last executing test programs: 13.378338111s ago: executing program 4 (id=9092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.388832703s ago: executing program 4 (id=9096): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400)) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42e4eba8d38009682dc8f7c867b177ec5bd50b92aedef35b6cd87bf8517a56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8be2f0203a2efc59ea0b90971b937fde2b8a2e897dceff3b286253e5a7dc5e75ca3e8"], &(0x7f0000000080)='GPL\x00'}, 0x90) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rthdr_2292={{0x18, 0x29, 0x5}}], 0x18}}], 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb1, 0xb1, 0x6, [@const, @datasec={0x6, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x4, 0x600000}, {0x0, 0x10001, 0x6}, {0x3, 0x800}, {0x3, 0x7, 0x5}, {0x5, 0x0, 0xf551}, {0x3, 0x0, 0x100}, {0x3, 0x8aa, 0x9}], 'R'}, @enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x24000000}, {0x2, 0x9}, {0x5}, {0x5, 0xe96}, {0x4, 0x800}, {0x0, 0xffffff7f}, {0xb, 0x9}]}]}, {0x0, [0x1, 0x0, 0x5f, 0x61]}}, &(0x7f0000000600)=""/252, 0xd2, 0xfc, 0x1, 0x6a8}, 0x20) 11.452331067s ago: executing program 4 (id=9100): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905"], 0x0) inotify_init1(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000031c0)={0x20, r1, 0x601, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x311000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 10.158525725s ago: executing program 3 (id=9103): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf205"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 8.482143831s ago: executing program 1 (id=9109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x22a, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x6, 0x8}, 0x48) getdents64(r3, &(0x7f0000000300)=""/231, 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES16=r3], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 8.03449744s ago: executing program 0 (id=9111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0xffffff7f, 0x2000000}, 0x3b, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x24048000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x44, 0x7, 0xc5, [@broadcast]}]}}}], 0x18}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x2f, 0x1, 0x2, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x7827, 0x7, 0x3b27b0be, 0x40}}) personality(0x500006) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) sendmmsg$inet(r1, &(0x7f0000004800)=[{{&(0x7f0000000340)={0x2, 0x4e24, @private}, 0x10, &(0x7f0000000400)}}, {{&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="5be21da2886e8d3115b103ad4f6d062b45f36e325c074cfd86347aa1c0e45a16194824fd62397e9cb999d251a8ac0626c960852b27f30dbe6e84d2161659c9e351f5d8073f3fe2c3960f9dffaf4a64f5b4d2e4195437654c308546215229", 0x5e}], 0x2, &(0x7f0000004a40)=ANY=[@ANYBLOB="110000000000000000000000010000000200000000000000110000000000000000001100000000000000000000000100009b070000007d9e330084e7ff00000000000000000007000000443c00b30a010101000000047f00000100000007e000000200000007ac14141d00000006ac1e000180000000e0000001000000017f0000010000000901830b000a00ac14143600440535e14f830b51e000000200000000440cac717f00c7000100000007070cc393caeab52ba1e85a5f00"/208], 0xd0}}, {{&(0x7f0000000700)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000780)="329ab01697ebe66b1ac862c701de93", 0xf}, {&(0x7f0000000ec0)="74a91b45bc51c43ed10301cec6d34910395a4b439306610aa2afdbf3e111778382a0471952ec4982c84f17ed6d92fdb276b24a954cfe2ac3295e1ec7c027f95c20cf5587f52e5871956f62d09461cc258f753201682c70763e50b375f1165a71879898ef94e9c9dd3ec389111808c28fb9f540a57887bd3086b59b21b8b3b7570cc796c450fdb318bb6850183b314866fcae438e27033136d490e843144e056bff1e6a62382a63d71f23c3c11203b5ca7315a29376a78eb63fd1d3ba45edac2645ac73912020fa8584eff8ebc94c3de38c415845a0614a6ae3c3873309c00efbd6639f781b", 0xe5}, {&(0x7f00000007c0)="d27b", 0x2}, {&(0x7f0000000980)="9afdccd44ebc259c89ed11934361dfa720ebcc9ed0670a3b2dbd2021efa68a3c53045fc23c089bb19932a7fe11e137fa2d0ffdb8fd4107fead0262cbed4c7a26ec2eb74b4803f3415224f423ae8a46bbcee567e0f2e56be0be12a9", 0x5b}, {&(0x7f0000000fc0)="a210772562342c75e14ccd212549236908ac56628af6cebaea193e7db90b4e843ca367434eb6071fd528c037f9fc2d083b1c756b2cbb84d5ff665e10df5766532eadcfdf98cc947dd1bc93cea0bba17136207f3e3f036e2da64916485513a5400397e0f482efdc6fa78a2489b208a52626e940d07462", 0x76}], 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="100000000000000000000000070000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414f1bb000000000000000000f4d32a95bf2ba8a8d5ea0000"], 0x60}}, {{&(0x7f0000001200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002800)=[{&(0x7f0000001340)}, {0x0}, {&(0x7f00000023c0)}, {&(0x7f0000002480)}, {&(0x7f0000002680)="60a2556e99795eb0a109d825cb7da1c3637491f19ae35547e5f94984c6dfd3298f4ca28dd87ac47ed02953d0ad1b8ce02fb3ab35d6725021b8838219b19ba1e5faa35072f867ffdb8c2edf611d3dcdcb737e6646c3b06065f28154050c36010641a4bc2dcb06b3aafb716ca49a0fb5ee3307ad5574ab41df30b677881469167b850f2c92bf5ee03c37b718123a668bb056d036d5dda74b50f624f79883f11d0100b2971f9576ff989a022d8d2f6c4bf7d50b390631053536f0c36b21242410368ec4b44debb818f07308adf1844b9a5d692eed1fd5a1", 0xd6}, {&(0x7f0000002780)="4c3e4c71f3de31c0b44d5149e8e0115ce3431123426ecc4775da05539eb6237659b80d407c781aea3dd76ba80ebedf397df9dc5c40f2a5", 0x37}], 0x6, &(0x7f0000004b40)=[@ip_retopts={{0x34, 0x0, 0x7, {[@noop, @end, @ssrr={0x89, 0xb, 0xe6, [@broadcast, @broadcast]}, @timestamp={0x44, 0x14, 0x6a, 0x0, 0xe, [0xffffffff, 0x5, 0x1, 0x7]}]}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010100}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x2, [{0x2, 0x12, "48aac51c7682d67c3887f23958afa85b"}, {0x1, 0xc, "2d88267275c7bfbf53d0"}, {0x1, 0x2}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "956d73b1"}]}, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}]}}}], 0xd8}}, {{&(0x7f0000002980)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000002a40)=[{&(0x7f00000029c0)="e46d20d2ba472cd9d35764010b02937e08cd36b6925748535190db1b691cb558ff030c2fdd25ec384cde3de76c60fc80c0254d5b5dea75160cec6cbcad619b894f020d95cf2d1534", 0x48}], 0x1, &(0x7f0000002b00)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x78}}, {{&(0x7f0000002bc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000002c00)}, {0x0}, {0x0}, {&(0x7f0000003d80)="aad802c0daedf6a1871cb82573ffd0d2e8bf1ef9001f26e14f9cc52c0c52c0e9ed75345bcf0233cf786b6f66b8bfb1bbbd6b9dfd9e8dba29c2f9594277", 0x3d}], 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3], 0xa8}}, {{&(0x7f0000003f80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003fc0)="4a1c76c77fc9996b3d80dba805f9b532d7229ad0a2e435718a5f41f78b11fe2997c4efc32c31f9681fc19efd3a2546c50037fc6040fc732b83ecebfb2849996e1a4987e1db9df0782482b33fbca57b6932e9e9f82cc286218c39802694d67a611f37608f1afffe7d90", 0x69}, {&(0x7f00000040c0)="67ef4584028e448e31e83005e540dc71b8898d993716d17e17357dde3086f48436a2b07729c88768b60ea09850dddbd47120a23dda59815ea2a10f87feceb2b5d3f883da3ce285aea03008b5050884dd9554bab11797a6d5fb931db9b9e207bfe3ee271d7132643a1b", 0x69}], 0x2, &(0x7f0000004180)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}], 0x7, 0x40000) 7.975531599s ago: executing program 4 (id=9112): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582"], 0x0) inotify_init1(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000031c0)={0x20, r1, 0x601, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x311000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 7.974874269s ago: executing program 3 (id=9113): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902920001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 7.597016676s ago: executing program 1 (id=9114): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902920001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 7.176093211s ago: executing program 0 (id=9115): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) inotify_init1(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000031c0)={0x20, r1, 0x601, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x311000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 5.895276527s ago: executing program 1 (id=9116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xbc9, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb7, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5, [@generic={0x1c, 0x1, "9f38621e6a22e8ac8ba06b0d18b89d4b38b787a7ae3c4ab9c593"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "4dc397ab89b0e5eb4ba032c077fb3e3aa25b5cc5d63e9ea6ab6530432ff2ca0e11fbcb592d8b8ea746d7f2d1c8aba1292f5b79f2d03e0d6c6850895d3f512a681374eb13e0f2b21783e3376fd129cb4aee9313ede8a14de56579b78bf613c4f73e6510532031cfd7d616172559bd089e976c7614e467aba22b851c77ad902caf91b385c390e6c57d9fc0d209291704646c5652f6112c15f80c0a9d9d4fa3fd44433cc32ebb8684454b40f4f714ea5e5cb20d865b193aa47b916aa0eb05a68dd4b1a4e8c2aacebfbcf2d39c1aae2abf3da05662e08256997af6ea2285514d1ca0ded95401434bf14e8f4630410c234793829c3910e04695c6f46dda0a82b84f33"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r8 = dup2(r3, r3) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) 5.124689465s ago: executing program 4 (id=9119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000380)=0xffffffffbffffffd, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000073112100000000008510000002000000b7008000800000009500c20000000000950098120000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000ffff04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) 4.977686878s ago: executing program 3 (id=9120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000900000f0100000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000001c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x9c) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@utf8}, {@numtail}, {@rodir}, {@fat=@nfs}, {@uni_xlate}]}, 0x0, 0x237, &(0x7f0000000300)="$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") 4.554113552s ago: executing program 2 (id=9121): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) 4.021499934s ago: executing program 0 (id=9122): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902920001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.020635454s ago: executing program 3 (id=9123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000001680)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00038d0000008d03"]}, 0x0) 3.711813012s ago: executing program 1 (id=9124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x22a, &(0x7f0000000f00)="$eJzs3T9rU20YB+A7b9u3pSDpIBRF8IiLU2gr7i1SQQwoSgadLLZFaWLBQECH1s0voV+hjq6Cg7j6BVSQKrjYrYMQqSc2bRrbSJocaa9r6c05z+/503PIIYE8uXumsjS/XF3c2FiPkZFcDE7HdGzmYiz+i4FIPQ0A4CjZrNfjez2V9VwAgP7w/AeA46fD5/+NPk4JAOixzt//f/T5AAAcEbdu37k2UyzO3kySkYjKs1qpVkr/pudnFuNBlGMhJiIfPyLq29L6ytXi7ESy5ctYlCqrjfxqrTSwOz8Z+Rhrn59MUrvzQzHayH8YjYWYinycbJ+fapv/Py6c3zF+IfLx/l4sRznmYyvbzK9MJsnl68WW/PCvdgAAAAAAAAAAAAAAAAAAAAAA0AuFZFvb/XsKhT+dT/Od7w/Uuj/PYJwezHbtAAAAAAAAAAAAAAAAAAAA8K+oPn6yNFcuLzzar3j4bu3NQW06LHKNcbvtp/vixLnPz9Mjw9HaZuDv/j+HW7w+29sh1iKi637ert8/dbE6fimzKzi0ZxVD+91a3/Kx5yofUvEy09v496oPbDz+Ynru1cqnr5323PeXIgAAAAAAAAAAAAAAAAAAOPaaX/rdeTSX3YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPN3//vXZH1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GcAAAD//wMDnd0=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x6, 0x8}, 0x48) getdents64(r3, &(0x7f0000000300)=""/231, 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES16=r3], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3.640767572s ago: executing program 2 (id=9125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0xffffff7f, 0x2000000}, 0x3b, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x24048000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x44, 0x7, 0xc5, [@broadcast]}]}}}], 0x18}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x2f, 0x1, 0x2, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x7827, 0x7, 0x3b27b0be, 0x40}}) personality(0x500006) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) sendmmsg$inet(r1, &(0x7f0000004800)=[{{&(0x7f0000000340)={0x2, 0x4e24, @private}, 0x10, &(0x7f0000000400)}}, {{&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="5be21da2886e8d3115b103ad4f6d062b45f36e325c074cfd86347aa1c0e45a16194824fd62397e9cb999d251a8ac0626c960852b27f30dbe6e84d2161659c9e351f5d8073f3fe2c3960f9dffaf4a64f5b4d2e4195437654c308546215229", 0x5e}], 0x2, &(0x7f0000004a40)=ANY=[@ANYBLOB="110000000000000000000000010000000200000000000000110000000000000000001100000000000000000000000100009b070000007d9e330084e7ff00000000000000000007000000443c00b30a010101000000047f00000100000007e000000200000007ac14141d00000006ac1e000180000000e0000001000000017f0000010000000901830b000a00ac14143600440535e14f830b51e000000200000000440cac717f00c7000100000007070cc393caeab52ba1e85a5f00"/208], 0xd0}}, {{&(0x7f0000000700)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000780)="329ab01697ebe66b1ac862c701de93", 0xf}, {&(0x7f0000000ec0)="74a91b45bc51c43ed10301cec6d34910395a4b439306610aa2afdbf3e111778382a0471952ec4982c84f17ed6d92fdb276b24a954cfe2ac3295e1ec7c027f95c20cf5587f52e5871956f62d09461cc258f753201682c70763e50b375f1165a71879898ef94e9c9dd3ec389111808c28fb9f540a57887bd3086b59b21b8b3b7570cc796c450fdb318bb6850183b314866fcae438e27033136d490e843144e056bff1e6a62382a63d71f23c3c11203b5ca7315a29376a78eb63fd1d3ba45edac2645ac73912020fa8584eff8ebc94c3de38c415845a0614a6ae3c3873309c00efbd6639f781b", 0xe5}, {&(0x7f00000007c0)="d27b", 0x2}, {&(0x7f0000000980)="9afdccd44ebc259c89ed11934361dfa720ebcc9ed0670a3b2dbd2021efa68a3c53045fc23c089bb19932a7fe11e137fa2d0ffdb8fd4107fead0262cbed4c7a26ec2eb74b4803f3415224f423ae8a46bbcee567e0f2e56be0be12a9", 0x5b}, {&(0x7f0000000fc0)="a210772562342c75e14ccd212549236908ac56628af6cebaea193e7db90b4e843ca367434eb6071fd528c037f9fc2d083b1c756b2cbb84d5ff665e10df5766532eadcfdf98cc947dd1bc93cea0bba17136207f3e3f036e2da64916485513a5400397e0f482efdc6fa78a2489b208a52626e940d07462", 0x76}], 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="100000000000000000000000070000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414f1bb000000000000000000f4d32a95bf2ba8a8d5ea0000"], 0x60}}, {{&(0x7f0000001200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002800)=[{&(0x7f0000001340)}, {0x0}, {&(0x7f00000023c0)}, {&(0x7f0000002480)}, {&(0x7f0000002680)="60a2556e99795eb0a109d825cb7da1c3637491f19ae35547e5f94984c6dfd3298f4ca28dd87ac47ed02953d0ad1b8ce02fb3ab35d6725021b8838219b19ba1e5faa35072f867ffdb8c2edf611d3dcdcb737e6646c3b06065f28154050c36010641a4bc2dcb06b3aafb716ca49a0fb5ee3307ad5574ab41df30b677881469167b850f2c92bf5ee03c37b718123a668bb056d036d5dda74b50f624f79883f11d0100b2971f9576ff989a022d8d2f6c4bf7d50b390631053536f0c36b21242410368ec4b44debb818f07308adf1844b9a5d692eed1fd5a1", 0xd6}, {&(0x7f0000002780)="4c3e4c71f3de31c0b44d5149e8e0115ce3431123426ecc4775da05539eb6237659b80d407c781aea3dd76ba80ebedf397df9dc5c40f2a5", 0x37}], 0x6, &(0x7f0000004b40)=[@ip_retopts={{0x34, 0x0, 0x7, {[@noop, @end, @ssrr={0x89, 0xb, 0xe6, [@broadcast, @broadcast]}, @timestamp={0x44, 0x14, 0x6a, 0x0, 0xe, [0xffffffff, 0x5, 0x1, 0x7]}]}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010100}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x2, [{0x2, 0x12, "48aac51c7682d67c3887f23958afa85b"}, {0x1, 0xc, "2d88267275c7bfbf53d0"}, {0x1, 0x2}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "956d73b1"}]}, @ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}]}}}], 0xd8}}, {{&(0x7f0000002980)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000002a40)=[{&(0x7f00000029c0)="e46d20d2ba472cd9d35764010b02937e08cd36b6925748535190db1b691cb558ff030c2fdd25ec384cde3de76c60fc80c0254d5b5dea75160cec6cbcad619b894f020d95cf2d1534", 0x48}], 0x1, &(0x7f0000002b00)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x78}}, {{&(0x7f0000002bc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000002c00)}, {0x0}, {0x0}, {&(0x7f0000003d80)="aad802c0daedf6a1871cb82573ffd0d2e8bf1ef9001f26e14f9cc52c0c52c0e9ed75345bcf0233cf786b6f66b8bfb1bbbd6b9dfd9e8dba29c2f9594277", 0x3d}], 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3], 0xa8}}, {{&(0x7f0000003f80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003fc0)="4a1c76c77fc9996b3d80dba805f9b532d7229ad0a2e435718a5f41f78b11fe2997c4efc32c31f9681fc19efd3a2546c50037fc6040fc732b83ecebfb2849996e1a4987e1db9df0782482b33fbca57b6932e9e9f82cc286218c39802694d67a611f37608f1afffe7d90", 0x69}, {&(0x7f00000040c0)="67ef4584028e448e31e83005e540dc71b8898d993716d17e17357dde3086f48436a2b07729c88768b60ea09850dddbd47120a23dda59815ea2a10f87feceb2b5d3f883da3ce285aea03008b5050884dd9554bab11797a6d5fb931db9b9e207bfe3ee271d7132643a1b", 0x69}], 0x2, &(0x7f0000004180)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}], 0x7, 0x40000) 2.844315284s ago: executing program 1 (id=9126): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902920001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.80367889s ago: executing program 2 (id=9127): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000005c0)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe065) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x47, 0x20, 0x3f, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x20, 0x0, 0xff, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000240)={@private2, 0xf, r9}) write$UHID_INPUT(r8, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 1.982444697s ago: executing program 4 (id=9128): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) inotify_init1(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000031c0)={0x20, r1, 0x601, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x311000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 1.937219723s ago: executing program 2 (id=9129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.141901795s ago: executing program 3 (id=9130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0xffffff7f, 0x2000000}, 0x3b, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x24048000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000a80)={&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x44, 0x7, 0xc5, [@broadcast]}]}}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x2f, 0x1, 0x2, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x7827, 0x7, 0x3b27b0be, 0x40}}) personality(0x500006) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x20032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40000) 1.081015074s ago: executing program 2 (id=9131): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 928.211508ms ago: executing program 0 (id=9132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdir(0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000f0ffff1711000066d5e03fc3156f3c76c97067546d4044c654527592d492369c0cb4ef1669f033ee875547a9328e85ae837548121b830a98631770625c27c64e7aebcd622306feeb33d4c2110ffe04c70840425e594e39829ca88c7a462b22aaa5b0c4abe3eb33e9514c144876b7d1d68848486cdd2836f96ca13f3dd6d4ffebd7978c9d5c6284ff04fa0f721fcdf743f7e44cffffffe500000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_adjtime(0x0, &(0x7f0000000240)={0x2, 0x80000001, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0x8, 0x7, 0x8000, 0x7, 0xa8, 0x4, 0x9, 0x1a6, 0x401, 0x8, 0x3, 0x0, 0x3, 0x4}) 784.25826ms ago: executing program 1 (id=9133): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) inotify_init1(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000031c0)={0x20, r1, 0x601, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x311000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 266.433809ms ago: executing program 3 (id=9134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000380)=0xffffffffbffffffd, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000073112100000000008510000002000000b7008000800000009500c20000000000950098120000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000ffff04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) 198.650339ms ago: executing program 2 (id=9135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xbc9, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb7, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5, [@generic={0x1c, 0x1, "9f38621e6a22e8ac8ba06b0d18b89d4b38b787a7ae3c4ab9c593"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r8 = dup2(r3, r3) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) 22.285706ms ago: executing program 0 (id=9136): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 0s ago: executing program 0 (id=9137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x22a, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x6, 0x8}, 0x48) getdents64(r3, &(0x7f0000000300)=""/231, 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES16=r3], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): criptor?? [ 2090.322731][T20321] usb 3-1: USB disconnect, device number 57 [ 2090.576726][ T319] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2090.946791][ T319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.966866][ T2668] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2091.116772][ T319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2091.125693][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.133643][ T319] usb 5-1: Product: syz [ 2091.137680][ T319] usb 5-1: Manufacturer: syz [ 2091.142037][ T319] usb 5-1: SerialNumber: syz [ 2091.176753][T20321] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2091.256822][ T2668] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 2091.456814][T27127] usb 1-1: string descriptor 0 read error: -71 [ 2091.477028][T27127] uclogic 0003:256C:006D.0151: failed retrieving string descriptor #200: -71 [ 2091.485860][T27127] uclogic 0003:256C:006D.0151: failed retrieving pen parameters: -71 [ 2091.493778][T27127] uclogic 0003:256C:006D.0151: failed probing pen v2 parameters: -71 [ 2091.501694][T27127] uclogic 0003:256C:006D.0151: failed probing parameters: -71 [ 2091.508942][T27127] uclogic: probe of 0003:256C:006D.0151 failed with error -71 [ 2091.517245][ T4459] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2091.520112][T27127] usb 1-1: USB disconnect, device number 67 [ 2091.536942][T20321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.547175][T20321] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2091.559948][T20321] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2091.569043][T20321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.577384][T20321] usb 3-1: config 0 descriptor?? [ 2091.617133][T20321] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2091.756715][ T4459] usb 4-1: Using ep0 maxpacket: 8 [ 2091.846798][ T319] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2091.852661][ T319] cdc_ncm 5-1:1.0: bind() failure [ 2091.858299][ T319] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2091.864891][ T319] cdc_ncm 5-1:1.1: bind() failure [ 2091.956774][ T4459] usb 4-1: config 32 has an invalid interface number: 77 but max is 0 [ 2091.964872][ T4459] usb 4-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2091.965195][ T1844] overlayfs: overlapping lowerdir path [ 2091.973659][ T4459] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2091.978774][ T2668] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2091.987534][ T4459] usb 4-1: config 32 has an invalid descriptor of length 113, skipping remainder of the config [ 2091.996334][ T2668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.006622][ T4459] usb 4-1: config 32 has no interface number 0 [ 2092.020351][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2092.031349][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2092.044039][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2092.055027][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2092.065889][ T4459] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2092.076446][ T4459] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2092.087018][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2092.097885][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2092.108678][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2092.119524][ T4459] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2092.130380][ T4459] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2092.143484][ T4459] usb 4-1: config 32 interface 77 has no altsetting 0 [ 2092.259530][ T1837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.267838][ T1837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.306734][T27127] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2092.346774][ T4459] usb 4-1: Dual-Role OTG device on HNP port [ 2092.376734][ T4459] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2092.385617][ T4459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.393412][ T4459] usb 4-1: Product: syz [ 2092.397399][ T4459] usb 4-1: Manufacturer: syz [ 2092.401796][ T4459] usb 4-1: SerialNumber: syz [ 2092.516832][ T2668] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2092.523512][ T2668] usb 2-1: No valid video chain found. [ 2092.596782][T27127] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 2092.719184][ T4459] usb 4-1: USB disconnect, device number 43 [ 2092.729686][ T1837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.738022][ T1837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.751706][T20321] usb 2-1: USB disconnect, device number 60 [ 2093.236750][T27127] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2093.245668][T27127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.309829][ T1854] loop3: detected capacity change from 0 to 128 [ 2093.363923][T22300] usb 5-1: USB disconnect, device number 54 [ 2093.786814][T22300] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2093.806809][T27127] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 2093.813548][T27127] usb 1-1: No valid video chain found. [ 2093.819708][T27127] usb 1-1: USB disconnect, device number 68 [ 2093.919122][T20321] usb 3-1: USB disconnect, device number 58 [ 2094.012985][ T1866] loop2: detected capacity change from 0 to 256 [ 2094.028742][T22300] usb 5-1: Using ep0 maxpacket: 16 [ 2095.049439][T22300] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2095.066710][T22300] usb 5-1: config 0 has no interface number 0 [ 2095.072834][T22300] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2095.086562][T22300] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2095.409426][ T1890] loop2: detected capacity change from 0 to 256 [ 2095.416744][T22300] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2095.430389][T22300] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2095.441353][ T1890] exFAT-fs (loop2): bogus sector size bits : 0 [ 2095.457254][T22300] usb 5-1: Product: syz [ 2095.464697][ T1890] exFAT-fs (loop2): failed to read boot sector [ 2095.471057][T22300] usb 5-1: SerialNumber: syz [ 2095.481330][T22300] usb 5-1: config 0 descriptor?? [ 2095.493268][ T1890] exFAT-fs (loop2): failed to recognize exfat type [ 2095.774838][T22300] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 2095.791324][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2095.791666][T22300] usb 5-1: USB disconnect, device number 55 [ 2096.616720][T22300] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2096.696727][T27127] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2096.896837][T22300] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 2097.143299][ T4459] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2097.410452][T27127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.420412][T27127] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2097.433058][T27127] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2097.441927][T27127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.450443][T27127] usb 5-1: config 0 descriptor?? [ 2097.487172][T27127] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2097.566761][ T4459] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 2097.746812][ T4459] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2097.755671][ T4459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.763616][ T4459] usb 2-1: Product: syz [ 2097.767601][ T4459] usb 2-1: Manufacturer: syz [ 2097.772006][ T4459] usb 2-1: SerialNumber: syz [ 2097.777333][ T4459] usb 2-1: config 0 descriptor?? [ 2097.896787][T22300] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2097.905682][T22300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.937144][T27127] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2098.021212][ T1912] loop1: detected capacity change from 0 to 512 [ 2098.038588][ T1912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2098.047474][ T1912] ext4 filesystem being mounted at /root/syzkaller.rWloe2/1015/bus supports timestamps until 2038 (0x7fffffff) [ 2098.147999][ T1900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.156736][ T1900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.376756][T27127] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 2098.406716][ T309] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2098.416794][T22300] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 2098.423465][T22300] usb 1-1: No valid video chain found. [ 2098.618961][ T1900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.627686][ T1900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.637173][ T319] usb 1-1: USB disconnect, device number 69 [ 2098.766821][ T309] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2098.775719][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.784152][ T309] usb 4-1: config 0 descriptor?? [ 2099.026764][T27127] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2099.035824][T27127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.440210][T25662] usb 5-1: USB disconnect, device number 56 [ 2099.716733][T27127] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 2099.723479][T27127] usb 3-1: No valid video chain found. [ 2099.731417][T27127] usb 3-1: USB disconnect, device number 59 [ 2099.777156][ T4459] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2099.787485][ T4459] asix: probe of 2-1:0.0 failed with error -71 [ 2099.788564][T14404] EXT4-fs (loop1): unmounting filesystem. [ 2099.794689][ T4459] usb 2-1: USB disconnect, device number 61 [ 2100.616799][T25662] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2101.012351][T10693] usb 4-1: USB disconnect, device number 44 [ 2101.036845][T25662] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.048074][T25662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.112232][T25662] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2101.122989][T25662] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2101.336773][T25662] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2101.345698][T25662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.353854][T25662] usb 5-1: Product: syz [ 2101.357889][T25662] usb 5-1: Manufacturer: syz [ 2101.362441][T25662] usb 5-1: SerialNumber: syz [ 2101.406769][ T309] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2101.586722][T10693] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2101.646797][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 2101.766750][ T309] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 2101.776828][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2101.789483][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 2101.798255][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.806809][ T309] usb 3-1: config 0 descriptor?? [ 2101.946746][T22300] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2101.996796][T10693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.086811][ T309] usb 3-1: string descriptor 0 read error: -71 [ 2102.094448][ T309] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2102.108791][ T309] usb 3-1: USB disconnect, device number 60 [ 2102.186714][T22300] usb 2-1: Using ep0 maxpacket: 16 [ 2102.186773][T10693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2102.200739][T10693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.208708][T10693] usb 1-1: Product: syz [ 2102.212675][T10693] usb 1-1: Manufacturer: syz [ 2102.217477][T10693] usb 1-1: SerialNumber: syz [ 2102.306776][T22300] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2102.314698][T22300] usb 2-1: config 0 has no interface number 0 [ 2102.320794][T22300] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2102.446785][T22300] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2102.456764][T25662] cdc_ncm 5-1:1.0: bind() failure [ 2102.458374][T22300] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2102.462684][T25662] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2102.469454][T22300] usb 2-1: Product: syz [ 2102.469497][T22300] usb 2-1: SerialNumber: syz [ 2102.470530][T22300] usb 2-1: config 0 descriptor?? [ 2102.486280][T25662] cdc_ncm 5-1:1.1: bind() failure [ 2102.506794][ T1992] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2102.713893][ T2001] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2102.769808][T22300] usb 2-1: invalid MIDI in EP 0 [ 2102.790496][T22300] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 2102.816615][T22300] usb 2-1: USB disconnect, device number 62 [ 2102.850256][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2102.896923][T10693] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 2102.902943][T10693] cdc_ncm 1-1:1.0: bind() failure [ 2102.911154][T10693] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2102.918349][T10693] cdc_ncm 1-1:1.1: bind() failure [ 2102.938201][T10693] usb 5-1: USB disconnect, device number 57 [ 2103.136741][ T309] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2103.557246][ T2009] overlayfs: failed to resolve './file2': -2 [ 2103.836577][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 2103.956787][ T309] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 2103.976743][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2103.996710][ T309] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 2104.005640][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.016775][ T309] usb 4-1: config 0 descriptor?? [ 2104.156705][T22300] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2104.268180][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.275394][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.282893][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.290657][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.297863][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.305046][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.312307][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.319571][ T4459] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 2104.326840][ T4459] hid-generic 0000:0000:0000.0152: item fetching failed at offset 8/43 [ 2104.334999][ T4459] hid-generic: probe of 0000:0000:0000.0152 failed with error -22 [ 2104.366770][ T309] usb 4-1: string descriptor 0 read error: -71 [ 2104.376308][ T309] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2104.388692][ T309] usb 4-1: USB disconnect, device number 45 [ 2104.396798][T22300] usb 5-1: Using ep0 maxpacket: 8 [ 2104.596750][T22300] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 2104.604778][T22300] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2104.613616][T22300] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2104.622220][T22300] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.632461][T22300] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2104.813358][T22300] usb 5-1: config 32 has no interface number 0 [ 2104.819460][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2104.830236][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2104.840994][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2104.851927][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2104.866743][T22300] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2104.877326][T22300] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2104.887923][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2104.899288][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2104.910371][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2104.921434][T22300] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2104.931745][T22300] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2104.945420][T22300] usb 5-1: config 32 interface 77 has no altsetting 0 [ 2104.977896][T30043] usb 1-1: USB disconnect, device number 70 [ 2105.472527][T22300] usb 5-1: Dual-Role OTG device on HNP port [ 2105.518277][T22300] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2105.527244][T22300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.535086][T22300] usb 5-1: Product: syz [ 2105.539099][T22300] usb 5-1: Manufacturer: syz [ 2105.543508][T22300] usb 5-1: SerialNumber: syz [ 2105.857054][T10693] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2105.954769][T22300] usb 5-1: USB disconnect, device number 58 [ 2105.970572][ T2046] loop3: detected capacity change from 0 to 256 [ 2106.653839][ T2046] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2106.658961][ T2050] loop1: detected capacity change from 0 to 128 [ 2106.826935][T10693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.851881][T10693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.863548][T10693] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2106.874202][T10693] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2106.907073][ T2058] loop3: detected capacity change from 0 to 256 [ 2106.931528][ T2058] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2107.036699][ T4459] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2107.046778][T10693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2107.070057][T10693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.098877][T10693] usb 3-1: Product: syz [ 2107.102865][T10693] usb 3-1: Manufacturer: syz [ 2107.122838][T10693] usb 3-1: SerialNumber: syz [ 2107.406697][T25662] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2107.416754][ T4459] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.434617][ T4459] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2107.467853][ T4459] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2107.478362][ T4459] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2107.646779][ T4459] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2107.655725][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.663695][ T4459] usb 1-1: Product: syz [ 2107.667681][T25662] usb 5-1: Using ep0 maxpacket: 16 [ 2107.672585][ T4459] usb 1-1: Manufacturer: syz [ 2107.677304][ T4459] usb 1-1: SerialNumber: syz [ 2107.806784][T25662] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2107.814585][T25662] usb 5-1: config 0 has no interface number 0 [ 2107.820690][T25662] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2108.007014][T25662] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2108.016294][T25662] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2108.025472][T25662] usb 5-1: Product: syz [ 2108.030440][T25662] usb 5-1: SerialNumber: syz [ 2108.035739][T25662] usb 5-1: config 0 descriptor?? [ 2108.056844][ T2060] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2108.096722][ T309] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2108.276765][T10693] cdc_ncm 3-1:1.0: bind() failure [ 2108.282556][T10693] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2108.289215][T10693] cdc_ncm 3-1:1.1: bind() failure [ 2108.327310][T25662] usb 5-1: invalid MIDI in EP 0 [ 2108.334032][T25662] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 2108.336758][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 2108.341507][T25662] usb 5-1: USB disconnect, device number 59 [ 2108.352711][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2108.466748][ T309] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 2108.476827][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2108.492608][ T309] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 2108.501698][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.510419][ T309] usb 4-1: config 0 descriptor?? [ 2108.567243][T30043] usb 3-1: USB disconnect, device number 61 [ 2108.748120][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.755395][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.762681][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.769879][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.777083][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.784599][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.791837][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.799028][T10693] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 2108.806227][T10693] hid-generic 0000:0000:0000.0153: item fetching failed at offset 8/43 [ 2108.814444][T10693] hid-generic: probe of 0000:0000:0000.0153 failed with error -22 [ 2108.826826][ T4459] cdc_ncm 1-1:1.0: bind() failure [ 2108.828762][ T2075] loop4: detected capacity change from 0 to 128 [ 2108.832631][ T4459] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2108.844844][ T4459] cdc_ncm 1-1:1.1: bind() failure [ 2108.846774][ T309] usb 4-1: string descriptor 0 read error: -71 [ 2108.860821][ T309] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2108.871258][ T309] usb 4-1: USB disconnect, device number 46 [ 2108.886766][T22300] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2109.122780][T10693] usb 1-1: USB disconnect, device number 71 [ 2109.276856][T22300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.286809][T22300] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2109.299571][T22300] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2109.308518][T22300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.329272][T22300] usb 2-1: config 0 descriptor?? [ 2109.345985][ T2081] loop2: detected capacity change from 0 to 128 [ 2109.390022][T22300] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2110.466736][T22300] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2110.826763][T22300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.836886][T22300] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.847916][T22300] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2110.858340][T22300] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2111.026788][T22300] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2111.035672][T22300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.043686][T22300] usb 5-1: Product: syz [ 2111.056736][T22300] usb 5-1: Manufacturer: syz [ 2111.061308][T22300] usb 5-1: SerialNumber: syz [ 2111.256860][ T4459] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2111.565421][ T2117] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2111.580042][ T4459] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 2111.651153][T27062] usb 2-1: USB disconnect, device number 63 [ 2111.696829][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.707172][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2111.806917][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.817675][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.228997][ T2124] loop2: detected capacity change from 0 to 128 [ 2112.360158][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.437643][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.546794][T22300] cdc_ncm 5-1:1.0: bind() failure [ 2112.552654][T22300] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2112.559634][T22300] cdc_ncm 5-1:1.1: bind() failure [ 2112.568109][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.578693][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.676816][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.687137][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.746776][T10693] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2112.796814][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.807187][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.829850][T25662] usb 5-1: USB disconnect, device number 60 [ 2112.886828][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.896978][T27062] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2112.904313][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2112.986724][T22300] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2112.996822][ T4459] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.006983][ T4459] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2113.015819][ T4459] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2113.024914][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.126755][T10693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.139307][T10693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.150041][T10693] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2113.160314][T10693] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2113.266809][T27062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.276879][T27062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.287693][T27062] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2113.298310][T27062] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2113.326833][T10693] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2113.335698][T10693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.346781][T22300] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 2113.349110][T10693] usb 4-1: Product: syz [ 2113.361563][T10693] usb 4-1: Manufacturer: syz [ 2113.366229][T10693] usb 4-1: SerialNumber: syz [ 2113.468669][ T2143] loop4: detected capacity change from 0 to 256 [ 2113.476068][ T2143] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2113.486467][T27062] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2113.495412][T27062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.503221][T27062] usb 2-1: Product: syz [ 2113.507221][T27062] usb 2-1: Manufacturer: syz [ 2113.511583][T27062] usb 2-1: SerialNumber: syz [ 2113.516988][T22300] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2113.535433][T22300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.544354][T22300] usb 3-1: Product: syz [ 2113.548583][T22300] usb 3-1: Manufacturer: syz [ 2113.553004][T22300] usb 3-1: SerialNumber: syz [ 2113.560438][T22300] usb 3-1: config 0 descriptor?? [ 2113.799771][ T2138] loop2: detected capacity change from 0 to 512 [ 2113.818238][ T2138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2113.827060][ T2138] ext4 filesystem being mounted at /root/syzkaller.dlVjf1/193/bus supports timestamps until 2038 (0x7fffffff) [ 2114.476845][T10693] cdc_ncm 4-1:1.0: bind() failure [ 2114.482000][T25662] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2114.489968][T10693] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2114.496569][T10693] cdc_ncm 4-1:1.1: bind() failure [ 2114.646750][T27062] cdc_ncm 2-1:1.0: bind() failure [ 2114.652229][T27062] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2114.658916][T27062] cdc_ncm 2-1:1.1: bind() failure [ 2114.671226][ T2668] usb 1-1: USB disconnect, device number 72 [ 2114.766709][T25662] usb 5-1: Using ep0 maxpacket: 8 [ 2114.817047][ T309] usb 4-1: USB disconnect, device number 47 [ 2114.907033][ T4088] usb 2-1: USB disconnect, device number 64 [ 2115.046780][T25662] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 2115.054796][T25662] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2115.063522][T25662] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2115.072210][T25662] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2115.076725][ T2668] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2115.082126][T25662] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2115.099563][T25662] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2115.108327][T25662] usb 5-1: config 32 has no interface number 0 [ 2115.114305][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2115.125090][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2115.135840][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2115.146700][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2115.157433][T25662] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2115.168035][T25662] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2115.178614][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2115.189640][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2115.200529][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2115.211364][T25662] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2115.221212][T25662] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2115.234285][T25662] usb 5-1: config 32 interface 77 has no altsetting 0 [ 2115.326722][ T2668] usb 1-1: Using ep0 maxpacket: 8 [ 2115.407019][T25662] usb 5-1: Dual-Role OTG device on HNP port [ 2115.436804][T25662] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2115.446339][T25662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.454221][T25662] usb 5-1: Product: syz [ 2115.458491][T25662] usb 5-1: Manufacturer: syz [ 2115.462926][T25662] usb 5-1: SerialNumber: syz [ 2115.736793][T22300] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2115.746738][ T2668] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 2115.758349][T30793] EXT4-fs (loop2): unmounting filesystem. [ 2115.764328][ T2668] usb 1-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2115.773384][T22300] asix: probe of 3-1:0.0 failed with error -71 [ 2115.785038][T22300] usb 3-1: USB disconnect, device number 62 [ 2115.795235][ T2668] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2115.807536][ T2668] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.817767][ T2668] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2115.826526][ T2668] usb 1-1: config 32 has no interface number 0 [ 2115.833036][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2115.844061][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2115.855061][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2115.866185][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2115.877047][ T2668] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2115.887636][ T2668] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2116.051043][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2116.062134][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2116.072953][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2116.083806][ T2668] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2116.093521][ T2668] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2116.102143][T25662] usb 5-1: USB disconnect, device number 61 [ 2116.106809][ T2668] usb 1-1: config 32 interface 77 has no altsetting 0 [ 2116.292755][ T2170] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2116.497197][ T2668] usb 1-1: Dual-Role OTG device on HNP port [ 2116.516736][ T2668] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2116.525649][ T2668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.533448][ T2668] usb 1-1: Product: syz [ 2116.537426][ T2668] usb 1-1: Manufacturer: syz [ 2116.541837][ T2668] usb 1-1: SerialNumber: syz [ 2116.867754][ T2181] loop1: detected capacity change from 0 to 128 [ 2117.163550][T22300] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2117.177968][ T2668] usb 1-1: USB disconnect, device number 73 [ 2117.730407][ T2185] overlayfs: failed to resolve './file2': -2 [ 2118.623286][ T2199] loop1: detected capacity change from 0 to 256 [ 2118.658466][ T2199] exFAT-fs (loop1): bogus sector size bits : 0 [ 2118.684654][ T2199] exFAT-fs (loop1): failed to read boot sector [ 2118.696705][ T2199] exFAT-fs (loop1): failed to recognize exfat type [ 2118.706899][T22300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.726857][T22300] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.738062][T22300] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2118.756707][T22300] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2118.836734][ T2668] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2118.926793][T22300] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2118.941180][T22300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.964064][T22300] usb 5-1: Product: syz [ 2118.975054][T22300] usb 5-1: Manufacturer: syz [ 2118.988131][T22300] usb 5-1: SerialNumber: syz [ 2119.070838][ T2196] loop3: detected capacity change from 0 to 40427 [ 2119.104770][ T2196] F2FS-fs (loop3): invalid crc value [ 2119.132232][ T2196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2119.192546][ T2196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 2119.206759][ T2668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.226874][ T2668] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2119.243263][ T2196] bio_check_eod: 7306 callbacks suppressed [ 2119.243282][ T2196] syz.3.8911: attempt to access beyond end of device [ 2119.243282][ T2196] loop3: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 2119.262974][ T2668] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2119.273433][ T2668] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2119.282448][ T2196] syz.3.8911: attempt to access beyond end of device [ 2119.282448][ T2196] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2119.319018][ T2196] syz.3.8911: attempt to access beyond end of device [ 2119.319018][ T2196] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2119.333151][ T2196] syz.3.8911: attempt to access beyond end of device [ 2119.333151][ T2196] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2119.416197][ T1611] syz-executor: attempt to access beyond end of device [ 2119.416197][ T1611] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2119.446778][ T2668] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2119.455735][ T2668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.486712][ T2668] usb 1-1: Product: syz [ 2119.490804][ T2668] usb 1-1: Manufacturer: syz [ 2119.495213][ T2668] usb 1-1: SerialNumber: syz [ 2119.676755][T22300] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2119.682605][ T309] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2119.689987][T22300] cdc_ncm 5-1:1.0: bind() failure [ 2119.697339][T22300] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2119.703931][T22300] cdc_ncm 5-1:1.1: bind() failure [ 2119.806720][T27062] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2119.966875][ T309] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 2120.056720][T27062] usb 4-1: Using ep0 maxpacket: 16 [ 2120.196798][T27062] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2120.204839][T27062] usb 4-1: config 0 has no interface number 0 [ 2120.212478][T27062] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2120.222008][T27062] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2120.366789][T27062] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2120.375746][T27062] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2120.383571][T27062] usb 4-1: Product: syz [ 2120.387544][T27062] usb 4-1: SerialNumber: syz [ 2120.392416][T27062] usb 4-1: config 0 descriptor?? [ 2120.476757][T22300] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2120.606803][ T309] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2120.615820][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.646805][ T2668] cdc_ncm 1-1:1.0: bind() failure [ 2120.652266][ T2668] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2120.659477][ T2668] cdc_ncm 1-1:1.1: bind() failure [ 2120.669516][T27062] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 2120.678812][T27062] usb 4-1: USB disconnect, device number 48 [ 2120.681280][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2120.846798][T22300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.947287][ T2668] usb 1-1: USB disconnect, device number 74 [ 2121.016768][T22300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2121.025746][T22300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.033629][T22300] usb 3-1: Product: syz [ 2121.037622][T22300] usb 3-1: Manufacturer: syz [ 2121.042093][T22300] usb 3-1: SerialNumber: syz [ 2121.097063][T27062] usb 5-1: USB disconnect, device number 62 [ 2121.156795][ T309] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2121.168120][ T309] usb 2-1: No valid video chain found. [ 2121.174083][ T309] usb 2-1: USB disconnect, device number 65 [ 2121.326003][ T2224] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2121.566733][T27062] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2121.816745][T27062] usb 5-1: Using ep0 maxpacket: 8 [ 2121.856794][T25662] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2121.912643][ T2231] loop1: detected capacity change from 0 to 128 [ 2122.036767][T27062] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 2122.082690][T27062] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2122.091359][T27062] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2122.100044][T27062] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2122.110009][T27062] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2122.120325][T27062] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2122.129133][T25662] usb 1-1: Using ep0 maxpacket: 16 [ 2122.134038][T27062] usb 5-1: config 32 has no interface number 0 [ 2122.140028][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2122.150810][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2122.161727][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2122.173056][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2122.183921][T27062] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2122.197263][T27062] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2122.209276][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2122.304601][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2122.316384][T25662] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 2122.324311][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2122.335537][T25662] usb 1-1: config 0 has no interface number 0 [ 2122.341590][T25662] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2122.346755][T22300] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2122.351436][T27062] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2122.357857][T22300] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 2122.367429][T27062] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2122.374820][T22300] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2122.385985][T27062] usb 5-1: config 32 interface 77 has no altsetting 0 [ 2122.517022][T25662] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2122.526122][T25662] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2122.533902][T25662] usb 1-1: Product: syz [ 2122.538013][T25662] usb 1-1: SerialNumber: syz [ 2122.543123][T25662] usb 1-1: config 0 descriptor?? [ 2122.566796][ T2227] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2122.586805][T27062] usb 5-1: Dual-Role OTG device on HNP port [ 2122.606795][T27062] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2122.615703][T27062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.618122][ T309] usb 3-1: USB disconnect, device number 63 [ 2122.624869][T27062] usb 5-1: Product: syz [ 2122.631697][ T309] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2122.634161][T27062] usb 5-1: Manufacturer: syz [ 2122.646855][T27062] usb 5-1: SerialNumber: syz [ 2122.828528][T25662] usb 1-1: invalid MIDI in EP 0 [ 2122.938198][T25662] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 2122.945866][T25662] usb 1-1: USB disconnect, device number 75 [ 2122.956426][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2123.019754][T27062] usb 5-1: USB disconnect, device number 63 [ 2123.566551][ T2298] loop0: detected capacity change from 0 to 128 [ 2123.762977][ T2289] loop2: detected capacity change from 0 to 40427 [ 2123.795484][ T2289] F2FS-fs (loop2): invalid crc value [ 2123.835777][ T2289] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2123.912840][ T2289] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 2123.941026][ T2289] syz.2.8924: attempt to access beyond end of device [ 2123.941026][ T2289] loop2: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 2123.955265][ T2289] syz.2.8924: attempt to access beyond end of device [ 2123.955265][ T2289] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2123.971513][ T2289] syz.2.8924: attempt to access beyond end of device [ 2123.971513][ T2289] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2123.985597][ T2289] syz.2.8924: attempt to access beyond end of device [ 2123.985597][ T2289] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2123.999763][ T2289] syz.2.8924: attempt to access beyond end of device [ 2123.999763][ T2289] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2124.026711][T25662] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2124.226053][ T2315] loop4: detected capacity change from 0 to 256 [ 2124.237842][ T2315] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2124.586780][T25662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.596764][T25662] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.607650][T25662] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2124.617254][T25662] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2124.696777][ T2325] loop2: detected capacity change from 0 to 128 [ 2124.826796][T25662] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2124.835989][T25662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.843884][T25662] usb 2-1: Product: syz [ 2124.847994][T27062] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2124.855454][T25662] usb 2-1: Manufacturer: syz [ 2124.860643][T25662] usb 2-1: SerialNumber: syz [ 2125.466784][T27062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.496808][T30043] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2125.656748][ T309] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2125.666854][T27062] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2125.742241][T27062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.750093][T27062] usb 1-1: Product: syz [ 2125.754034][T27062] usb 1-1: Manufacturer: syz [ 2125.758486][T27062] usb 1-1: SerialNumber: syz [ 2125.856825][T30043] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 2125.866847][T25662] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2125.872698][T25662] cdc_ncm 2-1:1.0: bind() failure [ 2125.878217][T25662] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2125.884804][T25662] cdc_ncm 2-1:1.1: bind() failure [ 2125.896746][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 2126.016838][T30043] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2126.025724][T30043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.033551][T30043] usb 5-1: Product: syz [ 2126.037540][T30043] usb 5-1: Manufacturer: syz [ 2126.041940][T30043] usb 5-1: SerialNumber: syz [ 2126.047204][T30043] usb 5-1: config 0 descriptor?? [ 2126.096776][ T309] usb 3-1: config 32 has an invalid interface number: 77 but max is 1 [ 2126.104792][ T309] usb 3-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2126.113418][ T309] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2126.121989][ T309] usb 3-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2126.131891][ T309] usb 3-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2126.142039][ T309] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2126.150798][ T309] usb 3-1: config 32 has no interface number 0 [ 2126.156786][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2126.167554][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2126.178296][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2126.189254][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2126.200020][ T309] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2126.210814][ T309] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2126.221642][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2126.232703][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2126.243762][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2126.254809][ T309] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2126.264722][ T309] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2126.277973][ T309] usb 3-1: config 32 interface 77 has no altsetting 0 [ 2126.290366][ T2332] loop4: detected capacity change from 0 to 512 [ 2126.318484][ T2332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2126.327267][ T2332] ext4 filesystem being mounted at /root/syzkaller.seZZhl/1128/bus supports timestamps until 2038 (0x7fffffff) [ 2126.436816][ T309] usb 3-1: Dual-Role OTG device on HNP port [ 2126.457103][ T309] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2126.466120][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.474228][ T309] usb 3-1: Product: syz [ 2126.478591][ T309] usb 3-1: Manufacturer: syz [ 2126.483043][ T309] usb 3-1: SerialNumber: syz [ 2126.808988][ T309] usb 3-1: USB disconnect, device number 64 [ 2126.886777][T27062] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2126.893098][T27062] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 2126.899877][T27062] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2127.147039][T27062] usb 1-1: USB disconnect, device number 76 [ 2127.156727][T27062] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 2127.327772][ T309] usb 2-1: USB disconnect, device number 66 [ 2127.726713][ T4088] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2127.908967][ T2387] loop3: detected capacity change from 0 to 40427 [ 2128.009559][ T2387] F2FS-fs (loop3): invalid crc value [ 2128.055227][ T2387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2128.131135][ T2387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 2128.148376][ T2387] bio_check_eod: 1486 callbacks suppressed [ 2128.148393][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.148393][ T2387] loop3: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 2128.168095][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.168095][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.181769][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.181769][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.195546][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.195546][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.196233][ T4088] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 2128.221902][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.221902][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.242615][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.242615][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.262303][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.262303][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.281613][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.281613][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.295524][T30043] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2128.309030][ T2387] syz.3.8943: attempt to access beyond end of device [ 2128.309030][ T2387] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 2128.322607][T30043] asix: probe of 5-1:0.0 failed with error -71 [ 2128.329805][T30043] usb 5-1: USB disconnect, device number 64 [ 2128.346533][ T1611] syz-executor: attempt to access beyond end of device [ 2128.346533][ T1611] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2128.361535][T12498] EXT4-fs (loop4): unmounting filesystem. [ 2128.929779][ T2414] loop4: detected capacity change from 0 to 128 [ 2128.976789][ T4088] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2128.992122][ T4088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.238076][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.246466][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.416729][ T309] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2129.496778][ T4088] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 2129.503473][ T4088] usb 3-1: No valid video chain found. [ 2129.656712][ T309] usb 2-1: Using ep0 maxpacket: 8 [ 2129.702501][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.710820][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.724279][T30043] usb 3-1: USB disconnect, device number 65 [ 2129.806722][ T4088] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2129.826756][ T2668] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2129.856826][ T309] usb 2-1: config 32 has an invalid interface number: 77 but max is 0 [ 2129.864853][ T309] usb 2-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2129.873968][ T309] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2129.882808][ T309] usb 2-1: config 32 has an invalid descriptor of length 113, skipping remainder of the config [ 2129.893302][ T309] usb 2-1: config 32 has no interface number 0 [ 2129.899449][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2129.910411][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2129.925935][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2129.937238][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid wMaxPacketSize 0 [ 2129.952341][ T309] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2129.962848][ T309] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2129.973869][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2129.984717][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2129.995758][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2130.206724][ T309] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2130.217689][ T309] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2130.230737][ T309] usb 2-1: config 32 interface 77 has no altsetting 0 [ 2130.246715][ T4088] usb 1-1: Using ep0 maxpacket: 8 [ 2130.251571][ T2668] usb 5-1: Using ep0 maxpacket: 16 [ 2130.366770][ T2668] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2130.374876][ T2668] usb 5-1: config 0 has no interface number 0 [ 2130.380801][ T2668] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2130.396772][ T309] usb 2-1: Dual-Role OTG device on HNP port [ 2130.416754][ T309] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2130.425629][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.433601][ T309] usb 2-1: Product: syz [ 2130.437643][ T309] usb 2-1: Manufacturer: syz [ 2130.442039][ T309] usb 2-1: SerialNumber: syz [ 2130.446801][ T4088] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 2130.458344][ T4088] usb 1-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2130.467238][ T4088] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2130.476112][ T4088] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2130.486374][ T4088] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2130.497083][ T4088] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2130.505880][ T4088] usb 1-1: config 32 has no interface number 0 [ 2130.512074][ T2668] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2130.521078][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2130.532117][ T2668] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2130.540197][ T2668] usb 5-1: Product: syz [ 2130.544215][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2130.555233][ T2668] usb 5-1: SerialNumber: syz [ 2130.560437][ T2668] usb 5-1: config 0 descriptor?? [ 2130.565235][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2130.576375][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2130.587407][ T2425] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2130.594464][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2130.606273][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2130.617140][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2130.628046][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2130.638897][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2130.649709][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2130.659475][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2130.672592][ T4088] usb 1-1: config 32 interface 77 has no altsetting 0 [ 2130.967402][ T2668] usb 5-1: invalid MIDI in EP 0 [ 2130.974176][ T2668] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 2130.983713][ T2668] usb 5-1: USB disconnect, device number 65 [ 2130.987329][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2131.018661][ T309] usb 2-1: USB disconnect, device number 67 [ 2131.066776][ T4088] usb 1-1: Dual-Role OTG device on HNP port [ 2131.086780][ T4088] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2131.095626][ T4088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.103504][ T4088] usb 1-1: Product: syz [ 2131.107467][ T4088] usb 1-1: Manufacturer: syz [ 2131.111852][ T4088] usb 1-1: SerialNumber: syz [ 2131.156978][T25662] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2131.440174][ T4088] usb 1-1: USB disconnect, device number 77 [ 2131.596756][T25662] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.625068][ T2445] loop4: detected capacity change from 0 to 40427 [ 2131.650495][ T2445] F2FS-fs (loop4): invalid crc value [ 2131.666238][ T2445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2131.716955][T10693] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2131.743327][ T2445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2131.806745][T25662] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2131.815589][T25662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.837146][T25662] usb 4-1: Product: syz [ 2131.841148][T25662] usb 4-1: Manufacturer: syz [ 2131.845569][T25662] usb 4-1: SerialNumber: syz [ 2132.080729][ T2458] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2132.127118][T10693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.152873][T10693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.240044][T10693] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2132.256761][T10693] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2132.454658][T10693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2132.474373][T10693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.482385][T10693] usb 3-1: Product: syz [ 2132.486351][T10693] usb 3-1: Manufacturer: syz [ 2132.490835][T10693] usb 3-1: SerialNumber: syz [ 2132.808458][T25662] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 2132.845688][T25662] cdc_ncm 4-1:1.0: bind() failure [ 2132.851425][T25662] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2132.858071][T25662] cdc_ncm 4-1:1.1: bind() failure [ 2133.842673][T10693] cdc_ncm 3-1:1.0: bind() failure [ 2133.849155][T10693] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2133.859857][T10693] cdc_ncm 3-1:1.1: bind() failure [ 2134.097331][T10693] usb 3-1: USB disconnect, device number 66 [ 2134.126994][ T606] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2134.366733][ T606] usb 1-1: Using ep0 maxpacket: 16 [ 2134.406766][T27062] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2134.486820][ T606] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 2134.494673][ T606] usb 1-1: config 0 has no interface number 0 [ 2134.500598][ T606] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2134.622927][ T2493] loop2: detected capacity change from 0 to 512 [ 2134.626842][ T606] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2134.638655][ T606] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2134.646481][ T606] usb 1-1: Product: syz [ 2134.646792][T25662] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2134.650602][ T606] usb 1-1: SerialNumber: syz [ 2134.659981][ T2493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2134.662881][ T606] usb 1-1: config 0 descriptor?? [ 2134.676278][ T2493] ext4 filesystem being mounted at /root/syzkaller.dlVjf1/206/bus supports timestamps until 2038 (0x7fffffff) [ 2134.687890][ T2487] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2134.720291][ T4088] usb 4-1: USB disconnect, device number 49 [ 2134.827170][T27062] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 2135.608750][ T606] usb 1-1: invalid MIDI in EP 0 [ 2135.615580][ T606] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 2135.620583][T30793] EXT4-fs (loop2): unmounting filesystem. [ 2135.623422][ T606] usb 1-1: USB disconnect, device number 78 [ 2135.648746][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2135.686769][T27062] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2135.695637][T27062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.703611][T27062] usb 2-1: Product: syz [ 2135.707856][T27062] usb 2-1: Manufacturer: syz [ 2135.873612][ T2509] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2136.256200][T27062] usb 2-1: SerialNumber: syz [ 2136.284200][T27062] usb 2-1: config 0 descriptor?? [ 2136.289188][T25662] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 2136.850910][T25662] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2136.860224][T25662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.870330][T25662] usb 5-1: Product: syz [ 2136.874386][T25662] usb 5-1: Manufacturer: syz [ 2136.879804][T25662] usb 5-1: SerialNumber: syz [ 2136.935639][T25662] usb 5-1: config 0 descriptor?? [ 2136.944978][ T2489] loop1: detected capacity change from 0 to 512 [ 2136.958223][ T2489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2136.967067][ T2489] ext4 filesystem being mounted at /root/syzkaller.rWloe2/1044/bus supports timestamps until 2038 (0x7fffffff) [ 2137.370352][ T2491] loop4: detected capacity change from 0 to 512 [ 2137.388200][ T2491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2137.397112][ T2491] ext4 filesystem being mounted at /root/syzkaller.seZZhl/1135/bus supports timestamps until 2038 (0x7fffffff) [ 2137.455669][ T2533] overlayfs: overlapping lowerdir path [ 2138.026802][T10693] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2138.496855][T10693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.534083][T14404] EXT4-fs (loop1): unmounting filesystem. [ 2138.539918][T27062] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2138.549970][T27062] asix: probe of 2-1:0.0 failed with error -71 [ 2138.556937][T27062] usb 2-1: USB disconnect, device number 68 [ 2138.676760][T10693] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2138.686280][T10693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.694430][T10693] usb 4-1: Product: syz [ 2138.698710][T10693] usb 4-1: Manufacturer: syz [ 2138.703168][T10693] usb 4-1: SerialNumber: syz [ 2138.746791][ T4459] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2139.186860][T25662] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2139.196892][T25662] asix: probe of 5-1:0.0 failed with error -71 [ 2139.203865][T12498] EXT4-fs (loop4): unmounting filesystem. [ 2139.209318][T25662] usb 5-1: USB disconnect, device number 66 [ 2139.266352][ T4459] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.276805][ T4459] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.287570][ T4459] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2139.297445][ T4459] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2139.366954][T20321] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2139.394005][ T2562] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2139.496838][ T4459] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2139.505852][ T4459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.513674][ T4459] usb 3-1: Product: syz [ 2139.517713][ T4459] usb 3-1: Manufacturer: syz [ 2139.522064][ T4459] usb 3-1: SerialNumber: syz [ 2139.776809][T20321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.787199][T20321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.798211][T20321] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2139.808675][T20321] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2139.926822][T10693] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2139.933161][T10693] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 2139.939690][T10693] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2139.996903][T20321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2140.007678][T20321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.015519][T20321] usb 1-1: Product: syz [ 2140.019623][T20321] usb 1-1: Manufacturer: syz [ 2140.024071][T20321] usb 1-1: SerialNumber: syz [ 2140.178357][T27062] usb 4-1: USB disconnect, device number 50 [ 2140.202075][T27062] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 2140.706761][ T4459] cdc_ncm 3-1:1.0: bind() failure [ 2140.712695][ T4459] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2140.721827][ T4459] cdc_ncm 3-1:1.1: bind() failure [ 2141.307444][ T2668] usb 3-1: USB disconnect, device number 67 [ 2141.476833][T20321] cdc_ncm 1-1:1.0: bind() failure [ 2141.482599][T20321] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2141.490242][T20321] cdc_ncm 1-1:1.1: bind() failure [ 2141.868163][ T2668] usb 1-1: USB disconnect, device number 79 [ 2142.011619][ T4459] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2142.266759][ T4459] usb 4-1: Using ep0 maxpacket: 16 [ 2142.359055][ T2640] loop1: detected capacity change from 0 to 256 [ 2142.368379][ T2640] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2142.396881][ T4459] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2142.408317][ T4459] usb 4-1: config 0 has no interface number 0 [ 2142.414373][ T4459] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2142.556780][ T4459] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2142.571958][ T4459] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2142.596852][ T4459] usb 4-1: Product: syz [ 2142.609620][ T4459] usb 4-1: SerialNumber: syz [ 2142.629154][ T4459] usb 4-1: config 0 descriptor?? [ 2142.656790][ T2626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2142.786753][T27062] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2142.927363][ T4459] usb 4-1: invalid MIDI in EP 0 [ 2142.934162][ T4459] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 2142.941806][ T4459] usb 4-1: USB disconnect, device number 51 [ 2142.946243][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2143.046723][T20321] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2143.096849][T27062] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 2143.186747][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.196862][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.406859][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.416989][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.466852][T20321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.536801][ T606] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2143.565356][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.575625][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.657178][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.667731][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.716917][T20321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2143.726627][T20321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.735249][T20321] usb 3-1: Product: syz [ 2143.740234][T20321] usb 3-1: Manufacturer: syz [ 2143.744761][T20321] usb 3-1: SerialNumber: syz [ 2143.766960][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.779351][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.886804][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.896933][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2143.936819][ T606] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 2143.981789][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.991927][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2144.076759][T27062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.089558][ T2664] loop4: detected capacity change from 0 to 256 [ 2144.095670][T27062] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 2144.104636][T27062] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2144.119389][T27062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.127982][ T2664] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2144.382083][ T2644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.393406][ T2644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.576755][ T606] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2144.578046][ T2671] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2144.585615][ T606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.839307][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.848228][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.926780][T20321] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2144.933029][T20321] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 2144.940053][T20321] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2145.096838][ T606] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2145.103655][ T606] usb 2-1: No valid video chain found. [ 2145.116732][ T2668] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2145.173235][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.181578][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.187208][T27062] usb 3-1: USB disconnect, device number 68 [ 2145.196820][T27062] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2145.299267][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.309216][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.318398][ T606] usb 2-1: USB disconnect, device number 69 [ 2145.626787][ T2668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2145.637619][ T2668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2145.647177][ T2668] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2145.656038][ T2668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.664563][ T2668] usb 5-1: config 0 descriptor?? [ 2145.716071][ T2710] loop2: detected capacity change from 0 to 256 [ 2146.291547][ T4459] usb 1-1: USB disconnect, device number 80 [ 2146.502588][ T2727] loop3: detected capacity change from 0 to 256 [ 2146.515719][ T2727] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2146.700388][ T2729] overlayfs: failed to resolve './file2': -2 [ 2147.186910][ T2668] usb 5-1: string descriptor 0 read error: -71 [ 2147.206732][ T2668] uclogic 0003:256C:006D.0154: failed retrieving string descriptor #200: -71 [ 2147.218636][ T2668] uclogic 0003:256C:006D.0154: failed retrieving pen parameters: -71 [ 2147.249245][ T2668] uclogic 0003:256C:006D.0154: failed probing pen v2 parameters: -71 [ 2147.265432][ T2668] uclogic 0003:256C:006D.0154: failed probing parameters: -71 [ 2147.278334][ T2668] uclogic: probe of 0003:256C:006D.0154 failed with error -71 [ 2147.290398][ T2668] usb 5-1: USB disconnect, device number 67 [ 2147.781576][ T2747] loop3: detected capacity change from 0 to 256 [ 2147.830704][ T2747] exFAT-fs (loop3): bogus sector size bits : 0 [ 2147.836804][ T2747] exFAT-fs (loop3): failed to read boot sector [ 2147.842723][ T2747] exFAT-fs (loop3): failed to recognize exfat type [ 2148.466730][ T606] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2149.703578][ T2777] loop3: detected capacity change from 0 to 256 [ 2149.720484][ T2777] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2149.866926][ T4088] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2149.886988][ T606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2149.931971][ T2780] loop4: detected capacity change from 0 to 128 [ 2150.076760][ T606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2150.088774][ T606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.102752][ T606] usb 3-1: Product: syz [ 2150.110433][ T606] usb 3-1: Manufacturer: syz [ 2150.119027][ T606] usb 3-1: SerialNumber: syz [ 2150.236798][ T4088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.247040][ T4088] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.258008][ T4088] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2150.267752][ T4088] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2150.337613][ T2786] loop0: detected capacity change from 0 to 256 [ 2150.364462][ T2786] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2150.446908][ T4088] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2150.455768][ T4088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.481646][ T4088] usb 2-1: Product: syz [ 2150.485632][ T4088] usb 2-1: Manufacturer: syz [ 2150.513613][ T4088] usb 2-1: SerialNumber: syz [ 2151.246826][ T4088] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2151.252910][ T4088] cdc_ncm 2-1:1.0: bind() failure [ 2151.258910][ T4088] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2151.267283][ T4088] cdc_ncm 2-1:1.1: bind() failure [ 2151.286756][ T606] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2151.297728][ T606] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 2151.309643][ T606] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2151.391159][ T2805] loop0: detected capacity change from 0 to 256 [ 2151.401256][ T2805] exFAT-fs (loop0): bogus sector size bits : 0 [ 2151.407284][ T2805] exFAT-fs (loop0): failed to read boot sector [ 2151.413235][ T2805] exFAT-fs (loop0): failed to recognize exfat type [ 2151.518275][T30146] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2151.578532][ T4088] usb 3-1: USB disconnect, device number 69 [ 2151.584944][ T4088] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2151.596794][T25662] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2151.896786][T25662] usb 4-1: Using ep0 maxpacket: 8 [ 2152.037156][T25662] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 2152.048019][T25662] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2152.060816][T25662] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 2152.069836][T25662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.091310][T25662] usb 4-1: config 0 descriptor?? [ 2152.333179][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.340911][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.348338][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.355846][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.363150][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.379117][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.386454][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.395492][T27062] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 2152.407258][T27062] hid-generic 0000:0000:0000.0155: item fetching failed at offset 8/43 [ 2152.424161][T27062] hid-generic: probe of 0000:0000:0000.0155 failed with error -22 [ 2152.616870][T25662] usb 4-1: string descriptor 0 read error: -71 [ 2152.633649][T25662] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2152.732969][T25662] usb 4-1: USB disconnect, device number 52 [ 2152.769317][T22300] usb 2-1: USB disconnect, device number 70 [ 2152.776936][ T4088] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2152.948055][ T2854] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2153.048907][ T4088] usb 1-1: Using ep0 maxpacket: 8 [ 2153.232530][ T2862] loop2: detected capacity change from 0 to 128 [ 2153.246760][ T4088] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 2153.264573][ T4088] usb 1-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2153.278638][ T4088] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2153.293804][ T4088] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2153.311301][ T4088] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2153.329078][ T4088] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2153.345490][ T4088] usb 1-1: config 32 has no interface number 0 [ 2153.358046][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2153.378575][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2153.399583][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2153.421301][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2153.446710][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2153.457573][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2153.468606][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2153.479739][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2153.490856][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2153.502017][ T4088] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2153.511939][ T4088] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2153.525417][ T4088] usb 1-1: config 32 interface 77 has no altsetting 0 [ 2153.686755][T22300] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2153.696788][ T4088] usb 1-1: Dual-Role OTG device on HNP port [ 2153.710721][ T2866] loop4: detected capacity change from 0 to 256 [ 2153.726821][ T4088] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2153.736775][ T2866] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2153.745958][ T4088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.755065][ T4088] usb 1-1: Product: syz [ 2153.759214][ T4088] usb 1-1: Manufacturer: syz [ 2153.763613][ T4088] usb 1-1: SerialNumber: syz [ 2153.986763][T22300] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 2154.142252][ T2878] loop2: detected capacity change from 0 to 256 [ 2154.152251][ T2878] exFAT-fs (loop2): bogus sector size bits : 0 [ 2154.158296][ T2878] exFAT-fs (loop2): failed to read boot sector [ 2154.164229][ T2878] exFAT-fs (loop2): failed to recognize exfat type [ 2154.288310][ T4088] usb 1-1: USB disconnect, device number 81 [ 2154.316722][ T606] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2154.876829][ T606] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2155.196813][T22300] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2155.205880][T22300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.276790][ T606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2155.285794][ T606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.293742][ T606] usb 2-1: Product: syz [ 2155.297835][ T606] usb 2-1: Manufacturer: syz [ 2155.302323][ T606] usb 2-1: SerialNumber: syz [ 2155.448854][ T2860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.459253][ T2860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.706825][T22300] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2155.713604][T22300] usb 4-1: No valid video chain found. [ 2155.909416][ T2860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.919208][ T2860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.932534][ T2847] usb 4-1: USB disconnect, device number 53 [ 2155.996738][T22300] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2156.356802][T22300] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2156.365834][T22300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.374318][T22300] usb 3-1: config 0 descriptor?? [ 2156.611271][ T606] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2156.618426][ T606] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 2156.625405][ T606] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2156.758885][ T2847] usb 2-1: USB disconnect, device number 71 [ 2156.766749][ T2847] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 2156.906725][ T606] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2157.146739][ T606] usb 4-1: Using ep0 maxpacket: 16 [ 2157.266760][ T606] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2157.274654][ T606] usb 4-1: config 0 has no interface number 0 [ 2157.280812][ T606] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2157.331742][ T606] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2157.576742][ T2847] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2157.576807][ T606] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2157.593151][ T606] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2157.600908][ T606] usb 4-1: Product: syz [ 2157.604878][ T606] usb 4-1: SerialNumber: syz [ 2157.609788][ T606] usb 4-1: config 0 descriptor?? [ 2157.991071][ T606] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 2157.999311][ T606] usb 4-1: USB disconnect, device number 54 [ 2158.006783][T30146] udevd[30146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2158.026734][ T2847] usb 2-1: Using ep0 maxpacket: 16 [ 2158.166786][ T2847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2158.177800][ T2847] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2158.187137][ T2847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.195711][ T2847] usb 2-1: config 0 descriptor?? [ 2158.336729][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2158.656730][ T606] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2158.715504][T25662] usb 3-1: USB disconnect, device number 70 [ 2158.729147][ T2962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.737685][ T2962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.746997][ T24] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 2158.755466][ T2847] hid (null): unknown global tag 0xd [ 2158.762677][ T2847] hid-generic 0003:0158:0100.0156: unknown main item tag 0x1 [ 2158.770074][ T2847] hid-generic 0003:0158:0100.0156: unknown global tag 0xd [ 2158.777058][T27062] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2158.784394][ T2847] hid-generic 0003:0158:0100.0156: item 0 2 1 13 parsing failed [ 2158.792064][ T2847] hid-generic: probe of 0003:0158:0100.0156 failed with error -22 [ 2158.926773][ T24] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2158.935665][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.943455][ T24] usb 5-1: Product: syz [ 2158.947446][ T24] usb 5-1: Manufacturer: syz [ 2158.951603][T22300] usb 2-1: USB disconnect, device number 72 [ 2158.951850][ T24] usb 5-1: SerialNumber: syz [ 2158.964305][ T24] usb 5-1: config 0 descriptor?? [ 2159.016730][T27062] usb 4-1: Using ep0 maxpacket: 16 [ 2159.016779][ T606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.116769][T25662] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2159.136811][T27062] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2159.144623][T27062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.154683][T27062] usb 4-1: config 0 has no interface number 0 [ 2159.160716][T27062] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2159.186788][ T606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2159.195683][ T606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.203546][ T606] usb 1-1: Product: syz [ 2159.207577][ T606] usb 1-1: Manufacturer: syz [ 2159.211673][ T2972] loop4: detected capacity change from 0 to 512 [ 2159.211933][ T606] usb 1-1: SerialNumber: syz [ 2159.238839][ T2972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2159.247774][ T2972] ext4 filesystem being mounted at /root/syzkaller.seZZhl/1159/bus supports timestamps until 2038 (0x7fffffff) [ 2159.316807][T27062] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2159.325754][T27062] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2159.333615][T27062] usb 4-1: Product: syz [ 2159.337580][T27062] usb 4-1: SerialNumber: syz [ 2159.342650][T27062] usb 4-1: config 0 descriptor?? [ 2159.477278][T25662] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 2159.629348][T27062] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 2159.643753][ T5062] udevd[5062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2159.659973][T27062] usb 4-1: USB disconnect, device number 55 [ 2159.916767][ T606] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 2159.922667][ T606] cdc_ncm 1-1:1.0: bind() failure [ 2159.929108][ T606] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2159.935764][ T606] cdc_ncm 1-1:1.1: bind() failure [ 2160.446783][T25662] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2160.455831][T25662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.708497][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.726853][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.986800][T25662] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 2160.993524][T25662] usb 3-1: No valid video chain found. [ 2161.086765][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2161.097162][ T24] asix: probe of 5-1:0.0 failed with error -71 [ 2161.097815][T12498] EXT4-fs (loop4): unmounting filesystem. [ 2161.108836][ T24] usb 5-1: USB disconnect, device number 68 [ 2161.189661][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.198089][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.208288][T25662] usb 3-1: USB disconnect, device number 71 [ 2161.246818][ T4088] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2161.546860][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2161.606825][ T4088] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.776948][ T4088] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2161.785877][ T4088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.793660][ T4088] usb 4-1: Product: syz [ 2161.797644][ T4088] usb 4-1: Manufacturer: syz [ 2161.802018][ T4088] usb 4-1: SerialNumber: syz [ 2161.818573][T25662] usb 1-1: USB disconnect, device number 82 [ 2161.846785][ T24] usb 5-1: device descriptor read/64, error -71 [ 2162.587164][ T24] usb 5-1: device descriptor read/64, error -71 [ 2162.627694][ T3030] loop2: detected capacity change from 0 to 128 [ 2162.866763][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2163.076771][T22300] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2163.156740][ T24] usb 5-1: device descriptor read/64, error -71 [ 2163.200447][ T3037] loop1: detected capacity change from 0 to 128 [ 2163.216810][ T4088] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2163.225983][ T4088] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 2163.233724][ T4088] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2163.356824][T22300] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 2163.556720][ T24] usb 5-1: device descriptor read/64, error -71 [ 2163.568444][ T606] usb 4-1: USB disconnect, device number 56 [ 2163.576985][ T606] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 2163.686827][ T24] usb usb5-port1: attempt power cycle [ 2164.106736][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2164.205186][ T3078] loop1: detected capacity change from 0 to 256 [ 2164.220075][T22300] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2164.232940][ T3078] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2164.308665][T22300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.506788][ T24] usb 5-1: device not accepting address 71, error -71 [ 2165.551387][ T3097] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2165.685690][ T3099] loop2: detected capacity change from 0 to 256 [ 2165.685853][ T4088] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2165.699263][T22300] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 2165.705997][T22300] usb 1-1: No valid video chain found. [ 2165.711830][T22300] usb 1-1: USB disconnect, device number 83 [ 2165.719759][ T3099] exFAT-fs (loop2): bogus sector size bits : 0 [ 2165.725766][ T3099] exFAT-fs (loop2): failed to read boot sector [ 2165.731794][ T3099] exFAT-fs (loop2): failed to recognize exfat type [ 2166.056776][ T4088] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 2166.185587][ T3110] loop0: detected capacity change from 0 to 256 [ 2166.243498][ T3112] loop4: detected capacity change from 0 to 128 [ 2166.249961][ T4088] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2166.265483][ T4088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.274042][ T4088] usb 4-1: Product: syz [ 2166.278233][ T4088] usb 4-1: Manufacturer: syz [ 2166.282695][ T4088] usb 4-1: SerialNumber: syz [ 2166.288552][ T4088] usb 4-1: config 0 descriptor?? [ 2166.642112][ T3090] loop3: detected capacity change from 0 to 512 [ 2166.693439][ T3090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2166.703259][ T3090] ext4 filesystem being mounted at /root/syzkaller.llScZr/77/bus supports timestamps until 2038 (0x7fffffff) [ 2167.074875][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2167.347244][ T3499] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2167.436731][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2167.536734][T22300] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2167.586765][ T3499] usb 3-1: Using ep0 maxpacket: 8 [ 2167.666774][ T24] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 2167.675079][ T24] usb 2-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2167.683661][ T24] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2167.692349][ T24] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2167.701097][ T24] usb 2-1: config 32 has no interface number 0 [ 2167.707161][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2167.717939][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2167.728721][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2167.739786][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2167.750643][ T24] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2167.761069][ T24] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2167.771693][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2167.782595][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2167.793501][ T3499] usb 3-1: config 32 has an invalid interface number: 77 but max is 0 [ 2167.801435][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2167.812285][ T3499] usb 3-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2167.820871][ T3499] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2167.829473][ T24] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2167.839179][ T3499] usb 3-1: config 32 has an invalid descriptor of length 113, skipping remainder of the config [ 2167.849353][ T24] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 2167.859948][ T3499] usb 3-1: config 32 has no interface number 0 [ 2167.865894][ T24] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2167.876433][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2167.887181][ T24] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 2167.896780][T22300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2167.897793][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2167.908047][T22300] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2167.918465][ T24] usb 2-1: config 32 interface 77 altsetting 64 has 14 endpoint descriptors, different from the interface descriptor's value: 11 [ 2167.929425][T22300] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2167.942207][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2167.952662][T22300] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2167.963307][ T24] usb 2-1: config 32 interface 77 has no altsetting 0 [ 2167.983838][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2168.009160][ T3499] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2168.020032][ T3499] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2168.031171][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2168.042226][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2168.053167][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2168.064071][ T3499] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2168.075297][ T3499] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2168.126043][ T3499] usb 3-1: config 32 interface 77 has no altsetting 0 [ 2168.127043][T22300] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2168.141592][T22300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.149800][ T3136] loop0: detected capacity change from 0 to 256 [ 2168.292552][ T4088] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2168.306477][ T3136] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2168.343102][ T1611] EXT4-fs (loop3): unmounting filesystem. [ 2168.366962][T22300] usb 5-1: Product: syz [ 2168.371001][ T4088] asix: probe of 4-1:0.0 failed with error -71 [ 2168.377106][T22300] usb 5-1: Manufacturer: syz [ 2168.381528][T22300] usb 5-1: SerialNumber: syz [ 2168.388848][ T4088] usb 4-1: USB disconnect, device number 57 [ 2168.416803][ T24] usb 2-1: Dual-Role OTG device on HNP port [ 2168.437308][ T24] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2168.446278][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.454111][ T24] usb 2-1: Product: syz [ 2168.458190][ T24] usb 2-1: Manufacturer: syz [ 2168.462576][ T24] usb 2-1: SerialNumber: syz [ 2168.496841][ T3499] usb 3-1: Dual-Role OTG device on HNP port [ 2168.527296][ T3499] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2168.536195][ T3499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.543987][ T3499] usb 3-1: Product: syz [ 2168.547997][ T3499] usb 3-1: Manufacturer: syz [ 2168.552448][ T3499] usb 3-1: SerialNumber: syz [ 2168.788570][ T24] usb 2-1: USB disconnect, device number 73 [ 2168.846737][ T4088] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2168.918721][ T3499] usb 3-1: USB disconnect, device number 72 [ 2169.256724][ T4088] usb 4-1: Using ep0 maxpacket: 16 [ 2169.282799][ T3149] device wg2 left promiscuous mode [ 2169.290461][ T3149] device wg2 entered promiscuous mode [ 2169.377018][ T4088] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2169.384955][ T4088] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.402089][ T4088] usb 4-1: config 0 has no interface number 0 [ 2169.414203][ T4088] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2169.506777][T22300] cdc_ncm 5-1:1.0: bind() failure [ 2169.515782][T22300] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2169.526159][T22300] cdc_ncm 5-1:1.1: bind() failure [ 2169.556799][ T4088] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2169.740448][ T4088] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2169.752742][ T4088] usb 4-1: Product: syz [ 2169.757053][ T4088] usb 4-1: SerialNumber: syz [ 2169.769826][ T4088] usb 4-1: config 0 descriptor?? [ 2169.909408][T22300] usb 5-1: USB disconnect, device number 73 [ 2170.049173][ T4088] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 2170.056454][ T4088] usb 4-1: USB disconnect, device number 58 [ 2170.056523][ T5062] udevd[5062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2170.192240][ T3164] loop1: detected capacity change from 0 to 256 [ 2170.556724][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2170.936777][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.966737][T22300] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2170.974183][ T4088] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2171.116777][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2171.125769][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.133569][ T24] usb 3-1: Product: syz [ 2171.137566][ T24] usb 3-1: Manufacturer: syz [ 2171.141938][ T24] usb 3-1: SerialNumber: syz [ 2171.316763][ T309] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2171.336804][ T4088] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 2171.344819][T22300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.354733][T22300] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2171.365508][T22300] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2171.375109][T22300] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2171.506792][ T4088] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2171.515650][ T4088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.523584][ T4088] usb 4-1: Product: syz [ 2171.527559][ T4088] usb 4-1: Manufacturer: syz [ 2171.531968][ T4088] usb 4-1: SerialNumber: syz [ 2171.537225][ T4088] usb 4-1: config 0 descriptor?? [ 2171.556798][T22300] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2171.565637][T22300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.573533][T22300] usb 5-1: Product: syz [ 2171.577811][T22300] usb 5-1: Manufacturer: syz [ 2171.582211][T22300] usb 5-1: SerialNumber: syz [ 2171.686750][ T309] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 2171.746781][ T2847] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2171.781667][ T3174] loop3: detected capacity change from 0 to 512 [ 2171.798248][ T3174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2171.807026][ T3174] ext4 filesystem being mounted at /root/syzkaller.llScZr/80/bus supports timestamps until 2038 (0x7fffffff) [ 2171.851489][ T309] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2171.860555][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.868560][ T309] usb 2-1: Product: syz [ 2171.872562][ T309] usb 2-1: Manufacturer: syz [ 2171.877069][ T309] usb 2-1: SerialNumber: syz [ 2171.881979][ T309] usb 2-1: config 0 descriptor?? [ 2172.130083][ T3178] loop1: detected capacity change from 0 to 512 [ 2172.148275][ T3178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2172.157045][ T2847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.157084][ T3178] ext4 filesystem being mounted at /root/syzkaller.rWloe2/1077/bus supports timestamps until 2038 (0x7fffffff) [ 2172.226759][ T309] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2172.236555][ T309] asix: probe of 2-1:0.0 failed with error -71 [ 2172.243175][ T309] usb 2-1: USB disconnect, device number 74 [ 2172.336852][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2172.343177][ T2847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2172.351972][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2172.359310][ T2847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.367136][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2172.372600][ T2847] usb 1-1: Product: syz [ 2172.376555][ T2847] usb 1-1: Manufacturer: syz [ 2172.381004][ T2847] usb 1-1: SerialNumber: syz [ 2172.596768][ T24] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 2172.603326][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2172.615381][ T24] usb 3-1: USB disconnect, device number 73 [ 2172.622919][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2172.726762][T22300] cdc_ncm 5-1:1.0: bind() failure [ 2172.732550][T22300] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2172.739451][T22300] cdc_ncm 5-1:1.1: bind() failure [ 2172.746305][T14404] EXT4-fs (loop1): unmounting filesystem. [ 2172.987060][ T309] usb 5-1: USB disconnect, device number 74 [ 2173.026778][T22300] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2173.119130][ T3193] device wg2 entered promiscuous mode [ 2173.266699][T22300] usb 2-1: Using ep0 maxpacket: 8 [ 2173.466786][T22300] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 2173.474849][T22300] usb 2-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2173.483545][T22300] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2173.486750][ T2847] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2173.492400][T22300] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2173.498542][ T2847] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 2173.518494][T22300] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2173.520002][ T2847] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2173.529863][T22300] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2173.559014][T22300] usb 2-1: config 32 has no interface number 0 [ 2173.565035][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2173.576048][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2173.587041][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2173.598094][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2173.609066][T22300] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2173.620218][T22300] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2173.631004][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2173.658761][ T4088] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2173.668516][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2173.669368][ T1611] EXT4-fs (loop3): unmounting filesystem. [ 2173.679429][ T4088] asix: probe of 4-1:0.0 failed with error -71 [ 2173.680067][ T4088] usb 4-1: USB disconnect, device number 59 [ 2173.696955][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2173.708736][T22300] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2173.718501][T22300] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2173.731668][T22300] usb 2-1: config 32 interface 77 has no altsetting 0 [ 2173.836755][ T2847] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2173.932663][ T3218] loop3: detected capacity change from 0 to 128 [ 2174.077805][T25662] usb 1-1: USB disconnect, device number 84 [ 2174.096754][T25662] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 2174.096927][T22300] usb 2-1: Dual-Role OTG device on HNP port [ 2174.126724][T22300] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2174.141606][T22300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.151232][T22300] usb 2-1: Product: syz [ 2174.159315][T22300] usb 2-1: Manufacturer: syz [ 2174.163802][T22300] usb 2-1: SerialNumber: syz [ 2174.286801][ T2847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.297629][ T2847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2174.307217][ T2847] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2174.316031][ T2847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.324527][ T2847] usb 5-1: config 0 descriptor?? [ 2174.489090][T22300] usb 2-1: USB disconnect, device number 75 [ 2174.866734][ T4088] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2174.906757][T25662] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2174.942688][ T3241] loop1: detected capacity change from 0 to 256 [ 2175.646910][T25662] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 2175.716741][ T4088] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 2175.836767][ T2847] usb 5-1: string descriptor 0 read error: -71 [ 2175.875108][ T2847] uclogic 0003:256C:006D.0157: failed retrieving string descriptor #200: -71 [ 2175.883939][ T2847] uclogic 0003:256C:006D.0157: failed retrieving pen parameters: -71 [ 2175.889671][ T4088] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2175.892267][ T2847] uclogic 0003:256C:006D.0157: failed probing pen v2 parameters: -71 [ 2175.900995][ T4088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.909020][ T2847] uclogic 0003:256C:006D.0157: failed probing parameters: -71 [ 2175.916742][ T4088] usb 1-1: Product: syz [ 2175.924244][ T2847] uclogic: probe of 0003:256C:006D.0157 failed with error -71 [ 2175.927957][ T4088] usb 1-1: Manufacturer: syz [ 2175.936331][ T2847] usb 5-1: USB disconnect, device number 75 [ 2175.942915][ T4088] usb 1-1: SerialNumber: syz [ 2175.950292][ T4088] usb 1-1: config 0 descriptor?? [ 2176.136882][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2176.190786][ T3237] loop0: detected capacity change from 0 to 512 [ 2176.218367][ T3237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2176.227138][ T3237] ext4 filesystem being mounted at /root/syzkaller.hurbIT/261/bus supports timestamps until 2038 (0x7fffffff) [ 2176.447224][T25662] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2176.456625][T25662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.536877][ T24] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 2176.738306][ T24] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2176.747431][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.755271][ T24] usb 2-1: Product: syz [ 2176.759753][ T24] usb 2-1: Manufacturer: syz [ 2176.764234][ T24] usb 2-1: SerialNumber: syz [ 2176.769203][ T24] usb 2-1: config 0 descriptor?? [ 2176.872378][ T3267] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 2176.956808][ T2847] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2177.016761][T25662] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2177.023483][T25662] usb 4-1: No valid video chain found. [ 2177.029441][T25662] usb 4-1: USB disconnect, device number 60 [ 2177.121959][ T3251] loop1: detected capacity change from 0 to 512 [ 2177.138417][ T3251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2177.147330][ T3251] ext4 filesystem being mounted at /root/syzkaller.rWloe2/1080/bus supports timestamps until 2038 (0x7fffffff) [ 2177.216802][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2177.226632][ T24] asix: probe of 2-1:0.0 failed with error -71 [ 2177.233372][ T24] usb 2-1: USB disconnect, device number 76 [ 2177.356760][ T2847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2177.576921][ T2847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2177.598351][ T2847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.610879][ T2847] usb 5-1: Product: syz [ 2177.614929][ T2847] usb 5-1: Manufacturer: syz [ 2177.620921][ T2847] usb 5-1: SerialNumber: syz [ 2177.707372][ T4088] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2177.718128][T30240] EXT4-fs (loop0): unmounting filesystem. [ 2177.721700][ T4088] asix: probe of 1-1:0.0 failed with error -71 [ 2177.740844][ T4088] usb 1-1: USB disconnect, device number 85 [ 2177.852420][T14404] EXT4-fs (loop1): unmounting filesystem. [ 2178.388064][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2178.620288][ T3292] device wg2 left promiscuous mode [ 2178.628055][ T3292] device wg2 entered promiscuous mode [ 2178.644186][ T3294] loop0: detected capacity change from 0 to 256 [ 2178.656915][ T4088] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2178.706720][T25662] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2178.756862][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.866930][ T2847] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2178.873870][ T2847] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2178.882251][ T2847] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 2178.956717][T25662] usb 3-1: Using ep0 maxpacket: 8 [ 2178.986749][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2178.995642][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.003536][ T24] usb 2-1: Product: syz [ 2179.007543][ T24] usb 2-1: Manufacturer: syz [ 2179.011935][ T24] usb 2-1: SerialNumber: syz [ 2179.126809][ T2847] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 2179.134139][ T2847] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2179.146862][ T2847] usb 5-1: USB disconnect, device number 76 [ 2179.156496][ T2847] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 2179.156839][ T4088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.165768][T25662] usb 3-1: config 32 has an invalid interface number: 77 but max is 1 [ 2179.184364][T25662] usb 3-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 2179.190420][ T4088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.199234][T25662] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 2179.206450][ T4088] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2179.220134][T25662] usb 3-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 2179.230208][ T4088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.234169][T25662] usb 3-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 2179.251421][ T4088] usb 4-1: config 0 descriptor?? [ 2179.257234][T25662] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2179.268087][T25662] usb 3-1: config 32 has no interface number 0 [ 2179.274107][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2179.285230][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2179.296230][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2179.308996][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2179.320284][T25662] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 2179.331054][T25662] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2179.341861][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2179.352942][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2179.364081][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2179.375171][T25662] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2179.385275][T25662] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 2179.398608][T25662] usb 3-1: config 32 interface 77 has no altsetting 0 [ 2179.405233][ T319] ================================================================== [ 2179.413078][ T319] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 2179.420108][ T319] Read of size 8 at addr ffff8881155fcce0 by task kworker/1:4/319 [ 2179.427742][ T319] [ 2179.429928][ T319] CPU: 1 PID: 319 Comm: kworker/1:4 Not tainted 6.1.78-syzkaller-00036-g5747d79ab0b7 #0 [ 2179.439464][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 2179.449356][ T319] Workqueue: 0x0 (events) [ 2179.453629][ T319] Call Trace: [ 2179.456734][ T319] [ 2179.459514][ T319] dump_stack_lvl+0x151/0x1b7 [ 2179.464046][ T319] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2179.469314][ T319] ? _printk+0xd1/0x111 [ 2179.473307][ T319] ? __virt_addr_valid+0x242/0x2f0 [ 2179.478261][ T319] print_report+0x158/0x4e0 [ 2179.482591][ T319] ? __virt_addr_valid+0x242/0x2f0 [ 2179.487539][ T319] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 2179.493614][ T319] ? worker_thread+0xa36/0x1260 [ 2179.498302][ T319] kasan_report+0x13c/0x170 [ 2179.502640][ T319] ? worker_thread+0xa36/0x1260 [ 2179.507329][ T319] __asan_report_load8_noabort+0x14/0x20 [ 2179.512795][ T319] worker_thread+0xa36/0x1260 [ 2179.517313][ T319] kthread+0x26d/0x300 [ 2179.521215][ T319] ? worker_clr_flags+0x1a0/0x1a0 [ 2179.526076][ T319] ? kthread_blkcg+0xd0/0xd0 [ 2179.530507][ T319] ret_from_fork+0x1f/0x30 [ 2179.534766][ T319] [ 2179.537633][ T319] [ 2179.539790][ T319] Allocated by task 2847: [ 2179.543960][ T319] kasan_set_track+0x4b/0x70 [ 2179.548407][ T319] kasan_save_alloc_info+0x1f/0x30 [ 2179.553328][ T319] __kasan_kmalloc+0x9c/0xb0 [ 2179.557758][ T319] __kmalloc_node+0xb4/0x1e0 [ 2179.562180][ T319] kvmalloc_node+0x221/0x640 [ 2179.566608][ T319] alloc_netdev_mqs+0x8c/0xf90 [ 2179.571294][ T319] alloc_etherdev_mqs+0x36/0x40 [ 2179.575978][ T319] usbnet_probe+0x207/0x27c0 [ 2179.580490][ T319] usb_probe_interface+0x5b6/0xa90 [ 2179.585459][ T319] really_probe+0x2b8/0x920 [ 2179.589778][ T319] __driver_probe_device+0x1a0/0x310 [ 2179.594904][ T319] driver_probe_device+0x54/0x3d0 [ 2179.599761][ T319] __device_attach_driver+0x2e3/0x490 [ 2179.604967][ T319] bus_for_each_drv+0x183/0x200 [ 2179.609653][ T319] __device_attach+0x312/0x510 [ 2179.614256][ T319] device_initial_probe+0x1a/0x20 [ 2179.619115][ T319] bus_probe_device+0xbe/0x1e0 [ 2179.623716][ T319] device_add+0xb60/0xf10 [ 2179.627883][ T319] usb_set_configuration+0x190f/0x1e80 [ 2179.633174][ T319] usb_generic_driver_probe+0x8b/0x150 [ 2179.638469][ T319] usb_probe_device+0x144/0x260 [ 2179.643166][ T319] really_probe+0x2b8/0x920 [ 2179.647500][ T319] __driver_probe_device+0x1a0/0x310 [ 2179.652825][ T319] driver_probe_device+0x54/0x3d0 [ 2179.657692][ T319] __device_attach_driver+0x2e3/0x490 [ 2179.662911][ T319] bus_for_each_drv+0x183/0x200 [ 2179.667578][ T319] __device_attach+0x312/0x510 [ 2179.672181][ T319] device_initial_probe+0x1a/0x20 [ 2179.677039][ T319] bus_probe_device+0xbe/0x1e0 [ 2179.681653][ T319] device_add+0xb60/0xf10 [ 2179.685891][ T319] usb_new_device+0xf32/0x1810 [ 2179.690578][ T319] hub_event+0x2db1/0x4830 [ 2179.694826][ T319] process_one_work+0x73d/0xcb0 [ 2179.699533][ T319] worker_thread+0xa60/0x1260 [ 2179.704026][ T319] kthread+0x26d/0x300 [ 2179.707933][ T319] ret_from_fork+0x1f/0x30 [ 2179.712186][ T319] [ 2179.714354][ T319] Freed by task 2847: [ 2179.718178][ T319] kasan_set_track+0x4b/0x70 [ 2179.722603][ T319] kasan_save_free_info+0x2b/0x40 [ 2179.727463][ T319] ____kasan_slab_free+0x131/0x180 [ 2179.732435][ T319] __kasan_slab_free+0x11/0x20 [ 2179.737008][ T319] __kmem_cache_free+0x218/0x3b0 [ 2179.741781][ T319] kfree+0x7a/0xf0 [ 2179.745339][ T319] kvfree+0x35/0x40 [ 2179.748987][ T319] netdev_freemem+0x3f/0x60 [ 2179.753325][ T319] netdev_release+0x7f/0xb0 [ 2179.757666][ T319] device_release+0x95/0x1c0 [ 2179.762094][ T319] kobject_put+0x178/0x260 [ 2179.766343][ T319] put_device+0x1f/0x30 [ 2179.770334][ T319] free_netdev+0x393/0x480 [ 2179.774586][ T319] usbnet_disconnect+0x245/0x390 [ 2179.779360][ T319] usb_unbind_interface+0x1fa/0x8c0 [ 2179.784396][ T319] device_release_driver_internal+0x53e/0x870 [ 2179.790297][ T319] device_release_driver+0x19/0x20 [ 2179.795244][ T319] bus_remove_device+0x2fa/0x360 [ 2179.800017][ T319] device_del+0x663/0xe90 [ 2179.804185][ T319] usb_disable_device+0x380/0x720 [ 2179.809044][ T319] usb_disconnect+0x32a/0x890 [ 2179.813556][ T319] hub_event+0x1ed8/0x4830 [ 2179.817811][ T319] process_one_work+0x73d/0xcb0 [ 2179.822497][ T319] worker_thread+0xd71/0x1260 [ 2179.827008][ T319] kthread+0x26d/0x300 [ 2179.830915][ T319] ret_from_fork+0x1f/0x30 [ 2179.835168][ T319] [ 2179.837336][ T319] Last potentially related work creation: [ 2179.842896][ T319] kasan_save_stack+0x3b/0x60 [ 2179.847404][ T319] __kasan_record_aux_stack+0xb4/0xc0 [ 2179.852611][ T319] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2179.858253][ T319] insert_work+0x56/0x310 [ 2179.862425][ T319] __queue_work+0x9b6/0xd70 [ 2179.866760][ T319] queue_work_on+0x105/0x170 [ 2179.871187][ T319] usbnet_link_change+0xeb/0x100 [ 2179.875963][ T319] usbnet_probe+0x1dbe/0x27c0 [ 2179.880476][ T319] usb_probe_interface+0x5b6/0xa90 [ 2179.885421][ T319] really_probe+0x2b8/0x920 [ 2179.889758][ T319] __driver_probe_device+0x1a0/0x310 [ 2179.894885][ T319] driver_probe_device+0x54/0x3d0 [ 2179.899748][ T319] __device_attach_driver+0x2e3/0x490 [ 2179.904948][ T319] bus_for_each_drv+0x183/0x200 [ 2179.909635][ T319] __device_attach+0x312/0x510 [ 2179.914242][ T319] device_initial_probe+0x1a/0x20 [ 2179.919183][ T319] bus_probe_device+0xbe/0x1e0 [ 2179.923783][ T319] device_add+0xb60/0xf10 [ 2179.928086][ T319] usb_set_configuration+0x190f/0x1e80 [ 2179.933376][ T319] usb_generic_driver_probe+0x8b/0x150 [ 2179.938670][ T319] usb_probe_device+0x144/0x260 [ 2179.943358][ T319] really_probe+0x2b8/0x920 [ 2179.947697][ T319] __driver_probe_device+0x1a0/0x310 [ 2179.952817][ T319] driver_probe_device+0x54/0x3d0 [ 2179.957675][ T319] __device_attach_driver+0x2e3/0x490 [ 2179.962885][ T319] bus_for_each_drv+0x183/0x200 [ 2179.967657][ T319] __device_attach+0x312/0x510 [ 2179.972256][ T319] device_initial_probe+0x1a/0x20 [ 2179.977118][ T319] bus_probe_device+0xbe/0x1e0 [ 2179.981720][ T319] device_add+0xb60/0xf10 [ 2179.985882][ T319] usb_new_device+0xf32/0x1810 [ 2179.990595][ T319] hub_event+0x2db1/0x4830 [ 2179.994846][ T319] process_one_work+0x73d/0xcb0 [ 2179.999526][ T319] worker_thread+0xa60/0x1260 [ 2180.004043][ T319] kthread+0x26d/0x300 [ 2180.007946][ T319] ret_from_fork+0x1f/0x30 [ 2180.012200][ T319] [ 2180.014369][ T319] The buggy address belongs to the object at ffff8881155fc000 [ 2180.014369][ T319] which belongs to the cache kmalloc-4k of size 4096 [ 2180.028255][ T319] The buggy address is located 3296 bytes inside of [ 2180.028255][ T319] 4096-byte region [ffff8881155fc000, ffff8881155fd000) [ 2180.041537][ T319] [ 2180.043704][ T319] The buggy address belongs to the physical page: [ 2180.049957][ T319] page:ffffea0004557e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1155f8 [ 2180.060021][ T319] head:ffffea0004557e00 order:3 compound_mapcount:0 compound_pincount:0 [ 2180.068179][ T319] flags: 0x4000000000010200(slab|head|zone=1) [ 2180.074087][ T319] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 2180.082505][ T319] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2180.090916][ T319] page dumped because: kasan: bad access detected [ 2180.097175][ T319] page_owner tracks the page as allocated [ 2180.102720][ T319] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20303, tgid 20302 (syz.1.5177), ts 1219098937628, free_ts 1219090489829 [ 2180.125635][ T319] post_alloc_hook+0x213/0x220 [ 2180.130231][ T319] prep_new_page+0x1b/0x110 [ 2180.134572][ T319] get_page_from_freelist+0x27ea/0x2870 [ 2180.140029][ T319] __alloc_pages+0x3a1/0x780 [ 2180.144379][ T319] alloc_slab_page+0x6c/0xf0 [ 2180.149152][ T319] new_slab+0x90/0x3e0 [ 2180.153060][ T319] ___slab_alloc+0x6f9/0xb80 [ 2180.157658][ T319] __slab_alloc+0x5d/0xa0 [ 2180.161823][ T319] __kmem_cache_alloc_node+0x1af/0x250 [ 2180.167118][ T319] __kmalloc+0xa3/0x1e0 [ 2180.171115][ T319] kernfs_fop_read_iter+0x15b/0x470 [ 2180.176144][ T319] vfs_read+0x771/0xad0 [ 2180.180137][ T319] ksys_read+0x199/0x2c0 [ 2180.184216][ T319] __x64_sys_read+0x7b/0x90 [ 2180.188555][ T319] do_syscall_64+0x3d/0xb0 [ 2180.192810][ T319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2180.198538][ T319] page last free stack trace: [ 2180.203050][ T319] free_unref_page_prepare+0x83d/0x850 [ 2180.208344][ T319] free_unref_page+0xb2/0x5c0 [ 2180.212857][ T319] __free_pages+0x61/0xf0 [ 2180.217022][ T319] __free_slab+0xce/0x1a0 [ 2180.221188][ T319] __unfreeze_partials+0x165/0x1a0 [ 2180.226136][ T319] put_cpu_partial+0xa9/0x100 [ 2180.230650][ T319] __slab_free+0x1c8/0x280 [ 2180.234988][ T319] ___cache_free+0xc6/0xd0 [ 2180.239242][ T319] qlist_free_all+0xc5/0x140 [ 2180.243667][ T319] kasan_quarantine_reduce+0x15a/0x180 [ 2180.248961][ T319] __kasan_slab_alloc+0x24/0x80 [ 2180.253735][ T319] slab_post_alloc_hook+0x53/0x2c0 [ 2180.258682][ T319] kmem_cache_alloc_lru+0x102/0x220 [ 2180.263716][ T319] __d_alloc+0x34/0x700 [ 2180.267710][ T319] d_alloc+0x4b/0x1d0 [ 2180.271530][ T319] lookup_one_qstr_excl+0xe7/0x290 [ 2180.276478][ T319] [ 2180.278645][ T319] Memory state around the buggy address: [ 2180.284120][ T319] ffff8881155fcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2180.292012][ T319] ffff8881155fcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2180.299912][ T319] >ffff8881155fcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2180.307807][ T319] ^ [ 2180.314838][ T319] ffff8881155fcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2180.322736][ T319] ffff8881155fcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2180.330632][ T319] ================================================================== [ 2180.338530][ T319] Disabling lock debugging due to kernel taint [ 2180.716800][T25662] usb 3-1: Dual-Role OTG device on HNP port [ 2180.736752][T25662] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 2180.745657][T25662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.753453][T25662] usb 3-1: Product: syz [ 2180.757449][T25662] usb 3-1: Manufacturer: syz [ 2180.761834][T25662] usb 3-1: SerialNumber: syz [ 2180.896815][ T24] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2180.903100][ T24] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 2180.909755][ T24] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2181.088414][T25662] usb 3-1: USB disconnect, device number 74 [ 2181.147178][ T606] usb 2-1: USB disconnect, device number 77 [ 2181.156817][ T606] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 2181.206766][ T4088] usb 4-1: string descriptor 0 read error: -71 [ 2181.236765][ T4088] uclogic 0003:256C:006D.0158: failed retrieving string descriptor #200: -71 [ 2181.245370][ T4088] uclogic 0003:256C:006D.0158: failed retrieving pen parameters: -71 [ 2181.254037][ T4088] uclogic 0003:256C:006D.0158: failed probing pen v2 parameters: -71 [ 2181.262115][ T4088] uclogic 0003:256C:006D.0158: failed probing parameters: -71 [ 2181.269599][ T4088] uclogic: probe of 0003:256C:006D.0158 failed with error -71 [ 2181.278339][ T4088] usb 4-1: USB disconnect, device number 61