last executing test programs: 24m14.647578337s ago: executing program 0 (id=314): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x473a9f3f30e3bf80}, 0x8000) 24m14.355406453s ago: executing program 0 (id=317): socket$unix(0x1, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x1, r1, 0x0, 0x4000000008, 0x8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x10, 0xcb3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x6, 0x4}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x100000001) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0003000039"], 0x38}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYRESOCT=r3, @ANYBLOB="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", @ANYRES8], 0x10}, 0x20000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) ioctl$EVIOCGVERSION(r5, 0x5452, &(0x7f0000002200)=""/188) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000480)={0x0, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x328, 0x40, 0x9, 0x800, 0x7ac, 0x0, 0x3, {r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x7, 0x10000}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r2, 0x8) accept4$inet(r2, &(0x7f0000000100), 0x0, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) 24m14.026831126s ago: executing program 0 (id=319): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) sendfile(r2, r3, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x3, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x1f8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x462) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000001c0)=0x7004, 0x4) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r6, &(0x7f0000001ac0)={0x2020}, 0x2020) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r0) keyctl$read(0xb, r0, &(0x7f0000001c80)=""/4057, 0xffffffffffffff0b) gettid() 24m13.040757247s ago: executing program 0 (id=325): socket$unix(0x1, 0x2, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r4, 0x0, r3, 0x0, 0x46) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000009004"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast2, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000), 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r5, 0x0) inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x4000085c) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000340)) r7 = dup3(r6, r5, 0x0) read$FUSE(r7, &(0x7f0000003f80)={0x2020}, 0x2020) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000}, &(0x7f0000000000)={0x1f, 0x4db, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000000}, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x2, 0x1, &(0x7f0000000080)=0x192}) 24m11.943557923s ago: executing program 0 (id=327): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 24m11.57844634s ago: executing program 0 (id=328): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) 24m10.907167097s ago: executing program 32 (id=328): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) 21m10.689677813s ago: executing program 1 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd28, 0x0, {0x7, r2}}, 0x18}}, 0x0) 21m10.54116481s ago: executing program 1 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @remote, @mcast1}}) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000100)=0xb) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x170, 0x10b, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x50}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 21m10.258417462s ago: executing program 1 (id=1010): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYBLOB="8eb5dfa1cbe778b7e1975ec1dfdda8f3346c976392937da3424832aaac005ba3f79108971d079cde369b3dafb08319e96d340acff6126889f1a802018c1dc028b50cacf06e25bc2445f2", @ANYRES32=r0], 0x20) 21m9.921544654s ago: executing program 1 (id=1013): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x3, 0x4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, ',@', 0x3a, 'rootmode', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x46]}, 0x34) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'gre0\x00', r7, 0x10, 0x7, 0x6, 0x0, {{0x9, 0x4, 0x0, 0x3c, 0x24, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0x2, [{@loopback, 0xb}]}, @ra={0x94, 0x4, 0x1}]}}}}}) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 21m8.848594565s ago: executing program 1 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0xa0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0x138}}, 0x0) 21m8.591611205s ago: executing program 1 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x4}, [], [], 'wlan1\x00', 'bond_slave_0\x00', {}, {}, 0x11}, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23], [0x0, 0x0, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7, 'snmp_trap\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x7}, {0x1, 0x3, 0x1}, 0x1000, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x370) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 21m7.814331815s ago: executing program 33 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x4}, [], [], 'wlan1\x00', 'bond_slave_0\x00', {}, {}, 0x11}, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23], [0x0, 0x0, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7, 'snmp_trap\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x7}, {0x1, 0x3, 0x1}, 0x1000, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x370) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 5m3.632034462s ago: executing program 2 (id=4632): syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f00000000c0)=0x400, 0x0, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5m0.507373644s ago: executing program 2 (id=4643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000140)='./bus\x00', 0x60142, 0x95) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x3df0, 0x1000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010000304000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) r6 = syz_io_uring_setup(0x4172, &(0x7f0000000000)={0x0, 0x4f5e, 0x200}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000080)={0x1, 0x4, 0x2, "cd43eb299375d235f55549de2099785342816d285a560c01ffa36baaa2e73ddf", 0x32314247}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xebf1bac2d107dab0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x8, 0x2, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) 5m0.429563393s ago: executing program 2 (id=4644): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8001, 0x12) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @ipv6=@empty, @ipv6=@loopback}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x59d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000002c0)='jfs\x00', 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX=r4], 0x20) 4m58.411132608s ago: executing program 2 (id=4656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028009001400"], 0x48}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r3) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(r6, &(0x7f0000002280)='./file0/../file0/../file0/../file0\x00', 0x89000) move_mount(r7, 0x0, r6, 0x0, 0x46) close(r6) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') epoll_create1(0x0) r8 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x164, 0x24, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x7, 0xc}, {0xf, 0x5}, {0xf, 0xfff2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcbc}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x94f5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1d}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x65, 0x0}) io_uring_enter(r8, 0x8184c, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000440)={[0x4000, 0x4, 0x1, 0x4000], 0x4, 0x8, 0x2}) 4m57.642503924s ago: executing program 6 (id=4662): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000030000ff3f08000000480100100000000019002b000a2101000500000000000072080003000500000000", 0x39}], 0x1) 4m57.618351289s ago: executing program 6 (id=4663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) (async) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, &(0x7f0000000000)=0x7, 0xda, 0x2) 4m57.548407752s ago: executing program 2 (id=4664): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b00)={0x20, 0x7, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x23, 0x6c, {0x6c, 0x23, "015eaf297500adf008b221a1b42a8865f73583444067c9f5b84fd0603cb191780948b900e66394306bdfc375630f995d78a9a0b2dfc2b002306a1c43daca0fe62e12727e063281bf7cbeee755efb768a7d5859111af5a49f753e5aaaf9cf3ae462a6807a3c81fa85919e"}}, &(0x7f0000000100)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "2152fb61b80838acced2625ebdca06c4740f8304da1ae0dccfa4eae861d5f8183144813f6dcc8af140df9ca4d56c32a777ec3f1b5559bff51530c6e42901a4931087889674c9307f95208f77e8794efaf8f9a7bfdce0fb6b6f97e9f962408703a01e5dc75eb87de655482f446a744b13dd900da96c32bd8a5541643586b0b7ccba825e525f48bd02911a3ff8c2e7ec630cbf037cfe0e5ccf9556ad447f86451fc1fb9a2e"}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000840)={0x0, 0x3c, 0xba, {0xba, 0x4, "a1adc44ba16baf927e054da2db0a60ceb403595d50794ecb43926e89c5f86456288b8c1bcd8db6a97ab9519f155a0fc22dcaad4a334c172d1edaabf0be7df7cf41bd41a4f70a0dcbe325abe4e26fd4f6ce88c73c2936f340c9624c550a43b8c1c9adb5be3b5d23323161cb8bb2d4b121b2d466899afd647f9250973da485fdec6e407f821db2b3900f04b2a627396725c1eeabd9695d7c0a9bbd527bdd583463f47979a6322939349cb75d9402f87bbedb0a3d8ae8b0ad42"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000700)={0x20, 0x17, 0x25, "ee4d9097c89e3c73e0c5a98fe48804047fe75bc71f5ba2d43d806830e9ec07be2beb7f3f3b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x96}}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x83, {0x83, 0x2, "7859293f4494ddcde785499beafa032e55ef49dd815827309e73e94693b32810551cb97c54914ff7eae2cfe5b427ec359c41046042b2d3aabb5570d3371cad175ccd65ca661d109e02f8d8c20cdb44cb233bc3be44a1ca60619a1f7abd656bc5827d106cc103ed9b6356b77086f900359bd00c057387e426b276f12417aa6ef689"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x0, 0x14, 0x10, "1da987a40570e0d5ea8a7c4a62de8278"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xed}, &(0x7f00000003c0)={0x20, 0x81, 0x2, '=m'}, &(0x7f0000000400)={0x20, 0x82, 0x2, "91c7"}, &(0x7f0000000440)={0x20, 0x83, 0x2, '1\f'}, &(0x7f0000000800)={0x20, 0x84, 0x4, "00020000"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "4cbe3d"}}) 4m57.483274123s ago: executing program 6 (id=4665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000040)=0xa, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xd466, 0xf0d}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_emit_ethernet(0x61, &(0x7f0000000280)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x3, 0x21, 0x53, 0x64, 0x0, 0x4, 0x6, 0x0, @broadcast, @loopback, {[@noop, @timestamp={0x44, 0xc, 0xe8, 0x0, 0x8, [0x7, 0x4]}, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x2b, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x1, 0x2, 0xd, 0xfff7, 0x3, 0x4e22, 0x4e20}, 0x2, 0x3}, 0x1, 0x3}}, [0x0, 0x0, 0x0]}}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000000c0)={0x0, 0xb, 0xe0, 0x0, 0x3, 0x2, &(0x7f0000000000)="0d0a8d"}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"]) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m57.446355449s ago: executing program 2 (id=4666): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8001, 0x12) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @ipv6=@empty, @ipv6=@loopback}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x59d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000002c0)='jfs\x00', 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX=r4], 0x20) 4m57.0242841s ago: executing program 34 (id=4666): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8001, 0x12) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @ipv6=@empty, @ipv6=@loopback}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x59d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000002c0)='jfs\x00', 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX=r4], 0x20) 4m56.943326728s ago: executing program 6 (id=4670): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x400, 0xfffffffc}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000348089215d0569a26b55ae9069b0022fdf431f511c6342699bc24ddb05d7222607b235a5d80b38d7f9bd4ad3bed51cd76737eb84359cee169eaab2086297a5da5b711e21dea94682b83fc6ff68d46e7ee3d3d5992c2712f1cae7b2f357a88a43ef0f88", @ANYRES16=r5, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000b4c8ac3353374a1f295aa22a4dcd001c0012800b000100627269646765"], 0x3c}}, 0x0) 4m56.789225313s ago: executing program 6 (id=4672): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x1, 0x40000, 0x2001, {0x0, 0x0, 0x0, r2, 0x30, 0xff000000}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40091}, 0x4000014) 4m56.695988402s ago: executing program 6 (id=4673): socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) syz_io_uring_setup(0x58f2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x3, 0xffffffe4, 0x0, 0x0) 4m56.252991398s ago: executing program 35 (id=4673): socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) syz_io_uring_setup(0x58f2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x3, 0xffffffe4, 0x0, 0x0) 14.011483062s ago: executing program 7 (id=5758): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000bc0)=0x8, 0x4) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 10.503594641s ago: executing program 7 (id=5765): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000029efe3d644a5f297f5b79ff408d813259fa89d84ab11e0262f6b51018525e7f107406bb0eaeaec8e0908c29c86d97b56636a25fd29612bd26e2", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x2400c890) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r8 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r10}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r10}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000001180)={0x20, 0x43a0309a7f168c18, 0x400, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) 9.069079328s ago: executing program 3 (id=5774): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x9c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7fffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) 8.755115156s ago: executing program 3 (id=5775): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x5, {0x5, 0x22, "96b80d"}}, &(0x7f0000000080)={0x0, 0x3, 0x15, @string={0x15, 0x3, "9fb841a636937ddb71deee123d525aa295536b"}}, &(0x7f00000000c0)={0x0, 0xf, 0x121, {0x5, 0xf, 0x121, 0x4, [@generic={0xf7, 0x10, 0x2e171ab1a873715f, "44655424c11cb79f0ac70004f7672b21744b6aaf55a586edd06a1a9df8954179b849dd79137b172f3a4a1b4fd63307571d81310d0330741badce7a1803a34fa1c606d986381a4bb9e587127d1dd9127623d5047ac046ad24628db51240ea8ffa4226f5693ed7e4c8853bc54dc9eefa71306ca2df1a210e7980c37ee1cff3163eee27972ad85b28ca5a080aedc5b40a35a2f190315be32307c1c78066de927b30387c6567c86d06317d7255c1ce95e91d6c6c1940d3987118b34080d1948872ba842467fc6f89559bb62df566dc7d29e36b4e1808441cb26d87383b5f10b4cdffab82600947ccdbf7abd49d5d8e6f701fc580c456"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0xc1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b1d6d41572b9730a2c21a169ffb9f7ac"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x5, 0x8}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa8, 0x4, 0x46, 0x9, "29a132ab", "d85c77c7"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x0, 0xd, 0x8, 0x5, 0x1, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0xc, 0xed, "bb836fa3ee001bbb6265edbe6e4153f28dc911336453a255e003b56554eebfc4e860e351ce0a1baef34200bc93dc21a20900a967ba83f7974d1a2a2b9b8021c24d863d1a02346aa5498834e6c22aa195230459809b2fbddd507e105359dd30022d994bc71164dadd89cc98e7dd9de6efe7c018604b3d408493f46d07363dd6d3dd596ea8c79c9175e4afb12635dd3293c0b1770c44b7183c1999be81abd25e04109cec1968dcdd166d50b0bab21aca1ada5f358d81519c4fef3dd363f308d75739b112ec406a7f197109e5ed58743fc62d84be07a26327b02e9999d73bf330420bcd6d147b8b3401876fca1eca"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="20000800000020010300000000009daab2b6bed75a8a27a04eec8bf41dc4163d97912adeb8900f80de44ed7823241354f7b24958da1625a3ed2e51"], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "4d0f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="2e2637c71a54"}, &(0x7f0000000640)={0x40, 0x19, 0x2, "30fa"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x36}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000a00)={0x24, &(0x7f0000000880)={0x20, 0x2, 0x93, {0x93, 0xc, "51f98ed72f9f58618204490a002fbb598a79fe7dc055287ddfc2ba613dcf4de3c3447ec987dbc12ddb09a12c4a9b05cd2a7accf0549c2a4d8b805654bf0e5769c81114b17a73fcc020d9789b8e709651936ba3ea03ca13241c9e5604d74f1d32f58db24f2dd11a2f271736a372346c45de305184ad7ec04b70ab5065e9b616fa8eb6e48aedf83443c67b4b1a911115345e"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000980)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0xa, "e84504aa"}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_4={0x3, 0x1, 0x8, "7bf6a9c3"}, @global=@item_4={0x3, 0x1, 0x4, "47f011a6"}, @local=@item_012={0x1, 0x2, 0xa, "c7"}]}}, &(0x7f00000009c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x5e2}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a40)={0x0, 0x7, 0x83, "435642f54d48d65b153dca72a015f55e25eb1300d922130e7096cada80531960e37daec30d68e5f7ae2412100fa7ef05ab36504ff485685937aa40d2ac7da668b1598258591f7a2debf23b460ce39dbdc068824f89f79cd1ab277df7381b5a5a7429e230bdc5fa911e2734dc824165054ac96423ac798a95488e9d473c41f7420a5575"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x1, 0x27, "f047a3b5af85d2cade197c93425cb0291c1da66af32302b60e8f4244cd16843ca5f07a995a42bd"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400090900020000000001300000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 8.025640073s ago: executing program 8 (id=5781): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000200)={0x0, 0x3, 0x8, "0da831688317b864"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000300)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.992904726s ago: executing program 7 (id=5786): syz_usb_connect(0x2, 0x4a, &(0x7f00000015c0)=ANY=[@ANYBLOB="12010000958c834099043f4d2ad201020301090238000100fd20000904270001ff40d300052402000105240009000d240f01030000000d0010006306241a7d000209050b02"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x9, 0x2}, {0x2000000000, 0x4, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x40000000, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value}}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 5.97210249s ago: executing program 8 (id=5787): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000480)={0x40, 0x30, 0x100, {0x100, 0x11, "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"}}, &(0x7f0000000a00)={0x0, 0x3, 0xca, @string={0xca, 0x3, "f9b14b5c1495d426d8628e72884814e062f92af7f5821a18794e87852ffd1875da7ee3253748f32b35250b14cb05fb159e3a1eaddbe8e36a4579f3403c1c4adb4e1472603e993917667f4740b3b106da72de85be830e776cbb1d302af5e7803ab8c35f9dc5ee720bbe4d5815a61853f6651533eaa8c9484af02de9b886c0c3937728d01d9dc4afc92f908caa2a1af6f9aa6f471c50455d56a9eaa1c39af5f6d28b824c217391e496e5b9dd0537c32c3f628243f03aa63deeb07b95cb1587c662f192caa3f2efaea7"}}, &(0x7f0000000300), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x33c}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x20, 0x9, 0xf3, "2fcc2429f0dca24e62675d7b5e16f0098a422613c3e4ebfb5993d6db7281ba05fcfdee27f40470ed773586becdd5d8205f2d0dd9d68180e8a69c67a185f5957a0bdf495853d79560b0a9104a1b5d758ab18deef4e0c11d2f0dfe426ea7564bc03b707483217cc3bb4090a50244206554e50b700522b1021ca04da706cf5e8909fb5270f170ae64846a974f441c6c0fe2d63d1546f54342dd73ffc71966c2aff5864ccc827854ad793ba0ab06565b49214518e073bf84bc2bb020c3df26c206000000000000008cc66193439dd4bdd3166a7a7485b62d6d2a368e2725b989fd235196cd053e2bc4ee2bcd00212f6d63dd0df4b3"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x1, 0x4c, "82526f2d76379abf99b8ede175b987fa73a519cc1aa24d4436d1b4342ebb80b76d0f6cfcfbd32c517b4bf73216d09b98b8fdc5800e84ebcf42855dfa1e44b2a96bec244597414a320c7bd366"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xf}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 5.650581303s ago: executing program 3 (id=5788): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x6, 0xad, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x1a, 0xe, 0x4c, 0x20, 0x586, 0x341e, 0x627f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0x0, 0x8, 0x20, 0x2, [{{0x9, 0x4, 0xf1, 0x81, 0x4, 0x9c, 0x4c, 0x62, 0x5a, [@hid_hid={0x9, 0x21, 0xe293, 0x1, 0x1, {0x22, 0xbbe}}], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x3, 0x1, 0x6, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x10, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xcde7}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x0, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xfc, 0x7, 0x3, [@generic={0x53, 0xd, "6b95e9d9c3c37bc3560a9e54ed27dec340277bb53f954876ac640b61fb96a220616af9cff12992de20752cd57ebd9cc5502dee9cbae4da1bf1ca728bf454550369e35fb608d1072f1f1811d8953b0ec6b5"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x5, 0xf, 0x8, 0x2}, 0x44, &(0x7f0000000180)={0x5, 0xf, 0x44, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7, 0xf000, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0x2, 0x9, 0xe33, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7ff, 0xf, 0x8, [0xf, 0xffe08f]}, @ss_cap={0xa, 0x10, 0x3, 0x2032bfa9ff6e2753, 0x5, 0x7, 0x8, 0xe2}]}, 0x2, [{0x30, &(0x7f0000000200)=@string={0x30, 0x3, "c4602c8bd3e6bb483e78569d5ff5994f9f04bba3241a2086d9d68697b367e16022f19d013b1d4c565617e017daad"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x14, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x40, 0x5, 0x4, "95803e7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x6, 0x4, "c36719b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.47758785s ago: executing program 4 (id=5790): socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x58f2, &(0x7f0000000300)={0x0, 0x1000f90c, 0x10100, 0x1, 0x387}, &(0x7f0000000240), 0x0) io_uring_enter(r1, 0x47ba, 0x3, 0x0, 0x0, 0x0) (fail_nth: 27) 5.327498884s ago: executing program 4 (id=5791): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a", 0x23}], 0x1}, 0x0) 5.285467117s ago: executing program 4 (id=5792): removexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='user.user.incfs.metadrta\x00']) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000010001ff, 0x2) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x800003f, r4, 0x0) fanotify_mark(r5, 0x1, 0x11, r4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x0, 0x1, 0xb49, 0x9, 0x7, 0x8, 0x3}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) mknodat(r1, &(0x7f00000001c0)='\x00', 0x20, 0x5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x40045731, &(0x7f0000000500)) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xf, 0x1, 0x3, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) 4.117420227s ago: executing program 8 (id=5794): r0 = userfaultfd(0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000010000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r3, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 3.843589853s ago: executing program 7 (id=5795): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 3.432296802s ago: executing program 4 (id=5796): syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x113, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x1, 0x5, 0x3, 0x2a26, 0x9, "ea59ca1486000000f6f7ffff00", '\x00', "e2ffffff", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "000000feeafcd7c43b16438f"]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="142000001000010000000000000000000500000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a65635bb5001b3804c8d36c7474000014000280050002d800fb02000008000140000000020900010073797a30000000000900020073797a32000000001400000011000100"/134], 0x7c}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.019367763s ago: executing program 8 (id=5798): openat(0xffffffffffffff9c, 0x0, 0x400000, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff0400000004"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x1, 0x2572}, 0x8) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a2401000000020102132406912026082810e50163"], 0x0) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003900)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbf, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in=@local}}]}, 0x50}}, 0x0) r6 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400, 0x0, 0x3c}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) fcntl$notify(r4, 0x402, 0x4) openat$null(0xffffffffffffff9c, 0x0, 0xa840, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000740)={0xe, {{0xa, 0x4e23, 0x81, @mcast2, 0xb}}, 0x1}, 0x90) (async) io_uring_enter(r6, 0x6f58, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) (async) eventfd2(0x9, 0x80001) 2.989374062s ago: executing program 3 (id=5799): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[{0xa, 0x1, 0x7, 0x8001}, {0x400, 0x7}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xffffffff, 0xb6d38718de514620, 'veth0\x00', 'vlan0\x00', {}, {}, 0x29, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xff000000, 'bridge_slave_0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x1, 0x1, 0x1e}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r10, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) r11 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r11, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r11, 0x18, &(0x7f0000000140)={0x5, r11, 0x1c, {0x9, 0x1}, 0x6}, 0x1) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x8c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x546426fb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x2000a800) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0000000000000ba30700000000000000800800"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@local, r7}, 0x14) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="302689822ed1285a0a44d88dfb6309fa000024327d0c7c", @ANYRES16=r15, @ANYBLOB="200000000000fddbdf", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000800118004000600e52ccef56363d66ec4648bea1857d0bea9cbb21fff612fdb4a6df2f58c33dac1a6f1cf7e441e9ee58ed419fc972117befe3a5d5fbf492c31841b1d6aafd43df76bb08464f2e7ffaa01a130cd7ebe2da4c7165468091a67ed25d4e5fef77f25121e851215593973da6f76b3b5329ccc5d964afb3396777c6e3f2246960e7f0e55f57ca15ae837d5710ca4a639270a3cf36cd482ee2ef500753057332c0c1ed3b9b250de92dc14b07041acb6942736f8e5a73550ac50123c8b0bbf6209"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r0, 0x2e9, 0x6) 2.483290091s ago: executing program 5 (id=5802): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a", 0x23}], 0x1}, 0x0) 2.392257193s ago: executing program 5 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x88}, 0x0) 2.267439051s ago: executing program 5 (id=5804): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000bc0)=0x8, 0x4) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 2.126542426s ago: executing program 8 (id=5805): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x99, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.700243212s ago: executing program 8 (id=5806): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000002c0)='jfs\x00', 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r1], 0x20) 1.026772333s ago: executing program 3 (id=5807): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 946.307791ms ago: executing program 3 (id=5808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000080)="360f231b66b80500000066b94d2800000f01d9e32f66b80500000066b9050000000f01c1366566f20f2b5b00ea00908a18baf80c66b8baf0488066efbafc0cb80008ef0f015f023e0fc77e170f07", 0x4e}], 0x1, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x7c000) 663.511347ms ago: executing program 7 (id=5809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0xc, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a74568c953abcd4eb30e04d528539f3c0289737f0374c72a964a02447fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r5, 0x1695a000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 601.695374ms ago: executing program 7 (id=5810): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000480)={0x40, 0x30, 0x100, {0x100, 0x11, "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"}}, &(0x7f0000000a00)={0x0, 0x3, 0xca, @string={0xca, 0x3, "f9b14b5c1495d426d8628e72884814e062f92af7f5821a18794e87852ffd1875da7ee3253748f32b35250b14cb05fb159e3a1eaddbe8e36a4579f3403c1c4adb4e1472603e993917667f4740b3b106da72de85be830e776cbb1d302af5e7803ab8c35f9dc5ee720bbe4d5815a61853f6651533eaa8c9484af02de9b886c0c3937728d01d9dc4afc92f908caa2a1af6f9aa6f471c50455d56a9eaa1c39af5f6d28b824c217391e496e5b9dd0537c32c3f628243f03aa63deeb07b95cb1587c662f192caa3f2efaea7"}}, &(0x7f0000000300), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x33c}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x20, 0x9, 0xf3, "2fcc2429f0dca24e62675d7b5e16f0098a422613c3e4ebfb5993d6db7281ba05fcfdee27f40470ed773586becdd5d8205f2d0dd9d68180e8a69c67a185f5957a0bdf495853d79560b0a9104a1b5d758ab18deef4e0c11d2f0dfe426ea7564bc03b707483217cc3bb4090a50244206554e50b700522b1021ca04da706cf5e8909fb5270f170ae64846a974f441c6c0fe2d63d1546f54342dd73ffc71966c2aff5864ccc827854ad793ba0ab06565b49214518e073bf84bc2bb020c3df26c206000000000000008cc66193439dd4bdd3166a7a7485b62d6d2a368e2725b989fd235196cd053e2bc4ee2bcd00212f6d63dd0df4b3"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x1, 0x4c, "82526f2d76379abf99b8ede175b987fa73a519cc1aa24d4436d1b4342ebb80b76d0f6cfcfbd32c517b4bf73216d09b98b8fdc5800e84ebcf42855dfa1e44b2a96bec244597414a320c7bd366"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xf}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 316.045619ms ago: executing program 5 (id=5811): bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000"], 0x180) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f00000020c0)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) mkdir(0x0, 0x119) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000000000000000000000000000000000153d4f8a8b22cae15055494941d0006e6afc73bcfdca107adf78aab6633113c9ef37b69ddc8fae52c06dadf4c501ea3c5a2b62b37bfb3c40b188c34b5413f19dbbdb4879b99358f4b3d71863052c1c648a3d5fcb0dff75fd7fd64828b69219a64bf8d9096036dc29bf175b82419ec1d281a8e1f86e255b07f2650499231ccb31e44d0a95a300d163cb2f0eeb43a557a24e6262a5414f7620050f792eca9090987f06535550f3", @ANYRES32=0x0], 0x40}}, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000002180)=[{}, {}, {}, {}, {}], 0xc, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000002140)={[0xd]}, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 315.473759ms ago: executing program 4 (id=5812): socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x58f2, &(0x7f0000000300)={0x0, 0x1000f90c, 0x10100, 0x1, 0x387}, &(0x7f0000000240), 0x0) io_uring_enter(r1, 0x47ba, 0x3, 0x0, 0x0, 0x0) (fail_nth: 28) 168.783863ms ago: executing program 5 (id=5813): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002", 0x29}], 0x1}, 0x0) 709.649µs ago: executing program 4 (id=5814): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000bc0)=0x8, 0x4) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=5815): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendmsg$alg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="e5958f60a5914938fd903a1c2d82cea2fd26519110bc37d84067774acddb33c4372feadb14b5aa4c441f77efa018ed66027d6f328ca3e51c7fdb41d2e1ef4ffec6b6a58ea7ed8b9a25535e86b3f446909102306b857936f0ed31680b8f1c583df8e8963f3bb0b37cd509af2b5ad32e608d05acfb", 0x74}], 0x1, &(0x7f0000000140)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0xd1}, 0x80) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12002, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0) kernel console output (not intermixed with test programs): iptor's value: 2 [ 1587.335413][ T5834] usb 6-1: config 1 has no interface number 0 [ 1587.365512][ T5834] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1587.376533][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1587.397407][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1587.406723][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1587.414413][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1587.423663][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1587.448880][ T5834] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1587.476665][ T9] usb 9-1: USB disconnect, device number 94 [ 1587.509848][ T5834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1587.532681][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.566350][ T5834] usb 6-1: Product: syz [ 1587.577582][ T5834] usb 6-1: Manufacturer: syz [ 1587.582229][ T5834] usb 6-1: SerialNumber: syz [ 1587.936506][ T5892] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1588.035091][T24698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.065069][T24698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.084321][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5585'. [ 1588.141185][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1588.186539][ T5892] usb 4-1: can't read configurations, error -61 [ 1588.201942][T17838] usb 6-1: USB disconnect, device number 57 [ 1588.326999][ T5892] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1588.529107][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1588.551676][ T5892] usb 4-1: can't read configurations, error -61 [ 1588.568203][ T5892] usb usb4-port1: attempt power cycle [ 1588.676688][ T9] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1588.916715][ T5892] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1589.106414][ T5834] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1589.180256][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1589.233769][ T5892] usb 4-1: can't read configurations, error -61 [ 1589.278840][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.372471][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.406568][ T5892] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1589.443558][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1589.450029][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1589.472196][ T5834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1589.482286][ T5892] usb 4-1: can't read configurations, error -61 [ 1589.497810][ T5892] usb usb4-port1: unable to enumerate USB device [ 1589.588076][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.698134][ T5834] usb 5-1: config 0 descriptor?? [ 1590.188475][ T5834] plantronics 0003:047F:FFFF.0043: reserved main item tag 0xe [ 1590.196149][ T9] usb 9-1: new full-speed USB device number 96 using dummy_hcd [ 1590.208558][ T5834] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1590.218405][ T5834] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 1590.247141][ T5834] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1590.367978][ T9] usb 9-1: config 0 has no interfaces? [ 1590.377241][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1590.387707][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.401370][ T9] usb 9-1: Product: syz [ 1590.405637][ T9] usb 9-1: Manufacturer: syz [ 1590.410502][ T9] usb 9-1: SerialNumber: syz [ 1590.419535][ T5834] usb 5-1: USB disconnect, device number 84 [ 1590.433878][ T9] usb 9-1: config 0 descriptor?? [ 1591.417293][ T5834] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1591.546810][ T9] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1591.588468][ T5834] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1591.617358][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.641340][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1591.662000][ T5834] usb 5-1: config 1 has no interface number 0 [ 1591.675805][ T5834] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1591.688692][ T5834] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1591.711913][ T9] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 1591.739028][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1591.742367][T24793] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1591.781011][ T9] usb 4-1: config 0 has no interface number 0 [ 1591.793056][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.816725][ T9] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1591.834341][ T5834] usb 5-1: Product: syz [ 1591.839227][ T5834] usb 5-1: Manufacturer: syz [ 1591.843949][ T5834] usb 5-1: SerialNumber: syz [ 1591.854675][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1591.869704][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.894354][ T9] usb 4-1: Product: syz [ 1591.902176][ T9] usb 4-1: Manufacturer: syz [ 1591.910322][ T9] usb 4-1: SerialNumber: syz [ 1591.924829][ T9] usb 4-1: config 0 descriptor?? [ 1592.205803][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1592.205833][ T30] audit: type=1326 audit(1748604144.714:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1592.260843][T24785] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1592.302173][ T30] audit: type=1326 audit(1748604144.714:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1592.428768][T24780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.445562][ T30] audit: type=1326 audit(1748604144.714:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1592.496383][ T9] usb 4-1: USB disconnect, device number 88 [ 1592.520945][T16298] udevd[16298]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1592.579461][T24780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.636996][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5604'. [ 1592.658484][ T30] audit: type=1326 audit(1748604144.724:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1592.690632][ T5834] usb 5-1: USB disconnect, device number 85 [ 1592.691536][ T30] audit: type=1326 audit(1748604144.724:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1592.748018][ T30] audit: type=1326 audit(1748604144.754:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1593.165533][ T30] audit: type=1326 audit(1748604144.754:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1593.191867][ T30] audit: type=1326 audit(1748604144.754:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1593.297904][ T30] audit: type=1326 audit(1748604144.754:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1593.382467][ T30] audit: type=1326 audit(1748604144.754:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.3.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7caf8e969 code=0x7ffc0000 [ 1593.592821][ T5892] usb 9-1: USB disconnect, device number 96 [ 1593.958918][T24823] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1594.046252][T24826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5613'. [ 1594.346412][ T5892] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1594.589916][ T5892] usb 5-1: not running at top speed; connect to a high speed hub [ 1594.617322][ T5892] usb 5-1: config 192 has an invalid interface number: 225 but max is 2 [ 1594.653025][ T5892] usb 5-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 1594.786869][ T5892] usb 5-1: config 192 has an invalid interface descriptor of length 6, skipping [ 1594.817532][ T5892] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.850606][ T5892] usb 5-1: config 192 has 1 interface, different from the descriptor's value: 3 [ 1594.979775][ T5892] usb 5-1: config 192 has no interface number 0 [ 1595.011683][ T5892] usb 5-1: config 192 interface 225 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1595.152471][ T5892] usb 5-1: config 192 interface 225 has no altsetting 0 [ 1595.183807][ T5892] usb 5-1: language id specifier not provided by device, defaulting to English [ 1595.221160][ T5892] usb 5-1: New USB device found, idVendor=2019, idProduct=ab25, bcdDevice=36.52 [ 1595.264302][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.294198][ T5892] usb 5-1: Product: 浣㷆륫誐間贈↺㄰욺낺롈笻공黫賅 [ 1595.305451][ T5892] usb 5-1: SerialNumber: Ћ [ 1595.329557][T16210] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1595.514566][T16210] usb 6-1: Using ep0 maxpacket: 32 [ 1595.566026][T16210] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1595.590609][T16210] usb 6-1: config 0 has no interface number 0 [ 1595.611422][T16210] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1595.653609][T16210] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1595.705619][T16210] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1595.732783][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.746720][T24845] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1595.797816][T16210] usb 6-1: Product: syz [ 1595.839414][T24843] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 29 [ 1595.876192][T16210] usb 6-1: Manufacturer: syz [ 1595.896613][T16210] usb 6-1: SerialNumber: syz [ 1595.945441][T16210] usb 6-1: config 0 descriptor?? [ 1596.054552][T24850] loop5: detected capacity change from 0 to 567 [ 1596.450474][T16210] appletouch 6-1:0.85: Geyser mode initialized. [ 1596.499780][T16210] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input185 [ 1596.654542][T17838] usb 6-1: USB disconnect, device number 58 [ 1596.654665][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1596.796810][ T5831] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1596.897110][T17838] appletouch 6-1:0.85: input: appletouch disconnected [ 1597.097708][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 1597.134380][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1597.145356][ T5892] usb 5-1: USB disconnect, device number 86 [ 1597.170726][ T5831] usb 4-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1597.224169][ T5831] usb 4-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.300136][ T5831] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1597.359443][ T5831] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1597.406340][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.414660][ T5831] usb 4-1: Product: syz [ 1597.471921][ T5831] usb 4-1: Manufacturer: syz [ 1597.484083][ T5831] usb 4-1: SerialNumber: syz [ 1597.520194][T24869] xt_hashlimit: size too large, truncated to 1048576 [ 1597.579323][T24869] syz.4.5624: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1597.602105][T24869] CPU: 0 UID: 0 PID: 24869 Comm: syz.4.5624 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1597.602137][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1597.602151][T24869] Call Trace: [ 1597.602161][T24869] [ 1597.602171][T24869] dump_stack_lvl+0x189/0x250 [ 1597.602232][T24869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1597.602267][T24869] ? __pfx__printk+0x10/0x10 [ 1597.602299][T24869] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1597.602333][T24869] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1597.602368][T24869] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1597.602403][T24869] warn_alloc+0x214/0x310 [ 1597.602444][T24869] ? __pfx_warn_alloc+0x10/0x10 [ 1597.602486][T24869] ? __get_vm_area_node+0x28f/0x300 [ 1597.602519][T24869] ? htable_create+0xfc/0x7a0 [ 1597.602547][T24869] __vmalloc_node_range_noprof+0x67e/0x1340 [ 1597.602613][T24869] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1597.602647][T24869] ? __kasan_kmalloc_large+0x1c/0xa0 [ 1597.602679][T24869] ? rcu_is_watching+0x15/0xb0 [ 1597.602710][T24869] ? htable_create+0xfc/0x7a0 [ 1597.602732][T24869] ? htable_create+0xfc/0x7a0 [ 1597.602752][T24869] __kvmalloc_node_noprof+0x3bf/0x600 [ 1597.602782][T24869] ? htable_create+0xfc/0x7a0 [ 1597.602803][T24869] ? hashlimit_pernet+0x23/0x240 [ 1597.602834][T24869] htable_create+0xfc/0x7a0 [ 1597.602866][T24869] hashlimit_mt_check_common+0x719/0xa10 [ 1597.602901][T24869] hashlimit_mt_check_v1+0x221/0x360 [ 1597.602928][T24869] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 1597.602960][T24869] ? xt_find_match+0x1f7/0x250 [ 1597.603002][T24869] xt_check_match+0x3d1/0xab0 [ 1597.603044][T24869] ? __pfx___mutex_lock+0x10/0x10 [ 1597.603076][T24869] ? __pfx_xt_check_match+0x10/0x10 [ 1597.603115][T24869] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 1597.603157][T24869] ? xt_find_match+0x1f7/0x250 [ 1597.603199][T24869] translate_table+0x1553/0x2040 [ 1597.603261][T24869] ? __pfx_translate_table+0x10/0x10 [ 1597.603297][T24869] ? __might_fault+0xb0/0x130 [ 1597.603347][T24869] ? _copy_from_user+0x94/0xb0 [ 1597.603389][T24869] do_ip6t_set_ctl+0x970/0xce0 [ 1597.603432][T24869] ? rcu_is_watching+0x15/0xb0 [ 1597.603459][T24869] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1597.603515][T24869] ? __pfx___mutex_lock+0x10/0x10 [ 1597.603542][T24869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1597.603577][T24869] ? __pfx_futex_wait+0x10/0x10 [ 1597.603609][T24869] nf_setsockopt+0x26f/0x290 [ 1597.603637][T24869] rawv6_setsockopt+0x23b/0x5b0 [ 1597.603660][T24869] ? __lock_acquire+0xab9/0xd20 [ 1597.603687][T24869] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1597.603712][T24869] ? aa_sock_opt_perm+0x74/0x110 [ 1597.603737][T24869] ? sock_common_setsockopt+0x36/0xc0 [ 1597.603766][T24869] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1597.603798][T24869] do_sock_setsockopt+0x25a/0x3e0 [ 1597.603834][T24869] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1597.603873][T24869] ? __fget_files+0x2a/0x420 [ 1597.603912][T24869] __x64_sys_setsockopt+0x18b/0x220 [ 1597.603952][T24869] do_syscall_64+0xfa/0x3b0 [ 1597.603977][T24869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1597.604001][T24869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.604030][T24869] ? clear_bhb_loop+0x60/0xb0 [ 1597.604058][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.604080][T24869] RIP: 0033:0x7f2570b8e969 [ 1597.604100][T24869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.604122][T24869] RSP: 002b:00007f256e9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1597.604145][T24869] RAX: ffffffffffffffda RBX: 00007f2570db6080 RCX: 00007f2570b8e969 [ 1597.604162][T24869] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000029 [ 1597.604176][T24869] RBP: 00007f2570c10ab1 R08: 00000000000004c0 R09: 0000000000000000 [ 1597.604191][T24869] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 1597.604206][T24869] R13: 0000000000000000 R14: 00007f2570db6080 R15: 00007f2570edfa28 [ 1597.604240][T24869] [ 1597.604276][T24869] Mem-Info: [ 1597.706675][ T5892] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1597.726572][T24869] active_anon:14863 inactive_anon:0 isolated_anon:0 [ 1597.726572][T24869] active_file:20411 inactive_file:40519 isolated_file:0 [ 1597.726572][T24869] unevictable:768 dirty:155 writeback:0 [ 1597.726572][T24869] slab_reclaimable:11093 slab_unreclaimable:113899 [ 1597.726572][T24869] mapped:37968 shmem:8513 pagetables:1451 [ 1597.726572][T24869] sec_pagetables:0 bounce:0 [ 1597.726572][T24869] kernel_misc_reclaimable:0 [ 1597.726572][T24869] free:1263342 free_pcp:4407 free_cma:0 [ 1597.921905][ T5892] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1597.958621][T24869] Node 0 active_anon:52240kB inactive_anon:0kB active_file:81644kB inactive_file:161876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151872kB dirty:616kB writeback:0kB shmem:25332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13948kB pagetables:5828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1598.057546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.078614][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.100467][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.109370][T24869] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1598.154393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.163026][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1598.174481][ T5892] usb 6-1: config 1 has no interface number 0 [ 1598.189676][ T5892] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1598.209447][ T5892] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1598.232045][T24869] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.247055][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1598.263786][T24869] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1598.275300][T24869] Node 0 DMA32 free:1144036kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:47716kB inactive_anon:0kB active_file:81644kB inactive_file:160064kB unevictable:1536kB writepending:616kB present:3129332kB managed:2561232kB mlocked:0kB bounce:0kB free_pcp:1752kB local_pcp:1540kB free_cma:0kB [ 1598.295034][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.309891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.346088][ T5892] usb 6-1: Product: syz [ 1598.356803][T24869] lowmem_reserve[]: 0 0 1 1 1 [ 1598.362839][ T5892] usb 6-1: Manufacturer: syz [ 1598.370845][T24869] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1598.372193][ T5892] usb 6-1: SerialNumber: syz [ 1598.401729][T24869] lowmem_reserve[]: 0 0 0 0 0 [ 1598.410002][T24869] Node 1 Normal free:3921076kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.438873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.452086][T24869] lowmem_reserve[]: 0 0 0 0 0 [ 1598.456974][T24869] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1598.473260][T24869] Node 0 DMA32: 673*4kB (UE) 382*8kB (UME) 312*16kB (UME) 179*32kB (UME) 196*64kB (UME) 80*128kB (UME) 83*256kB (UM) 74*512kB (UM) 48*1024kB (UM) 4*2048kB (UM) 241*4096kB (UM) = 1142868kB [ 1598.501743][T24869] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1598.514952][T24869] Node 1 Normal: 209*4kB (UME) 74*8kB (UME) 26*16kB (UME) 184*32kB (UME) 100*64kB (UME) 33*128kB (UME) 15*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 948*4096kB (M) = 3921076kB [ 1598.540068][T24869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.553568][T24869] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1598.572488][T24869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.592413][T24869] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1598.612678][T24869] 67478 total pagecache pages [ 1598.622801][T24869] 0 pages in swap cache [ 1598.636422][T24869] Free swap = 124996kB [ 1598.640626][T24869] Total swap = 124996kB [ 1598.655005][T24869] 2097051 pages RAM [ 1598.658954][T24869] 0 pages HighMem/MovableOnly [ 1598.663664][T24869] 424637 pages reserved [ 1598.676836][T24869] 0 pages cma reserved [ 1598.892127][T24863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.907997][T24863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.917175][T24863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1598.933386][T17838] usb 6-1: USB disconnect, device number 59 [ 1599.028772][ T5831] usbhid 4-1:1.0: can't add hid device: -71 [ 1599.039294][ T5831] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1599.080085][ T5831] usb 4-1: USB disconnect, device number 89 [ 1599.108820][ T5892] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1599.280971][ T5892] usb 5-1: config 0 has an invalid interface number: 39 but max is 0 [ 1599.294198][ T5892] usb 5-1: config 0 has no interface number 0 [ 1599.307260][ T5892] usb 5-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1599.325012][ T5892] usb 5-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1599.343500][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.361636][ T5892] usb 5-1: Product: syz [ 1599.365947][ T5892] usb 5-1: Manufacturer: syz [ 1599.370871][ T5892] usb 5-1: SerialNumber: syz [ 1599.389144][ T5892] usb 5-1: config 0 descriptor?? [ 1599.605767][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1599.605788][ T30] audit: type=1326 audit(1748604152.114:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.637349][ T30] audit: type=1326 audit(1748604152.114:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.654471][T24887] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5626'. [ 1599.667443][ T30] audit: type=1326 audit(1748604152.154:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.693985][ T30] audit: type=1326 audit(1748604152.154:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.719688][ T30] audit: type=1326 audit(1748604152.154:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.760143][ T30] audit: type=1326 audit(1748604152.154:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.796218][ T30] audit: type=1326 audit(1748604152.154:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.828937][ T5892] usb 5-1: USB disconnect, device number 87 [ 1599.849835][ T30] audit: type=1326 audit(1748604152.154:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.880007][ T30] audit: type=1326 audit(1748604152.154:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.886665][T16210] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1599.905707][ T30] audit: type=1326 audit(1748604152.154:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1599.913522][T16298] udevd[16298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.108618][T16210] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1600.116865][T16210] usb 6-1: config 0 has no interface number 0 [ 1600.125228][T16210] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1600.134991][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.143655][T16210] usb 6-1: Product: syz [ 1600.148211][T16210] usb 6-1: Manufacturer: syz [ 1600.152858][T16210] usb 6-1: SerialNumber: syz [ 1600.160587][T16210] usb 6-1: config 0 descriptor?? [ 1600.372575][T16210] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1600.397988][T16210] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1600.416119][T16210] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1600.426224][T16210] usb 6-1: media controller created [ 1600.457323][T16210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.543197][T24912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5632'. [ 1600.653672][T24913] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1600.735921][T24913] bond0: entered promiscuous mode [ 1600.764639][T24913] bond0: entered allmulticast mode [ 1600.773048][T24913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.901106][ T5892] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1600.956045][T24913] bond0 (unregistering): Released all slaves [ 1601.066395][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1601.073950][ T5892] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1601.091956][ T5892] usb 5-1: config 0 has no interface number 0 [ 1601.100628][ T5892] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1601.114373][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.122850][ T5892] usb 5-1: Product: syz [ 1601.128215][ T5892] usb 5-1: Manufacturer: syz [ 1601.133123][ T5892] usb 5-1: SerialNumber: syz [ 1601.141712][ T5892] usb 5-1: config 0 descriptor?? [ 1601.154778][ T5892] asix 5-1:0.251: probe with driver asix failed with error -22 [ 1601.216519][T20918] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1601.365211][ T5834] usb 5-1: USB disconnect, device number 88 [ 1601.383842][T20918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1601.395480][T20918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1601.424503][T20918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1601.437743][T20918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1601.452994][T20918] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1601.463009][T20918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.472900][T20918] usb 4-1: Product: syz [ 1601.477531][T20918] usb 4-1: Manufacturer: syz [ 1601.482240][T20918] usb 4-1: SerialNumber: syz [ 1601.495678][T20918] usb 4-1: config 0 descriptor?? [ 1601.513549][T20918] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1601.598317][ T9] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1601.606602][T16210] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1601.706482][ T5834] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1601.721576][T20918] scsi host1: usb-storage 4-1:0.0 [ 1601.770690][ T9] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1601.787893][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1601.805834][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1601.816184][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.830334][ T9] usb 9-1: Product: ، [ 1601.834556][ T9] usb 9-1: Manufacturer: 嶶 [ 1601.840440][ T9] usb 9-1: SerialNumber: І [ 1601.866639][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1601.879582][ T5834] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1601.893738][ T5834] usb 5-1: config 0 has no interface number 0 [ 1601.905103][ T5834] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1601.921347][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.930791][ T5834] usb 5-1: Product: syz [ 1601.935107][ T5834] usb 5-1: Manufacturer: syz [ 1601.945857][ T5834] usb 5-1: SerialNumber: syz [ 1601.959017][ T5834] usb 5-1: config 0 descriptor?? [ 1601.986214][ T5834] asix 5-1:0.251: probe with driver asix failed with error -22 [ 1602.072121][T24922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.097099][T24922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.138777][ T9] usb 9-1: 0:2 : does not exist [ 1602.167363][ T9] usb 9-1: USB disconnect, device number 97 [ 1602.203072][ T5834] usb 5-1: USB disconnect, device number 89 [ 1602.224590][T16961] udevd[16961]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.805150][ T5834] ums-isd200 4-1:0.0: Max LUN 222 is not valid, using 0 instead [ 1602.871873][T16210] usb 6-1: USB disconnect, device number 60 [ 1602.912513][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5637'. [ 1602.942231][T24960] xfrm0: left promiscuous mode [ 1602.963503][T24960] xfrm0: left allmulticast mode [ 1602.987440][T24934] usb 4-1: reset high-speed USB device number 90 using dummy_hcd [ 1603.336448][T16210] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1603.375957][T24979] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5641'. [ 1603.509715][T16210] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1603.527238][T16210] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.574612][T16210] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1603.584147][T16210] usb 6-1: config 1 has no interface number 0 [ 1603.591023][T16210] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1603.603223][T16210] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1603.625143][T16210] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1603.636628][ T24] usb 9-1: new full-speed USB device number 98 using dummy_hcd [ 1603.727304][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.743172][T16210] usb 6-1: Product: syz [ 1603.766116][T16210] usb 6-1: Manufacturer: syz [ 1603.839809][ T5909] usb 4-1: USB disconnect, device number 90 [ 1603.849365][T16210] usb 6-1: SerialNumber: syz [ 1604.043429][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 1604.059320][ T24] usb 9-1: config 192 has an invalid interface number: 225 but max is 2 [ 1604.067999][ T24] usb 9-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 1604.082172][ T24] usb 9-1: config 192 has an invalid interface descriptor of length 6, skipping [ 1604.112411][ T24] usb 9-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.326594][ T24] usb 9-1: config 192 has 1 interface, different from the descriptor's value: 3 [ 1604.421459][ T24] usb 9-1: config 192 has no interface number 0 [ 1604.447863][T24962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.545651][T24962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.570402][ T24] usb 9-1: config 192 interface 225 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1604.585424][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1604.631749][ T24] usb 9-1: config 192 interface 225 has no altsetting 0 [ 1604.661136][T16210] usb 6-1: USB disconnect, device number 61 [ 1604.696616][ T5909] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1604.751777][ T24] usb 9-1: language id specifier not provided by device, defaulting to English [ 1604.896709][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.921329][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.950628][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1604.988511][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1605.009478][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.061003][ T5909] usb 4-1: config 0 descriptor?? [ 1605.067308][ T5831] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1605.271134][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.308689][ T5831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1605.362331][ T5831] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1605.398046][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1605.425791][ T5831] usb 5-1: SerialNumber: syz [ 1605.652646][ T5831] usb 5-1: 0:2 : does not exist [ 1605.704632][ T5831] usb 5-1: USB disconnect, device number 90 [ 1605.726078][ T5909] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xe [ 1605.775119][ T5909] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1605.806133][T16298] udevd[16298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.828043][ T5909] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 1605.866876][ T5909] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1606.160993][ T5831] usb 4-1: USB disconnect, device number 91 [ 1606.314167][T25011] fido_id[25011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1606.522902][ T24] usb 9-1: New USB device found, idVendor=2019, idProduct=ab25, bcdDevice=36.52 [ 1606.544160][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.558079][ T24] usb 9-1: Product: 浣㷆륫誐間贈↺㄰욺낺롈笻공黫 [ 1606.570320][ T24] usb 9-1: can't set config #192, error -71 [ 1606.579981][ T24] usb 9-1: USB disconnect, device number 98 [ 1606.618600][T16210] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 1606.780519][T16210] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1606.799264][T16210] usb 6-1: config 0 has no interface number 0 [ 1606.814248][T16210] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1606.833654][T16210] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1606.858452][T16210] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1606.895486][T16210] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1606.912560][T16210] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1606.924319][T16210] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1606.985827][T16210] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1607.018561][T16210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.067213][T16210] usb 6-1: config 0 descriptor?? [ 1607.086546][ T24] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1607.121247][T25006] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1607.176915][T25006] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1607.233230][T16210] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1607.291249][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1607.307774][ T24] usb 9-1: can't read configurations, error -61 [ 1607.376569][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1607.441915][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.448480][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.449472][ T24] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1607.686724][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1607.708127][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1607.724026][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1607.749586][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1607.763382][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.786447][ T24] usb 9-1: can't read configurations, error -61 [ 1607.808458][ T24] usb usb9-port1: attempt power cycle [ 1607.886462][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.929544][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1607.953797][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.178640][ T24] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1608.239864][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1608.262613][ T24] usb 9-1: can't read configurations, error -61 [ 1608.279215][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 1608.298003][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1608.426879][ T24] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1608.456539][T16210] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1608.485424][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1608.506582][ T24] usb 9-1: can't read configurations, error -61 [ 1608.531187][ T9] usb 6-1: USB disconnect, device number 62 [ 1608.533777][ T24] usb usb9-port1: unable to enumerate USB device [ 1608.590222][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1608.635016][T16210] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 1608.693804][T16210] usb 4-1: config 4 has no interface number 0 [ 1608.719495][T16210] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1608.780485][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.806907][T16210] usb 4-1: Product: syz [ 1608.812356][T16210] usb 4-1: Manufacturer: syz [ 1608.817250][T16210] usb 4-1: SerialNumber: syz [ 1608.838377][T16210] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1609.091993][T25042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1609.124843][ T9] IPVS: starting estimator thread 0... [ 1609.183109][T16210] vp7045: USB control message 'out' went wrong. [ 1609.190304][T16210] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1609.215474][T16210] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1609.236438][T25058] IPVS: using max 24 ests per chain, 57600 per kthread [ 1609.252481][T16210] usb 4-1: USB disconnect, device number 92 [ 1609.944823][T16210] usb 5-1: USB disconnect, device number 91 [ 1610.157085][ T5831] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1610.336560][ T5831] usb 9-1: Using ep0 maxpacket: 32 [ 1610.346948][ T5831] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1610.355256][ T5831] usb 9-1: config 0 has no interface number 0 [ 1610.361499][ T5831] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1610.373208][ T5831] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1610.376549][T16210] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1610.392784][ T5831] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1610.407031][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.415050][ T5831] usb 9-1: Product: syz [ 1610.419574][ T5831] usb 9-1: Manufacturer: syz [ 1610.424199][ T5831] usb 9-1: SerialNumber: syz [ 1610.431768][ T5831] usb 9-1: config 0 descriptor?? [ 1610.538041][T16210] usb 5-1: Using ep0 maxpacket: 32 [ 1610.563282][T16210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.596164][T16210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.621782][T16210] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1610.634744][T16210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.658390][T16210] usb 5-1: config 0 descriptor?? [ 1610.673363][T16210] hub 5-1:0.0: USB hub found [ 1610.856383][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1610.918087][T16210] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1610.936143][T25083] input: syz1 as /devices/virtual/input/input187 [ 1610.977329][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5657'. [ 1611.008143][T25083] binder_alloc: 25080: binder_alloc_buf, no vma [ 1611.040291][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1611.054377][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.066003][ T5831] appletouch 9-1:0.85: Geyser mode initialized. [ 1611.082972][ T5831] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input186 [ 1611.094605][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1611.116920][ T24] usb 6-1: config 1 has no interface number 0 [ 1611.123085][ T24] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1611.151945][ T24] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1611.177026][T24965] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1611.199877][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1611.219430][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.252266][ T24] usb 6-1: Product: syz [ 1611.263487][ T24] usb 6-1: Manufacturer: syz [ 1611.273443][ T5831] usb 9-1: USB disconnect, device number 103 [ 1611.288022][ T24] usb 6-1: SerialNumber: syz [ 1611.293058][T25086] futex_wake_op: syz.7.5659 tries to shift op by 32; fix this program [ 1611.347254][T24965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.381719][T24965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.409274][ T5831] appletouch 9-1:0.85: input: appletouch disconnected [ 1611.436569][T24965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1611.486377][T24965] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1611.526413][T24965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.555609][T24965] usb 4-1: config 0 descriptor?? [ 1611.746262][T16210] usbhid 5-1:0.0: can't add hid device: -71 [ 1611.756503][T16210] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1611.788888][T16210] usb 5-1: USB disconnect, device number 92 [ 1611.805829][T25077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.831262][T25077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.861761][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5655'. [ 1611.884503][ T5834] usb 6-1: USB disconnect, device number 63 [ 1611.914639][T25091] FAULT_INJECTION: forcing a failure. [ 1611.914639][T25091] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.918298][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1611.918328][ T30] audit: type=1326 audit(1748604164.424:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1611.932054][T25091] CPU: 0 UID: 0 PID: 25091 Comm: syz.8.5660 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1611.932088][T25091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1611.932105][T25091] Call Trace: [ 1611.932115][T25091] [ 1611.932126][T25091] dump_stack_lvl+0x189/0x250 [ 1611.932169][T25091] ? __pfx____ratelimit+0x10/0x10 [ 1611.932197][T25091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1611.932235][T25091] ? __pfx__printk+0x10/0x10 [ 1611.932264][T25091] ? __pfx_snprintf+0x10/0x10 [ 1611.932307][T25091] should_fail_ex+0x414/0x560 [ 1611.932341][T25091] should_failslab+0xa8/0x100 [ 1611.932375][T25091] __kmalloc_noprof+0xcb/0x4f0 [ 1611.932406][T25091] ? aa_label_asxprint+0x70/0x130 [ 1611.932446][T25091] aa_label_asxprint+0x70/0x130 [ 1611.932484][T25091] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 1611.932517][T25091] security_lsmprop_to_secctx+0x96/0x2c0 [ 1611.932550][T25091] audit_log_task_context+0xff/0x240 [ 1611.932598][T25091] ? __pfx_audit_log_task_context+0x10/0x10 [ 1611.932635][T25091] ? __pfx_audit_log_format+0x10/0x10 [ 1611.932669][T25091] ? audit_log_start+0x6bf/0x870 [ 1611.932713][T25091] audit_log_task+0x190/0x3c0 [ 1611.932747][T25091] ? __pfx_audit_log_task+0x10/0x10 [ 1611.932782][T25091] ? __pfx_migrate_enable+0x10/0x10 [ 1611.932824][T25091] audit_seccomp+0x86/0x190 [ 1611.932859][T25091] __seccomp_filter+0x9aa/0x1a40 [ 1611.932904][T25091] ? __pfx___seccomp_filter+0x10/0x10 [ 1611.932932][T25091] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1611.932961][T25091] ? __pfx_vfs_write+0x10/0x10 [ 1611.932992][T25091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1611.933025][T25091] ? __fget_files+0x3a0/0x420 [ 1611.933077][T25091] ? __pfx_ksys_write+0x10/0x10 [ 1611.933105][T25091] ? __secure_computing+0xe2/0x2a0 [ 1611.933139][T25091] syscall_trace_enter+0xaa/0x160 [ 1611.933169][T25091] do_syscall_64+0xd3/0x3b0 [ 1611.933196][T25091] ? lockdep_hardirqs_on+0x9c/0x150 [ 1611.933221][T25091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.933245][T25091] ? clear_bhb_loop+0x60/0xb0 [ 1611.933274][T25091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.933298][T25091] RIP: 0033:0x7f401db8e969 [ 1611.933321][T25091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.933342][T25091] RSP: 002b:00007f401b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 1611.933369][T25091] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 1611.933387][T25091] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1611.933403][T25091] RBP: 00007f401b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.933419][T25091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.933434][T25091] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007f401dedfa28 [ 1611.933470][T25091] [ 1611.933482][T25091] audit: error in audit_log_task_context [ 1611.968215][ T30] audit: type=1326 audit(1748604164.424:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1612.278110][T24965] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xe [ 1612.286366][T24965] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1612.297225][T24965] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 1612.344720][T24965] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1612.371689][T24965] usb 4-1: USB disconnect, device number 93 [ 1612.433679][ T30] audit: type=1326 audit(1748604164.424:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401db8d2d0 code=0x7ffc0000 [ 1612.530795][T25095] fido_id[25095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1612.546093][ T30] audit: type=1326 audit(1748604164.424:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f401db8d41f code=0x7ffc0000 [ 1612.645569][ T30] audit: type=1326 audit(1748604164.424:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1612.725790][ T30] audit: type=1326 audit(1748604164.494:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f401db8d37c code=0x7ffc0000 [ 1612.756420][ T5834] usb 9-1: new low-speed USB device number 104 using dummy_hcd [ 1612.784613][ T30] audit: type=1326 audit(1748604164.494:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f401db8d41f code=0x7ffc0000 [ 1612.827617][ T30] audit: type=1326 audit(1748604164.494:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f401db8d5ca code=0x7ffc0000 [ 1612.876413][ T30] audit: type=1326 audit(1748604164.494:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.8.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1612.906453][T16210] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1612.955274][ T5834] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1612.975291][ T5834] usb 9-1: config 0 has no interface number 0 [ 1612.985884][ T5834] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1613.003156][ T5834] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1613.016523][ T5834] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1613.034222][ T5834] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1613.045998][ T5834] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1613.063030][ T5834] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1613.082519][T16210] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1613.090490][T16210] usb 6-1: can't read configurations, error -61 [ 1613.107170][ T5834] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1613.126482][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.158241][ T5834] usb 9-1: config 0 descriptor?? [ 1613.164824][T25094] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1613.179452][T25094] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1613.203616][ T5834] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1613.226651][T16210] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1613.379856][T16210] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1613.387796][T16210] usb 6-1: can't read configurations, error -61 [ 1613.394379][T16210] usb usb6-port1: attempt power cycle [ 1613.546495][ T5834] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1613.706773][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 1613.731454][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1613.744789][ T5834] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1613.755852][T16210] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1613.772820][ T5834] usb 4-1: can't read configurations, error -71 [ 1613.814961][T16210] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1613.822972][T16210] usb 6-1: can't read configurations, error -61 [ 1613.966625][T16210] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1613.989871][T16210] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1613.997724][T16210] usb 6-1: can't read configurations, error -61 [ 1614.004487][T16210] usb usb6-port1: unable to enumerate USB device [ 1614.106559][ T5831] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1614.266772][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 1614.282203][ T5831] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.296257][ T5831] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.314462][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1614.323822][ T5831] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1614.337265][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.356092][ T5831] usb 5-1: config 0 descriptor?? [ 1614.590507][T16210] usb 5-1: USB disconnect, device number 93 [ 1615.195716][T16210] usb 9-1: USB disconnect, device number 104 [ 1615.264854][T16210] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1615.626700][ T5831] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1615.696394][T16210] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1615.800674][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.821421][ T5831] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1615.848558][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.869472][ T5831] usb 5-1: config 0 descriptor?? [ 1615.884743][T16210] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1615.890782][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 1615.910326][T16210] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.940182][T16210] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1615.974749][T16210] usb 9-1: config 1 has no interface number 0 [ 1615.989405][T16210] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1616.020780][T16210] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1616.113393][T16210] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1616.136360][T16210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.144429][T16210] usb 9-1: Product: syz [ 1616.162827][T16210] usb 9-1: Manufacturer: syz [ 1616.186543][T16210] usb 9-1: SerialNumber: syz [ 1616.302301][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1616.313898][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 1616.331704][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1616.348716][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 1616.362998][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 1616.379543][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 1616.421078][ T5831] pwc: recv_control_msg error -32 req 02 val 2000 [ 1616.446125][ T5831] pwc: recv_control_msg error -32 req 02 val 2100 [ 1616.646505][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1616.702874][T25143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.715354][T25143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.725942][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5672'. [ 1616.789641][T16210] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1616.829001][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1616.845402][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1616.863262][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.873500][ T24] usb 4-1: Product: syz [ 1616.878877][ T24] usb 4-1: Manufacturer: syz [ 1616.883895][ T24] usb 4-1: SerialNumber: syz [ 1616.899310][ T24] usb 4-1: config 0 descriptor?? [ 1616.930123][T16210] usb 6-1: device descriptor read/64, error -71 [ 1616.937769][T24965] usb 9-1: USB disconnect, device number 105 [ 1616.984459][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1617.001723][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1617.011439][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1617.018659][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1617.025935][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1617.033255][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1617.061910][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1617.077992][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1617.094235][ T5831] pwc: Registered as video103. [ 1617.116904][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input188 [ 1617.150962][ T5831] usb 5-1: USB disconnect, device number 94 [ 1617.186436][T16210] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 1617.190564][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1617.350080][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1617.350099][ T30] audit: type=1326 audit(1748604169.864:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25152 comm="syz.4.5680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x0 [ 1617.378585][T16210] usb 6-1: device descriptor read/64, error -71 [ 1617.458913][T25155] netlink: 'syz.4.5681': attribute type 3 has an invalid length. [ 1617.487033][T16210] usb usb6-port1: attempt power cycle [ 1617.592155][T25158] FAULT_INJECTION: forcing a failure. [ 1617.592155][T25158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.608196][T25158] CPU: 1 UID: 0 PID: 25158 Comm: syz.4.5683 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1617.608226][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.608240][T25158] Call Trace: [ 1617.608249][T25158] [ 1617.608259][T25158] dump_stack_lvl+0x189/0x250 [ 1617.608301][T25158] ? __pfx____ratelimit+0x10/0x10 [ 1617.608327][T25158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1617.608360][T25158] ? __pfx__printk+0x10/0x10 [ 1617.608384][T25158] ? __might_fault+0xb0/0x130 [ 1617.608425][T25158] should_fail_ex+0x414/0x560 [ 1617.608455][T25158] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 1617.608484][T25158] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1617.608514][T25158] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1617.608536][T25158] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1617.608574][T25158] ? read_tsc+0x9/0x20 [ 1617.608592][T25158] ? ktime_get+0x1cb/0x1f0 [ 1617.608628][T25158] ? __lock_acquire+0xab9/0xd20 [ 1617.608658][T25158] ? fpu__alloc_mathframe+0xad/0x130 [ 1617.608685][T25158] get_sigframe+0x58d/0x7d0 [ 1617.608713][T25158] ? __pfx_get_sigframe+0x10/0x10 [ 1617.608738][T25158] ? irqentry_exit+0x74/0x90 [ 1617.608770][T25158] x64_setup_rt_frame+0x15b/0xd40 [ 1617.608801][T25158] ? _raw_spin_unlock_irq+0x29/0x50 [ 1617.608823][T25158] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1617.608842][T25158] ? get_signal+0x1151/0x1340 [ 1617.608876][T25158] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1617.608910][T25158] arch_do_signal_or_restart+0x3d7/0x750 [ 1617.608933][T25158] ? __fget_files+0x3a0/0x420 [ 1617.608967][T25158] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1617.609006][T25158] ? exit_to_user_mode_loop+0x40/0x110 [ 1617.609035][T25158] exit_to_user_mode_loop+0x75/0x110 [ 1617.609061][T25158] do_syscall_64+0x2bd/0x3b0 [ 1617.609095][T25158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.609115][T25158] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1617.609137][T25158] ? clear_bhb_loop+0x60/0xb0 [ 1617.609164][T25158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.609185][T25158] RIP: 0033:0x7f2570b8d41f [ 1617.609204][T25158] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1617.609224][T25158] RSP: 002b:00007f256e9f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1617.609247][T25158] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f2570b8d41f [ 1617.609261][T25158] RDX: 0000000000000001 RSI: 00007f256e9f6090 RDI: 0000000000000004 [ 1617.609275][T25158] RBP: 00007f256e9f6090 R08: 0000000000000000 R09: 00007f256e9f5df7 [ 1617.609290][T25158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1617.609303][T25158] R13: 0000000000000000 R14: 00007f2570db5fa0 R15: 00007f2570edfa28 [ 1617.609336][T25158] [ 1617.946639][T16210] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1618.013094][T16210] usb 6-1: device descriptor read/8, error -71 [ 1618.226701][T20918] usb 9-1: new low-speed USB device number 106 using dummy_hcd [ 1618.254528][T25160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1618.264163][T16210] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1618.287039][T16210] usb 6-1: device descriptor read/8, error -71 [ 1618.388433][T20918] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1618.401998][T16210] usb usb6-port1: unable to enumerate USB device [ 1618.408628][T20918] usb 9-1: config 0 has no interface number 0 [ 1618.414793][T20918] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1618.426772][T20918] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1618.438138][T20918] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1618.449886][T20918] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1618.461097][T20918] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1618.473703][T20918] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1618.487145][T20918] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1618.496217][T20918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.507369][T20918] usb 9-1: config 0 descriptor?? [ 1618.513370][T25161] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1618.520858][T25161] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1618.535442][T20918] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1618.641925][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1619.004051][T24965] usb 4-1: USB disconnect, device number 96 [ 1619.126563][T20918] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1619.292603][T20918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1619.318882][T20918] usb 5-1: can't read configurations, error -61 [ 1619.476640][T20918] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1619.653994][T20918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1619.661985][T20918] usb 5-1: can't read configurations, error -61 [ 1619.687533][T20918] usb usb5-port1: attempt power cycle [ 1619.736238][T25178] netlink: 'syz.5.5688': attribute type 1 has an invalid length. [ 1619.882122][T25180] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1619.903730][T25180] bond0: (slave bond19): making interface the new active one [ 1619.915962][T25180] bond0: (slave bond19): Enslaving as an active interface with an up link [ 1620.046938][T20918] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1620.080020][T20918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1620.088199][T20918] usb 5-1: can't read configurations, error -61 [ 1620.216595][T20918] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1620.256433][T20918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1620.266814][T20918] usb 5-1: can't read configurations, error -61 [ 1620.276252][T20918] usb usb5-port1: unable to enumerate USB device [ 1620.625631][ T24] usb 9-1: USB disconnect, device number 106 [ 1620.638284][ T24] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1620.648747][T24965] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1620.826391][T24965] usb 6-1: Using ep0 maxpacket: 32 [ 1620.833525][T24965] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1620.842918][T24965] usb 6-1: config 0 has no interface number 0 [ 1620.852381][T24965] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1620.863651][T24965] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1620.873301][T24965] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1620.883826][T24965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.893073][T24965] usb 6-1: Product: syz [ 1620.897865][T24965] usb 6-1: Manufacturer: syz [ 1620.902701][T24965] usb 6-1: SerialNumber: syz [ 1620.923557][T24965] usb 6-1: config 0 descriptor?? [ 1621.006415][ T24] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1621.166585][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1621.179663][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1621.197349][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1621.207489][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1621.217695][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1621.228058][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.241412][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1621.250712][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.468160][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 1621.489539][ T24] usbtmc 9-1:16.0: can't read capabilities [ 1621.557019][T24965] appletouch 6-1:0.85: Geyser mode initialized. [ 1621.566681][T24965] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input189 [ 1621.675898][T25194] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1621.695013][T25194] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5693'. [ 1621.722728][T25194] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5693'. [ 1621.747887][T24965] usb 9-1: USB disconnect, device number 107 [ 1621.792610][ T24] usb 6-1: USB disconnect, device number 72 [ 1621.875889][ T24] appletouch 6-1:0.85: input: appletouch disconnected [ 1622.298553][T24965] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1622.386804][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1622.523893][T24965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.546061][T24965] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1622.556089][T24965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.596871][T24965] usb 5-1: config 0 descriptor?? [ 1622.633850][T24965] pwc: Askey VC010 type 2 USB webcam detected. [ 1622.733685][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1622.749123][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1622.829352][T25201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.858609][T25201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.906407][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1622.916421][ T5834] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1622.936739][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.973883][T25202] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1622.987067][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1623.103761][T24965] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1623.109264][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 1623.125999][T24965] pwc: recv_control_msg error -32 req 02 val 2700 [ 1623.151883][T24965] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1623.172181][T24965] pwc: recv_control_msg error -32 req 04 val 1000 [ 1623.187071][ T5834] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1623.202168][ T5834] usb 6-1: config 0 has no interface number 0 [ 1623.216679][ T5834] usb 6-1: too many endpoints for config 0 interface 166 altsetting 149: 77, using maximum allowed: 30 [ 1623.242212][ T5834] usb 6-1: config 0 interface 166 altsetting 149 has an endpoint descriptor with address 0x74, changing to 0x4 [ 1623.266853][ T5834] usb 6-1: config 0 interface 166 altsetting 149 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1623.300363][T24965] pwc: recv_control_msg error -32 req 04 val 1300 [ 1623.308587][ T5834] usb 6-1: config 0 interface 166 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 77 [ 1623.338280][ T5834] usb 6-1: config 0 interface 166 has no altsetting 0 [ 1623.355008][ T5834] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1623.366383][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.392146][ T5834] usb 6-1: Product: syz [ 1623.394106][T24965] pwc: recv_control_msg error -32 req 04 val 1400 [ 1623.412019][ T5834] usb 6-1: Manufacturer: syz [ 1623.452953][ T5834] usb 6-1: SerialNumber: syz [ 1623.470088][ T5834] usb 6-1: config 0 descriptor?? [ 1623.522658][ T5834] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1623.586104][T25225] netlink: 'syz.7.5701': attribute type 10 has an invalid length. [ 1623.611425][T25225] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5701'. [ 1623.622622][T24965] pwc: recv_control_msg error -71 req 02 val 2100 [ 1623.646450][T24965] pwc: recv_control_msg error -71 req 04 val 1500 [ 1623.660258][T25225] batadv0: entered promiscuous mode [ 1623.674520][T24965] pwc: recv_control_msg error -71 req 02 val 2500 [ 1623.692059][T25225] batadv0: entered allmulticast mode [ 1623.708015][T24965] pwc: recv_control_msg error -71 req 02 val 2400 [ 1623.728289][T25225] bond0: (slave batadv0): Releasing backup interface [ 1623.740691][T24965] pwc: recv_control_msg error -71 req 02 val 2600 [ 1623.745566][T25207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.755541][T25225] bridge0: port 3(batadv0) entered blocking state [ 1623.768453][T24965] pwc: recv_control_msg error -71 req 02 val 2900 [ 1623.773928][T25207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.782762][T25225] bridge0: port 3(batadv0) entered disabled state [ 1623.790947][T24965] pwc: recv_control_msg error -71 req 02 val 2800 [ 1623.809966][T25207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.810912][T24965] pwc: recv_control_msg error -71 req 04 val 1100 [ 1623.873294][T24965] pwc: recv_control_msg error -71 req 04 val 1200 [ 1623.921253][T24965] pwc: Registered as video103. [ 1623.932568][T24965] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input191 [ 1624.098882][T24965] usb 5-1: USB disconnect, device number 99 [ 1624.143067][T25233] FAULT_INJECTION: forcing a failure. [ 1624.143067][T25233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.172579][T19000] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1624.182074][T19000] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1624.227590][T25233] CPU: 1 UID: 0 PID: 25233 Comm: syz.8.5704 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1624.227623][T25233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1624.227638][T25233] Call Trace: [ 1624.227647][T25233] [ 1624.227656][T25233] dump_stack_lvl+0x189/0x250 [ 1624.227697][T25233] ? __pfx____ratelimit+0x10/0x10 [ 1624.227722][T25233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.227756][T25233] ? __pfx__printk+0x10/0x10 [ 1624.227780][T25233] ? __might_fault+0xb0/0x130 [ 1624.227820][T25233] should_fail_ex+0x414/0x560 [ 1624.227867][T25233] _copy_from_iter+0x1db/0x16f0 [ 1624.227901][T25233] ? rcu_is_watching+0x15/0xb0 [ 1624.227931][T25233] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1624.227961][T25233] ? __pfx__copy_from_iter+0x10/0x10 [ 1624.227993][T25233] ? __build_skb_around+0x257/0x3e0 [ 1624.228027][T25233] ? netlink_sendmsg+0x642/0xb30 [ 1624.228055][T25233] ? skb_put+0x11b/0x210 [ 1624.228080][T25233] netlink_sendmsg+0x6b2/0xb30 [ 1624.228111][T25233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.228146][T25233] ? aa_sock_msg_perm+0x94/0x160 [ 1624.228173][T25233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1624.228195][T25233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.228222][T25233] __sock_sendmsg+0x21c/0x270 [ 1624.228242][T25233] ____sys_sendmsg+0x505/0x830 [ 1624.228271][T25233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1624.228315][T25233] ? import_iovec+0x74/0xa0 [ 1624.228350][T25233] ___sys_sendmsg+0x21f/0x2a0 [ 1624.228379][T25233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1624.228433][T25233] ? __fget_files+0x2a/0x420 [ 1624.228463][T25233] ? __fget_files+0x3a0/0x420 [ 1624.228502][T25233] __x64_sys_sendmsg+0x19b/0x260 [ 1624.228531][T25233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1624.228562][T25233] ? __pfx_ksys_write+0x10/0x10 [ 1624.228582][T25233] ? rcu_is_watching+0x15/0xb0 [ 1624.228616][T25233] ? do_syscall_64+0xbe/0x3b0 [ 1624.228644][T25233] do_syscall_64+0xfa/0x3b0 [ 1624.228669][T25233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.228684][T25233] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1624.228700][T25233] ? clear_bhb_loop+0x60/0xb0 [ 1624.228718][T25233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.228737][T25233] RIP: 0033:0x7f401db8e969 [ 1624.228758][T25233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.228778][T25233] RSP: 002b:00007f401b9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.228800][T25233] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 1624.228817][T25233] RDX: 0000000020000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1624.228839][T25233] RBP: 00007f401b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.228849][T25233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.228859][T25233] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007f401dedfa28 [ 1624.228885][T25233] [ 1624.520743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.641747][T20664] usb 6-1: Failed to submit usb control message: -110 [ 1624.649345][T20664] usb 6-1: unable to send the bmi data to the device: -110 [ 1624.659750][T20664] usb 6-1: unable to get target info from device [ 1624.666329][T20664] usb 6-1: could not get target info (-110) [ 1624.672468][T20664] usb 6-1: could not probe fw (-110) [ 1625.454379][T20918] usb 6-1: USB disconnect, device number 73 [ 1625.466498][T24965] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1625.666600][T24965] usb 9-1: Using ep0 maxpacket: 32 [ 1625.682864][T24965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.695985][T24965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.716021][T24965] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1625.767822][T24965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.783191][T24965] usb 9-1: config 0 descriptor?? [ 1626.236826][T24965] hub 9-1:0.0: USB hub found [ 1626.303910][T24965] hub 9-1:0.0: 1 port detected [ 1626.899889][T20918] usb 4-1: USB disconnect, device number 97 [ 1626.957913][ T5831] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1627.156425][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1627.163669][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.187218][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.212450][ T5831] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1627.227502][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.263545][ T5831] usb 5-1: config 0 descriptor?? [ 1627.295745][ T5831] hub 5-1:0.0: USB hub found [ 1627.317373][T24965] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1627.334536][T24965] usb 9-1: USB disconnect, device number 108 [ 1627.341736][ T5909] usb 9-1: Failed to suspend device, error -19 [ 1627.510701][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1627.634653][T25282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5718'. [ 1627.725846][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.737031][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1627.746197][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.777704][ T24] usb 6-1: config 0 descriptor?? [ 1627.804920][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1627.820188][ T5831] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1628.023943][T25271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.073731][T25271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.331635][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1628.339193][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1628.354640][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1628.380588][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1628.446464][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1628.490669][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1628.501926][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 1628.509467][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1628.521588][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 1628.603532][ T5831] usb 5-1: USB disconnect, device number 100 [ 1628.754615][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1628.765929][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1628.793704][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1628.864103][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1628.896563][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1628.977188][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1628.985587][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1629.039066][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1629.051985][ T24] pwc: Registered as video103. [ 1629.083681][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input192 [ 1629.158907][ T24] usb 6-1: USB disconnect, device number 74 [ 1630.830952][T25309] pim6reg1: entered promiscuous mode [ 1630.841109][T25309] pim6reg1: entered allmulticast mode [ 1631.835182][T25321] netlink: 'syz.4.5731': attribute type 5 has an invalid length. [ 1631.937194][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5730'. [ 1632.209802][T25338] FAULT_INJECTION: forcing a failure. [ 1632.209802][T25338] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.222632][T24925] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1632.231076][T25338] CPU: 0 UID: 0 PID: 25338 Comm: syz.8.5735 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1632.231107][T25338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1632.231122][T25338] Call Trace: [ 1632.231129][T25338] [ 1632.231136][T25338] dump_stack_lvl+0x189/0x250 [ 1632.231165][T25338] ? __pfx____ratelimit+0x10/0x10 [ 1632.231183][T25338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1632.231210][T25338] ? __pfx__printk+0x10/0x10 [ 1632.231229][T25338] ? __pfx___might_resched+0x10/0x10 [ 1632.231249][T25338] ? fs_reclaim_acquire+0x7d/0x100 [ 1632.231276][T25338] should_fail_ex+0x414/0x560 [ 1632.231298][T25338] should_failslab+0xa8/0x100 [ 1632.231321][T25338] __kmalloc_cache_noprof+0x70/0x3d0 [ 1632.231341][T25338] ? hugetlb_vm_op_open+0x2e2/0x550 [ 1632.231363][T25338] hugetlb_vm_op_open+0x2e2/0x550 [ 1632.231382][T25338] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 1632.231403][T25338] __split_vma+0x4ab/0x9b0 [ 1632.231428][T25338] ? __pfx___split_vma+0x10/0x10 [ 1632.231459][T25338] vma_modify+0x327/0x460 [ 1632.231478][T25338] vma_modify_flags+0x1e8/0x230 [ 1632.231497][T25338] ? __pfx_vma_modify_flags+0x10/0x10 [ 1632.231512][T25338] ? aa_file_perm+0x3e7/0xed0 [ 1632.231548][T25338] mprotect_fixup+0x400/0x9b0 [ 1632.231569][T25338] ? __pfx_mprotect_fixup+0x10/0x10 [ 1632.231583][T25338] ? common_file_perm+0x199/0x200 [ 1632.231606][T25338] do_mprotect_pkey+0x8cd/0xce0 [ 1632.231624][T25338] ? ksys_write+0x1cb/0x250 [ 1632.231649][T25338] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1632.231685][T25338] ? __pfx_ksys_write+0x10/0x10 [ 1632.231708][T25338] __x64_sys_mprotect+0x80/0x90 [ 1632.231724][T25338] do_syscall_64+0xfa/0x3b0 [ 1632.231741][T25338] ? lockdep_hardirqs_on+0x9c/0x150 [ 1632.231759][T25338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.231774][T25338] ? clear_bhb_loop+0x60/0xb0 [ 1632.231792][T25338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.231807][T25338] RIP: 0033:0x7f401db8e969 [ 1632.231822][T25338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.231836][T25338] RSP: 002b:00007f401b9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1632.231853][T25338] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 1632.231865][T25338] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 1632.231875][T25338] RBP: 00007f401b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.231885][T25338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.231895][T25338] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007f401dedfa28 [ 1632.231918][T25338] [ 1632.232789][T25338] HugeTLB: unable to allocate vma specific lock [ 1632.366430][ T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1632.468507][T24925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1632.638639][T24925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.656864][ T24] usb 6-1: no configurations [ 1632.661852][ T24] usb 6-1: can't read configurations, error -22 [ 1632.737735][T24925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1632.760287][T24925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.805936][T24925] usb 5-1: config 0 descriptor?? [ 1632.806571][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1633.007056][ T24] usb 6-1: no configurations [ 1633.011986][ T24] usb 6-1: can't read configurations, error -22 [ 1633.027493][ T24] usb usb6-port1: attempt power cycle [ 1633.048622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1633.247262][T24925] isku 0003:1E7D:319C.0046: unknown main item tag 0x0 [ 1633.263606][T24925] isku 0003:1E7D:319C.0046: item fetching failed at offset 5/7 [ 1633.317761][T24925] isku 0003:1E7D:319C.0046: parse failed [ 1633.343917][T24925] isku 0003:1E7D:319C.0046: probe with driver isku failed with error -22 [ 1633.378952][ T24] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1633.413825][ T24] usb 6-1: no configurations [ 1633.418710][ T24] usb 6-1: can't read configurations, error -22 [ 1633.442535][T25321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.461584][T25321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.546400][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1633.594376][ T24] usb 6-1: no configurations [ 1633.599258][ T24] usb 6-1: can't read configurations, error -22 [ 1633.628413][ T24] usb usb6-port1: unable to enumerate USB device [ 1633.668402][T24925] usb 5-1: USB disconnect, device number 101 [ 1634.234901][T25350] binder: 25346:25350 ioctl 4018620d 0 returned -22 [ 1634.493205][ T30] audit: type=1326 audit(1748604187.004:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25351 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1634.528191][ T24] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 1634.597734][ T30] audit: type=1326 audit(1748604187.004:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25351 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1634.631498][ T30] audit: type=1326 audit(1748604187.004:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25351 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1634.669196][ T30] audit: type=1326 audit(1748604187.004:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25351 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1634.741294][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1634.755111][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 1634.763222][ T30] audit: type=1326 audit(1748604187.004:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25351 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1634.790560][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1634.803446][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1634.819580][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1634.833536][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.843231][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.863116][ T24] usb 9-1: Product: syz [ 1634.871107][ T24] usb 9-1: Manufacturer: 겇류䔐撛⌱ [ 1634.877424][ T24] usb 9-1: SerialNumber: syz [ 1634.913612][T25350] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1634.996454][ T5909] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1635.169521][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 1635.238601][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.255094][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.270829][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1635.281834][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.293888][ T5909] usb 4-1: config 0 descriptor?? [ 1635.304939][ T5909] hub 4-1:0.0: USB hub found [ 1635.327158][T24925] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1635.508444][T24925] usb 5-1: Using ep0 maxpacket: 32 [ 1635.538373][T24925] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1635.573329][T24925] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1635.616731][T24925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1635.640933][T24925] usb 5-1: config 1 has no interface number 0 [ 1635.652057][T24925] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1635.695325][T24925] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1635.724808][T24925] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1635.725035][ T5909] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1635.735418][T24925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.820373][T24925] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1635.906812][T20918] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1635.943582][T25354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.955366][T25354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.006581][T24925] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1636.036493][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 1636.051077][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1636.070571][T20918] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1636.086714][T20918] usb 6-1: can't read configurations, error -22 [ 1636.091299][ T5909] usb 4-1: USB disconnect, device number 98 [ 1636.216541][T20918] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1636.329384][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5748'. [ 1636.371175][T20918] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1636.388598][T20918] usb 6-1: can't read configurations, error -22 [ 1636.405730][T20918] usb usb6-port1: attempt power cycle [ 1636.491121][T24925] usb 5-1: USB disconnect, device number 102 [ 1636.503454][T24925] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1636.756491][T20918] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1636.780438][T20918] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1636.792844][T20918] usb 6-1: can't read configurations, error -22 [ 1636.836992][ T5909] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1636.918405][ T24] cdc_ncm 9-1:1.0: NCM or ECM functional descriptors missing [ 1636.955413][T20918] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1636.963592][ T24] cdc_ncm 9-1:1.0: bind() failure [ 1637.026428][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 1637.032137][ T24] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1637.035395][T20918] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1637.052268][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1637.066320][ T24] cdc_ncm 9-1:1.1: bind() failure [ 1637.082055][T20918] usb 6-1: can't read configurations, error -22 [ 1637.085536][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1637.103863][ T24] usb 9-1: USB disconnect, device number 109 [ 1637.142429][T20918] usb usb6-port1: unable to enumerate USB device [ 1637.142878][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1637.214021][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1637.245361][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1637.339408][ T5909] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1637.350648][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.358779][ T5909] usb 4-1: Product: syz [ 1637.363025][ T5909] usb 4-1: Manufacturer: syz [ 1637.369171][ T5909] usb 4-1: SerialNumber: syz [ 1637.391840][ T5909] usb 4-1: config 0 descriptor?? [ 1637.560808][T20918] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1637.656718][ T24] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1637.720088][T20918] usb 5-1: config 0 has an invalid interface number: 39 but max is 0 [ 1637.728808][T20918] usb 5-1: config 0 has no interface number 0 [ 1637.735120][T20918] usb 5-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1637.752246][T20918] usb 5-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1637.761411][T20918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.769724][T20918] usb 5-1: Product: syz [ 1637.773928][T20918] usb 5-1: Manufacturer: syz [ 1637.778665][T20918] usb 5-1: SerialNumber: syz [ 1637.787642][T20918] usb 5-1: config 0 descriptor?? [ 1637.812840][ T5909] input input193: Device does not respond to id packet M [ 1637.836756][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1637.848144][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.860419][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.870826][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1637.880248][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.893251][ T24] usb 9-1: config 0 descriptor?? [ 1637.903141][ T24] hub 9-1:0.0: USB hub found [ 1638.002265][ T30] audit: type=1326 audit(1748604190.514:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25390 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1638.025302][ T30] audit: type=1326 audit(1748604190.514:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25390 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1638.051666][T25392] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5755'. [ 1638.053025][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1638.074324][ T30] audit: type=1326 audit(1748604190.514:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25390 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1638.085878][ T5909] input input193: Device does not respond to id packet P [ 1638.111419][ T30] audit: type=1326 audit(1748604190.544:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25390 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1638.134771][ T24] hub 9-1:0.0: 1 port detected [ 1638.140790][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1638.147359][ T5909] input input193: Device does not respond to id packet B [ 1638.155324][T20918] usb 5-1: USB disconnect, device number 103 [ 1638.157787][ T30] audit: type=1326 audit(1748604190.544:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25390 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2570b8e969 code=0x7ffc0000 [ 1638.157985][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1638.198330][ T5909] input input193: Device does not respond to id packet N [ 1638.218213][T16961] udevd[16961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1638.413122][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1638.433102][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1638.445952][ T5909] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1638.477547][ T5909] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input193 [ 1638.519711][ T5909] usb 4-1: USB disconnect, device number 99 [ 1639.922011][ T5909] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 1639.936683][ T5831] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1640.086549][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 1640.099142][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.123885][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.216035][ T5831] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1640.304559][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.447012][ T5831] usb 4-1: config 0 descriptor?? [ 1640.485301][ T5831] hub 4-1:0.0: USB hub found [ 1640.591694][ T5909] usb 9-1: USB disconnect, device number 110 [ 1640.902184][ T5831] hub 4-1:0.0: 1 port detected [ 1641.587706][ T5831] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1641.595445][ T5831] usb 4-1: Failed to suspend device, error -71 [ 1641.602287][ T24] usb 4-1: USB disconnect, device number 100 [ 1641.677500][T24925] usb 9-1: new full-speed USB device number 111 using dummy_hcd [ 1641.858461][T24925] usb 9-1: config 0 has an invalid interface number: 39 but max is 0 [ 1641.858494][T24925] usb 9-1: config 0 has no interface number 0 [ 1641.901866][T24925] usb 9-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1641.914033][T24925] usb 9-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1641.914082][T24925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.914099][T24925] usb 9-1: Product: syz [ 1641.914111][T24925] usb 9-1: Manufacturer: syz [ 1641.914125][T24925] usb 9-1: SerialNumber: syz [ 1641.919396][T24925] usb 9-1: config 0 descriptor?? [ 1642.141893][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1642.141913][ T30] audit: type=1326 audit(1748604194.654:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.141962][ T30] audit: type=1326 audit(1748604194.654:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143082][ T30] audit: type=1326 audit(1748604194.654:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143137][ T30] audit: type=1326 audit(1748604194.654:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143190][ T30] audit: type=1326 audit(1748604194.654:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143556][ T30] audit: type=1326 audit(1748604194.654:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143780][ T30] audit: type=1326 audit(1748604194.654:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.143974][ T30] audit: type=1326 audit(1748604194.654:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.151452][ T30] audit: type=1326 audit(1748604194.664:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f401db90887 code=0x7ffc0000 [ 1642.151966][ T30] audit: type=1326 audit(1748604194.664:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25434 comm="syz.8.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401db8e969 code=0x7ffc0000 [ 1642.198427][T25435] netlink: 452 bytes leftover after parsing attributes in process `syz.8.5769'. [ 1642.329293][T24925] usb 9-1: USB disconnect, device number 111 [ 1642.372917][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.430096][T16298] udevd[16298]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1642.546462][ T5831] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1642.696452][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 1642.700079][ T5831] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1642.700116][ T5831] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1642.700143][ T5831] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1642.704779][ T5831] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1642.704813][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.704838][ T5831] usb 6-1: Product: ఝ [ 1642.704855][ T5831] usb 6-1: Manufacturer: ຺돭奟漩ⅽꮆ૦끿꯴㯶䯰Ϛ岘㵖Ⳏ떹禟拋᐀붝챷ꄪ㶒笃㇚Ꟗꮁ⼇仯ꋱ隚隳讗䪍擂悟﹍琜탭぀ꋬ韽뼻伬㎸♑㩬砝拓꨽合覮售︩㰍鈟ᥰ☟婺鍕 [ 1642.704883][ T5831] usb 6-1: SerialNumber: 逌㽒㸱޶탹ꪜ⧏椝讔쨋騀꒗썗㦬∍措鮐色ꢄﻊ鸁㍰﵆鿊ﱬ⽲但幄駴튲렂鹀曥Ս쮆ᙍ☃ﴝ날樄ꎭࣴ쓷뒁᠁㦑㝀ꜛ୨פ륰墍ᗗ畴埅늟 [ 1642.946019][T25447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.969045][T25447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.986677][T24925] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1643.020142][ T5831] cdc_ncm 6-1:1.0: bind() failure [ 1643.035422][ T5831] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1643.035476][ T5831] cdc_ncm 6-1:1.1: bind() failure [ 1643.048509][ T5831] usb 6-1: USB disconnect, device number 83 [ 1643.140659][T24925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.166851][T24925] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1643.204400][T24925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.255113][T24925] usb 4-1: config 0 descriptor?? [ 1643.295508][T24925] pwc: Askey VC010 type 2 USB webcam detected. [ 1643.422038][T25465] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 1643.540759][T25467] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1643.553316][T24925] pwc: send_video_command error -71 [ 1643.575991][T25467] bond10: (slave bond11): making interface the new active one [ 1643.585106][T24925] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1643.585751][T25467] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1643.603198][T24925] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1643.619483][T24925] usb 4-1: USB disconnect, device number 101 [ 1643.776677][ T5831] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1643.936495][ T5831] usb 9-1: Using ep0 maxpacket: 32 [ 1643.955184][ T5831] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1643.965237][ T5831] usb 9-1: config 0 has no interface number 0 [ 1643.972081][ T5831] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1643.983730][ T5831] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1643.997130][ T5831] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1644.007031][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.015145][ T5831] usb 9-1: Product: syz [ 1644.022423][ T5831] usb 9-1: Manufacturer: syz [ 1644.027733][ T5831] usb 9-1: SerialNumber: syz [ 1644.036209][ T5831] usb 9-1: config 0 descriptor?? [ 1644.086409][T24925] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1644.166476][T20918] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1644.196425][ T5834] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1644.242158][T24925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.260625][T24925] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1644.272016][T24925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.287885][T24925] usb 4-1: config 0 descriptor?? [ 1644.311543][T24925] pwc: Askey VC010 type 2 USB webcam detected. [ 1644.318267][T20918] usb 5-1: Using ep0 maxpacket: 32 [ 1644.332698][T20918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.346060][T20918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.368675][ T5834] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 1644.378162][T20918] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1644.387488][ T5834] usb 6-1: config 0 has no interface number 0 [ 1644.426391][T20918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.448473][ T5834] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1644.460188][T20918] usb 5-1: config 0 descriptor?? [ 1644.465238][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.502391][ T5834] usb 6-1: Product: syz [ 1644.519978][ T5834] usb 6-1: Manufacturer: syz [ 1644.524685][ T5834] usb 6-1: SerialNumber: syz [ 1644.533434][T20918] hub 5-1:0.0: USB hub found [ 1644.550293][ T5834] usb 6-1: config 0 descriptor?? [ 1644.669730][ T5831] appletouch 9-1:0.85: Geyser mode initialized. [ 1644.678766][ T5831] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input194 [ 1644.700481][T20918] hub 5-1:0.0: 1 port detected [ 1644.740202][T24925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1644.894196][T16210] usb 9-1: USB disconnect, device number 112 [ 1644.917720][T16210] appletouch 9-1:0.85: input: appletouch disconnected [ 1644.981304][T24925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1644.989136][T24925] pwc: recv_control_msg error -32 req 04 val 1000 [ 1645.064762][ T5834] usb 6-1: Firmware version (0.0) predates our first public release. [ 1645.073599][ T5834] usb 6-1: Please update to version 0.2 or newer [ 1645.198835][T24925] pwc: recv_control_msg error -32 req 04 val 1400 [ 1645.206203][T24925] pwc: recv_control_msg error -32 req 02 val 2000 [ 1645.213871][T24925] pwc: recv_control_msg error -32 req 02 val 2100 [ 1645.221793][T24925] pwc: recv_control_msg error -32 req 04 val 1500 [ 1645.229326][T24925] pwc: recv_control_msg error -32 req 02 val 2500 [ 1645.236876][T24925] pwc: recv_control_msg error -32 req 02 val 2400 [ 1645.246246][T24925] pwc: recv_control_msg error -71 req 02 val 2600 [ 1645.253880][T24925] pwc: recv_control_msg error -71 req 02 val 2900 [ 1645.262494][T24925] pwc: recv_control_msg error -71 req 02 val 2800 [ 1645.270853][T24925] pwc: recv_control_msg error -71 req 04 val 1100 [ 1645.275101][T25478] binder: BINDER_SET_CONTEXT_MGR already set [ 1645.280768][T24925] pwc: recv_control_msg error -71 req 04 val 1200 [ 1645.290128][T25478] binder: 25477:25478 ioctl 4018620d 200000000040 returned -16 [ 1645.304223][T24925] pwc: Registered as video103. [ 1645.323825][T24925] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input195 [ 1645.335213][T20918] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1645.336798][ T24] usb 5-1: USB disconnect, device number 104 [ 1645.351923][T24925] usb 4-1: USB disconnect, device number 102 [ 1645.578978][ T5834] usb 6-1: USB disconnect, device number 84 [ 1645.766901][T20918] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1645.918415][T20918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.929139][T20918] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1645.939938][T20918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.953070][T20918] usb 9-1: config 0 descriptor?? [ 1645.969808][T20918] pwc: Askey VC010 type 2 USB webcam detected. [ 1646.076922][ T5834] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1646.246401][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 1646.258348][ T5834] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1646.267333][ T5834] usb 4-1: config 0 has no interface number 0 [ 1646.280516][ T5834] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1646.289957][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.298459][ T5834] usb 4-1: Product: syz [ 1646.302841][ T5834] usb 4-1: Manufacturer: syz [ 1646.309235][ T5834] usb 4-1: SerialNumber: syz [ 1646.333237][ T5834] usb 4-1: config 0 descriptor?? [ 1646.354800][ T5834] smsc95xx v2.0.0 [ 1646.385174][T20918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1646.404087][T20918] pwc: recv_control_msg error -32 req 02 val 2700 [ 1646.419410][T20918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1646.427979][T20918] pwc: recv_control_msg error -32 req 04 val 1000 [ 1646.438575][T20918] pwc: recv_control_msg error -32 req 04 val 1300 [ 1646.447333][T20918] pwc: recv_control_msg error -32 req 04 val 1400 [ 1646.506672][ T24] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1646.692661][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1646.719236][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.720128][T20918] pwc: recv_control_msg error -71 req 02 val 2100 [ 1646.729870][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1646.748888][T20918] pwc: recv_control_msg error -71 req 04 val 1500 [ 1646.756042][T20918] pwc: recv_control_msg error -71 req 02 val 2500 [ 1646.764576][T20918] pwc: recv_control_msg error -71 req 02 val 2400 [ 1646.772195][T20918] pwc: recv_control_msg error -71 req 02 val 2600 [ 1646.780144][T20918] pwc: recv_control_msg error -71 req 02 val 2900 [ 1646.788330][T20918] pwc: recv_control_msg error -71 req 02 val 2800 [ 1646.795627][T20918] pwc: recv_control_msg error -71 req 04 val 1100 [ 1646.803320][T20918] pwc: recv_control_msg error -71 req 04 val 1200 [ 1646.811195][ T24] usb 6-1: config 1 has no interface number 0 [ 1646.828275][T20918] pwc: Registered as video103. [ 1646.836883][T20918] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input196 [ 1646.871779][T20918] usb 9-1: USB disconnect, device number 113 [ 1646.905661][ T24] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1646.960458][ T24] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1647.053547][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1647.082939][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.103202][ T24] usb 6-1: Product: syz [ 1647.113331][ T24] usb 6-1: Manufacturer: syz [ 1647.125899][ T24] usb 6-1: SerialNumber: syz [ 1647.622303][T25502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.687085][T25502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.729378][T25502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5793'. [ 1647.754167][ T24] usb 6-1: USB disconnect, device number 85 [ 1647.848595][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1647.943893][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1647.966384][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1647.996657][ T5834] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1648.014522][ T5834] usb 4-1: USB disconnect, device number 103 [ 1648.306475][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1648.446544][ T24] usb 5-1: device descriptor read/64, error -71 [ 1648.506591][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1648.506611][ T30] audit: type=1326 audit(1748604201.014:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.555028][ T30] audit: type=1326 audit(1748604201.044:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.581891][ T30] audit: type=1326 audit(1748604201.064:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.604937][ T30] audit: type=1326 audit(1748604201.064:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.641846][ T30] audit: type=1326 audit(1748604201.064:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.701774][ T30] audit: type=1326 audit(1748604201.064:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.724593][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1648.763738][ T30] audit: type=1326 audit(1748604201.064:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.796045][ T30] audit: type=1326 audit(1748604201.064:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.830179][ T30] audit: type=1326 audit(1748604201.064:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.862595][ T30] audit: type=1326 audit(1748604201.064:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.5.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d518e969 code=0x7ffc0000 [ 1648.895964][ T24] usb 5-1: device descriptor read/64, error -71 [ 1649.006753][ T24] usb usb5-port1: attempt power cycle [ 1649.166525][ T5909] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1649.319497][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.351102][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1649.363364][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1649.389927][ T5909] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1649.400074][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.422366][ T24] usb 5-1: device descriptor read/8, error -71 [ 1649.429923][ T5909] usb 4-1: config 0 descriptor?? [ 1649.442496][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1649.450977][ T5831] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1649.462128][ T5909] dvb-usb: bulk message failed: -22 (3/0) [ 1649.482474][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1649.495833][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1649.503884][ T5909] usb 4-1: media controller created [ 1649.511911][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1649.544527][ T5909] dvb-usb: bulk message failed: -22 (6/0) [ 1649.552160][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1649.566512][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input197 [ 1649.590029][ T5909] dvb-usb: schedule remote query interval to 150 msecs. [ 1649.607108][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1649.621149][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.649277][ T5831] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1649.659184][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.677927][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1649.710043][ T5831] usb 6-1: config 0 descriptor?? [ 1649.715934][ T24] usb 5-1: device descriptor read/8, error -71 [ 1649.725579][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 1649.736092][T25528] dvb-usb: bulk message failed: -22 (3/0) [ 1649.781575][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 1649.790764][ T5909] dvb-usb: error while querying for an remote control event. [ 1649.813837][ T5909] usb 4-1: USB disconnect, device number 104 [ 1649.836542][ T24] usb usb5-port1: unable to enumerate USB device [ 1649.927452][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1649.940990][T25534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.965063][T25534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.148687][ T24] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1650.202682][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1650.224676][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 1650.241316][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1650.256494][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 1650.264267][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 1650.283630][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 1650.328567][ T24] usb 9-1: no configurations [ 1650.333397][ T24] usb 9-1: can't read configurations, error -22 [ 1650.466575][ T24] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 1650.492786][ T5831] pwc: recv_control_msg error -71 req 02 val 2100 [ 1650.502476][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1650.511783][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1650.518998][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1650.525905][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1650.533417][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1650.541046][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1650.549142][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1650.556108][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1650.571926][ T5831] pwc: Registered as video103. [ 1650.580042][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input198 [ 1650.608274][ T5831] usb 6-1: USB disconnect, device number 86 [ 1650.627371][ T24] usb 9-1: no configurations [ 1650.636964][ T24] usb 9-1: can't read configurations, error -22 [ 1650.651050][ T24] usb usb9-port1: attempt power cycle [ 1650.781583][T25549] loop6: detected capacity change from 0 to 63 [ 1650.977408][T25546] page: refcount:9 mapcount:0 mapping:ffff888022e41f78 index:0x70 pfn:0x37470 [ 1650.987689][T25546] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1650.998395][T25546] memcg:ffff8880599a2000 [ 1651.002681][T25546] aops:def_blk_aops ino:fa00000 [ 1651.008331][T25546] flags: 0xfff9800000027d(locked|referenced|uptodate|dirty|lru|workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1651.021644][T25546] raw: 00fff9800000027d ffffea0000dd1e08 ffffea0000dd1808 ffff888022e41f78 [ 1651.033860][T25546] raw: 0000000000000070 0000000000000000 00000009ffffffff ffff8880599a2000 [ 1651.046451][ T24] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1651.054293][T25546] head: 00fff9800000027d ffffea0000dd1e08 ffffea0000dd1808 ffff888022e41f78 [ 1651.073857][T25546] head: 0000000000000070 0000000000000000 00000009ffffffff ffff8880599a2000 [ 1651.083894][T25546] head: 00fff00000000203 ffffea0000dd1c01 00000000ffffffff 00000000ffffffff [ 1651.095500][T25546] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1651.116243][ T24] usb 9-1: no configurations [ 1651.122914][T25546] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 1651.123265][ T24] usb 9-1: can't read configurations, error -22 [ 1651.162635][T25546] page_owner tracks the page as allocated [ 1651.172324][T25546] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 25547, tgid 25543 (syz.3.5808), ts 1650683303829, free_ts 1646100276046 [ 1651.229534][T25546] post_alloc_hook+0x240/0x2a0 [ 1651.235256][T25546] get_page_from_freelist+0x21e0/0x22c0 [ 1651.244801][T25546] __alloc_frozen_pages_noprof+0x181/0x370 [ 1651.252175][T25546] alloc_pages_mpol+0x232/0x4a0 [ 1651.262531][T25546] alloc_pages_noprof+0xa9/0x190 [ 1651.268952][T25546] folio_alloc_noprof+0x1e/0x30 [ 1651.273919][T25546] filemap_alloc_folio_noprof+0xdf/0x470 [ 1651.303566][T25546] page_cache_ra_order+0x5e5/0xc70 [ 1651.313404][ T24] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1651.321266][T25546] do_sync_mmap_readahead+0x31a/0x5f0 [ 1651.328820][T25546] filemap_fault+0x62a/0x1200 [ 1651.335507][T25546] __do_fault+0x138/0x390 [ 1651.344461][T25546] __handle_mm_fault+0x37c5/0x55e0 [ 1651.356474][T25546] handle_mm_fault+0x40a/0x8e0 [ 1651.363105][T25546] __get_user_pages+0x1a78/0x30c0 [ 1651.396132][ T24] usb 9-1: no configurations [ 1651.408747][ T24] usb 9-1: can't read configurations, error -22 [ 1651.428574][ T24] usb usb9-port1: unable to enumerate USB device [ 1651.435777][T25546] populate_vma_page_range+0x26b/0x340 [ 1651.442324][T25546] __mm_populate+0x24c/0x380 [ 1651.448099][T25546] page last free pid 25552 tgid 25543 stack trace: [ 1651.493640][T25546] free_unref_folios+0xcc9/0x1550 [ 1651.500585][T25546] folios_put_refs+0x559/0x640 [ 1651.505492][T25546] free_pages_and_swap_cache+0x4be/0x520 [ 1651.515834][T25546] tlb_flush_mmu+0x3a0/0x680 [ 1651.522287][T25546] unmap_page_range+0x398e/0x4580 [ 1651.533033][T25546] unmap_vmas+0x25d/0x3c0 [ 1651.539608][T25546] exit_mmap+0x245/0xba0 [ 1651.543893][T25546] __mmput+0x118/0x420 [ 1651.558222][T25546] exit_mm+0x1da/0x2c0 [ 1651.562889][T25546] do_exit+0x864/0x2550 [ 1651.567442][T25546] do_group_exit+0x21c/0x2d0 [ 1651.572051][T25546] __x64_sys_exit_group+0x3f/0x40 [ 1651.577306][T25546] x64_sys_call+0x21ba/0x21c0 [ 1651.582014][T25546] do_syscall_64+0xfa/0x3b0 [ 1651.586725][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.608224][T25546] ------------[ cut here ]------------ [ 1651.613905][T25546] kernel BUG at mm/filemap.c:3433! [ 1651.643201][T25546] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1651.649496][T25546] CPU: 0 UID: 0 PID: 25546 Comm: syz.3.5808 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 1651.661235][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1651.671388][T25546] RIP: 0010:filemap_fault+0x117d/0x1200 [ 1651.676949][T25546] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 cd 42 2b 00 e9 81 fc ff ff e8 a3 17 c8 ff 48 89 df 48 c7 c6 a0 28 94 8b e8 84 b3 0f 00 90 <0f> 0b e8 8c 17 c8 ff 48 8b 3c 24 48 c7 c6 20 2f 94 8b e8 6c b3 0f [ 1651.696663][T25546] RSP: 0018:ffffc9000d23f300 EFLAGS: 00010246 [ 1651.702742][T25546] RAX: 651c3e261e988300 RBX: ffffea0000dd1c00 RCX: 0000000000000000 [ 1651.710734][T25546] RDX: 0000000000000000 RSI: ffffffff8d96e954 RDI: 00000000ffffffff [ 1651.718732][T25546] RBP: ffffc9000d23f438 R08: ffffffff8fa0a2f7 R09: 1ffffffff1f4145e [ 1651.726733][T25546] R10: dffffc0000000000 R11: fffffbfff1f4145f R12: dffffc0000000000 [ 1651.734918][T25546] R13: 1ffffd40001ba381 R14: ffffea0000dd1c18 R15: ffffea0000dd1c08 [ 1651.742998][T25546] FS: 00007fc7cbd2a6c0(0000) GS:ffff888125c63000(0000) knlGS:0000000000000000 [ 1651.751939][T25546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.758539][T25546] CR2: 000000110c40ed61 CR3: 00000000293c8000 CR4: 00000000003526f0 [ 1651.766547][T25546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.774553][T25546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1651.782544][T25546] Call Trace: [ 1651.785838][T25546] [ 1651.788780][T25546] ? __pfx_filemap_fault+0x10/0x10 [ 1651.793915][T25546] __do_fault+0x138/0x390 [ 1651.798263][T25546] __handle_mm_fault+0x1969/0x55e0 [ 1651.803396][T25546] ? __pfx___handle_mm_fault+0x10/0x10 [ 1651.808874][T25546] ? find_vma+0xe7/0x160 [ 1651.813168][T25546] ? __pfx_find_vma+0x10/0x10 [ 1651.817879][T25546] handle_mm_fault+0x40a/0x8e0 [ 1651.822682][T25546] do_user_addr_fault+0x764/0x1390 [ 1651.827825][T25546] exc_page_fault+0x76/0xf0 [ 1651.832366][T25546] asm_exc_page_fault+0x26/0x30 [ 1651.837239][T25546] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1651.842987][T25546] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 01 32 03 00 90 90 90 90 90 90 90 90 90 90 [ 1651.862621][T25546] RSP: 0018:ffffc9000d23f8b8 EFLAGS: 00050202 [ 1651.869062][T25546] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000078030 [ 1651.877062][T25546] RDX: ffff8880275d5a00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1651.885046][T25546] RBP: ffffc9000d23fa30 R08: ffffc9000d23f667 R09: 1ffff92001a47ecc [ 1651.893032][T25546] R10: dffffc0000000000 R11: fffff52001a47ecd R12: 0000000000000002 [ 1651.901011][T25546] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000078000 [ 1651.909002][T25546] ____sys_recvmsg+0x2ab/0x460 [ 1651.913796][T25546] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1651.919109][T25546] ? import_iovec+0x74/0xa0 [ 1651.923631][T25546] ___sys_recvmsg+0x1b5/0x510 [ 1651.928336][T25546] ? __pfx____sys_recvmsg+0x10/0x10 [ 1651.933566][T25546] ? __might_fault+0xb0/0x130 [ 1651.938265][T25546] do_recvmmsg+0x307/0x770 [ 1651.942689][T25546] ? __pfx_do_recvmmsg+0x10/0x10 [ 1651.947638][T25546] ? lock_vma_under_rcu+0xf8/0x710 [ 1651.952767][T25546] __x64_sys_recvmmsg+0x190/0x240 [ 1651.957797][T25546] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1651.963349][T25546] ? do_syscall_64+0xbe/0x3b0 [ 1651.968041][T25546] do_syscall_64+0xfa/0x3b0 [ 1651.972554][T25546] ? lockdep_hardirqs_on+0x9c/0x150 [ 1651.977759][T25546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.983831][T25546] ? clear_bhb_loop+0x60/0xb0 [ 1651.988519][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.994416][T25546] RIP: 0033:0x7fc7caf8e969 [ 1651.998835][T25546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.018447][T25546] RSP: 002b:00007fc7cbd2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1652.026876][T25546] RAX: ffffffffffffffda RBX: 00007fc7cb1b6080 RCX: 00007fc7caf8e969 [ 1652.034941][T25546] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1652.042919][T25546] RBP: 00007fc7cb010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1652.050897][T25546] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1652.058885][T25546] R13: 0000000000000001 R14: 00007fc7cb1b6080 R15: 00007fc7cb2dfa28 [ 1652.066868][T25546] [ 1652.069899][T25546] Modules linked in: [ 1652.075041][T25546] ---[ end trace 0000000000000000 ]--- [ 1652.083242][T25546] RIP: 0010:filemap_fault+0x117d/0x1200 [ 1652.096323][T25546] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 cd 42 2b 00 e9 81 fc ff ff e8 a3 17 c8 ff 48 89 df 48 c7 c6 a0 28 94 8b e8 84 b3 0f 00 90 <0f> 0b e8 8c 17 c8 ff 48 8b 3c 24 48 c7 c6 20 2f 94 8b e8 6c b3 0f [ 1652.116330][T25546] RSP: 0018:ffffc9000d23f300 EFLAGS: 00010246 [ 1652.123069][T25546] RAX: 651c3e261e988300 RBX: ffffea0000dd1c00 RCX: 0000000000000000 [ 1652.131187][T25546] RDX: 0000000000000000 RSI: ffffffff8d96e954 RDI: 00000000ffffffff [ 1652.139573][T25546] RBP: ffffc9000d23f438 R08: ffffffff8fa0a2f7 R09: 1ffffffff1f4145e [ 1652.147680][T25546] R10: dffffc0000000000 R11: fffffbfff1f4145f R12: dffffc0000000000 [ 1652.155684][T25546] R13: 1ffffd40001ba381 R14: ffffea0000dd1c18 R15: ffffea0000dd1c08 [ 1652.163822][T25546] FS: 00007fc7cbd2a6c0(0000) GS:ffff888125d63000(0000) knlGS:0000000000000000 [ 1652.173351][T25546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1652.180104][T25546] CR2: 00007f2570b71da0 CR3: 00000000293c8000 CR4: 00000000003526f0 [ 1652.190467][T25546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1652.198577][ T5831] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1652.210085][T25546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1652.218438][T25546] Kernel panic - not syncing: Fatal exception [ 1652.225336][T25546] Kernel Offset: disabled [ 1652.229691][T25546] Rebooting in 86400 seconds..