0x70 [ 425.902689][T11564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.902717][T11564] ? __pfx__printk+0x10/0x10 [ 425.902757][T11564] vpanic+0x237/0x6d0 [ 425.902779][T11564] ? __pfx_vpanic+0x10/0x10 [ 425.902797][T11564] ? is_bpf_text_address+0x26/0x2b0 [ 425.902840][T11564] panic+0xb9/0xc0 [ 425.902860][T11564] ? __pfx_panic+0x10/0x10 [ 425.902897][T11564] __warn+0x334/0x4c0 [ 425.902918][T11564] ? nsproxy_ns_active_put+0xa19/0xd30 [ 425.902947][T11564] ? nsproxy_ns_active_put+0xa19/0xd30 [ 425.902973][T11564] report_bug+0x2be/0x4f0 [ 425.903000][T11564] ? nsproxy_ns_active_put+0xa19/0xd30 [ 425.903033][T11564] ? nsproxy_ns_active_put+0xa19/0xd30 [ 425.903060][T11564] ? nsproxy_ns_active_put+0xa1b/0xd30 [ 425.903086][T11564] handle_bug+0x84/0x160 [ 425.903118][T11564] exc_invalid_op+0x1a/0x50 [ 425.903149][T11564] asm_exc_invalid_op+0x1a/0x20 [ 425.903170][T11564] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 425.903196][T11564] Code: 0f 0b 90 e9 71 fc ff ff e8 d4 08 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 c6 08 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 b8 08 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 aa 08 77 ff 90 0f 0b 90 e9 98 fd ff ff [ 425.903216][T11564] RSP: 0018:ffffc9000e117d38 EFLAGS: 00010293 [ 425.903236][T11564] RAX: ffffffff824ac5e8 RBX: ffff888033e03618 RCX: ffff888027a49e80 [ 425.903254][T11564] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 425.903269][T11564] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 425.903286][T11564] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 425.903302][T11564] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 425.903325][T11564] ? nsproxy_ns_active_put+0xa18/0xd30 [ 425.903360][T11564] ? nsproxy_ns_active_put+0xa18/0xd30 [ 425.903396][T11564] free_nsproxy+0x26/0x560 [ 425.903423][T11564] __se_sys_setns+0x1268/0x17d0 [ 425.903450][T11564] ? __se_sys_setns+0x565/0x17d0 [ 425.903486][T11564] ? __pfx___se_sys_setns+0x10/0x10 [ 425.903521][T11564] ? do_syscall_64+0xbe/0xfa0 [ 425.903557][T11564] do_syscall_64+0xfa/0xfa0 [ 425.903591][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.903616][T11564] ? clear_bhb_loop+0x60/0xb0 [ 425.903645][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.903670][T11564] RIP: 0033:0x7f4b5f58f6c9 [ 425.903691][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.903711][T11564] RSP: 002b:00007f4b60347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 425.903737][T11564] RAX: ffffffffffffffda RBX: 00007f4b5f7e5fa0 RCX: 00007f4b5f58f6c9 [ 425.903756][T11564] RDX: 0000000000000000 RSI: 0000000040000000 RDI: 0000000000000004 [ 425.903771][T11564] RBP: 00007f4b5f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.903789][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.903805][T11564] R13: 00007f4b5f7e6038 R14: 00007f4b5f7e5fa0 R15: 00007ffde90d2c58 [ 425.903843][T11564] [ 425.914074][T11564] Kernel Offset: disabled