last executing test programs: 11.047536434s ago: executing program 3 (id=2502): bind$xdp(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x3f}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xc3126000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x22004054) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000d000000fffbff7f01000007e1040000f8ffffff00000000"]) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) signalfd(r5, &(0x7f0000000180)={[0x1]}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) sched_setattr(r7, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x7, 0x5, 0xb34, 0x9, 0x9, 0x10001, 0x8}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) 7.769231013s ago: executing program 3 (id=2516): r0 = dup(0xffffffffffffffff) mmap(&(0x7f000041e000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0xabf20000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eb9e1a000000000072edcd7606db3ff300"/28, 0x1c}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0xf4, {0x9, 0x21, 0xffff, 0xc, 0x1, {0x22, 0x76c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000004800)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4}}, 0x24, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x44, 0x6, 0x5c8, 0x1d0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6_vti0\x00', {}, 'ip6gre0\x00', {}, 0x0, 0x13}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@TOS={0x28}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1\x00', 'team0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x150, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'macvlan0\x00', 'wlan0\x00', {}, {0xff}, 0x73}, 0x0, 0x90, 0xb8, 0x0, {0x100000000000000}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x807fffff, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000014f80), 0x2, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103) msync(&(0x7f000041f000/0x2000)=nil, 0x2000, 0x4) 6.592072614s ago: executing program 2 (id=2522): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x3e7, 0x0, 0x20000000}, 0x84) 6.563515444s ago: executing program 1 (id=2523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x10004, 0x0, &(0x7f0000fd8000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0}}}}}}}, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006b02"]) 6.320440095s ago: executing program 0 (id=2525): openat$sequencer(0xffffff9c, &(0x7f0000000100), 0xc8001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.295234455s ago: executing program 2 (id=2526): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0xfd, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) dup(r4) (async) r5 = dup(r4) mmap(&(0x7f0000ac4000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r5, 0xfb56b000) (async) mmap(&(0x7f0000ac4000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r5, 0xfb56b000) r6 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) (async) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) ptrace(0x10, r7) (async) ptrace(0x10, r7) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r5, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r8, 0x0) 6.127386477s ago: executing program 1 (id=2527): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = io_uring_setup(0x6b42, &(0x7f0000000000)={0x0, 0xef1c, 0x2, 0x2, 0x3a2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xb132, 0x359e], 0x2) socket(0x11, 0x800000003, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000007b000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 5.63084939s ago: executing program 2 (id=2529): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000958000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 5.577262296s ago: executing program 1 (id=2530): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000001e00), 0x0, 0x20008841) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r4, 0xc6f33000) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0x2}, 0x4a, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x6, 0xffff2d37, 0xffffff01, 0xc03, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0xfffffff9, 0x1, 0x26, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x5, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x2012f, 0x1, 0x10, 0xfffffff3, 0x129432e7, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x1, 0x7, 0x200005, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x7, 0x5, 0x5f31, 0x0, 0x0, 0x2, 0x2, 0x9, 0x4, 0x6, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfffffffe, 0x9, 0x2, 0x7f, 0x9, 0x7c, 0x3, 0x9, 0x3, 0x200, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x3, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800023, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x3, 0x6, 0xac8, 0xbf, 0x10002, 0x7, 0x7ff, 0x3, 0x80000000, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x11fffe, 0x5, 0x6, 0xaaeb, 0x4, 0x25], [0x9, 0xbb31, 0x400007, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x4, 0xce7, 0x200, 0x3, 0x7, 0x5, 0x1003, 0x101, 0xffff, 0x6, 0x8000, 0xffff, 0xa620, 0x5, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7d, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x2bc, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x3, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') pread64(r5, &(0x7f0000000380)=""/4096, 0x1000, 0x7fffffff) lseek(r5, 0x1000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x4}) 5.458434128s ago: executing program 2 (id=2531): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 5.389982241s ago: executing program 2 (id=2533): r0 = syz_io_uring_setup(0x6042, &(0x7f0000000200)={0x0, 0xa9ec, 0x100, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f0000000240)}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xa) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100642c6810f241f10000000008580418400000000000010902240001000040200904000002030001000921070000012205000905cffbdb3f03c1384fc0aae5abd486090756e544"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) syz_usb_control_io(r3, &(0x7f0000003440)={0x2c, 0x0, &(0x7f00000032c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "7b3a30027313262eda4594bd8fac0a77e661145eb44888d4fe2e2f9366455336ea990b8865aab49458890fab85852f49cf38f9f7ac15d3b6cdba8119053f7ed107733987e3fd1f87baac475e6cc6c7ded5bab365bb6cc506a3172e22"}}, &(0x7f0000003340)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x78, 0x9, 0x8, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "e6ee8dda94aee21821a2109039c78441"}, @ssp_cap={0x14, 0x10, 0xa, 0x1d, 0x2, 0x6, 0xff00, 0x200, [0xf0, 0xff00c0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xb, 0x3ff}]}}, &(0x7f00000033c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x0, 0x6e, "b9b83682", "11f536d8"}}, &(0x7f0000003400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x7, 0x8, 0xc0, 0xac, 0x2}}}, &(0x7f00000038c0)={0x84, &(0x7f0000003480)={0x20, 0xe, 0x4f, "c1587a687a1cabb6406bb723ac8d87c2969c7ef919883f104dbca810567ca9b2d4be04ce5249bbc54ecfca6aba901c584e481d2cbdee9388aee1403899bf33a8dd90914eafc39513711cd1b9cb9dd0"}, &(0x7f0000003500)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000003580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000035c0)={0x20, 0x0, 0x8, {0x8, 0x8, [0x0]}}, &(0x7f0000003600)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000003640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000003680)={0x40, 0xb, 0x2, "7692"}, &(0x7f00000036c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000003700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, &(0x7f0000003740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000003780)={0x40, 0x19, 0x2, "25b7"}, &(0x7f00000037c0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000003800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000003840)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000003880)={0x40, 0x21, 0x1, 0x4}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@empty, 0x0, 0x32}, @in=@local, {0x87be, 0x1900}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x0) 5.359691289s ago: executing program 0 (id=2534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x201}, 0x1c) 5.267331642s ago: executing program 4 (id=2535): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440), 0x0, 0x4008411) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) fanotify_init(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @local, 0x800}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="a906d775858c677a51af1ef9a1b2192cedbd8f0afcd98791001bfb6c428899d0c35151654d20cf8b926f0e428efa768069055b2c5b674210014dad89afe47128bba1d51dd55bdb16e2e938ffc245a21eb5f42ce82416100accc18bd858bb8c96d1910d71335bc194119d43878ac7345a3870946c223491644e76846c4f978368d5ae231054349837d8f9e65977833f93f65cfafa226e186ab1d53344ddf185104981e959e66e56f826b1fc254d5ab8a240038d00ecd816bb49c5339eb385c8a204b3ff5baca625", 0xc7}, {&(0x7f00000006c0)="a3a909642418871d7d3c6c7d44cf3fe14de9371afb1f29ca8e6133d2f5e6a7f87a533aad2860cd4ea5b5b8ffed6263fb6522d7904c097aba92a348db593bdbd680adb468d0811fca8ab5ff2f030c7568f3943f685db7d21401048b5f4b22176600632711e790717b9c7e814732107bf08829f961579744cd2fa1796339d4997891ecd3c6a342ac84d55bd1dc6f7338f04ed4", 0x92}, {&(0x7f0000000280)="04a9edc48f841f5767d628eb63a24fddf717622954d102d382476ed7bb4f1ed18cf90f400436a58014910bda8545d0e31e332922e40648dc1106", 0x3a}, {&(0x7f0000000780)="2b8056f4221c6d55afead12121ec2105180725a7c6f4a4d8fcbb42df7f2d35fc703d801e48fed219febea1df1e1f661d25c9b31e80b1f0ad5330222a9d87cdd3285e55af91d96cfa6a35c069bdb8f34de186b73df76dc020c65a3ecd962f10e4cb1f22efd7191fdfb88430c8ae35b89dec", 0x71}], 0x4, 0x0, 0x0, 0x11}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x8, @empty, 0x98}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000840)="ecff5badf05769342e041f91418b70d2e5ec08dbb019f1f002769e71c40a18535453dd157cc73dc80fed1abd9ee67aff3fe065f1fb1a14c9ac0deae73528", 0x3e}, {&(0x7f0000000880)="bb571efdf031d440c14f84d464808597595bc3291b5676bd4d82312c305ba965da90987438c3635d479c0a326903d5c845a55440f991ed2a84da5a33260771ddf1742f790e5bd918d1e4fd6705c2c28442bfff775b1f19e00806ee81", 0x5c}], 0x2, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x29}}], 0x18}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1e}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000009c0)="cf2e26b4b84e9571710f60f00d4df46acae2d616450756abbcbbcd7accfe87d52eabc90e57bbf481e80d596db000708ae69c1bad535050658bf5648b744e3367136273dd510df1627a0ff74924700001c212224132457c94c5e267af15a2d13ab91aad41218e9eadeb6b78e52df6d6e3655c94745d3fd1d43a1f1fade644b3e3835c47e7680faf20803d8a3e6c173cdb6c57dff634c038e9bbb6e85a9ccd9eca9f0ccaaddac16815ef4e6054d49d6d01ae17d3c330680a3da54d36f0361219fc4b6e2f5ac1e1d7d4c5a7f2d4e803c4ea4803b4fc81630192523c15d8ebbab5e8abd9716fd559a92d52df1a2e8884", 0xee}, {&(0x7f0000000ac0)="f3097678b5dfc0cd44055890968dc60ad29e5c615748ae05d8af96db12e270dd24e1dc87fd750765eabddd07a398241661c6a7ad46b04327dc1a156787f1512fc36fa110d3f00cb1f77dbad818ebcfa91ffac1bd0d42172153aa53e3820bde238165ef35d41b2fb5ce6221b11af09719ca1f7cf97f15aa87ea1986d7d627374e1dfaa1ddbdcb7772f5ce7a47", 0x8c}, {&(0x7f0000000b80)="42a815040589b8acd37f9ac49d87a6fcaf7c2e2ee2a7a14641fafd996b6707a524f29767024b8cd0156911d0d4c62e15bbf204ca27919cad5b1c6bb5b93d2fa8eba39649510500be27e732a45880ed3d922ce3a4e305bc44863accd7197d06fb5bed1566302e6177026adc05a2cb7fbf84beea5353f1ebe2e3e03285232300d1a831484a700aa30a45a89e387f98076ab87e02176bbc306080ead6169c9ed566b39c245837a61655106bd83fd61182a8fe29b7f64a54f3a38d44927797783bd242788c4ec162169773eef0c84993c93d7b2c539749843038e64f795e0b32187c5032e255fd83", 0xe6}, {&(0x7f0000000c80)="97a57966b9719b53d4979a48f806ead932b327de92caa8205c776751de2e555d0e107bcd97b12272370da07954bd1fbf35f27816aa780876bf73775252a8a208531d3eccb0e39c6b0759467da51dc7892f1653f26365db01276beaf81e687f12b7b0e012f80f04e20ac3443095b8e342842e190d68300dbed0b62211fa4297b0de19c30cd9b5f0b611d67002fecc2c170e358ae0633394aed21e3f27f05fed90fbb3f6b68b2d3e76f56839808223a055b4d8f9f9606fdb305f71d7ff6f811ba9839ed298ff9f67b9f0b2fc44f15cff00e9dd481430bbaffadd44e57ecef037cce0feb2a2a0dac8c54cef0504a123e4db7847815ed65a", 0xf6}, {&(0x7f0000000d80)="9132361095e65570eda3f5a1310f6952728a2e6fb775ac1cffdd87fc1a7c45e1f93b2ec7f3481baed0e3fa6c8ffe873b41eae04cdac9e994b8675b416cf9caaebb6bde726989d6fb21899c8adcaea94c6d815d716b74ce58bc47fc668b8452c6924fa4b1a3b6ee291a9ab4f9fbc849a8c395da74e031f842cfdf52adf80fc8cee9428c62dc48cca1b464e08aecfe99cab3408492ad77852a147fd9e24e79d8bc8ecee19528df0a500e79ef87b39c46d0c49dba09fcb06c33e63418e10d3fb93e80404b8787583179e79e0207140454ddbcb30755755ab7509ffbfa55ce56e32ba5695e6adcef7f1493ef3f6de43197", 0xef}, {&(0x7f0000000e80)="d418fe6621d6a27182f90e965f0fa8ab688d7ab1c719654112521331f47120f2b320e6ac83f346545692c68a461069c79a9a48f64bbe9ea7dcb1b411c699d59dc872596bdf93eaa22672f8ddbfea52d85ece3da3137c5ef6e3889504434edff3512eecc89408139ed9cf6c31ac2c16f27bf517e4db88c9589bd1fe25cc4bcd7d28d765ca9481f4c2ba1070631a28d618f3e9855cff8ff3f2518aba98881d8c0801c255555f7619bddaa0fe6451eb72", 0xaf}, {&(0x7f0000000f40)="ec43360eb0eae13b95f67dd9565811ac7cd16db6ea7a17f29e95643944b072b9ddc26543ea1623a4526f4ef76482d0b6a16699aaf45cd3be37154f1f5464e66f396791058fb10c2b3f59e1f7d1806d9f66d0e347289e118b235988365841cfcbf51cad03e1e778624717e13348001c6573ab2889417271c3ea3164f23b9c36bfb9458293ad0d4644c3ce386c68c78478910b7b7a4ea2b9f5998f958a0c69a9700b0d7f6db2687362fde2610d37b4d6", 0xaf}], 0x7, &(0x7f0000001080)=[@dstopts={{0x18, 0x29, 0x37, {0x5c}}}, @dstopts={{0x18, 0x29, 0x37, {0x6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xf}}], 0x60}}, {{&(0x7f0000001140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x47}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001180)="2b508000b647b64fa7b1be6dcfc7b44c7e45007d0a1675658e5b88cd7d08fbc79aa6eb076ae376e03c4658fa14b990a3b11f924495980e336d21589083c65f1982421afd8a7f49d257", 0x49}, {&(0x7f0000001200)="125df4637b10df72ff8504fbe7b0d967a84da9b7df5c37af52aed1f41d26f1613d7f382902e11cc2f5b71b8697227fd0887597ed92c68c49877517c7ed17fa9111917709e47d8e02dc9c27ee74a1cad3a474f8a59e6bb9bb86ea8d71fa455e24680f92e1b0f1f0ac770ac10d8b0c75c42f87ddd8672be884192f05bb14c83436ea9398357fd6029b059624e5eee551e0ab29b6829f8242020ac613dddc644f6f9d87ff1463078b612728cee2f2347085a271c6ea4faddbd7c9c1c7d32637da9a6834e034641eda85b3e8fbd3c7b1e9c5de9828060f5919db159b32d92905f5546dc65b1b9b", 0xe5}, {&(0x7f0000001300)="dafa641d71eefd3eeda2411384962052a7bb8aad6192461cb578f95cd7d82a7dad2343731fd97b96fea12a712bfac0ad957b82d43e09ea13251f166dc9d74fa2f144362d62d6631b1a429e6cedf8406747276a", 0x53}], 0x3, &(0x7f0000001480)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x80000000}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7594}}], 0x50}}, {{&(0x7f0000001500)={0xa, 0x4e21, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0}}], 0x5, 0x4040005) 4.567961664s ago: executing program 3 (id=2536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000840)={{0x3, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.467069903s ago: executing program 0 (id=2537): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x800, 0x10000, 0x2000000}, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.235393862s ago: executing program 4 (id=2538): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x3e}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.22773758s ago: executing program 0 (id=2539): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) (async) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000002f00)={&(0x7f0000000980)=@x25={0x9, @remote}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000a00)=""/85, 0x55}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/206, 0xce}, {&(0x7f0000001b80)=""/141, 0x8d}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/188, 0xbc}, {&(0x7f0000001d80)=""/80, 0x50}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/28, 0x1c}, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) 4.223354745s ago: executing program 4 (id=2540): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x0, 0xe, 0x0, "56d31938655b68842e9fc13bccf578ec7b61977edb7d853aa0ee2486f08297992e8cbdf0d08dbec8b6512062e740bd635b73b303f658ab73f935e116ac316c9f14190a079b075912a81be3e80ed13f6a"}, 0xd8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @empty}, 0x2, 0x3, 0x1, 0x3}}, 0x26) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 4.107439881s ago: executing program 4 (id=2541): socket$netlink(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r3, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect={{0x6}, {0x9, 0x6}}}], 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x13, 0x0, &(0x7f00000001c0)) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 2.5193795s ago: executing program 3 (id=2542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4000000]}}], 0xffc8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 2.486857614s ago: executing program 1 (id=2543): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) r1 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000180)="8c", 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d3c0595669b9be43", "e8729b384043bfdef752586ef8cf2cc2", '4{mz', "ddbc064216a966af"}, 0x28) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000009c0)={0x40, 0x15, 0x2, "f8ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0xa, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5baad959"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x7fff, 0x10}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xe3, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfc, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7, 0x9, 0x4, 0x10, 0x1}, 0x10, &(0x7f0000000680)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x5, 0x10, 0x0, 0x55}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io(r5, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x40, 0x4, 0x23, {0x23, 0x5, "4aff52f756e0935e577f2c14399369f4dd360a8d16c3d4258180dfe6ef8b970e28"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f00000007c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x80, 0xd, 0x5, "8d682c10", "0fb9d010"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x4c, 0x9, 0x3, 0xb}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0x3, 0x2f, "405a67f56b21327f73b257a95fa0843be26ae185de3d6c6bc9f393ba09709e93a4045fba3ff76d34180dd6f69fe430"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, '\t\v'}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x4980}, &(0x7f0000000c40)={0x40, 0x13, 0x6}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "07ec"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x1}}) writev(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)="fcce8287d0a0c8703ceee34b3ecc41041be2a25fede42a2c06a8c4dbc18bedad130fa43149cf1f80366b17ee5c648d9e1f3d29c7766ca10dd97baa1814c2fb2e24be91c0d05e37c9dc4d53454f25f3d1", 0x50}, {&(0x7f0000000240)="e20bcc607b3c90cc8a5d6d84c6a41a8c6bbad60f55bcda1cfc8ebd7549fd2a6d7efc81930de309b8e8b31ac276c7310e284a57f027862742b96fb219587379818c1a54b7a400429e6ddde21b70d10a859091a8790ee41b927be2ab7b8956a287", 0x60}, {&(0x7f0000000380)="a1d83e1e8b76515af570afafad3d076a5ee412d244cbecd27e2607cf71d24c8ee31516a30b6378ea09a81580dcc57f9d06e02b0747b05e9e98d06d207fdf9818f2cffff4359ed8204017375085e3690e64c93a4fa3d025ae815ce4fedcd5e50874aed49e1b86ab4f63ca37d87483e282fd0974dc57063e14d9749ab1f14c96ad3723654c5ff11b8660763fcd2f58b498a1cb7f30baf4cd72ff25596ee7c01024b92623ccfcb1eb2c418477144e5e8f1a1c2151665dbb4e7e325abbaffe59a74f497660", 0xc3}, {&(0x7f00000002c0)="d69aaebcee518cf5c6ef6420ef026586d387fa6e74b07db397194331836ed3c11bf614d5dd2532d75b3946f19ff3e3e2388b3040649fadd2a805ff75677fceeaae5b0fa01ce72852de6c0e6df74f520292e9add2be20825469ec192d822bf5651d700be961b4c3208716c96a0f4774798e69870141b8a69c53fe2d", 0x7b}, {&(0x7f0000000480)="4fad0f6be4898991fbfe015c639cc1869b6c71206dd6bed58cab2d558a5c1761ef81d46ec13f6f8c1e3b2419de0fa88ba6e6f7b13769cffeb22c99da5ee965a62ce700d880563476b4e411f3b552c9d18c5026965decc282fb6fafbef764e0bb25cf36a0c3fbf4dbf6b760d995f61406173b7d2d315d671a733c43b94623ca15421f463b2c456960e04828c7cf80e177b356e06439cdfa1819026167fc3d9c9a1a7949cfb61f2c06714d11cee2207ed6b422e60ec7fffc3e083ea4bcb58381", 0xbf}], 0x5) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0x5, 0x1, 'g'}, 0x0, 0x0, 0x0, 0x0}) 2.199992323s ago: executing program 4 (id=2544): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) pread64(r0, &(0x7f0000000000)=""/28, 0x1c, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c, 0x0, 0x0, &(0x7f0000001ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}], 0x18}, 0x4000000) 2.19899088s ago: executing program 3 (id=2545): r0 = syz_usb_connect(0x2, 0x41, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd1, 0x25, 0x3c, 0x40, 0x12d1, 0xed56, 0x46dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcf, 0x0, 0x0, 0xff, 0x1, 0x37, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc957}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x9}}]}}]}}]}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x8, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x6, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0xa4, 0x38}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xe, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x8, 0x8338, [0x17, 0x4, 0xd, 0x7fff, 0x8, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xbb, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x15, 0xe5}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x64, 0x7, 0x1, 0xff, 0x8}, 0x1aa, &(0x7f0000000500)={0x5, 0xf, 0x1aa, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x82, 0x2, 0x0, 0x3}, @generic={0x101, 0x10, 0x1, "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"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf00f, 0x13e1, [0x3e40, 0xff00c0]}, @generic={0x85, 0x10, 0x4, "c8309c1027fdc6be224c3920fe749181409b877dc05d95097d7f99ab21b8fa923e047d773d052d892d5b2ce1fc720f99b8ffc0ffc99bae75f98e18e2e77e5e7e5a5ecc2ae30404bf363f9de5b656e6b519eb9abfe3a966e02c4057ad7c14d5966e7e9cdbfbdc109f80c4eb7b7244ae4ab7d0eb7fa7b927770883aabcdc0e4159be37"}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x83, &(0x7f0000000280)=@string={0x83, 0x3, "5f0bb5cd2472ff1a1d3d70dd05668880120b29051506f263f52428977e13623c0dc4e1623f3959104190c59446f3e7cf72250cc505886b5fc61668914597c4b757a3b87650778d65d0e267f790e2ef6b6c0cd5df0daf0e1de7c5128dca3522637847c7b8e9187ce13c102f31ddcd422db9fffeabab0af8e6df898386bab1d7f52b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x42, &(0x7f00000003c0)=@string={0x42, 0x3, "43840db13d97c4e290fabacf1bd352ed83937be5365aec4829ef1e3648f69586c8bb63dbb4925074ef70d8464c10769a4e76257126c16e222829a9e8724599d0"}}, {0xf2, &(0x7f00000006c0)=@string={0xf2, 0x3, "9d0974828397eac0564e58d1368ce4709905d9cb38c5eb27680f7250a0f74b7fab0196fee703ff9726268920445cc17b99818f39e82cff4745f6d297f34754b5d43977c9ed3d3050975b0603743ad471d3d5092c7e3baf6979ae72cdfd7cc6145698992bb808d7f415a4a5c7f76f4151c94df41ddd42a28117c46ef9cafc00c9e4971dccf2d84dab955a180bef72ed262bd84a06578a810539a6d1c1c929576848cb77c3dd04fbd7f557330fc5ff7347a8d58ecdbffe2ce5668f67a12c1b076361b142016afc427fd60a5e25dd7c3575d0f34ef029c0d310ec1027a502d1bfa4c45ae5956c23560e189816fca3a42b0b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2801}}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x1, 0x0, 0x4, 0xbbda, 0xfffffffd, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0xffffffffffffffff, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r3, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x2}}}, 0x0, 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x44}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0x44, {0x44, 0x30, "61639c545d2ce9daa7602630c6863773fddd911869efc824c337939610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d91250100ff9ebab15e9ecea5e2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="4ce28505e8f7", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00030d0000000d03d33333dc2458b2a0000000"], 0x0, 0x0}, 0x0) 2.13922047s ago: executing program 2 (id=2546): r0 = dup(0xffffffffffffffff) mmap(&(0x7f000041e000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0xabf20000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eb9e1a000000000072edcd7606db3ff300"/28, 0x1c}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0xf4, {0x9, 0x21, 0xffff, 0xc, 0x1, {0x22, 0x76c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000004800)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4}}, 0x24, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x44, 0x6, 0x5c8, 0x1d0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6_vti0\x00', {}, 'ip6gre0\x00', {}, 0x0, 0x13}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@TOS={0x28}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1\x00', 'team0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x150, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'macvlan0\x00', 'wlan0\x00', {}, {0xff}, 0x73}, 0x0, 0x90, 0xb8, 0x0, {0x100000000000000}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x807fffff, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000014f80), 0x2, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x103) msync(&(0x7f000041f000/0x2000)=nil, 0x2000, 0x4) 2.079635007s ago: executing program 4 (id=2547): socket$netlink(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r3, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect={{0x6}, {0x9, 0x6}}}], 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x13, 0x0, &(0x7f00000001c0)) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 1.67698941s ago: executing program 1 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e22, 0x4, 0x4e23, 0x101, 0x2, 0x0, 0x180, 0x21}, {0x3, 0x7dd8e330, 0x7, 0x4, 0x0, 0x9, 0x41c, 0x5}, {0xe, 0x8004, 0xe, 0x9}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x0, 0x7, 0x7, 0x1, 0x80}}, 0xf0) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) unshare(0x400) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x1000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000003400)=ANY=[@ANYBLOB="12010000a3b43e103c41a48193650102030109021b00020d0220060904000000cbe7a5040904380900ff879d"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x40000) 1.023524014s ago: executing program 0 (id=2549): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 89) 561.401301ms ago: executing program 1 (id=2550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) eventfd(0x4) io_submit(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (fail_nth: 15) 407.325109ms ago: executing program 0 (id=2551): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467652100400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 0s ago: executing program 3 (id=2552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'syz1\x00'}, {0x20, '&{.\xd0$]!/%{/&'}], 0xa, "7ca6b5d6603336d9e349fad77e7861cea30d4a3c71613d0f1c7e967ce6bfa0304e7a587c9141e8973edac8f273cf79e23d4a94e130c005338b5c1fb3b4d8a6819e7987b84b56bcd86538b6dda98ea65c6fb3bc3e3babc9e41adb22b1f9021c2f34dae21b914f611391682841104846b2a0b8a9a8298901f93167d5bda482c5aa6c302a5230f6833c89837d11c54a98aab202000000a36d1d1d8181b48b50e3211685e3165e16"}, 0xc4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1ebf}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xe5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4851}, 0x2040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) r5 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'syz1\x00'}, {0x20, '&{.\xd0$]!/%{/&'}], 0xa, "7ca6b5d6603336d9e349fad77e7861cea30d4a3c71613d0f1c7e967ce6bfa0304e7a587c9141e8973edac8f273cf79e23d4a94e130c005338b5c1fb3b4d8a6819e7987b84b56bcd86538b6dda98ea65c6fb3bc3e3babc9e41adb22b1f9021c2f34dae21b914f611391682841104846b2a0b8a9a8298901f93167d5bda482c5aa6c302a5230f6833c89837d11c54a98aab202000000a36d1d1d8181b48b50e3211685e3165e16"}, 0xc4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1ebf}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xe5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4851}, 0x2040) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) kernel console output (not intermixed with test programs): rer: syz [ 547.148732][ T5884] usb 5-1: SerialNumber: syz [ 547.184298][ T5884] usb 5-1: config 0 descriptor?? [ 547.203762][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 547.227970][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1979'. [ 547.239976][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.265927][ T5884] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 547.295240][ T9] usb 3-1: USB disconnect, device number 103 [ 547.437938][ T5884] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 547.471554][ T5884] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 547.510930][T12432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1980'. [ 547.671563][ T5888] usb 5-1: USB disconnect, device number 83 [ 548.178726][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 548.469357][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 548.605776][T12458] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1987'. [ 549.147684][ T9] usb 3-1: config 0 has no interfaces? [ 549.160627][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 549.170310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.178594][ T9] usb 3-1: Product: syz [ 549.190534][ T9] usb 3-1: Manufacturer: syz [ 549.201442][ T9] usb 3-1: SerialNumber: syz [ 549.220577][ T9] usb 3-1: config 0 descriptor?? [ 549.269708][ T5836] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 549.308383][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 549.349369][T12473] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 549.374986][T12473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.461190][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.518384][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.519834][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.543779][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.566041][ T5836] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.575740][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.593859][ T5836] usb 4-1: config 0 descriptor?? [ 549.614128][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.632944][T12483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1995'. [ 549.869555][ T9] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 549.881869][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.904824][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.032309][ T9] usb 1-1: device descriptor read/64, error -71 [ 550.069338][ T5836] usbhid 4-1:0.0: can't add hid device: -71 [ 550.072044][T12486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.096705][ T5836] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.121121][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.140906][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.239737][ T5836] usb 4-1: USB disconnect, device number 96 [ 550.389495][ T9] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 550.529379][ T9] usb 1-1: device descriptor read/64, error -71 [ 550.639877][ T9] usb usb1-port1: attempt power cycle [ 550.689229][ T5889] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 550.899206][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 550.906992][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.936233][ T5889] usb 5-1: config 5 has an invalid interface number: 61 but max is 0 [ 550.944925][ T5889] usb 5-1: config 5 has no interface number 0 [ 550.952461][ T5889] usb 5-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 550.963801][ T5889] usb 5-1: config 5 interface 61 has no altsetting 0 [ 550.973418][ T5889] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 550.983108][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.989517][ T5836] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 550.991819][ T5889] usb 5-1: Product: syz [ 551.003959][ T5889] usb 5-1: Manufacturer: syz [ 551.003989][ T9] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 551.008581][ T5889] usb 5-1: SerialNumber: syz [ 551.026034][T12489] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 551.039994][ T9] usb 1-1: device descriptor read/8, error -71 [ 551.171367][ T5836] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 551.184179][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.196012][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.205580][ T5836] usb 4-1: config 1 has no interface number 0 [ 551.211896][ T5836] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.223785][ T5836] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.237491][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.256423][ T5889] ath6kl: Failed to submit usb control message: -71 [ 551.264250][ T5889] ath6kl: unable to send the bmi data to the device: -71 [ 551.269032][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.279838][ T9] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 551.287689][ T5889] ath6kl: Unable to send get target info: -71 [ 551.302773][ T5889] ath6kl: Failed to init ath6kl core: -71 [ 551.303145][ T5836] usb 4-1: Product: syz [ 551.318656][ T9] usb 1-1: device descriptor read/8, error -71 [ 551.326023][ T5889] ath6kl_usb 5-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 551.326965][ T5836] usb 4-1: Manufacturer: syz [ 551.343675][ T5836] usb 4-1: SerialNumber: syz [ 551.354174][ T5889] usb 5-1: USB disconnect, device number 84 [ 551.375324][ T5836] cdc_wdm 4-1:1.128: skipping garbage [ 551.393809][ T5836] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 551.408818][ T5836] cdc_wdm 4-1:1.128: Unknown control protocol [ 551.440226][ T9] usb usb1-port1: unable to enumerate USB device [ 551.579016][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.588170][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.856694][ T5836] hid-generic 0000:0003:0000.003F: item fetching failed at offset 0/2 [ 551.894867][ T5836] hid-generic 0000:0003:0000.003F: probe with driver hid-generic failed with error -22 [ 552.027530][ T5889] usb 3-1: USB disconnect, device number 104 [ 552.173875][T12499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1999'. [ 552.455686][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 552.625383][T11050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.635450][T11050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.673658][T12506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.686004][T12508] input: syz1 as /devices/virtual/input/input40 [ 552.768529][T12510] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2004'. [ 553.189395][ T47] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 553.290130][T12519] netlink: 'syz.2.2008': attribute type 21 has an invalid length. [ 553.298303][T12519] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2008'. [ 553.314866][T12519] netlink: 'syz.2.2008': attribute type 4 has an invalid length. [ 553.323471][T12519] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2008'. [ 553.340997][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.358758][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.369049][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.382759][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.392165][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.407738][ T47] usb 1-1: config 0 descriptor?? [ 553.507017][T12524] loop5: detected capacity change from 0 to 1 [ 553.699559][ T5888] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 553.818263][ T5836] usb 4-1: USB disconnect, device number 97 [ 553.902512][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 553.908615][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 553.934314][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.967031][ T47] usb 1-1: USB disconnect, device number 105 [ 553.973252][ T5888] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 554.005044][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.023545][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.038059][ T5888] usb 3-1: Product: syz [ 554.044408][ T5888] usb 3-1: Manufacturer: syz [ 554.049067][ T5888] usb 3-1: SerialNumber: syz [ 554.153619][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.168583][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.188272][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 554.318260][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.333162][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.356794][ T5888] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 554.401682][ T5888] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 554.420958][ T5888] usb 3-1: USB disconnect, device number 105 [ 554.455181][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.693166][T12554] netlink: 'syz.0.2021': attribute type 64 has an invalid length. [ 555.061681][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 555.084789][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2027'. [ 555.689353][ T5836] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 555.755333][T12593] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 555.822701][T12593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.846636][T12593] bond1: (slave bond2): making interface the new active one [ 555.861752][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.882883][T12593] bond1: (slave bond2): Enslaving as an active interface with an up link [ 555.900160][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.920391][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 555.933980][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.962717][T12599] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 555.979674][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.989532][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.025351][ T5836] usb 1-1: config 0 descriptor?? [ 556.254247][T12604] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2038'. [ 556.475134][ T5836] usbhid 1-1:0.0: can't add hid device: -71 [ 556.549957][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 556.606361][ T5836] usb 1-1: USB disconnect, device number 106 [ 557.050059][ T47] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 557.119494][T12621] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2044'. [ 557.146464][T12621] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2044'. [ 557.209603][ T47] usb 3-1: device descriptor read/64, error -71 [ 557.469348][ T47] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 557.619533][ T47] usb 3-1: device descriptor read/64, error -71 [ 557.631309][T12633] Invalid logical block size (-625016833) [ 557.736214][T12641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2052'. [ 557.739814][ T47] usb usb3-port1: attempt power cycle [ 558.162138][ T47] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 558.228214][ T47] usb 3-1: device descriptor read/8, error -71 [ 558.399368][ T5836] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 558.423396][ T30] audit: type=1800 audit(1745929636.167:542): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2060" name="file0" dev="tmpfs" ino=2052 res=0 errno=0 [ 558.444493][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.469303][ T47] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 558.491099][ T47] usb 3-1: device descriptor read/8, error -71 [ 558.619816][ T47] usb usb3-port1: unable to enumerate USB device [ 558.624603][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 558.646763][ T5836] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 558.669554][ T5836] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 558.689020][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 558.712698][ T5836] usb 5-1: Product: syz [ 558.717186][ T5836] usb 5-1: Manufacturer: syz [ 558.739264][ T5836] usb 5-1: SerialNumber: syz [ 558.849398][ T5884] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 558.873700][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 558.914045][ T5836] usb 5-1: config 0 descriptor?? [ 558.926154][T12656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.009327][ T5884] usb 1-1: device descriptor read/64, error -32 [ 559.210385][T12656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.309284][ T5884] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 559.337326][ T5836] usb 5-1: USB disconnect, device number 85 [ 559.385181][T12676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2064'. [ 559.642892][ T5836] hid-generic 0000:0003:0000.0040: item fetching failed at offset 0/2 [ 559.659636][ T5836] hid-generic 0000:0003:0000.0040: probe with driver hid-generic failed with error -22 [ 559.730872][ T5884] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.839393][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 559.870911][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.881797][ T5884] usb 1-1: Product: syz [ 559.886829][ T5884] usb 1-1: Manufacturer: syz [ 559.892199][ T5884] usb 1-1: SerialNumber: syz [ 560.464856][ T5884] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 560.809065][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.823141][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.833162][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.874450][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.896887][T12697] netlink: 'syz.1.2070': attribute type 11 has an invalid length. [ 561.858887][T12709] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 562.007128][T12711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2075'. [ 562.375123][T12715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.573175][ T5888] usb 1-1: USB disconnect, device number 108 [ 562.582138][ T5888] usblp0: removed [ 562.692536][ T30] audit: type=1326 audit(1745929640.437:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x0 [ 563.033452][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040041][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.489418][T12743] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2086'. [ 563.572396][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 563.630139][T12750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2089'. [ 563.639660][ T5888] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 563.801135][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.829272][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.839766][ T47] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 563.856013][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.917137][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.963698][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.008522][ T5888] usb 4-1: config 0 descriptor?? [ 564.030308][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 564.055675][ T47] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 564.087353][ T47] usb 3-1: can't read configurations, error -61 [ 564.239398][ T47] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 564.439495][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 564.456332][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 564.477093][ T47] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 564.488985][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 564.497138][ T47] usb 3-1: can't read configurations, error -61 [ 564.506322][ T5888] usb 4-1: USB disconnect, device number 98 [ 564.516421][ T47] usb usb3-port1: attempt power cycle [ 564.609349][ T5884] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 564.747334][ T55] Bluetooth: hci1: Malformed Event: 0x02 [ 564.779405][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 564.804734][ T5884] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 564.825611][ T5884] usb 5-1: config 0 has no interface number 0 [ 564.861403][ T5884] usb 5-1: config 0 interface 46 has no altsetting 0 [ 564.889689][ T47] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 564.915655][ T5884] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 564.935484][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 564.950158][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.963144][ T47] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 564.979189][ T47] usb 3-1: can't read configurations, error -61 [ 565.007160][ T5884] usb 5-1: Product: syz [ 565.026405][ T5884] usb 5-1: Manufacturer: syz [ 565.058604][ T5884] usb 5-1: SerialNumber: syz [ 565.079986][ T5884] usb 5-1: config 0 descriptor?? [ 565.131194][ T47] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 565.200497][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 565.234437][ T47] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 565.267498][ T47] usb 3-1: can't read configurations, error -61 [ 565.325810][ T47] usb usb3-port1: unable to enumerate USB device [ 565.397658][ T5884] f81534a_ctrl 5-1:0.46: failed to set register 0x116: -5 [ 565.414183][ T5884] f81534a_ctrl 5-1:0.46: failed to enable ports: -5 [ 565.442670][ T5884] f81534a_ctrl 5-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 565.487763][ T5884] usb 5-1: USB disconnect, device number 86 [ 566.226739][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.237117][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.483139][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 566.622966][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2116'. [ 566.643315][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2116'. [ 566.803610][T12827] kvm: pic: non byte read [ 566.808485][T12827] kvm: pic: non byte read [ 566.815917][T12827] kvm: pic: level sensitive irq not supported [ 566.816028][T12827] kvm: pic: non byte read [ 566.831844][T12827] kvm: pic: non byte read [ 566.837389][T12827] kvm: pic: non byte read [ 566.998492][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.009045][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.168410][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.209613][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.349252][ T5836] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 567.631852][ T5836] usb 1-1: config 0 has no interfaces? [ 567.667686][ T5836] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 567.726194][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.737193][ T5836] usb 1-1: Product: syz [ 567.742009][ T5836] usb 1-1: Manufacturer: syz [ 567.754475][ T5836] usb 1-1: SerialNumber: syz [ 567.771097][ T5836] usb 1-1: config 0 descriptor?? [ 568.009499][ T5884] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 568.029274][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 568.161995][ T5884] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 568.174641][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.186727][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.203274][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.215113][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.230004][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.246504][ T5884] usb 5-1: config 1 has no interface number 0 [ 568.254499][ T5884] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.272970][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.285454][ T5884] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.298444][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.321819][ T9] usb 3-1: config 0 descriptor?? [ 568.327948][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.364042][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.375957][ T5884] usb 5-1: Product: syz [ 568.384137][ T5884] usb 5-1: Manufacturer: syz [ 568.399002][ T5884] usb 5-1: SerialNumber: syz [ 568.435853][ T5884] cdc_wdm 5-1:1.128: skipping garbage [ 568.447067][ T5884] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 568.455252][ T5884] cdc_wdm 5-1:1.128: Unknown control protocol [ 568.636395][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.662441][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.765250][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 568.771702][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 568.784456][ T9] usb 3-1: USB disconnect, device number 114 [ 569.838427][T12876] loop2: detected capacity change from 0 to 7 [ 569.846499][T12876] Dev loop2: unable to read RDB block 7 [ 569.853427][T12876] loop2: unable to read partition table [ 569.860288][T12876] loop2: partition table beyond EOD, truncated [ 569.866755][T12876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.053760][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 570.076965][ T47] usb 1-1: USB disconnect, device number 109 [ 570.229371][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 570.247404][ T9] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 570.261211][ T9] usb 3-1: config 0 has no interface number 0 [ 570.281321][ T9] usb 3-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 570.296440][ T9] usb 3-1: config 0 interface 53 has no altsetting 0 [ 570.310850][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 570.334226][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.348862][ T9] usb 3-1: Product: syz [ 570.355495][ T9] usb 3-1: Manufacturer: syz [ 570.369901][ T9] usb 3-1: SerialNumber: syz [ 570.382221][ T9] usb 3-1: config 0 descriptor?? [ 570.392461][T12873] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 570.411444][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 570.425534][ T9] iowarrior 3-1:0.53: no interrupt-in endpoint found [ 570.438189][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 570.608834][ T9] usb 3-1: USB disconnect, device number 115 [ 570.779074][ T5884] usb 5-1: USB disconnect, device number 87 [ 570.887647][T12896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.359400][ T5884] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 571.379351][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 571.552814][ T9] hid-generic 0000:0003:0000.0041: unknown main item tag 0x0 [ 571.610751][ T5884] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.820529][T12916] FAULT_INJECTION: forcing a failure. [ 571.820529][T12916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.863370][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.1.2148 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 571.863400][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 571.863409][T12916] Call Trace: [ 571.863417][T12916] [ 571.863424][T12916] dump_stack_lvl+0x189/0x250 [ 571.863449][T12916] ? __lock_acquire+0xaac/0xd20 [ 571.863474][T12916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.863497][T12916] ? __pfx__printk+0x10/0x10 [ 571.863511][T12916] ? __might_fault+0xb0/0x130 [ 571.863538][T12916] should_fail_ex+0x414/0x560 [ 571.863565][T12916] _copy_from_user+0x2d/0xb0 [ 571.863586][T12916] input_event_from_user+0xb2/0x280 [ 571.863606][T12916] ? __pfx_input_event_from_user+0x10/0x10 [ 571.863632][T12916] ? input_inject_event+0xbc/0x320 [ 571.863651][T12916] evdev_write+0x2a6/0x480 [ 571.863676][T12916] ? __pfx_evdev_write+0x10/0x10 [ 571.863698][T12916] ? bpf_lsm_file_permission+0x9/0x20 [ 571.863716][T12916] ? security_file_permission+0x75/0x290 [ 571.863739][T12916] ? rw_verify_area+0x258/0x650 [ 571.863754][T12916] ? __pfx_evdev_write+0x10/0x10 [ 571.863775][T12916] vfs_write+0x27b/0xa90 [ 571.863797][T12916] ? __pfx_vfs_write+0x10/0x10 [ 571.863814][T12916] ? __fget_files+0x2a/0x420 [ 571.863835][T12916] ? __fget_files+0x2a/0x420 [ 571.863852][T12916] ? __fget_files+0x3a0/0x420 [ 571.863869][T12916] ? __fget_files+0x2a/0x420 [ 571.863893][T12916] ksys_write+0x145/0x250 [ 571.863908][T12916] ? rcu_is_watching+0x15/0xb0 [ 571.863931][T12916] ? __pfx_ksys_write+0x10/0x10 [ 571.863949][T12916] ? do_syscall_64+0xba/0x210 [ 571.863968][T12916] do_syscall_64+0xf6/0x210 [ 571.863984][T12916] ? clear_bhb_loop+0x45/0xa0 [ 571.864001][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.864016][T12916] RIP: 0033:0x7f28f258e969 [ 571.864029][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.864041][T12916] RSP: 002b:00007f28f3340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.864057][T12916] RAX: ffffffffffffffda RBX: 00007f28f27b5fa0 RCX: 00007f28f258e969 [ 571.864068][T12916] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 571.864077][T12916] RBP: 00007f28f3340090 R08: 0000000000000000 R09: 0000000000000000 [ 571.864087][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.864095][T12916] R13: 0000000000000000 R14: 00007f28f27b5fa0 R15: 00007f28f28dfa28 [ 571.864117][T12916] [ 572.114686][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.203255][ T9] hid-generic 0000:0003:0000.0041: unknown main item tag 0x0 [ 572.223499][ T5884] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 572.251386][T11050] tipc: Subscription rejected, illegal request [ 572.279558][ T9] hid-generic 0000:0003:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz1 [ 572.310721][ T5884] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.361857][ T47] usb 4-1: config 0 has no interfaces? [ 572.370876][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 572.380401][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.387628][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.388654][ T47] usb 4-1: Product: syz [ 572.401409][ T47] usb 4-1: Manufacturer: syz [ 572.406092][ T47] usb 4-1: SerialNumber: syz [ 572.434639][ T47] usb 4-1: config 0 descriptor?? [ 572.464927][T12900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 572.687706][ T5884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.719535][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 572.949314][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 573.038333][ T9] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 573.051801][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.085606][ T9] usb 3-1: config 0 descriptor?? [ 573.130468][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.157909][ T9] usblcd 3-1:0.0: USBLCD model not supported. [ 573.188755][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.295501][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 574.239812][T12939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2156'. [ 574.545574][ T9] usb 5-1: USB disconnect, device number 88 [ 574.817540][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 575.118759][ T9] usb 4-1: USB disconnect, device number 99 [ 575.129489][ T47] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 575.463818][ T47] usb 1-1: config 0 has no interfaces? [ 575.538226][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 575.583701][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.619366][ T47] usb 1-1: Product: syz [ 575.651340][ T47] usb 1-1: Manufacturer: syz [ 575.669366][ T47] usb 1-1: SerialNumber: syz [ 575.697735][ T47] usb 1-1: config 0 descriptor?? [ 575.747312][ T5889] usb 3-1: USB disconnect, device number 116 [ 575.939317][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 576.119410][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 576.135746][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 576.146799][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 576.156175][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 576.190655][ T9] usb 4-1: config 1 has no interface number 0 [ 576.207356][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.219345][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.233574][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 576.243389][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.268498][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 576.329236][ T5885] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 576.366827][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.398110][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.474004][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 576.499850][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 576.508696][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 576.576103][ T5885] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 576.612759][ T9] usb 4-1: USB disconnect, device number 100 [ 576.629618][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 576.657743][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 576.675399][ T5885] usb 3-1: Product: syz [ 576.702472][ T5885] usb 3-1: Manufacturer: syz [ 576.707125][ T5885] usb 3-1: SerialNumber: syz [ 576.765422][ T5885] usb 3-1: config 0 descriptor?? [ 576.795331][T12968] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 577.058039][T12968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.163288][ T5888] hid-generic 0000:0003:0000.0042: item fetching failed at offset 0/2 [ 577.218865][ T5888] hid-generic 0000:0003:0000.0042: probe with driver hid-generic failed with error -22 [ 577.321007][ T5885] usb 3-1: USB disconnect, device number 117 [ 577.607579][T13002] sctp: [Deprecated]: syz.3.2175 (pid 13002) Use of int in maxseg socket option. [ 577.607579][T13002] Use struct sctp_assoc_value instead [ 578.918563][T13007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.020646][T13007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.320815][T13007] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.348076][T13007] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.368152][T13007] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.368519][T13018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.403224][T13007] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.869399][T13007] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 579.909558][T13007] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 579.935701][T13007] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 579.959273][T13007] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 580.061025][ T5888] usb 1-1: USB disconnect, device number 110 [ 580.162758][T13032] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2184'. [ 580.719731][ T9] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 580.781607][T13044] x_tables: duplicate underflow at hook 2 [ 580.813656][ T5888] hid-generic 0000:0003:0000.0043: item fetching failed at offset 0/2 [ 580.879586][ T5888] hid-generic 0000:0003:0000.0043: probe with driver hid-generic failed with error -22 [ 581.058381][ T9] usb 1-1: config 0 has no interfaces? [ 581.106717][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.159309][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.169439][ T9] usb 1-1: Product: syz [ 581.177613][ T9] usb 1-1: Manufacturer: syz [ 581.199419][ T9] usb 1-1: SerialNumber: syz [ 581.208184][ T9] usb 1-1: config 0 descriptor?? [ 581.826161][T13038] ALSA: seq fatal error: cannot create timer (-19) [ 583.539276][ T5889] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 583.769955][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.792090][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.802994][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.831097][ T5889] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 583.961516][ T9] usb 1-1: USB disconnect, device number 111 [ 583.967995][ T30] audit: type=1326 audit(1745929661.647:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.3.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2ed8e969 code=0x0 [ 584.010584][ T5889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 584.060197][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.078511][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 584.122352][ T5889] usb 3-1: Product: syz [ 584.143003][ T5889] usb 3-1: Manufacturer: syz [ 584.159504][ T5889] usb 3-1: SerialNumber: syz [ 584.198751][ T5889] cdc_mbim 3-1:1.0: skipping garbage [ 584.393502][T13081] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 584.907916][ T9] hid-generic 0000:0003:0000.0044: item fetching failed at offset 0/2 [ 584.932734][ T9] hid-generic 0000:0003:0000.0044: probe with driver hid-generic failed with error -22 [ 585.115871][T13081] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 585.363975][ T5889] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 585.372111][ T5889] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 585.380125][ T5889] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 585.630082][ T5889] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 585.742271][ T5889] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 585.761316][ T5889] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 585.770714][ T5889] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 585.782838][ T5889] usb 3-1: USB disconnect, device number 118 [ 586.269307][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 586.439757][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 586.500460][T13112] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2209'. [ 586.517385][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 586.565261][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.636121][ T9] usb 4-1: config 0 descriptor?? [ 586.662528][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 587.094993][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.121115][ T5889] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 587.134318][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.319456][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 587.351458][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 587.387448][ T5889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 587.409207][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 587.436551][ T5889] usb 5-1: Product: syz [ 587.449218][ T5889] usb 5-1: Manufacturer: syz [ 587.454866][ T5889] usb 5-1: SerialNumber: syz [ 587.485346][ T5889] usb 5-1: config 0 descriptor?? [ 587.496241][T13120] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 587.760539][T13120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.809241][ T5885] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 587.901550][ T5889] usb 5-1: USB disconnect, device number 89 [ 588.010115][ T9] gspca_sonixj: reg_w1 err -110 [ 588.162916][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 588.209337][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 588.234519][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.278308][T13136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2216'. [ 588.404545][ T5885] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.636544][ T5885] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 588.657346][ T47] usb 4-1: USB disconnect, device number 101 [ 588.830140][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.891729][ T5885] usb 1-1: config 0 descriptor?? [ 589.639222][ T5889] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 590.140570][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'. [ 590.612245][ T5889] usb 4-1: config 0 has no interfaces? [ 591.018168][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.122056][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.600328][ T5885] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 592.070243][ T47] usb 1-1: USB disconnect, device number 112 [ 592.595522][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 592.720058][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.762861][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.799763][ T5889] usb 4-1: config 0 descriptor?? [ 592.876485][ T5889] usb 4-1: can't set config #0, error -71 [ 592.927347][ T5889] usb 4-1: USB disconnect, device number 102 [ 593.284090][ T5889] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 593.481919][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 593.514664][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 593.570775][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 593.611880][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 594.029921][ T5889] usb 4-1: Product: syz [ 594.109273][ T5836] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 594.271188][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.299179][ T5889] usb 4-1: Manufacturer: syz [ 594.303902][ T5889] usb 4-1: SerialNumber: syz [ 594.334019][ T5889] usb 4-1: config 0 descriptor?? [ 594.351019][T13179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.381541][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 594.444983][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 594.456362][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 594.488237][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 594.499523][ T5885] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 594.510657][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.527642][ T5836] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 594.554158][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.571535][T13179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.588046][ T5836] usb 3-1: Product: syz [ 594.592647][ T5836] usb 3-1: Manufacturer: syz [ 594.605111][ T5836] usb 3-1: SerialNumber: syz [ 594.622531][ T5836] usb 3-1: config 0 descriptor?? [ 594.645835][ T5836] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 594.674623][ T9] usb 4-1: USB disconnect, device number 103 [ 594.681873][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 594.713788][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.727762][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.743398][ T5885] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 594.753351][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.770659][ T5885] usb 5-1: config 0 descriptor?? [ 595.136191][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2234'. [ 595.160941][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.216181][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.908119][T13225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2243'. [ 595.924788][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.940432][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.570602][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 597.043517][ T5885] usb 5-1: USB disconnect, device number 90 [ 597.345745][ T9] usb 1-1: config 0 has no interfaces? [ 597.371751][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 597.382666][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.391875][ T9] usb 1-1: Product: syz [ 597.396327][ T9] usb 1-1: Manufacturer: syz [ 597.401486][ T9] usb 1-1: SerialNumber: syz [ 597.413723][ T9] usb 1-1: config 0 descriptor?? [ 598.184928][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 598.694531][ T9] usb 4-1: config 0 has no interfaces? [ 598.735079][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.959340][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.115793][ T9] usb 4-1: Product: syz [ 599.154892][ T9] usb 4-1: Manufacturer: syz [ 599.323668][ T9] usb 4-1: SerialNumber: syz [ 599.334084][ T5888] usb 1-1: USB disconnect, device number 113 [ 599.470772][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.580560][ T9] usb 4-1: config 0 descriptor?? [ 599.632554][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 599.662897][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.723096][T13266] input: syz0 as /devices/virtual/input/input46 [ 600.500170][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 600.669409][ T5885] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 600.691914][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.776973][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.855665][ T9] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 600.899658][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 600.915561][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.946359][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.998895][ T9] usb 1-1: config 0 descriptor?? [ 601.029372][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.114619][ T5885] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 601.114685][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.134818][ T5885] usb 5-1: config 0 descriptor?? [ 601.396851][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 601.518358][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 603.066697][ T5888] usb 4-1: USB disconnect, device number 104 [ 603.611954][T13306] netlink: 'syz.1.2264': attribute type 10 has an invalid length. [ 603.655739][T13306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2264'. [ 603.686459][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.831271][ T9] usb 3-1: USB disconnect, device number 120 [ 603.905597][T13310] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2266'. [ 603.965132][T13308] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 604.325099][ T47] usb 1-1: USB disconnect, device number 114 [ 604.452468][ T30] audit: type=1326 audit(1745929682.197:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 604.538922][ T30] audit: type=1326 audit(1745929682.227:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 604.576470][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2261'. [ 604.619780][ T47] usb 5-1: USB disconnect, device number 91 [ 604.701934][ T30] audit: type=1326 audit(1745929682.247:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 604.800737][ T30] audit: type=1326 audit(1745929682.247:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 604.803791][T13327] Invalid logical block size (-64) [ 604.899679][ T30] audit: type=1326 audit(1745929682.247:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 604.976662][ T30] audit: type=1326 audit(1745929682.247:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 605.071498][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.104474][ T30] audit: type=1326 audit(1745929682.247:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 605.131645][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.299619][ T30] audit: type=1326 audit(1745929682.247:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 605.326698][ T30] audit: type=1326 audit(1745929682.257:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 605.723711][ T30] audit: type=1326 audit(1745929682.257:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 606.259197][T13326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.356024][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 606.989396][ T47] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 607.289199][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 607.347455][ T47] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 607.360824][ T5888] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 607.389198][ T47] usb 5-1: config 0 has no interface number 0 [ 607.433504][ T47] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.451807][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.469040][ T47] usb 5-1: Product: syz [ 607.474303][ T47] usb 5-1: Manufacturer: syz [ 607.479047][ T47] usb 5-1: SerialNumber: syz [ 607.488649][ T47] usb 5-1: config 0 descriptor?? [ 607.500892][ T47] smsc95xx v2.0.0 [ 607.550065][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 607.648044][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.775440][ T5888] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.852481][ T5888] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 607.970427][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 607.998417][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.016743][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 608.060122][ T5888] usb 4-1: config 0 descriptor?? [ 608.348370][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2282'. [ 608.654418][ T5888] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 608.858406][T13384] bridge0: port 2(vlan0) entered blocking state [ 608.953079][T13384] bridge0: port 2(vlan0) entered disabled state [ 608.980723][T13384] vlan0: entered allmulticast mode [ 609.069610][T13384] bond0: entered allmulticast mode [ 609.074969][T13384] bond1: entered allmulticast mode [ 609.099524][T13384] bond2: entered allmulticast mode [ 609.118866][T13384] bond3: entered allmulticast mode [ 609.171278][T13384] vlan0: entered promiscuous mode [ 609.208141][T13384] bond0: entered promiscuous mode [ 609.242092][T13384] bond1: entered promiscuous mode [ 609.260341][T13384] bond2: entered promiscuous mode [ 609.343554][T13384] bond3: entered promiscuous mode [ 609.885039][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 609.921993][ T47] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 609.959393][ T47] usb 5-1: USB disconnect, device number 92 [ 610.141093][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 610.328797][ T5889] usb 4-1: USB disconnect, device number 105 [ 610.385728][ T5888] usb 3-1: config 0 has no interfaces? [ 610.438182][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 610.459748][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.476816][ T5888] usb 3-1: Product: syz [ 610.481672][ T5888] usb 3-1: Manufacturer: syz [ 610.486280][ T5888] usb 3-1: SerialNumber: syz [ 610.493886][ T5888] usb 3-1: config 0 descriptor?? [ 610.809255][ T5885] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 610.971191][T13379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.984618][T13379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.053768][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 611.081992][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 611.091966][ T5885] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.101325][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.183339][ T5885] usb 1-1: Product: syz [ 611.231477][ T9] usb 5-1: config 0 has no interfaces? [ 611.242064][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.315095][ T5885] usb 1-1: Manufacturer: syz [ 611.320009][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.326887][T13421] x_tables: duplicate underflow at hook 2 [ 611.328201][ T5885] usb 1-1: SerialNumber: syz [ 611.345676][ T9] usb 5-1: Product: syz [ 611.364554][ T9] usb 5-1: Manufacturer: syz [ 611.376628][ T5885] usb 1-1: config 0 descriptor?? [ 611.437184][ T9] usb 5-1: SerialNumber: syz [ 611.566900][ T9] usb 5-1: config 0 descriptor?? [ 611.807421][ T5885] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 611.978891][T13425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 612.043108][T13425] bond0: (slave bond5): Enslaving as an active interface with an up link [ 612.253010][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 612.253030][ T30] audit: type=1326 audit(1745929689.997:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13429 comm="syz.3.2305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2ed8e969 code=0x0 [ 612.719259][ T5884] usb 3-1: USB disconnect, device number 121 [ 613.222501][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.232639][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.269342][ T5888] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 613.439526][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 613.535217][ T5885] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 613.556199][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.573696][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 613.593145][ T5888] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 613.608850][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.632477][ T5888] usb 3-1: config 0 descriptor?? [ 613.846064][ T5889] usb 5-1: USB disconnect, device number 93 [ 614.449330][ T5885] usb 1-1: USB disconnect, device number 115 [ 614.781887][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2308'. [ 614.922749][ T5888] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 615.082000][ T5888] usb 1-1: config 0 has no interfaces? [ 615.211617][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 615.221787][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.230673][ T5888] usb 1-1: Product: syz [ 615.235200][ T5888] usb 1-1: Manufacturer: syz [ 615.240359][ T5888] usb 1-1: SerialNumber: syz [ 615.291071][ T5888] usb 1-1: config 0 descriptor?? [ 615.509336][ T47] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 615.619552][ T5888] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 615.691036][ T47] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 615.703024][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 615.720790][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 615.733762][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 615.750495][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 615.763223][ T5888] usb 4-1: device descriptor read/64, error -71 [ 615.778184][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 615.814546][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 615.844525][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 615.878572][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 615.953191][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.004600][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.036781][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.057018][ T5888] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 616.087401][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.137231][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.249202][ T5888] usb 4-1: device descriptor read/64, error -71 [ 616.276216][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.310050][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.365275][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.405292][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.417927][ T5888] usb usb4-port1: attempt power cycle [ 616.519812][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.536001][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.565670][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.594438][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.612276][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.626482][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.686493][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.713067][ T47] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 616.727692][ T47] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 616.754700][ T5885] usb 3-1: USB disconnect, device number 122 [ 616.796970][ T47] usb 5-1: Product: syz [ 616.815219][ T47] usb 5-1: Manufacturer: syz [ 616.839751][ T5888] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 616.848237][ T47] usb 5-1: SerialNumber: syz [ 616.870997][ T47] usb 5-1: config 0 descriptor?? [ 616.889516][ T47] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 616.899671][ T5888] usb 4-1: device descriptor read/8, error -71 [ 617.225632][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 617.226360][ T5884] usb 5-1: USB disconnect, device number 94 [ 617.249197][ T5888] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 617.269363][ T5884] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 617.283837][ T5888] usb 4-1: device descriptor read/8, error -71 [ 617.349284][ T5885] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 617.419440][ T5888] usb usb4-port1: unable to enumerate USB device [ 617.501154][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.521893][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.540154][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.559326][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.573123][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.599316][ T5885] usb 3-1: config 0 descriptor?? [ 617.785695][ T5888] usb 1-1: USB disconnect, device number 116 [ 618.061735][ T5885] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 618.121784][ T5885] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 618.264912][T13508] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2328'. [ 618.313817][ T5836] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 618.456786][ T5885] usb 3-1: USB disconnect, device number 123 [ 618.599440][ T5836] usb 1-1: config 0 has no interfaces? [ 618.614877][ T5836] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 618.651091][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.708705][ T5836] usb 1-1: Product: syz [ 618.804888][ T5836] usb 1-1: Manufacturer: syz [ 618.814589][ T5836] usb 1-1: SerialNumber: syz [ 618.823890][ T5836] usb 1-1: config 0 descriptor?? [ 618.920479][T13518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.949257][ T5884] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 619.143987][ T5884] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.160287][ T5884] usb 4-1: config 0 has no interface number 0 [ 619.166673][ T5884] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 619.181993][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.194925][ T5884] usb 4-1: config 0 descriptor?? [ 619.205125][ T5884] usb 4-1: selecting invalid altsetting 1 [ 619.223893][ T5884] dvb_ttusb_budget: ttusb_init_controller: error [ 619.232923][ T5884] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 619.351336][ T5884] DVB: Unable to find symbol cx22700_attach() [ 619.679577][ T5884] DVB: Unable to find symbol tda10046_attach() [ 619.772672][ T5884] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 619.802039][ T5884] usb 4-1: USB disconnect, device number 110 [ 620.049933][ T5885] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 620.201859][T13536] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 620.543218][T13539] loop2: detected capacity change from 0 to 7 [ 620.555459][ T5200] Dev loop2: unable to read RDB block 7 [ 620.561576][ T5200] loop2: unable to read partition table [ 620.567840][ T5200] loop2: partition table beyond EOD, truncated [ 620.652001][T13539] Dev loop2: unable to read RDB block 7 [ 620.662464][T13539] loop2: unable to read partition table [ 620.683070][T13539] loop2: partition table beyond EOD, truncated [ 620.729343][ T5888] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 620.766035][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 620.786538][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.797127][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.806755][ T5885] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 620.816598][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.827762][T13539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.864660][ T5885] usb 5-1: config 0 descriptor?? [ 620.901529][ T5200] Dev loop2: unable to read RDB block 7 [ 620.931189][ T5200] loop2: unable to read partition table [ 620.958539][ T5200] loop2: partition table beyond EOD, truncated [ 621.051359][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.080738][T13544] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2340'. [ 621.102168][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.170807][ T5888] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 621.234544][T13534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2336'. [ 621.254284][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.292718][ T5888] usb 3-1: config 0 descriptor?? [ 621.315884][ T3078] usb 1-1: USB disconnect, device number 117 [ 621.499797][ T47] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 621.520549][T13555] loop2: detected capacity change from 0 to 7 [ 621.528137][T13555] Dev loop2: unable to read RDB block 7 [ 621.540228][T13555] loop2: AHDI p2 p3 [ 621.544334][T13555] loop2: partition table partially beyond EOD, truncated [ 621.556961][T13555] loop2: p2 start 4227858432 is beyond EOD, truncated [ 621.659269][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 621.718891][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 621.763610][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 621.909453][ T5885] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 621.979577][ T47] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.000933][ T47] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.080761][ T47] usb 4-1: Product: syz [ 622.093185][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.124744][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.139492][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.161178][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.180912][ T47] usb 4-1: Manufacturer: syz [ 622.194503][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.195924][ T47] usb 4-1: SerialNumber: syz [ 622.229932][ T5885] usb 1-1: config 0 descriptor?? [ 622.257791][ T47] usb 4-1: config 0 descriptor?? [ 622.274102][T13550] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 622.672411][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.682834][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.708530][ T5885] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 622.740755][ T5885] plantronics 0003:047F:FFFF.0048: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 622.781236][T13550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.908155][ T5885] usb 1-1: USB disconnect, device number 118 [ 623.025605][ T5836] usb 4-1: USB disconnect, device number 111 [ 623.041356][ T5884] usb 5-1: USB disconnect, device number 95 [ 623.136806][T13565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 623.588258][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2348'. [ 623.664761][ T5884] usb 3-1: USB disconnect, device number 124 [ 624.473544][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.480320][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.179638][ T30] audit: type=1326 audit(1745929702.917:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.243278][ T30] audit: type=1326 audit(1745929702.917:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.342091][ T30] audit: type=1326 audit(1745929702.917:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.444857][ T30] audit: type=1326 audit(1745929702.927:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.499214][ T5888] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 625.529306][ T30] audit: type=1326 audit(1745929702.927:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.564895][ T30] audit: type=1326 audit(1745929702.927:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.602925][ T30] audit: type=1326 audit(1745929702.957:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.679720][ T30] audit: type=1326 audit(1745929702.957:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.709969][ T30] audit: type=1326 audit(1745929702.957:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.736795][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 625.747349][ T30] audit: type=1326 audit(1745929702.957:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec9998e969 code=0x7ffc0000 [ 625.774142][ T5888] usb 5-1: config 106 has an invalid interface number: 33 but max is 0 [ 625.783477][ T5888] usb 5-1: config 106 has no interface number 0 [ 625.790301][ T5888] usb 5-1: config 106 interface 33 has no altsetting 0 [ 625.800827][ T5888] usb 5-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 625.815035][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.825166][ T5888] usb 5-1: Product: syz [ 625.833809][ T5888] usb 5-1: Manufacturer: syz [ 625.838615][ T5888] usb 5-1: SerialNumber: syz [ 626.070701][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.098760][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.157092][ T5888] ums-sddr55 5-1:106.33: USB Mass Storage device detected [ 626.225456][ T5888] ums-sddr55 5-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 626.406721][ T5888] usb 5-1: USB disconnect, device number 96 [ 626.722638][T13610] loop8: detected capacity change from 0 to 1 [ 626.730385][T13610] Dev loop8: unable to read RDB block 1 [ 626.736142][T13610] loop8: unable to read partition table [ 626.742695][T13610] loop8: partition table beyond EOD, truncated [ 626.749419][T13610] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 626.913823][T13618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2361'. [ 627.129547][ T5884] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 627.209361][ T5836] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 627.339506][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.379290][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.406135][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.419602][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 627.443795][ T5836] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 627.511647][ T5836] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 627.524538][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.543819][ T5836] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 627.554654][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.569162][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.588994][ T5884] usb 1-1: config 0 descriptor?? [ 627.599033][ T5836] usb 4-1: Product: syz [ 627.612773][ T5836] usb 4-1: Manufacturer: syz [ 627.678815][ T5836] usb 4-1: SerialNumber: syz [ 628.050491][ T5884] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 628.129160][ T5885] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 628.315533][ T5884] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 628.498273][ T5884] usb 1-1: USB disconnect, device number 119 [ 628.575532][ T5885] usb 3-1: config 0 has no interfaces? [ 628.688915][ T5885] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 628.777316][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.799339][ T5885] usb 3-1: Product: syz [ 628.808057][ T5885] usb 3-1: Manufacturer: syz [ 628.834830][ T5885] usb 3-1: SerialNumber: syz [ 628.867020][ T5885] usb 3-1: config 0 descriptor?? [ 628.964299][T13656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2373'. [ 628.975991][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.993728][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.010785][T13656] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2373'. [ 630.007051][ T5884] usb 4-1: USB disconnect, device number 112 [ 630.189286][ T5885] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 630.197404][ C0] raw-gadget.4 gadget.4: ignoring, device is not running [ 630.339244][ T5885] usb 5-1: device descriptor read/64, error -32 [ 630.579512][ T5885] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 630.629401][ T5888] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 630.782001][ T5884] usb 3-1: USB disconnect, device number 125 [ 630.815923][ T5885] usb 5-1: config 0 has no interfaces? [ 630.833404][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.870765][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.906226][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.945689][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.958363][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.976583][ T5888] usb 4-1: config 0 descriptor?? [ 631.002292][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 631.034429][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.099791][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2386'. [ 631.130934][ T5885] usb 5-1: Product: syz [ 631.135813][ T5885] usb 5-1: Manufacturer: syz [ 631.143569][T13693] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2386'. [ 631.143586][T13695] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2387'. [ 631.170135][ T5885] usb 5-1: SerialNumber: syz [ 631.204776][ T5885] usb 5-1: config 0 descriptor?? [ 631.400760][ T5888] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 631.482515][ T5888] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 631.567409][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.585571][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.617177][ T5888] usb 4-1: USB disconnect, device number 113 [ 631.797350][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 632.296770][T13722] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2399'. [ 632.325073][T13722] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2399'. [ 632.372488][T13676] vlan2: entered allmulticast mode [ 632.554848][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.600850][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.652094][T13734] input: syz1 as /devices/virtual/input/input49 [ 632.741650][ T5885] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 632.950370][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 632.971651][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 633.000639][ T5885] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 633.026345][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 633.046964][ T5885] usb 4-1: Product: syz [ 633.069196][ T5885] usb 4-1: Manufacturer: syz [ 633.069223][ T5885] usb 4-1: SerialNumber: syz [ 633.074975][ T5885] usb 4-1: config 0 descriptor?? [ 633.077812][T13728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.305617][T13728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.320056][ T5885] usb 5-1: USB disconnect, device number 98 [ 633.506998][ T3078] usb 4-1: USB disconnect, device number 114 [ 634.108239][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.131214][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.440115][ T3078] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 634.601119][ T3078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.637463][ T3078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.792256][ T3078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.920966][ T3078] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 635.006825][ T3078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.168171][ T3078] usb 4-1: config 0 descriptor?? [ 635.417064][T13769] bridge0: port 4(batadv1) entered blocking state [ 635.423806][T13769] bridge0: port 4(batadv1) entered listening state [ 635.430963][T13769] bridge0: port 3(batadv0) entered blocking state [ 635.437543][T13769] bridge0: port 3(batadv0) entered listening state [ 635.444452][T13769] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.451777][T13769] bridge0: port 2(bridge_slave_1) entered listening state [ 635.459242][T13769] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.466427][T13769] bridge0: port 1(bridge_slave_0) entered listening state [ 635.605882][ T3078] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 635.692012][T13769] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 635.750797][ T3078] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 635.907890][ T3078] usb 4-1: USB disconnect, device number 115 [ 636.231950][T13777] FAULT_INJECTION: forcing a failure. [ 636.231950][T13777] name failslab, interval 1, probability 0, space 0, times 0 [ 636.248843][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.2.2418 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 636.248874][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 636.248888][T13777] Call Trace: [ 636.248897][T13777] [ 636.248907][T13777] dump_stack_lvl+0x189/0x250 [ 636.248954][T13777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.248984][T13777] ? __pfx__printk+0x10/0x10 [ 636.249011][T13777] ? __pfx___might_resched+0x10/0x10 [ 636.249041][T13777] ? fs_reclaim_acquire+0x7d/0x100 [ 636.249077][T13777] should_fail_ex+0x414/0x560 [ 636.249113][T13777] should_failslab+0xa8/0x100 [ 636.249140][T13777] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 636.249164][T13777] ? __d_alloc+0x31/0x6f0 [ 636.249195][T13777] __d_alloc+0x31/0x6f0 [ 636.249229][T13777] d_alloc_pseudo+0x1f/0xb0 [ 636.249259][T13777] alloc_file_pseudo+0xcc/0x210 [ 636.249292][T13777] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 636.249334][T13777] anon_inode_getfd+0xca/0x1b0 [ 636.249364][T13777] map_create+0xdb6/0x1150 [ 636.249395][T13777] ? security_bpf+0x7e/0x300 [ 636.249417][T13777] __sys_bpf+0x67e/0x860 [ 636.249444][T13777] ? __pfx___sys_bpf+0x10/0x10 [ 636.249482][T13777] ? ksys_write+0x1f0/0x250 [ 636.249503][T13777] ? rcu_is_watching+0x15/0xb0 [ 636.249544][T13777] __x64_sys_bpf+0x7c/0x90 [ 636.249567][T13777] do_syscall_64+0xf6/0x210 [ 636.249591][T13777] ? clear_bhb_loop+0x45/0xa0 [ 636.249617][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.249636][T13777] RIP: 0033:0x7f59f9f8e969 [ 636.249655][T13777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.249672][T13777] RSP: 002b:00007f59fae00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.249693][T13777] RAX: ffffffffffffffda RBX: 00007f59fa1b5fa0 RCX: 00007f59f9f8e969 [ 636.249708][T13777] RDX: 0000000000000050 RSI: 0000200000002400 RDI: 0000000000000000 [ 636.249721][T13777] RBP: 00007f59fae00090 R08: 0000000000000000 R09: 0000000000000000 [ 636.249734][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.249746][T13777] R13: 0000000000000001 R14: 00007f59fa1b5fa0 R15: 00007f59fa2dfa28 [ 636.249777][T13777] [ 636.839907][ T5885] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 636.999303][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 637.006366][ T5885] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.015085][ T5885] usb 5-1: config 0 has no interface number 0 [ 637.023454][ T5885] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 637.033228][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.049631][ T5885] usb 5-1: Product: syz [ 637.059920][ T5885] usb 5-1: Manufacturer: syz [ 637.073230][ T5885] usb 5-1: SerialNumber: syz [ 637.095961][ T5885] usb 5-1: config 0 descriptor?? [ 637.113607][ T5885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 637.139235][ T47] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 637.192607][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.216205][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.319429][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 637.339507][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 637.351719][ T47] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 637.373524][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.379176][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.399395][ T47] usb 4-1: Product: syz [ 637.405929][ T47] usb 4-1: Manufacturer: syz [ 637.420424][ T47] usb 4-1: SerialNumber: syz [ 637.427538][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.450600][ T47] usb 4-1: config 0 descriptor?? [ 637.510207][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 637.517888][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 637.525575][ C0] bridge0: port 3(batadv0) entered learning state [ 637.533538][ C0] bridge0: port 4(batadv1) entered learning state [ 637.629389][ T3078] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 637.684543][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.699697][T13789] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2423'. [ 637.766530][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.851327][ T3078] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.862738][ T3078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.889819][ T3078] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.903671][ T3078] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 637.919325][ T3078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.946157][ T3078] usb 1-1: config 0 descriptor?? [ 638.012171][ T47] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 638.021843][ T47] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 638.037827][ T47] usb 4-1: USB disconnect, device number 116 [ 638.219295][ T5888] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 638.379365][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 638.479794][ T3078] ath6kl: Failed to submit usb control message: -71 [ 638.496157][ T5888] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 638.528542][ T3078] ath6kl: unable to send the bmi data to the device: -71 [ 638.567645][ T5888] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 638.599318][ T3078] ath6kl: Unable to send get target info: -71 [ 638.655490][ T3078] ath6kl: Failed to init ath6kl core: -71 [ 638.666945][ T5888] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 638.693671][ T3078] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 638.806313][ T3078] usb 1-1: USB disconnect, device number 120 [ 638.818737][ T5888] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 638.830748][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.840331][ T5885] gspca_spca1528: reg_w err -71 [ 638.845344][ T5885] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 638.878564][ T5888] usb 3-1: Product: syz [ 638.887389][ T5885] usb 5-1: USB disconnect, device number 99 [ 638.893812][ T5888] usb 3-1: Manufacturer: syz [ 638.922468][ T5888] usb 3-1: SerialNumber: syz [ 639.589172][ C0] bridge0: port 4(batadv1) entered forwarding state [ 639.595854][ C0] bridge0: topology change detected, propagating [ 639.602464][ C0] bridge0: port 3(batadv0) entered forwarding state [ 639.609111][ C0] bridge0: topology change detected, propagating [ 639.615783][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.623064][ C0] bridge0: topology change detected, propagating [ 639.629692][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.636986][ C0] bridge0: topology change detected, propagating [ 639.779774][ T3078] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 639.909384][ T5888] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 640.083605][ T5888] usb 5-1: config 0 has no interfaces? [ 640.105512][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 640.141762][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.159834][ T5888] usb 5-1: Product: syz [ 640.164405][ T5888] usb 5-1: Manufacturer: syz [ 640.173887][ T5888] usb 5-1: SerialNumber: syz [ 640.189398][ T5889] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 640.202417][ T5888] usb 5-1: config 0 descriptor?? [ 640.307051][ T3078] usb 1-1: config 0 has no interfaces? [ 640.355505][ T3078] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 640.411377][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.457965][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.524999][ T3078] usb 1-1: Product: syz [ 640.545704][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.557539][ T3078] usb 1-1: Manufacturer: syz [ 640.581873][ T5885] usb 3-1: USB disconnect, device number 126 [ 640.603648][ T3078] usb 1-1: SerialNumber: syz [ 640.636458][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.668988][ T3078] usb 1-1: config 0 descriptor?? [ 640.697759][ T5889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.763604][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.853772][ T5889] usb 4-1: config 0 descriptor?? [ 641.165942][T13835] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 641.259563][T13837] fuse: Unknown parameter '000000000000000000000100x0000000000000008' [ 641.321912][ T5889] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 641.407228][ T5889] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 641.516223][T13839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 641.823037][T13841] FAULT_INJECTION: forcing a failure. [ 641.823037][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 641.840883][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.2.2438 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 641.840916][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 641.840930][T13841] Call Trace: [ 641.840939][T13841] [ 641.840949][T13841] dump_stack_lvl+0x189/0x250 [ 641.840988][T13841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.841019][T13841] ? __pfx__printk+0x10/0x10 [ 641.841047][T13841] ? __pfx___might_resched+0x10/0x10 [ 641.841079][T13841] ? fs_reclaim_acquire+0x7d/0x100 [ 641.841114][T13841] should_fail_ex+0x414/0x560 [ 641.841152][T13841] should_failslab+0xa8/0x100 [ 641.841182][T13841] __kmalloc_cache_noprof+0x70/0x3d0 [ 641.841208][T13841] ? kvm_vcpu_ioctl+0x3a6/0xe90 [ 641.841240][T13841] kvm_vcpu_ioctl+0x3a6/0xe90 [ 641.841274][T13841] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 641.841311][T13841] ? __lock_acquire+0xaac/0xd20 [ 641.841358][T13841] ? __fget_files+0x2a/0x420 [ 641.841390][T13841] ? __fget_files+0x3a0/0x420 [ 641.841414][T13841] ? __fget_files+0x2a/0x420 [ 641.841444][T13841] ? bpf_lsm_file_ioctl+0x9/0x20 [ 641.841470][T13841] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 641.841499][T13841] __se_sys_ioctl+0xf9/0x170 [ 641.841524][T13841] do_syscall_64+0xf6/0x210 [ 641.841547][T13841] ? clear_bhb_loop+0x45/0xa0 [ 641.841574][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.841594][T13841] RIP: 0033:0x7f59f9f8e56b [ 641.841615][T13841] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 641.841633][T13841] RSP: 002b:00007f59fadfe490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.841655][T13841] RAX: ffffffffffffffda RBX: 00007f59fadfebe0 RCX: 00007f59f9f8e56b [ 641.841671][T13841] RDX: 00007f59fadfeaa0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 641.841684][T13841] RBP: 0000000000000007 R08: 0000000000000001 R09: 0000000000000044 [ 641.841696][T13841] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000018 [ 641.841709][T13841] R13: 0000200001000000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 641.841741][T13841] [ 642.347316][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.364038][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.837371][ T5889] usb 5-1: USB disconnect, device number 100 [ 643.023594][T13858] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 643.039239][T13858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2444'. [ 643.072964][T13858] ptrace attach of "./syz-executor exec"[5849] was attempted by ""[13858] [ 643.212534][ T5884] usb 1-1: USB disconnect, device number 121 [ 643.309258][ T5889] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 643.370381][ T5885] usb 4-1: USB disconnect, device number 117 [ 643.507104][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 643.575473][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 643.651791][ T5889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 643.722734][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 643.789189][ T5889] usb 5-1: Product: syz [ 643.813692][ T5889] usb 5-1: Manufacturer: syz [ 643.859320][ T5889] usb 5-1: SerialNumber: syz [ 643.885386][ T5889] usb 5-1: config 0 descriptor?? [ 643.940815][T13859] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 644.153600][T13870] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2448'. [ 644.234789][ T3078] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 644.376806][T13859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.549430][ T3078] usb 1-1: config 0 has no interfaces? [ 644.572703][ T5885] usb 5-1: USB disconnect, device number 101 [ 644.678595][ T3078] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 644.726606][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.879674][ T3078] usb 1-1: Product: syz [ 644.883911][ T3078] usb 1-1: Manufacturer: syz [ 644.888545][ T3078] usb 1-1: SerialNumber: syz [ 645.130504][ T3078] usb 1-1: config 0 descriptor?? [ 645.592424][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.606312][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.870761][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 646.523627][T13896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.588660][T13914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.604729][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.616351][T13914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.628783][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.701106][T13918] caif0: left allmulticast mode [ 647.721336][T13918] hsr1: left allmulticast mode [ 647.726296][T13918] syz_tun: left allmulticast mode [ 647.734932][T13918] batadv_slave_0: left allmulticast mode [ 647.929671][T13920] sctp: [Deprecated]: syz.3.2460 (pid 13920) Use of int in maxseg socket option. [ 647.929671][T13920] Use struct sctp_assoc_value instead [ 648.009476][ T5885] usb 1-1: USB disconnect, device number 122 [ 648.521890][T13930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 648.531217][T13930] bond0: (slave bond6): Enslaving as an active interface with an up link [ 649.089311][ T5889] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 649.191421][ T5888] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 649.271238][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 649.287200][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 649.355927][ T5888] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 649.370047][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 649.388482][ T5888] usb 1-1: config 2 has no interface number 0 [ 649.398585][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 649.415407][ T5888] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 649.439013][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'. [ 649.459319][ T5889] usb 4-1: Product: syz [ 649.463533][ T5889] usb 4-1: Manufacturer: syz [ 649.468153][ T5889] usb 4-1: SerialNumber: syz [ 649.488251][ T5888] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 649.560384][ T5889] usb 4-1: config 0 descriptor?? [ 649.616256][ T5888] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 649.637181][T13935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 649.744308][ T5888] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 649.774858][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.797766][ T5888] usb 1-1: Product: syz [ 649.810758][ T5888] usb 1-1: Manufacturer: syz [ 649.825741][ T5888] usb 1-1: SerialNumber: syz [ 649.856406][T13938] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 649.909384][T13938] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 649.926250][T13935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.258672][ T5884] usb 4-1: USB disconnect, device number 118 [ 651.353020][T13965] FAULT_INJECTION: forcing a failure. [ 651.353020][T13965] name failslab, interval 1, probability 0, space 0, times 0 [ 651.468954][T13965] CPU: 0 UID: 0 PID: 13965 Comm: syz.4.2471 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 651.468986][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 651.468999][T13965] Call Trace: [ 651.469008][T13965] [ 651.469017][T13965] dump_stack_lvl+0x189/0x250 [ 651.469055][T13965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.469084][T13965] ? __pfx__printk+0x10/0x10 [ 651.469106][T13965] ? __pfx___might_resched+0x10/0x10 [ 651.469136][T13965] ? fs_reclaim_acquire+0x7d/0x100 [ 651.469171][T13965] should_fail_ex+0x414/0x560 [ 651.469217][T13965] should_failslab+0xa8/0x100 [ 651.469246][T13965] __kmalloc_noprof+0xcb/0x4f0 [ 651.469271][T13965] ? tomoyo_encode+0x28b/0x550 [ 651.469307][T13965] tomoyo_encode+0x28b/0x550 [ 651.469337][T13965] tomoyo_realpath_from_path+0x58d/0x5d0 [ 651.469363][T13965] ? tomoyo_domain+0xda/0x130 [ 651.469394][T13965] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 651.469425][T13965] tomoyo_path_number_perm+0x1e8/0x5a0 [ 651.469460][T13965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.469509][T13965] ? __lock_acquire+0xaac/0xd20 [ 651.469558][T13965] ? __fget_files+0x2a/0x420 [ 651.469589][T13965] ? __fget_files+0x3a0/0x420 [ 651.469613][T13965] ? __fget_files+0x2a/0x420 [ 651.469642][T13965] security_file_ioctl+0xcb/0x2d0 [ 651.469676][T13965] __se_sys_ioctl+0x47/0x170 [ 651.469700][T13965] do_syscall_64+0xf6/0x210 [ 651.469724][T13965] ? clear_bhb_loop+0x45/0xa0 [ 651.469749][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.469770][T13965] RIP: 0033:0x7fec9998e969 [ 651.469789][T13965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.469806][T13965] RSP: 002b:00007fec9a8b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.469828][T13965] RAX: ffffffffffffffda RBX: 00007fec99bb6080 RCX: 00007fec9998e969 [ 651.469843][T13965] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000006 [ 651.469855][T13965] RBP: 00007fec9a8b0090 R08: 0000000000000000 R09: 0000000000000000 [ 651.469868][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.469881][T13965] R13: 0000000000000000 R14: 00007fec99bb6080 R15: 00007fec99cdfa28 [ 651.469911][T13965] [ 652.089252][T13965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.829273][ T5889] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 652.837645][T13980] input: syz1 as /devices/virtual/input/input52 [ 653.094980][ T5889] usb 3-1: config 0 has no interfaces? [ 653.110558][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 653.140899][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.176550][ T5889] usb 3-1: Product: syz [ 653.197999][ T5889] usb 3-1: Manufacturer: syz [ 653.213504][ T5889] usb 3-1: SerialNumber: syz [ 653.233572][ T5889] usb 3-1: config 0 descriptor?? [ 653.731397][ T5888] usb 1-1: probing VID:PID(0424:012C) [ 653.823476][ T5888] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 653.867098][ T5888] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 653.891685][ T5888] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 653.945627][ T5888] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 653.972012][ T5888] usb 1-1: USB disconnect, device number 123 [ 654.289328][ T5888] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 654.315687][T13976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.329536][T13976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.502336][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 654.519227][ T5889] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 654.649369][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 654.677542][ T5888] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 654.691822][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 654.717427][ T5889] usb 4-1: config 0 has no interfaces? [ 654.736766][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 654.752037][ T5888] usb 1-1: Product: syz [ 654.776888][ T5888] usb 1-1: Manufacturer: syz [ 654.786204][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.809331][ T5888] usb 1-1: SerialNumber: syz [ 654.837961][ T5888] usb 1-1: config 0 descriptor?? [ 654.843267][ T5889] usb 4-1: Product: syz [ 654.866320][ T5889] usb 4-1: Manufacturer: syz [ 654.887090][T13993] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 654.906402][ T5889] usb 4-1: SerialNumber: syz [ 654.953854][ T5889] usb 4-1: config 0 descriptor?? [ 655.161445][T13993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.252365][ T5888] usb 1-1: USB disconnect, device number 124 [ 655.409163][ T5889] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 655.569200][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 655.608556][ T5885] usb 3-1: USB disconnect, device number 127 [ 655.688635][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.709912][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.741475][ T5889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.799241][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.884899][ T5889] usb 5-1: Product: syz [ 655.967956][ T5889] usb 5-1: Manufacturer: syz [ 655.994583][T14015] loop2: detected capacity change from 0 to 7 [ 656.012205][T14015] Dev loop2: unable to read RDB block 7 [ 656.022172][T14015] loop2: AHDI p2 p3 [ 656.026223][T14015] loop2: partition table partially beyond EOD, truncated [ 656.037079][ T5889] usb 5-1: SerialNumber: syz [ 656.038883][T14015] loop2: p2 start 4227858432 is beyond EOD, truncated [ 656.404962][ T5889] usb 5-1: 0:2 : does not exist [ 656.428025][ T5889] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 656.449241][ T47] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 656.504401][ T5889] usb 5-1: USB disconnect, device number 102 [ 656.598618][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.639172][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 656.646786][ T47] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 656.658980][ T47] usb 1-1: config 0 has no interface number 0 [ 656.675346][ T47] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.743600][ T47] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 656.753611][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.762751][ T47] usb 1-1: Product: syz [ 656.767187][ T47] usb 1-1: Manufacturer: syz [ 656.772261][ T47] usb 1-1: SerialNumber: syz [ 656.783013][ T47] usb 1-1: config 0 descriptor?? [ 656.844410][ T47] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 657.050150][ T47] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 657.067637][ T47] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 657.130634][T14039] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2490'. [ 657.624647][ T5889] usb 4-1: USB disconnect, device number 119 [ 657.900793][ T5885] hid-generic 0000:0003:0000.004D: item fetching failed at offset 0/2 [ 657.971014][ T5885] hid-generic 0000:0003:0000.004D: probe with driver hid-generic failed with error -22 [ 658.774620][ T5889] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 658.777248][T14059] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 658.928938][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 658.959770][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 658.971224][ T5889] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 658.988480][ T5889] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 659.024855][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 659.046244][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.090916][ T5889] usb 5-1: Product: syz [ 659.103166][ T5889] usb 5-1: Manufacturer: syz [ 659.161795][ T5885] usb 1-1: USB disconnect, device number 125 [ 659.179468][ T5889] usb 5-1: SerialNumber: syz [ 659.724561][ T5885] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 659.994358][ T5885] usb 4-1: config 0 has no interfaces? [ 660.037173][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 660.107369][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.196827][ T5885] usb 4-1: Product: syz [ 660.216572][ T5885] usb 4-1: Manufacturer: syz [ 660.260471][ T5885] usb 4-1: SerialNumber: syz [ 660.337119][ T5885] usb 4-1: config 0 descriptor?? [ 660.771555][T14072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.464819][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.501965][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.552632][ T5885] usb 5-1: USB disconnect, device number 103 [ 661.999846][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2509'. [ 662.068143][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2509'. [ 662.137501][T14100] x_tables: duplicate underflow at hook 2 [ 662.192246][T14094] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 662.291204][T14094] bond4: entered allmulticast mode [ 662.305704][T14094] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.475975][ T5885] usb 4-1: USB disconnect, device number 120 [ 662.597251][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 662.597271][ T30] audit: type=1326 audit(1745929740.337:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 662.648651][ T30] audit: type=1326 audit(1745929740.367:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 662.672282][ T30] audit: type=1326 audit(1745929740.367:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 662.709965][ T30] audit: type=1326 audit(1745929740.367:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 662.746948][ T30] audit: type=1326 audit(1745929740.367:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 662.791670][ T30] audit: type=1326 audit(1745929740.367:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 662.844546][ T30] audit: type=1326 audit(1745929740.367:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 662.889281][ T5885] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 662.932403][ T30] audit: type=1326 audit(1745929740.377:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf318e969 code=0x7ffc0000 [ 662.977707][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2517'. [ 662.987986][ T30] audit: type=1326 audit(1745929740.377:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 663.035081][ T30] audit: type=1326 audit(1745929740.377:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cf312ab39 code=0x7ffc0000 [ 663.110545][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 663.147428][ T5885] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 663.183991][ T5885] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 663.234755][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 663.252089][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.287073][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 663.327372][ T5885] usb 4-1: Product: syz [ 663.368902][T14125] sctp: [Deprecated]: syz.1.2519 (pid 14125) Use of int in maxseg socket option. [ 663.368902][T14125] Use struct sctp_assoc_value instead [ 663.414969][ T5885] usb 4-1: Manufacturer: syz [ 663.435981][T14102] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2514'. [ 663.450465][ T5885] usb 4-1: SerialNumber: syz [ 663.640182][T14129] netlink: 'syz.0.2515': attribute type 12 has an invalid length. [ 664.754809][T14164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.795453][T14164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.269187][ T5888] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 665.422201][ T5888] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 665.433127][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.445402][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 665.457245][ T5888] usb 3-1: config 1 has no interface number 0 [ 665.464606][ T5888] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.479000][ T5888] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.496535][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.505804][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.515496][ T5888] usb 3-1: Product: syz [ 665.519829][ T5888] usb 3-1: Manufacturer: syz [ 665.524744][ T5888] usb 3-1: SerialNumber: syz [ 665.538078][ T5888] cdc_wdm 3-1:1.128: skipping garbage [ 665.546342][ T5888] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 665.552680][ T5888] cdc_wdm 3-1:1.128: Unknown control protocol [ 665.700368][ T5888] usb 4-1: USB disconnect, device number 121 [ 665.746527][T14175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.768138][T14175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.099463][ T5888] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 666.170007][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.179965][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.273904][ T5888] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 666.291076][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.302387][ T5888] usb 4-1: Product: syz [ 666.306920][ T5888] usb 4-1: Manufacturer: syz [ 666.318717][ T5888] usb 4-1: SerialNumber: syz [ 666.342866][ T5888] usb 4-1: config 0 descriptor?? [ 666.399319][ T5889] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 666.549227][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 666.573422][ T5889] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 666.603136][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.634590][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.657084][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.681956][ T5889] usb 1-1: Product: syz [ 666.695170][ T5889] usb 1-1: Manufacturer: syz [ 666.708445][ T5889] usb 1-1: SerialNumber: syz [ 667.173187][ T5888] usb 4-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 667.185519][ T5888] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 667.213949][ T5888] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 667.247924][ T5888] usb 4-1: USB disconnect, device number 122 [ 667.333518][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.839807][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.872685][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.915284][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.949796][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.079913][ T5885] usb 3-1: USB disconnect, device number 2 [ 668.419591][ T5888] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 668.543959][ T5885] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 668.581981][ T5888] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 668.592310][ T5888] usb 4-1: config 0 has no interface number 0 [ 668.613029][ T5888] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 668.632553][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.650238][ T5888] usb 4-1: Product: syz [ 668.656801][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.667530][ T5888] usb 4-1: Manufacturer: syz [ 668.672862][ T5888] usb 4-1: SerialNumber: syz [ 668.678054][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.688533][T14219] netlink: 'syz.1.2548': attribute type 58 has an invalid length. [ 668.697477][ T5888] usb 4-1: config 0 descriptor?? [ 668.707086][T14218] netlink: 'syz.1.2548': attribute type 58 has an invalid length. [ 668.715449][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 668.724809][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 668.729322][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 668.738002][ T5888] qmi_wwan 4-1:0.207: bogus CDC Union: master=0, slave=1 [ 668.786643][ T5885] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 668.813056][ T5885] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 668.834181][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 668.875300][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.892690][ T5885] usb 3-1: Product: syz [ 668.897085][ T5885] usb 3-1: Manufacturer: syz [ 668.905056][ T5885] usb 3-1: SerialNumber: syz [ 669.104943][T14209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.150476][T14209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.201514][ T5888] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 669.219995][ T5889] usb 1-1: 0:2 : does not exist [ 669.294527][ T5889] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 669.331270][ T5889] usb 1-1: USB disconnect, device number 126 [ 669.350660][T14223] FAULT_INJECTION: forcing a failure. [ 669.350660][T14223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.404779][ T5885] usb 4-1: USB disconnect, device number 123 [ 669.444743][T14223] CPU: 0 UID: 0 PID: 14223 Comm: syz.0.2549 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 669.444773][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 669.444788][T14223] Call Trace: [ 669.444795][T14223] [ 669.444809][T14223] dump_stack_lvl+0x189/0x250 [ 669.444834][T14223] ? __lock_acquire+0xaac/0xd20 [ 669.444856][T14223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.444877][T14223] ? __pfx__printk+0x10/0x10 [ 669.444892][T14223] ? __might_fault+0xb0/0x130 [ 669.444918][T14223] should_fail_ex+0x414/0x560 [ 669.444945][T14223] _copy_from_user+0x2d/0xb0 [ 669.444965][T14223] input_event_from_user+0xb2/0x280 [ 669.444979][T14223] ? __pfx_input_event_from_user+0x10/0x10 [ 669.445006][T14223] ? input_inject_event+0xbc/0x320 [ 669.445028][T14223] evdev_write+0x2a6/0x480 [ 669.445053][T14223] ? __pfx_evdev_write+0x10/0x10 [ 669.445075][T14223] ? bpf_lsm_file_permission+0x9/0x20 [ 669.445093][T14223] ? security_file_permission+0x75/0x290 [ 669.445115][T14223] ? rw_verify_area+0x258/0x650 [ 669.445130][T14223] ? __pfx_evdev_write+0x10/0x10 [ 669.445152][T14223] vfs_write+0x27b/0xa90 [ 669.445179][T14223] ? __pfx_vfs_write+0x10/0x10 [ 669.445203][T14223] ? __fget_files+0x2a/0x420 [ 669.445233][T14223] ? __fget_files+0x2a/0x420 [ 669.445258][T14223] ? __fget_files+0x3a0/0x420 [ 669.445282][T14223] ? __fget_files+0x2a/0x420 [ 669.445318][T14223] ksys_write+0x145/0x250 [ 669.445340][T14223] ? rcu_is_watching+0x15/0xb0 [ 669.445372][T14223] ? __pfx_ksys_write+0x10/0x10 [ 669.445399][T14223] ? do_syscall_64+0xba/0x210 [ 669.445424][T14223] do_syscall_64+0xf6/0x210 [ 669.445447][T14223] ? clear_bhb_loop+0x45/0xa0 [ 669.445476][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.445497][T14223] RIP: 0033:0x7f3cf318e969 [ 669.445516][T14223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.445534][T14223] RSP: 002b:00007f3cf3ff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.445573][T14223] RAX: ffffffffffffffda RBX: 00007f3cf33b5fa0 RCX: 00007f3cf318e969 [ 669.445589][T14223] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 669.445602][T14223] RBP: 00007f3cf3ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 669.445615][T14223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.445628][T14223] R13: 0000000000000000 R14: 00007f3cf33b5fa0 R15: 00007f3cf34dfa28 [ 669.445660][T14223] [ 669.697698][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.773627][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.830268][T14212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.843051][T14227] FAULT_INJECTION: forcing a failure. [ 669.843051][T14227] name failslab, interval 1, probability 0, space 0, times 0 [ 669.889169][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.1.2550 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 669.889201][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 669.889214][T14227] Call Trace: [ 669.889222][T14227] [ 669.889232][T14227] dump_stack_lvl+0x189/0x250 [ 669.889270][T14227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.889299][T14227] ? __pfx__printk+0x10/0x10 [ 669.889326][T14227] ? __pfx___might_resched+0x10/0x10 [ 669.889363][T14227] should_fail_ex+0x414/0x560 [ 669.889401][T14227] should_failslab+0xa8/0x100 [ 669.889454][T14227] kmem_cache_alloc_noprof+0x73/0x3c0 [ 669.889479][T14227] ? mas_alloc_nodes+0x2e9/0x8e0 [ 669.889504][T14227] mas_alloc_nodes+0x2e9/0x8e0 [ 669.889533][T14227] mas_preallocate+0x542/0x8b0 [ 669.889571][T14227] ? __pfx_mas_preallocate+0x10/0x10 [ 669.889615][T14227] ? __mas_set_range+0x12f/0x3c0 [ 669.889644][T14227] vma_link+0x102/0x450 [ 669.889664][T14227] ? css_get+0x55/0x230 [ 669.889691][T14227] ? __pfx_vma_link+0x10/0x10 [ 669.889729][T14227] ? hugetlb_vm_op_open+0x23d/0x550 [ 669.889755][T14227] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 669.889777][T14227] copy_vma+0x6fe/0x940 [ 669.889802][T14227] ? __pfx_copy_vma+0x10/0x10 [ 669.889828][T14227] ? kasan_quarantine_put+0xdd/0x220 [ 669.889873][T14227] move_vma+0x80d/0x1850 [ 669.889903][T14227] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 669.889925][T14227] ? __pfx_move_vma+0x10/0x10 [ 669.889945][T14227] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 669.889975][T14227] ? security_mmap_addr+0x71/0x270 [ 669.889999][T14227] ? __get_unmapped_area+0x3e4/0x450 [ 669.890024][T14227] ? vrm_set_new_addr+0x1a7/0x1f0 [ 669.890043][T14227] mremap_to+0x7e7/0x8b0 [ 669.890067][T14227] ? __pfx_mremap_to+0x10/0x10 [ 669.890088][T14227] ? __pfx_down_write_killable+0x10/0x10 [ 669.890118][T14227] __se_sys_mremap+0x8ac/0xc00 [ 669.890150][T14227] ? __pfx___se_sys_mremap+0x10/0x10 [ 669.890165][T14227] ? ksys_write+0x1f0/0x250 [ 669.890182][T14227] ? rcu_is_watching+0x15/0xb0 [ 669.890214][T14227] ? do_syscall_64+0xba/0x210 [ 669.890230][T14227] ? __x64_sys_mremap+0x20/0xc0 [ 669.890248][T14227] do_syscall_64+0xf6/0x210 [ 669.890265][T14227] ? clear_bhb_loop+0x45/0xa0 [ 669.890286][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.890302][T14227] RIP: 0033:0x7f28f258e969 [ 669.890318][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.890332][T14227] RSP: 002b:00007f28f3340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 669.890350][T14227] RAX: ffffffffffffffda RBX: 00007f28f27b5fa0 RCX: 00007f28f258e969 [ 669.890362][T14227] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000 [ 669.890373][T14227] RBP: 00007f28f3340090 R08: 0000200000a00000 R09: 0000000000000000 [ 669.890384][T14227] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 669.890400][T14227] R13: 0000000000000000 R14: 00007f28f27b5fa0 R15: 00007f28f28dfa28 [ 669.890425][T14227] [ 670.195942][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.263389][T14227] ------------[ cut here ]------------ [ 670.268971][T14227] page_counter underflow: -1536 nr_pages=1536 [ 670.278149][T14227] WARNING: CPU: 0 PID: 14227 at mm/page_counter.c:61 page_counter_cancel+0xef/0x110 [ 670.288166][T14227] Modules linked in: [ 670.293070][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.1.2550 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 670.305643][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 670.316143][T14227] RIP: 0010:page_counter_cancel+0xef/0x110 [ 670.322437][T14227] Code: 41 5e 41 5f c3 cc cc cc cc cc e8 7c 79 97 ff c6 05 f0 7c 40 0d 01 90 48 c7 c7 40 f0 77 8b 4c 89 f6 4c 89 fa e8 32 d7 5b ff 90 <0f> 0b 90 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 7c a1 4c 89 ff [ 670.342251][T14227] RSP: 0018:ffffc9000b9f7728 EFLAGS: 00010246 [ 670.348397][T14227] RAX: 67fbd1524167b100 RBX: ffff88814c826380 RCX: ffff88802f4cbc00 [ 670.356745][T14227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 670.364922][T14227] RBP: ffff888077940120 R08: 0000000000000003 R09: 0000000000000004 [ 670.373258][T14227] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: dffffc0000000000 [ 670.381424][T14227] R13: ffff88814c826380 R14: fffffffffffffa00 R15: 0000000000000600 [ 670.389517][T14227] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 670.398601][T14227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.405394][T14227] CR2: 00007fb2f9ef9440 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 670.413582][T14227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 670.421782][T14227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 670.429854][T14227] Call Trace: [ 670.434238][T14227] [ 670.437203][T14227] page_counter_uncharge+0x2e/0x80 [ 670.442420][T14227] hugetlb_cgroup_uncharge_counter+0xc7/0x120 [ 670.448573][T14227] hugetlb_vm_op_close+0x4cc/0x6d0 [ 670.453914][T14227] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 670.459657][T14227] remove_vma+0x88/0x130 [ 670.463960][T14227] exit_mmap+0x593/0xba0 [ 670.468222][T14227] ? __pfx_exit_mmap+0x10/0x10 [ 670.473069][T14227] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 670.478762][T14227] ? __pfx_exit_aio+0x10/0x10 [ 670.483535][T14227] ? uprobe_clear_state+0x274/0x290 [ 670.488938][T14227] __mmput+0x118/0x420 [ 670.493069][T14227] exit_mm+0x1da/0x2c0 [ 670.497259][T14227] ? __pfx_exit_mm+0x10/0x10 [ 670.502004][T14227] ? taskstats_exit+0x43c/0xa30 [ 670.506890][T14227] ? tty_audit_exit+0x153/0x200 [ 670.511839][T14227] do_exit+0x859/0x2550 [ 670.516077][T14227] ? do_raw_spin_lock+0x121/0x290 [ 670.521212][T14227] ? __pfx_do_exit+0x10/0x10 [ 670.525851][T14227] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.531475][T14227] do_group_exit+0x21c/0x2d0 [ 670.536126][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.541458][T14227] get_signal+0x125e/0x1310 [ 670.546067][T14227] arch_do_signal_or_restart+0x95/0x780 [ 670.551731][T14227] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 670.557945][T14227] ? local_irq_enable_exit_to_user+0x5/0x10 [ 670.563986][T14227] syscall_exit_to_user_mode+0x8b/0x120 [ 670.569674][T14227] do_syscall_64+0x103/0x210 [ 670.574299][T14227] ? clear_bhb_loop+0x45/0xa0 [ 670.579008][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.584975][T14227] RIP: 0033:0x7f28f258e969 [ 670.589557][T14227] Code: Unable to access opcode bytes at 0x7f28f258e93f. [ 670.596689][T14227] RSP: 002b:00007f28f33400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 670.605589][T14227] RAX: fffffffffffffe00 RBX: 00007f28f27b5fa8 RCX: 00007f28f258e969 [ 670.613647][T14227] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28f27b5fa8 [ 670.621684][T14227] RBP: 00007f28f27b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 670.629837][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28f27b5fac [ 670.637836][T14227] R13: 0000000000000000 R14: 00007f28f28df940 R15: 00007f28f28dfa28 [ 670.645879][T14227] [ 670.648911][T14227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 670.656192][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.1.2550 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 670.668434][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 670.678604][T14227] Call Trace: [ 670.681889][T14227] [ 670.684827][T14227] dump_stack_lvl+0x99/0x250 [ 670.689517][T14227] ? __asan_memcpy+0x40/0x70 [ 670.694108][T14227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.699408][T14227] ? __pfx__printk+0x10/0x10 [ 670.704229][T14227] panic+0x2db/0x790 [ 670.708235][T14227] ? __pfx_panic+0x10/0x10 [ 670.712665][T14227] ? show_trace_log_lvl+0x4fb/0x550 [ 670.717907][T14227] __warn+0x31b/0x4b0 [ 670.721987][T14227] ? page_counter_cancel+0xef/0x110 [ 670.727193][T14227] ? page_counter_cancel+0xef/0x110 [ 670.732457][T14227] report_bug+0x2be/0x4f0 [ 670.736799][T14227] ? page_counter_cancel+0xef/0x110 [ 670.742179][T14227] ? page_counter_cancel+0xef/0x110 [ 670.747379][T14227] ? page_counter_cancel+0xf1/0x110 [ 670.752578][T14227] handle_bug+0x84/0x160 [ 670.756843][T14227] exc_invalid_op+0x1a/0x50 [ 670.761368][T14227] asm_exc_invalid_op+0x1a/0x20 [ 670.766251][T14227] RIP: 0010:page_counter_cancel+0xef/0x110 [ 670.772087][T14227] Code: 41 5e 41 5f c3 cc cc cc cc cc e8 7c 79 97 ff c6 05 f0 7c 40 0d 01 90 48 c7 c7 40 f0 77 8b 4c 89 f6 4c 89 fa e8 32 d7 5b ff 90 <0f> 0b 90 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 7c a1 4c 89 ff [ 670.791887][T14227] RSP: 0018:ffffc9000b9f7728 EFLAGS: 00010246 [ 670.798054][T14227] RAX: 67fbd1524167b100 RBX: ffff88814c826380 RCX: ffff88802f4cbc00 [ 670.806122][T14227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 670.814105][T14227] RBP: ffff888077940120 R08: 0000000000000003 R09: 0000000000000004 [ 670.822087][T14227] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: dffffc0000000000 [ 670.830071][T14227] R13: ffff88814c826380 R14: fffffffffffffa00 R15: 0000000000000600 [ 670.838069][T14227] ? page_counter_cancel+0xee/0x110 [ 670.843292][T14227] page_counter_uncharge+0x2e/0x80 [ 670.848424][T14227] hugetlb_cgroup_uncharge_counter+0xc7/0x120 [ 670.854505][T14227] hugetlb_vm_op_close+0x4cc/0x6d0 [ 670.859634][T14227] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 670.865279][T14227] remove_vma+0x88/0x130 [ 670.869546][T14227] exit_mmap+0x593/0xba0 [ 670.873817][T14227] ? __pfx_exit_mmap+0x10/0x10 [ 670.878608][T14227] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 670.884309][T14227] ? __pfx_exit_aio+0x10/0x10 [ 670.889020][T14227] ? uprobe_clear_state+0x274/0x290 [ 670.894247][T14227] __mmput+0x118/0x420 [ 670.898336][T14227] exit_mm+0x1da/0x2c0 [ 670.902436][T14227] ? __pfx_exit_mm+0x10/0x10 [ 670.907046][T14227] ? taskstats_exit+0x43c/0xa30 [ 670.911923][T14227] ? tty_audit_exit+0x153/0x200 [ 670.916794][T14227] do_exit+0x859/0x2550 [ 670.921066][T14227] ? do_raw_spin_lock+0x121/0x290 [ 670.926191][T14227] ? __pfx_do_exit+0x10/0x10 [ 670.930800][T14227] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.936196][T14227] do_group_exit+0x21c/0x2d0 [ 670.940895][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.946121][T14227] get_signal+0x125e/0x1310 [ 670.950689][T14227] arch_do_signal_or_restart+0x95/0x780 [ 670.956261][T14227] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 670.962441][T14227] ? local_irq_enable_exit_to_user+0x5/0x10 [ 670.968351][T14227] syscall_exit_to_user_mode+0x8b/0x120 [ 670.973913][T14227] do_syscall_64+0x103/0x210 [ 670.978581][T14227] ? clear_bhb_loop+0x45/0xa0 [ 670.983276][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.989276][T14227] RIP: 0033:0x7f28f258e969 [ 670.993758][T14227] Code: Unable to access opcode bytes at 0x7f28f258e93f. [ 671.000863][T14227] RSP: 002b:00007f28f33400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 671.009419][T14227] RAX: fffffffffffffe00 RBX: 00007f28f27b5fa8 RCX: 00007f28f258e969 [ 671.017413][T14227] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28f27b5fa8 [ 671.025592][T14227] RBP: 00007f28f27b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 671.033580][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28f27b5fac [ 671.041573][T14227] R13: 0000000000000000 R14: 00007f28f28df940 R15: 00007f28f28dfa28 [ 671.049603][T14227] [ 671.052970][T14227] Kernel Offset: disabled [ 671.057373][T14227] Rebooting in 86400 seconds..