last executing test programs: 18m29.934477111s ago: executing program 0 (id=3449): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000107c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 18m29.636242762s ago: executing program 0 (id=3450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000210001000000000000000000fc02000000000000000000000000fdfffc02000000000000010000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e8001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00ac"], 0x138}}, 0x0) 18m29.482349368s ago: executing program 0 (id=3452): r0 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001900), 0x1, 0x0, &(0x7f0000000040)="a1"}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x4cd02, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d02"]) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r6, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) (async) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18m28.897209097s ago: executing program 0 (id=3455): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="a8a44000010203010902240001010140f1090400260207010210090501024000049e0509058222400005750900"/54], &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x5, 0x88, 0x1, {0x22, 0x854}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0xcb, 0x2}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xf5, 0x1, 0x5, 0x10, 0x80}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8c, 0x4, 0x2, 0xddd, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0x8, 0x6, 0x7b44, 0x8}, @ptm_cap={0x3}, @generic={0x22, 0x10, 0x2, "aaae44ee1dadb66e8a3b1872d9911996a45192bd11284d082066b131361b10"}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1009}}, {0x5f, &(0x7f0000000140)=@string={0x5f, 0x3, "552cf4c8927416bf3af8f29eddac670fc4e1b6ef0113f219420e2806a7e8244de74608196ca8ae73bf8390e51834c715cc5496ed7aea3aab226c6395a9ab410c77065e92e4f0825d0fe47bb924eb93032fd70e85c00082362b8717d180"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0xf3, &(0x7f0000000300)=@string={0xf3, 0x3, "b582d49b19f80d1726683ac6186139017f65a6728a1f07ab55fca3ee1aa8d36e11091647fd73d391c05e9868873b84c009c2e42d1764dc87310eaf28a68828647431c4deefa5a27de04a6c15d94f93a4f278be4035c50707114c4dacc1c4f2f58dc03636d5dd303b18568a8f3672c2012114ce57f956c7096569380db999b497679abdd44c0114c61955e8317aad6afc71ac79994ccbe7d88aeabab58c0b4faad70f679c3937d4e29b029c8ea575640de236d29e00d7fcfb5abbd98151b7854c7543d7cecb655a499c6531c5b0cee6b642a0d150459412bf444ac76fb2f4ce2033fada3e9ad5e42eea855630d8adc6d5ae"}}, {0xfe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}]}) 18m25.744228471s ago: executing program 0 (id=3464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f00000016c0)=[{0x0, 0x100000}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) syz_usb_control_io$printer(r0, 0x0, 0x0) 18m25.252913924s ago: executing program 0 (id=3465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000002000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000003c000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000200000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003000000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}}, 0x0) 18m23.050616703s ago: executing program 32 (id=3465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000002000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000003c000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000200000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003000000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}}, 0x0) 11.033568045s ago: executing program 3 (id=6851): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) chroot(0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@coaddr={0x14, 0xe, @in=@broadcast}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "b74a27a4f44bd05db8f139a0e0f8147b"}}]}, 0x17c}}, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_io_uring_setup(0x7aa2, &(0x7f00000001c0)={0x0, 0x31cf, 0x4, 0x5, 0x2d0}, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20c1, 0x0) write$fb(r2, &(0x7f0000000040)="2fc19f9a9b0302c0d1ca7aa582f4c9af114282693447429433928f68848d44d258a30cddac0c973492fa3f57ae874d38e88c8740e1c04835650c960c3884cded80d8da985f28b49d1756537aa77c3a", 0x4f) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000e00)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) 10.860206558s ago: executing program 3 (id=6852): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000433000/0x4000)=nil) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000780)='./control/file0\x00', 0x80040, 0x2a) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/80, 0x50) unlink(0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000003c0)='./control\x00') syz_usb_connect(0x3, 0x3e6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe8, 0xae, 0x1c, 0x40, 0x13b1, 0x1a, 0x16b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d4, 0x1, 0x0, 0x0, 0x130, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0xd, 0xb2, 0xdb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x9, 0x4, [@generic={0xfa, 0x30, "0e3037b73e3fc62b6fad8935787324bf3cabc29aa97de6e7eafd3218afe56091f8ea6a4c3a2c0c8be751c471e7de2a1cdd7975310cc3af5439d8fce82fb82b33e2c6b75eb6863cbeb5d80ec50b4ed4494e446d47d5f39f83d4f501e487fefafe3e21470abdd534bbc5ae3fd02bbcb6bf8b04ed8a5329d3944ce4da987999cb6083cd86c4c0ecfe7f310a39bb512151fa1e82468350f2f0974ec45f0de3c9af6cd2e1c388d7edd0b2e7d703327ac3c26127bc8bc9f9c7273d2126750cccd54fbd8c723e0b045e4eb8d0131a42a863e88b7a9f69e75d19ed2b1dd8f8a7727e7fd18b5adb7e549dc295274d40ae2e277c4173c2aa5b75837e13"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4b, 0x3b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x40}, @generic={0x66, 0x9, "6f5c095ea677d9b394dc7e86a2fb303c2d7c096de59ee209afed243f9708607b53934765f4ebfa13372e35631a9de454f7e3d1d9e0bc8c50ee63940d4baf19116c0b491302f5809c1ac891885d11e63505932dfc2b7532d8f1ca7b81af24c4bad54d7238"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x7, 0x4, [@generic={0x14, 0x22, "0c83754ed68ed1be64839d68c01424390bda"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x7f, 0xd, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x10, 0x4, 0x7f, [@generic={0xfb, 0x23, "5713ca66cbb2758c7a3dd863624b98f223916cf9a97cfec58db648fb89796edf7a9d026e11f1e7318ae8fd608aa5f4b06e0535fefc19c215446c66db7398c45b40b9e8aad8a1e47959d62d4ab39a57ab3ac8f1a014b9f52eede8fde3e4852512ef3ded0b4504230bf996e9cde66d3a620c0b40aef15f28e311b51604cb74aa29a2cf5175dd80e592f1565bb494b4d467f936ca9fece51e695ab9a808594e77c59372f0fd773d1775c3604f634f35c9c71817eaeb72597d2ff112cb4e97fa0ccc42b0796b9203903c900d55f6e0c5392226869acebdb2fd04b707debc8ab928c1acae9e36a6ff73dfd5d81eace1112873ce1e8bf5d13f8498a1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x4d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x9, 0xaf, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x45, 0x4, "fc69d094d219504597a28c44368af4c412c9773aa2a1bd98cd59c4bb0aae218d19c778332a6b17947d45107271fdb4203b76129b097c5ac38f6f0baa6ae72c768c1a42"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xf7, 0x7f, 0xc}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x2, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x40}, @generic={0x6d, 0x23, "4a758d11c89305b72317de7dc15ad62fa03274b02739f88c2d95a380f91359f1b06d384d1f4e912221c3cedbca35ba1b065b2ad565826cd7ed3b6e638c9980880c822926a116515479138b11e1b23521456dadeeb330e798961de5467242761292ba0106e5ce00854921c7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8b, 0x7, 0x7f, [@generic={0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xc, 0xf0, 0xc}}]}}]}}]}}, 0x0) 9.859662842s ago: executing program 5 (id=6853): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000433000/0x4000)=nil) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000780)='./control/file0\x00', 0x80040, 0x2a) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/80, 0x50) unlink(0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000003c0)='./control\x00') syz_usb_connect(0x3, 0x452, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe8, 0xae, 0x1c, 0x40, 0x13b1, 0x1a, 0x16b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x440, 0x1, 0x0, 0x0, 0x130, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0xd, 0xb2, 0xdb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x9, 0x4, [@generic={0xfa, 0x30, "0e3037b73e3fc62b6fad8935787324bf3cabc29aa97de6e7eafd3218afe56091f8ea6a4c3a2c0c8be751c471e7de2a1cdd7975310cc3af5439d8fce82fb82b33e2c6b75eb6863cbeb5d80ec50b4ed4494e446d47d5f39f83d4f501e487fefafe3e21470abdd534bbc5ae3fd02bbcb6bf8b04ed8a5329d3944ce4da987999cb6083cd86c4c0ecfe7f310a39bb512151fa1e82468350f2f0974ec45f0de3c9af6cd2e1c388d7edd0b2e7d703327ac3c26127bc8bc9f9c7273d2126750cccd54fbd8c723e0b045e4eb8d0131a42a863e88b7a9f69e75d19ed2b1dd8f8a7727e7fd18b5adb7e549dc295274d40ae2e277c4173c2aa5b75837e13"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4b, 0x3b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x40}, @generic={0x66, 0x9, "6f5c095ea677d9b394dc7e86a2fb303c2d7c096de59ee209afed243f9708607b53934765f4ebfa13372e35631a9de454f7e3d1d9e0bc8c50ee63940d4baf19116c0b491302f5809c1ac891885d11e63505932dfc2b7532d8f1ca7b81af24c4bad54d7238"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x7, 0x4, [@generic={0x14, 0x22, "0c83754ed68ed1be64839d68c01424390bda"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x7f, 0xd, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x10, 0x4, 0x7f, [@generic={0xfb, 0x23, "5713ca66cbb2758c7a3dd863624b98f223916cf9a97cfec58db648fb89796edf7a9d026e11f1e7318ae8fd608aa5f4b06e0535fefc19c215446c66db7398c45b40b9e8aad8a1e47959d62d4ab39a57ab3ac8f1a014b9f52eede8fde3e4852512ef3ded0b4504230bf996e9cde66d3a620c0b40aef15f28e311b51604cb74aa29a2cf5175dd80e592f1565bb494b4d467f936ca9fece51e695ab9a808594e77c59372f0fd773d1775c3604f634f35c9c71817eaeb72597d2ff112cb4e97fa0ccc42b0796b9203903c900d55f6e0c5392226869acebdb2fd04b707debc8ab928c1acae9e36a6ff73dfd5d81eace1112873ce1e8bf5d13f8498a1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x4d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x9, 0xaf, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x45, 0x4, "fc69d094d219504597a28c44368af4c412c9773aa2a1bd98cd59c4bb0aae218d19c778332a6b17947d45107271fdb4203b76129b097c5ac38f6f0baa6ae72c768c1a42"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xf7, 0x7f, 0xc}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x2, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x40}, @generic={0x6d, 0x23, "4a758d11c89305b72317de7dc15ad62fa03274b02739f88c2d95a380f91359f1b06d384d1f4e912221c3cedbca35ba1b065b2ad565826cd7ed3b6e638c9980880c822926a116515479138b11e1b23521456dadeeb330e798961de5467242761292ba0106e5ce00854921c7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8b, 0x7, 0x7f, [@generic={0x6e, 0x8, "4811fae4d96b337fc0285b3104633603cce8be8270fd5a1d7304575ab6e885296e80c59f8ba0193f4df5ba79e24b1b5d80399302c5d8d43644f006773c78bda7d5c981bea927340a76ce808e818147148227e3f1d0619cf777b2c60037bd440e2dd524514a525e62d33b5975"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xc, 0xf0, 0xc}}]}}]}}]}}, 0x0) 9.716926504s ago: executing program 1 (id=6854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="217b7bb310dec797854197aea803462876758b8624272eeaacbcc3b47d5df9a095c27d69e10deb4199ed3fef8b3b612b502343cf5cd795b9fc0b04514063d0d52f581c75e33cdcb492a86b0e8f6c4e183c461ce7b583b1bd278b83a1019dfb950d0006f02c8d198eaf0112fb5086ea88a86cf35fb161e2c4bb15b97b480a07581125af618a9950e8a54ea998a580fb4ec456b96778d3c6f2c32c4a4e30b181c75ed0fa33c4", 0xa5}, {&(0x7f0000001300)="3a5984e455b7813b066d1bda10b1a5c89c88ad69ee07a2a37899579ee38bcf0fb0d9353f5bd5c612c68d19fc890d4ac0244a8f4b9b8dad2c74db78a0fe52ca92224124b50e63f1e729e093de50ddcd276d1ee2c7a340ccb813d1fcfd56ad675a66ed75312ed094824476bbf497fb8d5d63b0994bd2d4681589f696f5f8af23de45839c8b5ae16320c57ad8baef0b72e5641621ae62ca7c7e00dd55c223971d5add2e362cae6f9b750da0bb80f20d66b8474195d1bd8e33b4aab6438e155421ee1666728f61e5733df71c28782a9627c708b7320f9a8571fc5b596f944c95d2d1e2b75a95f23dca1906540ff1fa5e7f6d41c0c3f948f17d8e8bd0bf0cfde0bd7bf8cde07908719e1bb2e5063e460810cc21dfebe44537206d5b4fa54774feeaba6a215e3dec9935df2e2f7b8d49cdacc06c4a877453f600d9bd96a22171972a418f04a148c327cd6616e90e2c014edced84cc12d04ae067511a329582ea43906c336bbdbee88ab04ff9bb950c84af66f9084d2bd50dccd0daddefaf9fa7551bca0b6da706ace3a755282129ea231eafb96aa6c4d194a79a732337de4be5546dfda37b0274c09ad18110359e78c1b9a1c9e3a2f7a65e4d14bcf18953cc5ebaa5ecfadeef3dd503b6aa29363d67b6443eceaada1af0ec5a86090074860a8516d8c1b548a7be4afbb1c2209f28cc6ce14ecedce6099bf9c312fa7223caf32ed6121215acce5365970ab9d5a8b77590af9de5077b6ee1170306ac1bb9d533cc5f97c0ce34db3c6a2fbfc9d94faf56a957c3a5cf249da648f4f24705de9105269ab6510f15e22df44e45c52f77fe1af4378aee6dd952d2fa44ee2b36111cd230fe05174708b06888cb1b6dbe350da5348f0c2df4e0d5abc58a2e29e95159799754bf17d33e8c87abd4de9767f7eb39adf2153f159ab9439359101c30a0c2283cedb0d2fa8e5bd234868ec354b6152e29b27bdb1b8643a6b58d53e4520d33f525291308b658d42577f2cf5833ad7debc8ec17089c942ac1123d1940a1bf2c3517da228451476675d2507b4b83d82e7516f7fc3dd7d6f70988c679b19f75614b648a3c2cfd1313b70a9438209b2ea3bd01958e5a53ab7d8ce1994bb4701836cccab29db44b790acfc68a40fdc9443100caf327a077004375c2dc2b1b2249e3fbec7b28a55d2ab990e4120df89b14cf8b63a607f711d30f2b1e71ddd095ef83fbfab2b382bb4d535b43995fa1113d4f63db41ca27f733edf5a0a93877bd647d82a41f4a774e531ec245fb6a5d5864dfa34643152b615ab2e07dacad9c2e09185dd1d733a544b6e37c6a60c027053fcdc37619da359e0d5ea5b39bd8a8f6e939ff72ba1eaf47d8452b3165dd4ca0e819b8a48c221b55e22ee2f247ccad48e34d2540e4b72376439ad7a5ba934162caa94f54c6938c2a1518fb1c6cc39e83612413c984f4a0b9da4bb7a459488ae63dee230505531fcff4b971051f512aa9effb0277a681893943e95290984374eaae7fec100880478f6669f72a4c9441724f4eb617a3b5dce91ebf8e71739f4bba4b1550dd3b4a058c66c5b353f70d7f1c6608fe6276b81da3e02674c3282bb2784c6414aa9897bafe2a2e6a5e49457a5ae7711cc27301985bd26f58255f7211c66dbb26da67c51a9bebf966b637426f3bea69053dfc9425414487a62fc271dd132c240d945cc6a07e9788ddc0588cf6382211fdc27b31223d4f76e771cf0997de048f6d8f7fe7128f1c840ab6608fc69ef961b00c64a3f559e269d9b7d1de33a5331cfa175624ccbd2f872d31b6d6c4e224f3e63c05998e1b86e84d81ab30175498904dc6455f1026fc810045f73e9a971932134c180e0a78a41a3163d47784d727dac3ef8faf1e1d6304fb90a9d9e53417e496c6338dd18ff5dc3c47a5981819a0c565ae13e08cb3e0274754ea243ec11c9779da196748189f1ed0478b17a8adbf230993f1d10cc8216c080e0edd9ccbaf182ec6484ce33408faf5f59f470ebf8ce73b0fe91378999f473235517a945baa68a7a2030d2245557bde78c330de840b75cdac45f4a6f85070a6180c9306cc97271fc048df81eed2f2cc761ffa9d348885ed3e8ca328552b451690a946c6fb5b87338ddaf63665addec90620bde82a7d9da8f4219005500cc2e785646d0c3dbd91eed24afb6882a0acf18ef1dddb03afe86900173a379b7a2c9be85a5426018d980307e4f4a7e96b27b2662244de83b0d1d7a06f3463eca6860c783082bf68254c1ba8a6b22662b73baab524ea3bb0de66385d59c0b8e7a7f0f8a80b431b793db48ee9a2b39967ff98cba19c740b7caf3f9c7f2d39363dd21023ef99b6c097a8c29aaf147a0a4fb174fca05283c84b4b9c2937468fdc4a9d00244189e0b95e0d42ffdec4c6fc97582db8a5d49d35e070fa46e2ed0899880b08cfd586424c448c09d843656298861fc533cf44bf0c5331acd2b75702ddab1d3c5116bc9a5484a5a447604025fffac5836a7602bb0d33b682619b52f492225f1494004890f8d29483dba58946d14ad8b3f1aaf742813961cb254a98eb7a000b7d6c491ae815fd15adaae53139778612619d6af2f1322b90fb2882eff784c36d76de12f6e8e2d8e561de3b44648e4656803ddd576327f3851f6371cc726f56e9e56c608ce8cc60a3c5a23df6e7dc3ecff572a4d92298b40a8a7ad449b3da96e900ddc3df370c24aec38cb48d38b1da570474f8671e8ee7716cb12a5f33976e54ad05a67937b7df2fe1635dc5181fd126da48cadaa1f95a2373f013bf5179ddbf9f82a3ca125e5177ead4604a352138a7db505bec2ef00c68959cc915722bb9f327d342ace08abc6c60721a043b36e6a51231f05dcb59e06ce1b43174b8be9e41f7b8bbf19716b79c5e2464a87439e89e3d8c583126150448612f20992f3f21bb7ecbfe3efd0e1860808c6d2919da4cf2d7f48c43b81c9e8203eb37895a8ea3cb28f146b1b9ec8db2c4880279255c32a2367cfecfde135f758d55ffcb4ab59a093e06a24b64a0e58473f2ae6d34f51002da745e3d67ec7b490dc5ba772e83566b6adeccf8ff23264c0d925fc9f09c46be9b660007bdbabcf68563fce9f1255861647ca47a2786b3338c1458dc85954fa9ff632990b5e79645683fbc1d7dffc7c21f82530ef51b370fb25c93c758b979758b411f18d58e0d91136a02998072f448cacbe911acc699cf0345b1441fc1dd2ef0c725c5752bd5589598b9aae085d4e6ca54bad0172967236bc079f8715017cbfa9d8c58267787b2e340116d41fd45f16d12139b7e6ba10d20a5958331b65ee7ee4d10be4b5040c43337e47006c5f78843eeb027983cc243ca632c5c88545326369ff402bfeda30f145fdaf70c48bc463637c58fc8b1a7e25033de469d958d4dfbe8fde4cc9d02b1aabd8a9ae834018e6f248f4653650228f3f3f7f4efb595b808d5d0bd2a2bb421749081564db409bd9cae5de9e995a01ed4c1a86077387bd89e42d407a21b0bd397fee0cb4cdb7e35165fef115d158b5be8a636a4f9bccebc34c35b76a6a926c28a86a646a1efa279534e205624fa3dd11ec8f83b4b5bc9f8bdc233079f943805812da4e4db8d168a3396415d7d545bb7bbf25dd2c9b2acae2e942e5cca714dda147f7fcb724e0fb64e9d679fb778ee7187448a468f7aa42042c8ff418b8ad337aaeaba07afebaa85bb31faf14907bca0374d3c1fa6ed6b09ba344b7b8079a9a4f7fcd8e51b26954bdff2908b187689013479084f31f4e6fad38f69eba4cdf9081270cd0e86be500b19f927fbf3e5fe823d18e6a4743427d982fb674763f2e805142b7c51839381beaa4f8789aab8dd78aa7709a7b38056403a9b7e3bfc490a2e73d48df2161141b9df418d38a887a07ec5456c15c05cde58a9749d56fed85e9821a31e64285027399a01bb5b9acdf63454e94f96e3e8ad3ee05455dd11e0f1c3351ab1ea60a3bc2e75613c5a8e53c7c51ad9092a7a2b3715ed5c26f645139ac4f77810dbd29074cb3181a224780280ff37a846d884ebc49af86db63d2ec50902db8add0bb983c36eec2cdaac08255ad67d5c2ed9c98c199a4ce0f66f1c1f5f5238f1f71ca57ad3355d740463a5e89c156471f4493532f290e86c4bb703a0296d4245e64a4c76e6540de62ae75645da1aaea8f4fec5e4a63f5929b8724c33a931ba2188ed6a6bbd6bc7332200842535b269408804a5d6bab75d9f5146764dc8f2d8856e16f06fc78d78ff2a47eca42c5b61521b2a87a35f3ca2dd2659d6aa394a3b50e0544ac1ea4d7c38baf1bc0001528b19970d1abe09300f6abfe6874eef6bc4d6409d4aeca549ed3d3d3f73b1fec684dd7b2822dc7c5b704969df7699265ec4fba45505f8604d75dd6e830bd06e826a2d1d0a97a04ca98e8cf849ce9ec40b86ddeee7c7276417e818c3da386b9628cad4c52966837c803020347940412bdb0321400a67e0174c318e3e73c478d71b4595c3c1cf512902ca8cd1cfd4f2c2b094e43c669744e9402d500c022ff211b0b1cd8c76c4f197281d0c28b672297d840468afa3ea6f696170541a017909d4e17ef6412fdad575779f13afa3792dca2daf4126a32b3b2299a9ed2a6abd004ffc6be0d49f0bd7699a1ce1eace14e6ac3ecc2e61a1e9d8af7836c9d8193ed42d766322f45489729b6d48e4801ee3a405167d086a1aa19b7db37f96f4699f65c799e2ce7ef31da12ddfe46b793a887de0729a11d0913a63955b9cfd8211661617eba4301065b2e3510ac213336c5c6a688f268892465abfdae7ab4ae89216c4d219f4d673d1cf7566446c3ef5d5bb292ecb427cbe25cc23b1f1e16d7ac2cc070645b40d4bbb359ff505a9578483875e3cce9355709552431c5a846db049d155f2f958dabdc1525bdfe1ade38d3ac739f4ed3b8fd845fa875f8355f7b831dbcc00fae032427930030ab64266c43720d95b0cd27613e6aaae0ad3eca476548b15422e9ea48a5bd51dcc0a06f5a42e0ae66d9142522a2115f12b778146c94114ee005ae6c02d26868f1709a2ef3c244de805e798ec105ec046dd62a06be5044319576f57060c10f15b53da52d1dc6bb768579f1f50e46e63e42ea5df0eb266deb4d941c5b63c573499a03838c35758bca061533c85845b269c30ce437d04ef6d5ebcf4a9bd96ac0463efe9526a316fe0062f96f03574bebe75be5382a97e6987baefb3a8bda5e001497e213b4a4df15bf366ca41596351b496ed6be217db8f53f5e1a7fcb16008369eedabe77cb67ee8966079d647c285e8b673c7f971bec5a55d61bfc200b83fc8760790a38970f87206a7041c213caa5948503b4480da88b0f8f4a1a29638e237d3b1d45fbd734a474dc6d713da0a229fbe5efa5a12f7d4201c971f5ecec8ee13ac1a4883aafc3b6a917304c396641796f0f0875dbdf0b52e21ca84deda1beb3435be7c754f0e5e310e4706b07da9374c13f4fdc87d3c996b0665c280f4f0ef46cd7f4a87c9ddc64c8bf3a5702758252fe412d70211dd962ce917c57630d90dcdc10a79b3c39be89473753afc14d8374782176f7f46d4d0d5a79f12656f29925fec55a3befbe406e7672d8ac5794fdf4497a41b1fbd5cb30773df0bfa51be153505a1af7e168438fabb8507308ef7bac8118698f5cf0ecd43bab055504a1992fa4ffbdf06ef4779efd329a33b802685627968e9fe1e4b3d00784c5c1167dd72494f4ef993c90461e7edc688f7132c8a26542d3541100745a03a471fb1d19b5c7e7f9f0cdee84cbf0d140ad2ae3714c37672306f403cdbd8086a8c5437050f941ba0", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000000480)="c9df8a794eafb86a24e9054bd19cc7369263d3005e61b706c1ff098b8d385884e2f5d6bd3d88d523a094ae8655be2ed248a0aab907af775f63a031dc90039b7474b0714111d367", 0x47}], 0x4, &(0x7f0000004340)=ANY=[@ANYBLOB="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"], 0x1030}, 0x840) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x12042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) r4 = open(0x0, 0x1850c2, 0x14c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb, 0x1}}}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r8 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r8, 0x300, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000100)=0x40) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006d"], 0x1a0}}, 0x0) 8.947715525s ago: executing program 2 (id=6856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000340)="46a1dfa2b8d8e4c3c277f9caea2551856b29554bb62fbb9202ba7d3df1fbf7d650b5279fa93f6782dbe458b0e1c758ca363053f8564efb1dc6247608dcf9b0db1f306e2100000000000000", 0x4b}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001480)}, {&(0x7f0000001500)="3a6ed4d1799bf0031d8882625d0a087ce74d504c3bf7b42d2691248980f584ed07f99a070f957ff2b297ee4297c3f6e91730a6f58190d33b67ff158f07169158f38c1712b0be85f0f623f78344e96db308b3644339acd13546c677bab90ea918140b931ef24821cc51d012fbd977a4bab8dcd293e7601eca17b435a5519bed1b0cee743910d3c0bf", 0x88}], 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x20044014) socket(0x1d, 0x2, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xa2c65) sched_setattr(0x0, 0x0, 0x0) 8.781110081s ago: executing program 1 (id=6857): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x24) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) 8.496180613s ago: executing program 4 (id=6858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0x6, 0x0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x24020400) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'dvmrp1\x00', 0x4000}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0xcc) inotify_rm_watch(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1c, 0x0, &(0x7f0000000000)=0xfffffffffffffe1d) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000006580)=ANY=[@ANYBLOB="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"], 0x2c18}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES16=r5], 0x21c}}, 0x0) 8.481507827s ago: executing program 1 (id=6859): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) (async) r1 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xf9) (async) keyctl$setperm(0x5, r1, 0x2000) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000300)={0x0, 0xf079, 0x80, 0x1, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffe, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) listen(r3, 0x1) 8.107977942s ago: executing program 4 (id=6860): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18800, 0x126) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0xd21, 0x4000) (async) r6 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r6, 0x0) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) (rerun: 64) recvmmsg(r8, &(0x7f0000001740), 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000010101010023c0b7a70000000200000006001240000400003800018006000340000c00002c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000000c0019800800010005000000"], 0x60}}, 0x0) (async, rerun: 64) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x85) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) 7.768066589s ago: executing program 1 (id=6861): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x8, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x84e) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfdffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x5}) r4 = syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xdb) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000000c0)) syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) 7.171636037s ago: executing program 4 (id=6862): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60df) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) syz_emit_ethernet(0xd8, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8111a9", 0xa2, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0xd, 0x8, "e7956eda3ae5146524532a6ba9c295bf7ca8c89acd2292bd5a0ac37a1d9d1994ef76081b5309230165af9d58a57d8bb3c78faef00e41922562025de37ae7c2cd26119900da33732eee28cb9d860f941b6861a1919ffd2371715298b761365570144c19cacb4e8637e6623e0c61a724ebf532b22ded9f24ab13c9ac5157888989f50a9cecdce9c35b6453ed593929c1b286c220c576f7505b4728"}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x68, 0x100000000, &(0x7f0000000100)=0x8000000000000001}) 5.413114816s ago: executing program 1 (id=6863): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000002400)=""/4082, 0xff2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 5.398036792s ago: executing program 3 (id=6864): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, r4, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "c2f2cedfbaab41ffb39937944de0e129"}, 0x15, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003340)=[{0x0}, {&(0x7f00000032c0)=""/98, 0x62}], 0x2}, 0x9}], 0x2, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg(r6, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) 4.490919774s ago: executing program 2 (id=6865): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='none', &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00^a&\xcd\x8c.\xda|\x9ex\x00\x1d\x1cL\t\\\x15Dk\xb7\x04\xd5\x7fj\xf4H\x9d\xb2\x8b\xf7\x8a3[\xc3\x99\x14\nc\xdfV\x1bR?\xaf\xe67\xa6\x99\xcc>', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xfffffb01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 4.445555346s ago: executing program 5 (id=6866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3.967411288s ago: executing program 2 (id=6867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040, 0xc1ff}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"2244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439cc93c6f9516a4873ed9248ba27afeb7396efe6"}}}}}, 0x7e) 3.868611546s ago: executing program 5 (id=6868): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) r11 = epoll_create1(0x0) epoll_pwait(r11, &(0x7f0000000100)=[{}], 0x1, 0xfffffffb, &(0x7f00000001c0)={[0x6]}, 0x8) 3.776143026s ago: executing program 4 (id=6869): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @void, @ipv4=@udp={{0x22, 0x4, 0x2, 0x9, 0xa2, 0x64, 0x0, 0x4, 0x11, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xaa, 0x3, 0x6, [{@loopback, 0x3}, {@remote, 0x9e}, {@multicast2, 0x9}, {@multicast2, 0x9eb4}, {@private=0xa010100, 0x7}, {@broadcast, 0xfffffffc}]}, @end, @timestamp_prespec={0x44, 0x3c, 0xa3, 0x3, 0x0, [{@multicast1, 0xe6}, {@remote, 0x7ff}, {@multicast1, 0x2}, {@loopback, 0xff}, {@remote, 0x5608}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x7fffffff}]}, @end]}}, {0x4e22, 0x4e24, 0x1a, 0x0, @gue={{0x2, 0x0, 0x2, 0x68, 0x0, @val=0x80}, "c9b0857b089bd3fbda83"}}}}, 0xa2) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x31, 0x3b, {0x3b, 0x1, "d154e9f3526bca600f57bb92f502bc4c3107e42bdea173982a463ab3472153cd2cba6ec861e1f147e676e3f1f3355cc1f5e8f02bd9dc1c9af1"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x8, 0xe5, "d30186d4cc5c89c6cb105ef30397c0995418bfd58e4f0f8259544799c2e1cd9aa35b4cbaad22ca77c4a38a60d4b2a013d75571ee18422c2823d4c63c90135a55a010ce1f081ae44abca24bffc26edf0edc09d3d115ef4a1058f6b4ce996c0aa11288c6a49be659836011084111da5679e954cac17da55933923fa8e5c7f29e423b98b8322b9c72169a81a6bcb505723f6bcf2b4ccc54aac8badc180bff25a3a493be601a1f2ffe69285009d7adb209ef3e3c806e9d34f81076c42819368174844a0f202cf42e5f3907750c7ea35334b6a182dc8255f76310e16cef2f76de3a47697ce74a3d"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000005c0)={0xc0, 0x5, 0x5, "ab54d3e9eb"}, &(0x7f0000000600)}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async, rerun: 32) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delchain={0x3c, 0x65, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xa, 0x2}, {0x2, 0xfff3}, {0xf, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x9e2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004004) 3.160404375s ago: executing program 2 (id=6870): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40840) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet6(0xa, 0x4, 0xb) 3.106240528s ago: executing program 1 (id=6871): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x200400d6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0100000001"], 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)='\x00'/16, 0xffffffffffffff9d) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 2.568235927s ago: executing program 3 (id=6872): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x8001}}}, 0x84) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_pauseparam={0x12, 0x8, 0x101, 0x6}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) (async) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}, 0x2}}, 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 2.008256509s ago: executing program 4 (id=6873): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x284200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800450830200064000000119078000000000000000010004e20000c9078c10c0001"], 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) landlock_restrict_self(r3, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r5, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x92}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0xf64a, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000200)={@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast}, 0xc) close(r6) 1.948060333s ago: executing program 3 (id=6874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.872228183s ago: executing program 5 (id=6875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000080)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.649123792s ago: executing program 4 (id=6876): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000433000/0x4000)=nil) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000780)='./control/file0\x00', 0x80040, 0x2a) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/80, 0x50) unlink(0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000003c0)='./control\x00') syz_usb_connect(0x3, 0x452, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe8, 0xae, 0x1c, 0x40, 0x13b1, 0x1a, 0x16b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x440, 0x1, 0x0, 0x0, 0x130, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0xd, 0xb2, 0xdb, 0x1a, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x9, 0x4, [@generic={0xfa, 0x30, "0e3037b73e3fc62b6fad8935787324bf3cabc29aa97de6e7eafd3218afe56091f8ea6a4c3a2c0c8be751c471e7de2a1cdd7975310cc3af5439d8fce82fb82b33e2c6b75eb6863cbeb5d80ec50b4ed4494e446d47d5f39f83d4f501e487fefafe3e21470abdd534bbc5ae3fd02bbcb6bf8b04ed8a5329d3944ce4da987999cb6083cd86c4c0ecfe7f310a39bb512151fa1e82468350f2f0974ec45f0de3c9af6cd2e1c388d7edd0b2e7d703327ac3c26127bc8bc9f9c7273d2126750cccd54fbd8c723e0b045e4eb8d0131a42a863e88b7a9f69e75d19ed2b1dd8f8a7727e7fd18b5adb7e549dc295274d40ae2e277c4173c2aa5b75837e13"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4b, 0x3b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x40}, @generic={0x66, 0x9, "6f5c095ea677d9b394dc7e86a2fb303c2d7c096de59ee209afed243f9708607b53934765f4ebfa13372e35631a9de454f7e3d1d9e0bc8c50ee63940d4baf19116c0b491302f5809c1ac891885d11e63505932dfc2b7532d8f1ca7b81af24c4bad54d7238"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x7, 0x4, [@generic={0x14, 0x22, "0c83754ed68ed1be64839d68c01424390bda"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x7f, 0xd, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x10, 0x4, 0x7f, [@generic={0xfb, 0x23, "5713ca66cbb2758c7a3dd863624b98f223916cf9a97cfec58db648fb89796edf7a9d026e11f1e7318ae8fd608aa5f4b06e0535fefc19c215446c66db7398c45b40b9e8aad8a1e47959d62d4ab39a57ab3ac8f1a014b9f52eede8fde3e4852512ef3ded0b4504230bf996e9cde66d3a620c0b40aef15f28e311b51604cb74aa29a2cf5175dd80e592f1565bb494b4d467f936ca9fece51e695ab9a808594e77c59372f0fd773d1775c3604f634f35c9c71817eaeb72597d2ff112cb4e97fa0ccc42b0796b9203903c900d55f6e0c5392226869acebdb2fd04b707debc8ab928c1acae9e36a6ff73dfd5d81eace1112873ce1e8bf5d13f8498a1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x4d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x9, 0xaf, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x45, 0x4, "fc69d094d219504597a28c44368af4c412c9773aa2a1bd98cd59c4bb0aae218d19c778332a6b17947d45107271fdb4203b76129b097c5ac38f6f0baa6ae72c768c1a42"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xf7, 0x7f, 0xc}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x2, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x40}, @generic={0x6d, 0x23, "4a758d11c89305b72317de7dc15ad62fa03274b02739f88c2d95a380f91359f1b06d384d1f4e912221c3cedbca35ba1b065b2ad565826cd7ed3b6e638c9980880c822926a116515479138b11e1b23521456dadeeb330e798961de5467242761292ba0106e5ce00854921c7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8b, 0x7, 0x7f, [@generic={0x6e, 0x8, "4811fae4d96b337fc0285b3104633603cce8be8270fd5a1d7304575ab6e885296e80c59f8ba0193f4df5ba79e24b1b5d80399302c5d8d43644f006773c78bda7d5c981bea927340a76ce808e818147148227e3f1d0619cf777b2c60037bd440e2dd524514a525e62d33b5975"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xc, 0xf0, 0xc}}]}}]}}]}}, 0x0) 1.528383441s ago: executing program 5 (id=6877): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='none', &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00^a&\xcd\x8c.\xda|\x9ex\x00\x1d\x1cL\t\\\x15Dk\xb7\x04\xd5\x7fj\xf4H\x9d\xb2\x8b\xf7\x8a3[\xc3\x99\x14\nc\xdfV\x1bR?\xaf\xe67\xa6\x99\xcc>', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xfffffb01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 1.363826795s ago: executing program 3 (id=6878): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e24, 0x3, 'nq\x00', 0x6c, 0x80005, 0x7d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x75}, {@local, 0x4e20, 0x4}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x22, 0x7, {0x7, 0xd, "be811a4954"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.265037626s ago: executing program 5 (id=6879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="98218727f7e1084a6dda805831605231474402e23e3db061a6df58e217d423ab6f645335bebe33ee162519112fb671d01d05a7958bc2d26157b932aac02dfa", @ANYBLOB="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"]) 625.367219ms ago: executing program 2 (id=6880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040, 0x4000}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"2244075000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439cc93c6f9516a4873ed9248ba27afeb7396efe6"}}}}}, 0x7e) 0s ago: executing program 2 (id=6881): r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r1 = fsopen(&(0x7f0000000480)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfffffffe, 0xc, 0x6, 0x8, 0x0, 0x5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x1000, r4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x21, 0x4, 0x8000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {0x3}, {0xb, 0xe}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2044, 0x0) kernel console output (not intermixed with test programs): .823550][T32214] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2221.823590][T32214] alloc_pages_bulk_noprof+0x560/0x710 [ 2221.823614][T32214] ? rcu_is_watching+0x15/0xb0 [ 2221.823638][T32214] ? trace_kmalloc+0x1f/0xd0 [ 2221.823664][T32214] ? __kmalloc_noprof+0x29b/0x4f0 [ 2221.823693][T32214] ? copy_splice_read+0x143/0xa50 [ 2221.823746][T32214] copy_splice_read+0x173/0xa50 [ 2221.823788][T32214] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2221.823820][T32214] ? __pfx_copy_splice_read+0x10/0x10 [ 2221.823849][T32214] ? rcu_read_lock_any_held+0xb3/0x120 [ 2221.823874][T32214] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2221.823909][T32214] ? direct_splice_actor+0x10c/0x160 [ 2221.823940][T32214] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2221.823972][T32214] ? file_end_write+0x156/0x250 [ 2221.824004][T32214] ? direct_splice_actor+0x10c/0x160 [ 2221.824038][T32214] ? __pfx_copy_splice_read+0x10/0x10 [ 2221.824068][T32214] splice_direct_to_actor+0x4a6/0xcc0 [ 2221.824123][T32214] ? __pfx_direct_splice_actor+0x10/0x10 [ 2221.824154][T32214] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2221.824199][T32214] do_splice_direct+0x181/0x270 [ 2221.824235][T32214] ? __pfx_do_splice_direct+0x10/0x10 [ 2221.824268][T32214] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2221.824310][T32214] ? rw_verify_area+0x255/0x4d0 [ 2221.824345][T32214] do_sendfile+0x4da/0x7e0 [ 2221.824378][T32214] ? __pfx_do_sendfile+0x10/0x10 [ 2221.824414][T32214] __se_sys_sendfile64+0xd9/0x190 [ 2221.824454][T32214] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2221.824487][T32214] ? rcu_is_watching+0x15/0xb0 [ 2221.824515][T32214] ? do_syscall_64+0xbe/0x3b0 [ 2221.824543][T32214] do_syscall_64+0xfa/0x3b0 [ 2221.824566][T32214] ? lockdep_hardirqs_on+0x9c/0x150 [ 2221.824588][T32214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.824611][T32214] ? clear_bhb_loop+0x60/0xb0 [ 2221.824638][T32214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.824662][T32214] RIP: 0033:0x7fcebe38eba9 [ 2221.824682][T32214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2221.824701][T32214] RSP: 002b:00007fcebf2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2221.824724][T32214] RAX: ffffffffffffffda RBX: 00007fcebe5d5fa0 RCX: 00007fcebe38eba9 [ 2221.824740][T32214] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 2221.824755][T32214] RBP: 00007fcebf2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2221.824769][T32214] R10: 0000000100000500 R11: 0000000000000246 R12: 0000000000000002 [ 2221.824784][T32214] R13: 00007fcebe5d6038 R14: 00007fcebe5d5fa0 R15: 00007fcebe6ffa28 [ 2221.824819][T32214] [ 2222.697367][T20267] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2222.697499][T22710] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 2222.981789][T20267] usb 2-1: Using ep0 maxpacket: 8 [ 2222.992332][T20267] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2223.000839][T20267] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2223.076639][T20267] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2223.116940][T20267] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2223.157312][T20267] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2223.208473][T20267] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2223.290549][T20267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.568478][T20267] usb 2-1: GET_CAPABILITIES returned 0 [ 2223.614915][T20267] usbtmc 2-1:16.0: can't read capabilities [ 2223.787863][T31779] usb 2-1: USB disconnect, device number 59 [ 2224.341463][T31779] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2224.357432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.366007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.367489][ T5923] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2224.374564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.416179][T32253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6522'. [ 2224.538260][T31779] usb 2-1: Using ep0 maxpacket: 8 [ 2224.545849][T31779] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2224.557827][ T5923] usb 6-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 2224.582627][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2224.595920][T31779] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2224.616553][T31779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2224.629408][ T5923] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2224.642912][T31779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2224.653694][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.662208][T31779] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2224.666764][T32258] FAULT_INJECTION: forcing a failure. [ 2224.666764][T32258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2224.679896][T31779] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2224.701404][ T5923] usb 6-1: config 0 descriptor?? [ 2224.711541][ T5923] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2224.719476][T32258] CPU: 0 UID: 0 PID: 32258 Comm: syz.2.6523 Not tainted syzkaller #0 PREEMPT(full) [ 2224.719510][T32258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2224.719525][T32258] Call Trace: [ 2224.719536][T32258] [ 2224.719545][T32258] dump_stack_lvl+0x189/0x250 [ 2224.719579][T32258] ? __pfx____ratelimit+0x10/0x10 [ 2224.719602][T32258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2224.719629][T32258] ? __pfx__printk+0x10/0x10 [ 2224.719662][T32258] ? fs_reclaim_acquire+0x7d/0x100 [ 2224.719693][T32258] should_fail_ex+0x414/0x560 [ 2224.719731][T32258] prepare_alloc_pages+0x213/0x610 [ 2224.719762][T32258] __alloc_frozen_pages_noprof+0x123/0x370 [ 2224.719789][T32258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2224.719829][T32258] alloc_pages_bulk_noprof+0x560/0x710 [ 2224.719854][T32258] ? rcu_is_watching+0x15/0xb0 [ 2224.719878][T32258] ? trace_kmalloc+0x1f/0xd0 [ 2224.719906][T32258] ? __kmalloc_noprof+0x29b/0x4f0 [ 2224.719935][T32258] ? copy_splice_read+0x143/0xa50 [ 2224.719971][T32258] copy_splice_read+0x173/0xa50 [ 2224.720013][T32258] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2224.720046][T32258] ? __pfx_copy_splice_read+0x10/0x10 [ 2224.720075][T32258] ? rcu_read_lock_any_held+0xb3/0x120 [ 2224.720099][T32258] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2224.720128][T32258] ? direct_splice_actor+0x10c/0x160 [ 2224.720160][T32258] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2224.720194][T32258] ? file_end_write+0x156/0x250 [ 2224.720227][T32258] ? direct_splice_actor+0x10c/0x160 [ 2224.720262][T32258] ? __pfx_copy_splice_read+0x10/0x10 [ 2224.720292][T32258] splice_direct_to_actor+0x4a6/0xcc0 [ 2224.720348][T32258] ? __pfx_direct_splice_actor+0x10/0x10 [ 2224.720380][T32258] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2224.720431][T32258] do_splice_direct+0x181/0x270 [ 2224.720468][T32258] ? __pfx_do_splice_direct+0x10/0x10 [ 2224.720502][T32258] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2224.720543][T32258] ? rw_verify_area+0x255/0x4d0 [ 2224.720578][T32258] do_sendfile+0x4da/0x7e0 [ 2224.720611][T32258] ? __pfx_do_sendfile+0x10/0x10 [ 2224.720647][T32258] __se_sys_sendfile64+0xd9/0x190 [ 2224.720686][T32258] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2224.720718][T32258] ? rcu_is_watching+0x15/0xb0 [ 2224.720747][T32258] ? do_syscall_64+0xbe/0x3b0 [ 2224.720775][T32258] do_syscall_64+0xfa/0x3b0 [ 2224.720798][T32258] ? lockdep_hardirqs_on+0x9c/0x150 [ 2224.720820][T32258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2224.720842][T32258] ? clear_bhb_loop+0x60/0xb0 [ 2224.720870][T32258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2224.720892][T32258] RIP: 0033:0x7fcebe38eba9 [ 2224.720911][T32258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2224.720931][T32258] RSP: 002b:00007fcebf2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2224.720955][T32258] RAX: ffffffffffffffda RBX: 00007fcebe5d5fa0 RCX: 00007fcebe38eba9 [ 2224.720972][T32258] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 2224.720987][T32258] RBP: 00007fcebf2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.721001][T32258] R10: 0000000100000500 R11: 0000000000000246 R12: 0000000000000002 [ 2224.721015][T32258] R13: 00007fcebe5d6038 R14: 00007fcebe5d5fa0 R15: 00007fcebe6ffa28 [ 2224.721050][T32258] [ 2225.050263][T31779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.154973][T31779] usb 2-1: can't set config #16, error -71 [ 2225.175695][T31779] usb 2-1: USB disconnect, device number 60 [ 2225.254571][T22710] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 2225.264739][T22710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.275071][T22710] usb 4-1: config 0 descriptor?? [ 2225.280610][T22710] usb 4-1: can't set config #0, error -71 [ 2225.290090][T22710] usb 4-1: USB disconnect, device number 11 [ 2225.481119][T32268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6525'. [ 2225.917817][T30194] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2226.317755][T30194] usb 5-1: Using ep0 maxpacket: 32 [ 2226.339496][T30194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.339537][T30194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2226.339581][T30194] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2226.339651][T30194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.341924][T30194] usb 5-1: config 0 descriptor?? [ 2226.588632][T30194] zydacron 0003:13EC:0006.005C: item fetching failed at offset 0/2 [ 2226.589563][T30194] zydacron 0003:13EC:0006.005C: parse failed [ 2226.589674][T30194] zydacron 0003:13EC:0006.005C: probe with driver zydacron failed with error -22 [ 2227.128184][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.128244][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.218347][T22710] usb 5-1: USB disconnect, device number 86 [ 2228.812435][T22710] usb 6-1: USB disconnect, device number 6 [ 2228.955095][T32305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.025815][T32307] dvmrp0: entered allmulticast mode [ 2229.174719][T32311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6536'. [ 2229.388576][T32317] syzkaller1: entered promiscuous mode [ 2229.401432][T32317] syzkaller1: entered allmulticast mode [ 2229.557865][T26903] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2229.664573][T32325] fuse: Bad value for 'group_id' [ 2229.679602][T32325] fuse: Bad value for 'group_id' [ 2229.729920][T26903] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2229.768041][T26903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.802105][T26903] usb 6-1: Product: syz [ 2229.810952][T26903] usb 6-1: Manufacturer: syz [ 2229.815725][T26903] usb 6-1: SerialNumber: syz [ 2229.836261][T26903] usb 6-1: config 0 descriptor?? [ 2229.844842][T32331] sctp: [Deprecated]: syz.1.6544 (pid 32331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2229.844842][T32331] Use struct sctp_sack_info instead [ 2229.864923][T26903] usb 6-1: selecting invalid altsetting 1 [ 2229.879210][T26903] technisat-usb2: could not set alternate setting to 0 [ 2230.056163][ T30] audit: type=1326 audit(1757818786.865:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.078680][ C0] vkms_vblank_simulate: vblank timer overrun [ 2230.114259][T32339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6547'. [ 2230.209718][ T30] audit: type=1326 audit(1757818786.865:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.227640][T26903] technisat-usb2: firmware version: 0.0 [ 2230.252604][T26903] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2230.252606][ T30] audit: type=1326 audit(1757818786.865:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.252657][ T30] audit: type=1326 audit(1757818786.865:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.324576][ T30] audit: type=1326 audit(1757818786.865:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.355803][ T30] audit: type=1326 audit(1757818786.925:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.357066][T26903] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2230.389277][T20267] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2230.455679][ T30] audit: type=1326 audit(1757818787.265:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.488776][ T30] audit: type=1326 audit(1757818787.265:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2230.491575][T26903] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 2230.547394][ T5930] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2230.564343][T26903] usb 6-1: USB disconnect, device number 7 [ 2230.565898][T20267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2230.589955][T20267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2230.605696][T20267] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2230.624936][T20267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.694740][T20267] usb 3-1: config 0 descriptor?? [ 2230.720035][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 2230.730241][ T5930] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 2230.743274][ T5930] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 2230.767980][ T5930] usb 2-1: config 0 has no interface number 0 [ 2230.785140][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2230.801677][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.813640][ T5930] usb 2-1: Product: syz [ 2230.830580][ T5930] usb 2-1: Manufacturer: syz [ 2230.839351][ T5930] usb 2-1: SerialNumber: syz [ 2230.847106][ T5930] usb 2-1: config 0 descriptor?? [ 2230.981526][T20267] usbhid 3-1:0.0: can't add hid device: -71 [ 2230.991657][T20267] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2231.003254][T20267] usb 3-1: USB disconnect, device number 8 [ 2231.062976][ T30] audit: type=1326 audit(1757818787.875:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2231.090166][ T5930] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 2231.107942][ T5930] usb 2-1: No valid video chain found. [ 2231.125046][ T30] audit: type=1326 audit(1757818787.875:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.1.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4818eba9 code=0x7ffc0000 [ 2231.148071][ T5930] usb 2-1: USB disconnect, device number 61 [ 2231.307425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.315833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.324228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2231.873325][T32355] syzkaller1: entered promiscuous mode [ 2231.896569][T32355] syzkaller1: entered allmulticast mode [ 2233.107347][T20267] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2233.140492][T32383] tipc: Started in network mode [ 2233.145517][T32383] tipc: Node identity 12b9b03b0069, cluster identity 4711 [ 2233.154060][T32383] tipc: Enabled bearer , priority 0 [ 2233.177829][T32383] syzkaller0: entered promiscuous mode [ 2233.187251][T32383] syzkaller0: entered allmulticast mode [ 2233.353023][T20267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2233.394299][T20267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2233.425813][T20267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2233.484178][T20267] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2233.494606][T20267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.503793][T20267] usb 4-1: Product: syz [ 2233.519423][T20267] usb 4-1: Manufacturer: syz [ 2233.527963][T20267] usb 4-1: SerialNumber: syz [ 2233.551891][T20267] usb 4-1: config 0 descriptor?? [ 2233.617523][ T6634] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2233.836581][T32381] tipc: Resetting bearer [ 2233.885043][T32397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6564'. [ 2233.891495][T20267] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2233.906877][T32381] tipc: Disabling bearer [ 2233.969578][ T6634] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2233.985241][ T6634] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2234.017462][ T6634] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2234.057653][ T6634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.145784][T32393] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2234.153661][T26903] usb 4-1: USB disconnect, device number 12 [ 2234.185364][ T6634] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2234.241231][T32398] vlan2: entered allmulticast mode [ 2234.247588][T32398] bridge1: port 1(vlan2) entered blocking state [ 2234.254532][T32398] bridge1: port 1(vlan2) entered disabled state [ 2234.266093][T32398] vlan2: entered promiscuous mode [ 2234.271464][T32398] bridge0: entered promiscuous mode [ 2234.369498][T32393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.560998][T32393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.082137][T32404] syzkaller1: entered promiscuous mode [ 2235.089623][T32404] syzkaller1: entered allmulticast mode [ 2235.096507][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2235.096520][ T30] audit: type=1326 audit(1757818791.905:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2235.207353][ T30] audit: type=1326 audit(1757818791.905:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2235.227567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.238224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.246605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.249297][ T30] audit: type=1326 audit(1757818791.945:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f763078d510 code=0x7ffc0000 [ 2235.277785][ T30] audit: type=1326 audit(1757818791.945:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2235.300585][ T30] audit: type=1326 audit(1757818791.945:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2235.324394][ T30] audit: type=1326 audit(1757818791.945:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2235.347680][ T30] audit: type=1326 audit(1757818791.945:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.4.6563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f763078eba9 code=0x7ffc0000 [ 2236.770686][ T6634] usb 5-1: USB disconnect, device number 87 [ 2237.957313][ T5930] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2238.059411][T22710] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2238.246990][T22710] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2238.257752][ T5930] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2238.276559][T22710] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2238.277346][ T5930] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2238.316706][T22710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.335341][ T5930] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2238.365117][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.406179][T32427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2238.478319][ T5930] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.663470][T22710] usb 2-1: config 0 descriptor?? [ 2238.790256][T32426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.806366][T13405] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2238.853006][T32426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.998188][T13405] usb 4-1: device descriptor read/64, error -71 [ 2239.095535][T32426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.107377][T32426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.147658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.156265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.217881][ T30] audit: type=1326 audit(1757818795.895:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32419 comm="syz.5.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2239.247754][T13405] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2239.289346][ T30] audit: type=1326 audit(1757818795.905:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32419 comm="syz.5.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2155b8d510 code=0x7ffc0000 [ 2239.417848][T13405] usb 4-1: device descriptor read/64, error -71 [ 2239.446432][ T30] audit: type=1326 audit(1757818795.905:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32419 comm="syz.5.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2155b8e7ab code=0x7ffc0000 [ 2239.576028][T32436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.605816][T32436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.623120][T13405] usb usb4-port1: attempt power cycle [ 2240.122597][T32436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.138596][T32436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.237431][T13405] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2240.288909][T13405] usb 4-1: device descriptor read/8, error -71 [ 2240.528560][T22710] video4linux radio48: keene_cmd_set failed (-71) [ 2240.530371][T13405] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2240.535659][T22710] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 2240.629662][T13405] usb 4-1: device descriptor read/8, error -71 [ 2240.679007][T22710] usb 2-1: USB disconnect, device number 62 [ 2240.748988][T13405] usb usb4-port1: unable to enumerate USB device [ 2240.913400][T13405] usb 6-1: USB disconnect, device number 8 [ 2242.077669][T32472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2242.084273][T32472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2242.295121][T32472] vhci_hcd vhci_hcd.0: Device attached [ 2242.301480][T32481] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 2242.316217][T32481] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 2242.376311][T32472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6579'. [ 2242.538740][T32485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6585'. [ 2242.562002][ T6634] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 2242.595690][T32488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6585'. [ 2242.664371][T32474] vhci_hcd: connection reset by peer [ 2242.707377][T12615] vhci_hcd: stop threads [ 2242.711696][T12615] vhci_hcd: release socket [ 2242.743107][T12615] vhci_hcd: disconnect device [ 2242.777334][T20267] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2242.927374][T20267] usb 4-1: Using ep0 maxpacket: 32 [ 2242.938512][T20267] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 2242.954632][T20267] usb 4-1: config 0 has no interface number 0 [ 2243.034035][T20267] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 2243.043942][T20267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.062661][T20267] usb 4-1: Product: syz [ 2243.077163][T20267] usb 4-1: Manufacturer: syz [ 2243.092374][T20267] usb 4-1: SerialNumber: syz [ 2243.197883][T20267] usb 4-1: config 0 descriptor?? [ 2243.272777][T20267] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 2243.476454][T32484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2243.548070][T32484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2243.601722][T20267] gspca_sn9c2028: read1 error -71 [ 2243.613089][T20267] gspca_sn9c2028: read1 error -71 [ 2243.635564][T20267] gspca_sn9c2028: read1 error -71 [ 2243.661907][T20267] sn9c2028 4-1:0.119: probe with driver sn9c2028 failed with error -71 [ 2243.735923][T20267] usb 4-1: USB disconnect, device number 17 [ 2244.097373][T31779] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2244.265412][T32507] netlink: 'syz.1.6591': attribute type 10 has an invalid length. [ 2244.274453][T32507] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2244.286993][T32507] team0: Port device netdevsim0 added [ 2244.378659][T31779] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 2244.387137][T31779] usb 3-1: config 0 has no interface number 0 [ 2244.398213][T31779] usb 3-1: New USB device found, idVendor=13b1, idProduct=001a, bcdDevice=16.b1 [ 2244.407841][T31779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.415840][T31779] usb 3-1: Product: syz [ 2244.420861][T31779] usb 3-1: Manufacturer: syz [ 2244.425467][T31779] usb 3-1: SerialNumber: syz [ 2244.548030][T31779] usb 3-1: config 0 descriptor?? [ 2244.557598][T22710] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2244.717430][T22710] usb 2-1: Using ep0 maxpacket: 8 [ 2244.749468][T22710] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 2244.811640][T22710] usb 2-1: config 0 has no interface number 0 [ 2244.855429][T22710] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 2244.865278][T22710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.880703][T22710] usb 2-1: Product: syz [ 2244.899531][T22710] usb 2-1: Manufacturer: syz [ 2244.922001][T22710] usb 2-1: SerialNumber: syz [ 2244.971080][T22710] usb 2-1: config 0 descriptor?? [ 2244.980116][T22710] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected [ 2245.038646][T22710] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2245.184563][T22710] usb 2-1: USB disconnect, device number 63 [ 2245.315609][T22710] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2245.371887][T22710] kobil_sct 2-1:0.148: device disconnected [ 2245.517480][T20267] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2245.774526][T20267] usb 6-1: Using ep0 maxpacket: 8 [ 2245.787793][T20267] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.8e [ 2245.810845][T20267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.899829][T20267] usb 6-1: config 0 descriptor?? [ 2246.484409][T32537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.494219][T32537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.255904][T31779] usb 3-1: USB disconnect, device number 9 [ 2247.817376][ T6634] vhci_hcd: vhci_device speed not set [ 2248.120032][T22710] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 2248.289546][T22710] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 2248.298190][T22710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.310839][T22710] usb 4-1: config 0 has no interface number 0 [ 2248.320641][T22710] usb 4-1: config 0 interface 25 has no altsetting 0 [ 2248.337359][T22710] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 2248.425381][T22710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.544893][T22710] usb 4-1: config 0 descriptor?? [ 2248.802530][T22710] usb 6-1: USB disconnect, device number 9 [ 2249.775913][T32572] netdevsim netdevsim2: Direct firmware load for x failed with error -2 [ 2249.795537][T32572] netdevsim netdevsim2: Falling back to sysfs fallback for: x [ 2249.847152][T32577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6607'. [ 2249.898914][T32574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2249.905503][T32574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2249.920333][T32574] vhci_hcd vhci_hcd.0: Device attached [ 2249.987624][T32575] vhci_hcd: connection closed [ 2250.031184][ T1167] vhci_hcd: stop threads [ 2250.057435][ T1167] vhci_hcd: release socket [ 2250.073138][ T1167] vhci_hcd: disconnect device [ 2250.097776][T20267] vhci_hcd: vhci_device speed not set [ 2250.849915][T31779] usb 4-1: USB disconnect, device number 18 [ 2251.347341][ T5923] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2251.567332][T20267] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2251.604372][ T5923] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 2251.613765][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.634190][ T5923] usb 2-1: Product: syz [ 2251.646024][ T5923] usb 2-1: Manufacturer: syz [ 2251.666341][ T5923] usb 2-1: SerialNumber: syz [ 2251.727867][T20267] usb 4-1: Using ep0 maxpacket: 16 [ 2251.745089][T20267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.769457][T20267] usb 4-1: config 0 has no interfaces? [ 2251.787489][ T5930] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 2251.815945][T20267] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2251.818059][ T5923] usb 2-1: config 0 descriptor?? [ 2251.845655][T20267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.896902][T20267] usb 4-1: config 0 descriptor?? [ 2251.992927][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.013409][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2252.054821][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2252.090502][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2252.187843][T12875] Bluetooth: hci0: urb ffff88805bad6300 submission failed (2) [ 2252.236007][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2252.251613][ T5930] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2252.282599][ T5930] usb 5-1: Manufacturer: syz [ 2252.327939][ T5930] usb 5-1: config 0 descriptor?? [ 2252.701225][ T5930] rc_core: IR keymap rc-hauppauge not found [ 2252.719054][ T5930] Registered IR keymap rc-empty [ 2252.753842][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.779643][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.875217][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2252.927675][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input164 [ 2252.948917][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2252.977419][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.007633][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.027886][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.057390][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.107324][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2253.137342][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.167695][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.247518][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.427498][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 2253.439494][ T5923] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2253.453862][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.454216][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.602303][ T5923] usb 6-1: config 0 descriptor?? [ 2253.608237][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2253.639575][ T5923] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2253.690658][ T5930] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2253.832151][ T5930] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2253.850911][T20267] usb 2-1: USB disconnect, device number 64 [ 2253.859561][T32611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.944242][T32611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.964803][ T5930] usb 5-1: USB disconnect, device number 88 [ 2254.067406][T31779] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2254.237825][T31779] usb 3-1: device descriptor read/64, error -71 [ 2254.329385][T20267] usb 4-1: USB disconnect, device number 19 [ 2254.497763][T31779] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2254.508112][T22710] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2254.553310][ T5930] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2254.654441][ T5923] gspca_sonixj: reg_w1 err -71 [ 2254.668236][T31779] usb 3-1: device descriptor read/64, error -71 [ 2254.687918][ T5923] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 2254.701833][T22710] usb 2-1: config 0 has no interfaces? [ 2254.713068][T22710] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2254.727928][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 2254.729046][ T5923] usb 6-1: USB disconnect, device number 10 [ 2254.829141][T31779] usb usb3-port1: attempt power cycle [ 2254.845382][ T5930] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2254.847163][T22710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.863852][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.873450][T22710] usb 2-1: Product: syz [ 2254.889333][T22710] usb 2-1: Manufacturer: syz [ 2254.894324][T22710] usb 2-1: SerialNumber: syz [ 2254.977072][ T5930] usb 5-1: config 0 descriptor?? [ 2255.017713][T22710] usb 2-1: config 0 descriptor?? [ 2255.247487][T31779] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2255.270162][T32616] fuse: Bad value for 'fd' [ 2255.325276][T31779] usb 3-1: device descriptor read/8, error -71 [ 2255.460609][T32625] syzkaller1: entered allmulticast mode [ 2255.597346][T31779] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2255.618019][T31779] usb 3-1: device descriptor read/8, error -71 [ 2255.730082][T31779] usb usb3-port1: unable to enumerate USB device [ 2256.497451][T31779] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2256.667599][T31779] usb 4-1: Using ep0 maxpacket: 32 [ 2256.681947][T31779] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2256.690581][T31779] usb 4-1: config 0 has no interface number 0 [ 2256.702035][T31779] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2256.714947][T31779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.732101][T32636] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 2256.738685][T32636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2256.743894][T31779] usb 4-1: Product: syz [ 2256.760613][T32636] vhci_hcd vhci_hcd.0: Device attached [ 2256.778067][T31779] usb 4-1: Manufacturer: syz [ 2256.797082][T32636] netdevsim netdevsim5: Direct firmware load for x failed with error -2 [ 2256.806710][T32636] netdevsim netdevsim5: Falling back to sysfs fallback for: x [ 2256.814517][T31779] usb 4-1: SerialNumber: syz [ 2256.822270][T31779] usb 4-1: config 0 descriptor?? [ 2256.833718][T31779] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2256.852993][T31779] usb 4-1: selecting invalid altsetting 1 [ 2256.859435][ T5930] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 2256.864307][T31779] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2256.885548][ T5930] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2256.896006][T31779] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2256.906357][ T5930] usb 5-1: USB disconnect, device number 89 [ 2256.920168][T31779] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2256.975912][T31779] usb 4-1: media controller created [ 2256.996494][T32640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6625'. [ 2257.007514][T20267] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 2257.026338][T31779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2257.102976][T13405] usb 2-1: USB disconnect, device number 65 [ 2257.191494][T31779] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2257.218415][T31779] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2257.258851][T31779] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2257.300363][T32638] vhci_hcd: connection reset by peer [ 2257.316153][T12615] vhci_hcd: stop threads [ 2257.336469][T12615] vhci_hcd: release socket [ 2257.351010][T12615] vhci_hcd: disconnect device [ 2257.384268][T31779] usb 4-1: USB disconnect, device number 20 [ 2257.517377][T13405] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2257.677387][T13405] usb 2-1: device descriptor read/64, error -71 [ 2258.577386][T13405] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2258.917401][T13405] usb 2-1: device descriptor read/64, error -71 [ 2259.043266][T13405] usb usb2-port1: attempt power cycle [ 2259.407462][T13405] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2259.449741][T13405] usb 2-1: device descriptor read/8, error -71 [ 2259.687372][T13405] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2259.709141][T13405] usb 2-1: device descriptor read/8, error -71 [ 2259.827980][T13405] usb usb2-port1: unable to enumerate USB device [ 2260.393543][T32687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2260.404757][T32687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2260.419926][T32687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2260.439976][T32687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2260.455211][T32687] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2260.464359][T32687] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2260.477130][T32687] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2261.867426][T13405] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2261.882339][T32726] binder: 32725:32726 ioctl 7439 0 returned -22 [ 2262.337626][T20267] vhci_hcd: vhci_device speed not set [ 2262.388329][T13405] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 2262.416237][T13405] usb 4-1: config 1 has no interface number 0 [ 2262.427680][T12875] Bluetooth: hci1: command 0x0406 tx timeout [ 2262.428402][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 2262.447323][T13405] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2262.459214][T13405] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 2262.469179][T13405] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2262.491469][T13405] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2262.500920][T13405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.517327][ T5185] Bluetooth: hci5: command 0x0c1a tx timeout [ 2262.526627][T13405] usb 4-1: Product: syz [ 2262.530975][T13405] usb 4-1: Manufacturer: syz [ 2262.535726][T13405] usb 4-1: SerialNumber: syz [ 2262.552290][T32721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2262.562085][T32721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2262.578306][T13405] usb 4-1: Expected 3 endpoints, found: 1 [ 2262.867573][ T5923] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2262.887864][T13405] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2263.073442][T13405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.087831][ T5923] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2263.105260][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.117242][ T5923] usb 6-1: Product: syz [ 2263.121464][ T5923] usb 6-1: Manufacturer: syz [ 2263.126096][ T5923] usb 6-1: SerialNumber: syz [ 2263.130901][T13405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.188337][ T5923] usb 6-1: config 0 descriptor?? [ 2263.191369][T13405] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2263.209147][ T5923] ch341 6-1:0.0: ch341-uart converter detected [ 2263.241298][T13405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.301274][T13405] usb 5-1: config 0 descriptor?? [ 2263.941098][ T5923] usb 6-1: failed to receive control message: -71 [ 2263.941173][ T5923] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2263.952068][ T5923] usb 6-1: USB disconnect, device number 11 [ 2263.953656][ T5923] ch341 6-1:0.0: device disconnected [ 2264.232141][T32745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2264.427918][T13405] usbhid 5-1:0.0: can't add hid device: -71 [ 2264.448963][T13405] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2264.480888][T13405] usb 5-1: USB disconnect, device number 90 [ 2264.550334][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 2264.550470][T12875] Bluetooth: hci1: command 0x0406 tx timeout [ 2264.587692][T12875] Bluetooth: hci5: command 0x0c1a tx timeout [ 2265.039057][T13405] usb 4-1: USB disconnect, device number 21 [ 2265.100924][T32755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6660'. [ 2265.848446][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2265.848473][ T30] audit: type=1326 audit(1757818822.635:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2265.877016][ C1] vkms_vblank_simulate: vblank timer overrun [ 2265.974728][ T30] audit: type=1326 audit(1757818822.645:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.116625][ T30] audit: type=1326 audit(1757818822.655:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.139158][ C1] vkms_vblank_simulate: vblank timer overrun [ 2266.236980][ T30] audit: type=1326 audit(1757818822.655:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.259504][ C1] vkms_vblank_simulate: vblank timer overrun [ 2266.673549][T12875] Bluetooth: hci5: command 0x0c1a tx timeout [ 2266.711848][ T30] audit: type=1326 audit(1757818822.655:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.784040][ T30] audit: type=1326 audit(1757818822.655:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.809448][ T30] audit: type=1326 audit(1757818822.655:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.876777][ T30] audit: type=1326 audit(1757818822.655:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2266.959793][ T30] audit: type=1326 audit(1757818822.655:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2267.048089][ T307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2267.054941][ T307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2267.061385][ T30] audit: type=1326 audit(1757818822.655:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32766 comm="syz.3.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf518eba9 code=0x7ffc0000 [ 2267.067136][ T307] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2267.557399][ T326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6670'. [ 2267.793625][ T341] fuse: Unknown parameter 'group_id00000000000000000000' [ 2268.551502][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 2268.652730][T13405] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2269.033369][T13405] usb 4-1: config 0 has no interfaces? [ 2269.074514][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 2269.101211][T13405] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2269.148108][ T5185] Bluetooth: hci5: command 0x0c1a tx timeout [ 2269.349680][T13405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.386168][T13405] usb 4-1: Product: syz [ 2269.393991][T13405] usb 4-1: Manufacturer: syz [ 2269.406481][T13405] usb 4-1: SerialNumber: syz [ 2269.453740][T13405] usb 4-1: config 0 descriptor?? [ 2270.014053][ T5923] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2270.379736][ T5923] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2270.401224][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.427518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.435983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.444412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.452757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.621019][ T5923] usb 6-1: config 0 descriptor?? [ 2270.765014][ T5923] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2270.935511][ T5923] gspca_cpia1: usb_control_msg 05, error -71 [ 2270.949237][ T5923] gspca_cpia1: usb_control_msg 01, error -71 [ 2271.034946][ T5923] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 2271.095236][ T5923] usb 6-1: USB disconnect, device number 12 [ 2271.317941][ T389] fuse: Unknown parameter 'group_id00000000000000000000' [ 2271.699949][ T393] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6688'. [ 2271.717359][ T5185] Bluetooth: hci5: command 0x0c1a tx timeout [ 2272.048470][ T5923] usb 4-1: USB disconnect, device number 22 [ 2272.300747][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2272.300770][ T30] audit: type=1326 audit(1757818829.105:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.4.6692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763078eba9 code=0x0 [ 2274.222640][ T426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2274.661499][ T435] fuse: Bad value for 'user_id' [ 2274.666810][ T435] fuse: Bad value for 'user_id' [ 2275.226190][ T441] netlink: 'syz.3.6698': attribute type 27 has an invalid length. [ 2276.187426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.195866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.204345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.773756][T12875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2276.804188][T12875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2276.817554][T12875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2276.841833][T12875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2276.851026][T12875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2278.086324][T24338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.377477][T13405] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2278.535769][ T472] netlink: 'syz.2.6704': attribute type 11 has an invalid length. [ 2278.598403][T13405] usb 2-1: Using ep0 maxpacket: 16 [ 2278.612386][T24338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.631057][T13405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.667641][T13405] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2278.676777][T13405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.714210][T13405] usb 2-1: config 0 descriptor?? [ 2278.765627][T13405] pxrc 2-1:0.0: Could not find endpoint [ 2278.830750][T24338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.920343][T12875] Bluetooth: hci0: command tx timeout [ 2278.965230][ T476] syzkaller0: entered promiscuous mode [ 2278.997470][T13405] usb 2-1: USB disconnect, device number 70 [ 2279.021439][ T476] syzkaller0: entered allmulticast mode [ 2279.174957][T24338] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 2279.277586][T24338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.917413][T13405] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2280.137990][T13405] usb 6-1: Using ep0 maxpacket: 16 [ 2280.334247][T13405] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2280.354910][T13405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.477388][T13405] usb 6-1: Product: syz [ 2280.490685][T13405] usb 6-1: Manufacturer: syz [ 2280.536130][T13405] usb 6-1: SerialNumber: syz [ 2280.564257][T13405] usb 6-1: config 0 descriptor?? [ 2280.987851][T12875] Bluetooth: hci0: command tx timeout [ 2281.138314][T13405] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2281.153494][ T502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6711'. [ 2281.173881][ T502] openvswitch: netlink: IP tunnel dst address not specified [ 2281.487578][T20267] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2281.667716][T20267] usb 2-1: Using ep0 maxpacket: 8 [ 2281.698454][T20267] usb 2-1: config index 0 descriptor too short (expected 2304, got 36) [ 2281.706806][T20267] usb 2-1: config 176 has an invalid descriptor of length 56, skipping remainder of the config [ 2281.730649][T20267] usb 2-1: config 176 has 0 interfaces, different from the descriptor's value: 4 [ 2281.761850][T20267] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2281.857300][T20267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.067618][T12875] Bluetooth: hci0: command tx timeout [ 2283.621038][T31779] usb 6-1: USB disconnect, device number 13 [ 2284.367033][T31779] usb 2-1: USB disconnect, device number 71 [ 2284.848123][ T5923] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2284.927356][T31779] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2285.093098][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2285.103058][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.111832][ T5923] usb 3-1: Product: syz [ 2285.116232][ T5923] usb 3-1: Manufacturer: syz [ 2285.124902][ T5923] usb 3-1: SerialNumber: syz [ 2285.129771][T31779] usb 2-1: Using ep0 maxpacket: 8 [ 2285.136658][T31779] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2285.146203][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2285.164546][T12875] Bluetooth: hci0: command tx timeout [ 2285.182164][T31779] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2285.211664][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2285.223248][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2285.236034][T31779] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2285.244058][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2285.255457][T31779] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2285.267275][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2285.278587][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2285.291435][T31779] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2285.306676][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2285.318906][T31779] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2285.330732][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2285.342351][T31779] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2285.357725][T31779] usb 2-1: string descriptor 0 read error: -22 [ 2285.364181][T31779] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2285.373572][T31779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.396993][T31779] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2285.612829][T31779] usb 2-1: USB disconnect, device number 72 [ 2285.627015][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.636544][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2285.822288][ T518] adutux: No device or device unplugged -19 [ 2285.868441][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.888669][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2286.015417][ T5923] cdc_ncm 3-1:1.0: bind() failure [ 2286.036010][ T5923] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2286.060804][ T5923] cdc_ncm 3-1:1.1: bind() failure [ 2286.077751][ T5923] usb 3-1: USB disconnect, device number 14 [ 2286.297593][T22710] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2286.459854][T22710] usb 2-1: Using ep0 maxpacket: 8 [ 2286.469586][T22710] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2286.479035][T22710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.487079][T22710] usb 2-1: Product: syz [ 2286.492591][T22710] usb 2-1: Manufacturer: syz [ 2286.497679][T22710] usb 2-1: SerialNumber: syz [ 2286.508156][T22710] usb 2-1: config 0 descriptor?? [ 2286.729401][T22710] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2287.052617][T22710] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2287.079675][T22710] usb 2-1: USB disconnect, device number 73 [ 2287.726668][ T528] netlink: 'syz.1.6720': attribute type 71 has an invalid length. [ 2288.047443][T31779] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2288.220092][T31779] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2288.235090][T31779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.246542][T31779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.377916][T31779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2288.393452][T31779] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2288.404584][T31779] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2288.418823][T31779] usb 2-1: Manufacturer: syz [ 2288.434305][ T5923] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2288.434479][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.450807][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.501920][T31779] usb 2-1: config 0 descriptor?? [ 2288.531732][ T455] chnl_net:caif_netlink_parms(): no params data found [ 2288.598262][ T5923] usb 3-1: device descriptor read/64, error -71 [ 2288.640684][T24338] vlan2: left promiscuous mode [ 2288.645602][T24338] bridge0: left promiscuous mode [ 2288.651899][T24338] bridge1: port 1(vlan2) entered disabled state [ 2288.691188][T24338] vlan1: left promiscuous mode [ 2288.702624][T24338] veth0_to_hsr: left promiscuous mode [ 2288.711293][T24338] bridge5: port 3(vlan1) entered disabled state [ 2288.727909][T24338] veth0_to_bond: left allmulticast mode [ 2288.733688][T24338] veth0_to_bond: left promiscuous mode [ 2288.741805][T24338] bridge5: port 2(veth0_to_bond) entered disabled state [ 2288.753450][T24338] veth3: left allmulticast mode [ 2288.758514][T24338] veth3: left promiscuous mode [ 2288.763758][T24338] bridge5: port 1(veth3) entered disabled state [ 2288.847375][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2288.925940][T31779] appleir 0003:05AC:8243.005D: unknown main item tag 0x0 [ 2288.958532][T31779] appleir 0003:05AC:8243.005D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2289.008322][ T5923] usb 3-1: device descriptor read/64, error -71 [ 2289.166359][ T5923] usb usb3-port1: attempt power cycle [ 2289.190454][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2289.206168][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2289.271118][T13405] usb 2-1: USB disconnect, device number 74 [ 2289.577391][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2289.619570][ T5923] usb 3-1: device descriptor read/8, error -71 [ 2289.837336][T31779] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2289.881496][ T5923] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2289.908241][ T5923] usb 3-1: device descriptor read/8, error -71 [ 2290.001003][T31779] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2290.014269][T31779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2290.027131][ T5923] usb usb3-port1: unable to enumerate USB device [ 2290.035105][T31779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2290.058918][T31779] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 2290.075399][T31779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.083616][T31779] usb 4-1: Product: syz [ 2290.097371][T31779] usb 4-1: Manufacturer: syz [ 2290.106566][T31779] usb 4-1: SerialNumber: syz [ 2290.116569][T31779] usb 4-1: config 0 descriptor?? [ 2290.123267][ T545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2290.334350][T31779] powermate: unknown product id 0240 [ 2290.340017][T31779] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2290.400972][T31779] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input165 [ 2290.965336][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.974646][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.692482][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2291.853542][T24338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2291.864629][T24338] bond_slave_0: left promiscuous mode [ 2291.877669][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 2291.890447][T24338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2291.900714][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 2291.914762][T24338] bond_slave_1: left promiscuous mode [ 2291.921393][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2291.936416][T24338] bond0 (unregistering): Released all slaves [ 2291.959133][ T5923] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 2291.968606][ T5923] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 2291.976933][ T5923] usb 3-1: Product: syz [ 2291.981563][ T5923] usb 3-1: Manufacturer: syz [ 2291.986354][ T5923] usb 3-1: SerialNumber: syz [ 2292.047105][ T5923] usb 3-1: config 0 descriptor?? [ 2292.100143][ T5923] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2292.330490][T24338] tipc: Disabling bearer [ 2292.351446][T24338] tipc: Left network mode [ 2292.706193][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.734359][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.751692][ T455] bridge_slave_0: entered allmulticast mode [ 2292.794367][ T455] bridge_slave_0: entered promiscuous mode [ 2292.862522][ T30] audit: type=1326 audit(1757818849.655:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=567 comm="syz.5.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7fc00000 [ 2293.088912][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2293.103774][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.125950][ T455] bridge_slave_1: entered allmulticast mode [ 2293.144692][ T455] bridge_slave_1: entered promiscuous mode [ 2293.161329][ T9835] usb 3-1: Failed to submit usb control message: -110 [ 2293.262448][ T9835] usb 3-1: unable to send the bmi data to the device: -110 [ 2293.344776][ T9835] usb 3-1: unable to get target info from device [ 2293.491196][ T9835] usb 3-1: could not get target info (-110) [ 2293.513441][ T9835] usb 3-1: could not probe fw (-110) [ 2294.186463][ T455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2294.390447][T24338] hsr_slave_0: left promiscuous mode [ 2294.472718][T24338] hsr_slave_1: left promiscuous mode [ 2294.496507][T24338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2294.528590][T24338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2294.570655][T24338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2294.585659][T24338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2294.814416][T24338] veth1_macvtap: left promiscuous mode [ 2294.883651][T24338] veth0_macvtap: left promiscuous mode [ 2294.909876][T24338] veth1_vlan: left promiscuous mode [ 2294.915294][T24338] veth0_vlan: left promiscuous mode [ 2295.213025][T31779] usb 3-1: USB disconnect, device number 19 [ 2297.250455][T24338] team0 (unregistering): Port device team_slave_1 removed [ 2297.361075][T24338] team0 (unregistering): Port device team_slave_0 removed [ 2297.385432][ T603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6735'. [ 2297.411436][ T603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6735'. [ 2297.420742][ T603] netlink: 492 bytes leftover after parsing attributes in process `syz.2.6735'. [ 2298.388537][T20267] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2298.559637][T20267] usb 3-1: device descriptor read/64, error -71 [ 2298.575586][T24338] team0 (unregistering): Port device dummy0 removed [ 2298.585015][T24338] dummy0 (unregistering): left allmulticast mode [ 2298.817713][T20267] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 2298.967361][T20267] usb 3-1: device descriptor read/64, error -71 [ 2299.089931][T20267] usb usb3-port1: attempt power cycle [ 2299.430447][ T455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2299.447376][T20267] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 2299.478022][T20267] usb 3-1: device descriptor read/8, error -71 [ 2299.737449][T20267] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 2299.773326][T20267] usb 3-1: device descriptor read/8, error -71 [ 2299.900573][T20267] usb usb3-port1: unable to enumerate USB device [ 2299.968556][ T455] team0: Port device team_slave_0 added [ 2300.026347][ T455] team0: Port device team_slave_1 added [ 2300.246674][ T455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2300.283379][ T455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2300.480431][ T455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2300.536147][ T455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2300.575560][ T455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2300.811672][ T455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2300.876839][T24338] IPVS: stop unused estimator thread 0... [ 2301.187657][T31779] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2301.202942][ C0] powermate: config urb returned -71 [ 2301.208262][T20267] usb 4-1: USB disconnect, device number 23 [ 2301.214198][ C0] powermate: usb_submit_urb(config) failed [ 2301.214280][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2301.401489][T31779] usb 6-1: Using ep0 maxpacket: 16 [ 2301.422806][T31779] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2301.449464][T31779] usb 6-1: config 0 has no interfaces? [ 2301.463815][T31779] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2301.479862][ T455] hsr_slave_0: entered promiscuous mode [ 2301.490436][T31779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.503701][ T455] hsr_slave_1: entered promiscuous mode [ 2301.506226][T31779] usb 6-1: config 0 descriptor?? [ 2301.522052][T26903] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2301.682874][ T640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6742'. [ 2301.697361][T26903] usb 3-1: Using ep0 maxpacket: 32 [ 2301.699786][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6742'. [ 2301.722156][T26903] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2301.749582][T26903] usb 3-1: config 0 has no interface number 0 [ 2301.793937][T26903] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2301.831034][T24338] bridge_slave_1: left allmulticast mode [ 2301.835700][T26903] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2301.855629][T26903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.858988][T24338] bridge_slave_1: left promiscuous mode [ 2301.874373][T26903] usb 3-1: Product: syz [ 2301.884608][T26903] usb 3-1: Manufacturer: syz [ 2301.891151][T24338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.895968][T26903] usb 3-1: SerialNumber: syz [ 2301.920301][T24338] bridge_slave_0: left allmulticast mode [ 2301.923460][T26903] usb 3-1: config 0 descriptor?? [ 2301.932167][T24338] bridge_slave_0: left promiscuous mode [ 2301.943562][T26903] smsc75xx v1.0.0 [ 2301.949213][T24338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.962876][T24338] vlan2: left promiscuous mode [ 2302.011783][T24338] bridge0: left promiscuous mode [ 2302.023602][T24338] bridge1: port 1(vlan2) entered disabled state [ 2302.255329][T26903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2302.300290][T26903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2302.345953][T26903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2302.388084][T26903] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2302.471762][T26903] usb 3-1: USB disconnect, device number 24 [ 2303.461957][T24338] batman_adv: batadv0: Removing interface: vxlan0 [ 2303.535668][ T665] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2303.542354][ T665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2303.566614][T24338] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2303.599220][ T665] vhci_hcd vhci_hcd.0: Device attached [ 2303.897502][T20267] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 2303.899522][T26903] usb 6-1: USB disconnect, device number 14 [ 2303.938683][ T667] vhci_hcd: connection reset by peer [ 2303.962479][ T1148] vhci_hcd: stop threads [ 2303.971413][ T1148] vhci_hcd: release socket [ 2303.976174][ T1148] vhci_hcd: disconnect device [ 2304.557712][ T682] netlink: 'syz.5.6748': attribute type 1 has an invalid length. [ 2305.041192][T24338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2305.052391][T24338] bond0 (unregistering): Released all slaves [ 2305.075726][T24338] bond1 (unregistering): Released all slaves [ 2305.133293][T24338] bond2 (unregistering): Released all slaves [ 2305.234008][ T665] netdevsim netdevsim2: Direct firmware load for x failed with error -2 [ 2305.256268][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6745'. [ 2305.343663][ T669] bridge: RTM_NEWNEIGH with invalid ether address [ 2305.351200][ T665] netdevsim netdevsim2: Falling back to sysfs fallback for: x [ 2305.367986][ T672] syzkaller1: entered promiscuous mode [ 2305.373599][ T672] syzkaller1: entered allmulticast mode [ 2305.440367][ T682] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2305.537685][T24338] tipc: Left network mode [ 2305.941727][ T687] sock: sock_timestamping_bind_phc: sock not bind to device [ 2306.709879][ T700] syz_tun: entered allmulticast mode [ 2307.807678][ T6634] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2307.877927][T13405] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 2308.073551][ T6634] usb 4-1: Using ep0 maxpacket: 16 [ 2308.085372][ T6634] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 2308.103913][ T6634] usb 4-1: config 0 has no interface number 0 [ 2308.126773][T13405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.147390][ T6634] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2308.164079][T13405] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2308.177362][ T6634] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2308.193276][T13405] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2308.217413][T13405] usb 3-1: Product: syz [ 2308.223612][ T6634] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2308.265764][T13405] usb 3-1: Manufacturer: syz [ 2308.278988][ T6634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.297476][T13405] usb 3-1: SerialNumber: syz [ 2308.316621][ T6634] usb 4-1: Product: syz [ 2308.329892][T24338] hsr_slave_0: left promiscuous mode [ 2308.368206][ T6634] usb 4-1: Manufacturer: syz [ 2308.369100][T24338] hsr_slave_1: left promiscuous mode [ 2308.372863][ T6634] usb 4-1: SerialNumber: syz [ 2308.378137][T13405] usb 3-1: config 0 descriptor?? [ 2308.409281][ T6634] usb 4-1: config 0 descriptor?? [ 2308.415771][T24338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2308.437097][ T740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2308.454395][ T740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2308.508156][T13405] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2308.543457][T30580] udevd[30580]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2308.547454][T24338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2308.607580][T24338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2308.615376][T24338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2308.654509][T26903] usb 3-1: USB disconnect, device number 25 [ 2308.730314][ T740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2308.735126][T24338] veth1_macvtap: left promiscuous mode [ 2308.761067][ T740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2308.797758][T24338] veth0_macvtap: left promiscuous mode [ 2309.007495][ T740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.031864][ T740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.057967][T20267] vhci_hcd: vhci_device speed not set [ 2309.234379][T24338] pimreg (unregistering): left allmulticast mode [ 2309.305275][ T6634] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2309.368373][ T6634] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2309.417456][ T6634] asix 4-1:0.251: probe with driver asix failed with error -71 [ 2309.459722][ T6634] usb 4-1: USB disconnect, device number 24 [ 2309.550141][ T750] netlink: 'syz.2.6762': attribute type 1 has an invalid length. [ 2310.059936][ T761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6764'. [ 2310.823161][T24338] team_slave_1 (unregistering): left promiscuous mode [ 2310.853225][T24338] team0 (unregistering): Port device team_slave_1 removed [ 2310.956226][T24338] team_slave_0 (unregistering): left promiscuous mode [ 2310.964485][T24338] team0 (unregistering): Port device team_slave_0 removed [ 2311.692437][ T756] batman_adv: batadv0: Adding interface: dummy0 [ 2311.718389][ T756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.753626][ T756] batman_adv: batadv0: Interface activated: dummy0 [ 2312.216665][ T455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2312.296629][T20267] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2312.305899][ T455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2312.345777][ T455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2312.388069][ T455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2312.467559][T20267] usb 4-1: Using ep0 maxpacket: 8 [ 2312.476677][T20267] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2312.515006][T20267] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2312.566526][T20267] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2312.584496][T20267] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2312.601636][T20267] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2312.630093][T20267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.899010][T20267] usb 4-1: GET_CAPABILITIES returned 0 [ 2312.904591][T20267] usbtmc 4-1:16.0: can't read capabilities [ 2313.106296][ T455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2313.239649][ T455] 8021q: adding VLAN 0 to HW filter on device team0 [ 2313.366543][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.373796][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2313.433243][ T785] IPVS: set_ctl: invalid protocol: 170 0.0.0.0:65359 [ 2313.463216][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.470519][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2313.934595][ T455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2314.324240][ T455] veth0_vlan: entered promiscuous mode [ 2314.380602][ T455] veth1_vlan: entered promiscuous mode [ 2314.653672][ T455] veth0_macvtap: entered promiscuous mode [ 2314.709647][ T455] veth1_macvtap: entered promiscuous mode [ 2314.873017][ T455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2314.965783][ T455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2315.051725][T24342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.118268][T24342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.128606][ T823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2315.135830][ T823] IPv6: NLM_F_CREATE should be set when creating new route [ 2315.157428][T24342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.201086][T24342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.534386][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.585541][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.651223][T26903] usb 4-1: USB disconnect, device number 25 [ 2315.772048][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.814068][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2316.417244][ T852] binder: 840:852 ioctl c0306201 200000000100 returned -11 [ 2316.428409][ T852] fuse: Bad value for 'fd' [ 2316.690315][ T860] FAULT_INJECTION: forcing a failure. [ 2316.690315][ T860] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.717280][ T5930] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2316.729877][ T860] CPU: 0 UID: 0 PID: 860 Comm: syz.2.6781 Not tainted syzkaller #0 PREEMPT(full) [ 2316.729910][ T860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2316.729925][ T860] Call Trace: [ 2316.729934][ T860] [ 2316.729946][ T860] dump_stack_lvl+0x189/0x250 [ 2316.729978][ T860] ? __pfx____ratelimit+0x10/0x10 [ 2316.730003][ T860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2316.730031][ T860] ? __pfx__printk+0x10/0x10 [ 2316.730068][ T860] ? __lock_acquire+0xab9/0xd20 [ 2316.730113][ T860] should_fail_ex+0x414/0x560 [ 2316.730153][ T860] should_failslab+0xa8/0x100 [ 2316.730186][ T860] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2316.730216][ T860] ? skb_clone+0x212/0x3a0 [ 2316.730268][ T860] skb_clone+0x212/0x3a0 [ 2316.730302][ T860] __netlink_deliver_tap+0x404/0x850 [ 2316.730341][ T860] ? netlink_deliver_tap+0x2e/0x1b0 [ 2316.730366][ T860] netlink_deliver_tap+0x19c/0x1b0 [ 2316.730392][ T860] netlink_unicast+0x7fa/0x9e0 [ 2316.730437][ T860] ? __pfx_netlink_unicast+0x10/0x10 [ 2316.730473][ T860] ? netlink_sendmsg+0x642/0xb30 [ 2316.730495][ T860] ? skb_put+0x11b/0x210 [ 2316.730525][ T860] netlink_sendmsg+0x805/0xb30 [ 2316.730559][ T860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.730588][ T860] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2316.730612][ T860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2316.730638][ T860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.730663][ T860] __sock_sendmsg+0x21c/0x270 [ 2316.730701][ T860] ____sys_sendmsg+0x505/0x830 [ 2316.730735][ T860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2316.730779][ T860] ? import_iovec+0x74/0xa0 [ 2316.730813][ T860] ___sys_sendmsg+0x21f/0x2a0 [ 2316.730845][ T860] ? __pfx____sys_sendmsg+0x10/0x10 [ 2316.730913][ T860] ? __fget_files+0x2a/0x420 [ 2316.730933][ T860] ? __fget_files+0x3a0/0x420 [ 2316.730964][ T860] __x64_sys_sendmsg+0x19b/0x260 [ 2316.730997][ T860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2316.731037][ T860] ? __pfx_ksys_write+0x10/0x10 [ 2316.731064][ T860] ? rcu_is_watching+0x15/0xb0 [ 2316.731092][ T860] ? do_syscall_64+0xbe/0x3b0 [ 2316.731119][ T860] do_syscall_64+0xfa/0x3b0 [ 2316.731141][ T860] ? lockdep_hardirqs_on+0x9c/0x150 [ 2316.731163][ T860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.731185][ T860] ? clear_bhb_loop+0x60/0xb0 [ 2316.731212][ T860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.731234][ T860] RIP: 0033:0x7fcebe38eba9 [ 2316.731261][ T860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2316.731281][ T860] RSP: 002b:00007fcebf2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.731307][ T860] RAX: ffffffffffffffda RBX: 00007fcebe5d5fa0 RCX: 00007fcebe38eba9 [ 2316.731324][ T860] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 2316.731358][ T860] RBP: 00007fcebf2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2316.731372][ T860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.731386][ T860] R13: 00007fcebe5d6038 R14: 00007fcebe5d5fa0 R15: 00007fcebe6ffa28 [ 2316.731421][ T860] [ 2317.242097][ T5930] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2317.271521][ T5930] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 2317.350051][T31779] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2317.382956][ T5930] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 2317.420434][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.463032][ T5930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2317.479035][ T5930] usb 5-1: config 0 has no interface number 0 [ 2317.485604][ T5930] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2317.515053][T31779] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2317.529172][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2317.542978][ T870] blktrace: Concurrent blktraces are not allowed on sg0 [ 2317.555761][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.555827][T31779] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.566301][ T5930] usb 5-1: Product: syz [ 2317.579378][ T5930] usb 5-1: Manufacturer: syz [ 2317.584118][ T5930] usb 5-1: SerialNumber: syz [ 2317.615801][T31779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.677572][ T5930] usb 5-1: config 0 descriptor?? [ 2317.736401][ T30] audit: type=1326 audit(1757818874.545:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2317.736446][T31779] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2317.736476][T31779] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2317.894447][T31779] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2317.916564][T31779] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2317.923907][ T30] audit: type=1326 audit(1757818874.605:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2317.950430][ T30] audit: type=1326 audit(1757818874.615:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2155b8d510 code=0x7ffc0000 [ 2317.974312][T31779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2317.988014][T31779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.004495][T31779] usb 4-1: Product: syz [ 2318.019002][T31779] usb 4-1: Manufacturer: syz [ 2318.025729][T31779] usb 4-1: SerialNumber: syz [ 2318.048994][ T30] audit: type=1326 audit(1757818874.615:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2318.079383][T31779] cdc_ncm 4-1:1.0: skipping garbage [ 2318.087415][T31779] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 2318.105597][T31779] cdc_ncm 4-1:1.0: bind() failure [ 2318.132291][ T30] audit: type=1326 audit(1757818874.615:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2318.255925][ T895] syz.5.6787 (895): drop_caches: 2 [ 2318.312616][ T866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2318.332623][ T866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2318.456405][ T30] audit: type=1326 audit(1757818874.615:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2318.631792][ T30] audit: type=1326 audit(1757818874.615:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2319.014325][ T30] audit: type=1326 audit(1757818874.615:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=882 comm="syz.5.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2155b8eba9 code=0x7ffc0000 [ 2319.248673][ T5930] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2319.256156][ T5930] usb 5-1: MIDIStreaming interface descriptor not found [ 2319.695859][ T5930] usb 5-1: USB disconnect, device number 91 [ 2319.762536][T31779] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2319.917361][T31779] usb 4-1: USB disconnect, device number 26 [ 2319.951119][T27619] udevd[27619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2321.017850][ T5930] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2321.019370][ T936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6792'. [ 2321.047413][ T937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6793'. [ 2321.257595][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 2321.276910][ T952] FAULT_INJECTION: forcing a failure. [ 2321.276910][ T952] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.320685][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.343234][ T952] CPU: 0 UID: 0 PID: 952 Comm: syz.2.6794 Not tainted syzkaller #0 PREEMPT(full) [ 2321.343265][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2321.343280][ T952] Call Trace: [ 2321.343289][ T952] [ 2321.343299][ T952] dump_stack_lvl+0x189/0x250 [ 2321.343333][ T952] ? __pfx____ratelimit+0x10/0x10 [ 2321.343356][ T952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2321.343383][ T952] ? __pfx__printk+0x10/0x10 [ 2321.343420][ T952] ? __pfx___might_resched+0x10/0x10 [ 2321.343441][ T952] ? fs_reclaim_acquire+0x7d/0x100 [ 2321.343468][ T952] should_fail_ex+0x414/0x560 [ 2321.343506][ T952] should_failslab+0xa8/0x100 [ 2321.343541][ T952] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2321.343571][ T952] ? skb_clone+0x212/0x3a0 [ 2321.343606][ T952] skb_clone+0x212/0x3a0 [ 2321.343633][ T952] ? nfnetlink_rcv+0x486/0x2520 [ 2321.343669][ T952] nfnetlink_rcv+0x4b4/0x2520 [ 2321.343706][ T952] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2321.343748][ T952] ? __dev_queue_xmit+0x27b/0x3b50 [ 2321.343791][ T952] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2321.343842][ T952] ? ref_tracker_free+0x63a/0x7d0 [ 2321.343865][ T952] ? __asan_memcpy+0x40/0x70 [ 2321.343898][ T952] ? __pfx_ref_tracker_free+0x10/0x10 [ 2321.343917][ T952] ? __skb_clone+0x63/0x7a0 [ 2321.343953][ T952] ? __skb_clone+0x483/0x7a0 [ 2321.343988][ T952] ? skb_clone+0x246/0x3a0 [ 2321.344002][ T5930] usb 4-1: config 0 has no interfaces? [ 2321.344019][ T952] ? __netlink_deliver_tap+0x807/0x850 [ 2321.344043][ T952] ? netlink_deliver_tap+0x2e/0x1b0 [ 2321.344078][ T952] netlink_unicast+0x82c/0x9e0 [ 2321.344124][ T952] ? __pfx_netlink_unicast+0x10/0x10 [ 2321.344166][ T952] ? netlink_sendmsg+0x642/0xb30 [ 2321.344190][ T952] ? skb_put+0x11b/0x210 [ 2321.344223][ T952] netlink_sendmsg+0x805/0xb30 [ 2321.344260][ T952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2321.344289][ T952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2321.344317][ T952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2321.344345][ T952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2321.344373][ T952] __sock_sendmsg+0x21c/0x270 [ 2321.344413][ T952] ____sys_sendmsg+0x505/0x830 [ 2321.344452][ T952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2321.344495][ T952] ? import_iovec+0x74/0xa0 [ 2321.344532][ T952] ___sys_sendmsg+0x21f/0x2a0 [ 2321.344567][ T952] ? __pfx____sys_sendmsg+0x10/0x10 [ 2321.344641][ T952] ? __fget_files+0x2a/0x420 [ 2321.344662][ T952] ? __fget_files+0x3a0/0x420 [ 2321.344696][ T952] __x64_sys_sendmsg+0x19b/0x260 [ 2321.344731][ T952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2321.344775][ T952] ? __pfx_ksys_write+0x10/0x10 [ 2321.344805][ T952] ? rcu_is_watching+0x15/0xb0 [ 2321.344839][ T952] ? do_syscall_64+0xbe/0x3b0 [ 2321.344870][ T952] do_syscall_64+0xfa/0x3b0 [ 2321.344903][ T952] ? lockdep_hardirqs_on+0x9c/0x150 [ 2321.344926][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.344951][ T952] ? clear_bhb_loop+0x60/0xb0 [ 2321.344981][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.345005][ T952] RIP: 0033:0x7fcebe38eba9 [ 2321.345027][ T952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2321.345051][ T952] RSP: 002b:00007fcebf2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2321.345078][ T952] RAX: ffffffffffffffda RBX: 00007fcebe5d5fa0 RCX: 00007fcebe38eba9 [ 2321.345097][ T952] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 2321.345114][ T952] RBP: 00007fcebf2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2321.345129][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2321.345144][ T952] R13: 00007fcebe5d6038 R14: 00007fcebe5d5fa0 R15: 00007fcebe6ffa28 [ 2321.345183][ T952] [ 2321.361789][ T954] ip6tnl1: entered allmulticast mode [ 2321.557633][ T5930] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2321.557668][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.609823][ T5930] usb 4-1: config 0 descriptor?? [ 2322.368207][ T5930] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2322.480247][ T970] netlink: 'syz.5.6796': attribute type 10 has an invalid length. [ 2322.499877][ T970] 8021q: adding VLAN 0 to HW filter on device team0 [ 2322.521648][ T970] bond0: (slave team0): Enslaving as an active interface with an up link [ 2322.677882][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.845437][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2322.862163][ T5930] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2322.878827][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.894323][ T5930] usb 2-1: Product: syz [ 2322.922768][ T5930] usb 2-1: Manufacturer: syz [ 2322.929159][ T5930] usb 2-1: SerialNumber: syz [ 2322.944216][ T5930] usb 2-1: config 0 descriptor?? [ 2322.954428][ T5930] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2322.972941][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2322.985888][ T5930] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2323.001238][ T5930] usb 2-1: media controller created [ 2323.010787][ T992] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6803'. [ 2323.130635][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2323.141559][ T6634] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2323.327290][ T6634] usb 5-1: Using ep0 maxpacket: 32 [ 2323.338784][ T6634] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2323.356170][ T6634] usb 5-1: config 0 has no interface number 0 [ 2323.365773][ T6634] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2323.402934][ T6634] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2323.427006][ T6634] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2323.438633][ T6634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.446900][ T5930] DVB: Unable to find symbol tda10046_attach() [ 2323.460591][ T5930] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2323.469761][ T6634] usb 5-1: Product: syz [ 2323.479419][ T6634] usb 5-1: Manufacturer: syz [ 2323.493025][ T5930] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2323.503436][ T6634] usb 5-1: SerialNumber: syz [ 2323.517742][ T6634] usb 5-1: config 0 descriptor?? [ 2323.594160][T20267] usb 4-1: USB disconnect, device number 27 [ 2323.727293][ T6634] appletouch 5-1:0.85: Failed to read mode from device. [ 2323.734628][ T6634] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 2323.965382][ T1019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2324.147350][T20267] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 2324.293352][ T5930] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2324.318584][ T5930] usb 2-1: USB disconnect, device number 75 [ 2324.336091][T20267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.362534][T20267] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 2324.373163][ T6634] usb 5-1: USB disconnect, device number 92 [ 2324.406366][T20267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.459426][T20267] usb 4-1: config 0 descriptor?? [ 2324.478988][T20267] usb 4-1: bad CDC descriptors [ 2324.493109][T20267] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 2324.514643][T20267] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 2324.531074][T20267] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 2324.544755][ T1031] syz.2.6811: vmalloc error: size 134348800, failed to allocated page array size 262400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2324.575824][ T1031] CPU: 1 UID: 0 PID: 1031 Comm: syz.2.6811 Not tainted syzkaller #0 PREEMPT(full) [ 2324.575855][ T1031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2324.575869][ T1031] Call Trace: [ 2324.575879][ T1031] [ 2324.575889][ T1031] dump_stack_lvl+0x189/0x250 [ 2324.575924][ T1031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2324.575951][ T1031] ? __pfx__printk+0x10/0x10 [ 2324.575983][ T1031] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2324.576010][ T1031] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2324.576035][ T1031] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2324.576065][ T1031] warn_alloc+0x214/0x310 [ 2324.576107][ T1031] ? __pfx_warn_alloc+0x10/0x10 [ 2324.576151][ T1031] ? __get_vm_area_node+0x28f/0x300 [ 2324.576182][ T1031] ? vb2_vmalloc_alloc+0xef/0x340 [ 2324.576212][ T1031] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2324.576277][ T1031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2324.576317][ T1031] ? __kasan_kmalloc+0x93/0xb0 [ 2324.576350][ T1031] vmalloc_user_noprof+0xad/0xf0 [ 2324.576383][ T1031] ? vb2_vmalloc_alloc+0xef/0x340 [ 2324.576410][ T1031] vb2_vmalloc_alloc+0xef/0x340 [ 2324.576436][ T1031] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2324.576461][ T1031] __vb2_queue_alloc+0x9c2/0x15a0 [ 2324.576523][ T1031] vb2_core_reqbufs+0xc31/0x1420 [ 2324.576567][ T1031] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2324.576599][ T1031] ? __vb2_init_fileio+0x1e8/0xff0 [ 2324.576630][ T1031] __vb2_init_fileio+0x318/0xff0 [ 2324.576663][ T1031] ? vb2_fop_read+0x101/0x360 [ 2324.576691][ T1031] ? __pfx___mutex_lock+0x10/0x10 [ 2324.576719][ T1031] __vb2_perform_fileio+0x284/0x1600 [ 2324.576764][ T1031] vb2_fop_read+0x273/0x360 [ 2324.576797][ T1031] v4l2_read+0x199/0x2c0 [ 2324.576826][ T1031] vfs_readv+0x5aa/0x850 [ 2324.576849][ T1031] ? __pfx_v4l2_read+0x10/0x10 [ 2324.576875][ T1031] ? __pfx_vfs_readv+0x10/0x10 [ 2324.576914][ T1031] ? __fget_files+0x2a/0x420 [ 2324.576939][ T1031] ? __fget_files+0x3a0/0x420 [ 2324.576957][ T1031] ? __fget_files+0x2a/0x420 [ 2324.576987][ T1031] __x64_sys_preadv+0x197/0x2a0 [ 2324.577023][ T1031] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2324.577053][ T1031] ? rcu_is_watching+0x15/0xb0 [ 2324.577081][ T1031] ? do_syscall_64+0xbe/0x3b0 [ 2324.577111][ T1031] do_syscall_64+0xfa/0x3b0 [ 2324.577133][ T1031] ? lockdep_hardirqs_on+0x9c/0x150 [ 2324.577157][ T1031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2324.577177][ T1031] ? clear_bhb_loop+0x60/0xb0 [ 2324.577203][ T1031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2324.577224][ T1031] RIP: 0033:0x7fcebe38eba9 [ 2324.577243][ T1031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2324.577263][ T1031] RSP: 002b:00007fcebf28c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2324.577286][ T1031] RAX: ffffffffffffffda RBX: 00007fcebe5d6090 RCX: 00007fcebe38eba9 [ 2324.577303][ T1031] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000007 [ 2324.577317][ T1031] RBP: 00007fcebe411e19 R08: 000000000000000b R09: 0000000000000000 [ 2324.577332][ T1031] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2324.577346][ T1031] R13: 00007fcebe5d6128 R14: 00007fcebe5d6090 R15: 00007fcebe6ffa28 [ 2324.577380][ T1031] [ 2324.891595][ C1] vkms_vblank_simulate: vblank timer overrun [ 2324.907035][T30194] usb 4-1: USB disconnect, device number 28 [ 2324.941673][ T1031] Mem-Info: [ 2324.944869][ T1031] active_anon:9063 inactive_anon:0 isolated_anon:0 [ 2324.944869][ T1031] active_file:21263 inactive_file:40820 isolated_file:0 [ 2324.944869][ T1031] unevictable:768 dirty:171 writeback:0 [ 2324.944869][ T1031] slab_reclaimable:7156 slab_unreclaimable:106801 [ 2324.944869][ T1031] mapped:31067 shmem:3982 pagetables:1509 [ 2324.944869][ T1031] sec_pagetables:0 bounce:0 [ 2324.944869][ T1031] kernel_misc_reclaimable:0 [ 2324.944869][ T1031] free:1281225 free_pcp:8172 free_cma:0 [ 2324.990142][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.005546][ T1031] Node 0 active_anon:36312kB inactive_anon:0kB active_file:84788kB inactive_file:163084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124064kB dirty:676kB writeback:0kB shmem:14376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2325.037499][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.047053][ T1031] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:224kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2325.077418][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.084365][ T1031] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2325.113138][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.119790][ T1031] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2325.126925][ T1031] Node 0 DMA32 free:1207368kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36260kB inactive_anon:0kB active_file:84788kB inactive_file:161512kB unevictable:1536kB writepending:676kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:25924kB local_pcp:13488kB free_cma:0kB [ 2325.159220][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.166721][ T1031] lowmem_reserve[]: 0 0 1 1 1 [ 2325.171557][ T1031] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2325.200815][ T1031] lowmem_reserve[]: 0 0 0 0 0 [ 2325.205633][ T1031] Node 1 Normal free:3902092kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:196kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:0kB free_cma:0kB [ 2325.238279][ T1031] lowmem_reserve[]: 0 0 0 0 0 [ 2325.243095][ T1031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2325.255997][ T1031] Node 0 DMA32: 1646*4kB (UME) 842*8kB (ME) 456*16kB (ME) 242*32kB (UME) 652*64kB (UME) 309*128kB (UME) 182*256kB (UME) 67*512kB (UME) 21*1024kB (UM) 12*2048kB (UME) 237*4096kB (UM) = 1207368kB [ 2325.275716][ T1031] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2325.297913][ T1031] Node 1 Normal: 225*4kB (UE) 43*8kB (UE) 53*16kB (UME) 225*32kB (UE) 105*64kB (UME) 38*128kB (UME) 17*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 942*4096kB (ME) = 3902092kB [ 2325.339255][ T1031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2325.352759][ T1031] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2325.363679][ T1031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2325.374443][ T1031] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2325.384985][ T1031] 66032 total pagecache pages [ 2325.393034][ T1031] 0 pages in swap cache [ 2325.397714][ T1031] Free swap = 124996kB [ 2325.402083][ T1031] Total swap = 124996kB [ 2325.425382][ T1031] 2097051 pages RAM [ 2325.445556][ T1031] 0 pages HighMem/MovableOnly [ 2325.450772][ T1031] 425671 pages reserved [ 2325.455715][ T1031] 0 pages cma reserved [ 2325.475293][ T1040] FAULT_INJECTION: forcing a failure. [ 2325.475293][ T1040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2325.494352][ T1040] CPU: 0 UID: 0 PID: 1040 Comm: syz.1.6813 Not tainted syzkaller #0 PREEMPT(full) [ 2325.494385][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2325.494400][ T1040] Call Trace: [ 2325.494410][ T1040] [ 2325.494420][ T1040] dump_stack_lvl+0x189/0x250 [ 2325.494453][ T1040] ? __pfx____ratelimit+0x10/0x10 [ 2325.494476][ T1040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2325.494503][ T1040] ? __pfx__printk+0x10/0x10 [ 2325.494534][ T1040] ? __might_fault+0xb0/0x130 [ 2325.494578][ T1040] should_fail_ex+0x414/0x560 [ 2325.494617][ T1040] _copy_from_user+0x2d/0xb0 [ 2325.494647][ T1040] __sys_connect+0x123/0x440 [ 2325.494685][ T1040] ? __fget_files+0x3a0/0x420 [ 2325.494706][ T1040] ? __pfx___sys_connect+0x10/0x10 [ 2325.494743][ T1040] ? __pfx_ksys_write+0x10/0x10 [ 2325.494771][ T1040] ? rcu_is_watching+0x15/0xb0 [ 2325.494802][ T1040] __x64_sys_connect+0x7a/0x90 [ 2325.494828][ T1040] do_syscall_64+0xfa/0x3b0 [ 2325.494851][ T1040] ? lockdep_hardirqs_on+0x9c/0x150 [ 2325.494873][ T1040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.494896][ T1040] ? clear_bhb_loop+0x60/0xb0 [ 2325.494923][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.494945][ T1040] RIP: 0033:0x7f3d4818eba9 [ 2325.494966][ T1040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2325.494985][ T1040] RSP: 002b:00007f3d49100038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2325.495008][ T1040] RAX: ffffffffffffffda RBX: 00007f3d483d5fa0 RCX: 00007f3d4818eba9 [ 2325.495026][ T1040] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 2325.495041][ T1040] RBP: 00007f3d49100090 R08: 0000000000000000 R09: 0000000000000000 [ 2325.495055][ T1040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.495069][ T1040] R13: 00007f3d483d6038 R14: 00007f3d483d5fa0 R15: 00007f3d484ffa28 [ 2325.495103][ T1040] [ 2326.425619][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6819'. [ 2326.445652][T30194] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2326.627380][T30194] usb 5-1: Using ep0 maxpacket: 16 [ 2326.645283][T30194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2326.667888][T30194] usb 5-1: config 0 has no interfaces? [ 2326.707507][T30194] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2326.748576][T30194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.804007][T30194] usb 5-1: config 0 descriptor?? [ 2327.681852][ T1083] 8021q: adding VLAN 0 to HW filter on device team0 [ 2328.071471][ T1083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2329.189853][T26903] usb 5-1: USB disconnect, device number 93 [ 2329.627422][T31779] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2329.847315][T31779] usb 2-1: Using ep0 maxpacket: 16 [ 2329.874784][T31779] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 2329.888154][T31779] usb 2-1: config 0 has no interface number 0 [ 2329.977953][T31779] usb 2-1: config 0 interface 217 has no altsetting 0 [ 2330.147867][T31779] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 2330.195899][T31779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.217530][T31779] usb 2-1: Product: syz [ 2330.223037][T31779] usb 2-1: Manufacturer: syz [ 2330.465351][T31779] usb 2-1: SerialNumber: syz [ 2330.472815][T31779] usb 2-1: config 0 descriptor?? [ 2330.724481][ T9] usb 2-1: USB disconnect, device number 76 [ 2330.783170][ T919] udevd[919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.217/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2330.947348][T31779] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2331.231981][T31779] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2331.258256][T31779] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 2331.467520][T31779] usb 3-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 2331.524232][T31779] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2331.558556][T31779] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 2331.568126][T31779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.591484][T31779] usb 3-1: Product: syz [ 2331.597026][T31779] usb 3-1: Manufacturer: syz [ 2331.602312][T31779] usb 3-1: SerialNumber: syz [ 2331.625004][T31779] usb 3-1: config 0 descriptor?? [ 2331.640790][T31779] ir_toy 3-1:0.0: required endpoints not found [ 2332.488404][ T1141] _ÐZ`Ô€@S: entered promiscuous mode [ 2333.387722][T31779] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2333.578860][T31779] usb 6-1: config 105 has an invalid descriptor of length 110, skipping remainder of the config [ 2333.597259][T31779] usb 6-1: config 105 has 0 interfaces, different from the descriptor's value: 1 [ 2333.615530][T31779] usb 6-1: New USB device found, idVendor=057a, idProduct=a4a0, bcdDevice= f.66 [ 2333.636309][T31779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.731257][ T9] usb 3-1: USB disconnect, device number 26 [ 2333.897101][T31779] usb 6-1: string descriptor 0 read error: -71 [ 2333.903605][T26903] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 2334.059452][T31779] usb 6-1: USB disconnect, device number 15 [ 2334.076327][ T1178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6845'. [ 2334.169469][T26903] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2334.201087][T26903] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2334.393616][T26903] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 2334.404645][ T1178] syz.2.6845 (1178): drop_caches: 2 [ 2334.410127][T26903] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2334.420684][T26903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.441743][ T1166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2334.686815][T26903] usb 4-1: string descriptor 0 read error: -71 [ 2334.898181][ T6634] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2334.907418][T26903] usb 4-1: USB disconnect, device number 29 [ 2335.047712][ T6634] usb 5-1: device descriptor read/64, error -71 [ 2335.081129][T13405] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2335.237279][T31779] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2335.237602][T13405] usb 3-1: Using ep0 maxpacket: 32 [ 2335.269278][T13405] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2335.285415][T13405] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2335.294745][T13405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.307632][ T6634] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2335.319468][T13405] usb 3-1: Product: syz [ 2335.325426][T13405] usb 3-1: Manufacturer: syz [ 2335.331776][T13405] usb 3-1: SerialNumber: syz [ 2335.341432][T13405] usb 3-1: config 0 descriptor?? [ 2335.427560][T31779] usb 6-1: Using ep0 maxpacket: 32 [ 2335.446036][T31779] usb 6-1: config 211 has an invalid interface number: 98 but max is 0 [ 2335.458329][ T6634] usb 5-1: device descriptor read/64, error -71 [ 2335.473449][T31779] usb 6-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.501450][T31779] usb 6-1: config 211 has no interface number 0 [ 2335.524562][T31779] usb 6-1: config 211 interface 98 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2335.567532][T31779] usb 6-1: config 211 interface 98 has no altsetting 0 [ 2335.578430][ T6634] usb usb5-port1: attempt power cycle [ 2335.593246][T31779] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 2335.611897][T31779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.635214][T31779] usb 6-1: Product: syz [ 2335.647485][T31779] usb 6-1: Manufacturer: syz [ 2335.656781][T31779] usb 6-1: SerialNumber: syz [ 2335.763023][T13405] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 2335.949255][T31779] mct_u232 6-1:211.98: MCT U232 converter detected [ 2335.972649][T31779] mct_u232 ttyUSB0: expected endpoint missing [ 2335.995602][T31779] usb 6-1: USB disconnect, device number 16 [ 2336.006129][T31779] mct_u232 6-1:211.98: device disconnected [ 2336.028482][ T6634] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2336.068542][ T6634] usb 5-1: device descriptor read/8, error -71 [ 2336.199392][T13405] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 2336.337366][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2336.347303][ T6634] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2336.368009][ T6634] usb 5-1: device descriptor read/8, error -71 [ 2336.463238][T13405] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 2336.497732][ T6634] usb usb5-port1: unable to enumerate USB device [ 2336.526234][ T9] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 2336.552249][ T9] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 2336.605520][ T6634] usb 3-1: USB disconnect, device number 27 [ 2336.647901][ T9] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2336.697962][ T9] usb 4-1: config 0 has no interface number 0 [ 2336.731269][ T9] usb 4-1: config 0 has no interface number 1 [ 2336.848733][ T9] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2336.895170][ T9] usb 4-1: config 0 interface 28 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 2336.963215][ T9] usb 4-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2337.015508][ T9] usb 4-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2337.059212][ T9] usb 4-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2337.087077][ T9] usb 4-1: config 0 interface 28 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 2337.112372][ T9] usb 4-1: too many endpoints for config 0 interface 252 altsetting 105: 208, using maximum allowed: 30 [ 2337.132953][ T9] usb 4-1: config 0 interface 252 altsetting 105 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2337.151510][T13405] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2337.167668][ T9] usb 4-1: config 0 interface 252 altsetting 105 has a duplicate endpoint with address 0x6, skipping [ 2337.195714][ T9] usb 4-1: config 0 interface 252 altsetting 105 has 4 endpoint descriptors, different from the interface descriptor's value: 208 [ 2337.232801][ T9] usb 4-1: config 0 interface 252 has no altsetting 0 [ 2337.334421][ T9] usb 4-1: Dual-Role OTG device on HNP port [ 2337.342782][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=001a, bcdDevice=16.b1 [ 2337.361838][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.388701][ T9] usb 4-1: Product: syz [ 2337.408477][ T9] usb 4-1: Manufacturer: syz [ 2337.444650][ T9] usb 4-1: SerialNumber: syz [ 2337.480973][T13405] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 2337.493900][T13405] usb 6-1: config 0 has an invalid interface number: 252 but max is 0 [ 2337.494857][ T9] usb 4-1: config 0 descriptor?? [ 2337.515256][T13405] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2337.539278][ T1198] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2337.595895][T13405] usb 6-1: config 0 has no interface number 0 [ 2337.603557][T13405] usb 6-1: config 0 has no interface number 1 [ 2337.610308][T13405] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2337.622617][T13405] usb 6-1: config 0 interface 28 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 2337.792838][ T1216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6856'. [ 2337.825546][T13405] usb 6-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2337.864251][T13405] usb 6-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2337.929592][T13405] usb 6-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2337.975282][T13405] usb 6-1: config 0 interface 28 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 2338.004809][T13405] usb 6-1: too many endpoints for config 0 interface 252 altsetting 105: 208, using maximum allowed: 30 [ 2338.026334][T13405] usb 6-1: config 0 interface 252 altsetting 105 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2338.083835][T13405] usb 6-1: config 0 interface 252 altsetting 105 has a duplicate endpoint with address 0x6, skipping [ 2338.164842][T13405] usb 6-1: config 0 interface 252 altsetting 105 has 4 endpoint descriptors, different from the interface descriptor's value: 208 [ 2338.192625][T13405] usb 6-1: config 0 interface 252 has no altsetting 0 [ 2338.216383][T13405] usb 6-1: Dual-Role OTG device on HNP port [ 2338.227421][T13405] usb 6-1: New USB device found, idVendor=13b1, idProduct=001a, bcdDevice=16.b1 [ 2338.238927][T13405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.254818][T13405] usb 6-1: Product: syz [ 2338.261954][T13405] usb 6-1: Manufacturer: syz [ 2338.274740][T13405] usb 6-1: SerialNumber: syz [ 2338.337730][T13405] usb 6-1: config 0 descriptor?? [ 2338.372922][ T1205] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2338.837495][ T1234] fuse: Unknown parameter 'mGN‡8o«ad' [ 2339.587377][T31779] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2340.009047][T31779] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.133549][T31779] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2340.207483][T31779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.227877][T31779] usb 5-1: Product: syz [ 2340.232144][T31779] usb 5-1: Manufacturer: syz [ 2340.267249][T31779] usb 5-1: SerialNumber: syz [ 2340.730273][ T1236] geneve2: entered promiscuous mode [ 2340.735578][ T1236] geneve2: entered allmulticast mode [ 2341.027422][ T9] usb 4-1: USB disconnect, device number 30 [ 2341.824983][T13405] usb 6-1: USB disconnect, device number 17 [ 2342.220164][ T1251] binder_alloc: 1250: binder_alloc_buf, no vma [ 2342.508283][T31779] cdc_ncm 5-1:1.0: bind() failure [ 2342.572150][ T1257] syzkaller1: entered promiscuous mode [ 2342.578073][T31779] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 2342.601890][ T1257] syzkaller1: entered allmulticast mode [ 2342.628305][T31779] usb 5-1: USB disconnect, device number 98 [ 2343.287442][T31779] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2343.484060][T31779] usb 5-1: Using ep0 maxpacket: 16 [ 2343.546573][T31779] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2343.724278][T31779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.759293][T31779] usb 5-1: Product: syz [ 2343.771518][T31779] usb 5-1: Manufacturer: syz [ 2343.781691][T31779] usb 5-1: SerialNumber: syz [ 2343.824065][T31779] usb 5-1: config 0 descriptor?? [ 2344.334893][T31779] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 2344.358171][T31779] usb 5-1: USB disconnect, device number 99 [ 2344.524586][ T1288] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6873'. [ 2345.069466][ T1302] binder_alloc: 1301: binder_alloc_buf, no vma [ 2345.224510][ T6634] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2345.437299][T31779] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2345.451080][ T6634] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 2345.477710][ T6634] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 2345.504160][ T6634] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2345.525843][ T6634] usb 5-1: config 0 has no interface number 0 [ 2345.607280][T22710] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 2345.623378][T31779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2345.635597][T31779] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 2345.646324][ T6634] usb 5-1: config 0 has no interface number 1 [ 2345.672815][T31779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.703228][ T6634] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2345.736692][ T6634] usb 5-1: config 0 interface 28 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 2345.763056][T22710] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.777120][ T6634] usb 5-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2345.788852][ T6634] usb 5-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2345.789962][T22710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2345.813211][T31779] usb 4-1: config 0 descriptor?? [ 2345.821631][ T6634] usb 5-1: config 0 interface 28 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2345.893058][ T6634] usb 5-1: config 0 interface 28 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 2345.910918][T22710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2345.947850][T22710] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2345.961205][ T6634] usb 5-1: too many endpoints for config 0 interface 252 altsetting 105: 208, using maximum allowed: 30 [ 2345.983878][T22710] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2345.994618][ T1310] syzkaller1: entered promiscuous mode [ 2346.002940][T22710] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2346.020396][ T1310] syzkaller1: entered allmulticast mode [ 2346.026372][ T6634] usb 5-1: config 0 interface 252 altsetting 105 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2346.042482][T22710] usb 6-1: Manufacturer: syz [ 2346.073143][ T6634] usb 5-1: config 0 interface 252 altsetting 105 has a duplicate endpoint with address 0x6, skipping [ 2346.085080][T22710] usb 6-1: config 0 descriptor?? [ 2346.131122][ T6634] usb 5-1: config 0 interface 252 altsetting 105 has 4 endpoint descriptors, different from the interface descriptor's value: 208 [ 2346.171440][ T6634] usb 5-1: config 0 interface 252 has no altsetting 0 [ 2346.195908][ T6634] usb 5-1: Dual-Role OTG device on HNP port [ 2346.202747][ T6634] usb 5-1: New USB device found, idVendor=13b1, idProduct=001a, bcdDevice=16.b1 [ 2346.217037][ T6634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.234612][ T6634] usb 5-1: Product: syz [ 2346.244631][ T6634] usb 5-1: Manufacturer: syz [ 2346.257128][ T6634] usb 5-1: SerialNumber: syz [ 2346.258387][T26903] IPVS: starting estimator thread 0... [ 2346.272909][ T1306] IPVS: nq: FWM 3 0x00000003 - no destination available [ 2346.285581][ T6634] usb 5-1: config 0 descriptor?? [ 2346.291514][T31779] kye 0003:0458:501B.005E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2346.347005][ T1300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2346.373301][T31779] kye 0003:0458:501B.005E: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 2346.387943][ T1312] IPVS: using max 27 ests per chain, 64800 per kthread [ 2346.495198][T31779] kye 0003:0458:501B.005E: tablet-enabling feature report not found [ 2346.600324][T31779] kye 0003:0458:501B.005E: tablet enabling failed [ 2346.619788][T22710] rc_core: IR keymap rc-hauppauge not found [ 2346.625803][T22710] Registered IR keymap rc-empty [ 2346.698267][ T1314] ================================================================== [ 2346.706382][ T1314] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 2346.714634][ T1314] Read of size 7 at addr ffff88802825fca0 by task fido_id/1314 [ 2346.722178][ T1314] [ 2346.724509][ T1314] CPU: 1 UID: 0 PID: 1314 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 2346.724530][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2346.724541][ T1314] Call Trace: [ 2346.724549][ T1314] [ 2346.724556][ T1314] dump_stack_lvl+0x189/0x250 [ 2346.724577][ T1314] ? __virt_addr_valid+0x1c8/0x5c0 [ 2346.724598][ T1314] ? rcu_is_watching+0x15/0xb0 [ 2346.724613][ T1314] ? __kasan_check_byte+0x12/0x40 [ 2346.724635][ T1314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2346.724653][ T1314] ? rcu_is_watching+0x15/0xb0 [ 2346.724669][ T1314] ? lock_release+0x4b/0x3e0 [ 2346.724693][ T1314] ? __virt_addr_valid+0x1c8/0x5c0 [ 2346.724713][ T1314] ? __virt_addr_valid+0x4a5/0x5c0 [ 2346.724734][ T1314] print_report+0xca/0x240 [ 2346.724748][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2346.724768][ T1314] kasan_report+0x118/0x150 [ 2346.724791][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2346.724814][ T1314] kasan_check_range+0x2b0/0x2c0 [ 2346.724836][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2346.724857][ T1314] __asan_memcpy+0x29/0x70 [ 2346.724883][ T1314] report_descriptor_read+0xb5/0x100 [ 2346.724904][ T1314] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 2346.724919][ T1314] kernfs_fop_read_iter+0x44e/0x6b0 [ 2346.724946][ T1314] vfs_read+0x557/0xa30 [ 2346.724969][ T1314] ? __pfx_vfs_read+0x10/0x10 [ 2346.724992][ T1314] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 2346.725015][ T1314] ksys_read+0x145/0x250 [ 2346.725036][ T1314] ? __pfx_ksys_read+0x10/0x10 [ 2346.725055][ T1314] ? rcu_is_watching+0x15/0xb0 [ 2346.725072][ T1314] ? do_syscall_64+0xbe/0x3b0 [ 2346.725091][ T1314] do_syscall_64+0xfa/0x3b0 [ 2346.725107][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 2346.725122][ T1314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.725138][ T1314] ? clear_bhb_loop+0x60/0xb0 [ 2346.725155][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.725172][ T1314] RIP: 0033:0x7f990cea7407 [ 2346.725186][ T1314] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2346.725201][ T1314] RSP: 002b:00007ffc49aac300 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 2346.725217][ T1314] RAX: ffffffffffffffda RBX: 00007f990ce1d880 RCX: 00007f990cea7407 [ 2346.725230][ T1314] RDX: 0000000000001000 RSI: 00007ffc49aac350 RDI: 0000000000000004 [ 2346.725240][ T1314] RBP: 0000563502b5e730 R08: 0000000000000000 R09: 0000000000000000 [ 2346.725250][ T1314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563502b5d930 [ 2346.725260][ T1314] R13: 00007ffc49aac350 R14: 0000000000000004 R15: 00005634d890b4d8 [ 2346.725277][ T1314] [ 2346.725283][ T1314] [ 2346.983273][ T1314] Allocated by task 31779: [ 2346.987694][ T1314] kasan_save_track+0x3e/0x80 [ 2346.993166][ T1314] __kasan_kmalloc+0x93/0xb0 [ 2346.997773][ T1314] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 2347.004206][ T1314] kmemdup_noprof+0x2b/0x70 [ 2347.008719][ T1314] hid_open_report+0x208/0xee0 [ 2347.013494][ T1314] kye_probe+0x21/0x5f0 [ 2347.017664][ T1314] hid_device_probe+0x39d/0x710 [ 2347.022543][ T1314] really_probe+0x26d/0x9e0 [ 2347.027077][ T1314] __driver_probe_device+0x18c/0x2f0 [ 2347.032569][ T1314] driver_probe_device+0x4f/0x430 [ 2347.037645][ T1314] __device_attach_driver+0x2ce/0x530 [ 2347.043029][ T1314] bus_for_each_drv+0x24e/0x2e0 [ 2347.047907][ T1314] __device_attach+0x2b8/0x400 [ 2347.052683][ T1314] bus_probe_device+0x185/0x260 [ 2347.057544][ T1314] device_add+0x7b6/0xb50 [ 2347.061876][ T1314] hid_add_device+0x398/0x540 [ 2347.066568][ T1314] usbhid_probe+0xe13/0x12a0 [ 2347.071167][ T1314] usb_probe_interface+0x665/0xc30 [ 2347.076383][ T1314] really_probe+0x26d/0x9e0 [ 2347.080900][ T1314] __driver_probe_device+0x18c/0x2f0 [ 2347.086215][ T1314] driver_probe_device+0x4f/0x430 [ 2347.091244][ T1314] __device_attach_driver+0x2ce/0x530 [ 2347.096627][ T1314] bus_for_each_drv+0x24e/0x2e0 [ 2347.101488][ T1314] __device_attach+0x2b8/0x400 [ 2347.106311][ T1314] bus_probe_device+0x185/0x260 [ 2347.111166][ T1314] device_add+0x7b6/0xb50 [ 2347.115510][ T1314] usb_set_configuration+0x1a87/0x20e0 [ 2347.120984][ T1314] usb_generic_driver_probe+0x8d/0x150 [ 2347.126457][ T1314] usb_probe_device+0x1c1/0x390 [ 2347.131445][ T1314] really_probe+0x26d/0x9e0 [ 2347.135967][ T1314] __driver_probe_device+0x18c/0x2f0 [ 2347.141264][ T1314] driver_probe_device+0x4f/0x430 [ 2347.146341][ T1314] __device_attach_driver+0x2ce/0x530 [ 2347.151752][ T1314] bus_for_each_drv+0x24e/0x2e0 [ 2347.156637][ T1314] __device_attach+0x2b8/0x400 [ 2347.161422][ T1314] bus_probe_device+0x185/0x260 [ 2347.166397][ T1314] device_add+0x7b6/0xb50 [ 2347.170753][ T1314] usb_new_device+0xa39/0x16f0 [ 2347.175558][ T1314] hub_event+0x2958/0x4a20 [ 2347.180013][ T1314] process_scheduled_works+0xae1/0x17b0 [ 2347.185574][ T1314] worker_thread+0x8a0/0xda0 [ 2347.190171][ T1314] kthread+0x70e/0x8a0 [ 2347.194270][ T1314] ret_from_fork+0x436/0x7d0 [ 2347.198892][ T1314] ret_from_fork_asm+0x1a/0x30 [ 2347.203704][ T1314] [ 2347.206089][ T1314] The buggy address belongs to the object at ffff88802825fca0 [ 2347.206089][ T1314] which belongs to the cache kmalloc-8 of size 8 [ 2347.219801][ T1314] The buggy address is located 0 bytes inside of [ 2347.219801][ T1314] freed 8-byte region [ffff88802825fca0, ffff88802825fca8) [ 2347.233257][ T1314] [ 2347.235591][ T1314] The buggy address belongs to the physical page: [ 2347.242002][ T1314] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2825f [ 2347.250789][ T1314] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2347.258449][ T1314] page_type: f5(slab) [ 2347.262459][ T1314] raw: 00fff00000000000 ffff88801a441500 0000000000000000 dead000000000001 [ 2347.271058][ T1314] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 2347.279653][ T1314] page dumped because: kasan: bad access detected [ 2347.286079][ T1314] page_owner tracks the page as allocated [ 2347.291804][ T1314] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 15030587521, free_ts 0 [ 2347.309529][ T1314] post_alloc_hook+0x240/0x2a0 [ 2347.314398][ T1314] get_page_from_freelist+0x21e4/0x22c0 [ 2347.320033][ T1314] __alloc_frozen_pages_noprof+0x181/0x370 [ 2347.325933][ T1314] alloc_pages_mpol+0x232/0x4a0 [ 2347.330793][ T1314] allocate_slab+0x8a/0x370 [ 2347.335298][ T1314] ___slab_alloc+0xbeb/0x1420 [ 2347.339981][ T1314] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 2347.346581][ T1314] kstrdup+0x42/0x100 [ 2347.350586][ T1314] __kernfs_new_node+0x9c/0x7e0 [ 2347.355445][ T1314] kernfs_new_node+0x102/0x210 [ 2347.360212][ T1314] kernfs_create_link+0xa7/0x200 [ 2347.365155][ T1314] sysfs_do_create_link_sd+0x83/0x110 [ 2347.370613][ T1314] bus_add_device+0x249/0x450 [ 2347.375289][ T1314] device_add+0x4b7/0xb50 [ 2347.379617][ T1314] usb_new_device+0xa39/0x16f0 [ 2347.384393][ T1314] register_root_hub+0x275/0x590 [ 2347.389333][ T1314] page_owner free stack trace missing [ 2347.394697][ T1314] [ 2347.397014][ T1314] Memory state around the buggy address: [ 2347.402650][ T1314] ffff88802825fb80: 06 fc fc fc 06 fc fc fc 06 fc fc fc 05 fc fc fc [ 2347.410727][ T1314] ffff88802825fc00: fa fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 2347.418801][ T1314] >ffff88802825fc80: 00 fc fc fc fb fc fc fc fa fc fc fc fa fc fc fc [ 2347.426947][ T1314] ^ [ 2347.432057][ T1314] ffff88802825fd00: fa fc fc fc 06 fc fc fc 06 fc fc fc 05 fc fc fc [ 2347.440155][ T1314] ffff88802825fd80: 06 fc fc fc 06 fc fc fc 07 fc fc fc 06 fc fc fc [ 2347.448404][ T1314] ================================================================== [ 2347.458416][T22710] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2347.485252][T31779] usb 4-1: USB disconnect, device number 31 [ 2347.504653][ T1314] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2347.511908][ T1314] CPU: 0 UID: 0 PID: 1314 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 2347.520948][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2347.531013][ T1314] Call Trace: [ 2347.534303][ T1314] [ 2347.537250][ T1314] dump_stack_lvl+0x99/0x250 [ 2347.541858][ T1314] ? __asan_memcpy+0x40/0x70 [ 2347.546489][ T1314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2347.551729][ T1314] ? __pfx__printk+0x10/0x10 [ 2347.556462][ T1314] vpanic+0x281/0x750 [ 2347.560473][ T1314] ? __pfx_vpanic+0x10/0x10 [ 2347.565085][ T1314] ? preempt_schedule_irq+0xde/0x150 [ 2347.570403][ T1314] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2347.576142][ T1314] ? preempt_schedule+0xae/0xc0 [ 2347.581018][ T1314] panic+0xb9/0xc0 [ 2347.584766][ T1314] ? __pfx_panic+0x10/0x10 [ 2347.589208][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2347.594717][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2347.600216][ T1314] check_panic_on_warn+0x89/0xb0 [ 2347.605171][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2347.610662][ T1314] end_report+0x78/0x160 [ 2347.614953][ T1314] kasan_report+0x129/0x150 [ 2347.619516][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2347.625006][ T1314] kasan_check_range+0x2b0/0x2c0 [ 2347.629971][ T1314] ? report_descriptor_read+0xb5/0x100 [ 2347.635454][ T1314] __asan_memcpy+0x29/0x70 [ 2347.639896][ T1314] report_descriptor_read+0xb5/0x100 [ 2347.645294][ T1314] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 2347.650853][ T1314] kernfs_fop_read_iter+0x44e/0x6b0 [ 2347.656174][ T1314] vfs_read+0x557/0xa30 [ 2347.660372][ T1314] ? __pfx_vfs_read+0x10/0x10 [ 2347.665096][ T1314] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 2347.671195][ T1314] ksys_read+0x145/0x250 [ 2347.675537][ T1314] ? __pfx_ksys_read+0x10/0x10 [ 2347.680330][ T1314] ? rcu_is_watching+0x15/0xb0 [ 2347.685224][ T1314] ? do_syscall_64+0xbe/0x3b0 [ 2347.689945][ T1314] do_syscall_64+0xfa/0x3b0 [ 2347.694576][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 2347.699798][ T1314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2347.705886][ T1314] ? clear_bhb_loop+0x60/0xb0 [ 2347.710588][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2347.716498][ T1314] RIP: 0033:0x7f990cea7407 [ 2347.720940][ T1314] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2347.740566][ T1314] RSP: 002b:00007ffc49aac300 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 2347.749091][ T1314] RAX: ffffffffffffffda RBX: 00007f990ce1d880 RCX: 00007f990cea7407 [ 2347.757085][ T1314] RDX: 0000000000001000 RSI: 00007ffc49aac350 RDI: 0000000000000004 [ 2347.765072][ T1314] RBP: 0000563502b5e730 R08: 0000000000000000 R09: 0000000000000000 [ 2347.773079][ T1314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563502b5d930 [ 2347.781083][ T1314] R13: 00007ffc49aac350 R14: 0000000000000004 R15: 00005634d890b4d8 [ 2347.789156][ T1314] [ 2347.792542][ T1314] Kernel Offset: disabled [ 2347.796870][ T1314] Rebooting in 86400 seconds..