last executing test programs: 21m2.140576567s ago: executing program 32 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) 19m12.545466112s ago: executing program 1 (id=888): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) 19m11.614515407s ago: executing program 1 (id=895): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="0200002009f06880", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdir(0x0, 0x1bf) 19m11.47991473s ago: executing program 1 (id=897): symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) 19m11.428440378s ago: executing program 1 (id=898): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000022c0)='L', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback, 0x200}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 19m10.30219455s ago: executing program 1 (id=912): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 19m9.754715067s ago: executing program 1 (id=918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="208aae0838a467b58f9fcbf94251344a1259241763bf61", 0x17}], 0x2) 18m54.70933354s ago: executing program 33 (id=918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="208aae0838a467b58f9fcbf94251344a1259241763bf61", 0x17}], 0x2) 14m50.880813101s ago: executing program 5 (id=2358): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26) sendto$inet(r4, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r4, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010000, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) 14m50.724546134s ago: executing program 5 (id=2360): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x61, 0x8, 0x1, 0x20}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 14m49.876313526s ago: executing program 5 (id=2365): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 14m49.09459589s ago: executing program 5 (id=2370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x8100}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x4}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 14m47.84262305s ago: executing program 5 (id=2377): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x61, 0x8, 0x1, 0x20}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 14m46.918713162s ago: executing program 5 (id=2386): r0 = socket(0x200000000000011, 0x2, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f000044f000/0x2000)=nil, 0x2000, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x400, 0x18) sendmmsg$unix(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x40000) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x36, 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x0, 0x0, 0x0, 0x2) 14m31.82761756s ago: executing program 34 (id=2386): r0 = socket(0x200000000000011, 0x2, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f000044f000/0x2000)=nil, 0x2000, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x400, 0x18) sendmmsg$unix(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x40000) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x36, 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x0, 0x0, 0x0, 0x2) 12m48.767125264s ago: executing program 6 (id=3177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 12m48.487016269s ago: executing program 6 (id=3180): r0 = socket$alg(0x26, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$alg(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12m46.685285709s ago: executing program 6 (id=3195): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="270518") 12m46.373469325s ago: executing program 6 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x194d850, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 12m43.997873874s ago: executing program 6 (id=3204): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8004, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 12m43.347425652s ago: executing program 6 (id=3209): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x5, 0x4}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 12m42.022336182s ago: executing program 35 (id=3209): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x5, 0x4}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 11m35.051994227s ago: executing program 4 (id=3457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd24, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x9a, 0x407ffffffffffe, 0x2e2}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11m34.337567271s ago: executing program 4 (id=3460): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendfile(r0, r0, 0x0, 0xf3f5) 11m33.59724484s ago: executing program 4 (id=3462): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2b, 0x0, 0x0) 11m30.469895607s ago: executing program 4 (id=3467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x194d850, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) 11m29.993563659s ago: executing program 4 (id=3469): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 11m29.465675902s ago: executing program 4 (id=3472): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@union={0x10, 0x4, 0x0, 0x5, 0x0, 0xffffffff, [{0xb, 0x3, 0x621e}, {0x0, 0x5, 0x800}, {0x9, 0x3, 0x9}, {0xf}]}, @fwd={0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x2e, 0x3}]}, {0x0, [0x51, 0x5f, 0x61, 0x2e, 0x2e]}}, &(0x7f00000003c0)=""/52, 0x77, 0x34, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xd, &(0x7f00000000c0)={0x81, 0x24cb42e6}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) 11m28.232104814s ago: executing program 36 (id=3472): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@union={0x10, 0x4, 0x0, 0x5, 0x0, 0xffffffff, [{0xb, 0x3, 0x621e}, {0x0, 0x5, 0x800}, {0x9, 0x3, 0x9}, {0xf}]}, @fwd={0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x2e, 0x3}]}, {0x0, [0x51, 0x5f, 0x61, 0x2e, 0x2e]}}, &(0x7f00000003c0)=""/52, 0x77, 0x34, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xd, &(0x7f00000000c0)={0x81, 0x24cb42e6}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) 39.981218997s ago: executing program 9 (id=7026): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 23.229429192s ago: executing program 7 (id=7076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24881}, 0x800) 22.542356416s ago: executing program 7 (id=7080): openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82600, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 19.953800725s ago: executing program 7 (id=7085): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002080)=0x58, 0x12) 17.46308054s ago: executing program 2 (id=7086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.195144285s ago: executing program 7 (id=7088): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000005c0)='\"', 0x1}], 0x1) close(r0) 15.971172837s ago: executing program 7 (id=7092): socket$nl_sock_diag(0x10, 0x3, 0x4) timerfd_create(0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc858) r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x80, 0x3, 0x3ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 15.596076611s ago: executing program 7 (id=7093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) 14.396281893s ago: executing program 0 (id=7097): r0 = socket$unix(0x1, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x87, 0x2, 0x0, 0x7f, 0xa9, 0x4d, 0x6, 0x61, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x7, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x10, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xfff, 0x3, 0x7e, 0x100, 0x8000, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 14.021898274s ago: executing program 2 (id=7099): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) 13.937698793s ago: executing program 0 (id=7100): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0xea283) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) writev(r2, &(0x7f0000001a40)=[{&(0x7f00000000c0)="9211a3ee", 0x20000}, {0x0, 0xe4}], 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x1c00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001]}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 9.215056239s ago: executing program 2 (id=7105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) 9.210835381s ago: executing program 0 (id=7106): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000"], 0xa0}}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 8.339879357s ago: executing program 2 (id=7110): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.853489297s ago: executing program 3 (id=7112): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) 7.351444015s ago: executing program 3 (id=7113): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)={0x40, 0x30, 0x2, "b778"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 6.921383469s ago: executing program 8 (id=7114): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='highspeed', 0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 6.494829078s ago: executing program 8 (id=7115): recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000003c0)=""/53, 0x35}], 0x2, &(0x7f0000000440)=""/253, 0xfd}, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fffffff}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x242b24a3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x20044011) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 6.494472739s ago: executing program 3 (id=7116): socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 6.107772313s ago: executing program 9 (id=7043): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 6.044439837s ago: executing program 3 (id=7117): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3be779733800294eee8ac3390ca814ed"}]}, 0x30}}, 0x22044804) 5.647011216s ago: executing program 0 (id=7118): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.56602867s ago: executing program 3 (id=7119): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r0 = io_uring_setup(0x5940, &(0x7f0000000440)={0x0, 0x800000, 0x400, 0x2, 0x12a}) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0x7) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x3) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) 3.116754033s ago: executing program 2 (id=7120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.055965638s ago: executing program 8 (id=7121): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x4, "db216a8e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.57481049s ago: executing program 9 (id=7122): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 2.502361243s ago: executing program 2 (id=7123): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a000009050203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 2.350741708s ago: executing program 0 (id=7124): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) 2.187942776s ago: executing program 8 (id=7125): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000b80)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e0, 0x0, 0x0}}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz1\x00', {0xfff3, 0x3f8, 0x7, 0xf001}, 0x4e, [0x100, 0xffffff5a, 0x7, 0x4, 0x1ff, 0x8cf, 0x2, 0x8, 0x7701, 0xfffffff7, 0x3a, 0x0, 0x4, 0xffffffc0, 0x1000, 0xbaf, 0x10001, 0x4, 0x0, 0xff, 0x101, 0x8, 0x2, 0x47, 0x100, 0x100, 0x3, 0x5, 0x4, 0x80, 0x7fff, 0x3, 0x4, 0x4e, 0x16, 0x29, 0x10000, 0x4, 0x7fff, 0x8, 0x4000, 0xd644, 0xfffffffe, 0x0, 0x0, 0x1, 0x7, 0xca86, 0x7, 0x9, 0x6, 0x5, 0x1, 0x7, 0x4, 0xfffffffd, 0x80000001, 0x8000, 0xf03b, 0x5, 0x3, 0xffffe001, 0x5000, 0x9], [0x1, 0x6, 0x3, 0xffffcb85, 0x3, 0x14178b7b, 0x6, 0x1, 0x3, 0x0, 0x9, 0x80, 0x7, 0x8, 0x8, 0x7, 0x8001, 0x1000, 0x7fffffff, 0xfffffff3, 0x31c, 0x5, 0x0, 0x4, 0x1, 0x2, 0xffff8001, 0x8, 0x9, 0xb2c, 0x3, 0x2, 0x3, 0x1, 0x1, 0xfffffff1, 0x3, 0x8, 0x8, 0x8, 0x6, 0x101, 0xffff, 0x0, 0x100, 0x10, 0x5, 0x9, 0xbf27, 0x4, 0x1, 0x1c000000, 0x7ff, 0x6, 0x8001, 0x3, 0x6, 0x1000, 0xe, 0x7, 0x8, 0x3, 0x9, 0xfffffffc], [0x8, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0x1, 0x10, 0x2, 0xf, 0x2, 0x0, 0x3, 0x7f, 0x200, 0x9479, 0x7, 0x40, 0x3, 0xfffffff2, 0x6e, 0x9, 0x5, 0x7, 0x9e, 0x5, 0x5, 0x7, 0x3, 0xdda9, 0x4, 0x8, 0x4, 0x9, 0x0, 0x3, 0xfffffffa, 0x81, 0xffff7fff, 0x100, 0x40, 0x401, 0xd1e4, 0x9, 0x8, 0x8, 0x1, 0xc0000000, 0xfffffff9, 0x8, 0x80000001, 0x6, 0x0, 0xfffff000, 0x6, 0x5, 0x8, 0x4, 0x6, 0x2, 0x8, 0x1, 0x1000], [0xfb, 0x4, 0x3, 0x5, 0x7fffffff, 0xf0, 0x7, 0x9, 0xa1, 0x7f, 0xff, 0x2, 0x1, 0x6, 0x1, 0x100, 0xf42, 0x3, 0x8, 0x4, 0x7, 0x3, 0x1ff, 0x8, 0x5, 0xffff, 0x0, 0x5, 0x602, 0x9, 0x4, 0x101, 0x0, 0x4, 0x0, 0xda2, 0x7, 0xd2ce, 0x4, 0x3, 0x3, 0x8000, 0x8, 0x39, 0x8003, 0x4, 0x6, 0x9, 0xc01, 0xe, 0x1, 0x1, 0x3, 0x27, 0xe, 0x0, 0x7ff, 0x867, 0xfffffff8, 0x1, 0x5a, 0xdbdb, 0x9, 0x3]}, 0x45c) 2.186522726s ago: executing program 9 (id=7126): socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x2000, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 1.917389413s ago: executing program 0 (id=7127): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)={0x40, 0x30, 0x2, "b778"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 1.839044911s ago: executing program 8 (id=7128): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.721991176s ago: executing program 9 (id=7129): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r5 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4001}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r7, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x5}]) 1.691394434s ago: executing program 3 (id=7130): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004fb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) mmap(&(0x7f0000f5e000/0x2000)=nil, 0x2000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) socket$inet_udp(0x2, 0x2, 0x0) 129.105732ms ago: executing program 37 (id=7093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) 678.944µs ago: executing program 9 (id=7132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 8 (id=7133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x6, {0x4, 0x1, 0xfffffeffffffffff, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x6, 0x24800002, 0x3ff, 0x0, 0x3, 0xb88, 0x0, 0x0, 0x20, 0x80003}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r5, 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x200000, 0xb, "0062ba00096304001b2ec83b7af3e88ff600"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): kmem_cache_alloc_noprof+0xa1/0x600 [ 1215.466163][T24886] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1215.466186][T24886] ? do_futex+0x3e7/0x4e0 [ 1215.466269][T24886] ? do_getname+0x2e/0x250 [ 1215.466301][T24886] do_getname+0x2e/0x250 [ 1215.466325][T24886] ? getname_flags+0x11/0x20 [ 1215.466352][T24886] do_sys_openat2+0xcc/0x200 [ 1215.466377][T24886] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1215.466400][T24886] ? __se_sys_futex+0x3a8/0x450 [ 1215.466426][T24886] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.466457][T24886] ? rcu_is_watching+0x16/0xb0 [ 1215.466482][T24886] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1215.466509][T24886] __x64_sys_open+0x11e/0x150 [ 1215.466539][T24886] do_syscall_64+0x166/0x520 [ 1215.466567][T24886] ? trace_irq_disable+0x3b/0x140 [ 1215.466587][T24886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.466612][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.466632][T24886] RIP: 0033:0x7f7ad019e159 [ 1215.466650][T24886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.466666][T24886] RSP: 002b:00007f7ad1044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1215.466686][T24886] RAX: ffffffffffffffda RBX: 00007f7ad0425fa0 RCX: 00007f7ad019e159 [ 1215.466704][T24886] RDX: 0000000000000086 RSI: 0000000000064842 RDI: 0000200000000080 [ 1215.466716][T24886] RBP: 00007f7ad023506b R08: 0000000000000000 R09: 0000000000000000 [ 1215.466729][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.466741][T24886] R13: 00007f7ad0426038 R14: 00007f7ad0425fa0 R15: 00007fff7ef227c8 [ 1215.466772][T24886] [ 1216.001653][T23048] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1216.153530][T23048] usb 8-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 1216.157278][T23048] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.157299][T23048] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1216.157338][T23048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.261037][ T5736] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1216.267051][T23048] usb 8-1: 0:1 : does not exist [ 1216.410650][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 1216.412932][ T5736] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1216.445343][ T5736] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1216.445366][ T5736] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1216.445386][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1216.449276][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.449296][ T5736] usb 4-1: Product: syz [ 1216.449309][ T5736] usb 4-1: Manufacturer: syz [ 1216.449322][ T5736] usb 4-1: SerialNumber: syz [ 1216.557418][T23048] usb 8-1: USB disconnect, device number 46 [ 1216.572440][ T5736] usb 4-1: config 0 descriptor?? [ 1216.940783][T24910] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1216.940828][T24910] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1217.055073][ T5736] gs_usb 4-1:0.0: Configuring for 12 interfaces [ 1217.255163][ T5736] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1217.255423][ T5736] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 1218.302659][ T5736] usb 4-1: USB disconnect, device number 25 [ 1218.828410][T24923] netlink: 'syz.7.6584': attribute type 9 has an invalid length. [ 1219.245047][T13371] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1219.764344][T13371] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1220.190376][T13371] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1220.190421][T13371] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.292691][T13371] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1220.292717][T13371] usb 10-1: Manufacturer: syz [ 1221.103913][T13371] usb 10-1: config 0 descriptor?? [ 1221.137040][T13371] igorplugusb 10-1:0.0: incorrect number of endpoints [ 1222.430339][ T5736] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1222.506478][ T5743] usb 10-1: USB disconnect, device number 30 [ 1222.581319][ T5736] usb 9-1: Using ep0 maxpacket: 16 [ 1222.584181][ T5736] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1222.586344][ T5736] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1222.586369][ T5736] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1222.647484][ T5736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.647507][ T5736] usb 9-1: Product: syz [ 1222.647521][ T5736] usb 9-1: Manufacturer: syz [ 1222.647535][ T5736] usb 9-1: SerialNumber: syz [ 1222.683107][ T5736] usb 9-1: config 0 descriptor?? [ 1222.718015][ T5736] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1222.718042][ T5736] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1223.031422][ T5743] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1223.182250][ T5743] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1223.185031][ T5743] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.187168][ T5743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1223.187190][ T5743] usb 10-1: Product: syz [ 1223.187208][ T5743] usb 10-1: Manufacturer: syz [ 1223.187221][ T5743] usb 10-1: SerialNumber: syz [ 1223.247140][ T5743] usb 10-1: config 0 descriptor?? [ 1223.300344][T13371] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1223.320793][ T5736] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1223.321348][ T5736] em28xx 9-1:0.0: Config register raw data: 0x00 [ 1223.450759][T13371] usb 8-1: Using ep0 maxpacket: 32 [ 1223.451758][T13371] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1223.452680][T13371] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.454995][T13371] usb 8-1: config 0 descriptor?? [ 1223.498230][T13371] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1223.750359][ T5736] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1223.901031][ T5736] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1223.901991][ T5736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.902016][ T5736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.905342][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.905363][ T5736] usb 4-1: Product: syz [ 1223.905376][ T5736] usb 4-1: Manufacturer: syz [ 1223.905390][ T5736] usb 4-1: SerialNumber: syz [ 1223.991030][ T5736] symbolserial 4-1:1.0: symbol converter detected [ 1223.997334][ T5736] usb 4-1: symbol converter now attached to ttyUSB0 [ 1224.065531][T13371] gspca_sunplus: reg_r err -32 [ 1224.065600][T13371] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 1224.183503][T24968] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 1224.186771][T13371] usb 4-1: USB disconnect, device number 26 [ 1224.219796][T13371] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1224.229665][T13371] symbolserial 4-1:1.0: device disconnected [ 1224.767744][T24979] syzkaller0: entered promiscuous mode [ 1224.767765][T24979] syzkaller0: entered allmulticast mode [ 1225.131854][T13371] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1225.227256][ T5743] usb 9-1: USB disconnect, device number 21 [ 1225.241278][ T5743] em28xx 9-1:0.0: Disconnecting em28xx [ 1225.282537][T13371] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1225.285067][T13371] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.285105][T13371] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1225.285127][T13371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.288221][T13371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.288242][T13371] usb 4-1: Product: syz [ 1225.288256][T13371] usb 4-1: Manufacturer: syz [ 1225.288269][T13371] usb 4-1: SerialNumber: syz [ 1225.391209][T13371] usb 4-1: config 0 descriptor?? [ 1225.392162][T24982] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1225.399227][T13371] usb 4-1: ucan: probing device on interface #0 [ 1225.399245][T13371] usb 4-1: ucan: invalid EP count (1) [ 1225.399260][T13371] usb 4-1: ucan: probe failed; try to update the device firmware [ 1225.492182][ T5743] em28xx: Freeing device [ 1225.863420][ T5743] usb 10-1: USB disconnect, device number 31 [ 1226.495071][ T5743] usb 8-1: USB disconnect, device number 47 [ 1226.946555][T25017] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1226.959560][T25017] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1226.979914][T25019] syzkaller0: entered promiscuous mode [ 1226.979932][T25019] syzkaller0: entered allmulticast mode [ 1227.002535][T25017] udc dummy_udc.0: failed to start g1: -22 [ 1227.002556][T25017] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1227.162378][T25017] UDC core: g1: couldn't find an available UDC or it's busy [ 1227.625919][T25034] netlink: 388 bytes leftover after parsing attributes in process `syz.7.6623'. [ 1227.680776][ T5736] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1227.700634][ T5743] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1227.817745][T25038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6625'. [ 1227.830581][ T5736] usb 9-1: Using ep0 maxpacket: 8 [ 1227.833089][ T5736] usb 9-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1227.835116][ T5736] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.835152][ T5736] usb 9-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.835176][ T5736] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1227.835203][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.836447][ T9] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1227.836520][ T9] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1227.933537][ T5743] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1227.947544][ T5736] usb 9-1: config 0 descriptor?? [ 1227.956646][ T9] usb 3-1: USB disconnect, device number 29 [ 1227.974039][ T5743] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.974082][ T5743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.006480][ T5736] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1228.008649][ T5743] usb 10-1: config 0 descriptor?? [ 1228.057941][ T5743] pwc: Askey VC010 type 2 USB webcam detected. [ 1228.176687][ T5736] usb 4-1: USB disconnect, device number 27 [ 1228.354177][T25047] FAULT_INJECTION: forcing a failure. [ 1228.354177][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.354215][T25047] CPU: 0 UID: 0 PID: 25047 Comm: syz.3.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.354241][T25047] Tainted: [L]=SOFTLOCKUP [ 1228.354249][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1228.354260][T25047] Call Trace: [ 1228.354269][T25047] [ 1228.354278][T25047] dump_stack_lvl+0xe8/0x150 [ 1228.354310][T25047] should_fail_ex+0x410/0x560 [ 1228.354338][T25047] should_failslab+0xa8/0x100 [ 1228.354364][T25047] ? create_new_namespaces+0x33/0x6b0 [ 1228.354390][T25047] kmem_cache_alloc_noprof+0xa1/0x600 [ 1228.354424][T25047] ? create_new_namespaces+0x33/0x6b0 [ 1228.354455][T25047] create_new_namespaces+0x33/0x6b0 [ 1228.354483][T25047] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.354505][T25047] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.354527][T25047] ? security_capable+0x7e/0x2c0 [ 1228.354554][T25047] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.354580][T25047] unshare_nsproxy_namespaces+0x149/0x190 [ 1228.354609][T25047] ksys_unshare+0x5a7/0x950 [ 1228.354644][T25047] ? __pfx_ksys_unshare+0x10/0x10 [ 1228.354672][T25047] ? rcu_is_watching+0x16/0xb0 [ 1228.354707][T25047] __x64_sys_unshare+0x38/0x50 [ 1228.354735][T25047] do_syscall_64+0x166/0x520 [ 1228.354762][T25047] ? trace_irq_disable+0x3b/0x140 [ 1228.354783][T25047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.354808][T25047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.354827][T25047] RIP: 0033:0x7f345cd9e159 [ 1228.354844][T25047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.354861][T25047] RSP: 002b:00007f345aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1228.354882][T25047] RAX: ffffffffffffffda RBX: 00007f345d025fa0 RCX: 00007f345cd9e159 [ 1228.354896][T25047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1228.354909][T25047] RBP: 00007f345ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 1228.354922][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.354934][T25047] R13: 00007f345d026038 R14: 00007f345d025fa0 R15: 00007ffcaeb5b728 [ 1228.354964][T25047] [ 1228.561379][ T9] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1228.639022][ T5743] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1228.652344][ T5743] pwc: recv_control_msg error -32 req 02 val 2700 [ 1228.656041][ T5743] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1228.656611][ T5743] pwc: recv_control_msg error -32 req 04 val 1000 [ 1228.696924][ T5743] pwc: recv_control_msg error -32 req 04 val 1300 [ 1228.708978][ T5743] pwc: recv_control_msg error -32 req 04 val 1400 [ 1228.710171][ T5743] pwc: recv_control_msg error -32 req 02 val 2000 [ 1228.726155][ T5743] pwc: recv_control_msg error -32 req 02 val 2100 [ 1228.736723][ T5743] pwc: recv_control_msg error -32 req 04 val 1500 [ 1228.750427][ T9] usb 8-1: device descriptor read/64, error -71 [ 1228.944138][ T5743] pwc: recv_control_msg error -71 req 02 val 2400 [ 1228.945076][ T5743] pwc: recv_control_msg error -71 req 02 val 2600 [ 1228.945465][ T5743] pwc: recv_control_msg error -71 req 02 val 2900 [ 1228.945816][ T5743] pwc: recv_control_msg error -71 req 02 val 2800 [ 1228.946326][ T5743] pwc: recv_control_msg error -71 req 04 val 1100 [ 1228.947278][ T5743] pwc: recv_control_msg error -71 req 04 val 1200 [ 1228.991750][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1229.050757][ T5743] pwc: Registered as video103. [ 1229.084299][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input21 [ 1229.130835][ T9] usb 8-1: device descriptor read/64, error -71 [ 1229.183344][ T5743] usb 10-1: USB disconnect, device number 32 [ 1229.355880][ T9] usb usb8-port1: attempt power cycle [ 1231.230141][ T9] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1231.251327][ T9] usb 8-1: device descriptor read/8, error -71 [ 1231.437176][ T5743] usb 9-1: USB disconnect, device number 22 [ 1231.500306][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1231.521943][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1231.523522][ T9] usb 8-1: device descriptor read/8, error -32 [ 1231.630786][ T9] usb usb8-port1: unable to enumerate USB device [ 1232.054854][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6640'. [ 1232.170059][T25083] hsr_slave_1 (unregistering): left promiscuous mode [ 1232.188652][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1232.343248][T25092] jffs2: notice: (25092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1232.819877][ T5743] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1233.298085][ T5743] usb 8-1: Using ep0 maxpacket: 32 [ 1233.341113][ T5743] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1233.928153][ T5743] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.174424][ T5743] usb 8-1: config 0 descriptor?? [ 1234.212935][ T5743] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1234.379398][T25102] netlink: 212 bytes leftover after parsing attributes in process `syz.8.6647'. [ 1235.315618][ T5743] gspca_sunplus: reg_r err -32 [ 1235.315689][ T5743] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 1236.839732][T25106] syzkaller1: entered promiscuous mode [ 1236.839752][T25106] syzkaller1: entered allmulticast mode [ 1236.968580][ T5736] usb 8-1: USB disconnect, device number 52 [ 1236.981724][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1237.131953][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1237.132855][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.132894][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.135322][ T9] usb 4-1: config 0 descriptor?? [ 1237.190165][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1237.471782][ T5736] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1237.584566][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1237.585156][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1237.586108][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1237.588169][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1237.589577][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1237.629410][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1237.645273][ T5736] usb 10-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 1237.647314][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1237.647989][ T5736] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.648008][ T5736] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1237.648047][ T5736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.688766][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1237.707800][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1237.737127][ T5736] usb 10-1: 0:1 : does not exist [ 1237.852719][ T5743] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1237.936093][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1237.937870][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1237.939835][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1237.957439][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1237.976391][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1237.978467][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1238.004266][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.004314][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.028881][ T9] pwc: Registered as video103. [ 1238.037343][ T5743] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1238.051974][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.052014][ T5743] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.052048][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.056118][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 1238.096535][ T5736] usb 10-1: USB disconnect, device number 33 [ 1238.118980][T13371] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1238.187918][ T9] usb 4-1: USB disconnect, device number 28 [ 1238.286514][T13371] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.287608][T13371] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1238.287629][T13371] usb 8-1: config 1 has no interface number 0 [ 1238.287661][T13371] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 1238.287706][T13371] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1238.318934][T13371] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.318981][T13371] usb 8-1: Product: syz [ 1238.318994][T13371] usb 8-1: Manufacturer: syz [ 1238.319008][T13371] usb 8-1: SerialNumber: syz [ 1238.407017][T25141] FAULT_INJECTION: forcing a failure. [ 1238.407017][T25141] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.407053][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.8.6660 Tainted: G L syzkaller #0 PREEMPT(full) [ 1238.407079][T25141] Tainted: [L]=SOFTLOCKUP [ 1238.407087][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1238.407098][T25141] Call Trace: [ 1238.407107][T25141] [ 1238.407116][T25141] dump_stack_lvl+0xe8/0x150 [ 1238.407149][T25141] should_fail_ex+0x410/0x560 [ 1238.407176][T25141] should_failslab+0xa8/0x100 [ 1238.407202][T25141] ? do_getname+0x2e/0x250 [ 1238.407247][T25141] kmem_cache_alloc_noprof+0xa1/0x600 [ 1238.407277][T25141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.407300][T25141] ? do_futex+0x3e7/0x4e0 [ 1238.407326][T25141] ? do_getname+0x2e/0x250 [ 1238.407357][T25141] do_getname+0x2e/0x250 [ 1238.407380][T25141] ? getname_flags+0x11/0x20 [ 1238.407407][T25141] do_sys_openat2+0xcc/0x200 [ 1238.407433][T25141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.407455][T25141] ? __se_sys_futex+0x3a8/0x450 [ 1238.407482][T25141] ? __pfx_do_sys_openat2+0x10/0x10 [ 1238.407513][T25141] ? rcu_is_watching+0x16/0xb0 [ 1238.407538][T25141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.407564][T25141] __x64_sys_open+0x11e/0x150 [ 1238.407594][T25141] do_syscall_64+0x166/0x520 [ 1238.407621][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.407646][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.407666][T25141] RIP: 0033:0x7f7ad019e159 [ 1238.407683][T25141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.407699][T25141] RSP: 002b:00007f7ad1044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1238.407720][T25141] RAX: ffffffffffffffda RBX: 00007f7ad0425fa0 RCX: 00007f7ad019e159 [ 1238.407735][T25141] RDX: 0000000000000086 RSI: 0000000000064842 RDI: 0000200000000080 [ 1238.407748][T25141] RBP: 00007f7ad023506b R08: 0000000000000000 R09: 0000000000000000 [ 1238.407761][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.407773][T25141] R13: 00007f7ad0426038 R14: 00007f7ad0425fa0 R15: 00007fff7ef227c8 [ 1238.407803][T25141] [ 1239.038710][T25149] netlink: 212 bytes leftover after parsing attributes in process `syz.8.6663'. [ 1239.296651][T13371] cdc_ncm 8-1:1.1: failed GET_NTB_PARAMETERS [ 1239.296692][T13371] cdc_ncm 8-1:1.1: bind() failure [ 1240.279676][ T5743] rtsx_usb 3-1:1.0: probe with driver rtsx_usb failed with error -110 [ 1240.315708][T13371] usb 8-1: USB disconnect, device number 53 [ 1241.330312][ T5736] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1241.399301][T25170] syzkaller0: entered promiscuous mode [ 1241.399321][T25170] syzkaller0: entered allmulticast mode [ 1241.462248][ T5736] usb 10-1: device descriptor read/64, error -71 [ 1241.703839][ T5736] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1241.831533][ T5736] usb 10-1: device descriptor read/64, error -71 [ 1241.945213][ T5736] usb usb10-port1: attempt power cycle [ 1242.001792][ T5743] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1242.079492][ T10] usb 3-1: USB disconnect, device number 30 [ 1242.145392][T25192] overlayfs: overlapping lowerdir path [ 1242.156028][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1242.157026][ T5743] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1242.160127][ T5743] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1242.160149][ T5743] usb 9-1: Product: syz [ 1242.160162][ T5743] usb 9-1: Manufacturer: syz [ 1242.160176][ T5743] usb 9-1: SerialNumber: syz [ 1242.212300][ T5743] usb 9-1: config 0 descriptor?? [ 1242.217143][ T5743] ch341 9-1:0.0: ch341-uart converter detected [ 1242.290353][ T5736] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1242.313905][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1242.314508][ T5736] usb 10-1: device descriptor read/8, error -71 [ 1242.319354][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.319401][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1242.361321][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1242.361364][ T9] usb 4-1: Product: syz [ 1242.361378][ T9] usb 4-1: Manufacturer: syz [ 1242.393106][ T9] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1242.478124][T25197] CIFS: Attempting to mount //127.0.0.1/share [ 1242.491801][T25197] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1242.491839][T25197] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1242.550697][ T5736] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1242.571914][ T5736] usb 10-1: device descriptor read/8, error -71 [ 1242.846498][ T5736] usb usb10-port1: unable to enumerate USB device [ 1243.564056][ T5743] ch341-uart ttyUSB0: failed to read break control: -71 [ 1243.564104][ T5743] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1243.603018][ T5743] usb 9-1: USB disconnect, device number 23 [ 1243.621846][ T5743] ch341 9-1:0.0: device disconnected [ 1245.346221][ T9] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 1245.398526][ T9] usb 4-1: USB disconnect, device number 29 [ 1245.442920][ T9] mos7840 4-1:1.0: device disconnected [ 1245.638308][T25217] netlink: 212 bytes leftover after parsing attributes in process `syz.9.6692'. [ 1247.738743][T25222] overlayfs: failed to resolve './file1/file0': -2 [ 1249.042289][ T5736] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1249.191156][ T5736] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1249.191889][ T5736] usb 4-1: config 0 has no interfaces? [ 1249.191917][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.202101][ T5736] usb 4-1: config 0 descriptor?? [ 1249.236135][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1249.380391][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1249.381470][ T9] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1249.384348][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.416086][ T9] usb 9-1: config 0 descriptor?? [ 1249.436932][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1249.642748][ T9] gspca_vc032x: reg_r err -32 [ 1249.642766][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642776][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642784][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642793][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642802][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642811][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642819][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642828][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642837][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642845][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642854][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642862][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642871][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642880][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642888][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642897][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642905][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642914][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1249.642922][ T9] gspca_vc032x: Unknown sensor... [ 1249.642979][ T9] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1250.422115][T25272] netlink: 'syz.0.6709': attribute type 1 has an invalid length. [ 1250.510956][T25272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1250.579431][T25274] bond5: (slave geneve2): making interface the new active one [ 1250.595818][T25274] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1253.180588][T25286] nfs: Unknown parameter 'retran' [ 1253.391788][ T5736] usb 4-1: USB disconnect, device number 30 [ 1254.331946][ T9] usb 9-1: USB disconnect, device number 24 [ 1254.955634][ T9] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1255.112724][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.132826][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.132849][ T9] usb 9-1: Product: syz [ 1255.132862][ T9] usb 9-1: Manufacturer: syz [ 1255.132875][ T9] usb 9-1: SerialNumber: syz [ 1255.167753][ T9] usb 9-1: config 0 descriptor?? [ 1255.817945][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1255.838731][T25290] Bluetooth: MGMT ver 1.23 [ 1255.963733][T25301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.517836][T25313] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1256.936499][ T6108] rtrs_client L2026: : CM error (CM event: address error, err: -ENODEV) [ 1256.982894][T25313] rtrs_client L2646: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 1257.133002][ T5736] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1257.280434][ T5736] usb 10-1: Using ep0 maxpacket: 8 [ 1257.282519][ T5736] usb 10-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1257.285106][ T5736] usb 10-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1257.285128][ T5736] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1257.285156][ T5736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.288811][ T5736] usb 10-1: config 0 descriptor?? [ 1257.353755][ T5736] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1257.590667][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1257.615013][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1257.632125][ T9] usb 9-1: USB disconnect, device number 25 [ 1257.772611][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1257.777896][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1257.777923][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.777942][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.777984][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1257.778012][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.859756][ T10] usb 4-1: config 0 descriptor?? [ 1258.243665][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1258.340476][ T10] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.001B/input/input23 [ 1258.391819][ T9] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1258.392542][ T9] usb 3-1: config 0 has no interfaces? [ 1258.392569][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.396281][ T9] usb 3-1: config 0 descriptor?? [ 1258.471461][ T10] lenovo 0003:17EF:6047.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 1258.522889][ T5743] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1258.671597][ T5743] usb 9-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1258.672732][ T5743] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.672777][ T5743] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.672889][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.571774][ T5743] rtsx_usb 9-1:1.0: probe with driver rtsx_usb failed with error -110 [ 1259.636336][ T5743] usb 10-1: USB disconnect, device number 38 [ 1260.131107][ T5743] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1260.262693][ T5743] usb 10-1: device descriptor read/64, error -71 [ 1260.342513][T25366] netlink: 'syz.0.6739': attribute type 1 has an invalid length. [ 1260.362772][T13371] usb 4-1: USB disconnect, device number 31 [ 1260.456408][T25366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1260.501630][ T5743] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 1260.751952][ T5743] usb 10-1: device descriptor read/64, error -71 [ 1261.084654][ T5743] usb usb10-port1: attempt power cycle [ 1261.174578][ T10] usb 3-1: USB disconnect, device number 31 [ 1261.393671][ T10] usb 9-1: USB disconnect, device number 26 [ 1261.421346][ T5743] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1261.541523][ T5743] usb 10-1: device descriptor read/8, error -71 [ 1261.917419][ T5743] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 1261.934086][ T5743] usb 10-1: device descriptor read/8, error -71 [ 1262.247209][T13371] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1262.247636][ T5743] usb usb10-port1: unable to enumerate USB device [ 1262.321455][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1262.421622][T13371] usb 8-1: Using ep0 maxpacket: 8 [ 1262.422159][T13371] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1262.423191][T13371] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1262.423211][T13371] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.423245][T13371] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.423284][T13371] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.481795][T13371] usbtmc 8-1:16.0: bulk endpoints not found [ 1262.501008][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 1262.508056][ T10] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1262.508081][ T10] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 1262.508104][ T10] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1262.508126][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1262.508153][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.579678][ T10] usb 9-1: config 0 descriptor?? [ 1262.585885][T25391] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1262.964616][T25409] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6754'. [ 1262.986181][T25409] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6754'. [ 1263.017581][T25407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.142303][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142328][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142345][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142362][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142379][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142395][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142412][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142428][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142445][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142461][ T10] microsoft 0003:045E:00E3.001C: unknown main item tag 0x0 [ 1263.142488][ T10] microsoft 0003:045E:00E3.001C: unbalanced collection at end of report description [ 1263.143096][ T10] microsoft 0003:045E:00E3.001C: parse failed [ 1263.143173][ T10] microsoft 0003:045E:00E3.001C: probe with driver microsoft failed with error -22 [ 1263.323725][ T10] usb 9-1: USB disconnect, device number 27 [ 1264.009437][T13371] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1265.038065][T13371] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1265.125287][T13371] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1265.125331][T13371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.327702][T13371] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1265.327728][T13371] usb 4-1: Manufacturer: syz [ 1265.834512][T13371] usb 4-1: config 0 descriptor?? [ 1266.080363][T25429] syzkaller1: entered promiscuous mode [ 1266.080383][T25429] syzkaller1: entered allmulticast mode [ 1266.181828][ T10] usb 8-1: USB disconnect, device number 55 [ 1266.324387][T13371] rc_core: IR keymap rc-hauppauge not found [ 1266.324403][T13371] Registered IR keymap rc-empty [ 1266.348040][T13371] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1266.370124][T13371] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 1266.647907][T25437] syzkaller0: entered promiscuous mode [ 1266.647927][T25437] syzkaller0: entered allmulticast mode [ 1267.002347][T13371] usb 4-1: USB disconnect, device number 32 [ 1267.726640][T25456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1269.276516][T13371] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1269.669531][T13371] usb 3-1: Using ep0 maxpacket: 8 [ 1269.886670][T13371] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1269.889242][T13371] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1269.889264][T13371] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.889299][T13371] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1269.889318][T13371] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1269.889338][T13371] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1269.889371][T13371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.983117][T13371] usbtmc 3-1:16.0: bulk endpoints not found [ 1272.875759][T25483] syzkaller1: entered promiscuous mode [ 1272.875779][T25483] syzkaller1: entered allmulticast mode [ 1272.879881][ T5736] usb 3-1: USB disconnect, device number 32 [ 1273.153159][T25500] syzkaller0: entered promiscuous mode [ 1273.153178][T25500] syzkaller0: entered allmulticast mode [ 1273.190684][T25501] hpfs: Bad magic ... probably not HPFS [ 1273.259061][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1273.300795][ T5743] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 1273.455111][ T5743] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1273.483341][ T5743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.483363][ T5743] usb 10-1: Product: syz [ 1273.483377][ T5743] usb 10-1: Manufacturer: syz [ 1273.483391][ T5743] usb 10-1: SerialNumber: syz [ 1273.574879][T25509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1274.019386][ T5743] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1274.923348][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6801'. [ 1274.923622][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6801'. [ 1274.925475][T25540] : renamed from bond_slave_1 [ 1275.116261][ T5736] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1275.173632][T25542] overlayfs: failed to resolve './file1/file0': -2 [ 1275.280687][ T5736] usb 9-1: Using ep0 maxpacket: 8 [ 1275.281354][ T5736] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1275.285132][ T5736] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1275.285155][ T5736] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.285191][ T5736] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.285210][ T5736] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.285230][ T5736] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1275.285270][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.384192][ T5736] usbtmc 9-1:16.0: bulk endpoints not found [ 1275.657554][T25552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1276.026466][ T5743] usb 10-1: USB disconnect, device number 44 [ 1276.051922][ T5743] usblp0: removed [ 1276.801730][ T5743] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1276.876550][T25585] overlayfs: failed to clone upperpath [ 1276.951799][ T5743] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1276.953087][ T5743] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.953130][ T5743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.971837][ T5743] usb 10-1: config 0 descriptor?? [ 1277.027362][ T5743] pwc: Askey VC010 type 2 USB webcam detected. [ 1277.060480][ T5736] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1277.262437][ T5736] usb 4-1: Using ep0 maxpacket: 16 [ 1277.263136][ T5736] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1277.264287][ T5736] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1277.264310][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1277.269122][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.269144][ T5736] usb 4-1: Product: syz [ 1277.269157][ T5736] usb 4-1: Manufacturer: syz [ 1277.269170][ T5736] usb 4-1: SerialNumber: syz [ 1277.343427][ T5736] usb 4-1: config 0 descriptor?? [ 1277.427445][ T5743] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1277.428254][ T5743] pwc: recv_control_msg error -32 req 02 val 2700 [ 1277.429408][ T5743] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1277.459310][ T5743] pwc: recv_control_msg error -32 req 04 val 1000 [ 1277.473158][ T5743] pwc: recv_control_msg error -32 req 04 val 1300 [ 1277.475055][ T5743] pwc: recv_control_msg error -32 req 04 val 1400 [ 1277.477607][ T5743] pwc: recv_control_msg error -32 req 02 val 2000 [ 1277.479770][ T5743] pwc: recv_control_msg error -32 req 02 val 2100 [ 1277.589926][ T5736] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1277.590030][ T5736] imon 4-1:0.0: unable to initialize intf0, err -19 [ 1277.590044][ T5736] imon:imon_probe: failed to initialize context! [ 1277.590056][ T5736] imon 4-1:0.0: unable to register, err -19 [ 1277.639650][ T5736] usb 4-1: USB disconnect, device number 33 [ 1277.718215][ T5743] pwc: recv_control_msg error -32 req 02 val 2500 [ 1277.719349][ T5743] pwc: recv_control_msg error -32 req 02 val 2400 [ 1277.735894][ T5743] pwc: recv_control_msg error -32 req 02 val 2600 [ 1277.948588][ T5736] usb 9-1: USB disconnect, device number 28 [ 1277.963891][ T5743] pwc: recv_control_msg error -71 req 02 val 2800 [ 1277.965208][ T5743] pwc: recv_control_msg error -71 req 04 val 1100 [ 1277.966068][ T5743] pwc: recv_control_msg error -71 req 04 val 1200 [ 1277.998236][ T5743] pwc: Registered as video103. [ 1278.023355][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 1278.060750][ T5743] usb 10-1: USB disconnect, device number 45 [ 1278.522617][ T5736] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1278.676335][ T5736] usb 9-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 1278.697452][ T5736] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1278.697480][ T5736] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1278.697528][ T5736] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.697556][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.745589][ T5736] usb 9-1: config 0 descriptor?? [ 1279.638127][ T5736] usbhid 9-1:0.0: can't add hid device: -71 [ 1279.638214][ T5736] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1279.667429][ T5736] usb 9-1: USB disconnect, device number 29 [ 1280.024231][T25638] FAULT_INJECTION: forcing a failure. [ 1280.024231][T25638] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.024267][T25638] CPU: 0 UID: 0 PID: 25638 Comm: syz.3.6837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.024293][T25638] Tainted: [L]=SOFTLOCKUP [ 1280.024300][T25638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1280.024312][T25638] Call Trace: [ 1280.024321][T25638] [ 1280.024329][T25638] dump_stack_lvl+0xe8/0x150 [ 1280.024361][T25638] should_fail_ex+0x410/0x560 [ 1280.024390][T25638] should_failslab+0xa8/0x100 [ 1280.024417][T25638] __kmalloc_node_noprof+0x100/0x720 [ 1280.024439][T25638] ? __kmalloc_node_noprof+0x2f0/0x720 [ 1280.024458][T25638] ? get_callchain_buffers+0x198/0x350 [ 1280.024481][T25638] ? get_callchain_buffers+0x198/0x350 [ 1280.024510][T25638] get_callchain_buffers+0x198/0x350 [ 1280.024537][T25638] stack_map_alloc+0x301/0x4b0 [ 1280.024561][T25638] map_create+0xf3d/0x1b70 [ 1280.024593][T25638] ? __pfx_map_create+0x10/0x10 [ 1280.024619][T25638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.024647][T25638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.024669][T25638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.024691][T25638] ? security_bpf+0x7e/0x2d0 [ 1280.024717][T25638] __sys_bpf+0xaea/0xd90 [ 1280.024748][T25638] ? __pfx___sys_bpf+0x10/0x10 [ 1280.024773][T25638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.024796][T25638] ? do_futex+0x3e7/0x4e0 [ 1280.024848][T25638] ? rcu_is_watching+0x16/0xb0 [ 1280.024874][T25638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.024901][T25638] __x64_sys_bpf+0xba/0xd0 [ 1280.024925][T25638] do_syscall_64+0x166/0x520 [ 1280.024953][T25638] ? trace_irq_disable+0x3b/0x140 [ 1280.024983][T25638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.025008][T25638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.025027][T25638] RIP: 0033:0x7f345cd9e159 [ 1280.025044][T25638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.025060][T25638] RSP: 002b:00007f345aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1280.025080][T25638] RAX: ffffffffffffffda RBX: 00007f345d025fa0 RCX: 00007f345cd9e159 [ 1280.025095][T25638] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 1280.025108][T25638] RBP: 00007f345ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 1280.025120][T25638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.025132][T25638] R13: 00007f345d026038 R14: 00007f345d025fa0 R15: 00007ffcaeb5b728 [ 1280.025163][T25638] [ 1280.720843][T13371] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1280.850886][T13371] usb 8-1: device descriptor read/64, error -71 [ 1280.910437][ T10] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1280.991079][ T5736] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1281.060920][ T10] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1281.062086][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.062189][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.099746][T13371] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1281.143827][ T5736] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1281.146282][ T5736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.146309][ T5736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.149626][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.149647][ T5736] usb 3-1: Product: syz [ 1281.149661][ T5736] usb 3-1: Manufacturer: syz [ 1281.149674][ T5736] usb 3-1: SerialNumber: syz [ 1281.236157][ T5736] symbolserial 3-1:1.0: symbol converter detected [ 1281.249151][ T5736] usb 3-1: symbol converter now attached to ttyUSB0 [ 1281.257475][T13371] usb 8-1: device descriptor read/64, error -71 [ 1281.264383][ T5743] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1281.363007][T13371] usb usb8-port1: attempt power cycle [ 1281.412971][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1281.413013][ T5743] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1281.415033][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.415052][ T5743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1281.482643][ T5743] usb 4-1: string descriptor 0 read error: -22 [ 1281.482751][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.556974][ T5743] usb 4-1: selecting invalid altsetting 1 [ 1281.557521][ T5743] usb 4-1: unit 6 not found! [ 1281.583469][T25656] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 1281.602023][ T5736] usb 3-1: USB disconnect, device number 33 [ 1281.629559][ T5736] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1281.630047][ T5736] symbolserial 3-1:1.0: device disconnected [ 1281.909868][T13371] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1281.931435][T13371] usb 8-1: device descriptor read/8, error -71 [ 1282.300239][ T5743] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1282.412643][T13371] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1282.430741][T13371] usb 8-1: device descriptor read/8, error -71 [ 1282.541767][T13371] usb usb8-port1: unable to enumerate USB device [ 1282.689877][ T5743] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1282.981032][ T1385] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.991694][ T154] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.991729][ T154] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.991759][ T154] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.062252][ T5743] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1283.211074][ T5743] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1283.212785][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.212827][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.218109][ T5743] usb 3-1: config 0 descriptor?? [ 1283.261650][ T5743] pwc: Askey VC010 type 2 USB webcam detected. [ 1283.390340][T13371] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1283.541430][T13371] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1283.543832][T13371] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1283.543858][T13371] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.543877][T13371] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.543919][T13371] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1283.543947][T13371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.600287][T13371] usb 9-1: config 0 descriptor?? [ 1283.646922][ T5743] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1283.648799][ T5743] pwc: recv_control_msg error -32 req 02 val 2700 [ 1283.670421][ T5743] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1283.674824][ T5743] pwc: recv_control_msg error -32 req 04 val 1000 [ 1283.677170][ T5743] pwc: recv_control_msg error -32 req 04 val 1300 [ 1283.704203][ T5743] pwc: recv_control_msg error -32 req 04 val 1400 [ 1283.705352][ T5743] pwc: recv_control_msg error -32 req 02 val 2000 [ 1283.705950][ T5743] pwc: recv_control_msg error -32 req 02 val 2100 [ 1283.706499][ T5743] pwc: recv_control_msg error -32 req 04 val 1500 [ 1283.801863][ T5736] usb 10-1: USB disconnect, device number 46 [ 1283.910585][ T5743] pwc: recv_control_msg error -71 req 02 val 2400 [ 1283.911472][ T5743] pwc: recv_control_msg error -71 req 02 val 2600 [ 1283.916560][ T5743] pwc: recv_control_msg error -71 req 02 val 2900 [ 1283.917605][ T5743] pwc: recv_control_msg error -71 req 02 val 2800 [ 1283.918733][ T5743] pwc: recv_control_msg error -71 req 04 val 1100 [ 1283.942528][ T5743] pwc: recv_control_msg error -71 req 04 val 1200 [ 1283.976688][ T5743] pwc: Registered as video103. [ 1283.993022][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 1284.031147][ T5743] usb 3-1: USB disconnect, device number 34 [ 1284.099952][T13371] hid_parser_main: 4 callbacks suppressed [ 1284.099973][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.099992][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.100009][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.100025][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.100042][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.100059][T13371] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 1284.100074][T13371] lenovo 0003:17EF:6047.001D: unbalanced collection at end of report description [ 1284.169562][T13371] lenovo 0003:17EF:6047.001D: hid_parse failed [ 1284.169620][T13371] lenovo 0003:17EF:6047.001D: probe with driver lenovo failed with error -22 [ 1284.282542][T13371] usb 4-1: USB disconnect, device number 34 [ 1284.444012][T25697] syzkaller0: entered promiscuous mode [ 1284.444033][T25697] syzkaller0: entered allmulticast mode [ 1284.885034][T13371] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1285.010470][T13371] usb 4-1: device descriptor read/64, error -71 [ 1285.597417][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1285.652177][T13371] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1285.693357][T25712] FAULT_INJECTION: forcing a failure. [ 1285.693357][T25712] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.693387][T25712] CPU: 0 UID: 0 PID: 25712 Comm: syz.9.6865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.693412][T25712] Tainted: [L]=SOFTLOCKUP [ 1285.693420][T25712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1285.693432][T25712] Call Trace: [ 1285.693440][T25712] [ 1285.693449][T25712] dump_stack_lvl+0xe8/0x150 [ 1285.693481][T25712] should_fail_ex+0x410/0x560 [ 1285.693510][T25712] should_failslab+0xa8/0x100 [ 1285.693536][T25712] ? do_getname+0x2e/0x250 [ 1285.693561][T25712] kmem_cache_alloc_noprof+0xa1/0x600 [ 1285.693590][T25712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.693613][T25712] ? do_futex+0x3e7/0x4e0 [ 1285.693639][T25712] ? do_getname+0x2e/0x250 [ 1285.693669][T25712] do_getname+0x2e/0x250 [ 1285.693692][T25712] ? getname_flags+0x11/0x20 [ 1285.693719][T25712] do_sys_openat2+0xcc/0x200 [ 1285.693744][T25712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.693771][T25712] ? __se_sys_futex+0x3a8/0x450 [ 1285.693798][T25712] ? __pfx_do_sys_openat2+0x10/0x10 [ 1285.693829][T25712] ? rcu_is_watching+0x16/0xb0 [ 1285.693854][T25712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.693880][T25712] __x64_sys_openat+0x138/0x170 [ 1285.693911][T25712] do_syscall_64+0x166/0x520 [ 1285.693938][T25712] ? trace_irq_disable+0x3b/0x140 [ 1285.693959][T25712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.693983][T25712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.694003][T25712] RIP: 0033:0x7ff5d2b9e159 [ 1285.694020][T25712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.694036][T25712] RSP: 002b:00007ff5d3b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1285.694057][T25712] RAX: ffffffffffffffda RBX: 00007ff5d2e25fa0 RCX: 00007ff5d2b9e159 [ 1285.694072][T25712] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1285.694085][T25712] RBP: 00007ff5d2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1285.694098][T25712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.694110][T25712] R13: 00007ff5d2e26038 R14: 00007ff5d2e25fa0 R15: 00007ffdda65de78 [ 1285.694139][T25712] [ 1285.805189][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1285.810556][T13371] usb 4-1: device descriptor read/64, error -71 [ 1285.817647][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.817690][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.006503][T13371] usb usb4-port1: attempt power cycle [ 1286.354396][ T10] usb 9-1: USB disconnect, device number 30 [ 1286.430492][T13371] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1286.452055][T13371] usb 4-1: device descriptor read/8, error -71 [ 1286.690767][T13371] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1286.726331][T13371] usb 4-1: device descriptor read/8, error -71 [ 1286.830607][T13371] usb usb4-port1: unable to enumerate USB device [ 1288.807430][ T5743] usb 3-1: USB disconnect, device number 35 [ 1289.120387][T13371] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1289.345753][ T5773] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1289.692386][T13371] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1289.692429][T13371] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1289.693629][T13371] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.693650][T13371] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.738015][ T5743] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1289.751365][T13371] usb 10-1: string descriptor 0 read error: -22 [ 1289.751521][T13371] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.777474][ T5773] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1289.778608][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.778648][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.824471][ T5773] usb 4-1: config 0 descriptor?? [ 1289.827707][T13371] usb 10-1: selecting invalid altsetting 1 [ 1289.828242][T13371] usb 10-1: unit 6 not found! [ 1289.829392][ T31] audit: type=1800 audit(1790969424.434:308): pid=25720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6869" name="nullb0" dev="tmpfs" ino=3138 res=0 errno=0 [ 1289.891373][ T5773] pwc: Askey VC010 type 2 USB webcam detected. [ 1289.894147][ T5743] usb 8-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 1289.898135][ T5743] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.898155][ T5743] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1289.898195][ T5743] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.251568][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6880'. [ 1290.328437][T13371] usb 10-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1290.355317][ T5773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1290.369390][ T5773] pwc: recv_control_msg error -32 req 02 val 2700 [ 1290.376977][ T5773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1290.387878][ T5773] pwc: recv_control_msg error -32 req 04 val 1000 [ 1290.402012][ T5773] pwc: recv_control_msg error -32 req 04 val 1300 [ 1290.408039][ T5773] pwc: recv_control_msg error -32 req 04 val 1400 [ 1290.424098][ T5773] pwc: recv_control_msg error -32 req 02 val 2000 [ 1290.438274][ T5773] pwc: recv_control_msg error -32 req 02 val 2100 [ 1290.454483][ T5773] pwc: recv_control_msg error -32 req 04 val 1500 [ 1290.468511][ T5773] pwc: recv_control_msg error -32 req 02 val 2500 [ 1290.478778][ T5773] pwc: recv_control_msg error -32 req 02 val 2400 [ 1290.497648][ T5773] pwc: recv_control_msg error -32 req 02 val 2600 [ 1290.658092][ T5743] usb 8-1: 0:1 : does not exist [ 1290.658155][ T5743] usb 8-1: unit 0 not found! [ 1290.682635][T13371] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1290.704129][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 1290.704632][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 1290.705073][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 1290.736497][ T5773] pwc: Registered as video103. [ 1290.776987][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 1290.831662][ T5773] usb 4-1: USB disconnect, device number 39 [ 1291.016491][ T5743] usb 8-1: USB disconnect, device number 60 [ 1292.269987][T14305] Bluetooth: hci6: command 0x0406 tx timeout [ 1293.084166][T13371] usb 10-1: USB disconnect, device number 47 [ 1293.110783][ T5743] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1293.242363][ T5743] usb 8-1: device descriptor read/64, error -71 [ 1293.268467][T25779] nbd3: detected capacity change from 0 to 63 [ 1293.298022][T25785] block nbd3: NBD_DISCONNECT [ 1293.299072][T25785] block nbd3: Disconnected due to user request. [ 1293.299087][T25785] block nbd3: shutting down sockets [ 1293.323390][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.323479][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1293.354153][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1293.354216][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1293.354268][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1293.354309][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1293.354463][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.354488][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1293.354644][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.354667][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1293.354756][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.354778][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1293.354860][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.354882][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1293.355386][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.355409][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1293.355489][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.355511][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1293.355591][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.355682][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.451344][T25291] ldm_validate_partition_table(): Disk read failed. [ 1293.491901][T25291] Dev nbd3: unable to read RDB block 0 [ 1293.545476][ T5743] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1293.583707][T25291] nbd3: unable to read partition table [ 1293.611298][T25291] ldm_validate_partition_table(): Disk read failed. [ 1293.659288][T25291] Dev nbd3: unable to read RDB block 0 [ 1293.661420][T25291] nbd3: unable to read partition table [ 1293.692301][ T5743] usb 8-1: device descriptor read/64, error -71 [ 1293.740140][T13371] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1293.800541][ T5743] usb usb8-port1: attempt power cycle [ 1293.907322][T13371] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1293.950020][T13371] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1293.950833][T13371] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.950854][T13371] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1293.950877][T13371] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1293.950906][T13371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.996795][T13371] usb 3-1: config 0 descriptor?? [ 1294.107756][T25791] FAULT_INJECTION: forcing a failure. [ 1294.107756][T25791] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.107789][T25791] CPU: 0 UID: 0 PID: 25791 Comm: syz.9.6893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.107814][T25791] Tainted: [L]=SOFTLOCKUP [ 1294.107822][T25791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1294.107834][T25791] Call Trace: [ 1294.107842][T25791] [ 1294.107851][T25791] dump_stack_lvl+0xe8/0x150 [ 1294.107886][T25791] should_fail_ex+0x410/0x560 [ 1294.107914][T25791] should_failslab+0xa8/0x100 [ 1294.107940][T25791] ? do_getname+0x2e/0x250 [ 1294.107965][T25791] kmem_cache_alloc_noprof+0xa1/0x600 [ 1294.107997][T25791] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1294.108020][T25791] ? do_getname+0x2e/0x250 [ 1294.108044][T25791] ? sched_clock_cpu+0x74/0x440 [ 1294.108069][T25791] do_getname+0x2e/0x250 [ 1294.108092][T25791] ? getname_flags+0x11/0x20 [ 1294.108119][T25791] do_sys_openat2+0xcc/0x200 [ 1294.108148][T25791] ? __pfx_do_sys_openat2+0x10/0x10 [ 1294.108176][T25791] ? __irq_exit_rcu+0xcb/0x220 [ 1294.108201][T25791] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1294.108225][T25791] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1294.108253][T25791] ? handle_softirqs+0x720/0x860 [ 1294.108281][T25791] __x64_sys_openat+0x138/0x170 [ 1294.108313][T25791] do_syscall_64+0x166/0x520 [ 1294.108340][T25791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.108365][T25791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.108384][T25791] RIP: 0033:0x7ff5d2b9e159 [ 1294.108402][T25791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.108418][T25791] RSP: 002b:00007ff5d3b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1294.108438][T25791] RAX: ffffffffffffffda RBX: 00007ff5d2e25fa0 RCX: 00007ff5d2b9e159 [ 1294.108452][T25791] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1294.108466][T25791] RBP: 00007ff5d2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1294.108478][T25791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.108490][T25791] R13: 00007ff5d2e26038 R14: 00007ff5d2e25fa0 R15: 00007ffdda65de78 [ 1294.108520][T25791] [ 1294.172837][ T5743] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1294.232318][ T5743] usb 8-1: device descriptor read/8, error -71 [ 1294.473799][T25795] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6895'. [ 1294.480785][ T5743] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1294.547165][ T5743] usb 8-1: device descriptor read/8, error -71 [ 1294.636808][T13371] usbhid 3-1:0.0: can't add hid device: -71 [ 1294.636896][T13371] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1294.662734][ T5743] usb usb8-port1: unable to enumerate USB device [ 1294.678247][T13371] usb 3-1: USB disconnect, device number 36 [ 1294.892554][T25805] ip_tables: iptables: counters copy to user failed while replacing table [ 1295.090077][ T5743] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1295.230407][T13371] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1295.248730][ T5743] usb 4-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 1295.272825][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.272851][ T5743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1295.272894][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.328559][ T5743] usb 4-1: 0:1 : does not exist [ 1295.328622][ T5743] usb 4-1: unit 0 not found! [ 1295.382248][T13371] usb 9-1: device descriptor read/64, error -71 [ 1295.631141][T13371] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1295.648623][ T5743] usb 4-1: USB disconnect, device number 40 [ 1295.771382][T13371] usb 9-1: device descriptor read/64, error -71 [ 1295.860775][ T5773] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1295.881194][T13371] usb usb9-port1: attempt power cycle [ 1296.021345][ T5773] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1296.023868][ T5773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1296.023893][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1296.023914][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1296.023933][ T5773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1296.024658][T25830] netlink: 10 bytes leftover after parsing attributes in process `syz.9.6911'. [ 1296.027068][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.027089][ T5773] usb 3-1: Product: syz [ 1296.027103][ T5773] usb 3-1: Manufacturer: syz [ 1296.027116][ T5773] usb 3-1: SerialNumber: syz [ 1296.126704][ T5773] usb 3-1: config 0 descriptor?? [ 1296.137015][T25821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1296.151127][ T5773] usb 3-1: ucan: probing device on interface #0 [ 1296.151152][ T5773] usb 3-1: ucan: invalid in_ep MaxPacketSize [ 1296.151165][ T5773] usb 3-1: ucan: probe failed; try to update the device firmware [ 1296.220162][T13371] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1296.241415][T13371] usb 9-1: device descriptor read/8, error -71 [ 1296.480544][T13371] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1296.507532][T13371] usb 9-1: device descriptor read/8, error -71 [ 1296.611580][T13371] usb usb9-port1: unable to enumerate USB device [ 1296.775095][T25852] ip_tables: iptables: counters copy to user failed while replacing table [ 1297.625900][T25859] fuse: fd is not a fuse device [ 1298.151524][T13371] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1298.280296][T25876] overlayfs: failed to resolve './file1/file0': -2 [ 1298.282308][T13371] usb 4-1: device descriptor read/64, error -71 [ 1298.385469][T14305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1298.403814][T14305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1298.404588][T14305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1298.407144][T14305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1298.408479][T14305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1298.534488][T13371] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1298.611881][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6932'. [ 1298.661041][T13371] usb 4-1: device descriptor read/64, error -71 [ 1298.774033][T13371] usb usb4-port1: attempt power cycle [ 1298.803214][ T5743] usb 3-1: USB disconnect, device number 37 [ 1299.805346][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.805396][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.860853][T13371] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1299.881747][T13371] usb 4-1: device descriptor read/8, error -71 [ 1300.021452][T25888] loop9: detected capacity change from 0 to 2640 [ 1300.021984][T25888] buffer_io_error: 138 callbacks suppressed [ 1300.021998][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022028][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022052][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022075][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022098][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022137][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022173][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022196][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022209][T25888] ldm_validate_partition_table(): Disk read failed. [ 1300.022231][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022261][T25888] Buffer I/O error on dev loop9, logical block 0, async page read [ 1300.022297][T25888] Dev loop9: unable to read RDB block 0 [ 1300.022436][T25888] loop9: unable to read partition table [ 1300.022608][T25888] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1300.203315][T13371] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1300.243649][T13371] usb 4-1: device descriptor read/8, error -71 [ 1300.355237][T13371] usb usb4-port1: unable to enumerate USB device [ 1300.534774][T14305] Bluetooth: hci2: command tx timeout [ 1300.690992][ T5743] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1300.858511][ T5743] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1300.865553][ T5743] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1300.865582][ T5743] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1300.905769][ T5743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.905793][ T5743] usb 9-1: Product: syz [ 1300.905807][ T5743] usb 9-1: Manufacturer: syz [ 1300.905820][ T5743] usb 9-1: SerialNumber: syz [ 1300.959780][T13371] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1300.996067][ T5773] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1301.110913][T13371] usb 10-1: Using ep0 maxpacket: 32 [ 1301.115948][T13371] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1301.117867][T13371] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.117889][T13371] usb 10-1: config 0 has no interfaces? [ 1301.117915][T13371] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.167069][ T5773] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1301.177649][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.178400][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1301.178423][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1301.178442][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1301.221159][T13371] usb 10-1: config 0 descriptor?? [ 1301.246897][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1301.246922][ T5773] usb 3-1: Product: syz [ 1301.246936][ T5773] usb 3-1: Manufacturer: syz [ 1301.246950][ T5773] usb 3-1: SerialNumber: syz [ 1301.295037][ T5773] usb 3-1: config 0 descriptor?? [ 1301.317118][ T5743] usb 9-1: Limiting number of CPorts to U8_MAX [ 1301.337389][ T5773] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1301.337452][ T5773] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1301.337723][ T5773] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1301.730591][ C0] usb 9-1: check_urb_status: overflow actual length is 128 [ 1301.730615][ C0] usb 9-1: arpc in-urb error -75 (dropped) [ 1302.435176][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1302.705052][T14305] Bluetooth: hci2: command tx timeout [ 1302.723551][ T5743] usb 9-1: failed to send ARPC request 1: -110 [ 1302.723637][ T5743] usb 9-1: failed to execute ARPC: -110 [ 1302.723672][ T5743] usb 9-1: failed to set connected state for cport 0: -110 [ 1302.723688][ T5743] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 1302.724885][ T5743] usb 9-1: failed to send ARPC request 3: -32 [ 1302.724985][ T5743] usb 9-1: failed to execute ARPC: -32 [ 1302.725000][ T5743] usb 9-1: failed to clear cport 0: -32 [ 1302.725014][ T5743] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 1303.216410][ T5743] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1303.261915][ T5743] usb 9-1: USB disconnect, device number 35 [ 1303.806142][ T5743] usb 10-1: USB disconnect, device number 48 [ 1303.863176][ T5773] usb 3-1: USB disconnect, device number 38 [ 1304.000650][T25915] No source specified [ 1304.721831][T23835] Bluetooth: hci2: command tx timeout [ 1305.038191][ T5743] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 1305.235092][ T5743] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1305.250942][ T5743] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 1305.250964][ T5743] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 1305.250982][ T5743] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.250998][ T5743] usb 8-1: config 0 has no interface number 0 [ 1305.251031][ T5743] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1305.251050][ T5743] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1305.251084][ T5743] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.300770][ T5743] usb 8-1: config 0 descriptor?? [ 1305.374764][ T5743] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1305.533892][ T154] usb 8-1: Failed to submit usb control message: -71 [ 1305.533925][ T154] usb 8-1: unable to send the bmi data to the device: -71 [ 1305.533942][ T154] usb 8-1: unable to get target info from device [ 1305.533956][ T154] usb 8-1: could not get target info (-71) [ 1305.533973][ T154] usb 8-1: could not probe fw (-71) [ 1305.555847][ T5743] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1305.586048][ T5773] usb 8-1: USB disconnect, device number 65 [ 1305.721854][ T5743] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1305.725090][ T5743] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1305.725115][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1305.725136][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1305.725155][ T5743] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1305.731811][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.731834][ T5743] usb 3-1: Product: syz [ 1305.731847][ T5743] usb 3-1: Manufacturer: syz [ 1305.731860][ T5743] usb 3-1: SerialNumber: syz [ 1305.815713][ T5743] usb 3-1: config 0 descriptor?? [ 1305.827741][T25932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1305.848989][ T5743] usb 3-1: ucan: probing device on interface #0 [ 1305.849010][ T5743] usb 3-1: ucan: invalid in_ep MaxPacketSize [ 1305.849023][ T5743] usb 3-1: ucan: probe failed; try to update the device firmware [ 1306.075697][ T6108] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1306.216584][ T6108] bond0 (unregistering): Released all slaves [ 1306.257472][ T6108] bond1 (unregistering): Released all slaves [ 1306.334638][ T6108] bond2 (unregistering): Released all slaves [ 1306.580140][ T6108] bond3 (unregistering): Released all slaves [ 1306.872756][T23835] Bluetooth: hci2: command tx timeout [ 1306.946482][ T6108] bond4 (unregistering): Released all slaves [ 1307.018689][ T6108] bond5 (unregistering): Released all slaves [ 1307.092017][ T6108] bond6 (unregistering): Released all slaves [ 1307.166708][T25955] ip_tables: iptables: counters copy to user failed while replacing table [ 1307.773152][ T5743] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1307.921331][ T5743] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1307.922695][ T5743] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1307.922717][ T5743] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1307.924798][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.924818][ T5743] usb 8-1: Product: syz [ 1307.924831][ T5743] usb 8-1: Manufacturer: syz [ 1307.924844][ T5743] usb 8-1: SerialNumber: syz [ 1308.264518][ T5743] usb 8-1: Limiting number of CPorts to U8_MAX [ 1308.342203][ T5773] usb 3-1: USB disconnect, device number 39 [ 1308.499539][T25877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.499648][T25877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.499802][T25877] bridge_slave_0: entered allmulticast mode [ 1308.504816][T25877] bridge_slave_0: entered promiscuous mode [ 1308.540226][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1308.566552][T25877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.566663][T25877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.566822][T25877] bridge_slave_1: entered allmulticast mode [ 1308.668754][T25877] bridge_slave_1: entered promiscuous mode [ 1308.690005][ T10] usb 4-1: device descriptor read/64, error -71 [ 1308.709847][ T5743] usb 8-1: failed to send ARPC request 1: -71 [ 1308.710073][ T5743] usb 8-1: failed to execute ARPC: -71 [ 1308.710215][ T5743] usb 8-1: failed to set connected state for cport 0: -71 [ 1308.710231][ T5743] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1308.713036][ T5743] usb 8-1: failed to send ARPC request 3: -71 [ 1308.713379][ T5743] usb 8-1: failed to execute ARPC: -71 [ 1308.713394][ T5743] usb 8-1: failed to clear cport 0: -71 [ 1308.713409][ T5743] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1308.789367][ T5736] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1308.807971][ T5743] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1308.848971][ T5743] usb 8-1: USB disconnect, device number 66 [ 1308.929731][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1308.950217][ T5736] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1308.984498][ T5736] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.984542][ T5736] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1308.984578][ T5736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.059271][ T10] usb 4-1: device descriptor read/64, error -71 [ 1309.104518][ T5736] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1309.173438][ T10] usb usb4-port1: attempt power cycle [ 1309.210921][T25877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.299845][T25877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.486032][ T6108] hsr_slave_0: left promiscuous mode [ 1309.520393][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1309.539879][ T10] usb 4-1: device descriptor read/8, error -71 [ 1309.790175][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1309.811438][ T10] usb 4-1: device descriptor read/8, error -71 [ 1309.899635][ T5736] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1309.919529][ T10] usb usb4-port1: unable to enumerate USB device [ 1310.051649][ T5736] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1310.052713][ T5736] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1310.052753][ T5736] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.053995][ T5736] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1310.054016][ T5736] usb 9-1: Manufacturer: syz [ 1310.057189][ T5736] usb 9-1: config 0 descriptor?? [ 1310.279887][ T5736] rc_core: IR keymap rc-hauppauge not found [ 1310.279904][ T5736] Registered IR keymap rc-empty [ 1310.286939][ T5736] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1310.289059][ T5736] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input28 [ 1310.569111][ C0] igorplugusb 9-1:0.0: receive overflow invalid: 24 [ 1310.677036][T25877] team0: Port device team_slave_0 added [ 1310.681567][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1310.718746][T25877] team0: Port device team_slave_1 added [ 1310.792012][ T5736] usb 9-1: USB disconnect, device number 36 [ 1310.908546][T25877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.908563][T25877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.908585][T25877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.961985][T25877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.961999][T25877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.962022][T25877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.193949][T25877] hsr_slave_0: entered promiscuous mode [ 1311.196415][T25877] hsr_slave_1: entered promiscuous mode [ 1311.197143][T25877] debugfs: 'hsr0' already exists in 'hsr' [ 1311.197159][T25877] Cannot create hsr debugfs directory [ 1311.556057][ T5736] usb 10-1: USB disconnect, device number 49 [ 1311.679441][T26018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1312.031045][ T5736] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1312.118675][T26022] syzkaller0: entered promiscuous mode [ 1312.118695][T26022] syzkaller0: entered allmulticast mode [ 1312.149201][ T5773] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1312.182074][ T5736] usb 10-1: Using ep0 maxpacket: 8 [ 1312.185857][ T5736] usb 10-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1312.186927][ T5736] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.186952][ T5736] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.186972][ T5736] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1312.186999][ T5736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.255764][ T5736] usb 10-1: config 0 descriptor?? [ 1312.315998][ T5773] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1312.328702][ T5773] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 1312.328723][ T5773] usb 4-1: config 2 has no interface number 0 [ 1312.328788][ T5773] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1312.328810][ T5773] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1312.328830][ T5773] usb 4-1: config 2 interface 43 has no altsetting 0 [ 1312.387421][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.387444][ T5773] usb 4-1: Product: syz [ 1312.387458][ T5773] usb 4-1: Manufacturer: syz [ 1312.387471][ T5773] usb 4-1: SerialNumber: syz [ 1312.428100][T26031] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1312.428214][T26031] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1312.743149][ T5773] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 1312.761459][ T5773] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1312.816838][ T5773] ums-usbat 4-1:2.43: probe with driver ums-usbat failed with error -5 [ 1312.853074][ T5773] usb 4-1: USB disconnect, device number 50 [ 1312.924816][ T5736] usbhid 10-1:0.0: can't add hid device: -71 [ 1312.924903][ T5736] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1312.952255][ T5736] usb 10-1: USB disconnect, device number 50 [ 1313.588176][T26058] fuse: Bad value for 'group_id' [ 1313.588194][T26058] fuse: Bad value for 'group_id' [ 1315.646305][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1316.122763][T26069] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1316.301719][ T10] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1316.462157][ T10] usb 9-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 1316.462670][T26082] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6986'. [ 1316.465649][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1316.465680][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.516129][ T10] usb 9-1: config 0 descriptor?? [ 1316.728313][ T7741] Bluetooth: hci5: Frame reassembly failed (-84) [ 1316.742527][T26089] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1316.742570][T26089] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1316.742661][T26089] udc dummy_udc.0: failed to start g1: -22 [ 1316.742678][T26089] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1316.743380][T26089] UDC core: g1: couldn't find an available UDC or it's busy [ 1317.105477][T26095] tipc: Started in network mode [ 1317.105496][T26095] tipc: Node identity 4, cluster identity 4711 [ 1317.105508][T26095] tipc: Node number set to 4 [ 1317.162302][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 1317.162387][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1317.197711][ T10] usb 9-1: USB disconnect, device number 37 [ 1318.802644][T14305] Bluetooth: hci5: command 0x1003 tx timeout [ 1318.802702][T23835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1320.793549][T25877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1320.815843][T26132] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7001'. [ 1320.882604][T25877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.883372][T25877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1320.928022][T25877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.947589][T25877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1320.993465][T25877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1321.007649][T25877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1321.043104][T25877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1321.130983][T26138] netlink: 'syz.9.7004': attribute type 3 has an invalid length. [ 1321.131013][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7004'. [ 1321.168374][T26138] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7004'. [ 1321.289691][T26147] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1321.289722][T26147] CIFS: Attempting to mount //127.0.0.1/share [ 1321.295589][ T5773] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1321.377483][T26147] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1321.377523][T26147] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1321.501684][ T5773] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1321.503906][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.503947][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.541954][ T5773] usb 4-1: config 0 descriptor?? [ 1321.581858][ T5773] pwc: Askey VC010 type 2 USB webcam detected. [ 1321.588208][T25877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.684265][T25877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.738023][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.738115][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.800295][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.800393][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.986605][ T5773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1322.016087][ T5773] pwc: recv_control_msg error -32 req 02 val 2700 [ 1322.028554][ T5773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1322.030899][ T5773] pwc: recv_control_msg error -32 req 04 val 1000 [ 1322.047350][ T10] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1322.063901][ T5773] pwc: recv_control_msg error -32 req 04 val 1300 [ 1322.072459][ T5773] pwc: recv_control_msg error -32 req 04 val 1400 [ 1322.075487][ T5773] pwc: recv_control_msg error -32 req 02 val 2000 [ 1322.222386][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1322.223617][ T10] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1322.225673][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.225694][ T10] usb 8-1: config 0 has no interfaces? [ 1322.225719][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.280634][ T10] usb 8-1: config 0 descriptor?? [ 1322.301615][ T5773] pwc: recv_control_msg error -32 req 04 val 1500 [ 1322.770420][ T5773] pwc: recv_control_msg error -32 req 02 val 2500 [ 1322.802989][ T5773] pwc: recv_control_msg error -32 req 02 val 2400 [ 1322.834956][ T5773] pwc: recv_control_msg error -32 req 02 val 2600 [ 1323.912719][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 1323.922899][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 1323.925124][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 1323.943969][ T5773] pwc: Registered as video103. [ 1324.043202][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 1324.065369][T26168] loop9: detected capacity change from 0 to 2640 [ 1324.065774][T26168] buffer_io_error: 11 callbacks suppressed [ 1324.065786][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065814][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065837][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065861][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065885][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065919][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065953][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065977][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.065991][T26168] ldm_validate_partition_table(): Disk read failed. [ 1324.066012][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.066036][T26168] Buffer I/O error on dev loop9, logical block 0, async page read [ 1324.066072][T26168] Dev loop9: unable to read RDB block 0 [ 1324.066188][T26168] loop9: unable to read partition table [ 1324.066351][T26168] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1324.301575][ T5773] usb 4-1: USB disconnect, device number 51 [ 1324.891824][T26184] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7016'. [ 1326.096296][T26194] loop9: detected capacity change from 0 to 2640 [ 1326.096852][T26194] ldm_validate_partition_table(): Disk read failed. [ 1326.096912][T26194] Dev loop9: unable to read RDB block 0 [ 1326.097045][T26194] loop9: unable to read partition table [ 1326.097214][T26194] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1326.185608][ T10] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1326.443583][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1326.445552][ T10] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1326.463828][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.463869][ T10] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1326.463892][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1326.560206][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.560232][ T10] usb 10-1: Product: syz [ 1326.560250][ T10] usb 10-1: Manufacturer: syz [ 1326.560263][ T10] usb 10-1: SerialNumber: syz [ 1326.596194][ T10] usb 10-1: config 0 descriptor?? [ 1326.611405][ T10] gs_usb 10-1:0.0: Required endpoints not found [ 1326.842761][ T10] usb 8-1: USB disconnect, device number 67 [ 1327.560119][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1327.728870][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1327.729553][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1327.732022][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1327.732047][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1327.736120][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.736142][ T10] usb 3-1: Product: syz [ 1327.736155][ T10] usb 3-1: Manufacturer: syz [ 1327.736169][ T10] usb 3-1: SerialNumber: syz [ 1327.845222][ T10] usb 3-1: config 0 descriptor?? [ 1327.872384][T25877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.902234][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1327.902270][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1328.155483][T25877] veth0_vlan: entered promiscuous mode [ 1328.206234][T25877] veth1_vlan: entered promiscuous mode [ 1328.226259][ T5765] usb 10-1: USB disconnect, device number 51 [ 1328.410562][T25877] veth0_macvtap: entered promiscuous mode [ 1328.460461][T25877] veth1_macvtap: entered promiscuous mode [ 1328.493799][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1328.494366][ T10] em28xx 3-1:0.0: Config register raw data: 0x00 [ 1328.574849][T25877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.626736][T25877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.098447][T21276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.098491][T21276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.098524][T21276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.638817][ T6108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.001666][ T5743] usb 3-1: USB disconnect, device number 40 [ 1331.003047][ T5743] em28xx 3-1:0.0: Disconnecting em28xx [ 1331.023612][ T5773] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1331.077290][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.077310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.127276][ T5743] em28xx: Freeing device [ 1331.179045][ T5773] usb 10-1: Using ep0 maxpacket: 32 [ 1331.181886][ T5773] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1331.183672][ T5773] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.183692][ T5773] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1331.183721][ T5773] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.242977][ T5773] usb 10-1: config 0 descriptor?? [ 1331.384642][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.384663][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.898572][ T10] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1332.049222][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1332.049741][ T10] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1332.049773][ T10] usb 8-1: no configurations [ 1332.049785][ T10] usb 8-1: can't read configurations, error -22 [ 1332.179446][ T10] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1332.328459][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1332.329953][ T10] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1332.329986][ T10] usb 8-1: no configurations [ 1332.329997][ T10] usb 8-1: can't read configurations, error -22 [ 1332.330273][ T10] usb usb8-port1: attempt power cycle [ 1333.430551][T26261] binder: 26259:26261 ioctl c0306201 200000000480 returned -14 [ 1333.632035][ T10] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1333.661570][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1333.663050][ T10] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1333.663082][ T10] usb 8-1: no configurations [ 1333.663093][ T10] usb 8-1: can't read configurations, error -22 [ 1334.004183][ T10] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1334.091222][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1334.141758][ T10] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1334.141795][ T10] usb 8-1: no configurations [ 1334.141806][ T10] usb 8-1: can't read configurations, error -22 [ 1334.230327][ T10] usb usb8-port1: unable to enumerate USB device [ 1336.031360][ T5765] usb 10-1: USB disconnect, device number 52 [ 1338.167272][T26299] ptp ptp0: delete virtual clock ptp5 [ 1338.174020][ T5765] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1338.202362][T26299] ptp ptp0: delete virtual clock ptp4 [ 1338.247705][T26299] ptp ptp0: delete virtual clock ptp3 [ 1338.257293][T26299] ptp ptp0: delete virtual clock ptp2 [ 1338.264694][T26299] ptp ptp0: guarantee physical clock free running [ 1338.264783][T26302] ptp ptp0: delete virtual clock ptp1 [ 1338.286672][T26302] ptp ptp0: only physical clock in use now [ 1338.320442][ T5765] usb 9-1: Using ep0 maxpacket: 8 [ 1338.324466][ T5765] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1338.351045][ T5765] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1338.351074][ T5765] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1338.351095][ T5765] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1338.351116][ T5765] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.351151][ T5765] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.720607][ T5765] usb 9-1: GET_CAPABILITIES returned 0 [ 1338.720647][ T5765] usbtmc 9-1:16.0: can't read capabilities [ 1338.923665][T26309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7047'. [ 1338.994290][ T5743] usb 9-1: USB disconnect, device number 38 [ 1339.056941][T14305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1339.073138][T14305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1339.075497][T14305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1339.094567][T14305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1339.096741][T14305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1339.298031][ T5765] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1339.453919][ T5765] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1339.478221][ T5765] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1339.478245][ T5765] usb 3-1: Product: syz [ 1339.478267][ T5765] usb 3-1: Manufacturer: syz [ 1339.478280][ T5765] usb 3-1: SerialNumber: syz [ 1339.523070][ T5765] usb 3-1: config 0 descriptor?? [ 1339.542688][ T5765] ch341 3-1:0.0: ch341-uart converter detected [ 1339.827427][ T5765] usb 3-1: failed to receive control message: -32 [ 1339.827524][ T5765] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1341.144695][T26345] pimreg: entered allmulticast mode [ 1341.164081][T26345] pimreg: left allmulticast mode [ 1341.197554][T23835] Bluetooth: hci5: command tx timeout [ 1341.789588][T26355] FAULT_INJECTION: forcing a failure. [ 1341.789588][T26355] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.789621][T26355] CPU: 0 UID: 0 PID: 26355 Comm: syz.7.7057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.789646][T26355] Tainted: [L]=SOFTLOCKUP [ 1341.789654][T26355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1341.789666][T26355] Call Trace: [ 1341.789674][T26355] [ 1341.789683][T26355] dump_stack_lvl+0xe8/0x150 [ 1341.789716][T26355] should_fail_ex+0x410/0x560 [ 1341.789744][T26355] should_failslab+0xa8/0x100 [ 1341.789772][T26355] __kmalloc_cache_noprof+0xa3/0x600 [ 1341.789794][T26355] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1341.789813][T26355] ? nf_nat_register_fn+0x2c2/0x5e0 [ 1341.789842][T26355] ? nf_nat_register_fn+0x2c2/0x5e0 [ 1341.789877][T26355] nf_nat_register_fn+0x2c2/0x5e0 [ 1341.789914][T26355] iptable_nat_table_init+0xd4/0x300 [ 1341.789946][T26355] xt_find_table_lock+0x311/0x400 [ 1341.789980][T26355] xt_request_find_table_lock+0x26/0x100 [ 1341.790011][T26355] do_ipt_get_ctl+0x77f/0x1300 [ 1341.790036][T26355] ? release_sock+0x2f/0x260 [ 1341.790064][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790089][T26355] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1341.790113][T26355] ? do_ip_getsockopt+0x12fb/0x1d00 [ 1341.790139][T26355] ? do_ip_getsockopt+0x12fb/0x1d00 [ 1341.790165][T26355] ? __local_bh_enable_ip+0xd6/0x140 [ 1341.790195][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790217][T26355] ? __mutex_trylock_common+0x15f/0x270 [ 1341.790246][T26355] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1341.790280][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790302][T26355] ? rcu_is_watching+0x16/0xb0 [ 1341.790336][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790360][T26355] ? nf_getsockopt+0x224/0x290 [ 1341.790393][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790415][T26355] ? __mutex_unlock_slowpath+0x731/0x900 [ 1341.790450][T26355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1341.790493][T26355] nf_getsockopt+0x26e/0x290 [ 1341.790525][T26355] ip_getsockopt+0x19e/0x230 [ 1341.790556][T26355] ? __pfx_ip_getsockopt+0x10/0x10 [ 1341.790585][T26355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.790607][T26355] ? sctp_getsockopt+0x9b/0xb90 [ 1341.790632][T26355] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1341.790657][T26355] do_sock_getsockopt+0x51d/0x7e0 [ 1341.790690][T26355] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1341.790732][T26355] ? __fget_files+0x3a2/0x420 [ 1341.790760][T26355] ? __fget_files+0x2a/0x420 [ 1341.790795][T26355] __x64_sys_getsockopt+0x1a4/0x240 [ 1341.790831][T26355] do_syscall_64+0x166/0x520 [ 1341.790857][T26355] ? trace_irq_disable+0x3b/0x140 [ 1341.790878][T26355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.790903][T26355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.790922][T26355] RIP: 0033:0x7fba18b9e159 [ 1341.790940][T26355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.790956][T26355] RSP: 002b:00007fba16df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1341.790976][T26355] RAX: ffffffffffffffda RBX: 00007fba18e25fa0 RCX: 00007fba18b9e159 [ 1341.790991][T26355] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 1341.791003][T26355] RBP: 00007fba18c3506b R08: 00002000000000c0 R09: 0000000000000000 [ 1341.791016][T26355] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1341.791029][T26355] R13: 00007fba18e26038 R14: 00007fba18e25fa0 R15: 00007ffc08f84a58 [ 1341.791059][T26355] [ 1342.290610][ T31] audit: type=1804 audit(1790969482.899:309): pid=26358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7057" name="/newroot/420/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 res=1 errno=0 [ 1342.421665][ T5765] usb 3-1: USB disconnect, device number 41 [ 1342.424921][ T5765] ch341 3-1:0.0: device disconnected [ 1342.896333][ T7741] Bluetooth: hci7: Frame reassembly failed (-84) [ 1342.979703][T26368] tipc: Started in network mode [ 1342.979723][T26368] tipc: Node identity 4, cluster identity 4711 [ 1342.979735][T26368] tipc: Node number set to 4 [ 1343.279357][T14305] Bluetooth: hci5: command tx timeout [ 1343.478171][ T5743] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1343.638358][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 1343.653942][ T5743] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1343.673849][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.673871][ T5743] usb 4-1: Product: syz [ 1343.673884][ T5743] usb 4-1: Manufacturer: syz [ 1343.673898][ T5743] usb 4-1: SerialNumber: syz [ 1343.676362][ T5743] usb 4-1: config 0 descriptor?? [ 1343.925764][ T5743] usb read operation failed. (-32) [ 1344.206934][ T1485] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.295817][T26313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.295903][T26313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.296045][T26313] bridge_slave_0: entered allmulticast mode [ 1344.326762][T26313] bridge_slave_0: entered promiscuous mode [ 1344.360430][ T5743] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1344.361262][ T5743] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1344.361281][ T5743] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1344.428221][T26313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.429836][T26313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.430195][T26313] bridge_slave_1: entered allmulticast mode [ 1344.457591][T26313] bridge_slave_1: entered promiscuous mode [ 1344.625495][T26313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.643526][ T1485] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.734525][T26313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.841569][T26313] team0: Port device team_slave_0 added [ 1344.857842][T26313] team0: Port device team_slave_1 added [ 1344.860797][ T1485] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.960056][T14305] Bluetooth: hci7: command 0x1003 tx timeout [ 1344.960351][T23835] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1345.022428][ T5765] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1345.091288][ T1485] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.122311][T26313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.122326][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.122349][T26313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.127125][T26313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.127138][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.213368][T26313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.233922][ T5765] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1345.249851][ T5765] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1345.249873][ T5765] usb 3-1: Product: syz [ 1345.249887][ T5765] usb 3-1: Manufacturer: syz [ 1345.249900][ T5765] usb 3-1: SerialNumber: syz [ 1345.288763][ T5765] usb 3-1: config 0 descriptor?? [ 1345.295652][ T5765] ch341 3-1:0.0: ch341-uart converter detected [ 1345.357717][T23835] Bluetooth: hci5: command tx timeout [ 1345.513692][ T5765] usb 3-1: failed to receive control message: -32 [ 1345.513740][ T5765] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1345.549962][T26313] hsr_slave_0: entered promiscuous mode [ 1345.565020][T26313] hsr_slave_1: entered promiscuous mode [ 1345.565601][T26313] debugfs: 'hsr0' already exists in 'hsr' [ 1345.565618][T26313] Cannot create hsr debugfs directory [ 1346.089788][T13371] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1346.242680][T13371] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1346.243729][T13371] usb 9-1: config 2 has an invalid interface number: 43 but max is 0 [ 1346.243750][T13371] usb 9-1: config 2 has no interface number 0 [ 1346.243782][T13371] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1346.243804][T13371] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1346.243824][T13371] usb 9-1: config 2 interface 43 has no altsetting 0 [ 1346.249333][T13371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.249355][T13371] usb 9-1: Product: syz [ 1346.249369][T13371] usb 9-1: Manufacturer: syz [ 1346.249382][T13371] usb 9-1: SerialNumber: syz [ 1346.350173][T26432] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1346.350272][T26432] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1346.569383][T26432] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7073'. [ 1346.576730][T26432] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7073'. [ 1346.642897][T13371] ums-usbat 9-1:2.43: USB Mass Storage device detected [ 1346.671721][T13371] ums-usbat 9-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1346.725704][T13371] ums-usbat 9-1:2.43: probe with driver ums-usbat failed with error -5 [ 1346.753362][T13371] usb 9-1: USB disconnect, device number 39 [ 1347.038732][ T1485] bond0 (unregistering): Released all slaves [ 1347.069945][ T1485] bond1 (unregistering): Released all slaves [ 1347.110776][ T1485] bond2 (unregistering): Released all slaves [ 1347.145538][ T1485] bond3 (unregistering): Released all slaves [ 1347.447114][T23835] Bluetooth: hci5: command tx timeout [ 1349.764210][ T5765] usb 3-1: USB disconnect, device number 42 [ 1349.765666][ T5765] ch341 3-1:0.0: device disconnected [ 1350.298646][ T5765] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1350.427165][ T5765] usb 9-1: device descriptor read/64, error -71 [ 1350.683900][ T5765] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1350.976944][ T5765] usb 9-1: device descriptor read/64, error -71 [ 1351.089841][ T5765] usb usb9-port1: attempt power cycle [ 1351.823626][ T5765] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1352.002803][ T5765] usb 9-1: device descriptor read/8, error -71 [ 1352.489862][ T5765] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1352.519315][ T5765] usb 9-1: device descriptor read/8, error -71 [ 1352.627613][ T5765] usb usb9-port1: unable to enumerate USB device [ 1352.781957][ T1485] hsr_slave_0: left promiscuous mode [ 1352.784172][ T1485] hsr_slave_1: left promiscuous mode [ 1352.877599][ T1485] veth1_macvtap: left promiscuous mode [ 1352.877633][ T1485] veth0_macvtap: left promiscuous mode [ 1352.878668][ T1485] veth0_vlan: left promiscuous mode [ 1352.911562][T26484] fuse: Unknown parameter 'group_id00000000000000000000' [ 1352.926934][T13371] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1353.078221][T13371] usb 3-1: Using ep0 maxpacket: 8 [ 1353.080484][T13371] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1353.111512][T13371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.111536][T13371] usb 3-1: Product: syz [ 1353.111550][T13371] usb 3-1: Manufacturer: syz [ 1353.111564][T13371] usb 3-1: SerialNumber: syz [ 1353.166352][T13371] usb 3-1: config 0 descriptor?? [ 1353.400674][T13371] usb read operation failed. (-32) [ 1353.587374][ T5765] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1353.741062][ T5765] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1353.743286][ T5765] usb 9-1: config 2 has an invalid interface number: 43 but max is 0 [ 1353.743308][ T5765] usb 9-1: config 2 has no interface number 0 [ 1353.743342][ T5765] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1353.743363][ T5765] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1353.743405][ T5765] usb 9-1: config 2 interface 43 has no altsetting 0 [ 1353.745324][ T5765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.745345][ T5765] usb 9-1: Product: syz [ 1353.745359][ T5765] usb 9-1: Manufacturer: syz [ 1353.745372][ T5765] usb 9-1: SerialNumber: syz [ 1353.845450][T26491] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1353.845581][T26491] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1353.865617][T13371] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1354.090205][T26491] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7090'. [ 1354.095375][T26491] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7090'. [ 1354.178721][ T5765] ums-usbat 9-1:2.43: USB Mass Storage device detected [ 1354.203426][ T5765] ums-usbat 9-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1354.307854][ T5765] ums-usbat 9-1:2.43: probe with driver ums-usbat failed with error -5 [ 1354.342253][ T5765] usb 9-1: USB disconnect, device number 44 [ 1355.004321][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1356.717773][T26313] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1356.758757][T26313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1356.759819][T26313] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1356.785436][T26313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1356.800120][T26313] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1356.806008][T26313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1356.829485][T26313] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1356.835904][T26313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1356.957580][ T5736] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1357.109811][ T5736] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1357.112170][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.141450][ T5736] usb 9-1: config 0 descriptor?? [ 1357.153004][T26313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.239648][T26313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.278664][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.278748][ T9692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.330600][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.330683][ T9692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.595075][ T5736] hackrf 9-1:0.0: Board ID: 00 [ 1357.595096][ T5736] hackrf 9-1:0.0: Firmware version: [ 1357.644315][ T5736] hackrf 9-1:0.0: Registered as swradio24 [ 1357.644339][ T5736] videodev: could not get a free minor [ 1357.644349][ T5736] hackrf 9-1:0.0: Failed to register as video device (-23) [ 1357.718252][ T5736] hackrf 9-1:0.0: probe with driver hackrf failed with error -23 [ 1357.814490][ T5773] usb 9-1: USB disconnect, device number 45 [ 1360.881172][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.881221][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.977319][T26581] netlink: 'syz.2.7105': attribute type 1 has an invalid length. [ 1361.170677][T26581] bond2: entered promiscuous mode [ 1361.170983][T26581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.291933][T26588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.292266][T26588] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1361.292283][T26588] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1361.364056][T26588] bond2: (slave gre1): making interface the new active one [ 1361.364075][T26588] gre1: entered promiscuous mode [ 1361.394017][T26588] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1361.428332][T26313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.601340][ T5736] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1361.759358][ T5736] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1361.760570][ T5736] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1361.760610][ T5736] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.764079][ T5736] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1361.764099][ T5736] usb 9-1: Manufacturer: syz [ 1361.819733][ T5736] usb 9-1: config 0 descriptor?? [ 1362.055307][ T5736] rc_core: IR keymap rc-hauppauge not found [ 1362.055324][ T5736] Registered IR keymap rc-empty [ 1362.067498][ T5736] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1362.092791][ T5736] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input30 [ 1362.134030][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1362.348637][ T5736] usb 9-1: USB disconnect, device number 46 [ 1362.373225][T26609] overlayfs: failed to resolve './file1': -2 [ 1362.819514][T26313] veth0_vlan: entered promiscuous mode [ 1362.847648][T26313] veth1_vlan: entered promiscuous mode [ 1362.958246][T26313] veth0_macvtap: entered promiscuous mode [ 1362.989453][T26313] veth1_macvtap: entered promiscuous mode [ 1363.072910][T26313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.099964][T26313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.177381][T21276] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.190464][T21191] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.191389][T21191] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.191449][T21191] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.502074][ T7741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.502093][ T7741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.675076][ T7741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.675095][ T7741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.868233][ T5773] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1364.019542][ T5773] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1364.022038][ T5773] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1364.022062][ T5773] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1364.022083][ T5773] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1364.022102][ T5773] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1364.093491][ T5773] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.093515][ T5773] usb 9-1: Product: syz [ 1364.093529][ T5773] usb 9-1: Manufacturer: syz [ 1364.093542][ T5773] usb 9-1: SerialNumber: syz [ 1364.132431][ T5773] usb 9-1: config 0 descriptor?? [ 1364.152613][ T5773] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 1364.434370][ T5773] scsi host1: usb-storage 9-1:0.0 [ 1364.480780][ T5773] usb 9-1: USB disconnect, device number 47 [ 1367.020075][T26651] netlink: 'syz.2.7120': attribute type 1 has an invalid length. [ 1367.137551][T26651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1367.542430][T26659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7122'. [ 1367.821664][T26665] overlayfs: failed to resolve './file1': -2 [ 1368.251942][T26674] jffs2: notice: (26674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1369.976652][T23832] ------------[ cut here ]------------ [ 1369.976666][T23832] kernel BUG at fs/jffs2/nodelist.c:462! [ 1369.976686][T23832] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1369.994119][T23832] CPU: 0 UID: 0 PID: 23832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.005203][T23832] Tainted: [L]=SOFTLOCKUP [ 1370.009499][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1370.019528][T23832] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0 [ 1370.025405][T23832] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 42 a1 f7 fe e9 42 fe ff ff e8 28 9e 87 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1370.045000][T23832] RSP: 0018:ffffc9002485fa38 EFLAGS: 00010293 [ 1370.051046][T23832] RAX: ffffffff83407068 RBX: ffff8880b2211e40 RCX: ffff888025ee5dc0 [ 1370.058994][T23832] RDX: 0000000000000000 RSI: ffff8880b2211e40 RDI: ffff88802f992000 [ 1370.066953][T23832] RBP: 0000000000000006 R08: ffff88802f992363 R09: 1ffff11005f3246c [ 1370.074900][T23832] R10: dffffc0000000000 R11: ffffed1005f3246d R12: ffff8880b2211e40 [ 1370.082849][T23832] R13: dffffc0000000000 R14: ffff8880b2211e60 R15: ffff88802f992000 [ 1370.090800][T23832] FS: 0000555563066500(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 1370.099707][T23832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1370.106265][T23832] CR2: 00007f755039a070 CR3: 000000003f9e4000 CR4: 0000000000350ef0 [ 1370.114218][T23832] Call Trace: [ 1370.117474][T23832] [ 1370.120380][T23832] ? jffs2_do_clear_inode+0x314/0x390 [ 1370.125754][T23832] jffs2_do_clear_inode+0x31f/0x390 [ 1370.130933][T23832] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 1370.136374][T23832] evict+0x624/0xb50 [ 1370.140253][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.145872][T23832] ? __pfx_evict+0x10/0x10 [ 1370.150269][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.155898][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.161511][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.167119][T23832] ? do_raw_spin_unlock+0xf5/0x200 [ 1370.172217][T23832] evict_inodes+0x84e/0x8d0 [ 1370.176705][T23832] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 1370.182666][T23832] ? __pfx_evict_inodes+0x10/0x10 [ 1370.187675][T23832] ? jffs2_sync_fs+0x97/0xb0 [ 1370.192246][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.197861][T23832] ? sync_filesystem+0x1f9/0x240 [ 1370.202777][T23832] generic_shutdown_super+0xaa/0x2d0 [ 1370.208137][T23832] kill_mtd_super+0x23/0x70 [ 1370.212617][T23832] jffs2_kill_sb+0x96/0xb0 [ 1370.217040][T23832] deactivate_locked_super+0xbe/0x110 [ 1370.222415][T23832] cleanup_mnt+0x3d3/0x460 [ 1370.226811][T23832] task_work_run+0x1d9/0x270 [ 1370.231379][T23832] ? __pfx_task_work_run+0x10/0x10 [ 1370.236471][T23832] exit_to_user_mode_loop+0x204/0x770 [ 1370.241822][T23832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.247451][T23832] ? rcu_is_watching+0x16/0xb0 [ 1370.252219][T23832] do_syscall_64+0x328/0x520 [ 1370.256808][T23832] ? trace_irq_disable+0x3b/0x140 [ 1370.261813][T23832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.267873][T23832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.273743][T23832] RIP: 0033:0x7f7ad019f397 [ 1370.278135][T23832] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1370.297716][T23832] RSP: 002b:00007fff7ef21a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1370.306119][T23832] RAX: 0000000000000000 RBX: 00007f7ad02344bb RCX: 00007f7ad019f397 [ 1370.314080][T23832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ef21af0 [ 1370.322025][T23832] RBP: 00007fff7ef21af0 R08: 00007fff7ef22af0 R09: 00000000ffffffff [ 1370.329971][T23832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7ef22b80 [ 1370.337914][T23832] R13: 00007f7ad02344bb R14: 000000000014e523 R15: 00007fff7ef22bc0 [ 1370.345954][T23832] [ 1370.348944][T23832] Modules linked in: [ 1370.354168][T23832] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1370.909552][T14305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1370.964353][T14305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1371.023519][T14305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1371.526175][T14305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1371.530272][ T9692] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.671723][T14305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1371.764135][ T9692] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.813348][ T9692] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.049568][ T9692] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.450443][T23832] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0 [ 1372.450475][T23832] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 42 a1 f7 fe e9 42 fe ff ff e8 28 9e 87 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1372.450495][T23832] RSP: 0018:ffffc9002485fa38 EFLAGS: 00010293 [ 1372.450513][T23832] RAX: ffffffff83407068 RBX: ffff8880b2211e40 RCX: ffff888025ee5dc0 [ 1372.450528][T23832] RDX: 0000000000000000 RSI: ffff8880b2211e40 RDI: ffff88802f992000 [ 1372.450542][T23832] RBP: 0000000000000006 R08: ffff88802f992363 R09: 1ffff11005f3246c [ 1372.450556][T23832] R10: dffffc0000000000 R11: ffffed1005f3246d R12: ffff8880b2211e40 [ 1372.450571][T23832] R13: dffffc0000000000 R14: ffff8880b2211e60 R15: ffff88802f992000 [ 1372.450587][T23832] FS: 0000555563066500(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 1372.450604][T23832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.450617][T23832] CR2: 00007fde6d047ce0 CR3: 000000003f9e4000 CR4: 0000000000350ef0 [ 1372.450635][T23832] Kernel panic - not syncing: Fatal exception [ 1372.551265][T23832] Kernel Offset: disabled [ 1372.555571][T23832] Rebooting in 86400 seconds..