last executing test programs: 7m59.64652276s ago: executing program 3 (id=1654): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)="e1", 0x1}], 0x1}}], 0x3, 0x15) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) 7m59.425345846s ago: executing program 3 (id=1656): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 7m59.396591031s ago: executing program 3 (id=1658): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000039f4d910cd0ca11024d0010203010902120058463c58b4f8d8ff64b7e03a7c010000000009049c0000a99d15003ace81eb22c149a2c7e3161fc0a6b843ccf25883fb2ad4de922095a676f01efb8292e0b466d3d102013ec4b9f63d6bf1cfb30f6b627fceaa341426e8902b1ec85e072bf149077a90cc5706f3727865d49d2bc4234de9b6a07cde40647996a14c8cbcb9a40fc6aedcc63adae8dcf1088ed8c667c8a113c94609584e537d6653679f87a1c0b367712e597b698bc96e1a277ecbccf6949ddc5a96f291d2c720e937"], 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1}, 0x9}], 0x1, 0x400000a0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011e00ed3ec908cd0cb300ea2d0102dbf10902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff2505a8a540000102030109022400010107100809040090020701020409050102ff0304010409058202ef030f0207"], &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xe, 0x0, 0x0, 0x8, 0x7}, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x57, 0x0, 0x2, 0xff00, 0x5}]}, 0x1, [{0x2d, &(0x7f0000000000)=@string={0x2d, 0x3, "d0938b6e090395be5d4c485989d65676a86de2ecacbf860c7eab234fa263167dfbf95ba78021a18f09d8b9"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xee01, 0x400) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 7m57.995066169s ago: executing program 3 (id=1664): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="640f015900f20f12a0df5b0820f20f1c030f20d86635200000000f22d865360f38f6841b11402ef26d0f1c7500", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x41009, 0x0, 0x0, 0x5, 'syz0\x00'}, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8, 'syz1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r13, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}]}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000041c0)=ANY=[@ANYBLOB="48150000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffffa67e000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="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"], 0x1548}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @null}, [@netrom, @remote, @default, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000000)=0x48, 0x80000) 7m54.523239424s ago: executing program 3 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004007000000010902120009f4c029ce0000000009040000008fa2f4d70ccafb1a0028019acab60239554ea543c03032807862c4faffc88d20eb5aaf7466984ed626c73f34f594ea850ba01bea7f5e"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xd0, 0x8000, 0x0, 0x0}], 0x1}) (async) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xd0, 0x8000, 0x0, 0x0}], 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m53.661164407s ago: executing program 3 (id=1680): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0049364, &(0x7f0000002040)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17380000000000000109022400010000b0000904000001030002000921000000d60707000905810300"], 0x0) 7m53.356067796s ago: executing program 32 (id=1680): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0049364, &(0x7f0000002040)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17380000000000000109022400010000b0000904000001030002000921000000d60707000905810300"], 0x0) 5m21.667796022s ago: executing program 2 (id=2344): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0xfffd, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1d}, {0x0, 0xf, 0x0, 0x8000002dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x3501, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x3, 0x2, 0x0, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x2, @in=@multicast2, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) 5m20.193281301s ago: executing program 2 (id=2347): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 5m18.41228866s ago: executing program 2 (id=2350): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xeb8}, {0xd, 0x24, 0xf, 0x1, 0xffff68e5, 0x100, 0x6, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x62, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x2, 0xf}}}}}]}}]}}, &(0x7f0000001900)={0x0, 0x0, 0x91, &(0x7f00000000c0)={0x5, 0xf, 0x91, 0x1, [@generic={0x8c, 0x10, 0x1, "81d5b9b2b0f0b64cdc13cbc4c98e0d072b0d8eeae1ccfc75154f880440753040e92aef34503e01d9e61fae11cd9aac64ac3964ca33ab91b8ae2767d12c9e2169ddf1f2af9b8827bc57ef24eeb5218cb20fc7a8fb1858dcb2d23ed45f1e31dbe4b3361e5978d8304968c8a86fded6043efa91fc73fcaa08598e019d2479a970ea9eb65f812344099797"}]}, 0x2, [{0x0, 0x0}, {0x56, 0x0}]}) 5m16.986121321s ago: executing program 2 (id=2355): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000440)="8fe9b091530bc4c2a93b97a3e7000066ba4300ecc4c119d52defd200000f23d00f21f80f1b4d000f23f8f30fa6c00f013666baf80c0f06ef66bafc0cc74424000b000000c744240200000100c7442406000000000f011c248fe868b6550a0e0f01c2360f01c5", 0x66}], 0x1, 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000240)='./file0/file0\x00', 0x72) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x3d13, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="2e2e0f213766b8000000000f23c80f21f86635000050000f23f866b9800000c00f326635000800000f30baf80c66b85425d58966efbafc0c66ed2e0f01c90fc72e0000bad004ec64660f234166b8008000000f23c00f21f86635010007000f23f82d1700", 0x64}], 0x1, 0x11, 0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af00, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m16.410339227s ago: executing program 2 (id=2361): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000200)={0x0, 0x20, 0x2}, 0x48) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r3 = dup(r1) getsockopt$inet_buf(r3, 0x118, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x400000, 0x6, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000038000/0x4000)=nil, 0x4000, 0x16) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 5m15.507780047s ago: executing program 2 (id=2364): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) (async) 5m15.283149002s ago: executing program 33 (id=2364): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) getsockopt$nfc_llcp(r0, 0x118, 0x1, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) (async) 2m45.133972707s ago: executing program 0 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000400000000000000090000003000038014000200776f32000000000000000000000000000800030000000000081801000100000005000800c2000000"], 0x44}}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xc0, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000010}, 0x40001) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900010073797a30000000001400038008000140008000000800024000000003090002"], 0x68}}, 0x800) r3 = socket(0x11, 0x3, 0x1000) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x200, @rand_addr=0x640100ff}, 0x16e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x33e}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r7, 0x80044944, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e20, @empty}}, 0x401, 0x4, 0xffffffff, 0x2, 0x4, 0xc, 0x3}, &(0x7f0000000140)=0x9c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast1, 0xfffffffd}, 0x1c) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000ffdbdf2507000000050005000000000008000a0002f1b7c898ea090012e0ac66202400000006001c00d217000014000800000000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, &(0x7f0000000140)={0x0, 0x400, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "15b1852cb045d7fd996ee4ca53c9371b"}) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) 2m44.953270889s ago: executing program 0 (id=3081): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hpfs\x00', 0x8000, 0x0) 2m44.931836282s ago: executing program 0 (id=3082): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0xa4}, {0x9, 0x5, 0x9, 0x2, 0x10, 0x6, 0x10, 0x7}, {0x9, 0x5, 0xa, 0x3, 0x0, 0x2d, 0xc, 0xb}}}}}}]}}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, &(0x7f0000000200)=0x6) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000001100)={0x1000, ""/4096}) close(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)={0xfe, "1cf11f0cf3df06723d68cf2e34bec1fe7aeb2e4f9bdca646c4d338b97ec131354c136ec6cf21a7fd51f27fb956a8ae3885ea642da767ac5f7080830a09b0ff10a4e89e90677c4b675dc78817f1b777a16c084308ced3efc24ca6c31102220f5d34355338afe106101839c316ef0f88d2fcca226daf1c10a3b4d5bfc8a48d752e7f4a193c4b146ed8108bd5fbac85d2de914e1e1f4fd94decd9fdf1c7af946b07ccce200a7e5e20ac043bf7f8dcb806487be0accbd85c4ea1dc15bfee959c453bd5382b93ec14d8cd22c31ae731cbe7526b49c83607a4d6d0184af37286c08c9572e8b83c8dac93d59d5bf5767d5cd3c023cd121bc6894b0449b66a83345f8720f9113d0363314516e93cb1156ed299e6311c6c27c40a0827950000dfbc97243266bff54d143624911e7dd42e6cfc53bdace1643feecdf2b236a43f15c815cc95c6dd597a69d1e43791827ad87ec72c556ca24bbdfaa226f2367b76559dfb4b668d9b18bb089124f45be9c870cab5973d8a7488703e0c0704777129845591622a696f225bb81d93f5c72683e9778690770fab6750f3d8ff3162cbf04e480a6477baa460b3f8e457a7b8bfdda324330accb61d513420c4db90797203eaf78e28160ebda297f435c87ba621e550ecbae53a8e48fa9ce5b40d578f6d20778fb060b7c6706d2b842596148cc25a33b5beb9071468af7ca3cebc7b57391b6b34f8d7b9"}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa0, &(0x7f0000000100)={[{0x9a, 0x4e00, "17f4e6b7f3c79cd528ef70c106a4653bc007185d5192afab603fd006e3d1ae8f1bea4930a98231c0da2f579d60fd9c38484105bfda62657825a750fe39d3928371a260d1f1cd009b5c498c487b69bdbf294e4b940ebe7c5fe9e17fb83e2429fac8939f8d0fa363ff4b8080447a6dd7ec82ccbc33438d640ff95bee758d18c2abf798c5129378aa82d478970aa9c7ee8247d2fa5b59d357622abe"}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x3, 0x7f720001, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m43.165176073s ago: executing program 0 (id=3088): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2301091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000000)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x4}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4001af84, 0x0) 2m43.053329343s ago: executing program 0 (id=3089): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2000}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000480)={0x8, r4}) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080)=r8, 0x12) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x350, 0x16, 0x2, 0x70bd25, 0x25dfdbfd, {0x1}, [@typed={0x8, 0xbb, 0x0, 0x0, @fd=r2}, @generic="4dc4b3f6b3d700adbf9ed1d940c7ff0d7acd8165475fc3f1004d1f157b5d280f306b3ec76930b112b8485b836be17191f63aee8e1889d7b244b3444cb2e9c3da9e4b0c9d7fad9b24c1e07767a196b28c10d61c7d81a44c8ce2d77d8fb1f1e7961bfb88bd360346a69936aad2a8c0fd7d7dab7f19db031e2858bc179139a0f856e42e80795f356032da6f4fbc8467f7691aafde3278d019cef5f7", @nested={0x16d, 0x9f, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x4}, @typed={0x5, 0x45, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xd4}, @typed={0x3a, 0xa1, 0x0, 0x0, @binary="dc5abf6cf20f6e9e82c2808f710ca7eb5a289247a1e14c47eb0fbed252e0300bfd6472f180abef46a0cfe8acf47876377c5c5f692a82"}, @typed={0x8, 0x14, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r7}, @generic="b2fd80c8930bc9e8af398e8e31bf3c1997c953a40deef2a74cdab19b570fac4f09f1087053f487f4ce422d6fedaad51737c9fc166e27e72310a66bdbab8d335486756b3debeebac9b64ba5e7ddb30601a95f04ff065b91884af22f89e69a7b469f9597eea332ebb39052aa1ce26feb8d05e3560c8b49374332c2228194d58c061a79d00dbca97d1a672f1cbfcad207e30f4447", @generic="89f20b9f45e7e88cc236b544be308800722adbe76045563a80ff8458ca1fa7452fd317ce2417bbfa7fc97280b149b2333ff1b3bb2b98117ed02419934b05327af13bfa2097d0f602a5323e0278915cff2ed12d5632c22b103871"]}, @nested={0xf6, 0x11d, 0x0, 0x1, [@nested={0x4, 0x36}, @generic="04d158c58fcaa6591c5b8115051fb442ea8af36105877ce45611f8d2d38588da4efdaf4fbe5b4735112fcd1f2e7bce0144039fa946ee60edc7d72c939fbdd70554d93ff2eb67ebcdd98d0646520b022e7484ffb9ad5a33b39febb536898ba60123445f13839238a487d654b4feff11f5c01ef5e3482ae1195c25dc87e0b32190155080d5d8a298412f93553999e1593015c1c71bf54ccdc2b83ff21498c2baf1857eff9202ca2a2f2f435e87e906a7bd6531a74c48de96043830988074a064c857e4599cdc5c49fd73575a10a6ec840f87196468b76790df50f3d0c8a7cc21960e2b1b2ff76b3396fe0e", @nested={0x4, 0x4d}]}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x10, 0x82, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @uid}, @nested={0x4, 0x136}]}, @typed={0xc, 0xe0, 0x0, 0x0, @u64=0x509}, @typed={0xc, 0x137, 0x0, 0x0, @str='&$!)\xe0-%\x00'}]}, 0x350}}, 0x800) 2m42.769572205s ago: executing program 0 (id=3091): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) syz_usb_connect(0x5, 0xf5, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) 2m42.317660424s ago: executing program 34 (id=3091): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) syz_usb_connect(0x5, 0xf5, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) 16.01352617s ago: executing program 1 (id=3571): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x800) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x6) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000440)=@ready={0x0, 0x0, 0x8, "bff96233", {0x1, 0x87f, 0x1000, 0x7, 0x4d}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x98, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x6, @sdr={0x31303553, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) read$hiddev(0xffffffffffffffff, &(0x7f0000000600)=""/111, 0x6f) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000004c0)={0x0, 0x1, @stop_pts=0x8}) sendmmsg$inet(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4020) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197"], 0x1c}], 0x1}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000380)={'ip6erspan0\x00', {0x2, 0x4e23, @loopback}}) shutdown(r9, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x100}, {r4, 0x3020}, {r4, 0x200}], 0x3, &(0x7f0000000040), &(0x7f0000000080)={[0xf6c]}, 0x8) 11.047902042s ago: executing program 1 (id=3584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x8, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x8, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) 10.88953435s ago: executing program 4 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008000300", @ANYRES32=r1, @ANYBLOB="5b780280b26a5bb512775425d49204860b4afa5017e4246d963b907a"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 10.809399632s ago: executing program 4 (id=3587): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002000100000004002d80"], 0x30}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x35e) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002000100000004002d80"], 0x30}], 0x1}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) chmod(&(0x7f00000000c0)='./file0\x00', 0x35e) (async) setuid(0xee01) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (async) 10.608944925s ago: executing program 4 (id=3589): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x1005, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9b, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x3, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x101e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x808, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x1, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8003, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0xb, 0x763, 0xb, 0x402, 0x4800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) socket$alg(0x26, 0x5, 0x0) chdir(&(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r1, 0xed0ce000) getsockopt$sock_buf(r3, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000b14000129bd7000fedbdf2508003f000200000008000100b3d2410246e639132953d6b20100000008000300"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 10.048986509s ago: executing program 4 (id=3590): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x446f42, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x600, 0x0, 0x1f) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002840)=ANY=[@ANYBLOB="d80f0000", @ANYRES16=0x0, @ANYBLOB="4800291853a3e6bd7000fddbdf2575000000080003002e32944918999ab79d7537b877a101f442ec10aa0141282eb4caaf4c421fcd08553ad7453456738abf917da1e544a3cd99cfc10f1a988ba458df313d4451", @ANYRES32=0x0, @ANYBLOB="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"], 0xfd8}, 0x1, 0x0, 0x0, 0xa0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2301091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @empty}}) 9.117484461s ago: executing program 6 (id=3594): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x2, 0x79, {0x79, 0xb, "be63f9be11248e4fae16a017d2e6ec030832c38a6dd919540cdd62e2a3a61dc766811d7371340d8a620a9b3067f93f27b2dd8c0ffd645dedcdc97dc7d1ccd5de3e14a40cda50630de499b537bb1769449a044803bd0be6a1156dbe50586cce8c6c47f94d77e225283ce4ef2cac6f5a63884f6dc6025c35"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x18, 0xb2, "f614eab4ad991757def6fb683809a899b0b4fbcbe3726d3d2d991ca7694d0de6d975a2ed4957c92de7ed57464e4d5e347267cb17590fd25bd6332146f7575d32a5bb0c701fccb4a7cda46777a90c5fc3fac03f07c5fc9561f1286ba2e5201ff0a996d0cbae9bd306866e9705c4ba3b0aca358d3857ec1900a25498f4ab7c49b8c98d328f4981c261a13ad694d4aff99aa9c4312d8511385648606272abe694f4d7a15ac0783c1ce94e57042c8ce99b757dfd"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x60}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x2, 0xfffb, 0x7, 0xe2, 0x7, 0x4, 0x8, 0x8000, 0x7, 0x4, 0x5, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x4d}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 8.877440889s ago: executing program 4 (id=3595): syz_io_uring_setup(0x3941, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2000000, 0x2ce}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r0 = syz_open_dev$audion(&(0x7f0000000000), 0xb, 0x52f500) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0xfffffffffffffdb3) 7.424863328s ago: executing program 5 (id=3596): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x37, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_usb_disconnect(r0) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r7, 0xffffffffffffffff, 0x0) 7.262132627s ago: executing program 4 (id=3597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'batadv_slave_1\x00', 0x410}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x0, 0x0, 'syz1\x00', 0xffffff7e}) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000000c0)={0x9, 0x5, 0x81, 0x4, 'syz1\x00', 0x10}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) (async) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee74691720b336fe8d91819450ec3b7856bb40da0b53813de201023f0fc5141200014000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x0, 0x0, 0x4, "83d81bf2"}, 0x0, 0x0}) 6.246246882s ago: executing program 35 (id=3597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'batadv_slave_1\x00', 0x410}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x0, 0x0, 'syz1\x00', 0xffffff7e}) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000000c0)={0x9, 0x5, 0x81, 0x4, 'syz1\x00', 0x10}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) (async) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee74691720b336fe8d91819450ec3b7856bb40da0b53813de201023f0fc5141200014000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x0, 0x0, 0x4, "83d81bf2"}, 0x0, 0x0}) 6.241515539s ago: executing program 6 (id=3599): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1) (async) semop(r2, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x78) splice(r3, 0x0, r6, 0x0, 0x3, 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0xbd, 0x80800) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x4}) (async) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x4}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x7, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x75, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x6, '\x00', 0x6}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x8}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f0000000280)) (async) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f0000000280)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x3) unshare(0x6a040000) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080026bd7000fddbdf25010000000400018020000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5b1bc57aae128e4f47cc7ea6eeaab4918f48d162596f88a0c651cda665b6cdcdeab1b3fa5a852020b224add63a044ea12f4b71e9c5f17c56e7f02b30e74ee7295f8b33cd9a621d9c4a1c806e589d969dc3d927fdef7533309b12f29416ba57d105e632ca62df79c4b028f84cc072af694574308f8ec5f3db99f1ce0e74797c65f71050d36cc4608dcdd863cd3e5e2816c979e2df85dce1f2b0b61edf31d1fe0188d2157cbc8253edf0ba40e1e7f7e5c9d10bf119a44bf7ba261e6afcbdc1a982d657e6b66fa520b4ff68125f0c1360813c8a011c2e272781900db336e23f5621040700000074c2eb55e36db8c34d0149"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'ip6gre0\x00'}], 0xa, "3f160c393984e79e72645e0d5d3960f7e8c5077a35a6aff77128aa85dcfa662857b15a597c619cb663edaeef1ab9dc9e115a1a51"}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) 6.239482896s ago: executing program 1 (id=3600): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0x16, 0x2, "ca15"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0x16, 0x2, "ca15"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 5.897822599s ago: executing program 6 (id=3601): unshare(0x22020600) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0xd]}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) socket$tipc(0x1e, 0x9a17a2836d9c2063, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x4000200) (async, rerun: 32) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x4b84, @any, 0x6, 0x3}, 0xe) (rerun: 32) 5.755167858s ago: executing program 5 (id=3602): r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 5.656947711s ago: executing program 5 (id=3603): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r2 = geteuid() quotactl_fd$Q_GETINFO(r1, 0x0, r2, &(0x7f0000000080)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x8, 0xff, 0x1, {0x22, 0xc94}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9e, 0x17}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x8, 0x5, 0x20, 0x20}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x6a, &(0x7f0000000200)=@string={0x6a, 0x3, "b065132f8300dc2a10701390216b0f37c726b1c8d8e777ef67c4e4311f4b6770380fcb9e02ad4c93b6956ab1a43ff8e41e5a8940d4de95191e5032810b92fce8353907b74dc8aba90490abae6e15df654df2c85ca7ea535faec4eb3df0cfaf4deb2a14968c60c8eb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x73, &(0x7f00000002c0)=@string={0x73, 0x3, "412b9cd9b4f95e6d0a32d57095161e4eb2c742660901f7222a0078c27fde41d25bb0d21edef196db4406d9ece4a817c0f4cd2e1d938196d1d9093f31c781b9e927f6b06b1ff0c23228203d9f73eb896aa371dcc7bf69b52d156dbd79d99c00838cdaed4303d99d588af4309c2c6133b824"}}]}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0xe, 0x2, {0x2, 0x29}}, 0x0}, 0x0) 5.532046098s ago: executing program 6 (id=3604): r0 = syz_open_dev$media(&(0x7f0000000040), 0x20, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000169000/0x400000)=nil) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x5}, 0x1c) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000000)={0x2, 0x300, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf0, 0x20, 0x77, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x14d30b1f84f7240e, 0x8, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x636}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xef, 0x3}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0x7d, 0x4, 0x10, 0x36}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x1, [@generic={0x1f, 0x10, 0x1, "5ece4cf702787c08f699abaed01bedfb50bdec38273b294b6858bb56"}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x53, &(0x7f00000002c0)=@string={0x53, 0x3, "55d02ddb2ea6c0f0d0a8f5170fd5c7f4a0ddd909d6d8c30a4a6bc595b86196b0dff388c05ce08a3a7ea5ba297bb519f5ef0996b543cce8cfc431aeb85748586f1fef973b77fcb81d56567a36857775bdf5"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0xc, &(0x7f0000000380)=@string={0xc, 0x3, "cbc77d1e897a6dbab51d"}}, {0x9f, &(0x7f0000000400)=@string={0x9f, 0x3, "ad0d16449150102cbce6d48fc05ec5f66e223bf1576c219c4d260687023af1755fca98c0f102db63629a0ac74b5771f054f14b9325d8c579cace62cca343aae477dd7cf27a742d3d6a2366861c616514fc1b323dde079fd8821f3cb00ee22396d8ee4cc56bbcffb24cae8bbe562660611644475510b377e22c14d476bbc00f338604e7f853e53a0ec1c3ac35f96c3c3a4f48c5398e690a464466e8545c"}}, {0x40, &(0x7f00000004c0)=@string={0x40, 0x3, "28bcf098b9bf8801723f1fb9b4e03ccc085553ed5128c784579ab44c2a696a3c3092ebebe2bfd705b796bb9f76b716aa11fb8231cc15698233ab3eaf28d2"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x861}}]}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="64010000", @ANYRES16=r5, @ANYBLOB="010026bd70e1ff0000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.785313012s ago: executing program 6 (id=3605): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2e, 0x0, 0x0, 0x401}}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x919009, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, '\x00\x00\x00\"'}, @main=@item_4={0x3, 0x0, 0xa, "cf923072"}]}}, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RREADDIR(r2, &(0x7f0000000040)={0xb, 0x29, 0x1, {0x8}}, 0xb) 3.474724638s ago: executing program 5 (id=3606): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x10402, 0x4) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)=[{}, {{0x80000000}}]}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r2}, &(0x7f0000000240)=""/69, 0x24, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000040)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f87bf46370273d915ebd010203010902120001000000000904160000dec06d00"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r6, 0x0) write$dsp(r6, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="001608000300e0f95e565e82233ded874843a88a459d9100"/41], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x53}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x4}}) r7 = syz_usb_connect(0x3, 0x3c, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0}) r8 = socket(0x2, 0x80805, 0x0) dup(r0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x832f, @local, 0x6}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r10, &(0x7f0000000180)=0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r11, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4040000) 1.997242169s ago: executing program 6 (id=3607): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r1, @in6={{0xa, 0x4e22, 0x18000000, @mcast1, 0x6}}}, &(0x7f0000000080)=0x84) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x1c, 0x0, 0x87, 0x7, 0x0, 0x44, 0x0, 0x20, 0x8, [0x0, 0x0, 0xfffffffe, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 1.477351817s ago: executing program 1 (id=3608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x6c}, @nested={0x4, 0x71}, @nested={0x4, 0xbc}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) 1.042701848s ago: executing program 1 (id=3609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x12, 0x0, 0x6}]}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000020000000600000008000d000800000008000100", @ANYBLOB="d19dea8b"], 0x2c}, 0x1, 0x0, 0x0, 0x6885}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x10b}]}) 421.185628ms ago: executing program 1 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xf5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001000000000000000080001090224000100000000090400"], 0x0) 125.033315ms ago: executing program 5 (id=3611): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x22240, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'wlan1\x00', @broadcast}) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x202029, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@cachetag={'cachetag', 0x3d, 'wlan1\x00'}}, {@afid}, {@nodevmap}, {@fscache}], [{@euid_lt={'euid<', r4}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000340)={0x0, @aes128, 0x0, @desc3}) setresgid(r1, r1, r2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000380)=0x6, 0x4) write$input_event(r0, &(0x7f00000003c0)={{0x0, 0xea60}, 0x11, 0x6, 0x80000001}, 0x18) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) flistxattr(r0, &(0x7f0000000440), 0x0) lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2={0x2000000, [{0x800, 0xfff}, {0xf, 0x3331}]}, 0x14, 0x2) r8 = getpid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={r8, r4, r2}, 0xc) r9 = semget(0x3, 0x1, 0x48) semctl$GETNCNT(r9, 0x6, 0xe, &(0x7f0000000580)=""/251) r10 = accept4$unix(r0, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x80000) sendto$unix(r10, &(0x7f0000000740)="35a364d38664c8ba9b36e4cc76cfeb35f8759edff005962b59876fc8550dcf35393f1ef1c12c55764351c5d53243758404e158158cd54a936ba72efb95f65c0a227120fd", 0x44, 0xc800, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000840)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002d40)={0x101, 0x3, {r8}, {0xffffffffffffffff}, 0x6}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003300)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000003400)=0xe8) syz_fuse_handle_req(r0, &(0x7f0000000880)="a43683c2d0e8239922e54df935aae1c64686c8a04099af4b7326f8e39f7c191b17aa1bb6b5ef451c7d4b7953d644ff31aeb5313704c34fac816c41e8036da19c2656df4f1af9184ff0c3e664408317e99a1a10d3d1ecea7d5fa18a584515ff02c8a466f88ce30c9dbe04140598ecd6e5f148f4a4159f4582575f95b46d54d8b8cff0ecce2c0f36126faabb9c6b3554c7c9879f8f2791fde696261265275a932fc51f53435c93eb8e45cb21d5fdd3ff711a9949f449f7cda1bef20032c79f15cc959abdf4de0a4104f0a80f5c09eceb5954ce00141f7e92c11cac72112ce99894525c82dd102b9a42c7439c4c77426cea58097e73e710a511dcbf2a39948db30d474179fe9664db12fc3092d0935f9f69257504f32fd26fe374b8ec2e0f3f27c0ecf0a9a02ff300d77dbf6d00c17b096b685de40147e48ec241f0c048e035dc3ce2e0e6688e87bc41d984281943af09cb11368c6385326b80688b94d33addcd847639e2879a776b92eef2b0beb5e658c1e72f581ceb9eb50e7d97c6aa475bbcadbab0744b4555e1da00e3e15b57a2ea9909246a37b4b4c1691ca70be498dad36b4ba7c4cbb58f619e949f2fc2a62b382eb1a26272d534632d5302ebd8af95a6172b1e419edf10d91bc147edfcbfdf023bffdb5b5b278681d39a5b5643c36f82290fc94793af55c2c7658080f875f5a333ca3628f8adfc6192b866238c510d6dc671c8d1d481b745de51fbb0eb66ea03f65f0d17ab420ce9e0f354461ea6ddf20b1054719aea8cdd915495b54b453f5c825ba3c00ba5afbe0aee739a6cf42fea909d1450bd6dd86e0a6aa23bf33c46bd61b6387d2d80ce3fe72ad64000d5fec2ad0195f95d4ba8cc8d66b584ca7d1ca4140a3eda232049c2dfb8e7d54f3acf02706c03e50d0c30ba3359f6eb9cee478c6a63ece7780e9402634741cce5c8f83f10f0e8738531cd03b22d020b4c67afc46d865b7a96b7a00dc1401ef774d8a62d01d2189bef55e2d22132680783c4857b986020c3563e2592307b56fb5a509798d22becaa886b5d99f17e55f8c27817364bb1ae586e25ac3b59ee77e6a853082569531d7a858c988aa75ed93c205f507f885fbabc1acb4e5804d0512d788b7cb798911d01f5b58311d98802b04f0b913747da106890187d4ef93ec7a6e234ded3afdedd80d13740f1864d8abf11ae601943991c8838cd12e94aca95dbd080ef5405a3303714915ce13b17bda7d35f7568e7230689292fbb8c404552e4940aa5dc9004b4df09162020409f25e797cb443a6acd50042cf29af3fc23193fcbd2cb846f4b49547600cad5dbe86f5b0f95d2c450477c4bf9b79c4d6c3ec2d5452935343aa669e3150e2332fbb3f0dcad5b316815302a34878e0bf04fb9f8124fdf80333548d46b08ac20ff92145cb252fd3a31a1f696245f3c2dc7b598893a909c4b8382f3767a0efd864bcff81d3a8dd38c36d60cb6904fb9efc6dea949b2ebb60668aba7a0599c2aa569194bbe4dec588db7b773ed79297c3756ab35df4574be8dbb461021a417e5db45b47abebf1bd7d8119ee607d62dce99d3aaed7017101f1c268b0b6bf009ef13f13b467a8041bb83e6b412badb79207a3cd4905ddc4db15180793b94a073b50d4ce0d6fa9e29d466273734c5bf85b8d52a0eb33992dbc6b5d4d87f1e0e710560a55e9e5f0c7b12902c3aa8c876d5443fb200b2286f300e577fc5e541d997a28329b422c28d5361ce4a3f79808c045ed103ebe28940177d5da1d518163741b8483f4946a49501976beb9621304d799dae8447d4e0427b4b3c4b218a6a1c552c3fdff5b8a3d5a24061b809dd6e0d32ae0b478beef0921333018d09eea8a5e6318c11f947b1cd7771319ec9cb6af698c1bdd6e47047199e84f160e3a31d75e4871528d4012da1be8bf5d96df5698fc9c42134332c60671324fc4265bc608c62c658403184299077619fa58546c785bc574818c28d73f30bbe721c77d114b090fd3154c4d641ade7dfe9995a8aa424b9f004078ba77cdcd307a8160615b497f7c5aa5b7899724b403bdff86ef50757dc84efab6ff37a308d6b6795d06be0dd0831257bc9be59fccfa5763fa2cc6e6a09522ec46e06065797f83e5f4ff3588aa3247f11a211ca200b5bb8c86f251d4229dbab456363857068cc1bdb36df76a64d4473896db72ff0d74d0f8d939ed664d3f17aab1db88ee9ffd7749b5f72c1841b55e107fb7bcb9eed449c16be34232f33f221dbcaf25901acf7a467e69e3672a3b8c150ea41239916d8b592567ac87db1114ecbc05e3cbd3e090e77cde46f778d500ff02d5166ed3aa05bd34f1b4caf46528d37ea7b3615477dca4a4c259f63b062c0626380db604b99752a8f644a3d2cc853dd89a31cb56b759a2faa7b2ebc0a9436b8814a6798b4ac1946fc0debe26590995549e8b1836a5d626b04d9e61047ef752af2ea74bcec10521ba78a465afe836dfa0c279aa6ae2126ef7b366ce220179f0f9a69a42f2bfe20759314b3dd43784f8ec4dca3a5e7c13090488e348f488a810ae3c2700183f8f95683ff564beb8df6733b952760fe2fcdd573d4776d06571a2ecde045e14bcd21b314e0fec5e3ec58cde984bce21b4be5712ed46b64e87c316b216f885a9818e33a8816ebb00f513d0824cb839ee45324d71dc1961da9f0f144836433defd9fc218553cf1a12698979ade1ee379213c2e64c1f8c033e1d264867e9b48ad86781c9315b61c37256d38a5d3aa9979e53cf959cdadda2fc442f028dfb645da40604e0824130bf8802bc969e5e2b17bbcb0ee7f025c9a4ea9bed1cad9727929e50902e8b1cb5fa368900837b766dd807a5f2ccaedbc3ad7572fd732d14dd4828597ba80791f5b25d3251e2ab717457837d314268b47abaaa3edd4c7283627e4e1c7ba9f864fe510133736f0fd5df3fd6dea8ec9c164dd5f7d1109c0329492f605746e6fa1e13e81c0351c8935d337dcda892d70a66d6aa1ea62fdfadeb3a5c83ed31454974b17953f93c194cea7dff027b3f31a1affbd39f483daaac054bb5becf4e0b775f3256a0f249c0efc114e33b5723a228a16c00df6089f9316aabcd1bdbd52ec98e428f42502ae2f79d89cf5a52adf02314c29bff0e6bd23e6f644b0529bcf50d4962b8b40130db1861b7483e44fd81cec938b98488f1cf7ba4bd0ec1b17843e9a4f0ce1a136f5bb451088c0a7af544f0e502f0f0528f26cb892c6281aef89bc2f37f9679fab0d60d6ed0240f720c764fca8db65ba09dea0751faff924511a1033762a103b3c431db0d9ba92414332be786c602d00896128db721adf0dbf06365408bedbe2ea0b15e8cc3a41172c64e9a60dc45f985f44b7f2da0363dbfaffc085594aad1a39f1c2d682598c8a6f645de2cbdb5f20c19ea5573fa863e9210a761a714aa8c7ebf71640e7b4b98ab9c9538bed612cc229536aef42f39901d7254f0289dca3fa4fd58917d28cd81ca32e81c104491070566ed09e0132350d896568191dfc39112defe2ee6a9529037672ec116ab3d47c31589116bafa7223a7682d58de35b230e029fb159ec5f128497c45365b82edb305bd74578ebe0e39c34369062b88547d3ecdc517510cac651349576a0966bea990d3ed171bc843a14628ec7807a15b918373c382269a6caa13d01d6dcec5d3cf0d071c902a039f9b442ce38ad70fc8bd08c1198eb8f2943e3a89f3f28fdf150bb91ddc62bd4ec0d9d1acde0802339784b68afcce38523b37ef208a083104ee9bee0119f9fe663a54440eeaacc8dbee9756b19c034a3c164e77eaccdaf7d0c7b9d0ab29abd2deba2ef8286a35ca6e2161dfb3883e271fcd232e48ccbc6c2bc606f84ab33dbd9bcbab31f7c5cdd89a89a432eb3c787ef15ae900a37f67d657f1bcecd7af36aac5811de42de7e036d5c2f9184054a364eeb0e45ec9f34419eb2bbad07340a5d26f82af7b35142a5f4fa7f06235364cf483643918c675b62fea783b3b62b4bc5b015e4734641ded9594a7d2b7425a098b9fac937a621580039fe9ebae7a2d0e5312b6832f516b6c79af6709c4c94d2c18ebaa4ef0943a34bae715f1af7479ab55e10c83c7f7b82becf67fc0181af3ca65fd45e0a136a986e468eda16257ff1b7e32768d51ff54013241402ade0bb2f3b390a87e860287570df5db77f87e8c0e1d2a4ad554ad3fd499d2b2b2c4e594f5e614f5e692e2cf78fa290780a697a562418bfac822eecd26071945fff7ba21359649253b0f8eda91a838ba4a42d7427c21e1da7bf377bef0b27f1eddb3021797eb63503ae737b8d4416398ec4c83309796feef870aadcb7d20bde57b8f5a8b1232aa8c26ddfcf719736fc0fe5e33d3387f2990ed9f81e092b369fca62a1d511e518505d4ba217688a06a10d92a49581403fec254fba8bbf3b5b5d0ca15a990cbd3453bff007588c6ef67636dc73920dbeb27256d925a9a65bd0e6453bf758bcbb7014620cd1e61c192aba0109405310e92a89f8b098daeb02740f9711425da25b6eadd8a5e6e6c22c605114e31fa9bddf6522cedaa6a8d5f66d6b2e438110d4501b168855f48a0ceb3aede6ccfa1485143a6edc79370ead1ab91adbe0ba266deb57dc2e9e8acf7fe2bf5b5340111b31f9cd19e6949fa3ba36c97cf11fbdedb8cb8372f5266bf52b5c07938ee89dcaeea75a5924963516d834362c4779fd4c157b664211ed0d76a37a8e6c3ddc5439748adfe56bd1ea3c9cfb4fd13f2e99bab5229d91291911ee8b7e9a425e87dd954fbe4d2a3e901a201ac5d6363291a7eecbd03b3e3201deeecd4dee170a13e554e633b56f4b635159fe7169658c5a2fd85145f4f613d340710ca5035499fb67332e7cc16497b84ea0cf7563a7d5853ee0fbdae3f3b19ee1e0eb250112ba7ec42342d386c6e0cdbc9dbe6d22e0fd5177e27b4c8a1a11c81e59e47467cc86258b2bd62260d35307c17738dc5336ff687c36cad4e89868efd3cf7cf39993310150abee4102c0a14e93dad29406c1f933fb30466af444f246cd1514999480fc89088edf8b7030c8400a593eb88732cfdd41dd294fe6a8c242b32c967ac4ae36a0e453703e2b02c430d9efe7151eee6bb98e6792e92d239654cf83472076e4756c92b17cc33045505084f0f9a360882d9ea95713f5f340d8a21ba77430ff650afad4a1582bbf23beecde86c0d91c45cfffbc967810dc77cd2b22c2e1357d694b7f97536043def3c00bf1499c3334cdc74bd0792836dd2ea049dfa72ac616713a7a1ac0312bc709337c1aa11c36820db40517c0e0772736b6e81648fca4e359bd60f375a12dced0f33761c4a5c56abd087d8e47d75646d2e024fded90638664404fcb9d1ff56ee15901cacec1f0f330a4735ef3074cfedb668835660742f51ba518edb91fbb9db32fa8ff930b81f4c2c48da9dceeeaa1f886bcca074479a66e0fc9f1d6e163aec321f95160475f95a08ee0d7423ec80a49a15ef049d29660622e8cc4b0516ff303c8360879ca109d7804335a4b8d0036356bbc55a05d0146ef70bb6987fe6e5f17e70dc8e3dbaa5d46def836ea1cce7dc110cc5372014f455a222439212157f64849a767cfce2106bc87d53a4c85fde5080ce1fa7cb83685934594e1102765611bbeba69fa7d010c4912d268e6907c69f90b126ae7ff0a5d8c219959fe0495e672aa183214ca661a7fb3dd4944bb9613d2b433a86e69a919f4a86fb0bcc4a8baee9b3ed5bd52f40b5be97f20b76803e920804ae2a5e3d303adaf68a691c69e03ef992325e3c32a23e27d1d0b590599c5af8b3df2e407734e7ae85fa9700f4fcdf500483402d397b095d67bf0bcbbd9fc17a305c8ce53d0e2c6a1df9cb5934188bb983529c2ddd95869a629cd1b2b55b4f55a854b1d035e9189f11cb229d6fd310e8566159458e43406bcc28882d7d517115a9a2a6f6e905893f7c35bb71837c131f1eaac3a97203db103a08bcc1a4e7b9cad193aaee045158c192a96b71fc643356891d2e42028bea321feebf5061ab639cdca51ee2b7c660743e773c1024f9018d5e9992bc11b402d8bde3fd21ee10db39dcceb234a47cf55ff4b30a9989a99e3deb58d44a1ae66e14088d8d8e3a1c76b286ad5f083797535c6043f61e33f0d2c9caaec0eec65e0c7b2b7398718fdd4cac7af6c2298b683d1536082ac86c47ab8e6ecf2a8a9722046f876a770d65612ae29fe25d46659fbf0d5a20910a21abb55196dd49acf4711874a00d29402821cef43cd9b3105c2f50d7283e2dcd6c918d4ae4a28569f081156079af9911478f5b7bb5f7d5a1dff5243d0ae9979e67698391abc0a71bef440d784df159a7f22817290f2247ed0f7926c3dd860ed3c0d5243c2a58304bf8dbd29bf637613b745fbbef1be323fe567082f6e9b86ea5355329d4786be3d8888c3450f8ac1908f8010a0d5396baa7b06657241b50f512a1529575af59ca95450f4473b2997b6a78d92a6c5c922457b2731bc762198f04e54bd8615925553018fb288183eeacfde4d28183ef792db1939e202610cb53e2d0f607ee309b43688a33637ae9cb54e42aa973efc8f5b6c41c366d8a6a9236c199134addcffbb78d871b5e560066971149b3b4b900c13b86dd2f4b0ffe0a2a9320661a61269b16e5b29b5721a8dece876ac789412a12e2fc9ed8309a5a11af8e0d27df60fff5250e1ce9528cfc16b4543e29e4b4ed38a6e5291caf2b71184a8dc07ee29a7cac4f25839513895fae39c42e102acc91db296535117ae36719d4d10f844812507529b24297dc4e1e71e5ebf6a769d3761e61ccde11cbb186b31e9c850c2128b817402caa8b77912cd81199fa5a1c67095a48cee79dd0d71d1d0a77ceab2fb38a8bd526e39da63ab62169f1b049e8b50777070df6797066f8bfffd1f7e660e01d82353e669676dd090ded41f3ab30e4bce3d0e8e48092582ef365de8dc8e75e479c3fd0ab8a4b7517f82171de0fc6d18b2f03ee24da78bf9af784ca011c7d7e68c1af02e4e9aa7783977cb9706d139557e9c5a24ef0b08e2ad3a73bcf1655f810549c791fa247b804d21f14f037097f425c3c8baedbf7adac8e20d600f37b7b9136e49b56429050399b5973ae8f731e742fbcac54d36d3cc78c7ca555bb5a0f6e17451ae74a71f492012a1c606b00fd0a251609a766d5e738b6104d557a3814941e3a5111ec8918a2df5a11c59c35304bff044fa5d14f54183babd26f1e9746c039a640aab939c70e7e597fd78a9b4b97ae892c9666938ff224c69f44da1d6020ea508f992bc9681311c7f7d302f4b377d829e5a5bdba922efe208e948921df3d867816f729f444f2a95eddb7b83544f16bf4f243c751ad8ea7fd07bcb6711ff6e1601cea4c5cfbae47f5699d83a06df8967243a1040fbb43d67a4cb0785b44309b514fd5b16a995a7fb7d1e542051eedc719b8b08c2db24b3b93b8283b15d97afae9c3a60d32f813449f6a89b5ad7c3ccdbcc1caa2518f5a632e7adac9f09aba8b156f47acf4161b9613e66cdffc84215114e3f218e5cc05428f37433fcbfff32f3332f3faf2d1fded0a4e773a2f254c3a03636dc018fb31ed6d1a90a737b1dc9a2487e5b95aae0252ffd9e299eb2922e99fdb51259ca0e0e24f69031f9cebc0c060ccc472b5b200d810bd46adae947f82b72ea165dc4f1b31ae4d04f42baccab704d4711c4fe76a3f981be8b0f02b3a86555fb4c8001162fc212d89e76bc0cfc791d88fe90108cef898ad50a46b7997feef56965bb255baad19ed50fe63beef2dd5d8d918e219c930186df8e05c1727018336d0670a988dc05d459acca14dbb2d97c542fc0244aa6dac72c8ee0ca1097ee90d9e1eccccef980fa1860734163debd0a0ab7519d527d71d9fe7ee5f48837f2d6360f73a1fe9c2d2e2fcc2d70dd9becb33863ad1ea9f2456806f4dbe0d5c30bae20eeaa79f601ec30b42f2b5c05b31d559a6fe1051968a601baa03c6abe09946795b53f6223b7ff755943da8594067048726c3192fa10affb0d4041da610d6ca0733995aee68102565387ec142b2bad4c91a2a7e7f2f754374e9392576accf06aaa5c17067221611073980f6b065e0c60019ed8f0e90bc7bf8b72432036e59f3283e2279f42c9598dd876e058c64e78d89825fc3c66782a5ecef44b1da9619137a9593aa1018e9beacf61ac09a9ea0177b5fc5acfc42eb9d15fdd01193b8af1fdb8c94a990eca87469283a0e0382699ad45afb197b13e501ad2526742cacaf2f71a5bb315daca124cd1742328fe3d4ce0214cb90959ea194b72502e0c5d4f2777cbfb3ec1c2633dd7fbb8527390845f461f041e2bbe400884dc0f06ff18e18f3a0fbf88e6bb4c5043be59a9d8036f5098e254f6911b94f65643491c2caab544bf79f0c901f71304142f09f0311d64409bd02266b57db725f9ca067a40e7db51d42893226b06c9c90d31c21ea0111d057ec64007073b922eff4a125a9189a04bb1825b68d6ff1e0267f185410f2c4ce26b79bf4d47acc3c52df8a3602850e1c162fee5fafdef716cfa9e11bf17c919bed8597e57a154fb105a75de645fa20f400cb4360d60ff9631827fc6990e15a4a88aec58e9c78898455c50e93b4a50172c0302f0d50d4282cd251ab88e463598188088a88d4fa8dc40e1cae74595a91670b9f6a1f641e55fbe62e84c74f9bf26cb7ba78c1f89789d2a5a66dc82630b7f1539380bd0dd253f4a10e54f406acdd5eb89e1615cdb642d265ec2944e220ff64596985606f52d48b3261260c9e9b897787d23170f62f44c8b1b190aead6041902717a8a9c6cb769e7ea18f5528ff40530fc3419a84bc3acdb83ad6e2cccb9b5849b23f5a22abf2b17784314a7eea809e8be2dc3fe52e7af190fa8436fa20c98ed65950f5e23d8af2a28b5d4c78b53fe3e530596ddedf543a8ab9e206929d4c98459246084c9d2b61b93e275397aadae7f41ab8d26f67cc745cd04c2e6cfe3b4e72c7d13e82c90d2262dd33141f188c8ffb4390f2d3b756ce19c2965d637a7c6cfc1e9c3498ede44c7105376e0ef8fba8e26a64171ba60af310e4fe955a084b1147434e2252e43ffd3ccde17bcba99a51c5ae8e9a3821b754a1c635c820b25c0cd05e5947727957669f7c2e5bd4c6f5ce676e3416f50df36842586407d1728e00f347851e8d1d6222476c36b7e8b5a635f217588a64aacbfeeb3e91fe47b61733f30abbcf0538823f089ed4736303c1a4e66e02a96cdbfb5816ac15f4152a3fcc962bee6d5f565fbc33809a8847d164d24cd87fbc4dbdb0ea8f42f2025bf66b5d256e637f1d4a7be50da7dacd08a36ea384aa92b67c06bf1b555a63d16c31af96001ad046426147f2f475245c2130cd61050dbba6b84f066001ec14369a2e34a2bee9a240d0cbcd2677fadd88daf41569f19403174ae89ee9f4ceec7c692fecfc7326cb3b26140a221b0c4d8f77b552d3c00cd1eb9adc6995c34b609521cd1b5b82f4bbdf6e604e89a64d4f192c7a34e5155ae62e41003e66834ef088b6652d006dd18d98344b08da97c71fb3a3c4de45ba6c097eb616f007c9b5355de89fa7f9c972d4665cb89f6d0d403298ab2515d0d10a208886480be72b31e2b79462671a0e6ccf71fc40672dba3db8b48f9ea1c79ec79ce59ca31e116dc32f48e889628beaf4824587c35c2e8c1e981a029b497a216608e73c5718341fe48aa798a3fcb755c404b5616eb837a087a5e2bbedd03a79dd59b575bd52d7ec78ab1f7debbfa3ba56039ee34342a8eb5f398decda1119d318568020250558e05a007026268d5bfc389c50b4764957281b2283274416e1162cf93aa2f28967f2683bba8db203c59b924a54b5a7fecb73f75f80adae5c169e13e78f96c52f674b3dabb294a9e73103b18f7f1b264daf6cbabdff81b10d106bd2e8a83f3e3e19be965c7abbeed52689098e5c62f5142cd4aa30010682f16ca8570c0c88130c41344208534b0731e52f2b519202deaeaa635a8db77d8a31cf884382c47ef0a8aa861e448a261e9f950e24e62902ffc6667da47b17fd8ebe54a3437ee6f053c2486c1d1cdfd11ace3d85dc360e20be9720d2f458edab5a48e226586d70915dc7cee3b57bbb0dfab96666674ab90bd57985578600f3f0e2bd0b7b3a12505b932dd1ebde61958357373688369774cb9b0a13ffbb28081394ca11058fee185774929fb28ced8fb4d6db17fbe6733c9be9e47edc17c45dea5a1409d3563903a4bb08ffb8872ef9aee2511a004054b85a64eca66229c685a7aa13d9c506c8d967b90f417e5837262e6dad8137360e0fbd4a6159250c25d42f0ec296325bf52839cc8bd877353f52ce21dd746164367b6dd69db38e835c35cd7fec473f165a9393404432f954e3441cab8b9fa015dcb70f87ca3f71a5d2e74e0563590118a29c40f3078f1bb30163b6a58887c677a9db9e8fc0cf889fb6c704e6eaa047a565bc562ba6c352b5acec501374564ef5c969b0f88b810b9c690b59aec1582e024de65c2ae6e74987cee87c526ea7fffd7f9a14b7c2b9ef84f96330ccd1589d911ed4cce3d02af78a62c1ac104c20d50a444f870fab3226576ea87c841154f4559be8f9edc1d1f788364248a9fecf60d6f41c46e664f45ef1141ad4bffc243257c074dd60bdcc016299ecac34050f1161577d50b110385ca0db5f6b454ec4ae3070b00147b154c161c6b38733d35d297dafaad03797ffcfd7b5ed002a387b8748f3cd409c3ee8f13935f0deb4b0f0f8ce9575bae0efb1edb65464f52abcf77189be1cf64ea089d5cd208ed6242ced638f750592541fdb394cb407e5a81230dfd38432efabd1f41291f201cf36cc1acc9938679a05d60a1ee06c297781e2fc9ad1ba485a59a211a04f279029f843d07c142c50e62290648bc49ecc773ba611eb7ee470edd6ff2ed70c63ca7dff0a5635d3a03e936304a21f4f770e1bf4f27378437bd5ad4edd8fe8a1127ba336ea78bc3e0ea7bd72731957f77c262506b47a09732750b074b750d2c08698710bf6855bcacb8b10e774bd87296bad8176450b9fff79aef1e251c3c449309036465c4aaa216c0c9ae6c58d6b86beb10e9b3ca7b462805466d8375087fdd163cf514438bbdc004d322d43a011b7bfdd9af18d76f7c0a8fd2fc9216e0925dd82d1a3acf32d80997b6658a7c595fba2509c98bb5e4859b8aed11e2d9711789e8229c31c7394164ef1098c5f5f776ec6c080bc7d0b30262dcba8df37cf5e012489d4022083127688cacf249813b7723776968d5244e91eb06c43edb2ab178d275572ffc36d89945983ffaea688ce8dd468b1689f52fc9b90f66939275757cb3cc7218f4b416942ad2ccd38d0e92c52ac6c2a658f197a09256bd2a35abda026e0f87993aeb478890d3b08722ea6d4cb23b76543649316799f976ee0126b47eaea17bdce971b16e44f01bd9d14771b33f2ac15479a509f460a65fa5bb7bc16a1c9075b0c6a9c7da97fc73acacc96429c17a523cb7577907c50deaef0f94403aba46b11a0019ed74e3df8af40027e0ee58448c720675b239e309bc217ac69275cae298370f6e5dcf80488e5691dfc6fc7659eac613fa3bc88e38f8e47755099ad5fa47531ac76dac69b", 0x2000, &(0x7f0000003580)={&(0x7f0000002880)={0x50, 0x10834b912ce0d941, 0x1, {0x7, 0x2b, 0x2, 0xffffffff00004000, 0x279, 0x5, 0x2, 0x2, 0x0, 0x0, 0x2, 0x9}}, &(0x7f0000002900)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000002940)={0x18, 0xfffffffffffffffe, 0xc, {0x4}}, &(0x7f0000002980)={0x18, 0x0, 0x937, {0xfbc0}}, &(0x7f00000029c0)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x3}}, &(0x7f0000002a00)={0x28, 0x0, 0xff, {{0x8000000000000000, 0xe, 0x1, r8}}}, &(0x7f0000002a40)={0x60, 0xffffffffffffffda, 0x361, {{0x1, 0x3, 0x8, 0x8, 0x7fff, 0x9, 0xa6, 0xff}}}, &(0x7f0000002ac0)={0x18, 0xfffffffffffffffe, 0x7f, {0x80000001}}, &(0x7f0000002b00)={0x18, 0xffffffffffffffda, 0xc689, {'cachetag'}}, &(0x7f0000002b40)={0x20, 0xfffffffffffffff5, 0x475, {0x0, 0xa}}, &(0x7f0000002b80)={0x78, 0xffffffffffffffda, 0x7, {0x621d, 0x3, 0x0, {0x6, 0x7, 0x3, 0xa9a6, 0x7, 0x9, 0x8, 0x5, 0x7, 0xa000, 0x4, r5, 0xee01, 0x1, 0x9}}}, &(0x7f0000002c00)={0x90, 0x0, 0x2, {0x1, 0x1, 0x8, 0x8, 0x7, 0x2, {0x0, 0x7, 0x2, 0xb, 0x7fffffffffffffff, 0x3, 0x2, 0x3ff, 0xff, 0x2000, 0xeb8, 0xffffffffffffffff, r3, 0x400, 0x7}}}, &(0x7f0000002cc0)={0x70, 0x0, 0x400, [{0x2, 0x6e, 0x3, 0x6db, '({['}, {0x1, 0x5, 0x5, 0x6, 'euid<'}, {0x6, 0xffff, 0x1, 0x7, ')'}]}, &(0x7f0000002d80)={0x458, 0x0, 0x0, [{{0x2, 0x0, 0x2, 0x8, 0x9, 0xfffffff7, {0x0, 0x926, 0x3, 0x40, 0x7, 0xd29d, 0x3, 0x0, 0x71, 0x2000, 0x6, r4, r3, 0xa, 0x7}}, {0x2, 0x6, 0x0, 0x38000}}, {{0x3, 0x3, 0xfffffffffffffff6, 0x9, 0x40d, 0x6, {0x5, 0xff9, 0x2, 0x4, 0x5, 0x5, 0x7, 0x800, 0x8, 0xa000, 0x6, r5, r2, 0x81c55b85}}, {0x5, 0x3a64, 0x4, 0x0, 'func'}}, {{0x4, 0x3, 0x8, 0x2, 0x3, 0x5, {0x2, 0x0, 0x7, 0x5, 0x0, 0x7fff, 0x0, 0x3ff, 0x800, 0x8000, 0x5, r4, r3, 0x1, 0xa669}}, {0x5, 0x5, 0x0, 0xfffffffd}}, {{0x6, 0x2, 0x7, 0x3ff, 0xcd, 0x0, {0x1, 0x7, 0x7, 0x7bf, 0xffff, 0x4, 0x8, 0x7, 0x4, 0x5000, 0x2, r6, 0xffffffffffffffff, 0xb1b, 0x6}}, {0x6, 0x6, 0x1, 0x1, '['}}, {{0x6, 0x3, 0x8, 0x0, 0x0, 0x6, {0x5, 0x4, 0x3, 0x400, 0x8, 0x6, 0xff, 0x2, 0x2, 0xc000, 0x0, r11, r3, 0x5, 0xd55}}, {0x5, 0x4515, 0x0, 0xffffff3e}}, {{0x3, 0x3, 0x2, 0x9c, 0xffffffff, 0x101, {0x0, 0xd2, 0x0, 0x6, 0x53, 0xbe01, 0x8, 0x5, 0x8, 0x2000, 0xfffffffa, r5, r2, 0x7f, 0xffff}}, {0x3, 0xfffffffffffffffc, 0x7, 0xfffffff7, '+}.\x91%{{'}}, {{0x4, 0x3, 0x3ce6, 0x4, 0x77, 0x86a, {0x0, 0x3, 0x4, 0x9, 0x8, 0x7, 0xe9a, 0xaf, 0x7ff, 0x2000, 0x4, r4, r3, 0xc0, 0x9}}, {0x3, 0x4, 0x2, 0x6, '+\\'}}]}, &(0x7f0000003200)={0xa0, 0x0, 0x1, {{0x2, 0x0, 0x3, 0xa00, 0x7, 0x401, {0x3, 0x1, 0x7ec00000, 0xcc7, 0x7fffffff, 0x7, 0x96b, 0x1, 0x3, 0xa000, 0x5, r6, r3, 0xa9, 0x40}}, {0x0, 0x8}}}, &(0x7f00000032c0)={0x20, 0x101b16746f327ae1, 0x1, {0x2, 0x4, 0x3, 0x7}}, &(0x7f0000003440)={0x130, 0x0, 0xffff, {0x6, 0xc0f, 0x0, '\x00', {0x2, 0x100000, 0xffffffffffffff35, 0x6, r12, r2, 0x8000, '\x00', 0x0, 0x80, 0x7fffffffffffffff, 0x3, {0x7f, 0x1}, {0x7, 0xdd}, {0x1, 0x4}, {0x7f, 0x8}, 0x9, 0x0, 0x3, 0x10001}}}}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000003680)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000003640)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f00000036c0)={0x8, r13}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000003700)=0xffffffff) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x4c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) getresgid(&(0x7f00000038c0)=0x0, &(0x7f0000003900), &(0x7f0000003940)) lchown(&(0x7f0000003880)='./file0\x00', r6, r14) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003980)={r8, r4, r1}, 0xc) 0s ago: executing program 5 (id=3612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0xff, 0x2, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0x1000000f2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x1, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x99, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x9a, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8b}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x2, 0x8000, [0x2]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0xc, 0x3, 0x8, 0x40}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x6, 0xe8}]}, 0x1, [{0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "2a85b2dd9f01e675b165c3c0dcf0d85ca2c6213a68735d7468ee5269a9aa3781d8c08b96bed84b98ec1fe3fb4f8e2a84c1c900bdabfcfd12e902efe86d5aa74fd860f8d0666bfcf50eb7ff1601b42bd383e1748590cdd4e3"}}]}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="20161a0000003b835e37bfad0ebd00c050fbbb85b6188c6b6ae706c4500fbcbe1aa9f018a430a51b16b3200eeaaf853f36492a2df6a71a45fcc3e9bfee04663d9d810ade753f6e"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, &(0x7f00000004c0)={0x14, &(0x7f0000000100)={0x40, 0xf, 0x1b, {0x1b, 0x10, "8ae3c3ba8d19bfea5cab8aeebd52ff9698d69b7944565d23bb"}}, &(0x7f00000003c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "d892657cb16b27deb9645f7b77f09e1a8a68385229933fc03d55ea92d32ec5ea933a08ef70bfaf8ae99605b8b78f26a1fcd2f024c427bf904ca024cdd35d7c0d4475403d4045e67ed1433751e6b140f792ed39b711b2304e1f4f0364b0cbfabc740893842fb3ef93c3edb5b656183ae727489b9c8d064db34ee6ce9e522f47e25286bcef321a37f209fee72dff18f70275802c2971722e5dd6df57013b6bbb30a77fd05b66038ca5a84bfba609af50c484601e8909098afb29b2e035ab4bf66c7bebe45907fa490554eb8fc5f7414d70e8b7"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x9, 0x5f, "7135d91c2a8a61e020bc954e10abba8d9b2f37275771031fda1d807dfcb9d92972d7b23935992e91cdb103e5f2b6f7328c4e401406245fd4f3dc5ebcda38f9b7c60a88b07aab856a8a06f9b57be97ec451f83a8c1c0f2c98ff54dbd55241be"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xb3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "a5f332a8"}, &(0x7f0000000640)={0x40, 0x5, 0x4, "d2eca4b3"}}) kernel console output (not intermixed with test programs): 5.284085][T18286] QAT: failed to copy from user. [ 825.292089][T11796] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 825.302141][T11796] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.316719][T11796] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.326086][T11796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.554503][T11796] usb 6-1: usb_control_msg returned -32 [ 825.560325][T11796] usbtmc 6-1:16.0: can't read capabilities [ 825.648291][ T29] usb 6-1: USB disconnect, device number 114 [ 826.716993][T11798] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 826.742671][T11798] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 826.758759][T11798] usb 7-1: USB disconnect, device number 33 [ 827.059397][T18318] No control pipe specified [ 827.170721][T18321] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3401'. [ 827.239172][T18321] netlink: 'syz.5.3401': attribute type 6 has an invalid length. [ 827.323377][T11796] usb 2-1: USB disconnect, device number 52 [ 827.733221][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 827.843283][T11796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 827.918390][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 827.926582][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 827.934942][ T10] usb 5-1: config 0 has no interface number 0 [ 827.941326][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.953806][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 827.965064][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 827.975882][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.984160][ T10] usb 5-1: Product: syz [ 827.988539][ T10] usb 5-1: Manufacturer: syz [ 827.993284][ T10] usb 5-1: SerialNumber: syz [ 828.000981][ T10] usb 5-1: config 0 descriptor?? [ 828.006082][T11796] usb 2-1: Using ep0 maxpacket: 16 [ 828.011837][T11796] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 828.022792][T11796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 828.031646][T11796] usb 2-1: can't read configurations, error -61 [ 828.152947][T11798] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 828.186374][T11796] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 828.315614][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 828.327076][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.337140][T11798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 828.351327][T11798] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 828.356124][T11796] usb 2-1: Using ep0 maxpacket: 16 [ 828.360683][T11798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.374199][T11796] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 828.395228][T11798] usb 6-1: config 0 descriptor?? [ 828.419065][T11796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 828.431167][T11796] usb 2-1: can't read configurations, error -61 [ 828.452725][T11796] usb usb2-port1: attempt power cycle [ 828.669996][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 828.679859][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input99 [ 828.730788][ T5876] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 828.826656][T11796] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 828.844862][T18339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.853846][T11796] usb 2-1: Using ep0 maxpacket: 16 [ 828.860464][T18339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.866683][T11796] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 828.878522][T11796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 828.891305][T18325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.897416][T11796] usb 2-1: can't read configurations, error -61 [ 828.903484][T18325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.919407][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.932141][T18339] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 828.940998][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.952717][ T5876] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 828.955985][T18339] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3408'. [ 828.962131][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.988298][ T5876] usb 7-1: config 0 descriptor?? [ 829.003234][T18325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.014791][T18325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.025889][ T29] usb 5-1: USB disconnect, device number 48 [ 829.042338][T11798] usbhid 6-1:0.0: can't add hid device: -71 [ 829.049021][T11798] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 829.061896][T11796] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 829.076654][T11798] usb 6-1: USB disconnect, device number 115 [ 829.098200][ T29] appletouch 5-1:0.85: input: appletouch disconnected [ 829.115462][T11796] usb 2-1: Using ep0 maxpacket: 16 [ 829.122375][T11796] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 829.134445][T11796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 829.144660][T11796] usb 2-1: can't read configurations, error -61 [ 829.153254][T11796] usb usb2-port1: unable to enumerate USB device [ 829.456860][ T5876] hid-led 0003:27B8:01ED.0062: probe with driver hid-led failed with error -71 [ 829.481458][ T5876] usb 7-1: USB disconnect, device number 34 [ 829.731611][T18358] ufs: You didn't specify the type of your ufs filesystem [ 829.731611][T18358] [ 829.731611][T18358] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 829.731611][T18358] [ 829.731611][T18358] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 829.781128][T18358] ufs: ufs_fill_super(): bad magic number [ 829.876386][T18361] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 830.277595][T11797] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 830.439367][T11797] usb 5-1: Using ep0 maxpacket: 16 [ 830.447877][T11797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 830.459956][T11797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 830.476397][T11797] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 830.488859][T11797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.497334][T11797] usb 5-1: Product: syz [ 830.501638][T11797] usb 5-1: Manufacturer: syz [ 830.508260][T11797] usb 5-1: SerialNumber: syz [ 830.527158][T11797] usb 5-1: config 0 descriptor?? [ 830.537717][T11797] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 830.547175][T11797] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 830.757443][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.795977][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.871804][T18392] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3417'. [ 831.277218][T18369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3416'. [ 831.290187][T11797] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 831.306589][T18412] bridge0: port 3(batadv0) entered blocking state [ 831.320211][T18412] bridge0: port 3(batadv0) entered disabled state [ 831.329939][T18412] batadv0: entered allmulticast mode [ 831.341998][T18412] batadv0: entered promiscuous mode [ 831.350547][T18412] bridge0: port 3(batadv0) entered blocking state [ 831.357585][T18412] bridge0: port 3(batadv0) entered forwarding state [ 831.384701][T18417] (syz.5.3422,18417,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 831.410455][T18414] batadv0: left allmulticast mode [ 831.415343][T18417] (syz.5.3422,18417,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 831.425485][T18414] batadv0: left promiscuous mode [ 831.433671][T18414] bridge0: port 3(batadv0) entered disabled state [ 831.506886][T11797] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 831.523092][T11797] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 831.530710][T11797] em28xx 5-1:0.0: No AC97 audio processor [ 831.568681][T11797] usb 5-1: USB disconnect, device number 49 [ 831.576711][T11797] em28xx 5-1:0.0: Disconnecting em28xx [ 831.586699][T11797] em28xx 5-1:0.0: Freeing device [ 831.626358][T11796] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 831.801680][T11796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.818705][T11796] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 831.830630][T11796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.844662][T11796] usb 7-1: config 0 descriptor?? [ 831.874964][T11798] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 832.061490][T11798] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 832.072304][T11798] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.094882][T11798] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 832.105111][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.113616][T11798] usb 6-1: Product: syz [ 832.118603][T11798] usb 6-1: Manufacturer: syz [ 832.123252][T11798] usb 6-1: SerialNumber: syz [ 832.141082][T11798] hub 6-1:1.0: bad descriptor, ignoring hub [ 832.147069][T11798] hub 6-1:1.0: probe with driver hub failed with error -5 [ 832.373060][ T29] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 832.412801][T18438] overlayfs: missing 'lowerdir' [ 832.422557][T11798] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 832.512120][ T29] usb 2-1: device descriptor read/64, error -71 [ 832.599710][T11796] usbhid 7-1:0.0: can't add hid device: -71 [ 832.605892][T11796] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 832.618198][T11796] usb 7-1: USB disconnect, device number 35 [ 832.768421][ T29] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 832.907271][ T29] usb 2-1: device descriptor read/64, error -71 [ 833.026306][ T29] usb usb2-port1: attempt power cycle [ 833.388622][ T29] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 833.410401][ T29] usb 2-1: device descriptor read/8, error -71 [ 833.665814][ T29] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 833.688446][ T29] usb 2-1: device descriptor read/8, error -71 [ 833.772769][T11796] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 833.815810][ T29] usb usb2-port1: unable to enumerate USB device [ 833.868869][T11797] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 833.932948][T11796] usb 7-1: Using ep0 maxpacket: 16 [ 833.940073][T11796] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 833.949070][T11796] usb 7-1: config 0 has no interface number 0 [ 833.959439][T11796] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 833.969564][T11796] usb 7-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 833.980786][T11796] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 833.993310][T11796] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 834.003856][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.012329][T11796] usb 7-1: Product: syz [ 834.016611][T11796] usb 7-1: Manufacturer: syz [ 834.021693][T11796] usb 7-1: SerialNumber: syz [ 834.029776][T11796] usb 7-1: config 0 descriptor?? [ 834.038301][T18459] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 834.045522][T11797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 834.053444][T18459] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 834.059114][T11797] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 834.075015][T11797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.086351][T11797] usb 5-1: config 0 descriptor?? [ 834.292069][T18459] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 834.299765][T18459] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 834.523833][T11796] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 834.535608][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.547811][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.563508][T11797] lenovo 0003:17EF:60FE.0063: item fetching failed at offset 2/3 [ 834.572124][T11797] lenovo 0003:17EF:60FE.0063: hid_parse failed [ 834.578637][T11797] lenovo 0003:17EF:60FE.0063: probe with driver lenovo failed with error -22 [ 834.779042][ T29] usb 5-1: USB disconnect, device number 50 [ 834.882924][T11798] usb 6-1: USB disconnect, device number 116 [ 834.907146][T11798] usblp0: removed [ 834.918942][T18464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 834.933799][T18464] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 835.001040][T18467] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3436'. [ 835.392421][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3439'. [ 835.653177][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 835.950995][T18498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.027448][T18498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.102917][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 836.117652][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 836.146573][ T24] usb 2-1: can't read configurations, error -71 [ 836.202145][T18505] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 836.294325][T11798] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 836.468001][T11798] usb 6-1: Using ep0 maxpacket: 16 [ 836.489558][T11798] usb 6-1: config 0 has an invalid interface number: 226 but max is 0 [ 836.503828][T11798] usb 6-1: config 0 has no interface number 0 [ 836.521106][T11798] usb 6-1: config 0 interface 226 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 836.543899][T11798] usb 6-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f0.56 [ 836.561017][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.584585][T11798] usb 6-1: Product: syz [ 836.588850][T11798] usb 6-1: Manufacturer: syz [ 836.594763][T11798] usb 6-1: SerialNumber: syz [ 836.604957][T11798] usb 6-1: config 0 descriptor?? [ 836.610832][T18499] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 836.671024][T18515] vivid-000: disconnect [ 836.794571][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.805661][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.817570][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 836.867216][T11796] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 836.882972][T11796] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 836.894630][T11796] asix 7-1:0.34: probe with driver asix failed with error -71 [ 836.912290][T11796] usb 7-1: USB disconnect, device number 36 [ 836.990699][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 837.009916][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 837.020243][ T24] usb 2-1: config 220 has no interface number 2 [ 837.041873][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 837.074138][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 837.081087][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 837.095389][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 837.107975][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 837.138109][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.146273][ T24] usb 2-1: Product: syz [ 837.159544][ T24] usb 2-1: Manufacturer: syz [ 837.164205][ T24] usb 2-1: SerialNumber: syz [ 837.473252][T18513] vivid-000: reconnect [ 837.526879][T18523] cgroup: noprefix used incorrectly [ 837.540271][T18523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.551668][T18523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.714938][T11796] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 837.875611][T11796] usb 7-1: Invalid ep0 maxpacket: 64 [ 837.887039][ T5876] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 838.014122][T11796] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 838.035511][ T5876] usb 5-1: device descriptor read/64, error -71 [ 838.176209][T11796] usb 7-1: Invalid ep0 maxpacket: 64 [ 838.182668][T11796] usb usb7-port1: attempt power cycle [ 838.291872][ T5876] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 838.430768][ T5876] usb 5-1: device descriptor read/64, error -71 [ 838.548290][T11796] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 838.550431][ T5876] usb usb5-port1: attempt power cycle [ 838.570310][T11796] usb 7-1: Invalid ep0 maxpacket: 64 [ 838.708600][T11796] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 838.732711][T11796] usb 7-1: Invalid ep0 maxpacket: 64 [ 838.738443][T11796] usb usb7-port1: unable to enumerate USB device [ 838.932968][ T5876] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 838.955230][ T5876] usb 5-1: device descriptor read/8, error -71 [ 839.059778][T11798] usb 6-1: USB disconnect, device number 117 [ 839.211933][T18530] tipc: Started in network mode [ 839.217027][T18530] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 839.227640][T18530] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 839.240690][T18530] tipc: Enabled bearer , priority 10 [ 839.253540][ T5876] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 839.351078][ T5876] usb 5-1: device descriptor read/8, error -71 [ 839.467516][ T5876] usb usb5-port1: unable to enumerate USB device [ 839.690320][ T24] usb 2-1: selecting invalid altsetting 0 [ 839.699227][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 839.706959][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 839.725529][ T24] usb 2-1: selecting invalid altsetting 0 [ 839.731337][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 839.752346][ T24] usb 2-1: USB disconnect, device number 62 [ 840.150901][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 840.324854][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 840.334787][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 840.348003][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 840.357259][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.365389][ T24] usb 2-1: Product: syz [ 840.369634][ T24] usb 2-1: Manufacturer: syz [ 840.374250][ T24] usb 2-1: SerialNumber: syz [ 840.381388][ T24] usb 2-1: config 0 descriptor?? [ 840.387602][T18541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 840.394959][T18541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 840.428643][T11797] tipc: Node number set to 1 [ 840.563897][T18543] netlink: 'syz.5.3462': attribute type 4 has an invalid length. [ 840.573133][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3462'. [ 840.621458][T18541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 840.628771][T18541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 841.012144][T18557] XFS (nullb0): Invalid superblock magic number [ 841.208640][T11797] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 841.304668][ T29] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 841.384320][T11797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 841.395213][T11797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 841.406083][T11797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 841.416109][T11797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 841.426051][T11797] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 841.435553][T11797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.446748][T11797] usb 5-1: config 0 descriptor?? [ 841.464955][ T5876] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 841.475657][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 841.483420][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.497112][ T29] usb 7-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 841.506599][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.515172][ T29] usb 7-1: Product: syz [ 841.519650][ T29] usb 7-1: Manufacturer: syz [ 841.524314][ T29] usb 7-1: SerialNumber: syz [ 841.533544][ T29] usb 7-1: config 0 descriptor?? [ 841.544219][ T29] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 841.639881][ T5876] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 841.648237][ T5876] usb 6-1: config 1 has no interface number 0 [ 841.654414][ T5876] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 841.666030][ T5876] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 841.675148][T18554] netlink: 'syz.4.3466': attribute type 8 has an invalid length. [ 841.678192][ T5876] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.699127][T11797] hdpvr 5-1:0.0: firmware version 0x94 dated x$N^Nt/3.I'tRe.+%zJ|] [ 841.704192][ T5876] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 841.717874][T11797] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 841.723326][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.733970][ T5876] usb 6-1: Product: syz [ 841.738195][ T5876] usb 6-1: Manufacturer: syz [ 841.743864][ T5876] usb 6-1: SerialNumber: syz [ 841.761129][ T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 841.773501][T18569] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 841.797088][ T24] dm9601 2-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 10:f5:02:ff:c7:25 [ 841.823565][ T24] usb 2-1: USB disconnect, device number 63 [ 841.834324][ T24] dm9601 2-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 841.986013][ T29] gspca_sn9c20x: Write register 1001 failed -71 [ 841.994147][ T29] gspca_sn9c20x: Device initialization failed [ 842.003167][ T29] gspca_sn9c20x 7-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 842.016144][ T29] usb 7-1: USB disconnect, device number 41 [ 842.094426][T11797] hdpvr 5-1:0.0: Could not setup controls [ 842.106680][T11797] hdpvr 5-1:0.0: registering videodev failed [ 842.144849][T11797] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 842.165242][T11797] usb 5-1: USB disconnect, device number 55 [ 842.178319][ T5876] usb 6-1: Error in usbnet_get_endpoints (-71) [ 842.203693][ T5876] usb 6-1: USB disconnect, device number 118 [ 842.583382][T18579] openvswitch: netlink: Message has 1 unknown bytes. [ 842.591984][T18579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.600300][ T5876] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 842.699265][ T5829] Bluetooth: hci1: unexpected event for opcode 0x200a [ 842.778989][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 842.793191][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 842.805584][ T5876] usb 2-1: config 11 has an invalid interface number: 189 but max is 0 [ 842.821825][ T5876] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 842.843133][ T5876] usb 2-1: config 11 has no interface number 0 [ 842.852511][T18592] virtio-fs: tag not found [ 842.861070][T18592] virtio-fs: tag not found [ 842.866886][ T5876] usb 2-1: config 11 interface 189 altsetting 120 has a duplicate endpoint with address 0x4, skipping [ 842.897896][ T5876] usb 2-1: config 11 interface 189 altsetting 120 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 842.932571][ T5876] usb 2-1: config 11 interface 189 altsetting 120 endpoint 0x7 has invalid wMaxPacketSize 0 [ 842.965115][ T5876] usb 2-1: config 11 interface 189 has no altsetting 0 [ 842.995285][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=33.84 [ 843.013737][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.034647][ T5876] usb 2-1: Product: syz [ 843.043145][ T5876] usb 2-1: Manufacturer: syz [ 843.053044][ T5876] usb 2-1: SerialNumber: syz [ 843.288247][T18577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.298044][T18577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.311033][ T5876] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 843.328772][ T5876] usb 2-1: USB disconnect, device number 64 [ 843.484161][T11796] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 843.633744][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 843.644786][T11796] usb 7-1: Using ep0 maxpacket: 32 [ 843.651624][T11796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 843.663062][T11796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 843.672829][T11796] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 843.684407][T11796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 843.698053][T11796] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 843.707110][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.715263][T11796] usb 7-1: Product: syz [ 843.719496][T11796] usb 7-1: Manufacturer: syz [ 843.724141][T11796] usb 7-1: SerialNumber: syz [ 843.731400][T11796] usb 7-1: config 0 descriptor?? [ 843.744880][T11796] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input100 [ 843.760678][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 843.777399][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 843.802343][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 843.815167][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 843.825623][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 843.843822][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.879538][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 843.904363][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.934311][T17990] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 843.958495][ T24] usb 5-1: config 0 descriptor?? [ 843.976108][T18607] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 844.018451][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 844.090264][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 844.138472][ T5177] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 844.158795][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 844.206214][T18610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.236396][T18610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.261746][T18610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.354258][ T5877] usb 7-1: USB disconnect, device number 42 [ 844.463934][T18610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.503540][T18610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.621935][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 844.636943][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 844.666617][ T24] usb 5-1: USB disconnect, device number 56 [ 844.744886][T11796] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 844.905187][T11796] usb 2-1: Using ep0 maxpacket: 16 [ 844.912220][T11796] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 844.923983][T11796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.937217][T11796] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 844.946330][T11796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.954509][T11797] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 844.962357][T11796] usb 2-1: Product: syz [ 844.966842][T11796] usb 2-1: Manufacturer: syz [ 844.973458][T11796] usb 2-1: SerialNumber: syz [ 844.980817][T11796] usb 2-1: config 0 descriptor?? [ 844.990272][T11796] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 844.999866][T11796] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 845.129571][T11797] usb 6-1: Using ep0 maxpacket: 16 [ 845.137504][T11797] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 845.147728][T11797] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.158503][T11797] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.171554][T11797] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.180909][T11797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.189130][T11797] usb 6-1: Product: syz [ 845.193654][T11797] usb 6-1: Manufacturer: syz [ 845.198404][T11797] usb 6-1: SerialNumber: syz [ 845.214444][T18643] fuse: Unknown parameter '000000000000000000000070x0000000000000008' [ 845.268818][T11796] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 845.282919][T11796] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 845.291593][T11796] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 845.298615][T11796] em28xx 2-1:0.0: No AC97 audio processor [ 845.320758][T11796] usb 2-1: USB disconnect, device number 65 [ 845.345000][T11796] em28xx 2-1:0.0: Disconnecting em28xx [ 845.382681][T11796] em28xx 2-1:0.0: Freeing device [ 845.400121][T18647] befs: (nbd4): No write support. Marking filesystem read-only [ 845.412979][T18647] befs: (nbd4): unable to read superblock [ 845.620915][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 845.652640][T11797] usb 6-1: 0:2 : does not exist [ 845.679208][T18656] sd 0:0:1:0: PR command failed: 1026 [ 845.684719][T18656] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 845.692594][T18656] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 845.714742][T11797] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 845.781234][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 845.794862][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 845.813420][T11797] usb 6-1: USB disconnect, device number 119 [ 845.820102][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 845.835056][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.843247][ T24] usb 7-1: Product: syz [ 845.847960][ T24] usb 7-1: Manufacturer: syz [ 845.852727][ T24] usb 7-1: SerialNumber: syz [ 845.881148][ T24] usb 7-1: config 0 descriptor?? [ 845.886265][T18084] udevd[18084]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.272671][T11797] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 846.334179][ T24] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 846.465797][T11797] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 846.475446][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.484748][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.495830][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.503711][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.512818][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.524082][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.532115][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.541623][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.552901][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.560705][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.569767][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.580774][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.589154][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.598780][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.609830][T11796] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 846.617502][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.627325][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.636391][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.647376][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.655679][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.664711][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.675897][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.684116][T11797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.693131][T11797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.704337][T11797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.716565][T11797] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 846.725861][T11797] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 846.734286][T11797] usb 6-1: Product: syz [ 846.738484][T11797] usb 6-1: Manufacturer: syz [ 846.744111][T11797] usb 6-1: SerialNumber: syz [ 846.751665][T11797] usb 6-1: config 0 descriptor?? [ 846.765269][T11797] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 846.796679][T11796] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 846.831721][T11796] usb 2-1: config index 0 descriptor too short (expected 65110, got 72) [ 846.863279][T11796] usb 2-1: config index 1 descriptor too short (expected 65110, got 72) [ 846.888055][T11796] usb 2-1: config index 2 descriptor too short (expected 65110, got 72) [ 846.905029][T11796] usb 2-1: config index 3 descriptor too short (expected 65110, got 72) [ 846.915543][T11796] usb 2-1: config index 4 descriptor too short (expected 65110, got 72) [ 846.936443][T11796] usb 2-1: config index 5 descriptor too short (expected 65110, got 72) [ 846.949867][T11796] usb 2-1: config index 6 descriptor too short (expected 65110, got 72) [ 846.960502][T11796] usb 2-1: config index 7 descriptor too short (expected 65110, got 72) [ 846.972441][T11796] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 846.982509][T11796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.991523][T11796] usb 2-1: Product: syz [ 846.995879][T11796] usb 2-1: Manufacturer: syz [ 847.000723][T11796] usb 2-1: SerialNumber: syz [ 847.015080][T11796] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 847.032347][T18664] gfs2: not a GFS2 filesystem [ 847.040549][T11797] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 847.070941][T18671] gfs2: not a GFS2 filesystem [ 847.086165][ T5877] usb 6-1: USB disconnect, device number 120 [ 847.106342][ T5877] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 847.216979][ T24] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 847.315903][T11796] usb 2-1: USB disconnect, device number 66 [ 847.406952][ T24] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 847.419244][ T24] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 847.435523][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.442231][ T24] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 847.452872][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.470737][ T24] usb 5-1: config 0 descriptor?? [ 847.476649][T18668] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 847.648072][ T5488] gs_usb 7-1:0.0 can0: bit-timing not yet defined [ 847.742659][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 847.749613][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 847.763617][ T24] usb 5-1: USB disconnect, device number 57 [ 847.862821][T18690] netlink: 'syz.4.3503': attribute type 2 has an invalid length. [ 848.131877][ T24] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 848.217292][T11797] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 848.224542][T11797] ath9k_htc: Failed to initialize the device [ 848.231419][T11796] usb 2-1: ath9k_htc: USB layer deinitialized [ 848.295329][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.305982][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.318979][ T24] usb 6-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 848.328184][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.339498][ T24] usb 6-1: config 0 descriptor?? [ 848.548469][T11796] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 848.593963][ T5934] usb 7-1: USB disconnect, device number 43 [ 848.708755][T11796] usb 2-1: Using ep0 maxpacket: 32 [ 848.715502][T11796] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 848.751317][T11796] usb 2-1: config index 0 descriptor too short (expected 65110, got 72) [ 848.773388][T11796] usb 2-1: config index 1 descriptor too short (expected 65110, got 72) [ 848.784187][T18693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.796060][T11796] usb 2-1: config index 2 descriptor too short (expected 65110, got 72) [ 848.807199][T18693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.819056][T11796] usb 2-1: config index 3 descriptor too short (expected 65110, got 72) [ 848.827722][T18693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.829092][T18693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.859858][T11796] usb 2-1: config index 4 descriptor too short (expected 65110, got 72) [ 848.881986][T11796] usb 2-1: config index 5 descriptor too short (expected 65110, got 72) [ 848.894031][T11796] usb 2-1: config index 6 descriptor too short (expected 65110, got 72) [ 848.909514][T11796] usb 2-1: config index 7 descriptor too short (expected 65110, got 72) [ 848.921494][T11796] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 848.954198][T11796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.962346][T11796] usb 2-1: Product: syz [ 848.967020][T11796] usb 2-1: Manufacturer: syz [ 848.971673][T11796] usb 2-1: SerialNumber: syz [ 849.029111][T11796] ldusb 2-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 849.231525][T11797] usb 2-1: USB disconnect, device number 67 [ 849.237685][ C0] ldusb 2-1:1.0: usb_submit_urb failed (-19) [ 849.283233][T11797] ldusb 2-1:1.0: LD USB Device #0 now disconnected [ 849.350474][T11796] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 849.451952][ T24] usb 6-1: string descriptor 0 read error: -71 [ 849.459358][T18666] ldusb: No device or device unplugged -19 [ 849.487488][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 849.495210][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 849.522431][ T24] usb 6-1: USB disconnect, device number 121 [ 849.541886][T11796] usb 5-1: Using ep0 maxpacket: 8 [ 849.549875][T11796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 849.574338][T11796] usb 5-1: config 9 has an invalid interface number: 33 but max is 0 [ 849.582476][T11796] usb 5-1: config 9 has no interface number 0 [ 849.590578][T11796] usb 5-1: config 9 interface 33 has no altsetting 0 [ 849.600214][T11796] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 849.610134][T11796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.620988][T11796] usb 5-1: Product: syz [ 849.625241][T11796] usb 5-1: Manufacturer: syz [ 849.631511][T11796] usb 5-1: SerialNumber: syz [ 849.899497][T18705] XFS (nullb0): Invalid superblock magic number [ 850.005904][T11796] usbhid 5-1:9.33: couldn't find an input interrupt endpoint [ 850.025326][T11796] usb 5-1: USB disconnect, device number 58 [ 850.385863][T11796] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 850.567467][T11796] usb 6-1: Using ep0 maxpacket: 8 [ 850.589421][T11796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.615643][T11796] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 850.638126][T11796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.652750][T11796] usb 6-1: config 0 descriptor?? [ 850.758597][T18732] xt_l2tp: v2 tid > 0xffff: 2031748 [ 850.857570][T18735] tipc: Failed to remove unknown binding: 66,1,1/2283010930:2136912250/2136912252 [ 850.883663][T18735] tipc: Failed to remove unknown binding: 66,1,1/2283010930:2136912250/2136912252 [ 850.898134][T11796] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 851.142830][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.155611][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 851.277990][ T5877] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 851.342513][ T24] usb 6-1: USB disconnect, device number 122 [ 851.454219][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 851.461585][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.483783][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.497360][ T5877] usb 5-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.40 [ 851.514163][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.531619][ T5877] usb 5-1: Product: syz [ 851.536034][ T5877] usb 5-1: Manufacturer: syz [ 851.540812][ T5877] usb 5-1: SerialNumber: syz [ 851.779428][ T5877] usb 5-1: USB disconnect, device number 59 [ 852.223533][T11796] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 852.234440][ T5934] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 852.385737][T11796] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 852.394670][T11796] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 852.407773][ T5934] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 852.415400][ T5934] usb 6-1: can't read configurations, error -61 [ 852.426741][T11796] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 852.446673][T11796] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 852.458779][T11796] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 852.474223][T11796] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 852.501860][T11796] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 852.512651][T11796] usb 7-1: Product: syz [ 852.516876][T11796] usb 7-1: Manufacturer: syz [ 852.540798][T11796] cdc_wdm 7-1:1.0: skipping garbage [ 852.554870][T11796] cdc_wdm 7-1:1.0: skipping garbage [ 852.562143][T11796] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 852.568320][ T5934] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 852.576480][T11796] cdc_wdm 7-1:1.0: Unknown control protocol [ 852.737243][ T5877] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 852.749626][ T5934] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 852.757475][ T5934] usb 6-1: can't read configurations, error -61 [ 852.764384][ T5934] usb usb6-port1: attempt power cycle [ 852.783621][ T24] usb 7-1: USB disconnect, device number 44 [ 852.901008][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 852.910269][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.921065][ T5877] usb 5-1: Product: syz [ 852.925281][ T5877] usb 5-1: Manufacturer: syz [ 852.943269][ T5877] usb 5-1: SerialNumber: syz [ 852.956724][ T5877] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 852.979003][ T29] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 853.131616][ T5934] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 853.156268][ T5934] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 853.164845][ T5934] usb 6-1: can't read configurations, error -61 [ 853.313647][ T5934] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 853.337749][ T5934] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 853.356071][ T5934] usb 6-1: can't read configurations, error -61 [ 853.362992][ T5934] usb usb6-port1: unable to enumerate USB device [ 853.632874][ T5934] usb 5-1: USB disconnect, device number 60 [ 853.687494][ T5877] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 853.751234][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 853.868714][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 853.876035][ T5877] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 853.884694][ T5877] usb 7-1: config 0 has no interface number 0 [ 853.895476][ T5877] usb 7-1: config 0 interface 197 has no altsetting 0 [ 853.908736][ T5877] usb 7-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65 [ 853.923271][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.942307][ T5877] usb 7-1: Product: syz [ 853.946716][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 853.954536][ T5877] usb 7-1: Manufacturer: syz [ 853.959206][ T5877] usb 7-1: SerialNumber: syz [ 853.967811][ T5877] usb 7-1: config 0 descriptor?? [ 853.981218][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.994484][ T5877] gspca_main: etoms-2.14.0 probing 102c:6151 [ 854.001240][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.016696][ T24] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 854.026168][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.039328][ T24] usb 2-1: config 0 descriptor?? [ 854.130702][ T29] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 854.138423][ T29] ath9k_htc: Failed to initialize the device [ 854.145361][ T5934] usb 5-1: ath9k_htc: USB layer deinitialized [ 854.305889][ T5877] usb 7-1: USB disconnect, device number 45 [ 854.507247][ T24] hid (null): bogus close delimiter [ 854.524255][ T24] macally 0003:060B:0001.0064: unknown main item tag 0x2 [ 854.544960][ T24] macally 0003:060B:0001.0064: bogus close delimiter [ 854.551851][ T24] macally 0003:060B:0001.0064: item 0 0 2 10 parsing failed [ 854.571106][ T24] macally 0003:060B:0001.0064: probe with driver macally failed with error -22 [ 855.449999][ T5877] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 855.631612][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 855.639126][ T5877] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 855.649473][ T5877] usb 5-1: config 0 has no interface number 0 [ 855.662050][ T5877] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 855.684963][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.693200][ T5877] usb 5-1: Product: syz [ 855.698936][ T5877] usb 5-1: Manufacturer: syz [ 855.703585][ T5877] usb 5-1: SerialNumber: syz [ 855.720253][ T5877] usb 5-1: config 0 descriptor?? [ 855.732643][ T5877] smsc95xx v2.0.0 [ 856.168995][ T5877] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 856.283345][ T5877] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 856.358196][T11796] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 856.530432][T18779] ptrace attach of "./syz-executor exec"[11659] was attempted by ""[18779] [ 856.539184][T11796] usb 6-1: Using ep0 maxpacket: 8 [ 856.546316][T11796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.563686][T11796] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 856.574013][T11796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.582141][T11796] usb 6-1: Product: syz [ 856.587204][T11796] usb 6-1: Manufacturer: syz [ 856.591942][T11796] usb 6-1: SerialNumber: syz [ 856.622752][T11796] usb 6-1: config 0 descriptor?? [ 856.637822][ T24] usb 2-1: USB disconnect, device number 68 [ 856.645574][T11796] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 856.859370][T18793] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3527'. [ 856.882592][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3527'. [ 856.904055][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3527'. [ 856.926662][T18793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.943866][T18793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.959956][T11796] usb 6-1: USB disconnect, device number 127 [ 857.896574][T11796] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 858.058082][T11796] usb 6-1: Using ep0 maxpacket: 32 [ 858.069053][T11796] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 858.099913][T11796] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.131290][T11796] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 858.142292][T11796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.150349][T11796] usb 6-1: Product: syz [ 858.157917][T11796] usb 6-1: Manufacturer: syz [ 858.162566][T11796] usb 6-1: SerialNumber: syz [ 858.177867][T11796] usb 6-1: config 0 descriptor?? [ 858.504739][ T29] usb 6-1: USB disconnect, device number 2 [ 858.529932][ T5877] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 858.553478][ T5877] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 858.601438][ T5877] usb 5-1: USB disconnect, device number 61 [ 858.711632][T18809] bpf: Bad value for 'gid' [ 858.815564][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 858.924981][T11796] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 859.095589][T11796] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 859.108816][T11796] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 859.128961][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.147515][T11796] usb 7-1: Product: syz [ 859.151829][T11796] usb 7-1: Manufacturer: syz [ 859.156461][T11796] usb 7-1: SerialNumber: syz [ 859.172110][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 859.387877][T18818] netlink: 752 bytes leftover after parsing attributes in process `syz.4.3535'. [ 859.397177][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 859.427253][ T29] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 859.447463][ T29] usb 6-1: can't read configurations, error -22 [ 859.478039][T11796] comedi comedi5: Wrong number of endpoints [ 859.491055][T11796] ni6501 7-1:5.0: driver 'ni6501' failed to auto-configure device. [ 859.522124][T11796] usb 7-1: USB disconnect, device number 46 [ 859.595431][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 859.776861][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 859.783921][ T29] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 859.803770][ T29] usb 6-1: can't read configurations, error -22 [ 859.815180][ T29] usb usb6-port1: attempt power cycle [ 860.108476][T18822] netlink: 'syz.6.3536': attribute type 10 has an invalid length. [ 860.166945][T18822] team0: Port device macvlan0 added [ 860.204612][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 860.238049][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 860.284771][ T29] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 860.307555][ T29] usb 6-1: can't read configurations, error -22 [ 860.460698][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 860.489252][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 860.506052][ T29] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 860.524883][ T29] usb 6-1: can't read configurations, error -22 [ 860.542567][ T29] usb usb6-port1: unable to enumerate USB device [ 860.685009][T11796] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 860.845481][T11796] usb 7-1: Using ep0 maxpacket: 16 [ 860.853760][T11796] usb 7-1: config 5 has an invalid interface number: 89 but max is 2 [ 860.862455][T11796] usb 7-1: config 5 has an invalid interface number: 89 but max is 2 [ 860.877517][T11796] usb 7-1: config 5 has an invalid interface number: 248 but max is 2 [ 860.885921][T11796] usb 7-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 860.920008][T11796] usb 7-1: config 5 has no interface number 0 [ 860.926341][T11796] usb 7-1: config 5 has no interface number 1 [ 860.941542][T11796] usb 7-1: config 5 interface 89 has no altsetting 1 [ 860.948310][T11796] usb 7-1: config 5 interface 248 has no altsetting 0 [ 860.965361][T11796] usb 7-1: New USB device found, idVendor=129b, idProduct=1667, bcdDevice=f1.ae [ 860.974899][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.983043][T11796] usb 7-1: Product: syz [ 860.995175][T11796] usb 7-1: Manufacturer: syz [ 860.999845][T11796] usb 7-1: SerialNumber: syz [ 861.284795][T11796] usb 7-1: USB disconnect, device number 47 [ 861.526241][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.556369][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.765614][T11796] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 861.935458][T11796] usb 5-1: Using ep0 maxpacket: 16 [ 861.942686][T11796] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 861.951643][T11796] usb 5-1: config 0 has no interface number 0 [ 861.962594][T11796] usb 5-1: config 0 interface 226 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 861.987953][T11796] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f0.56 [ 861.997697][T11796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.026560][T11796] usb 5-1: Product: syz [ 862.038455][T11796] usb 5-1: Manufacturer: syz [ 862.062029][T11796] usb 5-1: SerialNumber: syz [ 862.093262][T11796] usb 5-1: config 0 descriptor?? [ 862.108471][T18835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 862.355850][T11796] usb 5-1: USB disconnect, device number 62 [ 862.415734][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 862.558183][T18859] 9p: Bad value for 'wfdno' [ 862.575983][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 862.584709][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 862.594230][ T24] usb 7-1: config 1 has an invalid interface number: 4 but max is 2 [ 862.627855][ T24] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping [ 862.636931][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.683230][ T24] usb 7-1: config 1 has no interface number 1 [ 862.690270][ T24] usb 7-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 862.703674][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.715064][ T24] usb 7-1: config 1 interface 4 has no altsetting 0 [ 862.724293][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 862.734916][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.743259][ T24] usb 7-1: Product: syz [ 862.757594][ T24] usb 7-1: Manufacturer: syz [ 862.762289][ T24] usb 7-1: SerialNumber: syz [ 863.011095][T18848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.035906][T18848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.357359][ T24] usb 7-1: 2:1 : invalid UAC_AS_GENERAL desc [ 863.495740][T11796] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 863.614566][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3550'. [ 863.623878][ T5934] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 863.665732][T11796] usb 5-1: Using ep0 maxpacket: 16 [ 863.673205][T11796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 863.682341][T11796] usb 5-1: config 5 has an invalid interface number: 34 but max is 0 [ 863.691203][T11796] usb 5-1: config 5 has no interface number 0 [ 863.702295][T11796] usb 5-1: config 5 interface 34 has no altsetting 0 [ 863.714206][T11796] usb 5-1: New USB device found, idVendor=0de0, idProduct=2008, bcdDevice=4a.08 [ 863.725285][T11796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.740539][T11796] usb 5-1: Product: syz [ 863.744826][T11796] usb 5-1: Manufacturer: syz [ 863.751268][T11796] usb 5-1: SerialNumber: syz [ 863.779639][ T24] usb 7-1: USB disconnect, device number 48 [ 863.812000][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.823666][T18084] udevd[18084]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 863.869900][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.923600][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.950538][ T5934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.976406][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.016204][T11796] usb 5-1: USB disconnect, device number 63 [ 864.023400][ T5934] usb 2-1: config 0 descriptor?? [ 864.174811][T18893] Failed to get privilege flags for destination (handle=0x2:0x3) [ 864.184337][T18893] netlink: 'syz.5.3551': attribute type 4 has an invalid length. [ 864.192545][T18893] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3551'. [ 864.446034][T18893] .`: renamed from bond0 (while UP) [ 864.894664][T11796] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 864.910578][T18756] syz.1.3514 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 864.946256][T18756] CPU: 0 UID: 0 PID: 18756 Comm: syz.1.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.946297][T18756] Tainted: [L]=SOFTLOCKUP [ 864.946306][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.946325][T18756] Call Trace: [ 864.946334][T18756] [ 864.946344][T18756] dump_stack_lvl+0xe8/0x150 [ 864.946376][T18756] dump_header+0xd4/0x4c0 [ 864.946406][T18756] oom_kill_process+0x263/0x800 [ 864.946457][T18756] out_of_memory+0xf0c/0x12b0 [ 864.946502][T18756] ? __pfx_out_of_memory+0x10/0x10 [ 864.946555][T18756] mem_cgroup_out_of_memory+0x145/0x240 [ 864.946586][T18756] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 864.946626][T18756] ? _raw_spin_unlock+0x28/0x50 [ 864.946658][T18756] ? memcg1_oom_prepare+0x37f/0x450 [ 864.946695][T18756] try_charge_memcg+0xde4/0x1280 [ 864.946717][T18756] ? rcu_is_watching+0x15/0xb0 [ 864.946755][T18756] ? __pfx_try_charge_memcg+0x10/0x10 [ 864.946780][T18756] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 864.946817][T18756] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 864.946850][T18756] charge_memcg+0x9f/0x180 [ 864.946875][T18756] __mem_cgroup_charge+0x25/0x80 [ 864.946898][T18756] shmem_alloc_and_add_folio+0x790/0xf40 [ 864.946935][T18756] ? filemap_get_entry+0xad/0x2f0 [ 864.946965][T18756] ? filemap_get_entry+0xad/0x2f0 [ 864.947017][T18756] ? filemap_get_entry+0x28f/0x2f0 [ 864.947053][T18756] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 864.947088][T18756] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 864.947126][T18756] shmem_get_folio_gfp+0x59d/0x1660 [ 864.947168][T18756] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 864.947217][T18756] shmem_write_begin+0x16c/0x330 [ 864.947255][T18756] generic_perform_write+0x2c5/0x900 [ 864.947295][T18756] ? __pfx_generic_perform_write+0x10/0x10 [ 864.947321][T18756] ? __mark_inode_dirty+0x4cf/0x1350 [ 864.947357][T18756] ? mnt_put_write_access_file+0xc0/0x100 [ 864.947396][T18756] ? file_update_time_flags+0x400/0x4a0 [ 864.947435][T18756] shmem_file_write_iter+0xf8/0x120 [ 864.947466][T18756] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 864.947500][T18756] __kernel_write_iter+0x428/0x910 [ 864.947525][T18756] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 864.947567][T18756] ? __pfx___kernel_write_iter+0x10/0x10 [ 864.947610][T18756] ? __asan_memset+0x22/0x50 [ 864.947644][T18756] ? iov_iter_bvec+0xb8/0x180 [ 864.947672][T18756] dump_user_range+0x8a0/0xc90 [ 864.947715][T18756] ? __pfx_dump_user_range+0x10/0x10 [ 864.947744][T18756] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 864.947783][T18756] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 864.947825][T18756] ? dump_emit+0xa6/0xe0 [ 864.947852][T18756] ? elf_core_dump+0x2cd0/0x3960 [ 864.947888][T18756] elf_core_dump+0x3369/0x3960 [ 864.947940][T18756] ? __pfx_elf_core_dump+0x10/0x10 [ 864.947974][T18756] ? kasan_save_track+0x4f/0x80 [ 864.947993][T18756] ? kasan_save_track+0x3e/0x80 [ 864.948012][T18756] ? __kasan_kmalloc+0x93/0xb0 [ 864.948034][T18756] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 864.948055][T18756] ? coredump_write+0x343/0x18b0 [ 864.948084][T18756] ? vfs_coredump+0x3321/0x3e60 [ 864.948111][T18756] ? get_signal+0x1108/0x1340 [ 864.948141][T18756] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 864.948169][T18756] ? irqentry_exit+0x178/0x670 [ 864.948191][T18756] ? asm_exc_page_fault+0x26/0x30 [ 864.948219][T18756] ? mas_ascend+0x2f4/0x830 [ 864.948286][T18756] ? vfs_coredump+0x3321/0x3e60 [ 864.948329][T18756] ? 0xffffffffff600000 [ 864.948373][T18756] coredump_write+0x1121/0x18b0 [ 864.948424][T18756] ? __pfx_coredump_write+0x10/0x10 [ 864.948474][T18756] ? unshare_files+0xa9/0x140 [ 864.948500][T18756] vfs_coredump+0x3321/0x3e60 [ 864.948560][T18756] ? __pfx_vfs_coredump+0x10/0x10 [ 864.948588][T18756] ? __lock_acquire+0x6b6/0x2cf0 [ 864.948625][T18756] ? __lock_acquire+0x6b6/0x2cf0 [ 864.948669][T18756] ? __lock_acquire+0x6b6/0x2cf0 [ 864.948708][T18756] ? __lock_acquire+0x6b6/0x2cf0 [ 864.948744][T18756] ? __lock_acquire+0x6b6/0x2cf0 [ 864.948787][T18756] ? unwind_next_frame+0xa5/0x23d0 [ 864.948809][T18756] ? lock_acquire+0x107/0x340 [ 864.948847][T18756] ? unwind_next_frame+0xa5/0x23d0 [ 864.948873][T18756] ? is_bpf_text_address+0x26/0x2b0 [ 864.948901][T18756] ? lock_acquire+0x107/0x340 [ 864.948943][T18756] ? is_bpf_text_address+0x26/0x2b0 [ 864.948978][T18756] ? is_bpf_text_address+0x292/0x2b0 [ 864.949007][T18756] ? is_bpf_text_address+0x26/0x2b0 [ 864.949040][T18756] ? kernel_text_address+0xa5/0xe0 [ 864.949069][T18756] ? __kernel_text_address+0xd/0x40 [ 864.949095][T18756] ? unwind_get_return_address+0x4d/0x90 [ 864.949118][T18756] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 864.949147][T18756] ? arch_stack_walk+0xfc/0x150 [ 864.949182][T18756] ? stack_trace_save+0x9c/0xe0 [ 864.949209][T18756] ? __pfx_stack_trace_save+0x10/0x10 [ 864.949239][T18756] ? stack_depot_save_flags+0x33/0x810 [ 864.949278][T18756] ? kasan_save_track+0x4f/0x80 [ 864.949298][T18756] ? kasan_save_track+0x3e/0x80 [ 864.949316][T18756] ? kasan_save_free_info+0x46/0x50 [ 864.949343][T18756] ? __kasan_slab_free+0x5c/0x80 [ 864.949363][T18756] ? kmem_cache_free+0x197/0x620 [ 864.949406][T18756] ? get_signal+0xa4b/0x1340 [ 864.949434][T18756] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 864.949460][T18756] ? irqentry_exit+0x178/0x670 [ 864.949481][T18756] ? asm_exc_page_fault+0x26/0x30 [ 864.949573][T18756] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.949612][T18756] get_signal+0x1108/0x1340 [ 864.949665][T18756] arch_do_signal_or_restart+0x9a/0x7a0 [ 864.949697][T18756] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 864.949749][T18756] irqentry_exit+0x178/0x670 [ 864.949774][T18756] ? trace_irq_disable+0x37/0x100 [ 864.949805][T18756] asm_exc_page_fault+0x26/0x30 [ 864.949832][T18756] RIP: 0033:0x7fecd3d8f751 [ 864.949857][T18756] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 864.949878][T18756] RSP: 002b:fffffffffffffd00 EFLAGS: 00010217 [ 864.949899][T18756] RAX: 0000000000000000 RBX: 00007fecd3fe6090 RCX: 00007fecd3d8f749 [ 864.949915][T18756] RDX: 0000000000000000 RSI: fffffffffffffd00 RDI: 0000000000000000 [ 864.949929][T18756] RBP: 00007fecd3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.949949][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.949963][T18756] R13: 00007fecd3fe6128 R14: 00007fecd3fe6090 R15: 00007ffec3b67d78 [ 864.949999][T18756] [ 865.601851][T18756] memory: usage 307200kB, limit 307200kB, failcnt 22186 [ 865.608889][T18756] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 865.616874][T18756] kmem: usage 11948kB, limit 9007199254740988kB, failcnt 0 [ 865.624132][T18756] Memory cgroup stats for /syz1: [ 865.624433][T18756] cache 302116864 [ 865.633124][T18756] rss 221184 [ 865.636353][T18756] rss_huge 0 [ 865.639574][T18756] shmem 302116864 [ 865.643323][T18756] mapped_file 0 [ 865.646810][T18756] dirty 0 [ 865.649775][T18756] writeback 0 [ 865.653158][T18756] workingset_refault_anon 1304 [ 865.658606][T18756] workingset_refault_file 171 [ 865.663349][T18756] swap 127995904 [ 865.667160][T18756] swapcached 0 [ 865.670558][T18756] pgpgin 395821 [ 865.674062][T18756] pgpgout 322519 [ 865.677651][T11796] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 865.677681][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.677704][T11796] usb 7-1: Product: syz [ 865.677745][T11796] usb 7-1: Manufacturer: syz [ 865.677763][T11796] usb 7-1: SerialNumber: syz [ 865.729683][T11796] usb 7-1: config 0 descriptor?? [ 865.735191][T18756] pgfault 214894 [ 865.739255][T18756] pgmajfault 186 [ 865.746799][T18756] inactive_anon 18305024 [ 865.751342][T18756] active_anon 284033024 [ 865.755585][T18756] inactive_file 0 [ 865.760624][T18756] active_file 0 [ 865.764125][T18756] unevictable 0 [ 865.819279][T18756] hierarchical_memory_limit 314572800 [ 865.827390][T18756] hierarchical_memsw_limit 9223372036854771712 [ 865.835071][T18756] total_cache 302116864 [ 865.839728][T18756] total_rss 221184 [ 865.843548][T18756] total_rss_huge 0 [ 865.855191][T18756] total_shmem 302116864 [ 865.859535][T18756] total_mapped_file 0 [ 865.863799][T18756] total_dirty 0 [ 865.867401][T18756] total_writeback 0 [ 865.871494][T18756] total_workingset_refault_anon 1304 [ 865.876899][T18756] total_workingset_refault_file 171 [ 865.892588][T18756] total_swap 127995904 [ 865.896799][T18756] total_swapcached 0 [ 865.901032][T18756] total_pgpgin 395821 [ 865.905094][T18756] total_pgpgout 322519 [ 865.910768][T18756] total_pgfault 214894 [ 865.914874][T18756] total_pgmajfault 186 [ 865.918969][T18756] total_inactive_anon 18305024 [ 865.941880][T18756] total_active_anon 284033024 [ 865.946655][T18756] total_inactive_file 0 [ 865.950837][T18756] total_active_file 0 [ 865.955231][T18756] total_unevictable 0 [ 865.960192][T18756] anon_cost 0 [ 865.968998][T18756] file_cost 0 [ 865.972324][T18756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=18747,uid=0 [ 865.995993][T18756] Memory cgroup out of memory: Killed process 18747 (syz.1.3514) total-vm:98456kB, anon-rss:1280kB, file-rss:53760kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 866.178053][T11796] airspy 7-1:0.0: Board ID: 00 [ 866.182939][T11796] airspy 7-1:0.0: Firmware version: [ 866.817557][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 866.945854][T13751] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 866.990761][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.000762][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 867.018864][ T24] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 867.044397][T18896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.059222][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.086801][ T24] usb 6-1: config 0 descriptor?? [ 867.095405][T18896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.133382][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 867.133421][T13751] Tainted: [L]=SOFTLOCKUP [ 867.133431][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.133445][T13751] Call Trace: [ 867.133454][T13751] [ 867.133463][T13751] dump_stack_lvl+0xe8/0x150 [ 867.133494][T13751] dump_header+0xd4/0x4c0 [ 867.133523][T13751] oom_kill_process+0x263/0x800 [ 867.133562][T13751] out_of_memory+0xf0c/0x12b0 [ 867.133607][T13751] ? __pfx_out_of_memory+0x10/0x10 [ 867.133650][T13751] mem_cgroup_out_of_memory+0x145/0x240 [ 867.133682][T13751] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 867.133722][T13751] ? _raw_spin_unlock+0x28/0x50 [ 867.133754][T13751] ? memcg1_oom_prepare+0x37f/0x450 [ 867.133791][T13751] try_charge_memcg+0xde4/0x1280 [ 867.133832][T13751] ? __pfx_try_charge_memcg+0x10/0x10 [ 867.133853][T13751] ? percpu_ref_tryget+0x15/0x180 [ 867.133879][T13751] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 867.133916][T13751] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 867.133950][T13751] charge_memcg+0x9f/0x180 [ 867.133974][T13751] __mem_cgroup_charge+0x25/0x80 [ 867.133996][T13751] filemap_add_folio+0x153/0x540 [ 867.134034][T13751] __filemap_get_folio_mpol+0x500/0xb00 [ 867.134077][T13751] filemap_fault+0x935/0x1290 [ 867.134109][T13751] ? __pfx_filemap_fault+0x10/0x10 [ 867.134147][T13751] ? __pfx_filemap_map_pages+0x10/0x10 [ 867.134181][T13751] __do_fault+0x138/0x390 [ 867.134205][T13751] do_pte_missing+0x2206/0x3330 [ 867.134252][T13751] ? handle_mm_fault+0xdb/0x32b0 [ 867.134286][T13751] handle_mm_fault+0x1b26/0x32b0 [ 867.134330][T13751] ? handle_mm_fault+0xdb/0x32b0 [ 867.134375][T13751] ? __pfx_handle_mm_fault+0x10/0x10 [ 867.134402][T13751] ? lock_vma_under_rcu+0x42c/0x4a0 [ 867.134462][T13751] do_user_addr_fault+0xa7c/0x1380 [ 867.134502][T13751] ? rcu_is_watching+0x15/0xb0 [ 867.134525][T13751] ? trace_page_fault_user+0x84/0x1c0 [ 867.134561][T13751] exc_page_fault+0x71/0xd0 [ 867.134585][T13751] asm_exc_page_fault+0x26/0x30 [ 867.134606][T13751] RIP: 0033:0x7fecd3c65fd4 [ 867.134628][T13751] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 867.134648][T13751] RSP: 002b:00007ffec3b68100 EFLAGS: 00010206 [ 867.134668][T13751] RAX: 0000001b2fe24000 RBX: 00000000000003fd RCX: 00000000000c9a90 [ 867.134683][T13751] RDX: 0000000009ab2a5b RSI: 00007ffec3b68190 RDI: 0000000024e201c3 [ 867.134699][T13751] RBP: 00007ffec3b6813c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 867.134715][T13751] R10: 4000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 867.134730][T13751] R13: 00000000000927c0 R14: 00000000000c9b36 R15: 00007ffec3b68190 [ 867.134766][T13751] [ 867.134796][T13751] memory: usage 307200kB, limit 307200kB, failcnt 23276 [ 867.214394][T11796] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 867.621556][T11796] airspy 7-1:0.0: Registered as swradio24 [ 867.631779][T18937] syzkaller1: entered promiscuous mode [ 867.637361][T18937] syzkaller1: entered allmulticast mode [ 867.647597][T13751] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 867.660225][T11796] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 867.692017][T11796] usb 7-1: USB disconnect, device number 49 [ 867.751206][ T24] waterforce 0003:1044:7A4D.0065: item fetching failed at offset 0/1 [ 867.773490][ T24] waterforce 0003:1044:7A4D.0065: hid parse failed with -22 [ 867.781980][ T24] waterforce 0003:1044:7A4D.0065: probe with driver waterforce failed with error -22 [ 867.812510][T13751] kmem: usage 11748kB, limit 9007199254740988kB, failcnt 0 [ 867.881619][T13751] Memory cgroup stats for /syz1: [ 867.881985][T13751] cache 302022656 [ 867.925690][T13751] rss 221184 [ 867.929484][ T5876] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 867.999211][T13751] rss_huge 0 [ 868.016875][T13751] shmem 301998080 [ 868.035435][T11796] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 868.042402][T13751] mapped_file 0 [ 868.071826][T13751] dirty 0 [ 868.094645][ T5876] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 868.103072][ T5876] usb 5-1: config 0 has no interface number 0 [ 868.118203][ T5876] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 868.140352][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.158374][ T5876] usb 5-1: Product: syz [ 868.162710][T13751] writeback 0 [ 868.167601][ T5876] usb 5-1: Manufacturer: syz [ 868.177035][ T5876] usb 5-1: SerialNumber: syz [ 868.192965][ T5876] usb 5-1: config 0 descriptor?? [ 868.230054][T11796] usb 7-1: not running at top speed; connect to a high speed hub [ 868.251928][T13751] workingset_refault_anon 1304 [ 868.261863][T11796] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 22715, setting to 64 [ 868.283756][T11796] usb 7-1: config 1 interface 0 has no altsetting 0 [ 868.295270][T13751] workingset_refault_file 363 [ 868.305219][T11796] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.334734][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.353743][T11796] usb 7-1: Product: 徙톢藈签かϪ዗蠃ⶼ걏襪嘐䛨굛춐ɓ嗹듈闶쩛 [ 868.362298][T13751] swap 127946752 [ 868.375658][T11796] usb 7-1: Manufacturer: ﺵ [ 868.384962][T11796] usb 7-1: SerialNumber: я [ 868.394796][T18933] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 868.419456][T13751] swapcached 0 [ 868.475073][T13751] pgpgin 397101 [ 868.506999][T13751] pgpgout 323795 [ 868.526815][T13751] pgfault 214960 [ 868.543313][T13751] pgmajfault 189 [ 868.557307][T13751] inactive_anon 21020672 [ 868.570439][T13751] active_anon 281251840 [ 868.579619][T13751] inactive_file 24576 [ 868.594348][T13751] active_file 0 [ 868.610540][T13751] unevictable 0 [ 868.624961][T13751] hierarchical_memory_limit 314572800 [ 868.633347][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.654813][T13751] hierarchical_memsw_limit 9223372036854771712 [ 868.676164][T13751] total_cache 302022656 [ 868.686007][ T5876] usb 5-1: USB disconnect, device number 64 [ 868.706672][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.718549][T13751] total_rss 221184 [ 868.737762][T13751] total_rss_huge 0 [ 868.753778][T13751] total_shmem 301998080 [ 868.768910][T13751] total_mapped_file 0 [ 868.783337][T13751] total_dirty 0 [ 868.798231][T13751] total_writeback 0 [ 868.811729][T13751] total_workingset_refault_anon 1304 [ 868.827325][T13751] total_workingset_refault_file 363 [ 868.849940][T13751] total_swap 127946752 [ 868.907228][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.929870][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.940169][T13751] total_swapcached 0 [ 868.950551][T18933] netlink: 'syz.6.3562': attribute type 21 has an invalid length. [ 868.971527][T18933] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3562'. [ 868.991814][T18933] netlink: 'syz.6.3562': attribute type 5 has an invalid length. [ 869.003379][T13751] total_pgpgin 397101 [ 869.008244][T18933] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3562'. [ 869.024904][T13751] total_pgpgout 323795 [ 869.036569][T13751] total_pgfault 214960 [ 869.045635][T13751] total_pgmajfault 189 [ 869.053955][T13751] total_inactive_anon 21020672 [ 869.064579][T13751] total_active_anon 281251840 [ 869.080163][T13751] total_inactive_file 24576 [ 869.090971][T13751] total_active_file 0 [ 869.100526][T13751] total_unevictable 0 [ 869.137623][T13751] anon_cost 0 [ 869.175208][T13751] file_cost 0 [ 869.232026][T13751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=18755,uid=0 [ 869.408350][T13751] Memory cgroup out of memory: Killed process 18755 (syz.1.3514) total-vm:98456kB, anon-rss:1276kB, file-rss:53760kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 869.582807][T18948] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 869.595215][T18948] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3565'. [ 869.711443][T11797] usb 6-1: USB disconnect, device number 7 [ 869.774994][T18950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.791717][T18950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.132900][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3568'. [ 870.170696][T18747] syz.1.3514 (18747) used greatest stack depth: 15800 bytes left [ 870.243242][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 870.249699][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 870.274032][ T5934] usb 2-1: USB disconnect, device number 69 [ 870.499663][T18751] syz.1.3514 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 870.644510][T18967] netlink: 'syz.6.3574': attribute type 25 has an invalid length. [ 870.653498][ T5827] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 870.662428][ T5827] Bluetooth: hci3: unexpected event for opcode 0x203e [ 870.761344][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.1.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.761380][T18751] Tainted: [L]=SOFTLOCKUP [ 870.761389][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.761402][T18751] Call Trace: [ 870.761411][T18751] [ 870.761425][T18751] dump_stack_lvl+0xe8/0x150 [ 870.761456][T18751] dump_header+0xd4/0x4c0 [ 870.761485][T18751] oom_kill_process+0x263/0x800 [ 870.761523][T18751] out_of_memory+0xf0c/0x12b0 [ 870.761569][T18751] ? __pfx_out_of_memory+0x10/0x10 [ 870.761613][T18751] mem_cgroup_out_of_memory+0x145/0x240 [ 870.761644][T18751] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 870.761684][T18751] ? _raw_spin_unlock+0x28/0x50 [ 870.761716][T18751] ? memcg1_oom_prepare+0x37f/0x450 [ 870.761770][T18751] try_charge_memcg+0xde4/0x1280 [ 870.761793][T18751] ? rcu_is_watching+0x15/0xb0 [ 870.761833][T18751] ? __pfx_try_charge_memcg+0x10/0x10 [ 870.761859][T18751] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 870.761897][T18751] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 870.761932][T18751] charge_memcg+0x9f/0x180 [ 870.761958][T18751] __mem_cgroup_charge+0x25/0x80 [ 870.761982][T18751] shmem_alloc_and_add_folio+0x790/0xf40 [ 870.762019][T18751] ? filemap_get_entry+0xad/0x2f0 [ 870.762051][T18751] ? filemap_get_entry+0xad/0x2f0 [ 870.762086][T18751] ? filemap_get_entry+0x28f/0x2f0 [ 870.762121][T18751] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 870.762157][T18751] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 870.762195][T18751] shmem_get_folio_gfp+0x59d/0x1660 [ 870.762237][T18751] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 870.762284][T18751] shmem_write_begin+0x16c/0x330 [ 870.762323][T18751] generic_perform_write+0x2c5/0x900 [ 870.762363][T18751] ? __pfx_generic_perform_write+0x10/0x10 [ 870.762389][T18751] ? __mark_inode_dirty+0x4cf/0x1350 [ 870.762426][T18751] ? mnt_put_write_access_file+0xc0/0x100 [ 870.762462][T18751] ? file_update_time_flags+0x400/0x4a0 [ 870.762501][T18751] shmem_file_write_iter+0xf8/0x120 [ 870.762530][T18751] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 870.762562][T18751] __kernel_write_iter+0x428/0x910 [ 870.762587][T18751] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 870.762620][T18751] ? __pfx___kernel_write_iter+0x10/0x10 [ 870.762665][T18751] ? __asan_memset+0x22/0x50 [ 870.762698][T18751] ? iov_iter_bvec+0xb8/0x180 [ 870.762726][T18751] dump_user_range+0x8a0/0xc90 [ 870.762772][T18751] ? __pfx_dump_user_range+0x10/0x10 [ 870.762800][T18751] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 870.762842][T18751] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 870.762894][T18751] ? dump_emit+0xa6/0xe0 [ 870.762921][T18751] ? elf_core_dump+0x2cd0/0x3960 [ 870.762984][T18751] elf_core_dump+0x3369/0x3960 [ 870.763035][T18751] ? __pfx_elf_core_dump+0x10/0x10 [ 870.763067][T18751] ? kasan_save_track+0x4f/0x80 [ 870.763086][T18751] ? kasan_save_track+0x3e/0x80 [ 870.763104][T18751] ? __kasan_kmalloc+0x93/0xb0 [ 870.763125][T18751] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 870.763145][T18751] ? coredump_write+0x343/0x18b0 [ 870.763172][T18751] ? vfs_coredump+0x3321/0x3e60 [ 870.763198][T18751] ? get_signal+0x1108/0x1340 [ 870.763227][T18751] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 870.763254][T18751] ? irqentry_exit+0x178/0x670 [ 870.763281][T18751] ? asm_exc_page_fault+0x26/0x30 [ 870.763308][T18751] ? mas_ascend+0x2f4/0x830 [ 870.763373][T18751] ? vfs_coredump+0x3321/0x3e60 [ 870.763403][T18751] ? 0xffffffffff600000 [ 870.763438][T18751] coredump_write+0x1121/0x18b0 [ 870.763489][T18751] ? __pfx_coredump_write+0x10/0x10 [ 870.763538][T18751] ? unshare_files+0xa9/0x140 [ 870.763564][T18751] vfs_coredump+0x3321/0x3e60 [ 870.763617][T18751] ? __pfx_vfs_coredump+0x10/0x10 [ 870.763645][T18751] ? __lock_acquire+0x6b6/0x2cf0 [ 870.763681][T18751] ? __lock_acquire+0x6b6/0x2cf0 [ 870.763725][T18751] ? __lock_acquire+0x6b6/0x2cf0 [ 870.763765][T18751] ? __lock_acquire+0x6b6/0x2cf0 [ 870.763801][T18751] ? __lock_acquire+0x6b6/0x2cf0 [ 870.763844][T18751] ? unwind_next_frame+0xa5/0x23d0 [ 870.763865][T18751] ? lock_acquire+0x107/0x340 [ 870.763904][T18751] ? unwind_next_frame+0xa5/0x23d0 [ 870.763929][T18751] ? is_bpf_text_address+0x26/0x2b0 [ 870.763958][T18751] ? lock_acquire+0x107/0x340 [ 870.764000][T18751] ? is_bpf_text_address+0x26/0x2b0 [ 870.764036][T18751] ? is_bpf_text_address+0x292/0x2b0 [ 870.764064][T18751] ? is_bpf_text_address+0x26/0x2b0 [ 870.764097][T18751] ? kernel_text_address+0xa5/0xe0 [ 870.764126][T18751] ? __kernel_text_address+0xd/0x40 [ 870.764153][T18751] ? unwind_get_return_address+0x4d/0x90 [ 870.764175][T18751] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 870.764204][T18751] ? arch_stack_walk+0xfc/0x150 [ 870.764240][T18751] ? stack_trace_save+0x9c/0xe0 [ 870.764273][T18751] ? __pfx_stack_trace_save+0x10/0x10 [ 870.764303][T18751] ? stack_depot_save_flags+0x33/0x810 [ 870.764343][T18751] ? kasan_save_track+0x4f/0x80 [ 870.764362][T18751] ? kasan_save_track+0x3e/0x80 [ 870.764381][T18751] ? kasan_save_free_info+0x46/0x50 [ 870.764408][T18751] ? __kasan_slab_free+0x5c/0x80 [ 870.764428][T18751] ? kmem_cache_free+0x197/0x620 [ 870.764460][T18751] ? get_signal+0xa4b/0x1340 [ 870.764487][T18751] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 870.764513][T18751] ? irqentry_exit+0x178/0x670 [ 870.764530][T18751] ? asm_exc_page_fault+0x26/0x30 [ 870.764592][T18751] ? _raw_spin_unlock_irq+0x23/0x50 [ 870.764621][T18751] get_signal+0x1108/0x1340 [ 870.764662][T18751] arch_do_signal_or_restart+0x9a/0x7a0 [ 870.764687][T18751] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 870.764727][T18751] irqentry_exit+0x178/0x670 [ 870.764745][T18751] ? trace_irq_disable+0x37/0x100 [ 870.764769][T18751] asm_exc_page_fault+0x26/0x30 [ 870.764785][T18751] RIP: 0033:0x7fecd3d8f751 [ 870.764802][T18751] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 870.764818][T18751] RSP: 002b:fffffffffffffd00 EFLAGS: 00010217 [ 870.764834][T18751] RAX: 0000000000000000 RBX: 00007fecd3fe6090 RCX: 00007fecd3d8f749 [ 870.764846][T18751] RDX: 0000000000000000 RSI: fffffffffffffd00 RDI: 0000000000000000 [ 870.764858][T18751] RBP: 00007fecd3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 870.764868][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.764878][T18751] R13: 00007fecd3fe6128 R14: 00007fecd3fe6090 R15: 00007ffec3b67d78 [ 870.764906][T18751] [ 871.492073][T18751] memory: usage 307200kB, limit 307200kB, failcnt 26674 [ 871.499216][T18751] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 871.507226][T18751] kmem: usage 11428kB, limit 9007199254740988kB, failcnt 0 [ 871.514551][T18751] Memory cgroup stats for /syz1: [ 871.514881][T18751] cache 302800896 [ 871.523620][T18751] rss 65536 [ 871.526776][T18751] rss_huge 0 [ 871.530092][T18751] shmem 302800896 [ 871.533777][T18751] mapped_file 0 [ 871.537294][T18751] dirty 0 [ 871.540335][T18751] writeback 0 [ 871.543665][T18751] workingset_refault_anon 1304 [ 871.548494][T18751] workingset_refault_file 1263 [ 871.553687][T18751] swap 127995904 [ 871.557275][T18751] swapcached 0 [ 871.560685][T18751] pgpgin 406075 [ 871.564230][T18751] pgpgout 332644 [ 871.567827][T18751] pgfault 215502 [ 871.571424][T18751] pgmajfault 205 [ 871.575098][T18751] inactive_anon 259715072 [ 871.579479][T18751] active_anon 42889216 [ 871.583664][T18751] inactive_file 0 [ 871.587343][T18751] active_file 0 [ 871.590845][T18751] unevictable 0 [ 871.594408][T18751] hierarchical_memory_limit 314572800 [ 871.599846][T18751] hierarchical_memsw_limit 9223372036854771712 [ 871.606099][T18751] total_cache 302800896 [ 871.610320][T18751] total_rss 65536 [ 871.614000][T18751] total_rss_huge 0 [ 871.617828][T18751] total_shmem 302800896 [ 871.622032][T18751] total_mapped_file 0 [ 871.626115][T18751] total_dirty 0 [ 871.629630][T18751] total_writeback 0 [ 871.633486][T18751] total_workingset_refault_anon 1304 [ 871.638903][T18751] total_workingset_refault_file 1263 [ 871.644281][T18751] total_swap 127995904 [ 871.648463][T18751] total_swapcached 0 [ 871.652421][T18751] total_pgpgin 406075 [ 871.656446][T18751] total_pgpgout 332644 [ 871.660623][T18751] total_pgfault 215502 [ 871.664744][T18751] total_pgmajfault 205 [ 871.668911][T18751] total_inactive_anon 259715072 [ 871.673815][T18751] total_active_anon 42889216 [ 871.678445][T18751] total_inactive_file 0 [ 871.687680][T18751] total_active_file 0 [ 871.691790][T18751] total_unevictable 0 [ 871.695837][T18751] anon_cost 0 [ 871.699172][T18751] file_cost 0 [ 871.702591][T18751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=18752,uid=0 [ 871.720670][T18751] Memory cgroup out of memory: Killed process 18752 (syz.1.3514) total-vm:98456kB, anon-rss:1276kB, file-rss:53888kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 871.861357][ T5884] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 872.020415][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 872.035650][ T5884] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 872.058178][ T5884] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 872.073053][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.084670][T18973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.102831][ T5884] usb 5-1: Product: syz [ 872.112690][T18973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.126887][ T5884] usb 5-1: Manufacturer: syz [ 872.142543][ T5884] usb 5-1: SerialNumber: syz [ 872.381346][ T5884] usb 5-1: selecting invalid altsetting 1 [ 872.522677][ T5876] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 872.602600][ T5884] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 872.602720][ T5884] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 872.662322][ T5876] usb 6-1: device descriptor read/64, error -71 [ 872.715932][T11796] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 872.730868][T11796] usb 7-1: USB disconnect, device number 50 [ 872.928676][ T5876] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 873.078197][ T5876] usb 6-1: device descriptor read/64, error -71 [ 873.131582][ T5931] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 873.143643][T11796] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 873.207216][ T5876] usb usb6-port1: attempt power cycle [ 873.335260][T11796] usb 7-1: unable to get BOS descriptor or descriptor too short [ 873.355969][T11796] usb 7-1: not running at top speed; connect to a high speed hub [ 873.387977][T11796] usb 7-1: config 12 has an invalid interface number: 218 but max is 0 [ 873.396341][T11796] usb 7-1: config 12 has no interface number 0 [ 873.402980][T11796] usb 7-1: config 12 interface 218 has no altsetting 0 [ 873.427360][ T5931] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 873.452406][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.473486][T11796] usb 7-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice= 8.30 [ 873.482619][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.490928][ T5931] usb 2-1: Product: syz [ 873.495284][ T5931] usb 2-1: Manufacturer: syz [ 873.499915][ T5931] usb 2-1: SerialNumber: syz [ 873.516190][T11796] usb 7-1: Product: syz [ 873.520411][T11796] usb 7-1: Manufacturer: syz [ 873.525031][T11796] usb 7-1: SerialNumber: syz [ 873.554844][ T5931] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 873.580752][ T5876] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 873.624026][ T5876] usb 6-1: device descriptor read/8, error -71 [ 873.626670][T11797] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 873.890156][ T5876] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 873.912992][ T5876] usb 6-1: device descriptor read/8, error -71 [ 873.988329][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.011373][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.032867][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.048694][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.057287][ T5876] usb usb6-port1: unable to enumerate USB device [ 874.111166][T18978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.171428][T18978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.297899][T18977] comedi comedi4: bad chanlist[0]=0x00020004 chan=4 range length=2 [ 874.320368][T11796] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 874.337612][T11796] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 874.347669][T11796] dib0700: firmware download failed at 7 with -22 [ 874.359632][T11796] usb 7-1: USB disconnect, device number 51 [ 874.529331][ T5876] usb 2-1: USB disconnect, device number 70 [ 874.773766][ T5884] usb 5-1: USB disconnect, device number 65 [ 874.969236][ T5827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 874.969343][T11797] usb 2-1: Service connection timeout for: 256 [ 874.981879][ T5827] Bluetooth: hci3: Injecting HCI hardware error event [ 874.995080][ T5829] Bluetooth: hci3: hardware error 0x00 [ 875.030099][T11797] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 875.061859][T11797] ath9k_htc: Failed to initialize the device [ 875.075542][ T5876] usb 2-1: ath9k_htc: USB layer deinitialized [ 875.179695][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3582'. [ 875.193603][ T5884] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 875.356638][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.385870][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.395678][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.411742][ T5884] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 875.428535][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.459373][ T5884] usb 7-1: config 0 descriptor?? [ 875.663146][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 875.693148][T18984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.705414][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 875.715075][T18984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.824614][T11797] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 875.932575][T19012] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 875.939645][T19012] overlayfs: failed to set xattr on upper [ 875.954274][ T5884] acrux 0003:1A34:0802.0066: global environment stack underflow [ 875.967543][ T5884] acrux 0003:1A34:0802.0066: item 0 0 1 11 parsing failed [ 875.984711][ T5884] acrux 0003:1A34:0802.0066: parse failed [ 875.991669][T19012] overlayfs: ...falling back to redirect_dir=nofollow. [ 875.995839][T11797] usb 2-1: Using ep0 maxpacket: 16 [ 876.004804][ T5884] acrux 0003:1A34:0802.0066: probe with driver acrux failed with error -22 [ 876.006746][T11796] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 876.038942][T19012] overlayfs: ...falling back to index=off. [ 876.042280][T11797] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.049207][T19012] overlayfs: ...falling back to uuid=null. [ 876.068015][T11797] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.089821][T11797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 876.105422][T11797] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 876.118189][T11797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.133384][T19012] overlayfs: workdir and upperdir must be separate subtrees [ 876.143027][T11797] usb 2-1: config 0 descriptor?? [ 876.170560][ T5884] usb 7-1: USB disconnect, device number 52 [ 876.187796][T11796] usb 6-1: Using ep0 maxpacket: 16 [ 876.199887][T11796] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 876.208120][T11796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.241914][T11796] usb 6-1: config 0 has no interface number 0 [ 876.256127][T11796] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 876.265858][T11796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.284128][T11796] usb 6-1: Product: syz [ 876.288402][T11796] usb 6-1: Manufacturer: syz [ 876.293048][T11796] usb 6-1: SerialNumber: syz [ 876.307478][T11796] usb 6-1: config 0 descriptor?? [ 876.320043][T11796] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 876.344912][T11796] uvcvideo 6-1:0.105: No valid video chain found. [ 876.550495][ T5884] usb 6-1: USB disconnect, device number 12 [ 876.696546][T18998] binder: BINDER_SET_CONTEXT_MGR already set [ 876.702887][T18998] binder: 18995:18998 ioctl 4018620d 200000004a80 returned -16 [ 876.715641][T11797] kye 0003:0458:5005.0067: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 876.726671][T11797] kye 0003:0458:5005.0067: unknown main item tag 0x0 [ 876.734853][T11797] kye 0003:0458:5005.0067: unknown main item tag 0x0 [ 876.756295][T11797] kye 0003:0458:5005.0067: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 876.780515][T11797] kye 0003:0458:5005.0067: tablet-enabling feature report not found [ 876.810601][T11797] kye 0003:0458:5005.0067: tablet enabling failed [ 876.971764][T19020] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 877.191390][ T5829] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 877.458496][T11797] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 877.544047][T11796] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 877.557918][T18995] syz.1.3584 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 877.618992][T11797] usb 6-1: Using ep0 maxpacket: 32 [ 877.626479][T11797] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 877.646095][T18995] CPU: 1 UID: 0 PID: 18995 Comm: syz.1.3584 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.646131][T18995] Tainted: [L]=SOFTLOCKUP [ 877.646140][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 877.646154][T18995] Call Trace: [ 877.646163][T18995] [ 877.646173][T18995] dump_stack_lvl+0xe8/0x150 [ 877.646203][T18995] dump_header+0xd4/0x4c0 [ 877.646236][T18995] oom_kill_process+0x263/0x800 [ 877.646273][T18995] out_of_memory+0xf0c/0x12b0 [ 877.646320][T18995] ? __pfx_out_of_memory+0x10/0x10 [ 877.646363][T18995] mem_cgroup_out_of_memory+0x145/0x240 [ 877.646393][T18995] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 877.646433][T18995] ? _raw_spin_unlock+0x28/0x50 [ 877.646466][T18995] ? memcg1_oom_prepare+0x37f/0x450 [ 877.646501][T18995] try_charge_memcg+0xde4/0x1280 [ 877.646541][T18995] ? __pfx_try_charge_memcg+0x10/0x10 [ 877.646581][T18995] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 877.646612][T18995] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 877.646648][T18995] __memcg_kmem_charge_page+0xe1/0x240 [ 877.646684][T18995] memcg_charge_kernel_stack+0x227/0x500 [ 877.646709][T18995] ? dup_task_struct+0x1b3/0x9a0 [ 877.646744][T18995] dup_task_struct+0x1d2/0x9a0 [ 877.646779][T18995] ? _raw_spin_unlock_irq+0x23/0x50 [ 877.646816][T18995] copy_process+0x4e8/0x3ba0 [ 877.646848][T18995] ? lock_acquire+0x107/0x340 [ 877.646904][T18995] ? __pfx_copy_process+0x10/0x10 [ 877.646950][T18995] kernel_clone+0x21e/0x820 [ 877.646978][T18995] ? __pfx_kernel_clone+0x10/0x10 [ 877.647021][T18995] __se_sys_clone3+0x256/0x2d0 [ 877.647043][T18995] ? __might_fault+0xb0/0x130 [ 877.647074][T18995] ? __pfx___se_sys_clone3+0x10/0x10 [ 877.647124][T18995] ? _copy_to_user+0x8a/0xb0 [ 877.647162][T18995] ? do_user_addr_fault+0xc85/0x1380 [ 877.647203][T18995] do_syscall_64+0xec/0xf80 [ 877.647225][T18995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.647245][T18995] ? trace_irq_disable+0x37/0x100 [ 877.647269][T18995] ? clear_bhb_loop+0x40/0x90 [ 877.647294][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.647315][T18995] RIP: 0033:0x7fecd3dc3e89 [ 877.647336][T18995] Code: ef 08 00 48 8d 3d 5c ef 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 877.647354][T18995] RSP: 002b:00007ffec3b67c48 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 877.647377][T18995] RAX: ffffffffffffffda RBX: 00007fecd3d462a0 RCX: 00007fecd3dc3e89 [ 877.647393][T18995] RDX: 00007fecd3d462a0 RSI: 0000000000000058 RDI: 00007ffec3b67c90 [ 877.647407][T18995] RBP: 00007fecd4b5f6c0 R08: 00007fecd4b5f6c0 R09: 00007ffec3b67d77 [ 877.647440][T18995] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 877.647455][T18995] R13: 000000000000006e R14: 00007ffec3b67c90 R15: 00007ffec3b67d78 [ 877.647489][T18995] [ 877.655959][T11797] usb 6-1: config 0 has no interface number 0 [ 877.674342][T18995] memory: usage 307200kB, limit 307200kB, failcnt 29366 [ 877.704385][T11797] usb 6-1: config 0 interface 202 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 877.953322][T18995] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 877.961523][T18995] kmem: usage 11376kB, limit 9007199254740988kB, failcnt 0 [ 877.968785][T18995] Memory cgroup stats for /syz1: [ 877.969172][T18995] cache 302731264 [ 877.978256][T18995] rss 192512 [ 877.981698][T18995] rss_huge 0 [ 877.985025][T18995] shmem 302731264 [ 877.988691][T18995] mapped_file 0 [ 877.992297][T18995] dirty 0 [ 877.996328][T18995] writeback 0 [ 877.999727][T18995] workingset_refault_anon 1312 [ 878.005139][T18995] workingset_refault_file 2483 [ 878.010293][T18995] swap 127975424 [ 878.015823][T11796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.026436][T11796] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 878.035902][T11797] usb 6-1: config 0 interface 202 has no altsetting 0 [ 878.042980][T11796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.052478][T18995] swapcached 0 [ 878.056764][T18995] pgpgin 424257 [ 878.067101][T11797] usb 6-1: New USB device found, idVendor=86ba, idProduct=3fa1, bcdDevice=39.61 [ 878.077574][T11796] usb 7-1: config 0 descriptor?? [ 878.085276][T11797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.093474][T18995] pgpgout 350812 [ 878.097084][T18995] pgfault 216975 [ 878.101819][T11797] usb 6-1: Product: syz [ 878.109028][T11796] pwc: Askey VC010 type 2 USB webcam detected. [ 878.116172][T11797] usb 6-1: Manufacturer: syz [ 878.121230][T11797] usb 6-1: SerialNumber: syz [ 878.131047][T11797] usb 6-1: config 0 descriptor?? [ 878.141077][T18995] pgmajfault 223 [ 878.145376][T18995] inactive_anon 203399168 [ 878.150503][T19032] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 878.160435][T11797] usb-storage 6-1:0.202: USB Mass Storage device detected [ 878.173231][T18995] active_anon 99000320 [ 878.199394][T18995] inactive_file 0 [ 878.203292][T18995] active_file 0 [ 878.214059][T18995] unevictable 0 [ 878.220441][T18995] hierarchical_memory_limit 314572800 [ 878.232168][T18995] hierarchical_memsw_limit 9223372036854771712 [ 878.238609][T18995] total_cache 302731264 [ 878.242917][T18995] total_rss 192512 [ 878.246682][T18995] total_rss_huge 0 [ 878.254248][T18995] total_shmem 302731264 [ 878.258439][T18995] total_mapped_file 0 [ 878.262515][T18995] total_dirty 0 [ 878.266120][T18995] total_writeback 0 [ 878.269981][T18995] total_workingset_refault_anon 1312 [ 878.277107][T18995] total_workingset_refault_file 2483 [ 878.282994][T18995] total_swap 127975424 [ 878.287136][T18995] total_swapcached 0 [ 878.291169][T18995] total_pgpgin 424257 [ 878.295328][T18995] total_pgpgout 350812 [ 878.299419][T18995] total_pgfault 216975 [ 878.303761][T18995] total_pgmajfault 223 [ 878.307855][T18995] total_inactive_anon 203399168 [ 878.312742][T18995] total_active_anon 99000320 [ 878.321090][T18995] total_inactive_file 0 [ 878.325309][T18995] total_active_file 0 [ 878.329386][T18995] total_unevictable 0 [ 878.333551][T18995] anon_cost 0 [ 878.336994][T18995] file_cost 0 [ 878.340388][T18995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 878.389156][ T5884] usb 6-1: USB disconnect, device number 13 [ 878.413304][T18995] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=18751,uid=0 [ 878.444589][T18995] Memory cgroup out of memory: Killed process 18751 (syz.1.3514) total-vm:98456kB, anon-rss:1276kB, file-rss:54228kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 878.563997][T11796] pwc: recv_control_msg error -32 req 02 val 2b00 [ 878.573779][T11796] pwc: recv_control_msg error -32 req 02 val 2700 [ 878.591535][T11796] pwc: recv_control_msg error -32 req 02 val 2c00 [ 878.602283][T11796] pwc: recv_control_msg error -32 req 04 val 1000 [ 878.620260][T11796] pwc: recv_control_msg error -32 req 04 val 1300 [ 878.704047][T15073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.966795][T18749] syz.1.3514 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 879.060548][T11796] pwc: recv_control_msg error -71 req 02 val 2100 [ 879.079345][T11796] pwc: recv_control_msg error -71 req 04 val 1500 [ 879.101002][T11796] pwc: recv_control_msg error -71 req 02 val 2500 [ 879.122541][T11796] pwc: recv_control_msg error -71 req 02 val 2400 [ 879.133263][T11796] pwc: recv_control_msg error -71 req 02 val 2600 [ 879.154821][T11796] pwc: recv_control_msg error -71 req 02 val 2900 [ 879.155180][T18749] CPU: 1 UID: 0 PID: 18749 Comm: syz.1.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.155258][T18749] Tainted: [L]=SOFTLOCKUP [ 879.155279][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 879.155312][T18749] Call Trace: [ 879.155340][T18749] [ 879.155362][T18749] dump_stack_lvl+0xe8/0x150 [ 879.155442][T18749] dump_header+0xd4/0x4c0 [ 879.155520][T18749] oom_kill_process+0x263/0x800 [ 879.155640][T18749] out_of_memory+0xf0c/0x12b0 [ 879.155757][T18749] ? __pfx_out_of_memory+0x10/0x10 [ 879.155873][T18749] mem_cgroup_out_of_memory+0x145/0x240 [ 879.155955][T18749] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 879.156060][T18749] ? _raw_spin_unlock+0x28/0x50 [ 879.156145][T18749] ? memcg1_oom_prepare+0x37f/0x450 [ 879.156233][T18749] try_charge_memcg+0xde4/0x1280 [ 879.156288][T18749] ? rcu_is_watching+0x15/0xb0 [ 879.156430][T18749] ? __pfx_try_charge_memcg+0x10/0x10 [ 879.156506][T18749] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 879.156601][T18749] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 879.156698][T18749] charge_memcg+0x9f/0x180 [ 879.156757][T18749] __mem_cgroup_charge+0x25/0x80 [ 879.156810][T18749] shmem_alloc_and_add_folio+0x790/0xf40 [ 879.156896][T18749] ? filemap_get_entry+0xad/0x2f0 [ 879.156969][T18749] ? filemap_get_entry+0xad/0x2f0 [ 879.157050][T18749] ? filemap_get_entry+0x28f/0x2f0 [ 879.157134][T18749] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 879.157211][T18749] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 879.157267][T18749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 879.157342][T18749] shmem_get_folio_gfp+0x59d/0x1660 [ 879.157472][T18749] shmem_write_begin+0x16c/0x330 [ 879.157559][T18749] generic_perform_write+0x2c5/0x900 [ 879.157652][T18749] ? __pfx_generic_perform_write+0x10/0x10 [ 879.157705][T18749] ? down_write+0x162/0x1f0 [ 879.157815][T18749] ? file_update_time_flags+0x3b3/0x4a0 [ 879.157920][T18749] shmem_file_write_iter+0xf8/0x120 [ 879.157991][T18749] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 879.158076][T18749] __kernel_write_iter+0x428/0x910 [ 879.158136][T18749] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 879.158222][T18749] ? __pfx___kernel_write_iter+0x10/0x10 [ 879.158332][T18749] ? __asan_memset+0x22/0x50 [ 879.158420][T18749] ? iov_iter_bvec+0xb8/0x180 [ 879.158483][T18749] dump_user_range+0x8a0/0xc90 [ 879.158608][T18749] ? __pfx_dump_user_range+0x10/0x10 [ 879.158671][T18749] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 879.158765][T18749] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 879.158872][T18749] ? dump_emit+0xa6/0xe0 [ 879.158934][T18749] ? elf_core_dump+0x2cd0/0x3960 [ 879.159016][T18749] elf_core_dump+0x3369/0x3960 [ 879.159155][T18749] ? __pfx_elf_core_dump+0x10/0x10 [ 879.159265][T18749] ? kasan_save_track+0x4f/0x80 [ 879.159316][T18749] ? kasan_save_track+0x3e/0x80 [ 879.159359][T18749] ? __kasan_kmalloc+0x93/0xb0 [ 879.159410][T18749] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 879.159462][T18749] ? coredump_write+0x343/0x18b0 [ 879.159518][T18749] ? vfs_coredump+0x3321/0x3e60 [ 879.159582][T18749] ? get_signal+0x1108/0x1340 [ 879.159654][T18749] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 879.159723][T18749] ? irqentry_exit+0x178/0x670 [ 879.159774][T18749] ? asm_exc_page_fault+0x26/0x30 [ 879.159836][T18749] ? mas_ascend+0x2f4/0x830 [ 879.160000][T18749] ? vfs_coredump+0x3321/0x3e60 [ 879.160073][T18749] ? 0xffffffffff600000 [ 879.160158][T18749] coredump_write+0x1121/0x18b0 [ 879.160267][T18749] ? __pfx_coredump_write+0x10/0x10 [ 879.160389][T18749] ? unshare_files+0xa9/0x140 [ 879.160454][T18749] vfs_coredump+0x3321/0x3e60 [ 879.160604][T18749] ? __pfx_vfs_coredump+0x10/0x10 [ 879.160671][T18749] ? __lock_acquire+0x6b6/0x2cf0 [ 879.160761][T18749] ? __lock_acquire+0x6b6/0x2cf0 [ 879.160872][T18749] ? __lock_acquire+0x6b6/0x2cf0 [ 879.160966][T18749] ? __lock_acquire+0x6b6/0x2cf0 [ 879.161050][T18749] ? __lock_acquire+0x6b6/0x2cf0 [ 879.161152][T18749] ? unwind_next_frame+0xa5/0x23d0 [ 879.161203][T18749] ? lock_acquire+0x107/0x340 [ 879.161298][T18749] ? unwind_next_frame+0xa5/0x23d0 [ 879.161322][T18749] ? is_bpf_text_address+0x26/0x2b0 [ 879.161350][T18749] ? lock_acquire+0x107/0x340 [ 879.161390][T18749] ? is_bpf_text_address+0x26/0x2b0 [ 879.161428][T18749] ? is_bpf_text_address+0x292/0x2b0 [ 879.161456][T18749] ? is_bpf_text_address+0x26/0x2b0 [ 879.161488][T18749] ? kernel_text_address+0xa5/0xe0 [ 879.161513][T18749] ? __kernel_text_address+0xd/0x40 [ 879.161539][T18749] ? unwind_get_return_address+0x4d/0x90 [ 879.161560][T18749] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 879.161588][T18749] ? arch_stack_walk+0xfc/0x150 [ 879.161621][T18749] ? stack_trace_save+0x9c/0xe0 [ 879.161647][T18749] ? __pfx_stack_trace_save+0x10/0x10 [ 879.161676][T18749] ? stack_depot_save_flags+0x33/0x810 [ 879.161720][T18749] ? kasan_save_track+0x4f/0x80 [ 879.161738][T18749] ? kasan_save_track+0x3e/0x80 [ 879.161773][T18749] ? kasan_save_free_info+0x46/0x50 [ 879.161801][T18749] ? __kasan_slab_free+0x5c/0x80 [ 879.161821][T18749] ? kmem_cache_free+0x197/0x620 [ 879.161853][T18749] ? get_signal+0xa4b/0x1340 [ 879.161881][T18749] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 879.161906][T18749] ? irqentry_exit+0x178/0x670 [ 879.161927][T18749] ? asm_exc_page_fault+0x26/0x30 [ 879.162011][T18749] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.162048][T18749] get_signal+0x1108/0x1340 [ 879.162103][T18749] arch_do_signal_or_restart+0x9a/0x7a0 [ 879.162153][T18749] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 879.162206][T18749] irqentry_exit+0x178/0x670 [ 879.162231][T18749] ? trace_irq_disable+0x37/0x100 [ 879.162263][T18749] asm_exc_page_fault+0x26/0x30 [ 879.162284][T18749] RIP: 0033:0x7fecd3d8f751 [ 879.162306][T18749] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 879.162326][T18749] RSP: 002b:fffffffffffffd00 EFLAGS: 00010217 [ 879.162346][T18749] RAX: 0000000000000000 RBX: 00007fecd3fe6090 RCX: 00007fecd3d8f749 [ 879.162361][T18749] RDX: 0000000000000000 RSI: fffffffffffffd00 RDI: 0000000000000000 [ 879.162377][T18749] RBP: 00007fecd3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 879.162430][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.162476][T18749] R13: 00007fecd3fe6128 R14: 00007fecd3fe6090 R15: 00007ffec3b67d78 [ 879.162584][T18749] [ 879.288338][ T5884] usb 2-1: USB disconnect, device number 71 [ 879.441596][T18749] memory: usage 306948kB, limit 307200kB, failcnt 29767 [ 879.447616][ T5876] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 879.518185][T11796] pwc: recv_control_msg error -71 req 02 val 2800 [ 879.541860][T18749] memory+swap: usage 431992kB, limit 9007199254740988kB, failcnt 0 [ 879.593262][T11796] pwc: recv_control_msg error -71 req 04 val 1100 [ 879.831697][ T5876] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 879.842730][ T5876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 879.897653][ T5876] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 879.915735][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 879.924025][ T5876] usb 6-1: Product: syz [ 879.928840][ T5876] usb 6-1: Manufacturer: syz [ 879.935451][T15073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.949752][T11796] pwc: recv_control_msg error -71 req 04 val 1200 [ 879.956490][ T5876] usb 6-1: SerialNumber: syz [ 879.974947][T11796] pwc: Registered as video103. [ 879.989485][ T5876] usb 6-1: config 0 descriptor?? [ 880.012243][ T5876] usb 6-1: selecting invalid altsetting 0 [ 880.014535][T11796] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input101 [ 880.077567][T11796] usb 7-1: USB disconnect, device number 53 [ 880.192690][T18749] kmem: usage 10916kB, limit 9007199254740988kB, failcnt 0 [ 880.248275][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.256309][T18749] Memory cgroup stats for /syz1: [ 880.256782][T18749] cache 303214592 [ 880.282312][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.352211][T18749] rss 94208 [ 880.394309][T18749] rss_huge 0 [ 880.458545][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 880.469865][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 880.480237][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 880.505814][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 880.514404][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 880.550544][ T5876] usb 6-1: USB disconnect, device number 14 [ 880.632552][T18749] shmem 303009792 [ 880.636257][T18749] mapped_file 0 [ 880.639753][T18749] dirty 0 [ 880.756634][T18749] writeback 0 [ 880.815818][T18749] workingset_refault_anon 1312 [ 880.822958][T18749] workingset_refault_file 2533 [ 880.834585][T18749] swap 127893504 [ 880.838275][T18749] swapcached 0 [ 880.841676][T18749] pgpgin 425030 [ 880.856090][T18749] pgpgout 351471 [ 880.859788][T18749] pgfault 217008 [ 880.863365][T18749] pgmajfault 224 [ 880.946973][T18749] inactive_anon 178749440 [ 880.951483][T18749] active_anon 123801600 [ 881.024178][T18749] inactive_file 204800 [ 881.074374][T15073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.085884][T18749] active_file 0 [ 881.089437][T18749] unevictable 0 [ 881.141212][T18749] hierarchical_memory_limit 314572800 [ 881.155036][ T5876] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 881.197788][T18749] hierarchical_memsw_limit 9223372036854771712 [ 881.204029][T18749] total_cache 303214592 [ 881.208229][T18749] total_rss 94208 [ 881.244214][T15073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.265904][T18749] total_rss_huge 0 [ 881.269768][T18749] total_shmem 303009792 [ 881.274443][T18749] total_mapped_file 0 [ 881.281308][T18749] total_dirty 0 [ 881.285196][T18749] total_writeback 0 [ 881.289034][T18749] total_workingset_refault_anon 1312 [ 881.294388][T11796] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 881.303104][T18749] total_workingset_refault_file 2533 [ 881.308763][T18749] total_swap 127893504 [ 881.312910][T18749] total_swapcached 0 [ 881.316975][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 881.324624][T18749] total_pgpgin 425030 [ 881.329089][ T5876] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 881.338981][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.358700][ T5876] usb 6-1: config 0 descriptor?? [ 881.372849][ T5876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 881.394798][T18749] total_pgpgout 351471 [ 881.399027][T18749] total_pgfault 217008 [ 881.454252][T11796] usb 7-1: Using ep0 maxpacket: 32 [ 881.466494][T11796] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.507805][T11796] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.529078][T18749] total_pgmajfault 224 [ 881.533297][T18749] total_inactive_anon 178749440 [ 881.538187][T18749] total_active_anon 123801600 [ 881.550432][T11796] usb 7-1: config 1 interface 0 has no altsetting 0 [ 881.579139][T11796] usb 7-1: New USB device found, idVendor=2247, idProduct=0001, bcdDevice= 0.40 [ 881.615356][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.623515][T11796] usb 7-1: Product: Ч [ 881.657191][T11796] usb 7-1: Manufacturer: 큕꘮꣐៵픏৙ૃ歊闅憸낖삈㪊ꕾ⦺땻৯떖챃쿨㇄뢮䡗潘㮗ﱷᶸ噖㙺瞅뵵 [ 881.690550][T11796] usb 7-1: SerialNumber: 쟋ṽ窉멭ᶵ [ 881.714416][T19051] chnl_net:caif_netlink_parms(): no params data found [ 881.750258][T18749] total_inactive_file 204800 [ 881.781445][T18749] total_active_file 0 [ 881.824324][T18749] total_unevictable 0 [ 881.868093][T18749] anon_cost 0 [ 881.894875][T18749] file_cost 0 [ 881.898259][T18749] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=18757,uid=0 [ 882.010499][T11796] usbhid 7-1:1.0: can't add hid device: -71 [ 882.016582][T11796] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 882.026547][T19060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.055994][T19060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.072500][T18749] Memory cgroup out of memory: Killed process 18757 (syz.1.3514) total-vm:98456kB, anon-rss:1276kB, file-rss:56612kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 882.089174][T11796] usb 7-1: USB disconnect, device number 54 [ 882.214819][T15073] bridge_slave_1: left allmulticast mode [ 882.220694][T15073] bridge_slave_1: left promiscuous mode [ 882.231708][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.311608][ T5876] gspca_sunplus: reg_r err -71 [ 882.316629][ T5876] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 882.332549][ T5876] usb 6-1: USB disconnect, device number 15 [ 882.396489][T15073] bridge_slave_0: left allmulticast mode [ 882.402229][T15073] bridge_slave_0: left promiscuous mode [ 882.416194][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.757800][ T5827] Bluetooth: hci1: command tx timeout [ 882.918100][ T5876] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 883.112124][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.122276][ T5876] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 883.131385][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.154730][ T5876] usb 7-1: config 0 descriptor?? [ 883.194421][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.229834][ T5869] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 883.275397][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.372943][T19051] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.377588][ T5869] usb 6-1: device descriptor read/64, error -71 [ 883.387032][T19051] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.405419][T19051] bridge_slave_0: entered allmulticast mode [ 883.416809][T19051] bridge_slave_0: entered promiscuous mode [ 883.422993][T19077] /dev/sg0: Can't lookup blockdev [ 883.441503][ T5884] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 883.451542][T19051] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.458837][T19051] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.475424][T19051] bridge_slave_1: entered allmulticast mode [ 883.491726][T19051] bridge_slave_1: entered promiscuous mode [ 883.596943][T15073] tipc: Left network mode [ 883.611114][ T5876] hid-led 0003:1294:1320.0068: unknown main item tag 0x0 [ 883.620928][T19051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.633806][ T5876] hid-led 0003:1294:1320.0068: item fetching failed at offset 5/7 [ 883.646048][ T5869] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 883.655068][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 883.663301][T19051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.674550][ T5876] hid-led 0003:1294:1320.0068: probe with driver hid-led failed with error -22 [ 883.706005][ T5884] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 883.716710][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.740201][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.776577][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.794981][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.808447][ T5869] usb 6-1: device descriptor read/64, error -71 [ 883.820046][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 883.828975][T11797] usb 7-1: USB disconnect, device number 55 [ 883.835327][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.916878][T19051] team0: Port device team_slave_0 added [ 883.926632][T19051] team0: Port device team_slave_1 added [ 883.932489][ T5869] usb usb6-port1: attempt power cycle [ 884.079981][ T5884] usb 2-1: usb_control_msg returned -71 [ 884.087935][ T5884] usbtmc 2-1:16.0: can't read capabilities [ 884.124351][ T5884] usb 2-1: USB disconnect, device number 72 [ 884.181836][T19051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.189408][T19051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.243192][T19051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.276238][T19051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.283345][T19051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.297350][ T5869] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 884.350928][ T5869] usb 6-1: device descriptor read/8, error -71 [ 884.381558][T19051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.449294][T15073] hsr_slave_0: left promiscuous mode [ 884.469654][T15073] hsr_slave_1: left promiscuous mode [ 884.475898][T15073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.514237][T15073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.567891][T15073] veth1_macvtap: left promiscuous mode [ 884.573520][T15073] veth0_macvtap: left promiscuous mode [ 884.595543][T15073] veth1_vlan: left promiscuous mode [ 884.607046][ T5869] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 884.607761][T15073] veth0_vlan: left promiscuous mode [ 884.648791][ T5869] usb 6-1: device descriptor read/8, error -71 [ 884.766636][ T5869] usb usb6-port1: unable to enumerate USB device [ 884.973255][ T5827] Bluetooth: hci1: command tx timeout [ 885.578277][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3609'. [ 886.338844][T19104] dlm: non-version read from control device 8192 [ 886.603827][ T5189] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 886.711779][T18750] ------------[ cut here ]------------ [ 886.718748][T18750] kernel BUG at mm/swap_cgroup.c:78! [ 886.724103][T18750] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 886.730380][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.1.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.741361][T18750] Tainted: [L]=SOFTLOCKUP [ 886.745764][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.756009][T18750] RIP: 0010:swap_cgroup_record+0x19c/0x1c0 [ 886.761865][T18750] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe [ 886.781599][T18750] RSP: 0018:ffffc9000e47d140 EFLAGS: 00010093 [ 886.787692][T18750] RAX: ffffffff8231516b RBX: 0000000000001237 RCX: ffff8880691c0000 [ 886.795681][T18750] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 886.803664][T18750] RBP: 0000000000000004 R08: 0000000000000003 R09: 0000000000000004 [ 886.811646][T18750] R10: dffffc0000000000 R11: fffff52001c8fa18 R12: dffffc0000000000 [ 886.819632][T18750] R13: 0000000000000000 R14: ffffc9000b184000 R15: 0000000000000004 [ 886.827624][T18750] FS: 00007fecd4b5f6c0(0000) GS:ffff888125abb000(0000) knlGS:0000000000000000 [ 886.836582][T18750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.843183][T18750] CR2: 00007f84d3846fe0 CR3: 000000007630a000 CR4: 00000000003526f0 [ 886.851173][T18750] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 886.859162][T18750] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 886.867143][T18750] Call Trace: [ 886.870441][T18750] [ 886.873402][T18750] memcg1_swapout+0x2fa/0x830 [ 886.878113][T18750] __remove_mapping+0xac5/0xe30 [ 886.882983][T18750] shrink_folio_list+0x28a8/0x5200 [ 886.888130][T18750] ? __pfx_shrink_folio_list+0x10/0x10 [ 886.893605][T18750] ? css_rstat_updated+0x239/0x520 [ 886.898744][T18750] ? __pfx_css_rstat_updated+0x10/0x10 [ 886.904223][T18750] ? __asan_memset+0x22/0x50 [ 886.908844][T18750] ? move_folios_to_lru+0xe83/0x1050 [ 886.914162][T18750] ? __pfx_css_rstat_updated+0x10/0x10 [ 886.919643][T18750] ? __mod_zone_page_state+0xd7/0x140 [ 886.925043][T18750] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.930269][T18750] evict_folios+0x473e/0x57f0 [ 886.934998][T18750] ? __pfx_evict_folios+0x10/0x10 [ 886.940070][T18750] ? get_swappiness+0x452/0x4c0 [ 886.944951][T18750] try_to_shrink_lruvec+0x8be/0xb60 [ 886.950187][T18750] ? blk_start_plug+0x6f/0x1b0 [ 886.954974][T18750] shrink_lruvec+0x4a3/0x2a40 [ 886.959672][T18750] ? rcu_is_watching+0x15/0xb0 [ 886.964452][T18750] ? trace_sched_exit_tp+0x36/0xf0 [ 886.969588][T18750] ? __schedule+0x1503/0x5040 [ 886.974291][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 886.979255][T18750] ? __pfx_shrink_lruvec+0x10/0x10 [ 886.984394][T18750] ? do_raw_spin_lock+0x121/0x290 [ 886.989442][T18750] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 886.995282][T18750] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 887.001913][T18750] ? page_counter_calculate_protection+0x188/0x470 [ 887.008446][T18750] shrink_node+0xa38/0x3720 [ 887.013003][T18750] ? __pfx_shrink_node+0x10/0x10 [ 887.017952][T18750] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 887.024045][T18750] ? queue_work_on+0x117/0x1c0 [ 887.028834][T18750] ? lockdep_hardirqs_on+0x7b/0x110 [ 887.034047][T18750] ? _raw_spin_unlock+0x28/0x50 [ 887.038929][T18750] do_try_to_free_pages+0x668/0x18a0 [ 887.044247][T18750] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 887.049989][T18750] try_to_free_mem_cgroup_pages+0x2b6/0x730 [ 887.055917][T18750] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 887.062356][T18750] ? psi_memstall_enter+0x25c/0x320 [ 887.067583][T18750] ? lockdep_hardirqs_on+0x7b/0x110 [ 887.072807][T18750] ? psi_memstall_enter+0x25c/0x320 [ 887.078032][T18750] try_charge_memcg+0xa2d/0x1280 [ 887.082994][T18750] ? rcu_is_watching+0x15/0xb0 [ 887.087802][T18750] ? __pfx_try_charge_memcg+0x10/0x10 [ 887.093194][T18750] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 887.098691][T18750] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 887.104167][T18750] charge_memcg+0x9f/0x180 [ 887.108613][T18750] __mem_cgroup_charge+0x25/0x80 [ 887.113565][T18750] shmem_alloc_and_add_folio+0x790/0xf40 [ 887.119223][T18750] ? filemap_get_entry+0xad/0x2f0 [ 887.124274][T18750] ? filemap_get_entry+0xad/0x2f0 [ 887.129320][T18750] ? filemap_get_entry+0x28f/0x2f0 [ 887.134459][T18750] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 887.140640][T18750] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 887.146645][T18750] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 887.152041][T18750] shmem_get_folio_gfp+0x59d/0x1660 [ 887.157267][T18750] shmem_write_begin+0x16c/0x330 [ 887.162231][T18750] generic_perform_write+0x2c5/0x900 [ 887.167622][T18750] ? __pfx_generic_perform_write+0x10/0x10 [ 887.173446][T18750] ? down_write+0x162/0x1f0 [ 887.177969][T18750] ? file_update_time_flags+0x3b3/0x4a0 [ 887.183539][T18750] shmem_file_write_iter+0xf8/0x120 [ 887.188763][T18750] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 887.194591][T18750] __kernel_write_iter+0x428/0x910 [ 887.199718][T18750] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 887.205553][T18750] ? __pfx___kernel_write_iter+0x10/0x10 [ 887.211217][T18750] ? __asan_memset+0x22/0x50 [ 887.215834][T18750] ? iov_iter_bvec+0xb8/0x180 [ 887.220549][T18750] dump_user_range+0x8a0/0xc90 [ 887.225373][T18750] ? __pfx_dump_user_range+0x10/0x10 [ 887.230684][T18750] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 887.236953][T18750] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 887.243581][T18750] ? dump_emit+0xa6/0xe0 [ 887.247853][T18750] ? elf_core_dump+0x2cd0/0x3960 [ 887.252813][T18750] elf_core_dump+0x3369/0x3960 [ 887.257622][T18750] ? __pfx_elf_core_dump+0x10/0x10 [ 887.262750][T18750] ? kasan_save_track+0x4f/0x80 [ 887.267619][T18750] ? kasan_save_track+0x3e/0x80 [ 887.272481][T18750] ? __kasan_kmalloc+0x93/0xb0 [ 887.277285][T18750] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 887.282935][T18750] ? coredump_write+0x343/0x18b0 [ 887.287903][T18750] ? vfs_coredump+0x3321/0x3e60 [ 887.292771][T18750] ? get_signal+0x1108/0x1340 [ 887.297496][T18750] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 887.303233][T18750] ? irqentry_exit+0x178/0x670 [ 887.308014][T18750] ? asm_exc_page_fault+0x26/0x30 [ 887.313059][T18750] ? mas_ascend+0x2f4/0x830 [ 887.317590][T18750] ? vfs_coredump+0x3321/0x3e60 [ 887.322464][T18750] ? 0xffffffffff600000 [ 887.326723][T18750] coredump_write+0x1121/0x18b0 [ 887.331679][T18750] ? __pfx_coredump_write+0x10/0x10 [ 887.336897][T18750] ? unshare_files+0xa9/0x140 [ 887.341589][T18750] vfs_coredump+0x3321/0x3e60 [ 887.346298][T18750] ? __pfx_vfs_coredump+0x10/0x10 [ 887.351341][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 887.356302][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 887.361272][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 887.366243][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 887.371205][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 887.376189][T18750] ? unwind_next_frame+0xa5/0x23d0 [ 887.381328][T18750] ? lock_acquire+0x107/0x340 [ 887.386070][T18750] ? unwind_next_frame+0xa5/0x23d0 [ 887.391221][T18750] ? is_bpf_text_address+0x26/0x2b0 [ 887.396461][T18750] ? lock_acquire+0x107/0x340 [ 887.401169][T18750] ? is_bpf_text_address+0x26/0x2b0 [ 887.406410][T18750] ? is_bpf_text_address+0x292/0x2b0 [ 887.411733][T18750] ? is_bpf_text_address+0x26/0x2b0 [ 887.416994][T18750] ? kernel_text_address+0xa5/0xe0 [ 887.422152][T18750] ? __kernel_text_address+0xd/0x40 [ 887.427378][T18750] ? unwind_get_return_address+0x4d/0x90 [ 887.433039][T18750] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 887.439254][T18750] ? arch_stack_walk+0xfc/0x150 [ 887.444131][T18750] ? stack_trace_save+0x9c/0xe0 [ 887.449004][T18750] ? __pfx_stack_trace_save+0x10/0x10 [ 887.454390][T18750] ? stack_depot_save_flags+0x33/0x810 [ 887.459956][T18750] ? kasan_save_track+0x4f/0x80 [ 887.464816][T18750] ? kasan_save_track+0x3e/0x80 [ 887.469672][T18750] ? kasan_save_free_info+0x46/0x50 [ 887.474886][T18750] ? __kasan_slab_free+0x5c/0x80 [ 887.479833][T18750] ? kmem_cache_free+0x197/0x620 [ 887.484789][T18750] ? get_signal+0xa4b/0x1340 [ 887.489398][T18750] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 887.495136][T18750] ? irqentry_exit+0x178/0x670 [ 887.499945][T18750] ? asm_exc_page_fault+0x26/0x30 [ 887.505004][T18750] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.510230][T18750] get_signal+0x1108/0x1340 [ 887.514761][T18750] arch_do_signal_or_restart+0x9a/0x7a0 [ 887.520331][T18750] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 887.526504][T18750] irqentry_exit+0x178/0x670 [ 887.531107][T18750] ? trace_irq_disable+0x37/0x100 [ 887.536168][T18750] asm_exc_page_fault+0x26/0x30 [ 887.541033][T18750] RIP: 0033:0x7fecd3d8f751 [ 887.545460][T18750] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 887.565099][T18750] RSP: 002b:fffffffffffffd00 EFLAGS: 00010217 [ 887.571189][T18750] RAX: 0000000000000000 RBX: 00007fecd3fe6090 RCX: 00007fecd3d8f749 [ 887.579172][T18750] RDX: 0000000000000000 RSI: fffffffffffffd00 RDI: 0000000000000000 [ 887.587167][T18750] RBP: 00007fecd3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.595155][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.603137][T18750] R13: 00007fecd3fe6128 R14: 00007fecd3fe6090 R15: 00007ffec3b67d78 [ 887.611128][T18750] [ 887.614161][T18750] Modules linked in: [ 887.618081][T18750] ---[ end trace 0000000000000000 ]--- [ 887.623572][T18750] RIP: 0010:swap_cgroup_record+0x19c/0x1c0 [ 887.629406][T18750] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe [ 887.649024][T18750] RSP: 0018:ffffc9000e47d140 EFLAGS: 00010093 [ 887.655107][T18750] RAX: ffffffff8231516b RBX: 0000000000001237 RCX: ffff8880691c0000 [ 887.663100][T18750] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 887.671089][T18750] RBP: 0000000000000004 R08: 0000000000000003 R09: 0000000000000004 [ 887.679075][T18750] R10: dffffc0000000000 R11: fffff52001c8fa18 R12: dffffc0000000000 [ 887.687061][T18750] R13: 0000000000000000 R14: ffffc9000b184000 R15: 0000000000000004 [ 887.695067][T18750] FS: 00007fecd4b5f6c0(0000) GS:ffff888125abb000(0000) knlGS:0000000000000000 [ 887.704009][T18750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.710611][T18750] CR2: 00007f84d3846fe0 CR3: 000000007630a000 CR4: 00000000003526f0 [ 887.718596][T18750] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 887.726580][T18750] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 887.734581][T18750] Kernel panic - not syncing: Fatal exception [ 887.741300][T18750] Kernel Offset: disabled [ 887.745631][T18750] Rebooting in 86400 seconds..