last executing test programs: 3m16.91224949s ago: executing program 1 (id=1270): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000600)={r2, r2, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) socket$kcm(0x10, 0x2, 0x0) epoll_create1(0x80000) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@local, 0x0, 0x8, 0x0, 0x0, 0xa, 0x50, 0x180, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x80, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x80, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7ff7, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r6, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d4d28f9", 0x1b}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0xfffffffe, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8b30f206aa2b90c3de19fae8eec5a6dd46bae021e34c513515ebfd5e3ea09d49a519c9cd5d5c658dc9ed0d5aaa701ba3717286519d8ebad1f9f83a8d2a996b276123f217cee592a2028f85098e616ff3b76f1116d820b48e1846160e126a14b390c670c8dcd758b6298e0d5396e651e05ba78377d456ec0ba3a212633959fec71921e756d0f456462936259036e679038c61b0ac03dee1494f597c141dc77ab2d828f92e8c9871fb7b74bd45272fa3c91e874d4c77c193eb46558fd386cd207ced3e5e268da85e7dcc1b75d69884d2613f83bdc3b6c587fe9dfcf91625d124502e2b690b3025fffb53526d3423fedcc97650c546d3f141a07edc2671f8c6d1922049879a78a768999160b6bf789096e6322a0830aabeae925f99dcc933f363809f4ea121a9e20e420f8c28a8ae079318fc5bf79916065308b5e43cdf3d1a68b070589768d67389ed0424137390e8ac2586c7c45b1c6c42a2f4"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3m16.201837449s ago: executing program 1 (id=1273): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x68, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) 3m13.986057727s ago: executing program 1 (id=1278): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0xf, 0x0, 0x80000001}, 0x10, 0x1cb, 0xffffffffffffffff, 0x7, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x3, 0x5, 0x10, 0x5}, {0x3, 0x2, 0x3, 0xc}, {0x4, 0x4, 0x0, 0x8}, {0x5, 0x4, 0x1, 0x6}, {0x2, 0x4, 0xb, 0x8}, {0x3, 0x2, 0x2, 0x4}, {0x2, 0x2, 0x7, 0x8}], 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000005c0)={0x2, 0x8, @status={[0x9, 0x5, 0x6, 0x5, 0x7, 0x9]}, [0xffffffff80000000, 0x200, 0x4, 0x9, 0x3, 0x58e, 0xffff, 0x1, 0x9, 0x3ee, 0x9, 0xe, 0x6, 0x1000, 0x2, 0xffffffff, 0x9a66, 0xfffffffffffffe00, 0xd657, 0x10, 0x9, 0x1, 0x8000000000000000, 0x56e8, 0x0, 0xf2, 0x2, 0x41b, 0x3, 0x4, 0x5536930, 0x5, 0x1, 0x9, 0x101, 0x9e2, 0x200, 0x2, 0x2, 0xffffffffffffd01b, 0x6, 0x2, 0x10001, 0xffffffffffffffff, 0xb7, 0x3, 0x41f1, 0x4, 0x7, 0x7, 0x9, 0x2, 0xe, 0x2, 0x7, 0x1, 0x9, 0x537c, 0x0, 0x7, 0x8, 0xcf, 0x3, 0x5]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES8=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0xba01}, 0x810) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) (async) pidfd_getfd(r5, r1, 0x0) 3m12.508596027s ago: executing program 1 (id=1281): syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000ff2505a1a44000010203010902610002010e10550904000001020d00000a240600411aa8a0083705240001800d240f0100000000fbfff9ff0006241a0000080905810398c5467a2881d5e1f501497eff030608210904010000020d000009"], 0x0) r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_ep_write(r0, 0x9, 0x99, &(0x7f0000000100)="1870e25c81f34fdd9c88f40e380ad2b4a6e309dccf9eb529c206fb620bc9b86cc3d30f86da210365ba20c05cad5fcc030205fc10062cfcb1065403b56ff2a501b9e67f7d1f8bf0a2de25912be20f241ba9681652c8f64feff2f228c53363a303a3933b7a8a132862af713506c9c041f81661017b9aad486708d84998d9209d274bcf25e64804c6831dc5ab18eefcb3e5f299c59244e94b4449") r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x480) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc200035a5ca286e0bc86c1843546e73db45000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ff1b34392a09044c03003a92a2010a24"], 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6b, 0x20, 0xfc, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x6, 0xf7, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x4, 0x91}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x8, 0x5, 0x8, 0x20, 0x9}, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="050f1c00000000000000003f00000007100210420400000000000000"], 0x3, [{0x1b, &(0x7f0000001b40)=@string={0x1b, 0x3, "afa6409991d82ab2fecef2fa7f4ba914b8b1b9c5ee3f0b8c83"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x445}}]}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000f40)) syz_usb_control_io(r7, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x21, 0xa4, {0xa4, 0x30, "f08213636018ab5dde75050e69e12c5c44bf071b3a1e44fa0525775925070c59667c93f498cc56fc8b3d35f52b55e47c6692f5254243e85e7b2306fc10fdfee8e2deb56329e79fd916bde4cf76cc3eda70b44901a1ce3aeb94ffa00951b27d977745948f06e6eaf66df1759ea8c7903d05a6b26a129be423ca1ac2c7d35d9a9899ba9216be0b994e7cdf5190f226cfcb56d062ad9dabeca41f1432ad4d9ca68f08bc"}}, &(0x7f0000000440)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="000b05000000180f050000"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc4, 0x4, 0x0, 0x5, "dc14c3be", "ef1ece19"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x8, 0x0, 0x90, 0x28bd}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000680)={0x20, 0x6, 0x38, "703d2b192d3f96908249492d6b4f03f48445b1344e4794a1b1271afe6281a77112f2c9e1f37b9bfcfe704cb6c40dadb59dab75371483bca7"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "135e"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x4b90}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x19, 0x2, ':;'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xc}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xf2}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xd4}}) syz_usb_ep_read(r0, 0x1, 0x1000, &(0x7f0000000b40)=""/4096) 3m11.078150851s ago: executing program 1 (id=1284): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001200)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000011c0)={r7, 0x3, &(0x7f0000000680)=[0xffff, 0xcb, 0x9], &(0x7f0000001140)=[0x6, 0x96, 0xfffc, 0x40, 0x2, 0xb, 0x2], &(0x7f0000001180)=[0xfff9, 0xa30c, 0x6e6]}) socket(0x3b, 0x800, 0xffffffc0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x1d) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000600)={r5, r5, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) close_range(r4, r12, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000001280)=[r11, r11, r11, 0x0, 0x0, r11], 0x6, r8, r9, 0x3, 0xff, 0xffffffff, 0x804, {0x400, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x1, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d0000341300000000002000000100"}}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r13, 0x40a85323, &(0x7f0000001080)={{0x1, 0x5}, 'port0\x00', 0x40, 0x2, 0x6b, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x1}) syz_usb_connect(0x4, 0x959, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x8f, 0xde, 0x2e, 0xff, 0x19d2, 0x1290, 0xc268, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x947, 0x3, 0xe, 0xc, 0x0, 0x6, [{{0x9, 0x4, 0x61, 0x5, 0x1, 0xff, 0xff, 0xff, 0x5a, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6b, 0x1, 0xc, 0x5, "c55dd367ba1b38d5"}]}, @uac_control={{0xa, 0x24, 0x1, 0xad79, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x1, 0xa4, 0x80, 0x0, 0x28}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x3, 0x82, '\n'}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0xb4, "89"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0x8, 0x7f}}]}}, {{0x9, 0x4, 0x31, 0x4, 0xe, 0x40, 0xd5, 0xf0, 0xf7, [@generic={0xbb, 0x7, "d669641e63b441f1628722449b7770a32eeba087e6c39bee213ab3d8e65e864102969c2fffa298c95a5678735dccc54361ea05dd6f9dc61234536fba09bb3b6c2eb574305a1f055a9aaba945cb8431f6774508ca41238a0a506c96ff1ab96b52cc9449d5a8bea726db77315dc6a50325d06ec46d374875ba6fc2f351e402ec92a5bcd4df52e8a8b02f19bd7638098f303cead6c0b25372b08a13f5b4e6eeff8c2a5364e0b05f28fce583374e64134363e251b3ab5d294eaef6"}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x7}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x22, 0x8, "6785"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x4, "2eb67e61"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x1, 0x4, "0dddd8e1"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x5, 0x41, 0x9, 0x8, 0xf6}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x3, 0x7, "e27f"}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x8, 0xff, 0x45}}, {{0x9, 0x5, 0xa, 0x10, 0x1bf, 0x2, 0x5, 0x8c, [@generic={0xf5, 0x6, "0ec83f4f22f2067b50383697c9ce575fec528827cc9bcb97fe1bde108352c3ca9040f9b806cad16fda7cb7c6e9f208349420697b282f34a8d634db8826779726907313bf0c6f913dedb99f264474e7b843efba09952d1133348ee332ba519d727494be8e0a49201f9803a374bbe1947660c5d9dfb1611a8cc8e80c068e7f361df82687ebaf47be103e759842087486eb144dcc71d35cf6556f86a54f9b5804952bbb9410b40dbbea36faf6f113c326913f1608c0df3dfcbd3317e7a1861ef9d22354554999916207ce29a1c5a5f888c83bef6eb8b4329a909b1162a88ee3f1f94d2503dbf6004d6a7a5bdc3407317c2706b33e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0xff, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x323e}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x401}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x5, 0x4, 0x1, [@generic={0xf7, 0x3, "716863dcbfc4fbd30519ba44cee944ecffa9a867e6cb1e406099ca2e42d4bd159db81efe041bdeae66f4a120195d3d59b79e674eda3ff2d4966918a773fdf30b9c91904c851054cb65b121b556b86c10638d0abca75d9f58cb7872d15414c3c917b3134838248377e2c55644b9d31d480fb05fd8f983c36ec3c269c83f97213f0933c054c09b6553a069cec911d878f91170aa48573420b1f2bace1f21310d820695c87a3000d9bd26086612919890c879ee7ae6293ec1c9e43c1f1490a1ca6cc678db337aff987822649261c76abd2037868c5529f7c84984599826424d7e4f34bea3734bcd78ba14f60aaeb015090d71e1224e42"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7a7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xca, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0xe, 0xc, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xc2, 0x0, 0x0, [@generic={0x79, 0xd, "1370475f1fc60a96dc9779980e1db6da72b82e019b4868674b8aa5b7ae50d572a4c45c662344f33691631bee15b36ff95eda24a3336828e26fe2d5d360a48c9d6d4e760843dc20c780d10efafc882abcb0687da016ea5f25a8ae856861ab5bb24389a7ef49354afc5c0ebfe262c88dab7a79ffcb76339f"}, @generic={0x38, 0x0, "b46d9e744a8110bbd623a7f391e400a55ed81e49c6fa3d34328024ec80d9578987c3e3499ae483a934d8739ac34ec5a268a9d1e891b4"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xb6c9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7, 0x5, 0x5}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x2, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x4, 0x7, 0x2, [@generic={0xb6, 0x30, "46b9d35b2616fd041b8182428c33a0554137e9962abc40b1b5869a8cbbbee51dc58ae1184598db1b8961016385ad218e70ee1d8aa0b48e72974a43559cd5b4ca2520975b5cdafd56c2d033ec27265941f9646432caba0266ef7a82ea78fd2b0e06237d906ed7c69830ef39fffe16bd4401117b21f64e3cbf7c14e31c22563d06fb8ab983c29f2f5e3dbaab17795ae61ce0e72f73702b2326413aad6af6c125bbeb36d3c1e5d0430c3c072ddda965fa3457a9657e"}, @generic={0x4d, 0xc, "4dafffa45d1215683b15e92aa10df98585abfbca11d1435320c3084a04e78406efefb8fd26abe73d1172217e4e02c475cbaa1313eaa5b7a39b7c45357646d11fd2f5a825aa072993be3a31"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xc, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xd6, 0x8, 0xe, 0xdc, 0x7a, 0xb, 0x5, [@hid_hid={0x9, 0x21, 0x2, 0x20, 0x1, {0x22, 0x56}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0xa, 0x2b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x76dd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1e, 0xd7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0xd5, 0xe1, [@generic={0xcd, 0x10, "87dbd772fb2d957c603c291acaedc79cffd7efed2bae04c7697633c3fd02eb318e3e01f3324329d79fed798ebd23e1f2a1ecedf5c7937230b4f1c2ffdb6c7a63460cbcd553a7fd82428f47f68ecf05309657e2255b53738d9589982e6e3401d32561ca26b7806c299d6cecaad6d3555bc715499d3ab85c30ed2badd1b86f5d62c85a5459fea890cfb55fd673ff63efc5fe18ddd77883791def5d4387fe19659d9646118f17338cd17fb33059e7f513db0b1b290faac1faee1ae9d76d5d3a495c0dc4db7991f55805102d2e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x2, 0x96, 0x3, [@generic={0x5e, 0x22, "e5c419ae597c5a2d78de8424ac303cd9485ab02bc983792f27bd94a7761bc237ad1c111f662357a11c2760ed8cd397e00b14f71a08576ac29dcddc297b44ea9b74f7b1c24942730fba5244c2bd3b17566c4fc73f821995394bff4ba0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xf7, 0x7, 0x6b, [@generic={0xc0, 0xf, "4e2da66f2527c418d4e8e74576d916180e1205636f44d8d0647554eba2983ea02678d09e39f55f67ff07be9e2095af11f27dd81acbb86bf4a121fce985a82a909c8c61ff79cb2ce658f5565526345ee9277c3109cd5532ceeba3a9059f95e53f417d2d09639a4d44fb53bdf55fc5345387a58846afffb6c8bcfa223775918eb11a0063d85f3687dcbeffaf4cd2ce434c3077c7bf9b0c7a3ebd71a6bd9e5582a563e10b8070ae5877c2c38a562a62a5556e07a3f4c10c58bc133c1f25d7b1"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x5, 0x50}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x45b2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x1ff, 0xc, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xc2c3}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0xba, 0x0, 0x8}}, {{0x9, 0x5, 0x6, 0x5, 0x400, 0x5, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x6ba5214c4381687d, 0x9, 0x6, 0x8, [@generic={0x55, 0x31, "54d8fa4b317b6a7910f9d5a57e346c76feaabed360b0a7f81ebe46f0da413f98e11a6a07b36894d322585bfa41d1dfc4d4ca8dc965e4159233e12f53b18e4a63bc1b6f63605277364176040bc402d195247279"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x7, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xf7, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb9, 0x8001}, @generic={0xa8, 0xa, "89a425ea5ea101e45ec3c0e668f84d3fab2a4d07ff84f9bed61a0939bfb6d71fcf27fb3f0b0d53d08b44fd5a98b0a3737964629eaadde2d73ae9ef1bee6df2783207f025256435842dfbc7fdb9132516e4b6e0cd270915cfc9e3980b217f9c2832b54d232de26af2fef0e680f1c313f2de234bc58652c2f43ff4d03a5b7afbec3b0f6abfb7179074edc71ef56f30026975b9ff07d7a8b23077ac918d8bfc3975dda6fe892097"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xe1, 0x3, 0xc}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x9, 0xe, 0x10, 0xb}, 0x12b, &(0x7f0000000180)={0x5, 0xf, 0x12b, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x10, 0x0, 0xb26}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ad253168a1fc5a8ebc95ba5c31ee6471"}, @generic={0xd4, 0x10, 0xa, "6eeff919d2931aa36b28a812c906eab9f2b1e422bf4a4b1833db63633aeeeefa1d09da4d077a97b235182c7e4a690375efa3696b145571e3aa8140e771e67cb1ffccdd83b6280365c766b55524380978103bc7a578597db481282bbfd291dd59a8aadf575bc44bdccf71af0c7be2cf019a6c889dd5d104bf4c60b6fab258d92ee00c4cb7de357028a0fa659737c967b86baeabd6e18999eab0cfc00a001eac7bdf988417fbf02402a1dbe87ac729dff4d13a9eb7e5fa4323dbca2eeddb565486af8107fd9cc883e8c3684cec431a5b5ae3"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "8bb77230f4d6ef93a8f0e6cd533f8b8c"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a93d0bc6334d00c01a74248e079bdc18"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x1, 0x200}]}, 0x2, [{0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="56039639afadb6deb9453a74d8dd160b77cdc53a8287d75a7c62027765cb72a8b78f81f80c51b1d18a56b73a1a69b445d62af617dd5189f54820482328eff901ffda98567cc97a087beeb31185ad930425da4497d4b5"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x459}}]}) 3m10.787473614s ago: executing program 1 (id=1286): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="13010003010902240001a6a700000000000905079b2636fe8a695d58fe1012dce4b9d047e1e59a"], 0x0) 3m10.548944782s ago: executing program 32 (id=1286): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="13010003010902240001a6a700000000000905079b2636fe8a695d58fe1012dce4b9d047e1e59a"], 0x0) 13.539967213s ago: executing program 0 (id=1948): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100000000000000a1400000000000100000a00000000000015a8d2c25a1958b8345f1073b168cb00"/55], 0x28}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) 13.29477131s ago: executing program 2 (id=1950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 6) 12.092489105s ago: executing program 2 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = memfd_create(&(0x7f0000000400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^\x17\x877%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xda\b\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x03\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x85\x1f\x01\x03\x9e\xc4\xe7\xd1ELhI\xd9\xf5\xcfk\x8a&~\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x3) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x2011, r1, 0x0) sendfile(r1, r1, 0x0, 0x200001) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}]}], {0x14}}, 0x80}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 10.678725981s ago: executing program 0 (id=1953): write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000140)={0x2490, r8}, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) 9.630432758s ago: executing program 2 (id=1959): r0 = socket(0x40000000015, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x5) fcntl$setstatus(r3, 0x4, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.895940673s ago: executing program 5 (id=1961): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1f, 0x0, 0x8, 0x7b95}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x21000, 0x3a, 0x1000, 0x3a, 0x7fc, 0xf83, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = fsopen(&(0x7f00000000c0)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x3, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102d, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0xaf5b, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x3, 0x1, 0x3, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0x7, 0x1, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x1, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x5, 0x53c, 0x623b, 0x400006, 0x8000000, 0xffffffffffffffff, 0x4, 0x200, 0x7, 0x8, 0x68d9472f, 0x5, 0x96, 0x8, 0x404, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffa, 0x10001, 0x6, 0x8, 0xfff, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x8, 0x80000000005, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r7, 0x0, 0x78) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0x45bd1fe7}) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0xff, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x6}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x7453245e, 0x6, "585406ff0001e900000000000000000400"}) r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000200)=0x40) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.610432715s ago: executing program 5 (id=1963): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100000000000000a1400000000000100000a00000000000015a8d2c25a1958b8345f1073b168cb00"/55], 0x28}}, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) 5.970570027s ago: executing program 0 (id=1965): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7fc, 0x2064}) mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x1000f0000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000040, 0x0, 0x0, 0x0, 0x80, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4623, 0x4, @empty, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xbc, 0xbe3c}, 0x9c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x290) mlockall(0x0) shutdown(0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x29, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444b"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) 5.624862379s ago: executing program 2 (id=1966): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x12) 5.361255439s ago: executing program 2 (id=1968): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7ff, 0x2064, 0x1}) mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x1000f0000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xbc, 0xbe3c}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x29, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444b"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) 4.500222441s ago: executing program 5 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = memfd_create(&(0x7f0000000400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^\x17\x877%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xda\b\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x03\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x85\x1f\x01\x03\x9e\xc4\xe7\xd1ELhI\xd9\xf5\xcfk\x8a&~\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x3) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x2011, r1, 0x0) sendfile(r1, r1, 0x0, 0x200001) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}]}], {0x14}}, 0x80}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYBLOB=']'], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.826438797s ago: executing program 4 (id=1971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x2000) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x2, 0x38415262, 0x0, 0x1, [{0x4, 0x2}, {0x1, 0x5}, {0x4587a401, 0x3ff}, {0x1a, 0x69b9}, {0x9}, {0x9, 0x5}, {0xfffffc00, 0x1}, {0x8, 0x1}], 0x7, 0xd, 0x6, 0x2, 0x2}}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800) r5 = socket$inet6(0xa, 0x2, 0x40) connect$inet6(r5, &(0x7f0000000340)={0xa, 0xfffe, 0x3, @loopback}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000400)=0x308, 0x4) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100003040000", @ANYRES16, @ANYRESHEX=r4, @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9], 0x80}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, r9}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10000000000, 0x80041) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 3.676807818s ago: executing program 3 (id=1972): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000740), 0x15, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000480)={0x13, 0x1, 0x0, "8eb8a83fe93b07f1dd06da7a41bfeac48048beb159fbba17425ced8f098c68d9"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0xb71ed4034269aec9, 0xf0}, 0xfd}, 0x18) 3.638665035s ago: executing program 4 (id=1973): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x0, 0xfff, 0x42, @loopback, @private0, 0x0, 0x40, 0x2, 0xf581}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x7fff, 0x1, {{0x12, 0x4, 0x2, 0x2e, 0x48, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x7, 0x5a, [@rand_addr=0x64010101]}, @rr={0x7, 0x17, 0xef, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @private=0xa010100, @loopback, @empty]}, @noop, @rr={0x7, 0x13, 0xdf, [@remote, @multicast1, @private=0xa010100, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24001812}, 0x408c4) r10 = socket(0x1, 0x803, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x60}}, 0x0) 2.630389881s ago: executing program 3 (id=1974): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(r0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 64) io_setup(0x7, &(0x7f0000000240)=0x0) (rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x2400, 0x0) fcntl$setstatus(r3, 0x4, 0x40000) (async) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x1, 0x8001, r1, 0x0}]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) unshare(0x26020480) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0x5f43, 0x12b143) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000640)={'nicvf0\x00', @remote}) (async, rerun: 32) fremovexattr(r5, &(0x7f0000000500)=@known='system.posix_acl_access\x00') (async, rerun: 32) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@exit, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0xf4, &(0x7f0000000380)=""/244, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, r6, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x8, 0x4, 0x9}, 0x10, 0xffffffffffffffff, r5, 0x4, &(0x7f00000004c0)=[r1, r5, r1, r1, r5, r5, r1, r5], &(0x7f0000000540)=[{0x1, 0x2, 0x0, 0x9}, {0x1, 0x5, 0xb}, {0x2, 0xe, 0x10}, {0x1, 0x2, 0x3}], 0x10, 0x7f8, @void, @value}, 0x94) umount2(&(0x7f0000000200)='./file0\x00', 0xe) 2.498690549s ago: executing program 0 (id=1975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x3, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102d, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0xaf5b, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x3, 0x1, 0x3, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0x7, 0x1, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x1, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x5, 0x53c, 0x623b, 0x400006, 0x100000000000000, 0xffffffffffffffff, 0x4, 0x200, 0x7, 0x8, 0x68d9472f, 0x5, 0x96, 0x8, 0x404, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffa, 0x10001, 0x6, 0x8, 0xfff, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x8, 0x80000000005, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r7, 0x0, 0x78) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0x45bd1fe7}) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0xff, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x6}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x7453245e, 0x6, "585406ff0001e900000000000000000400"}) r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000200)=0x40) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.486903884s ago: executing program 4 (id=1976): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000"], 0xf0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900003f00", [0x0, 0x2000000000001]}}) 2.403534552s ago: executing program 3 (id=1977): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x76a, 0xe36, 0xe7a2, 0xeb9e}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000040200", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.365282045s ago: executing program 5 (id=1978): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 1.938646154s ago: executing program 5 (id=1979): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100000000000000a1400000000000100000a00000000000015a8d2c25a1958b8345f1073b168cb00"/55], 0x28}}, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) 1.511095611s ago: executing program 0 (id=1980): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40800004}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, r5, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, 0x0) socket(0x10, 0x803, 0x0) fsopen(0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.422325954s ago: executing program 3 (id=1981): bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, 0x0, 0x1, 0x80, 0x6, @remote}, 0x23) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 1.338841173s ago: executing program 4 (id=1982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac141402fc78b7000000000000000000002000010a010102000000000000000000000000fc0200000000000000000000000000003c000000c0"], 0xec}}, 0x0) 1.101224404s ago: executing program 4 (id=1983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfe4c2df50d7eea11) keyctl$clear(0x11, 0xfffffffffffffffd) 1.092112102s ago: executing program 3 (id=1984): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x100008}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000000)=""/177, 0xb1}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/73, 0x49}], 0x5}, 0x80000000}], 0x4, 0x2020, 0x0) 898.712157ms ago: executing program 4 (id=1985): ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) get_mempolicy(&(0x7f0000000080), 0x0, 0x100000001, &(0x7f0000000000/0x3000)=nil, 0x4) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7ff, 0x2064, 0x1}) mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x1000f0000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xf, 0xfffffffd, 0x7, @rand_addr=' \x01\x00', @mcast1, 0x80, 0xf887, 0x7fffffff, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r3, 0x8, 0x0, 0x27, 0x10, 0x0, 0xfffffffffffffe83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4623, 0x4, @empty, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xbc, 0xbe3c}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x29, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444b"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) 868.474859ms ago: executing program 2 (id=1986): futex(&(0x7f0000000000), 0x10b, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f00000014c0)) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x2a, 0xb8, 0x79, 0x10, 0x19d2, 0xffa3, 0x39e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a7, 0x1, 0x1, 0xf, 0x40, 0x73, [{{0x9, 0x4, 0x4, 0x50, 0xe, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x5e, 0xdb}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x2, 0x6, 0xd}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x40, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xd9}, @generic={0xb9, 0x21, "e5a04204721c04fc5bc127b686e07ad5d7022e7cc15f2463836b33f3c32a01fa75b6993f2c4d294124df1f321276010ad3ba511bb56718733904fca6d2d5bc3c69be8a8c56d5d3be9b3d846249a8ce2d1ab3c9f3ba6fdeaef670c2b72ad6c5b99510b9938c88579e2cc4b24d2295b9932fcd2d1810a56038bcbb0fbb35c33c4d9a04f87ede82629e2113c159a7966f207b76d1aaea990eb4f15dbef796edadcf628f79aa72f1557d13a745585b32451485c19d33558861"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xdd7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x596, 0x9, 0x8, 0xb9}}, {{0x9, 0x5, 0x9, 0xc, 0x650, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41}]}}, {{0x9, 0x5, 0x80, 0xc, 0x9bb5cf93ccfdd3d4, 0x3, 0x7, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x8, 0xfc, 0x2, [@generic={0xf3, 0x21, "49209e654af47fb3f3aa2c16890fea000bfc0a8e43e0c0ce5b7213f2b7e53426afb92d13a8ca2988d2988d86841737b4c53f3272b5651a93574cddd4c5d9e21fe1e929e7855ecac0782227f07dcfbfa5ef6ec3a6fe11b4baba62488a104165af7329a7940496bba6eb754b3a22ab872080824991366147babce15c40a79ef48e72a15eeba0071359804dd0c6104742a68c6dea19ee5b03aec93c91f06343c1eec33d6c8d1e0d417266aba6ea79a69b41eb1c0db68d6a8d26537439ed706398c25173e71737d88802ddc3b778a23c5097f64127a3eae2de797559c3982dcd58be90ad2c77429db189be432701176ca1f72a"}, @generic={0x77, 0x10, "f96662f59132e808c8192f69126ba313cd6f9fec02834f231f5ea389cc9ffc520da98918d64c5b575939ce8ad1bf181a8ebb4f42c4cab59ca03ecded884244ffc757d12b06a3b25c8b98df0c332f5df86f68279ce6bebef6a47379cc15826ac7f8d1f4fe1aca017e31cade46ec71e4aef1ec6c0360"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x0, 0x53}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x5, 0x0, 0x4d, [@generic={0xb5, 0x5, "194cc3e47ee1e69e9fd5b13a03ba07111f7b3a1d25740cdc8298b5b1acf8fc5cf4bb181a58cbffe982e306e1b04a470b34dcd4c3efdda1a6317a0446bdd790e146d76f0c352e15f5f3dae2e97a0e0f700a42fadd71eb9353b0366e2f8b07a35b4da495d6369c2bbd4392dfdf978cba0bfa854c3f04aa24e642f90354045a66bbd97ed77d20e2c4a5d47d06a0e05553d6702a67f0516d48d2443f9122baeeb8e4b052ef7d01e747d5bf365663a807de9409be6d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xc05b}]}}, {{0x9, 0x5, 0x7, 0xa, 0x400, 0x56, 0x0, 0x48}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xf9, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xea, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb9, 0x8000}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xff, 0x5, 0x8, 0x20, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0xad, &(0x7f0000000140)=@string={0xad, 0x3, "b6d21419645b2014b5b675ab38d9b3cc273d37938a0d471a83be7d27305044723037574adf7e20d45b111226681bed230073544442015efb2883ea8bc20a3f78c5694a4492f43e987dec7655fe5b9ad6a9b76942e79815e0bc781d7dfeef3a976e3c929161baeae02967c5417bc1c3ff692ad41c91701217428d812e29f4ca944ae7b0686493b84ac6a72c15ea5a0406ade51229ee0eb1766780252907794c78e22f6a769ab5f1836b2402"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x7d, &(0x7f0000000240)=@string={0x7d, 0x3, "789292a7843831764a9860b5d1fb10a2e265f7d346ffee396f468ca0d5e9d8fde2c63cc87f79be9902be82a857085920356283b58433a3764e6aa12850b61cd51ac588d564b7a87b9e2567db7f83731b18e4a3695dcbae1e0476a9f09bf84bd2f849548ad0666dd721c284d38fb86c01c5b7817c34aaaa2e09b52e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x441}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000709d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, 0x0, 0x0, 0x814) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f00000005c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xdc, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xf, 0x8000, 0x9, 0x9, 0x7fffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x5, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x409, 0xa4, 0x3, 0xc11a, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x30, 0xffffffff, 0x0, 0xfffffffa}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffd, 0x4, 0x3, 0x8, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40000000, 0x1, 0x3, 0x2}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x10c}}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) accept4(r9, 0x0, 0x0, 0x0) 867.125709ms ago: executing program 3 (id=1987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000009d00)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000005c0)="6b808f91343104375c33df825d751545496ac2c74ab5b646b2c85f9ab93567b7c4e47b9aa27cfc2f36602a1eb2235bf4df0fe868f804dde9b4d808155c5e5c32cc3bb1869c320c7769d98d76b089422469ca27c3b1c155d5dc8ed9e0abfe04eb3f128666efbb6b7d54ba852bfbfdbbbbb11bcca833d2fb2675579b922089aa7eb4cec1c5324317ceefeb894fb7e3a297ebf4f52ccc4c5859d0a35023a1d4ce1918cb9b0a97c781c94874567589afbe9ea5c9ca4f71f8ec72d40faf386023b194544cf427ed284b5682a402fd", 0xcc}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000006c0)="bf29fa67f24333cbce50061ce2c20ff294d151b0e5efd1157e1d33d63a87373c11f630df501289cd8f6d6ddb6dc265f9d5b7dbf88fc5229e157c34aa0f141a23f68910e45bd22a6a9013302a744dd30f50a1263a690d81b77a03922a40612d9292a9db65c98bccd8be3688cfbc3d3db8e4d36e9c3104795577f5946f2a674ed12fb37d192dd4122482645117cae9c66074932e321feb43e48a8faf4cef43a9d414170193c06600b59ca53d270cf633794fbd0a5bab9abdb781c40059cd960b61c29ed3258af6b96cf03deec6d256a7e555631fa2adab0a3c05b4bc", 0xdb}, {&(0x7f0000002180)="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", 0x1000}], 0x4, &(0x7f00000049c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00003fc70000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4004084}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008340)=[{&(0x7f0000008280)="83bf2e3db6c50e23f19c648faf0fb9dadfb4d15a133e1533ea4af0a90bdfa1ed8cffa05640280a2f73a81664e603f6c75c47e2f29ef66b46c08d3b008e9d208af3006b82998e8cb9dc7801", 0x4b}, {&(0x7f0000008300)='=', 0x1}], 0x2, &(0x7f00000083c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00020000"], 0x30, 0x4180}}, {{&(0x7f0000008400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008800)=[{&(0x7f0000008480)="910685d453fb0799cc24fb04cd25d30f806b9597426905402211679ab810610807d06030f8025165ecc7d1543869b2fe79c1aa81514202427bcbaab921a6bf4029af432cda53c1c4480d7b176c92518ab800596d63cb591a77c1131fe46e536501285f3aae32b686a790021f2f0f42b958f1c8d8dd92082bf20ff4317659dcb71ddcc326dbc5b50eb245b38c0f9d94e3", 0x90}, {&(0x7f0000008540)="73f5e0db741639f2c2f8c473062eda997fac3ba88ed9e0a0d69721c030266691a47e2014ea62b5ecaba00bebeedbe50bb5d37cb6706bbfbd4d7a5dc65b713458931395d6ac2e7af61be9d86ec2651fbd358bdcbb4a0cad58ec969ff9292e1c51905f21a853e5d645e44eff102215daa2ed8421c9f6a98c8adb3e0545d70a01a5a6507ff942f55bc7f8bc5c18ac1b8ac256e3540d94790cd02553b2cb13bc048113967e3814053a67327a93f997b25d187b10ee5e92d16767eb7302d9657c2a6ea8232258ba1e509bedcc7d7021bf21c36094ce232c417bc65f65fc3ed6ac127d927ec32f590e42d79a41480f12ae53a0cccf5ba974d8db", 0xf7}, {&(0x7f0000008640)="227e55d23818603d748c4b4bfeb6d0ee706a899c99848497c07c1d7d3573620d241ea4a86781ec020680bd03364552e0d6b8ee51eadf8079b9f2aa8d058014626d8b68208d6a6425e440e29d3a7d294c7fa454824cd2e223b879a7619408723c8fe231d5ffff4d7f8e5a439acc29474ae092b8a24d73005c0a0f4c05190ab12de49add4ff9123af2070ef5aec0a7449583d8267aa0f84de0bdd8f1e8ce19f5", 0x9f}, {&(0x7f0000008700)="f75aef02c433575e75788e8d2d4a0b604ecefe38d188ad33ed2e094718ae1248dadf5902eb6861e1df16ec86ffa09d926b6b01ffc1a42bbc24de1a5468129f8cf08c54b906ca990e453da9157f6fc60545a60c437694cf291c20df971004f34689d459d5f20fd19d243f8394806a5e63a7051565f3b3fe38d458c71522633ffb238af507e84ff0daf4de905557d060891fcc07a12f1fb98c284e05557562229010df1ac2bc1282e4e5b98137f66e3f25a945e3b4452adaf3f32751c78dc6e063050279bfc7c3ff2c90e054570036af96100b6e7fab88281c33233aa2c0690b11b91e34f2f22171f57202f1c4aabd18d3", 0xf0}], 0x4, &(0x7f0000008840)=ANY=[@ANYBLOB="20005d0cca1e39326100000300000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32], 0x20, 0xc0}}, {{&(0x7f0000008880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000009c80)=[{&(0x7f0000008900)="5db48247860d32578b6ba0c8c404e6749d6c11a850409d6db180a61211c52b4ba87b4eab9c5bd82e87520dce69313bdac14a2820", 0x34}, {&(0x7f0000008940)="e42e56881211a3fe8bf8e7edd5e5e06d646f8ca76f088243c4dfd274be89160bb95725f4b4e19fd360ba444d569bb6721c1c6fa5efba540f3736314a9a1ff34f129a6b259f96bd72353e6380e69218bbf6bdc01944d618ec94f7e15d44f1bab6263ff1dd22b5fd3169ff9f87fd5687401ca9c654b6642555543e778d5b81b209e52069698d839621f963a3feb46bac131b8277820626184881f3032dbfd4caf78b15b4329559a147b060962db557c35c5ecb9b75512692b0f4a2561765a41dfb323b374b19c5045ffcd8ddde20", 0xcd}, {&(0x7f0000008a40)="7e06", 0x2}, {&(0x7f0000008a80)="1b7ab39c8356c6bc398e1b27064b13e55d47dd0cef3e655f880d198f5680999b671bb623a6", 0x25}, {&(0x7f0000008ac0)}, {&(0x7f0000008b00)="4da715e03b19749289a8c082faa88728ba12389ea1c024ebd86a52e9d83d47c24c7a5c12a70fa515ae2fe1d13562b4d23098717a5cc7812cc4ed0ffd532135c4b85ac585255f805955dd4375c12eef1c6b337a0235a48a04fc09983972f663b5e036405599af347b949a0d4750f7f0f38b7f0606ff85f5f954f4f5a66f4d476234fb3a1bab87c5af74214619bc7b3b3e323425bfdef0a62631d87d66bbc6ed90f9d504af7874653df1c6d7b773e9afbdebb2667bbf5c3a044d", 0xb9}, {&(0x7f0000008bc0)="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", 0x1000}, {&(0x7f0000009bc0)="eccbd176bfb64a74bbfc2ef6a8107cb8e5f8724069d3156a002c2a92343b0e45fb3191f9150d1735f13bc9c0faf7e00d7b36f6d86ad894d164818692c69e4463a03fe0bab5372e0b28addf154384fdc5709ab1e4c4b7401c69a21a5c17e10279bb83d7c3de0c873ae4ec985cee87296736e554fdfa793d5a0b467110142b4599db3b250ed7a3e16dda015b98fa92debeba41ac28a1419a8ea54ab3a1a7328d3800fbb42969d416309f800cd7fdfad1dc5cf14226e3fac11b63addd0e740765", 0xbf}], 0x8, 0x0, 0x0, 0x200408c4}}], 0x4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYRESDEC=r2], &(0x7f0000000340)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) io_setup(0x1, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x1000, 0x8ba, 0x4, {0x6, @win={{0x3, 0x69f20258, 0x7, 0x3}, 0x6, 0x1, &(0x7f00000002c0)={{0x0, 0x3ff, 0xa, 0x1}}, 0x8, 0x0, 0xc4}}, 0x40004}) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x8a, &(0x7f0000000580)=@req3, 0x1c) prctl$PR_SET_SECCOMP(0x42, 0x2, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/143) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x640503, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffff327, 0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0x89e1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) mmap(&(0x7f00003ed000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_uring_setup(0x58a0, &(0x7f0000000200)={0x0, 0xb8e4, 0x1000, 0x0, 0x3ce}) 0s ago: executing program 5 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = memfd_create(&(0x7f0000000400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^\x17\x877%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xda\b\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x03\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x85\x1f\x01\x03\x9e\xc4\xe7\xd1ELhI\xd9\xf5\xcfk\x8a&~\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x3) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x2011, r1, 0x0) sendfile(r1, r1, 0x0, 0x200001) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}]}], {0x14}}, 0x80}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYBLOB=']'], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) kernel console output (not intermixed with test programs): 5/0xa0 [ 547.398426][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.398440][T12133] RIP: 0033:0x7fbd4858e969 [ 547.398454][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.398467][T12133] RSP: 002b:00007fbd463f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.398482][T12133] RAX: ffffffffffffffda RBX: 00007fbd487b6080 RCX: 00007fbd4858e969 [ 547.398493][T12133] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000006 [ 547.398502][T12133] RBP: 00007fbd463f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.398511][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.398528][T12133] R13: 0000000000000000 R14: 00007fbd487b6080 R15: 00007fbd488dfa28 [ 547.398549][T12133] [ 547.644494][T12133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.743978][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 548.752268][ T5886] usb 6-1: no configurations [ 548.760734][ T5886] usb 6-1: can't read configurations, error -22 [ 548.794458][T10804] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 548.941092][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 549.004875][T12154] tipc: Enabling of bearer rejected, already enabled [ 549.045064][T10804] usb 4-1: device descriptor read/64, error -71 [ 549.154634][T10818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 549.285045][T10804] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 549.324794][ T5886] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 549.334422][T10818] usb 5-1: Using ep0 maxpacket: 16 [ 549.424769][T10804] usb 4-1: device descriptor read/64, error -71 [ 549.509636][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 549.521841][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 549.533032][ T5886] usb 6-1: config 8 has an invalid interface number: 132 but max is 0 [ 549.549561][ T5886] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 549.580921][T10804] usb usb4-port1: attempt power cycle [ 549.602025][ T5886] usb 6-1: config 8 has no interface number 0 [ 549.614874][ T5886] usb 6-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.639219][ T5886] usb 6-1: config 8 interface 132 has no altsetting 0 [ 549.656505][ T5886] usb 6-1: string descriptor 0 read error: -22 [ 549.663210][ T5886] usb 6-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 549.674276][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.714792][ T5886] usb-storage 6-1:8.132: USB Mass Storage device detected [ 549.760045][ T5886] usb-storage 6-1:8.132: Quirks match for vid 07cf pid 1001: a [ 549.906380][ T5886] usb 6-1: USB disconnect, device number 36 [ 549.935001][T10804] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 549.965302][T10804] usb 4-1: device descriptor read/8, error -71 [ 550.044832][T12169] tipc: Invalid UDP bearer configuration [ 550.044888][T12169] tipc: Enabling of bearer rejected, failed to enable media [ 550.364842][T10804] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 550.405738][T10804] usb 4-1: device descriptor read/8, error -71 [ 550.525333][T10804] usb usb4-port1: unable to enumerate USB device [ 551.884591][T12194] FAULT_INJECTION: forcing a failure. [ 551.884591][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 551.901286][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.3.1698 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 551.901319][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.901332][T12194] Call Trace: [ 551.901341][T12194] [ 551.901351][T12194] dump_stack_lvl+0x189/0x250 [ 551.901390][T12194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.901431][T12194] ? __pfx__printk+0x10/0x10 [ 551.901456][T12194] ? __pfx___might_resched+0x10/0x10 [ 551.901476][T12194] ? fs_reclaim_acquire+0x7d/0x100 [ 551.901512][T12194] should_fail_ex+0x414/0x560 [ 551.901539][T12194] should_failslab+0xa8/0x100 [ 551.901568][T12194] __kmalloc_noprof+0xcb/0x4f0 [ 551.901593][T12194] ? tomoyo_encode+0x28b/0x550 [ 551.901624][T12194] tomoyo_encode+0x28b/0x550 [ 551.901655][T12194] tomoyo_realpath_from_path+0x58d/0x5d0 [ 551.901692][T12194] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 551.901713][T12194] tomoyo_path_number_perm+0x1e8/0x5a0 [ 551.901738][T12194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.901791][T12194] ? __lock_acquire+0xaac/0xd20 [ 551.901840][T12194] ? __fget_files+0x2a/0x420 [ 551.901873][T12194] ? __fget_files+0x3a0/0x420 [ 551.901898][T12194] ? __fget_files+0x2a/0x420 [ 551.901929][T12194] security_file_ioctl+0xcb/0x2d0 [ 551.901963][T12194] __se_sys_ioctl+0x47/0x170 [ 551.901986][T12194] do_syscall_64+0xf6/0x210 [ 551.902016][T12194] ? clear_bhb_loop+0x45/0xa0 [ 551.902042][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.902063][T12194] RIP: 0033:0x7fb537f8e969 [ 551.902083][T12194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.902096][T12194] RSP: 002b:00007fb538eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.902112][T12194] RAX: ffffffffffffffda RBX: 00007fb5381b6080 RCX: 00007fb537f8e969 [ 551.902123][T12194] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000006 [ 551.902133][T12194] RBP: 00007fb538eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 551.902142][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.902153][T12194] R13: 0000000000000000 R14: 00007fb5381b6080 R15: 00007fb5382dfa28 [ 551.902181][T12194] [ 551.902228][T12194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.600886][T10818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 552.609750][T10820] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 552.640715][T10818] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 552.745961][T10818] usb 5-1: can't read configurations, error -71 [ 552.940032][T10820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.960262][T10820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.971348][T10820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.040959][T10820] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.098929][T12207] loop2: detected capacity change from 0 to 7 [ 553.107563][T12207] Dev loop2: unable to read RDB block 7 [ 553.113566][T12207] loop2: AHDI p1 p2 p3 p4 [ 553.120289][T10820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.121434][T12207] loop2: partition table partially beyond EOD, truncated [ 553.161821][T12207] loop2: p1 start 1601398130 is beyond EOD, truncated [ 553.169162][T12207] loop2: p2 start 1702059890 is beyond EOD, truncated [ 553.175909][T10820] usb 6-1: config 0 descriptor?? [ 553.177035][T12207] loop2: p3 size 150995200 extends beyond EOD, truncated [ 553.333238][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 553.594289][T10820] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 553.648358][T12213] netlink: 'syz.0.1704': attribute type 7 has an invalid length. [ 553.659777][T10820] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 553.795472][T12213] input: syz0 as /devices/virtual/input/input61 [ 553.954141][T12221] tipc: Enabling of bearer rejected, failed to enable media [ 554.208815][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.217570][T10818] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 554.229591][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.300052][T10820] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 554.323875][T10804] usb 6-1: USB disconnect, device number 37 [ 554.394758][T10818] usb 3-1: Using ep0 maxpacket: 16 [ 554.419894][T10818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.447581][T10818] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 554.456238][T10820] usb 5-1: device descriptor read/64, error -71 [ 554.484586][T10818] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 554.503604][T10818] usb 3-1: config 8 has no interface number 0 [ 554.601825][ T5886] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 554.625654][T10818] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.889226][T10818] usb 3-1: config 8 interface 132 has no altsetting 0 [ 554.904667][T10818] usb 3-1: string descriptor 0 read error: -22 [ 554.914621][T10818] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 554.924718][T10820] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 554.937220][T10818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.946963][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 554.964618][T10800] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 555.133087][T10818] usb-storage 3-1:8.132: USB Mass Storage device detected [ 555.154161][T10820] usb 5-1: device descriptor read/64, error -71 [ 555.157478][T10800] usb 6-1: Using ep0 maxpacket: 8 [ 555.260389][T10818] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 555.285257][T10820] usb usb5-port1: attempt power cycle [ 555.303569][T10800] usb 6-1: config 0 has no interfaces? [ 555.309411][T10800] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 555.338863][T10800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.389529][T10800] usb 6-1: config 0 descriptor?? [ 555.428890][T10818] usb 3-1: USB disconnect, device number 120 [ 555.714809][T10820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 555.745927][T10820] usb 5-1: device descriptor read/8, error -71 [ 555.754567][T10800] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 556.014458][T10820] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 556.044436][T10800] usb 4-1: Using ep0 maxpacket: 16 [ 556.057062][T10820] usb 5-1: device descriptor read/8, error -71 [ 556.205587][T10820] usb usb5-port1: unable to enumerate USB device [ 557.147453][T12249] loop2: detected capacity change from 0 to 7 [ 557.172331][T12249] Dev loop2: unable to read RDB block 7 [ 557.178566][T12249] loop2: AHDI p1 p2 p3 p4 [ 557.216464][T12249] loop2: partition table partially beyond EOD, truncated [ 557.285257][T12249] loop2: p1 start 1601398130 is beyond EOD, truncated [ 557.350728][T12249] loop2: p2 start 1702059890 is beyond EOD, truncated [ 557.400341][T12249] loop2: p3 size 150995200 extends beyond EOD, truncated [ 557.684590][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 557.944818][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.013456][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 558.089761][ T5886] usb 1-1: can't read configurations, error -71 [ 558.746407][T10820] usb 6-1: USB disconnect, device number 38 [ 558.952123][T10800] usb 4-1: unable to get BOS descriptor or descriptor too short [ 558.990698][T10800] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 559.049679][T10800] usb 4-1: can't read configurations, error -71 [ 559.409987][T12275] tipc: Enabling of bearer rejected, already enabled [ 559.554898][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 559.583268][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 559.620670][T12280] gretap0: entered promiscuous mode [ 559.627358][T12280] batadv_slave_1: entered promiscuous mode [ 559.676700][T12280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.742632][T10803] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 559.771047][T12280] Cannot create hsr debugfs directory [ 559.777421][T12280] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 559.787668][T12280] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.904917][T10800] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 559.914830][T10803] usb 5-1: Using ep0 maxpacket: 16 [ 559.925886][T10803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.946521][T10803] usb 5-1: config 8 has an invalid interface number: 132 but max is 0 [ 559.962070][T10803] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 559.973007][T10803] usb 5-1: config 8 has no interface number 0 [ 559.988349][T10803] usb 5-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.115004][T10800] usb 4-1: device descriptor read/64, error -71 [ 560.160414][T10803] usb 5-1: config 8 interface 132 has no altsetting 0 [ 560.189642][T10803] usb 5-1: string descriptor 0 read error: -22 [ 560.202851][T10803] usb 5-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 560.229982][T10803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.254873][T10800] usb usb4-port1: attempt power cycle [ 560.324953][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 560.333804][T10803] usb-storage 5-1:8.132: USB Mass Storage device detected [ 560.366201][T10803] usb-storage 5-1:8.132: Quirks match for vid 07cf pid 1001: a [ 560.514461][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 560.673475][T10800] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 560.735838][ T30] audit: type=1326 audit(1747112780.370:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 560.818525][T10803] usb 5-1: USB disconnect, device number 10 [ 560.832796][T10800] usb 4-1: device descriptor read/8, error -71 [ 560.944627][ T30] audit: type=1326 audit(1747112780.390:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf58b2ab39 code=0x7ffc0000 [ 561.254682][T10800] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 561.275805][T10800] usb 4-1: device descriptor read/8, error -71 [ 561.294880][ T30] audit: type=1326 audit(1747112780.390:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 561.387617][T10800] usb usb4-port1: unable to enumerate USB device [ 561.424721][ T30] audit: type=1326 audit(1747112780.400:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 561.579767][ T30] audit: type=1326 audit(1747112780.400:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 561.897570][ T30] audit: type=1326 audit(1747112780.400:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 562.084983][T10800] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 562.161974][ T30] audit: type=1326 audit(1747112780.400:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 562.276702][ T30] audit: type=1326 audit(1747112780.400:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 562.321980][T10800] usb 5-1: Using ep0 maxpacket: 8 [ 562.330604][ T30] audit: type=1326 audit(1747112780.400:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf58b2ab39 code=0x7ffc0000 [ 562.360248][ T30] audit: type=1326 audit(1747112780.400:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 562.395798][T10800] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 562.407498][T10800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.419718][T10800] usb 5-1: config 0 descriptor?? [ 562.443925][T10800] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 562.460306][T10800] pwc: Warning: more than 1 configuration available. [ 562.650897][T10800] pwc: Failed to set LED on/off time (-71) [ 562.667359][T10800] pwc: send_video_command error -71 [ 562.672610][T10800] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 562.701053][T10800] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 562.834287][T10800] usb 5-1: USB disconnect, device number 11 [ 562.979009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.988312][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.214090][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.239274][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 563.291942][ T10] usb 3-1: can't read configurations, error -71 [ 563.656586][T12319] kvm: emulating exchange as write [ 563.925138][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 564.214869][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 564.225402][T12332] tipc: Enabling of bearer rejected, failed to enable media [ 564.431068][ T5889] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 564.504905][T10800] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 564.594746][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 564.604415][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 564.613606][ T5889] usb 6-1: config 5 has an invalid interface number: 52 but max is 0 [ 564.622152][ T5889] usb 6-1: config 5 has no interface number 0 [ 564.631495][ T5889] usb 6-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 564.650535][ T5889] usb 6-1: string descriptor 0 read error: -22 [ 564.657524][ T5889] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 564.667199][T10800] usb 4-1: Using ep0 maxpacket: 16 [ 564.686248][T10800] usb 4-1: config 107 has an invalid descriptor of length 126, skipping remainder of the config [ 564.697010][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 564.705013][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.720423][T10800] usb 4-1: config 107 has 0 interfaces, different from the descriptor's value: 1 [ 564.730911][T12326] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 564.748299][ T5889] aircable 6-1:5.52: aircable converter detected [ 564.761461][T10800] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 564.771257][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.783818][T10800] usb 4-1: Product: syz [ 564.800271][ T5889] usb 6-1: aircable converter now attached to ttyUSB0 [ 564.807962][T10800] usb 4-1: Manufacturer: syz [ 564.812746][T10800] usb 4-1: SerialNumber: syz [ 564.864679][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 564.876138][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 564.887157][ T10] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 564.898037][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 564.915634][ T10] usb 3-1: config 8 has no interface number 0 [ 564.933550][ T10] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.953066][ T5889] usb 6-1: USB disconnect, device number 39 [ 564.984842][ T5889] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 564.993867][ T10] usb 3-1: config 8 interface 132 has no altsetting 0 [ 565.008905][ T5889] aircable 6-1:5.52: device disconnected [ 565.030640][ T10] usb 3-1: string descriptor 0 read error: -22 [ 565.041325][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 565.059661][ T10] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 565.076485][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.102707][ T10] usb-storage 3-1:8.132: USB Mass Storage device detected [ 565.138603][ T10] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 565.312150][T10804] usb 3-1: USB disconnect, device number 123 [ 565.925533][T10804] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 566.084907][T10804] usb 1-1: device descriptor read/64, error -71 [ 566.118465][T12349] FAULT_INJECTION: forcing a failure. [ 566.118465][T12349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.131853][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.5.1741 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 566.131881][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.131899][T12349] Call Trace: [ 566.131908][T12349] [ 566.131918][T12349] dump_stack_lvl+0x189/0x250 [ 566.131966][T12349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.131997][T12349] ? __pfx__printk+0x10/0x10 [ 566.132021][T12349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.132055][T12349] should_fail_ex+0x414/0x560 [ 566.132082][T12349] _copy_to_user+0x31/0xb0 [ 566.132114][T12349] snd_ctl_ioctl+0x1024/0x1ad0 [ 566.132147][T12349] ? stack_trace_save+0x9c/0xe0 [ 566.132169][T12349] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 566.132200][T12349] ? stack_depot_save_flags+0x40/0x910 [ 566.132221][T12349] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.132253][T12349] ? kasan_save_track+0x4f/0x80 [ 566.132275][T12349] ? kasan_save_track+0x3e/0x80 [ 566.132299][T12349] ? do_vfs_ioctl+0xf36/0x1eb0 [ 566.132320][T12349] ? __se_sys_ioctl+0x47/0x170 [ 566.132339][T12349] ? do_syscall_64+0xf6/0x210 [ 566.132368][T12349] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 566.132425][T12349] ? kasan_quarantine_put+0xdd/0x220 [ 566.132459][T12349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 566.132483][T12349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 566.132505][T12349] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 566.132524][T12349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 566.132546][T12349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 566.132597][T12349] ? hook_file_ioctl+0xec/0x530 [ 566.132649][T12349] ? __fget_files+0x2a/0x420 [ 566.132680][T12349] ? __fget_files+0x3a0/0x420 [ 566.132706][T12349] ? __fget_files+0x2a/0x420 [ 566.132736][T12349] ? bpf_lsm_file_ioctl+0x9/0x20 [ 566.132763][T12349] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 566.132792][T12349] __se_sys_ioctl+0xf9/0x170 [ 566.132817][T12349] do_syscall_64+0xf6/0x210 [ 566.132844][T12349] ? clear_bhb_loop+0x45/0xa0 [ 566.132871][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.132892][T12349] RIP: 0033:0x7f4f2858e969 [ 566.132911][T12349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.132938][T12349] RSP: 002b:00007f4f29417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.132962][T12349] RAX: ffffffffffffffda RBX: 00007f4f287b6080 RCX: 00007f4f2858e969 [ 566.132977][T12349] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000006 [ 566.133003][T12349] RBP: 00007f4f29417090 R08: 0000000000000000 R09: 0000000000000000 [ 566.133016][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.133028][T12349] R13: 0000000000000000 R14: 00007f4f287b6080 R15: 00007f4f288dfa28 [ 566.133059][T12349] [ 566.424535][T10804] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 566.509476][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.757019][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 566.764802][ T5886] usb 5-1: can't read configurations, error -71 [ 566.775040][T10804] usb 1-1: device descriptor read/64, error -71 [ 566.889987][T10804] usb usb1-port1: attempt power cycle [ 566.942107][T10800] usb 4-1: USB disconnect, device number 124 [ 567.192977][T12376] ipip0: entered promiscuous mode [ 567.205559][T12376] ipip0: entered allmulticast mode [ 567.233252][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 567.236863][T10804] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 567.264964][T10804] usb 1-1: device descriptor read/8, error -71 [ 567.384437][ T5886] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 567.504468][T10800] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 567.515008][T10804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 567.534752][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 567.540778][T10804] usb 1-1: device descriptor read/8, error -71 [ 567.584468][T10820] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 567.654551][T10800] usb 4-1: Using ep0 maxpacket: 32 [ 567.659215][T10804] usb usb1-port1: unable to enumerate USB device [ 567.668556][T10800] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 567.680300][T10800] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 567.690610][T10800] usb 4-1: config 1 interface 0 has no altsetting 0 [ 567.701347][T10800] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.711436][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.719539][T10800] usb 4-1: Product: syz [ 567.724053][T10800] usb 4-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 567.742971][T10800] usb 4-1: SerialNumber: syz [ 567.751105][T10820] usb 6-1: config index 0 descriptor too short (expected 2084, got 36) [ 567.755831][T12379] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 567.769779][T10820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.785408][T10820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.796181][T10820] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 567.805435][T10820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.819185][T10820] usb 6-1: config 0 descriptor?? [ 567.993559][T10800] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 568.016568][T10800] usb 4-1: USB disconnect, device number 125 [ 568.251049][T10820] dragonrise 0003:0079:0006.0021: unknown main item tag 0x0 [ 568.258804][T10820] dragonrise 0003:0079:0006.0021: unknown main item tag 0x0 [ 568.269834][T10820] dragonrise 0003:0079:0006.0021: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 568.281744][T10820] dragonrise 0003:0079:0006.0021: no inputs found [ 568.288713][T10820] dragonrise 0003:0079:0006.0021: force feedback init failed [ 568.450612][T10820] usb 6-1: USB disconnect, device number 40 [ 568.801060][T12390] tipc: Enabling of bearer rejected, failed to enable media [ 569.114579][T10800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 569.284723][T10800] usb 1-1: Using ep0 maxpacket: 16 [ 569.306705][T10800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 569.337458][T10800] usb 1-1: config 8 has an invalid interface number: 132 but max is 0 [ 569.360435][T10800] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 569.388082][T10800] usb 1-1: config 8 has no interface number 0 [ 569.404807][T10800] usb 1-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.444559][T10800] usb 1-1: config 8 interface 132 has no altsetting 0 [ 569.471165][T10800] usb 1-1: string descriptor 0 read error: -22 [ 569.484495][T10800] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 569.504433][T10800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.542600][T10800] usb-storage 1-1:8.132: USB Mass Storage device detected [ 569.584719][T10821] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 569.615182][T10800] usb-storage 1-1:8.132: Quirks match for vid 07cf pid 1001: a [ 569.738099][T10820] usb 1-1: USB disconnect, device number 5 [ 569.766158][T10821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.783265][T10821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 569.801646][T10821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 569.829106][T10821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 569.892626][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.909367][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 569.939096][T10821] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 569.948465][ T5886] usb 5-1: can't read configurations, error -71 [ 569.959784][ T5886] usb usb5-port1: attempt power cycle [ 569.966203][T10821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.981298][T10821] usb 6-1: Product: syz [ 569.989721][T10821] usb 6-1: Manufacturer: syz [ 570.001445][T10821] usb 6-1: SerialNumber: syz [ 570.023613][T10821] usb 6-1: config 0 descriptor?? [ 570.045584][T10821] usb 6-1: ucan: probing device on interface #0 [ 570.061485][T10821] usb 6-1: ucan: invalid endpoint configuration [ 570.076360][T10821] usb 6-1: ucan: probe failed; try to update the device firmware [ 570.166018][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 570.288135][T10821] usb 6-1: USB disconnect, device number 41 [ 570.856792][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 571.075172][T10821] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 571.194863][T10804] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 571.254892][T10821] usb 3-1: Using ep0 maxpacket: 8 [ 571.262190][T10821] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 571.271440][T10821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.282204][T10821] usb 3-1: config 0 has no interface number 0 [ 571.422529][T10821] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.436228][T10804] usb 4-1: Using ep0 maxpacket: 32 [ 571.453546][T10804] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 571.470105][T10804] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 571.486981][T10821] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 571.503396][T10821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.520539][T10804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 571.534095][T10821] usb 3-1: Product: syz [ 571.544044][T10804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.562364][T10821] usb 3-1: Manufacturer: syz [ 571.567589][T10804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.576207][T10821] usb 3-1: SerialNumber: syz [ 571.584712][T10804] usb 4-1: Product: syz [ 571.590882][T10804] usb 4-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 571.610278][T10821] usb 3-1: config 0 descriptor?? [ 571.620412][T10821] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 571.653407][T10804] usb 4-1: SerialNumber: syz [ 571.680249][T12425] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 571.910767][T10804] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 571.967412][T10804] usb 4-1: USB disconnect, device number 126 [ 572.382263][T10804] usb 3-1: USB disconnect, device number 124 [ 572.561654][T12446] tipc: Enabling of bearer rejected, failed to enable media [ 572.704953][T10820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 572.864874][T10820] usb 1-1: Using ep0 maxpacket: 16 [ 572.885075][T10804] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 572.897294][T10820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.914441][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 572.933431][T10820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.152999][T10820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.169910][T10820] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 573.174445][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 573.180616][T10820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.187874][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.207986][T10820] usb 1-1: config 0 descriptor?? [ 573.220287][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.220779][T10804] usb 3-1: Using ep0 maxpacket: 16 [ 573.308836][T10804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.435893][T10804] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 573.454497][T10804] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 573.466156][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.503044][T10804] usb 3-1: config 8 has no interface number 0 [ 573.510218][T10804] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.519642][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 573.528420][T10804] usb 3-1: config 8 interface 132 has no altsetting 0 [ 573.551386][T10804] usb 3-1: string descriptor 0 read error: -22 [ 573.563600][T10804] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 573.573366][T10804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.581592][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.584861][ T10] usb 5-1: config 0 descriptor?? [ 573.639811][T10804] usb-storage 3-1:8.132: USB Mass Storage device detected [ 573.682382][T10820] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 573.703322][T10804] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 573.715972][T10820] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/input/input62 [ 573.803732][T10820] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 573.867075][T10820] usb 3-1: USB disconnect, device number 125 [ 573.893143][T12444] FAULT_INJECTION: forcing a failure. [ 573.893143][T12444] name failslab, interval 1, probability 0, space 0, times 0 [ 573.914727][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.0.1767 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 573.914775][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.914797][T12444] Call Trace: [ 573.914813][T12444] [ 573.914827][T12444] dump_stack_lvl+0x189/0x250 [ 573.914866][T12444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.914895][T12444] ? __pfx__printk+0x10/0x10 [ 573.914919][T12444] ? __pfx___might_resched+0x10/0x10 [ 573.914938][T12444] ? fs_reclaim_acquire+0x7d/0x100 [ 573.914973][T12444] should_fail_ex+0x414/0x560 [ 573.914999][T12444] should_failslab+0xa8/0x100 [ 573.915028][T12444] __kmalloc_noprof+0xcb/0x4f0 [ 573.915053][T12444] ? tomoyo_encode+0x28b/0x550 [ 573.915082][T12444] tomoyo_encode+0x28b/0x550 [ 573.915113][T12444] tomoyo_realpath_from_path+0x58d/0x5d0 [ 573.915149][T12444] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 573.915170][T12444] tomoyo_path_number_perm+0x1e8/0x5a0 [ 573.915193][T12444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.915243][T12444] ? __lock_acquire+0xaac/0xd20 [ 573.915297][T12444] ? __fget_files+0x2a/0x420 [ 573.915347][T12444] ? __fget_files+0x3a0/0x420 [ 573.915372][T12444] ? __fget_files+0x2a/0x420 [ 573.915403][T12444] security_file_ioctl+0xcb/0x2d0 [ 573.915437][T12444] __se_sys_ioctl+0x47/0x170 [ 573.915462][T12444] do_syscall_64+0xf6/0x210 [ 573.915490][T12444] ? clear_bhb_loop+0x45/0xa0 [ 573.915517][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.915538][T12444] RIP: 0033:0x7fcf58b8e969 [ 573.915557][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.915576][T12444] RSP: 002b:00007fcf5995c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.915599][T12444] RAX: ffffffffffffffda RBX: 00007fcf58db5fa0 RCX: 00007fcf58b8e969 [ 573.915615][T12444] RDX: 0000200000000040 RSI: 0000000080284504 RDI: 0000000000000004 [ 573.915629][T12444] RBP: 00007fcf5995c090 R08: 0000000000000000 R09: 0000000000000000 [ 573.915642][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.915654][T12444] R13: 0000000000000000 R14: 00007fcf58db5fa0 R15: 00007fcf58edfa28 [ 573.915687][T12444] [ 573.915731][T12444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.168235][ T10] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 574.182916][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0023/input/input63 [ 574.269855][ T5889] usb 1-1: USB disconnect, device number 6 [ 574.296191][T12455] fido_id[12455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/report_descriptor': No such file or directory [ 574.340869][ T10] microsoft 0003:045E:07DA.0023: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 574.465545][ T10] usb 5-1: USB disconnect, device number 15 [ 574.593814][T12459] fido_id[12459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 574.807444][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1772'. [ 574.859982][T12467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1775'. [ 575.115617][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 575.227969][T12485] tipc: Enabled bearer , priority 10 [ 575.334535][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 575.344494][ T5886] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 575.379984][T12494] tipc: Started in network mode [ 575.385003][T12494] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 575.396575][T12494] tipc: Enabled bearer , priority 10 [ 575.424864][T10820] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 575.504505][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 575.504897][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 575.512207][ T10] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 575.524115][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.526747][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 575.538178][ T10] usb 6-1: config 0 descriptor?? [ 575.545255][ T5886] usb 3-1: can't read configurations, error -61 [ 575.560008][ T10] usblcd 6-1:0.0: USBLCD model not supported. [ 575.574706][T10820] usb 1-1: Using ep0 maxpacket: 32 [ 575.581584][T10820] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 575.593305][T10820] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 575.605182][T10820] usb 1-1: config 1 interface 0 has no altsetting 0 [ 575.614510][T10820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.623641][T10820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.631994][T10820] usb 1-1: Product: syz [ 575.637008][T10820] usb 1-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 575.655543][T10820] usb 1-1: SerialNumber: syz [ 575.663897][T12482] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 575.674643][T10800] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 575.682558][ T5889] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 575.704771][ T5886] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 575.772264][T10821] usb 6-1: USB disconnect, device number 42 [ 575.834470][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 575.842132][T10800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.853383][T10800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.863989][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.871793][T10800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.885243][T10800] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.885661][T10820] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 575.894982][ T5889] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 575.895010][ T5889] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 575.895031][ T5889] usb 4-1: config 8 has no interface number 0 [ 575.895071][ T5889] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.895099][ T5889] usb 4-1: config 8 interface 132 has no altsetting 0 [ 575.895304][T10800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.914833][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 575.933505][ T5889] usb 4-1: string descriptor 0 read error: -22 [ 575.965546][T10820] usb 1-1: USB disconnect, device number 7 [ 575.979221][ T5889] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 575.991972][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 575.992584][T10800] usb 5-1: config 0 descriptor?? [ 576.004408][ T5886] usb 3-1: can't read configurations, error -61 [ 576.017020][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.020900][ T5886] usb usb3-port1: attempt power cycle [ 576.050528][ T5889] usb-storage 4-1:8.132: USB Mass Storage device detected [ 576.078039][ T5889] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 576.256989][ T5889] usb 4-1: USB disconnect, device number 127 [ 576.366293][T12500] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1785'. [ 576.405592][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 576.450225][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 576.463032][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 576.477676][T10800] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 576.488476][ T5886] usb 3-1: can't read configurations, error -61 [ 576.516514][T12507] program syz.5.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.518285][T10800] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 576.542746][ T5889] tipc: Node number set to 4269801488 [ 576.638091][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 576.675525][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 576.683849][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 576.696617][ T5886] usb 3-1: can't read configurations, error -61 [ 576.707112][ T5886] usb usb3-port1: unable to enumerate USB device [ 576.804893][ T5889] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 576.874576][T10800] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 576.971624][ T5889] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 576.983199][ T5889] usb 1-1: config 0 has no interface number 0 [ 576.990929][ T5889] usb 1-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 577.009063][ T5889] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 577.018694][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.030483][ T5889] usb 1-1: Product: syz [ 577.034815][T10800] usb 6-1: Using ep0 maxpacket: 16 [ 577.040074][ T5889] usb 1-1: Manufacturer: syz [ 577.049081][ T5889] usb 1-1: SerialNumber: syz [ 577.055607][T10800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.072590][ T5889] r8152-cfgselector 1-1: Unknown version 0x0000 [ 577.082826][T10800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.092807][ T5889] r8152-cfgselector 1-1: config 0 descriptor?? [ 577.099101][T10800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.113032][T12511] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 577.120838][T10800] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.130027][T10800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.139821][ T5889] r8152 1-1:0.129: Expected endpoints are not found [ 577.146960][T10803] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 577.166669][T10800] usb 6-1: config 0 descriptor?? [ 577.314497][T10803] usb 4-1: Using ep0 maxpacket: 8 [ 577.321479][T10803] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 577.331929][T10803] usb 4-1: config 64 has no interface number 0 [ 577.338611][T10803] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 577.349751][T10803] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 577.358991][T10803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.372338][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.390382][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.402115][T10803] usb 4-1: probing VID:PID(2201:012C) [ 577.415633][T10803] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 577.427003][T10803] usb 4-1: vub300 ignoring EndPoint(0) 02 [ 577.432907][T10803] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 577.476397][T10803] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 577.612621][T10800] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 577.641331][T10800] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0025/input/input64 [ 577.738056][T10800] microsoft 0003:045E:07DA.0025: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 577.818194][T10803] usb 6-1: USB disconnect, device number 43 [ 578.578437][T12540] input: syz1 as /devices/virtual/input/input65 [ 578.656379][T10800] usb 5-1: USB disconnect, device number 16 [ 578.919416][T12544] sit0: entered promiscuous mode [ 578.989691][T12544] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 579.013629][T12544] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1795'. [ 579.271544][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 579.564715][T10804] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 579.605060][ T5889] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 579.673219][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 579.673238][ T30] audit: type=1326 audit(1747112799.300:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 579.720381][T12549] loop6: detected capacity change from 0 to 7 [ 579.734495][T12549] Dev loop6: unable to read RDB block 7 [ 579.740117][T12549] loop6: AHDI p3 p4 [ 579.744063][T12549] loop6: partition table partially beyond EOD, truncated [ 579.765353][T12549] loop6: p3 start 1697644645 is beyond EOD, truncated [ 579.804430][T10804] usb 5-1: Using ep0 maxpacket: 32 [ 579.808212][ T30] audit: type=1326 audit(1747112799.340:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 579.849566][T10804] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 579.879735][ T30] audit: type=1326 audit(1747112799.340:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 579.934001][ T5889] usb 4-1: USB disconnect, device number 2 [ 579.971326][T10804] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 580.046846][ T30] audit: type=1326 audit(1747112799.340:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.084599][T10804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 580.091337][ T30] audit: type=1326 audit(1747112799.340:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.139989][ T30] audit: type=1326 audit(1747112799.340:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.168764][T10804] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.178489][T10804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.210228][ T30] audit: type=1326 audit(1747112799.340:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.268233][ T30] audit: type=1326 audit(1747112799.340:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.315999][T10804] usb 5-1: Product: syz [ 580.320231][T10804] usb 5-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 580.368720][T10804] usb 5-1: SerialNumber: syz [ 580.380639][T12547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.400872][ T30] audit: type=1326 audit(1747112799.340:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.480303][ T30] audit: type=1326 audit(1747112799.340:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf58b8e969 code=0x7ffc0000 [ 580.599147][T10804] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 580.612023][T10804] usb 5-1: USB disconnect, device number 17 [ 580.649531][T10820] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 580.814932][T10820] usb 6-1: Using ep0 maxpacket: 8 [ 580.835366][T10820] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 580.853618][T10820] usb 6-1: can't read configurations, error -61 [ 580.932706][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 581.007141][T10820] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 581.046867][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1803'. [ 581.143005][T12570] batadv_slave_1: entered promiscuous mode [ 581.149594][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 581.164764][T10820] usb 6-1: Using ep0 maxpacket: 8 [ 581.179747][T10820] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 581.187944][T10820] usb 6-1: can't read configurations, error -61 [ 581.198251][T12554] [U]  [ 581.210233][T10820] usb usb6-port1: attempt power cycle [ 581.319492][T10800] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 581.518654][T10800] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 581.540343][T10800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.555271][T10800] usb 4-1: config 0 has no interface number 0 [ 581.561582][T10800] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 581.573584][T10800] usb 4-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 581.574986][T10820] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 581.605402][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 581.616804][T10820] usb 6-1: Using ep0 maxpacket: 8 [ 581.630963][T10820] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 581.639483][T10820] usb 6-1: can't read configurations, error -61 [ 581.649259][T10800] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 581.676673][T10800] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 581.684638][T10821] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 581.700529][T10800] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 581.724791][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.742781][T10800] usb 4-1: Product: syz [ 581.750790][T10800] usb 4-1: Manufacturer: syz [ 581.759081][T10800] usb 4-1: SerialNumber: syz [ 581.774502][T10820] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 581.793118][T10800] usb 4-1: config 0 descriptor?? [ 581.805536][T10800] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 581.808887][T10820] usb 6-1: Using ep0 maxpacket: 8 [ 581.831327][T10820] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 581.843643][T10820] usb 6-1: can't read configurations, error -61 [ 581.853817][T10820] usb usb6-port1: unable to enumerate USB device [ 581.868849][T10821] usb 5-1: config 0 has no interfaces? [ 581.886670][T10821] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.899181][T10821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.904478][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 581.907551][T10821] usb 5-1: Product: syz [ 581.921929][T10821] usb 5-1: Manufacturer: syz [ 581.928694][T10821] usb 5-1: SerialNumber: syz [ 581.940769][T10821] usb 5-1: config 0 descriptor?? [ 582.017881][T10800] usb 4-1: USB disconnect, device number 3 [ 582.087161][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 582.212292][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.231600][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.069663][T12593] loop2: detected capacity change from 0 to 7 [ 584.077458][T12593] Dev loop2: unable to read RDB block 7 [ 584.083122][T12593] loop2: unable to read partition table [ 584.089618][T12593] loop2: partition table beyond EOD, truncated [ 584.111701][T12593] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 584.311079][T10800] usb 5-1: USB disconnect, device number 18 [ 584.386052][T12595] ptrace attach of "./syz-executor exec"[5848] was attempted by ""[12595] [ 584.550641][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 584.583080][ T5889] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 584.591431][ T5889] usb 3-1: can't read configurations, error -71 [ 584.612090][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 584.655336][T10820] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 584.804606][T10820] usb 1-1: Using ep0 maxpacket: 16 [ 584.812942][T10820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.842606][T10820] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 584.864554][T10820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.876108][T10820] usb 1-1: Product: syz [ 584.882614][T10820] usb 1-1: Manufacturer: syz [ 584.887476][T10820] usb 1-1: SerialNumber: syz [ 584.899541][T10820] usb 1-1: config 0 descriptor?? [ 584.918763][T10820] hub 1-1:0.0: bad descriptor, ignoring hub [ 584.925245][T10820] hub 1-1:0.0: probe with driver hub failed with error -5 [ 584.934534][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 584.939711][T10820] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input66 [ 584.968951][T10820] input: failed to attach handler mousedev to device input66, error: -5 [ 585.115767][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 585.123687][ T5889] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 585.139370][ T5889] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 585.149694][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0 [ 585.170185][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.179369][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.188003][ T5889] usb 3-1: Product: syz [ 585.192312][ T5889] usb 3-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 585.272745][ T5889] usb 3-1: SerialNumber: syz [ 585.286837][T12601] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 585.513671][ T5889] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 585.637021][ T5889] usb 3-1: USB disconnect, device number 5 [ 586.472608][ T8354] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 586.515154][ T8354] usb 1-1: device reset changed ep0 maxpacket size! [ 586.572360][T10820] usb 1-1: USB disconnect, device number 9 [ 586.634844][T10821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 586.804792][T10820] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 586.814671][T10821] usb 3-1: Using ep0 maxpacket: 16 [ 586.823786][T10821] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 586.869624][T10821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 586.975561][T10821] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 586.988420][T10820] usb 1-1: Using ep0 maxpacket: 32 [ 587.006062][T10821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.015419][T10820] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 587.026468][T10821] usb 3-1: Product: syz [ 587.030682][T10821] usb 3-1: Manufacturer: syz [ 587.035714][T10820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.049229][T10821] usb 3-1: SerialNumber: syz [ 587.062905][T10820] usb 1-1: config 0 descriptor?? [ 587.071458][T10821] usb 3-1: config 0 descriptor?? [ 587.090363][T10820] as10x_usb: device has been detected [ 587.096976][T10821] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.115805][T10820] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 587.124258][T10821] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 587.165638][T10820] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 587.206895][T10820] as10x_usb: error during firmware upload part1 [ 587.214054][T10820] Registered device nBox DVB-T Dongle [ 587.244452][T10803] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 587.280411][ T5889] usb 1-1: USB disconnect, device number 10 [ 587.337733][ T5889] Unregistered device nBox DVB-T Dongle [ 587.343788][ T5889] as10x_usb: device has been disconnected [ 587.435694][T10803] usb 6-1: Using ep0 maxpacket: 8 [ 587.482489][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.501772][T10803] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 587.504906][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.554625][T10800] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 587.571866][T10803] usb 6-1: can't read configurations, error -61 [ 587.703535][T10821] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 587.710342][T10821] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 587.745000][T10803] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 587.804636][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 587.939944][T10821] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 587.952408][T10821] em28xx 3-1:0.0: No AC97 audio processor [ 588.001735][T10800] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 588.012290][T10800] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.025564][T10803] usb 6-1: Using ep0 maxpacket: 8 [ 588.035668][T10800] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 588.044995][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 588.054125][ T5889] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 588.073636][T10800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.084753][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.097088][T10803] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 588.107676][T10803] usb 6-1: can't read configurations, error -61 [ 588.211410][T10800] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.220113][ T5889] usb 1-1: config 0 descriptor?? [ 588.232725][T10803] usb usb6-port1: attempt power cycle [ 588.282264][ T5889] as10x_usb: device has been detected [ 588.369311][ T5889] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 588.579697][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.592558][ T5889] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 588.595560][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.614767][T10803] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 588.671486][T10803] usb 6-1: Using ep0 maxpacket: 8 [ 588.687700][ T5889] as10x_usb: error during firmware upload part1 [ 588.699675][T10803] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 588.718023][ T5889] Registered device nBox DVB-T Dongle [ 588.718142][T10803] usb 6-1: can't read configurations, error -61 [ 588.770359][ T5889] usb 1-1: USB disconnect, device number 11 [ 588.782975][T10800] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 588.863874][ T5889] Unregistered device nBox DVB-T Dongle [ 588.938844][T10803] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 588.968527][ T5889] as10x_usb: device has been disconnected [ 589.005087][T10803] usb 6-1: Using ep0 maxpacket: 8 [ 589.020207][T10803] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 589.033311][T10803] usb 6-1: can't read configurations, error -61 [ 589.069913][T10803] usb usb6-port1: unable to enumerate USB device [ 589.437414][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 589.438312][T10804] usb 3-1: USB disconnect, device number 6 [ 589.488988][T10804] em28xx 3-1:0.0: Disconnecting em28xx [ 589.513734][T10804] em28xx 3-1:0.0: Freeing device [ 589.714628][T10803] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 589.884592][T10803] usb 1-1: Using ep0 maxpacket: 16 [ 589.893075][T10803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.907044][T10803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.920681][T10803] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.931494][T10803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.940312][T10803] usb 1-1: Product: syz [ 589.945170][T10803] usb 1-1: Manufacturer: syz [ 589.955301][T10803] usb 1-1: SerialNumber: syz [ 590.004497][T10804] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 590.271579][T10803] usb 1-1: 0:2 : does not exist [ 590.287976][T10820] usb 4-1: USB disconnect, device number 4 [ 590.295922][T10803] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 590.324724][T10804] usb 3-1: Using ep0 maxpacket: 16 [ 590.337752][T10804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.359353][T10804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.389663][T10804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.409208][T10803] usb 1-1: USB disconnect, device number 12 [ 590.417417][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 590.427905][T10804] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 590.447483][T10804] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.479568][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.483808][T10804] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 590.509052][T10804] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.517717][T10821] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 590.527535][T10804] usb 3-1: Manufacturer: syz [ 590.541476][T10804] usb 3-1: config 0 descriptor?? [ 590.689020][T10821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.712330][T10821] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 590.781590][T10821] usb 5-1: can't read configurations, error -71 [ 590.834688][T10820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.904412][T10804] rc_core: IR keymap rc-hauppauge not found [ 590.913240][T10804] Registered IR keymap rc-empty [ 590.922204][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.944501][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.979568][T10804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 590.994673][T10820] usb 4-1: Using ep0 maxpacket: 32 [ 591.005098][T10804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input67 [ 591.020196][T10820] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 591.031949][T10820] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 591.044843][T10820] usb 4-1: config 1 interface 0 has no altsetting 0 [ 591.115459][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.126690][T10820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.137537][T10820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.146824][T10820] usb 4-1: Product: syz [ 591.151226][T10820] usb 4-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 591.170168][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.179879][T10820] usb 4-1: SerialNumber: syz [ 591.194722][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.229096][T12656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 591.244818][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.301577][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.324805][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.345189][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.365212][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.393212][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.402354][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.419688][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.462051][T10804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.510963][T10820] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 591.536523][T10804] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 591.548396][T10804] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 591.565732][T10820] usb 4-1: USB disconnect, device number 5 [ 591.984675][T10821] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 592.092724][T12677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1833'. [ 592.103206][T12677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1833'. [ 592.137888][T10821] usb 5-1: config 0 has no interfaces? [ 592.150662][T10821] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.161888][T10821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.173350][T10821] usb 5-1: Product: syz [ 592.180129][T10821] usb 5-1: Manufacturer: syz [ 592.185930][T10821] usb 5-1: SerialNumber: syz [ 592.205684][T10821] usb 5-1: config 0 descriptor?? [ 592.224855][T10804] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 592.394961][T10804] usb 6-1: Using ep0 maxpacket: 32 [ 592.402355][T10804] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.415296][T10804] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.430318][T10804] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 592.440832][T10804] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 592.450160][T10804] usb 6-1: Product: syz [ 592.454868][T10804] usb 6-1: Manufacturer: syz [ 592.516922][T10804] hub 6-1:4.0: USB hub found [ 592.531780][T10800] usb 5-1: USB disconnect, device number 21 [ 592.989800][T10804] hub 6-1:4.0: 11 ports detected [ 592.990144][T10800] usb 3-1: USB disconnect, device number 7 [ 593.036993][T12696] input: syz1 as /devices/virtual/input/input68 [ 593.064557][T10804] hub 6-1:4.0: insufficient power available to use all downstream ports [ 593.930887][T12710] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 593.932918][T12711] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 594.010496][T10804] hub 6-1:4.0: set hub depth failed [ 594.032988][T10804] usb 6-1: USB disconnect, device number 52 [ 594.643186][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 594.774432][T10821] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 594.914438][T10804] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 594.922699][T10821] usb 5-1: device descriptor read/64, error -71 [ 594.954863][T10800] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 595.098618][T10804] usb 1-1: Using ep0 maxpacket: 32 [ 595.106823][T10804] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 595.122576][T10804] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 595.140710][T10804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 595.141649][T10800] usb 4-1: Using ep0 maxpacket: 16 [ 595.155097][T10804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.164720][T10804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.172873][T10804] usb 1-1: Product: syz [ 595.177472][T10821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 595.186170][T10804] usb 1-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 595.205010][T10800] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.206532][T10804] usb 1-1: SerialNumber: syz [ 595.219113][T10800] usb 4-1: config 1 has an invalid descriptor of length 12, skipping remainder of the config [ 595.229773][T10800] usb 4-1: config 1 interface 0 altsetting 158 endpoint 0x9 has invalid maxpacket 16752, setting to 64 [ 595.246871][T10800] usb 4-1: config 1 interface 0 altsetting 158 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.254164][T12719] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 595.262947][T10800] usb 4-1: config 1 interface 0 has no altsetting 0 [ 595.297200][T10800] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.40 [ 595.314414][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.322494][T10800] usb 4-1: Product: syz [ 595.334431][T10800] usb 4-1: Manufacturer: syz [ 595.334954][T10821] usb 5-1: device descriptor read/64, error -71 [ 595.339060][T10800] usb 4-1: SerialNumber: syz [ 595.465319][T10821] usb usb5-port1: attempt power cycle [ 595.495799][T10804] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 595.511299][T10804] usb 1-1: USB disconnect, device number 13 [ 595.649273][T10800] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 595.666675][T10800] usb 4-1: USB disconnect, device number 6 [ 595.844895][T10821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 595.865258][T10821] usb 5-1: device descriptor read/8, error -71 [ 596.104581][T10821] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 596.142857][T10821] usb 5-1: device descriptor read/8, error -71 [ 596.257133][T10821] usb usb5-port1: unable to enumerate USB device [ 596.544630][T10804] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 596.705016][T10804] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.714522][T10804] usb 1-1: config 0 has no interface number 0 [ 596.723400][T10804] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 596.812754][T10804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.834936][T10804] usb 1-1: Product: syz [ 596.844956][T10804] usb 1-1: Manufacturer: syz [ 596.854410][T10804] usb 1-1: SerialNumber: syz [ 596.867607][T10804] usb 1-1: config 0 descriptor?? [ 597.115427][T10804] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 597.149210][T10804] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.285378][T10804] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 597.295104][T10804] usb 1-1: media controller created [ 597.296172][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 597.296190][ T30] audit: type=1326 audit(1747112816.910:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.329331][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.344736][ T30] audit: type=1326 audit(1747112816.910:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.368460][ T30] audit: type=1326 audit(1747112816.920:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.390802][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.423505][T10804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.437813][ T30] audit: type=1326 audit(1747112816.920:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.460210][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.513970][ T30] audit: type=1326 audit(1747112816.920:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.544755][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.584732][ T30] audit: type=1326 audit(1747112816.920:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.607122][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.699729][ T30] audit: type=1326 audit(1747112816.930:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.778657][ T30] audit: type=1326 audit(1747112816.950:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.863913][ T30] audit: type=1326 audit(1747112816.970:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.940160][ T30] audit: type=1326 audit(1747112816.970:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537f8e969 code=0x7ffc0000 [ 597.962540][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.232056][T10804] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 598.254254][T10803] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 598.442754][T10804] usb 1-1: USB disconnect, device number 14 [ 598.524282][T10803] usb 5-1: Using ep0 maxpacket: 16 [ 598.601997][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 598.643759][T10803] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 598.696667][T10803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 598.711904][T12778] input: syz1 as /devices/virtual/input/input69 [ 598.768211][T10803] usb 5-1: SerialNumber: syz [ 598.800003][T10803] usb 5-1: config 0 descriptor?? [ 598.811330][T10803] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 598.868566][T10803] usb 5-1: Detected FT232A [ 598.897274][T10803] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 599.216709][T10804] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 599.439567][T10804] usb 1-1: Using ep0 maxpacket: 32 [ 599.449550][T10804] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 599.543221][T10804] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 599.583909][T10804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 599.599859][T10804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.614925][T10804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.635456][T10804] usb 1-1: Product: syz [ 599.644058][T10804] usb 1-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 599.758566][T10804] usb 1-1: SerialNumber: syz [ 599.778193][T12777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 600.002134][T10804] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 600.016121][T10800] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 600.165328][T10804] usb 1-1: USB disconnect, device number 15 [ 600.303451][T10800] usb 4-1: config 0 has no interfaces? [ 600.327699][T10800] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 600.337077][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.350482][T10800] usb 4-1: Product: syz [ 600.361461][T10800] usb 4-1: Manufacturer: syz [ 600.377241][T10800] usb 4-1: SerialNumber: syz [ 600.393808][T10800] usb 4-1: config 0 descriptor?? [ 601.053066][T12799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.087789][T12799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.200627][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.274546][T10803] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 601.349772][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.414663][T10803] usb 6-1: device descriptor read/64, error -71 [ 601.640577][T10821] usb 5-1: USB disconnect, device number 26 [ 601.650774][T10821] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 601.694461][T10803] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 601.695558][T10821] ftdi_sio 5-1:0.0: device disconnected [ 601.864752][T10803] usb 6-1: device descriptor read/64, error -71 [ 602.005196][T10803] usb usb6-port1: attempt power cycle [ 602.165060][T10821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 602.185709][T12811] loop2: detected capacity change from 0 to 7 [ 602.230039][T12811] Dev loop2: unable to read RDB block 7 [ 602.247687][T12811] loop2: AHDI p1 p2 p3 p4 [ 602.258393][T12811] loop2: partition table partially beyond EOD, truncated [ 602.301263][T12811] loop2: p1 start 1601398130 is beyond EOD, truncated [ 602.325920][T12811] loop2: p2 start 1702059890 is beyond EOD, truncated [ 602.347180][T12811] loop2: p3 size 150995200 extends beyond EOD, truncated [ 602.354694][T10803] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 602.385510][T10803] usb 6-1: device descriptor read/8, error -71 [ 602.393472][T10821] usb 5-1: config 0 has no interfaces? [ 602.405114][T10821] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 602.414655][T10821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.429746][T10821] usb 5-1: Product: syz [ 602.434085][T10821] usb 5-1: Manufacturer: syz [ 602.442894][ T5198] Dev loop2: unable to read RDB block 7 [ 602.452422][T10821] usb 5-1: SerialNumber: syz [ 602.462340][ T5198] loop2: AHDI p1 p2 p3 p4 [ 602.476242][ T5198] loop2: partition table partially beyond EOD, truncated [ 602.489173][T10821] usb 5-1: config 0 descriptor?? [ 602.497429][ T5198] loop2: p1 start 1601398130 is beyond EOD, truncated [ 602.522710][ T5198] loop2: p2 start 1702059890 is beyond EOD, truncated [ 602.533988][ T5198] loop2: p3 size 150995200 extends beyond EOD, truncated [ 602.676193][T10800] usb 4-1: USB disconnect, device number 7 [ 602.692146][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 602.729751][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 602.734724][T10803] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 602.783886][T10803] usb 6-1: device descriptor read/8, error -71 [ 602.845750][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 602.898585][T10803] usb usb6-port1: unable to enumerate USB device [ 602.939381][T10803] usb 5-1: USB disconnect, device number 27 [ 602.993361][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 603.117564][T10804] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 603.125266][T10821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 603.282059][T12830] input: syz1 as /devices/virtual/input/input70 [ 603.333792][T10804] usb 4-1: Using ep0 maxpacket: 32 [ 603.342806][T10821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.360583][T10804] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 603.381466][T10821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.393544][T10804] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 603.414591][T10804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 603.423022][T10821] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 603.442927][T10804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.458430][T10821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 603.473568][T10804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.488174][T10821] usb 3-1: SerialNumber: syz [ 603.499889][T10804] usb 4-1: Product: syz [ 603.520510][T10804] usb 4-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄圮䕵閈솞㰩畲ඎӌ沈൓食⋊軸Ⴆ㚭⣗疒淉廽ⲽ닐覩 [ 603.603378][T10804] usb 4-1: SerialNumber: syz [ 603.640579][T12817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 603.737535][T10821] usb 3-1: 0:2 : does not exist [ 603.792741][T10821] usb 3-1: USB disconnect, device number 8 [ 604.023283][T10804] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 604.106968][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.120514][T10804] usb 4-1: USB disconnect, device number 8 [ 604.684570][T10800] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 604.824626][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 604.857858][T10800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.885128][T10800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.905288][T10800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.954537][T10800] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 604.981515][T10800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.998619][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.021881][T10800] usb 6-1: config 0 descriptor?? [ 605.030508][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 605.049995][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.078340][ T5889] usb 3-1: config 0 descriptor?? [ 605.469970][T12838] fuse: Bad value for 'user_id' [ 605.494583][T12838] fuse: Bad value for 'user_id' [ 605.529686][ T5889] logitech 0003:046D:C50C.0026: unbalanced collection at end of report description [ 605.543385][T10800] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 605.560306][ T5889] logitech 0003:046D:C50C.0026: parse failed [ 605.653228][T10800] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 605.666407][ T5889] logitech 0003:046D:C50C.0026: probe with driver logitech failed with error -22 [ 605.712903][T10800] usb 3-1: USB disconnect, device number 9 [ 605.910318][T10804] usb 6-1: USB disconnect, device number 57 [ 605.918068][T12858] plantronics 0003:047F:FFFF.0027: usb_submit_urb(ctrl) failed: -19 [ 606.959843][T12857] fido_id[12857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 607.760986][T12889] input: syz1 as /devices/virtual/input/input71 [ 608.664808][T10821] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 608.824734][T10821] usb 6-1: device descriptor read/64, error -71 [ 608.834840][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 609.024478][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 609.042816][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.064640][T10821] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 609.087088][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.108387][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 609.121599][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.146367][ T10] usb 3-1: config 0 descriptor?? [ 609.189715][ T10] hub 3-1:0.0: USB hub found [ 609.204595][T10821] usb 6-1: device descriptor read/64, error -71 [ 609.324901][T10821] usb usb6-port1: attempt power cycle [ 609.413630][ T10] hub 3-1:0.0: 1 port detected [ 609.420001][ T10] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 609.460713][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 609.467811][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.505341][ T10] usb 3-1: USB disconnect, device number 10 [ 609.675161][T10821] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 609.688481][T12921] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 609.705266][T10821] usb 6-1: device descriptor read/8, error -71 [ 609.945740][T10821] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 610.000335][T10821] usb 6-1: device descriptor read/8, error -71 [ 610.034391][T10800] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 610.062380][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 610.123050][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 610.180912][T10821] usb usb6-port1: unable to enumerate USB device [ 610.294387][T10800] usb 1-1: Using ep0 maxpacket: 16 [ 610.299673][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 610.384208][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 610.402017][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 610.413435][ T10] usb 3-1: can't read configurations, error -71 [ 610.584626][T10821] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 610.761381][T10821] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 610.773640][T10821] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 610.782533][T10821] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 610.929311][T10821] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 611.005608][T10821] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 611.100281][T10821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 611.202665][T10821] usb 5-1: string descriptor 0 read error: -22 [ 611.211617][T10821] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 611.231660][T10821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.265102][T10821] usb 5-1: config 0 descriptor?? [ 611.296325][T10821] hub 5-1:0.0: bad descriptor, ignoring hub [ 611.325181][T10821] hub 5-1:0.0: probe with driver hub failed with error -5 [ 611.548388][T10818] usb 5-1: USB disconnect, device number 28 [ 612.133571][T12943] input: syz1 as /devices/virtual/input/input72 [ 612.301434][T12947] fuse: Unknown parameter 'no' [ 612.602603][T12949] loop2: detected capacity change from 0 to 7 [ 612.615951][ T6211] Dev loop2: unable to read RDB block 7 [ 612.621678][ T6211] loop2: AHDI p1 p2 p3 p4 [ 612.630984][ T6211] loop2: partition table partially beyond EOD, truncated [ 612.640174][ T6211] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.652631][ T6211] loop2: p2 start 1702059890 is beyond EOD, truncated [ 612.663144][ T6211] loop2: p3 size 150995200 extends beyond EOD, truncated [ 612.690355][T12949] Dev loop2: unable to read RDB block 7 [ 612.696713][T12949] loop2: AHDI p1 p2 p3 p4 [ 612.701350][T12949] loop2: partition table partially beyond EOD, truncated [ 612.712384][T12949] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.730011][T12949] loop2: p2 start 1702059890 is beyond EOD, truncated [ 612.739793][T12949] loop2: p3 size 150995200 extends beyond EOD, truncated [ 612.968475][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 612.999080][T10800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 613.019548][T10800] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 613.076175][T10800] usb 1-1: can't read configurations, error -71 [ 613.145419][T12951] loop2: detected capacity change from 0 to 7 [ 613.169585][T12951] Dev loop2: unable to read RDB block 7 [ 613.223366][T12951] loop2: unable to read partition table [ 613.234723][T12951] loop2: partition table beyond EOD, truncated [ 613.254451][T12951] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 613.266459][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 614.384426][T10800] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 614.447640][T12980] loop2: detected capacity change from 0 to 7 [ 614.467683][T12980] Dev loop2: unable to read RDB block 7 [ 614.489464][T12980] loop2: AHDI p1 p2 p3 p4 [ 614.498166][T12980] loop2: partition table partially beyond EOD, truncated [ 614.539508][T12980] loop2: p1 start 1601398130 is beyond EOD, truncated [ 614.546866][T12980] loop2: p2 start 1702059890 is beyond EOD, truncated [ 614.556621][T10800] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 614.558498][T12980] loop2: p3 size 150995200 extends beyond EOD, [ 614.565396][T10800] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 614.565426][T10800] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 614.565462][T10800] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 614.565499][T10800] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.565521][T10800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 614.577911][T12980] truncated [ 614.637091][T10800] usb 6-1: string descriptor 0 read error: -22 [ 614.645778][T10800] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 614.660135][T10800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.713048][T10800] usb 6-1: config 0 descriptor?? [ 614.767204][T10800] hub 6-1:0.0: bad descriptor, ignoring hub [ 614.774022][T10800] hub 6-1:0.0: probe with driver hub failed with error -5 [ 615.124885][T10800] usb 6-1: USB disconnect, device number 62 [ 615.128999][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 615.995834][T10818] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 616.204784][T10818] usb 3-1: Using ep0 maxpacket: 8 [ 616.215646][T12996] loop2: detected capacity change from 0 to 7 [ 616.241868][T10818] usb 3-1: config 0 has no interfaces? [ 616.268731][T12996] Dev loop2: unable to read RDB block 7 [ 616.274424][T10818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.275164][T12996] loop2: unable to read partition table [ 616.326002][T10818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.328226][T12996] loop2: partition table beyond EOD, truncated [ 616.360144][T12996] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 616.401231][T10818] usb 3-1: config 0 descriptor?? [ 616.646058][T10804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 616.801209][T10804] usb 1-1: device descriptor read/64, error -71 [ 616.894112][T13005] batadv0: entered promiscuous mode [ 616.904827][T13005] macsec1: entered promiscuous mode [ 617.054811][T10804] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 617.225336][T10804] usb 1-1: device descriptor read/64, error -71 [ 617.339285][T10804] usb usb1-port1: attempt power cycle [ 617.461302][T13012] fuse: Bad value for 'fd' [ 617.493723][T13012] ipvlan2: entered promiscuous mode [ 617.500455][T13012] ipvlan2: entered allmulticast mode [ 617.511507][T13012] hsr0: entered allmulticast mode [ 617.529375][T13012] hsr_slave_0: entered allmulticast mode [ 617.545685][T13012] hsr_slave_1: entered allmulticast mode [ 617.705000][T10804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 617.725396][T10804] usb 1-1: device descriptor read/8, error -71 [ 617.986270][T10804] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 618.032508][T10804] usb 1-1: device descriptor read/8, error -71 [ 618.185139][T10804] usb usb1-port1: unable to enumerate USB device [ 618.582137][T10818] usb 3-1: USB disconnect, device number 13 [ 619.294565][T10800] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 619.456562][T10800] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 619.475388][T10800] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 619.495102][T10800] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 619.534558][T10800] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 619.554503][T10800] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.573735][T10800] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 619.598165][T10800] usb 4-1: string descriptor 0 read error: -22 [ 619.624478][T10818] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 619.634556][T10800] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 619.643647][T10800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.647928][T10804] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 619.693953][T10800] usb 4-1: config 0 descriptor?? [ 619.703744][T10800] hub 4-1:0.0: bad descriptor, ignoring hub [ 619.719713][T10800] hub 4-1:0.0: probe with driver hub failed with error -5 [ 619.783378][T13040] FAULT_INJECTION: forcing a failure. [ 619.783378][T13040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.799465][T13040] CPU: 0 UID: 0 PID: 13040 Comm: syz.5.1939 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 619.799494][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.799507][T13040] Call Trace: [ 619.799516][T13040] [ 619.799525][T13040] dump_stack_lvl+0x189/0x250 [ 619.799563][T13040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.799591][T13040] ? __pfx__printk+0x10/0x10 [ 619.799612][T13040] ? fs_reclaim_acquire+0x7d/0x100 [ 619.799654][T13040] should_fail_ex+0x414/0x560 [ 619.799679][T13040] prepare_alloc_pages+0x213/0x610 [ 619.799717][T13040] __alloc_frozen_pages_noprof+0x123/0x370 [ 619.799753][T13040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 619.799794][T13040] ? policy_nodemask+0x27c/0x720 [ 619.799825][T13040] alloc_pages_mpol+0x232/0x4a0 [ 619.799856][T13040] folio_alloc_mpol_noprof+0x39/0x70 [ 619.799882][T13040] shmem_alloc_and_add_folio+0x447/0xf60 [ 619.799904][T13040] ? filemap_get_entry+0xad/0x2f0 [ 619.799917][T13040] ? filemap_get_entry+0xad/0x2f0 [ 619.799929][T13040] ? filemap_get_entry+0xad/0x2f0 [ 619.799944][T13040] ? shmem_huge_global_enabled+0x174/0x3a0 [ 619.799961][T13040] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 619.799982][T13040] ? shmem_allowable_huge_orders+0x414/0x420 [ 619.800004][T13040] shmem_get_folio_gfp+0x597/0x15f0 [ 619.800034][T13040] shmem_fault+0x179/0x390 [ 619.800059][T13040] __do_fault+0x135/0x390 [ 619.800081][T13040] __handle_mm_fault+0x17f9/0x5380 [ 619.800112][T13040] ? __pfx___handle_mm_fault+0x10/0x10 [ 619.800144][T13040] ? find_vma+0xe7/0x160 [ 619.800161][T13040] ? __pfx_find_vma+0x10/0x10 [ 619.800180][T13040] handle_mm_fault+0x3f6/0x8c0 [ 619.800205][T13040] do_user_addr_fault+0x764/0x1390 [ 619.800232][T13040] exc_page_fault+0x68/0x110 [ 619.800250][T13040] asm_exc_page_fault+0x26/0x30 [ 619.800264][T13040] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 619.800287][T13040] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 619.800300][T13040] RSP: 0018:ffffc90004d3f4d8 EFLAGS: 00050246 [ 619.800313][T13040] RAX: ffffffff84b62901 RBX: ffff888031713600 RCX: 0000000000000040 [ 619.800331][T13040] RDX: 0000000000000000 RSI: ffff888031713600 RDI: 0000200000001800 [ 619.800341][T13040] RBP: ffffc90004d3f638 R08: ffff88803171363f R09: 1ffff110062e26c7 [ 619.800352][T13040] R10: dffffc0000000000 R11: ffffed10062e26c8 R12: 1ffff920009a7eeb [ 619.800363][T13040] R13: 0000200000001800 R14: ffffc90004d3f768 R15: 0000000000000040 [ 619.800379][T13040] ? _copy_to_iter+0x151/0x15a0 [ 619.800400][T13040] _copy_to_iter+0x24c/0x15a0 [ 619.800420][T13040] ? kernel_fpu_end+0xd2/0x120 [ 619.800445][T13040] ? __pfx__copy_to_iter+0x10/0x10 [ 619.800462][T13040] ? __asan_memset+0x22/0x50 [ 619.800477][T13040] ? sha512_avx_finup+0x3e5/0x520 [ 619.800503][T13040] hash_recvmsg+0x4cd/0x750 [ 619.800522][T13040] ? __pfx_hash_recvmsg+0x10/0x10 [ 619.800536][T13040] sock_recvmsg+0x229/0x270 [ 619.800554][T13040] sock_read_iter+0x231/0x2f0 [ 619.800579][T13040] ? __pfx_sock_read_iter+0x10/0x10 [ 619.800609][T13040] ? bpf_lsm_file_permission+0x9/0x20 [ 619.800626][T13040] ? security_file_permission+0x75/0x290 [ 619.800649][T13040] ? rw_verify_area+0x258/0x650 [ 619.800667][T13040] ? __pfx_sock_read_iter+0x10/0x10 [ 619.800687][T13040] __io_read+0x6f6/0x14f0 [ 619.800704][T13040] ? __lock_acquire+0xaac/0xd20 [ 619.800735][T13040] ? __pfx___io_read+0x10/0x10 [ 619.800749][T13040] ? __fget_files+0x2a/0x420 [ 619.800772][T13040] io_read+0x1c/0x60 [ 619.800786][T13040] __io_issue_sqe+0x17e/0x4b0 [ 619.800807][T13040] ? io_file_get_normal+0x101/0x2f0 [ 619.800831][T13040] io_issue_sqe+0x165/0xff0 [ 619.800852][T13040] ? __asan_memset+0x22/0x50 [ 619.800870][T13040] io_submit_sqes+0xa65/0x1d20 [ 619.800913][T13040] __se_sys_io_uring_enter+0x2df/0x2b20 [ 619.800949][T13040] ? ksys_write+0x1cb/0x250 [ 619.800967][T13040] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 619.800988][T13040] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 619.801006][T13040] ? __pfx_vfs_write+0x10/0x10 [ 619.801024][T13040] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.801045][T13040] ? __fget_files+0x3a0/0x420 [ 619.801067][T13040] ? fput+0xa0/0xd0 [ 619.801088][T13040] ? ksys_write+0x1f0/0x250 [ 619.801102][T13040] ? rcu_is_watching+0x15/0xb0 [ 619.801130][T13040] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 619.801154][T13040] do_syscall_64+0xf6/0x210 [ 619.801172][T13040] ? clear_bhb_loop+0x45/0xa0 [ 619.801190][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.801204][T13040] RIP: 0033:0x7f4f2858e969 [ 619.801216][T13040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.801228][T13040] RSP: 002b:00007f4f29438038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 619.801242][T13040] RAX: ffffffffffffffda RBX: 00007f4f287b5fa0 RCX: 00007f4f2858e969 [ 619.801253][T13040] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000005 [ 619.801261][T13040] RBP: 00007f4f29438090 R08: 0000000000000000 R09: 0000000000000000 [ 619.801270][T13040] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 619.801278][T13040] R13: 0000000000000000 R14: 00007f4f287b5fa0 R15: 00007f4f288dfa28 [ 619.801300][T13040] [ 619.872021][T10818] usb 1-1: Using ep0 maxpacket: 16 [ 620.022422][ T5889] usb 4-1: USB disconnect, device number 9 [ 620.023133][T10821] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 620.353963][T10804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.364737][T10804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.378256][T10818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.388661][T10818] usb 1-1: config 0 has no interfaces? [ 620.394718][T10804] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 620.430829][T10818] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 620.447356][T10818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.460006][T10804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.469169][T10818] usb 1-1: Product: syz [ 620.474716][T10818] usb 1-1: Manufacturer: syz [ 620.484802][T10818] usb 1-1: SerialNumber: syz [ 620.491000][T10804] usb 3-1: config 0 descriptor?? [ 620.634472][T10821] usb 5-1: device descriptor read/64, error -71 [ 621.094431][T10821] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 621.193658][T10818] usb 1-1: config 0 descriptor?? [ 621.304438][T10821] usb 5-1: device descriptor read/64, error -71 [ 621.407136][T10804] megaworld 0003:07B5:0312.0028: unknown main item tag 0x3 [ 621.415104][T10821] usb usb5-port1: attempt power cycle [ 621.430874][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.439932][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.462160][T13056] loop2: detected capacity change from 0 to 7 [ 621.462660][T10804] megaworld 0003:07B5:0312.0028: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 621.487870][ T8354] Dev loop2: unable to read RDB block 7 [ 621.490298][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.513054][ T8354] loop2: AHDI p1 p2 p3 p4 [ 621.521971][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.527810][ T8354] loop2: partition table partially beyond EOD, [ 621.533089][T10804] megaworld 0003:07B5:0312.0028: no inputs found [ 621.537063][ T8354] truncated [ 621.563629][T13032] netlink: 'syz.0.1936': attribute type 32 has an invalid length. [ 621.567893][ T8354] loop2: p1 start 1601398130 is beyond EOD, [ 621.574697][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 621.578611][ T8354] truncated [ 621.580937][T13032] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47) [ 621.610516][ T8354] loop2: p2 start 1702059890 is beyond EOD, truncated [ 621.612544][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.627177][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.651530][ T8354] loop2: p3 size 150995200 extends beyond EOD, truncated [ 621.665346][T10804] usb 3-1: USB disconnect, device number 14 [ 621.713869][T10819] usb 1-1: USB disconnect, device number 22 [ 621.732373][T13056] Dev loop2: unable to read RDB block 7 [ 621.770098][T13056] loop2: AHDI p1 p2 p3 p4 [ 621.787022][T13056] loop2: partition table partially beyond EOD, truncated [ 621.794670][T10821] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 621.803254][T13056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 621.814599][T13056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 621.816629][T10821] usb 5-1: device descriptor read/8, error -71 [ 621.821520][T13056] loop2: p3 size 150995200 extends beyond EOD, truncated [ 621.953401][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 621.998037][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 622.008117][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 622.074503][T10821] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 622.095511][T10821] usb 5-1: device descriptor read/8, error -71 [ 622.164708][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 622.205063][T10821] usb usb5-port1: unable to enumerate USB device [ 622.327974][T13067] loop2: detected capacity change from 0 to 7 [ 622.343631][T13067] Dev loop2: unable to read RDB block 7 [ 622.369944][T13067] loop2: unable to read partition table [ 622.391074][T13067] loop2: partition table beyond EOD, truncated [ 622.400792][T13067] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 622.689880][T13076] FAULT_INJECTION: forcing a failure. [ 622.689880][T13076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.918924][T13076] CPU: 1 UID: 0 PID: 13076 Comm: syz.2.1950 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 622.918955][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.918967][T13076] Call Trace: [ 622.918977][T13076] [ 622.918987][T13076] dump_stack_lvl+0x189/0x250 [ 622.919022][T13076] ? __lock_acquire+0xaac/0xd20 [ 622.919054][T13076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.919092][T13076] ? __pfx__printk+0x10/0x10 [ 622.919113][T13076] ? __might_fault+0xb0/0x130 [ 622.919152][T13076] should_fail_ex+0x414/0x560 [ 622.919180][T13076] _copy_to_iter+0x1db/0x15a0 [ 622.919209][T13076] ? kernel_fpu_end+0xd2/0x120 [ 622.919245][T13076] ? __pfx__copy_to_iter+0x10/0x10 [ 622.919269][T13076] ? __asan_memset+0x22/0x50 [ 622.919291][T13076] ? sha512_avx_finup+0x3e5/0x520 [ 622.919334][T13076] hash_recvmsg+0x4cd/0x750 [ 622.919361][T13076] ? __pfx_hash_recvmsg+0x10/0x10 [ 622.919383][T13076] sock_recvmsg+0x229/0x270 [ 622.919408][T13076] sock_read_iter+0x231/0x2f0 [ 622.919444][T13076] ? __pfx_sock_read_iter+0x10/0x10 [ 622.919488][T13076] ? bpf_lsm_file_permission+0x9/0x20 [ 622.919514][T13076] ? security_file_permission+0x75/0x290 [ 622.919546][T13076] ? rw_verify_area+0x258/0x650 [ 622.919571][T13076] ? __pfx_sock_read_iter+0x10/0x10 [ 622.919602][T13076] __io_read+0x6f6/0x14f0 [ 622.919627][T13076] ? __lock_acquire+0xaac/0xd20 [ 622.919671][T13076] ? __pfx___io_read+0x10/0x10 [ 622.919691][T13076] ? __fget_files+0x2a/0x420 [ 622.919725][T13076] io_read+0x1c/0x60 [ 622.919758][T13076] __io_issue_sqe+0x17e/0x4b0 [ 622.919787][T13076] ? io_file_get_normal+0x101/0x2f0 [ 622.919820][T13076] io_issue_sqe+0x165/0xff0 [ 622.919849][T13076] ? __asan_memset+0x22/0x50 [ 622.919875][T13076] io_submit_sqes+0xa65/0x1d20 [ 622.919938][T13076] __se_sys_io_uring_enter+0x2df/0x2b20 [ 622.919989][T13076] ? ksys_write+0x1cb/0x250 [ 622.920015][T13076] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 622.920044][T13076] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 622.920075][T13076] ? __pfx_vfs_write+0x10/0x10 [ 622.920100][T13076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.920130][T13076] ? __fget_files+0x3a0/0x420 [ 622.920164][T13076] ? fput+0xa0/0xd0 [ 622.920192][T13076] ? ksys_write+0x1f0/0x250 [ 622.920212][T13076] ? rcu_is_watching+0x15/0xb0 [ 622.920251][T13076] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 622.920286][T13076] do_syscall_64+0xf6/0x210 [ 622.920313][T13076] ? clear_bhb_loop+0x45/0xa0 [ 622.920338][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.920358][T13076] RIP: 0033:0x7fbd4858e969 [ 622.920376][T13076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.920393][T13076] RSP: 002b:00007fbd49322038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 622.920414][T13076] RAX: ffffffffffffffda RBX: 00007fbd487b5fa0 RCX: 00007fbd4858e969 [ 622.920429][T13076] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000005 [ 622.920442][T13076] RBP: 00007fbd49322090 R08: 0000000000000000 R09: 0000000000000000 [ 622.920454][T13076] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 622.920466][T13076] R13: 0000000000000000 R14: 00007fbd487b5fa0 R15: 00007fbd488dfa28 [ 622.920497][T13076] [ 623.652201][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.695046][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.913654][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.944862][T10803] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 624.015533][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.204555][T10803] usb 5-1: Using ep0 maxpacket: 32 [ 624.212343][T10803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.224125][T10803] usb 5-1: config 127 has an invalid interface number: 130 but max is 0 [ 624.232807][T10803] usb 5-1: config 127 has no interface number 0 [ 624.242194][T10803] usb 5-1: config 127 interface 130 has no altsetting 0 [ 624.260219][T10803] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice= f.50 [ 624.295569][T10803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.303624][T10803] usb 5-1: Product: 㬇最좷녛筘祬旹犊帘툮◗졓ዑ鏬瓥崓戟뷣珁혿跟᦮ꚜ෭矣ࠑ㥒岏武뽪ѣ壅ᴊ⯒䟝蜹讲黭ᚱ缘뎶쇐꣚ᢜ톭古⦂ﶳ槰쯌뙦礆惞筢玠ꉐ设瑌⣝싐뺥 [ 624.410379][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.416959][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.433625][T10803] usb 5-1: Manufacturer: Р [ 624.451666][T10803] usb 5-1: SerialNumber: syz [ 624.594472][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 624.714027][T10803] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 624.746637][ T10] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 624.767125][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 624.779564][T10803] usb 5-1: USB disconnect, device number 33 [ 624.814482][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 624.894454][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 624.924836][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.964689][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 625.027326][ T10] usb 3-1: string descriptor 0 read error: -22 [ 625.033845][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 625.061027][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.091845][ T10] usb 3-1: config 0 descriptor?? [ 625.120327][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 625.144371][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 625.177642][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.210603][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 625.234251][ T5889] usb 4-1: can't read configurations, error -71 [ 625.315328][T13093] loop2: detected capacity change from 0 to 7 [ 625.323887][T13093] Dev loop2: unable to read RDB block 7 [ 625.359035][T13093] loop2: AHDI p1 p2 p3 p4 [ 625.398562][T13093] loop2: partition table partially beyond EOD, truncated [ 625.427337][T13093] loop2: p1 start 1601398130 is beyond EOD, truncated [ 625.436027][ T10] usb 3-1: USB disconnect, device number 15 [ 625.503460][T13093] loop2: p2 start 1702059890 is beyond EOD, truncated [ 625.520069][T13093] loop2: p3 size 150995200 extends beyond EOD, truncated [ 625.653685][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 626.667957][ T5889] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 626.913510][ T5889] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 626.937486][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.998770][ T5889] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.047758][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.059257][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.179833][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.210276][ T5889] usb 3-1: invalid MIDI out EP 0 [ 627.489112][ T5889] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 627.518949][ T5889] usb 3-1: USB disconnect, device number 16 [ 628.189160][T13124] netlink: 'syz.5.1961': attribute type 12 has an invalid length. [ 629.967773][T13137] loop2: detected capacity change from 0 to 7 [ 630.017486][T13137] Dev loop2: unable to read RDB block 7 [ 630.023177][T13137] loop2: unable to read partition table [ 630.047093][T13137] loop2: partition table beyond EOD, truncated [ 630.059783][T13137] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 630.209874][ T5198] Dev loop2: unable to read RDB block 7 [ 630.222739][ T5198] loop2: unable to read partition table [ 630.250489][ T5198] loop2: partition table beyond EOD, truncated [ 630.265817][T13143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1966'. [ 630.788616][ T5889] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 630.964574][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 630.972456][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.984264][ T5889] usb 5-1: config 0 has no interfaces? [ 630.999076][ T5889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 631.033810][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.132541][T10809] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 631.163721][ T5889] usb 5-1: Product: syz [ 631.172959][ T5889] usb 5-1: Manufacturer: syz [ 631.180824][ T5889] usb 5-1: SerialNumber: syz [ 631.196866][ T5889] usb 5-1: config 0 descriptor?? [ 631.314429][T10809] usb 3-1: Using ep0 maxpacket: 16 [ 631.774432][T10803] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 631.952942][ T10] usb 5-1: USB disconnect, device number 34 [ 631.999695][T10803] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 632.037833][T10803] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 632.058993][T10803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 632.073723][T10803] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 632.096452][T10803] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 632.154530][T10803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 632.325911][T10803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 632.440731][T10803] usb 6-1: string descriptor 0 read error: -22 [ 632.447572][T10803] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 632.457568][T10803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.505531][T10803] usb 6-1: config 0 descriptor?? [ 632.532639][T13166] vlan3: entered promiscuous mode [ 632.542343][T13166] bond0: entered promiscuous mode [ 632.551736][T10803] hub 6-1:0.0: bad descriptor, ignoring hub [ 632.609828][T10803] hub 6-1:0.0: probe with driver hub failed with error -5 [ 632.628631][T13166] bond_slave_0: entered promiscuous mode [ 632.665115][T13166] bond_slave_1: entered promiscuous mode [ 632.874834][T10803] usb 6-1: USB disconnect, device number 63 [ 632.879810][T13169] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.890560][T13169] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.899662][T13169] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.800161][T13184] loop2: detected capacity change from 0 to 7 [ 633.840715][T13184] Dev loop2: unable to read RDB block 7 [ 633.877035][T13184] loop2: AHDI p1 p2 p3 p4 [ 633.916557][T13184] loop2: partition table partially beyond EOD, truncated [ 634.257563][T13184] loop2: p1 start 1601398130 is beyond EOD, truncated [ 634.303253][T13184] loop2: p2 start 1702059890 is beyond EOD, truncated [ 634.339839][T13184] loop2: p3 size 150995200 extends beyond EOD, truncated [ 634.551480][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 634.845518][ T5889] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 634.900622][T10809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 634.941805][T10809] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 635.037794][T10809] usb 3-1: can't read configurations, error -71 [ 635.084402][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 635.178352][ T5889] usb 1-1: config 0 has no interfaces? [ 635.183924][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.239656][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.371360][ T5889] usb 1-1: config 0 descriptor?? [ 635.454754][T10809] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 635.484879][T10821] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 635.534435][T10819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 635.614554][T10821] usb 5-1: device descriptor read/64, error -71 [ 635.626472][T10809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 635.638004][T10809] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 635.660497][T10809] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.689156][T10819] usb 4-1: config 0 has no interfaces? [ 635.697987][T10819] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 635.710506][T10819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.719159][T10819] usb 4-1: Product: syz [ 635.729951][T10809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.742492][T10809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.750786][T10819] usb 4-1: Manufacturer: syz [ 635.755655][T10819] usb 4-1: SerialNumber: syz [ 635.767538][T10809] usb 3-1: Product: syz [ 635.787060][T10819] usb 4-1: config 0 descriptor?? [ 635.795601][T10809] usb 3-1: Manufacturer: syz [ 635.820616][T10809] usb 3-1: SerialNumber: syz [ 635.864769][T10821] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 636.005367][T10821] usb 5-1: device descriptor read/64, error -71 [ 636.039215][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.048273][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.114961][T10821] usb usb5-port1: attempt power cycle [ 636.131106][T13217] netlink: 'syz.2.1986': attribute type 5 has an invalid length. [ 636.184884][T10819] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 636.346598][T10819] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 636.359113][T10819] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 636.368934][T10819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 636.382269][T10819] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 636.394267][T10819] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 636.407658][T10819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 636.418189][T10819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 636.439693][T10819] usb 6-1: string descriptor 0 read error: -22 [ 636.446726][T10819] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 636.456601][T10819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.465821][T10821] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 636.485037][T10819] usb 6-1: config 0 descriptor?? [ 636.498036][T10821] usb 5-1: device descriptor read/8, error -71 [ 636.518629][T10819] hub 6-1:0.0: bad descriptor, ignoring hub [ 636.537309][T10819] hub 6-1:0.0: probe with driver hub failed with error -5 [ 636.564785][ T31] INFO: task kworker/0:2:120 blocked for more than 143 seconds. [ 636.576293][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 636.586881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.597545][ T31] task:kworker/0:2 state:D stack:20712 pid:120 tgid:120 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 636.611276][ T31] Workqueue: usb_hub_wq hub_event [ 636.622064][ T31] Call Trace: [ 636.627555][ T31] [ 636.654170][ T31] __schedule+0x16e2/0x4cd0 [ 636.666195][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 636.676300][ T31] ? schedule+0x165/0x360 [ 636.702957][ T31] ? __pfx___schedule+0x10/0x10 [ 636.708023][ T31] ? schedule+0x91/0x360 [ 636.712403][ T31] schedule+0x165/0x360 [ 636.720953][ T31] schedule_preempt_disabled+0x13/0x30 [ 636.733357][ T31] __mutex_lock+0x724/0xe80 [ 636.741946][ T31] ? __mutex_lock+0x51b/0xe80 [ 636.747132][ T31] ? hub_event+0x21cb/0x4a00 [ 636.752128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 636.760876][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 636.767258][ T31] hub_event+0x21cb/0x4a00 [ 636.772140][ T31] ? __lock_acquire+0xaac/0xd20 [ 636.781826][ T31] ? do_raw_spin_lock+0x121/0x290 [ 636.784718][T10821] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 636.799247][ T31] ? __pfx_hub_event+0x10/0x10 [ 636.804260][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 636.810373][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.823085][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 636.825744][T10821] usb 5-1: device descriptor read/8, error -71 [ 636.829176][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 636.848653][ T31] process_scheduled_works+0xadb/0x17a0 [ 636.849442][T10819] usb 6-1: USB disconnect, device number 64 [ 636.856056][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.869161][ T31] worker_thread+0x8a0/0xda0 [ 636.873932][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 636.881503][ T31] ? __kthread_parkme+0x7b/0x200 [ 636.889515][ T31] kthread+0x70e/0x8a0 [ 636.894061][ T31] ? __pfx_worker_thread+0x10/0x10 [ 636.900287][ T31] ? __pfx_kthread+0x10/0x10 [ 636.908128][ T31] ? __pfx_kthread+0x10/0x10 [ 636.912847][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.919104][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.924557][ T31] ? __pfx_kthread+0x10/0x10 [ 636.929367][ T31] ret_from_fork+0x4b/0x80 [ 636.934121][ T31] ? __pfx_kthread+0x10/0x10 [ 636.939022][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.944140][ T31] [ 636.947516][ T31] [ 636.947516][ T31] Showing all locks held in the system: [ 636.960336][ T31] 1 lock held by khungtaskd/31: [ 636.965427][ T31] #0: ffffffff8df3d860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 636.971393][T10821] usb usb5-port1: unable to enumerate USB device [ 636.975640][ T31] 5 locks held by kworker/0:2/120: [ 636.975659][ T31] #0: ffff8881446c7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 636.975758][ T31] #1: ffffc9000271fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 636.975845][ T31] #2: ffff888146b2c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 636.975906][ T31] #3: ffff888029004510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 636.975988][ T31] #4: ffff8881463ef768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 636.976071][ T31] 1 lock held by klogd/5187: [ 636.976087][ T31] 2 locks held by getty/5588: [ 637.049925][ T31] #0: ffff888030e5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 637.060092][ T31] #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 637.070779][ T31] 4 locks held by udevd/6211: [ 637.075620][ T31] #0: ffff88807fd0e540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 637.084786][ T31] #1: ffff8880323f7888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 637.094475][ T31] #2: ffff88804cbbf788 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 637.104672][ T31] #3: ffff88802759e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 637.114158][ T31] 6 locks held by kworker/0:10/10809: [ 637.119832][ T31] #0: ffff8881446c7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 637.131985][ T31] #1: ffffc90004ce7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 637.144556][ T31] #2: ffff888027fa4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 637.153573][ T31] #3: ffff88802759e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 637.163220][ T31] #4: ffff88807faa0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 637.172603][ T31] #5: ffffffff8f2853c8 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1dc0 [ 637.182669][ T31] 5 locks held by kworker/1:13/10817: [ 637.188201][ T31] #0: ffff8881446c7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 637.199830][ T31] #1: ffffc9000b0bfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 637.211874][ T31] #2: ffff8881467fd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 637.220961][ T31] #3: ffff888146b08510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 637.231805][ T31] #4: ffff8881463ef768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 637.245161][ T31] 1 lock held by syz.2.1986/13212: [ 637.250460][ T31] [ 637.253046][ T31] ============================================= [ 637.253046][ T31] [ 637.264513][ T31] NMI backtrace for cpu 0 [ 637.264534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 637.264558][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.264571][ T31] Call Trace: [ 637.264583][ T31] [ 637.264593][ T31] dump_stack_lvl+0x189/0x250 [ 637.264627][ T31] ? __wake_up_klogd+0xd9/0x110 [ 637.264654][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.264684][ T31] ? __pfx__printk+0x10/0x10 [ 637.264717][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 637.264741][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 637.264759][ T31] ? _printk+0xcf/0x120 [ 637.264784][ T31] ? __pfx__printk+0x10/0x10 [ 637.264806][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 637.264850][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 637.264875][ T31] watchdog+0xfee/0x1030 [ 637.264911][ T31] ? watchdog+0x1de/0x1030 [ 637.264935][ T31] kthread+0x70e/0x8a0 [ 637.264955][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.264973][ T31] ? __pfx_kthread+0x10/0x10 [ 637.264991][ T31] ? __pfx_kthread+0x10/0x10 [ 637.265007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.265023][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.265040][ T31] ? __pfx_kthread+0x10/0x10 [ 637.265056][ T31] ret_from_fork+0x4b/0x80 [ 637.265070][ T31] ? __pfx_kthread+0x10/0x10 [ 637.265087][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.265112][ T31] [ 637.265137][ T31] Sending NMI from CPU 0 to CPUs 1: [ 637.411092][ C1] NMI backtrace for cpu 1 [ 637.411121][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 637.411141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.411153][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 637.411183][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 fa 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 637.411198][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 637.411215][ C1] RAX: 2bd703e24f10d400 RBX: ffffffff81974f08 RCX: 2bd703e24f10d400 [ 637.411228][ C1] RDX: 0000000000000001 RSI: ffffffff8d74b4c4 RDI: ffffffff8bc1d2e0 [ 637.411241][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 637.411255][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ef670 [ 637.411268][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 637.411280][ C1] FS: 0000000000000000(0000) GS:ffff8881261c9000(0000) knlGS:0000000000000000 [ 637.411294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.411310][ C1] CR2: 0000200000404030 CR3: 0000000033248000 CR4: 00000000003526f0 [ 637.411327][ C1] DR0: 0000040000000000 DR1: 000000000000064f DR2: 000000003c68ddb7 [ 637.411339][ C1] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.411350][ C1] Call Trace: [ 637.411359][ C1] [ 637.411366][ C1] default_idle+0x13/0x20 [ 637.411389][ C1] default_idle_call+0x74/0xb0 [ 637.411414][ C1] do_idle+0x1e8/0x510 [ 637.411434][ C1] ? __pfx_do_idle+0x10/0x10 [ 637.411462][ C1] cpu_startup_entry+0x44/0x60 [ 637.411478][ C1] start_secondary+0x101/0x110 [ 637.411495][ C1] common_startup_64+0x13e/0x147 [ 637.411528][ C1] [ 637.595092][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 637.601997][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 637.612096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.622184][ T31] Call Trace: [ 637.625482][ T31] [ 637.628421][ T31] dump_stack_lvl+0x99/0x250 [ 637.633041][ T31] ? __asan_memcpy+0x40/0x70 [ 637.637635][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.642852][ T31] ? __pfx__printk+0x10/0x10 [ 637.647460][ T31] panic+0x2db/0x790 [ 637.651381][ T31] ? __pfx_panic+0x10/0x10 [ 637.655821][ T31] ? watchdog+0x101c/0x1030 [ 637.660346][ T31] watchdog+0x102d/0x1030 [ 637.664689][ T31] ? watchdog+0x1de/0x1030 [ 637.669125][ T31] kthread+0x70e/0x8a0 [ 637.673211][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.677901][ T31] ? __pfx_kthread+0x10/0x10 [ 637.682500][ T31] ? __pfx_kthread+0x10/0x10 [ 637.687101][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.692311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.697520][ T31] ? __pfx_kthread+0x10/0x10 [ 637.702124][ T31] ret_from_fork+0x4b/0x80 [ 637.706545][ T31] ? __pfx_kthread+0x10/0x10 [ 637.711157][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.715938][ T31] [ 637.719290][ T31] Kernel Offset: disabled [ 637.723624][ T31] Rebooting in 86400 seconds..