last executing test programs: 27m41.592388418s ago: executing program 3 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) (async) 27m40.819332818s ago: executing program 3 (id=677): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="08000300"], 0x78}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000002540)=0x1) 27m40.666153237s ago: executing program 3 (id=679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="99742bbd7000fbdbdf2515"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x6c, 0x0, 0x10000000, 0x0, 0x0, 0xdf, 0xa, 0x6, 0x0, 0x3}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port1\x00', 0x13e, 0xa1c2d, 0x1, 0xb97, 0x100000, 0xfffffffc}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x624943) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002c00)=""/4088, 0xff8}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}, 0x8008}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008085) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000880)="340000001a005f0400f9f407000904018000000000000004000000000800020040000000839935e7dfc4a6df20655e90819c0bb7", 0x34) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xf4d47ae255b226c0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r8, &(0x7f0000001840)=""/4090, 0xffa) 27m38.50014587s ago: executing program 3 (id=686): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='@group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 27m37.405404883s ago: executing program 3 (id=687): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @private=0xa010102}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240)=0x9be) 27m36.11827201s ago: executing program 3 (id=691): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)={0xe, 0x0, 0x20000, {r0}}, 0x20) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) r2 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000000030000fcae1d274ba752a3bb78c4"], &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0x8, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x16, 0xffffffffffffffff, &(0x7f0000000040)=0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0xc}, {0x6, 0x5, 0x3, 0xa00, [0x6, 0x8]}}}}, 0x19) sigaltstack(&(0x7f0000000540)={0x0, 0x2}, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000100)) 27m35.579461176s ago: executing program 32 (id=691): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)={0xe, 0x0, 0x20000, {r0}}, 0x20) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) r2 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000000030000fcae1d274ba752a3bb78c4"], &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0x8, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x16, 0xffffffffffffffff, &(0x7f0000000040)=0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0xc}, {0x6, 0x5, 0x3, 0xa00, [0x6, 0x8]}}}}, 0x19) sigaltstack(&(0x7f0000000540)={0x0, 0x2}, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000100)) 16.726794664s ago: executing program 5 (id=6800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x7, 0x1, {{0x4, 'GPL\x00'}, 0x4}}, 0x11) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 12.730070124s ago: executing program 5 (id=6811): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @remote}, 0xb) r0 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x4, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r2, 0x4, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @empty, [], [0x0, 0x0, 0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@local, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xffffff00], 'veth0\x00', 'sit0\x00', {}, {}, 0xc64f8f84edec7aa7, 0x9, 0x4, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x80000000010000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) syz_open_dev$mouse(&(0x7f0000000500), 0x6a, 0x202500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x80000000, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x91, 0x0, 0x738, 0x0, 0x8, 0x0, 0x0, 0x1]], '\x00', [{0x1ff, 0xfffffffe}, {0x775, 0xffffffff}, {0x0, 0x5}, {0xffffffff}, {0x5}, {0x8564}, {}, {0x0, 0xffffffff}, {0x0, 0x6}, {0x0, 0x1}, {0xb6f}], '\x00', 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xebff5d0857818f7f}, 0x4000) r7 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 12.228207346s ago: executing program 1 (id=6818): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000140)={0x1, 0x8, 0x102, 0x0, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @loopback, 0x11, 0x3, 'ovf\x00', 0x3f, 0x4004, 0x43}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) sendmmsg$sock(r5, &(0x7f00000061c0)=[{{&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x20, 0x9, "73b98e6751049aa34fcf0fc569dd3281f060bf7b5a698335a0e3e323d5ca4a812db4721c60e4ac05497a19a15d6dcad4758b1426bdbd23415aa98dfb02aaff", 0x21}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4044) 12.032470905s ago: executing program 1 (id=6819): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00022400010009040008020300000009210000ff0022070009058103ff0300"/51], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x2, "c742309d"}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) 9.288358037s ago: executing program 5 (id=6827): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000524500", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 9.016293067s ago: executing program 5 (id=6831): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000081c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x7, 0x400, 0x801, 0x401, 0x5, 0x8000004, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 8.890054952s ago: executing program 5 (id=6832): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r1, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000402) lseek(r8, 0x0, 0x3) open_tree(0xffffffffffffff9c, 0x0, 0x89901) recvmsg(r5, &(0x7f0000000740)={&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f0000000280)=""/55, 0x37}], 0x2, &(0x7f0000000700)=""/52, 0x34}, 0x40) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r4}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.075569114s ago: executing program 0 (id=6835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x7, 0x1, {{0x4, 'GPL\x00'}, 0x4}}, 0x11) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 5) 5.902279328s ago: executing program 5 (id=6838): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000004001680"], 0x38}}, 0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000004ab4"], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000001480)) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x0, 0x36200}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x8000, 0xfff, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000003e000b01fcfffffffddbdf25047c0000040036800c000180060006008e0a00003947213e5b6ad92cbee8ec9500c114464908d2563797c401f890ecfa6c567f4f0499c89afd76428d30f7d76390d505795bd396f5ba306e31bcf51a8cb4d47ef7efe73cbe601556e39705208028214a"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0x401, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0xd, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x9, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x5, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$inet_smc(0x2b, 0x1, 0x0) 5.719428622s ago: executing program 4 (id=6840): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_disconnect(r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$hiddev(r4, &(0x7f0000002b40)=""/175, 0xaf) sendfile(r2, r1, 0x0, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f1e0adf7c3000000000000", @ANYRES32, @ANYBLOB="000002"], 0x28}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 5.668586828s ago: executing program 2 (id=6841): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac50617c4700", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.516223023s ago: executing program 0 (id=6842): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000081c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x7, 0x400, 0x801, 0x401, 0x5, 0x8000004, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 5.410436158s ago: executing program 1 (id=6843): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000021c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3fe0000000000, 0xfffffffd}}, 0x30) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0xffffffffffffffda, r2, {0x7, 0x27, 0x0, 0x681d51a0, 0x0, 0x3, 0x26, 0x0, 0x0, 0x0, 0x2, 0xfffffb96}}, 0x50) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 5.38640238s ago: executing program 2 (id=6844): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000050000000000000003000000000000001c000000000000002f7379732f626b65726e656c2f64656275672f73796e632f696e666f00"], 0x45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0xffffd000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/183, 0xb7}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f40f01caf20fd6d5260fc79d0b900fc7aba0610f69cc660f38826a00baf80c66b86884208566efbafc0c66ed0f0131ba200066ed", 0x34}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, 0x0) 5.329095129s ago: executing program 0 (id=6845): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x6, 0x80008, "ef2a44ac922eead5cb860b923cf971247db7d5665f6cab1b", {0x9, 0x1}, 0x7}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000580)=0x8cc) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0xf78, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f0000002ac0), 0x0, 0x40, 0x0) r6 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x230, 0x0, 0x170, 0x2c8, 0x230, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x1}}}, {{@ip={@empty, @empty, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "d7ca", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000000c0)={0x18, 0x2, 0x4, 0x2}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.800392712s ago: executing program 0 (id=6846): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/41, 0x29) getdents64(r5, 0xfffffffffffffffe, 0x29) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 3.779174654s ago: executing program 0 (id=6847): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xc3, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x9ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0xff, 0x6, 0xb, 0xff, 0x3}, 0x42, &(0x7f00000002c0)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "274696ecb047ef16dc8c977e5083400b"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x6a, 0x4, 0x1, 0xff00, 0x6, [0xc000, 0xc000, 0xff0000, 0x30]}, @ptm_cap={0x3}]}, 0x2, [{0xaa, &(0x7f0000000340)=@string={0xaa, 0x3, "a8219b8965348e9889a627e48ddf846bba8cdb2acde0707dd3f054c7c664ab18d12aebc2951e37486fe06126949fe19a23632fb507948d9a0061cac97b28592561d10dedbe840d66c0d76d3a9c0e893b9d66a9d856539d2bf77680519164afe3edf8bc727c5c4fc2c962420c8975f9fb36db3576d90c0fd26033b149b3881203320c3e0d1c3f458bf8bbeac0c033c61374008ca002646607266201c165ea6dfafae0f429a7abadf2"}}, {0x2b, &(0x7f0000000400)=@string={0x2b, 0x3, "fb4fd3cfbfcf2f87d44fb9c054ef82c6ad2055d26ef2c5a7c49afbf8888e81ab8b2db7eb96294ef5c6"}}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000480)=0x9286, 0x7436, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000001c0)={'team_slave_1\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0010007f0925543c482d8c7d", @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf25010000000600020001000000050022000100000008000c000200000008000c00040000000500220000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x801) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x700, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @local, @broadcast}}}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf256500000008000300", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0xc4, r5, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x9, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3ed820d656ba562a83b3ad07b08523ad60e66a3469bfe00"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f8f111635ccf9a41834238dedb2a1c1e66fa94b607df766"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) 3.630865042s ago: executing program 1 (id=6848): syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x9, 0xc}]}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000000200)='W', 0x1, 0x17a}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xfffffff8, 0x7, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x64, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0x14, 0x1c, 0x1, 0xa, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @timestamp={0x44, 0x18, 0xc3, 0x0, 0x8, [0x7, 0xfffff000, 0x4, 0x7f, 0xa]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x40, 0x9, 0x5775a6df1ee5fe96, @empty, @loopback, 0x8010, 0x10, 0x2, 0x3}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x7c}}, 0x10) (async) sendmsg$inet_sctp(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000005000000000000007f00000018000000000000008400000005000000c0c20000c70000007bedc2541e6503ec9ed9f46e9850bb017fe216737dcc01f1784766331eaf241ca4ca004c01b2401c821d74c38a9aef111c73b5d50073d2ae75139061ce65929191cee032c9a1ad987a4445abbd690b870f6a547bbeba60e3cd4cf2a5339079a5599ef4f876913d89828cd7fe0f108e65fc4f66515907bc09109166c13e3f312b31c1f67669a580"], 0x30}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000040)={[{0xc, 0x5, 0x4, 0xc, 0x40, 0x80, 0x0, 0x3, 0xfe, 0x5, 0x9, 0x80, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xb5, 0x40, 0x2, 0xc, 0xfe, 0xf8, 0x6, 0x18, 0xe}, {0xffffffff, 0x8, 0x3, 0xc, 0x2, 0x78, 0x3, 0x7, 0x2, 0x13, 0x7, 0x54, 0x18bb}], 0xd9}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1}) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.000133528s ago: executing program 1 (id=6849): r0 = socket(0x10, 0x3, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905827931"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x15, 0x37, &(0x7f0000000280)="8963f1c46b03517d47f6033bbc0f84a90b20729f80caadebfc7c40ad9ea834ebb5120949ed2b717656ffb2752437c5f48cd383312ac647"}) (async) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x15, 0x37, &(0x7f0000000280)="8963f1c46b03517d47f6033bbc0f84a90b20729f80caadebfc7c40ad9ea834ebb5120949ed2b717656ffb2752437c5f48cd383312ac647"}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0xd0, 0x3d0, 0xd0, 0x300, 0x3d0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x2e, {0x2, 0x4e22, @empty}, 'veth0_vlan\x00'}) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x2e, {0x2, 0x4e22, @empty}, 'veth0_vlan\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) (async) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES8=r5], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES8=r5], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) io_uring_setup(0xf33, &(0x7f0000000380)={0x0, 0x5ae9, 0x4000, 0x3, 0x149}) (async) io_uring_setup(0xf33, &(0x7f0000000380)={0x0, 0x5ae9, 0x4000, 0x3, 0x149}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) (async) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x7, 0x1, {{0x4, 'GPL\x00'}, 0x4}}, 0x11) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 6) 1.966240412s ago: executing program 0 (id=6853): r0 = syz_clone3(&(0x7f0000000300)={0x900, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x2b}, &(0x7f0000000140)=""/88, 0x58, &(0x7f00000001c0)=""/197, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) timer_create(0x0, &(0x7f0000000380)={0x0, 0x29, 0x1, @tid=r0}, &(0x7f00000003c0)) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xaa, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022050000008682"], 0x0}, 0x0) 1.2487663s ago: executing program 2 (id=6854): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac5244534b00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 994.554251ms ago: executing program 2 (id=6855): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000081c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x7, 0x400, 0x801, 0x401, 0x5, 0x8000004, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 801.295182ms ago: executing program 4 (id=6856): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82000) write$sndseq(r2, &(0x7f0000000040)=[{0xf, 0x28, 0x0, 0xfd, @time={0x27f9, 0x80000001}, {}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/548, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[@ANYBLOB="81643f", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRES32]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r5, 0x29, 0x4d, 0xfffffffffffffffe, &(0x7f0000000840)=0x7) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) listen(r9, 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x48, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010000000000ffdbdf250c5e96bf6fc20a6d78f29852"], 0x1c}], 0x1}, 0x8080) 718.674175ms ago: executing program 2 (id=6857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x118, 0xb}], 0xc}, 0x4040044) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000140007800800114000000000050015000700000005000100060000000500050002000000050004000000005dcdf16b029b92000900020073797a300000000015000300686173683a69702c706f72742c"], 0x64}}, 0x0) (async) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000080)={0x1, 0x6, 0x10000, 0x0, 0x2}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) writev(r8, &(0x7f0000004740)=[{&(0x7f0000002740)="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", 0x8aa}], 0x1) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x1, 0x2, 0x0) (async) r10 = syz_open_dev$vbi(&(0x7f0000000680), 0x2, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r11, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4088, 0xff8}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/124, 0x7c}], 0x3}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/231, 0xe7}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/65, 0x41}, {&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/76, 0x4c}, {&(0x7f0000002a40)=""/22, 0x16}, {&(0x7f0000002a80)=""/124, 0x7c}, {&(0x7f0000002b00)=""/50, 0x32}], 0x9, &(0x7f0000002bc0)=""/116, 0x74}, 0x5e7}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000130, 0x0) (async) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f00000006c0)={0x9, @raw_data="3a80e2c1673f99893a217b8abd4d2e0ab38336bf021eac353356920f7fb60501c107f30d989905f38f052c0db895d58b71c139990a0d037b1c817182451e0c203119f59e0897b309e0fbb8f4858318ae4c98d88ef10cc2f51be40e736d29eea3b014d970d9273bb82868c85a4d1e0dbb4faa497525f9e57f4e2cf13fb7991df67eae4972749912e1a3aea5588b401adf46965349ef0cd7e037d64b526d56325359421ebc1c16785ff8878483a4f59183ec15f0e2b6a4e7e272cc38ed1746facc6aa3318eb88982c7"}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x402f, 0x6, 0x40000, 0x4, 0x2, 0x81, 0xffffff19}}) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x7d7d}, 0x9}, 0x10) 522.908028ms ago: executing program 4 (id=6858): r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="aaf796155cd957031bbbbbbbe084050008fb"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) munlockall() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000019440)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e0000001000700000000000000000000fe8000000000000000000000000000bb00000000000700"/64, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500000000"], 0x5c}}, 0x4004040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x711820d458988b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x400, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d00010103f80f050904000801030101000921ff00010122b00b09058103100002ba07090502032000080eb84abdf5610fb3291ec6ba0f8ada35ffd166e911e4f8"], &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB="050f050000fcf7c4f4cbd2340ed2a776f192497a443921ea37d18b8614bd931431a84f08117c1f2385226438f26a7daa24ab3f95e685d330f6049e34bf56e461c4a0bf82c27412a64763ca329442823ad4ff8c26e20fac94062f2090eb0e629e4d31f19b9ee1e1915b45fe2f6bd4e7f0bfcee4a09c7d511f85f567516c76"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) 415.637672ms ago: executing program 2 (id=6859): r0 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0xa, @raw_data="90ad3d373edc84e87795c555948c84b209b6d656bab366953a0ec0e8351bb28bd2d9848369235dcbe632f84a5abec5cbe2bf8ecc1614b3acd2400d1167fa1b841b3f682969ace6972bc72957086d21634f30b0783b2c3946f1e05b1fd23d0ec44094eb894e32114dfc9a75928768e9777309a8d3b2b00e0dcc9a68761d393f8b5ee912409d2be45dbb8c70220e317f3949bf85d960a8e394ed0c91c05955c2530962b0603d4810a74f2cbc1b8144c71853f6ec78741559fdbc1a6aa8b88fe4402924ab5c151ce2e3"}) close_range(r2, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x6) (async) r3 = eventfd(0x6) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x1}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 0s ago: executing program 1 (id=6860): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4099}, 0x4c000) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4, 0x1, 0x0, "fff600f4351bcaffff1300", 0x32314142}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff02"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x20980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): erialNumber=0 [ 1860.348367][T28059] usb 2-1: Product: syz [ 1860.352637][T28059] usb 2-1: Manufacturer: syz [ 1860.369833][T28059] cdc_wdm 2-1:1.0: skipping garbage [ 1860.375716][T28059] cdc_wdm 2-1:1.0: skipping garbage [ 1860.384207][T28059] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1860.390626][T28059] cdc_wdm 2-1:1.0: Unknown control protocol [ 1860.589541][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1860.589562][ T30] audit: type=1326 audit(1747101539.171:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.597958][T30576] netlink: 504 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1860.618960][ T30] audit: type=1326 audit(1747101539.171:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.619008][ T30] audit: type=1326 audit(1747101539.171:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.681185][ T30] audit: type=1326 audit(1747101539.171:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.715045][ T30] audit: type=1326 audit(1747101539.171:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd58818e56b code=0x7ffc0000 [ 1860.739608][ T30] audit: type=1326 audit(1747101539.171:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5881c1225 code=0x7ffc0000 [ 1860.762076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.803583][ T30] audit: type=1326 audit(1747101539.371:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.826072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.855342][ T30] audit: type=1326 audit(1747101539.371:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.877822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.886741][ T30] audit: type=1326 audit(1747101539.471:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1860.909003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1861.012408][T28058] usbhid 3-1:0.0: can't add hid device: -71 [ 1861.021722][T28058] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1861.068337][T30584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1861.123055][T28058] usb 3-1: USB disconnect, device number 95 [ 1861.175236][T30581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.326781][T30581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.339450][T27932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1861.350593][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1861.351006][T26090] usb 2-1: USB disconnect, device number 17 [ 1861.359254][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1861.369512][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1861.375586][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1861.384428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1861.400952][ T30] audit: type=1326 audit(1747101539.981:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30569 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58818e969 code=0x7ffc0000 [ 1861.423395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1861.499569][T27932] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1861.509336][T27932] usb 1-1: can't read configurations, error -61 [ 1861.594805][T28058] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1861.645559][T27932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1861.778297][T28058] usb 3-1: Using ep0 maxpacket: 16 [ 1861.786110][T28058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.796980][T28058] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1861.808240][T28058] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1861.818063][T28058] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 1861.830319][T28058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1861.840193][T28058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.848912][T28058] usb 3-1: Product: syz [ 1861.853668][T28058] usb 3-1: Manufacturer: syz [ 1861.853719][T27932] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1861.858395][T28058] usb 3-1: SerialNumber: syz [ 1861.897815][T27932] usb 1-1: can't read configurations, error -61 [ 1861.916398][T27932] usb usb1-port1: attempt power cycle [ 1862.113588][T30586] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1862.202376][T30585] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1862.262956][T28058] usb 3-1: USB disconnect, device number 96 [ 1862.294665][T27932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1862.338132][T27932] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1862.389861][T27932] usb 1-1: can't read configurations, error -61 [ 1862.554649][T27932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1862.617965][T27932] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1862.638783][T27932] usb 1-1: can't read configurations, error -61 [ 1862.664852][T27932] usb usb1-port1: unable to enumerate USB device [ 1862.687939][T28059] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1862.888962][T28059] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 1862.901783][T28059] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1862.912381][T30594] netlink: 'syz.2.6521': attribute type 15 has an invalid length. [ 1862.927908][T28059] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1862.939958][T28059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.950613][T28059] usb 2-1: Manufacturer: 덏턔᛾褼ဈଶ稢ꇜڳ菽༔없툪絽ៀ邒쫔샖鲑뎕馦࿢⛙ءス⧶긆绾┞莣綕∴偓失馤ꫮ⴨臲ና搫ⴱ뙾摒軣쥗嫵ŀ沦♝兟༫륁毟떐ᯘὂ幙졈Ꮋƽ煠ꐅ솥ᱺ똼꓀߯蝜⊇㊻老࡝㖝䥆孜䮮ⵖ⵸尦㚢묢 [ 1862.977991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1863.012949][T30591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.069047][T30596] loop6: detected capacity change from 0 to 7 [ 1863.086904][T30596] Dev loop6: unable to read RDB block 7 [ 1863.092623][T30596] loop6: unable to read partition table [ 1863.103526][T30596] loop6: partition table beyond EOD, truncated [ 1863.113482][T30596] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1863.394076][T30600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.401851][T30600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.567449][T30609] netlink: 504 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1864.297426][T30621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.364218][T30621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.525149][T28058] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1864.719486][T28058] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.752853][T28058] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 1864.833174][T28058] usb 1-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1864.876054][T28058] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1864.903805][T28058] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1864.934536][T28058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.943006][T28058] usb 1-1: Product: Ф [ 1864.994809][T28058] usb 1-1: Manufacturer: Ї [ 1864.999517][T28058] usb 1-1: SerialNumber: ⠁ [ 1865.056041][T30620] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1865.114628][T27932] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1865.162035][T30629] syz.2.6532: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1865.193771][T30629] CPU: 0 UID: 0 PID: 30629 Comm: syz.2.6532 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1865.193802][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1865.193815][T30629] Call Trace: [ 1865.193825][T30629] [ 1865.193835][T30629] dump_stack_lvl+0x189/0x250 [ 1865.193897][T30629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1865.193923][T30629] ? __pfx__printk+0x10/0x10 [ 1865.193938][T30629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1865.193967][T30629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1865.194002][T30629] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1865.194036][T30629] warn_alloc+0x214/0x310 [ 1865.194069][T30629] ? __pfx_warn_alloc+0x10/0x10 [ 1865.194097][T30629] ? __get_vm_area_node+0x28f/0x300 [ 1865.194130][T30629] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 1865.194187][T30629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1865.194223][T30629] vmalloc_user_noprof+0x74/0x80 [ 1865.194243][T30629] ? vb2_vmalloc_alloc+0xef/0x340 [ 1865.194265][T30629] vb2_vmalloc_alloc+0xef/0x340 [ 1865.194292][T30629] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1865.194321][T30629] __vb2_queue_alloc+0x9bf/0x15a0 [ 1865.194377][T30629] vb2_core_reqbufs+0xc31/0x1420 [ 1865.194406][T30629] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1865.194428][T30629] ? vb2_verify_memory_type+0x1fc/0x570 [ 1865.194454][T30629] ? vb2_reqbufs+0x3a9/0x630 [ 1865.194483][T30629] v4l2_m2m_ioctl_reqbufs+0x169/0x240 [ 1865.194515][T30629] __video_do_ioctl+0xc98/0xdb0 [ 1865.194540][T30629] ? __pfx___video_do_ioctl+0x10/0x10 [ 1865.194573][T30629] video_usercopy+0x86e/0x14f0 [ 1865.194609][T30629] ? __pfx___video_do_ioctl+0x10/0x10 [ 1865.194635][T30629] ? __pfx_video_usercopy+0x10/0x10 [ 1865.194675][T30629] ? __fget_files+0x3a0/0x420 [ 1865.194695][T30629] v4l2_ioctl+0x18a/0x1e0 [ 1865.194713][T30629] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1865.194736][T30629] __se_sys_ioctl+0xf9/0x170 [ 1865.194758][T30629] do_syscall_64+0xf6/0x210 [ 1865.194785][T30629] ? clear_bhb_loop+0x45/0xa0 [ 1865.194808][T30629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.194827][T30629] RIP: 0033:0x7f7fc3f8e969 [ 1865.194857][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1865.194873][T30629] RSP: 002b:00007f7fc4eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1865.194894][T30629] RAX: ffffffffffffffda RBX: 00007f7fc41b6080 RCX: 00007f7fc3f8e969 [ 1865.194910][T30629] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1865.194922][T30629] RBP: 00007f7fc4010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1865.194935][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1865.194945][T30629] R13: 0000000000000001 R14: 00007f7fc41b6080 R15: 00007f7fc42dfa28 [ 1865.194973][T30629] [ 1865.505765][T30629] Mem-Info: [ 1865.510419][T30629] active_anon:7082 inactive_anon:0 isolated_anon:0 [ 1865.510419][T30629] active_file:1827 inactive_file:3865 isolated_file:0 [ 1865.510419][T30629] unevictable:768 dirty:190 writeback:0 [ 1865.510419][T30629] slab_reclaimable:6502 slab_unreclaimable:120373 [ 1865.510419][T30629] mapped:32288 shmem:1394 pagetables:1319 [ 1865.510419][T30629] sec_pagetables:0 bounce:0 [ 1865.510419][T30629] kernel_misc_reclaimable:0 [ 1865.510419][T30629] free:1326905 free_pcp:4733 free_cma:0 [ 1865.522882][T28058] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1865.556323][T30629] Node 0 active_anon:28328kB inactive_anon:0kB active_file:7212kB inactive_file:15324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129080kB dirty:760kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12804kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1865.556445][T30629] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1865.556499][T30629] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.556583][T30629] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1865.556631][T30629] Node 0 DMA32 free:1379988kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:28320kB inactive_anon:0kB active_file:7212kB inactive_file:15248kB unevictable:1536kB writepending:760kB present:3129332kB managed:2564140kB mlocked:0kB bounce:0kB free_pcp:18872kB local_pcp:5744kB free_cma:0kB [ 1865.556693][T30629] lowmem_reserve[]: 0 0 0 0 0 [ 1865.702485][T30629] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1865.735526][T30629] lowmem_reserve[]: 0 0 0 0 0 [ 1865.740336][T30629] Node 1 Normal free:3912272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.769720][T30629] lowmem_reserve[]: 0 0 0 0 0 [ 1865.774574][T30629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1865.787544][T30629] Node 0 DMA32: 957*4kB (UME) 1390*8kB (UME) 1251*16kB (UME) 1015*32kB (ME) 760*64kB (UME) 433*128kB (UME) 186*256kB (UME) 124*512kB (UME) 83*1024kB (UME) 22*2048kB (UME) 236*4096kB (UM) = 1379316kB [ 1865.807623][T30629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1865.819275][T30629] Node 1 Normal: 258*4kB (UME) 49*8kB (UE) 48*16kB (UME) 204*32kB (UE) 101*64kB (UME) 30*128kB (UME) 18*256kB (UM) 9*512kB (UM) 5*1024kB (UME) 8*2048kB (UME) 943*4096kB (M) = 3912272kB [ 1865.865520][T30629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.914332][T28058] usb 1-1: USB disconnect, device number 10 [ 1865.999974][T30629] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1866.031713][T30629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1866.077550][T30629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1866.092292][T30629] 7082 total pagecache pages [ 1866.097232][T30629] 1 pages in swap cache [ 1866.101506][T30629] Free swap = 124992kB [ 1866.106421][T30629] Total swap = 124996kB [ 1866.110724][T30629] 2097051 pages RAM [ 1866.115811][T30629] 0 pages HighMem/MovableOnly [ 1866.120832][T30629] 424358 pages reserved [ 1866.130703][T30629] 0 pages cma reserved [ 1866.156059][T30633] syzkaller1: entered promiscuous mode [ 1866.161769][T30633] syzkaller1: entered allmulticast mode [ 1866.294744][T30638] loop6: detected capacity change from 0 to 7 [ 1866.311208][T30638] Dev loop6: unable to read RDB block 7 [ 1866.324603][T30638] loop6: unable to read partition table [ 1866.340707][T30638] loop6: partition table beyond EOD, truncated [ 1866.357181][T30638] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1866.503514][T30646] netlink: 'syz.2.6537': attribute type 9 has an invalid length. [ 1866.595180][T30648] netlink: 504 bytes leftover after parsing attributes in process `syz.4.6538'. [ 1867.644791][T26090] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1867.714901][T28063] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1867.908796][T26090] usb 5-1: Using ep0 maxpacket: 16 [ 1867.982360][T26090] usb 5-1: config 0 has no interfaces? [ 1867.988086][T28063] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.001112][T26090] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1868.013019][T26090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.033305][T26090] usb 5-1: config 0 descriptor?? [ 1868.086253][T28063] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1868.133061][T30673] bond0: entered promiscuous mode [ 1868.184296][T28063] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1868.214051][T28063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1868.244093][T28063] usb 3-1: SerialNumber: syz [ 1868.289410][T30673] bond_slave_0: entered promiscuous mode [ 1868.354984][T28059] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 1868.934762][T30673] bond_slave_1: entered promiscuous mode [ 1869.009737][T30673] batadv0: entered promiscuous mode [ 1869.076997][T30673] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1869.362683][T30673] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1869.561776][T30673] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1870.518135][T28063] usb 3-1: 0:2 : does not exist [ 1870.568026][T28063] usb 3-1: USB disconnect, device number 97 [ 1870.666031][T28059] usb 5-1: USB disconnect, device number 81 [ 1870.729110][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1870.878932][T30690] loop6: detected capacity change from 0 to 7 [ 1870.904640][T30690] Dev loop6: unable to read RDB block 7 [ 1870.910389][T30690] loop6: unable to read partition table [ 1870.932231][T30690] loop6: partition table beyond EOD, truncated [ 1870.941257][T30690] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1871.225791][T30705] netlink: 2004 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1871.805014][T28059] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1872.055886][T28059] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.124914][T28059] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1872.455841][T28059] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1872.474889][T30730] netlink: 504 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1872.524851][T28059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1872.554587][T28059] usb 3-1: SerialNumber: syz [ 1872.655388][T28058] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1872.824561][T28058] usb 6-1: Using ep0 maxpacket: 8 [ 1872.832749][T28058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1872.845681][T28058] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1872.858140][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1872.873190][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1872.883639][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1872.893405][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1872.903359][T28058] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1872.921126][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1872.934978][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1872.953710][T28058] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1872.963688][T28058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.972520][T28058] usb 6-1: Product: syz [ 1872.977296][T28058] usb 6-1: Manufacturer: syz [ 1872.985403][T28058] usb 6-1: SerialNumber: syz [ 1873.011849][T28058] usb 6-1: config 0 descriptor?? [ 1873.028620][T28058] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1873.155966][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.208815][T28063] usb 2-1: USB disconnect, device number 18 [ 1873.220546][T28063] usblp0: removed [ 1873.418752][T28058] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1873.433481][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1873.433499][ T30] audit: type=1326 audit(1747101552.011:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.491060][ T30] audit: type=1326 audit(1747101552.011:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.521311][ T30] audit: type=1326 audit(1747101552.011:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.549950][ T30] audit: type=1326 audit(1747101552.011:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.581054][ T30] audit: type=1326 audit(1747101552.011:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.608784][ T30] audit: type=1326 audit(1747101552.051:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.640740][ T30] audit: type=1326 audit(1747101552.051:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.663736][T28058] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1873.682260][T28058] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1873.692000][T28058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.721603][ T30] audit: type=1326 audit(1747101552.051:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.751825][ T30] audit: type=1326 audit(1747101552.051:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.782336][T28058] usb 1-1: config 0 descriptor?? [ 1873.801086][ T30] audit: type=1326 audit(1747101552.051:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.4.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1873.833578][T28058] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1875.054881][T30755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.085077][T30755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.093372][T28059] usb 3-1: 0:2 : does not exist [ 1875.116531][T28059] usb 3-1: USB disconnect, device number 98 [ 1875.169898][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1875.447590][T28058] usb 6-1: USB disconnect, device number 35 [ 1875.535027][T28059] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1875.654570][T27932] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1875.734710][T28059] usb 3-1: Using ep0 maxpacket: 32 [ 1875.746488][T28059] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1875.761005][T28059] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1875.768249][T30764] binder: 30763:30764 ioctl c0306201 2000000003c0 returned -14 [ 1875.770692][T28059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.787501][T28059] usb 3-1: Product: syz [ 1875.791721][T28059] usb 3-1: Manufacturer: syz [ 1875.799364][T28059] usb 3-1: SerialNumber: syz [ 1875.812496][T28059] usb 3-1: config 0 descriptor?? [ 1875.816865][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1875.820209][T28059] gs_usb 3-1:0.0: Required endpoints not found [ 1875.838919][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1875.852811][T27932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1875.877041][T27932] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1875.894833][T27932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.916160][T27932] usb 5-1: config 0 descriptor?? [ 1875.921978][T30762] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1876.138080][ T5888] usb 1-1: USB disconnect, device number 11 [ 1876.350418][T27932] usbhid 5-1:0.0: can't add hid device: -71 [ 1876.362400][T27932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1876.382010][T27932] usb 5-1: USB disconnect, device number 82 [ 1876.563152][T28058] usb 3-1: USB disconnect, device number 99 [ 1877.074615][T28059] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1877.283586][T28059] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.294932][T28059] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1877.341650][T28059] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1877.351126][T28059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1877.359634][T28059] usb 1-1: SerialNumber: syz [ 1877.934556][T28058] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1878.176590][T28058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.187703][T28058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.197564][T28058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1878.211038][T28058] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1878.220240][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.241150][T28058] usb 5-1: config 0 descriptor?? [ 1878.672302][T28058] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving [ 1878.704266][T28058] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1879.839826][T30809] loop6: detected capacity change from 0 to 7 [ 1879.862503][T30809] Dev loop6: unable to read RDB block 7 [ 1879.869709][T30809] loop6: unable to read partition table [ 1879.879292][T30809] loop6: partition table beyond EOD, truncated [ 1879.894536][T30809] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1880.232627][T28059] usb 1-1: 0:2 : does not exist [ 1880.240031][T28061] usb 5-1: USB disconnect, device number 83 [ 1880.264860][T28058] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1880.385540][T28059] usb 1-1: USB disconnect, device number 12 [ 1880.451357][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1880.472801][T28058] usb 3-1: Using ep0 maxpacket: 32 [ 1880.496557][T28058] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1880.517500][T28058] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1880.546954][T28058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.608465][T28058] usb 3-1: Product: syz [ 1880.613721][T28058] usb 3-1: Manufacturer: syz [ 1880.622429][T28058] usb 3-1: SerialNumber: syz [ 1880.651566][T28058] usb 3-1: config 0 descriptor?? [ 1880.764671][T28061] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1880.946954][T28061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.957693][T28061] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1880.971277][T28061] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1880.980854][T28061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.994977][T28061] usb 5-1: config 0 descriptor?? [ 1881.007173][T28061] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1881.021670][T30824] netlink: 368 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1881.032180][T30824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1881.042859][T30811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.063809][T30811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.074070][T30825] syzkaller0: create flow: hash 2134417960 index 1 [ 1881.088584][T25805] syzkaller0: tun_net_xmit 76 [ 1881.096236][T25805] syzkaller0: tun_net_xmit 48 [ 1881.115429][T26090] syzkaller0: tun_net_xmit 76 [ 1881.291391][T30825] syzkaller0: delete flow: hash 2134417960 index 1 [ 1881.340568][T28058] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1881.858470][T28058] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1881.867966][T28058] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1882.188113][T30831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.196155][T28058] usb 3-1: USB disconnect, device number 100 [ 1882.237479][T30831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.292322][T28061] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1882.610464][T28061] usb 2-1: config 0 has no interfaces? [ 1882.632340][T28061] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1882.659699][T28061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.669536][T28061] usb 2-1: Product: syz [ 1882.673834][T28061] usb 2-1: Manufacturer: syz [ 1882.700314][T28061] usb 2-1: SerialNumber: syz [ 1882.718820][T28061] usb 2-1: config 0 descriptor?? [ 1883.426691][T28061] usb 5-1: USB disconnect, device number 84 [ 1884.833322][T30847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1885.154758][T28058] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1885.235651][T30855] netlink: 'syz.5.6597': attribute type 1 has an invalid length. [ 1885.382031][T28058] usb 5-1: not running at top speed; connect to a high speed hub [ 1885.393634][T28058] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 1885.425672][T28058] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1885.478188][T28058] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 1885.487473][T28058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.522743][T28058] usb 5-1: Product: syz [ 1885.527055][T28058] usb 5-1: Manufacturer: syz [ 1885.541984][T28058] usb 5-1: SerialNumber: syz [ 1885.550337][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.565248][T30850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1885.591060][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.774591][T26090] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1885.836897][T28058] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input154 [ 1885.915324][ T5186] bcm5974 5-1:1.0: could not read from device [ 1885.979378][T26090] usb 6-1: device descriptor read/64, error -71 [ 1885.990933][ T5186] bcm5974 5-1:1.0: could not read from device [ 1886.024218][T28058] usb 5-1: USB disconnect, device number 85 [ 1886.264566][T26090] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1886.474873][T26090] usb 6-1: device descriptor read/64, error -71 [ 1886.595518][T26090] usb usb6-port1: attempt power cycle [ 1886.890649][T25805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.956560][T26090] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1887.010504][T26090] usb 6-1: device descriptor read/8, error -71 [ 1887.081952][T30872] binder: BINDER_SET_CONTEXT_MGR already set [ 1887.108807][T30872] binder: 30868:30872 ioctl 4018620d 2000000000c0 returned -16 [ 1887.132682][T25805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.232875][T25805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.276969][T26090] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1887.334847][T26090] usb 6-1: device descriptor read/8, error -71 [ 1887.350862][T25805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.384971][T28058] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1887.449979][T26090] usb usb6-port1: unable to enumerate USB device [ 1887.565323][T28058] usb 1-1: Using ep0 maxpacket: 32 [ 1887.573130][T28058] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1887.573343][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1887.587152][T28058] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1887.600706][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1887.610832][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1887.619876][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1887.628751][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1887.644931][T28058] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1887.653913][T25805] bridge_slave_1: left allmulticast mode [ 1887.673044][T28058] usb 1-1: Product: syz [ 1887.679871][T28058] usb 1-1: Manufacturer: syz [ 1887.689654][T25805] bridge_slave_1: left promiscuous mode [ 1887.690455][T28058] usb 1-1: SerialNumber: syz [ 1887.695715][T25805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.721132][T28058] usb 1-1: config 0 descriptor?? [ 1887.726302][T25805] bridge_slave_0: left allmulticast mode [ 1887.726327][T25805] bridge_slave_0: left promiscuous mode [ 1887.726787][T25805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.735987][T30870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1887.991111][T25805] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1888.054357][T28058] usb 1-1: USB disconnect, device number 13 [ 1888.684553][ T5888] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1888.871849][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 1888.907640][T28061] usb 2-1: USB disconnect, device number 19 [ 1889.038623][ T5888] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1889.214503][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 1889.267945][ T5888] usb usb5-port1: attempt power cycle [ 1889.489868][T25805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.501621][T25805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.521517][T25805] bond0 (unregistering): Released all slaves [ 1889.639516][ T5888] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1889.695427][T30884] delete_channel: no stack [ 1889.714907][ T5836] Bluetooth: hci1: command tx timeout [ 1889.729764][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 1889.877496][ T5888] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1889.893642][T25805] bond1 (unregistering): Released all slaves [ 1889.915444][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 1889.931723][T25805] bond2 (unregistering): Released all slaves [ 1889.938143][ T5888] usb usb5-port1: unable to enumerate USB device [ 1889.982169][T30870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1890.335950][T30896] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1890.655134][T30913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6613'. [ 1890.735642][T25805] hsr_slave_0: left promiscuous mode [ 1890.750478][T25805] hsr_slave_1: left promiscuous mode [ 1890.763147][T25805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1890.781017][T25805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1890.797978][T25805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1890.816349][T25805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1890.882482][T25805] batadv0: left promiscuous mode [ 1890.908599][T25805] veth1_macvtap: left promiscuous mode [ 1890.932161][T25805] veth0_macvtap: left promiscuous mode [ 1890.938075][T25805] veth1_vlan: left promiscuous mode [ 1890.943473][T25805] veth0_vlan: left promiscuous mode [ 1891.794754][ T5836] Bluetooth: hci1: command tx timeout [ 1891.979405][T25805] team0 (unregistering): Port device team_slave_1 removed [ 1892.152212][T25805] team0 (unregistering): Port device team_slave_0 removed [ 1892.354240][T30933] loop6: detected capacity change from 0 to 7 [ 1892.363385][T30933] Dev loop6: unable to read RDB block 7 [ 1892.370777][T30933] loop6: unable to read partition table [ 1892.377146][T30933] loop6: partition table beyond EOD, truncated [ 1892.399494][T30933] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1892.713298][ T30] audit: type=1326 audit(1747101571.291:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.5.6617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687bd8e969 code=0x0 [ 1893.248416][T30879] chnl_net:caif_netlink_parms(): no params data found [ 1893.878477][T30879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.886047][ T5836] Bluetooth: hci1: command tx timeout [ 1893.894630][T30879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.901970][T30879] bridge_slave_0: entered allmulticast mode [ 1893.941777][T30879] bridge_slave_0: entered promiscuous mode [ 1893.983727][T30879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.991308][T30879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.998981][T30879] bridge_slave_1: entered allmulticast mode [ 1894.006346][T30879] bridge_slave_1: entered promiscuous mode [ 1894.627019][T30879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.692255][T30879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.896536][T30879] team0: Port device team_slave_0 added [ 1895.031226][T30879] team0: Port device team_slave_1 added [ 1895.654340][T30879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.676421][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1895.702551][T30879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.735946][T30879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1895.764504][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1895.900187][T30879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.941053][T30986] input: syz1 as /devices/virtual/input/input155 [ 1895.977787][ T5836] Bluetooth: hci1: command tx timeout [ 1896.151573][T30879] hsr_slave_0: entered promiscuous mode [ 1896.160185][T30879] hsr_slave_1: entered promiscuous mode [ 1896.183283][T30879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1896.191090][T30879] Cannot create hsr debugfs directory [ 1896.246741][T28058] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1896.414565][T28058] usb 5-1: Using ep0 maxpacket: 32 [ 1896.432062][T28058] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1896.447411][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.480829][T28058] usb 5-1: config 0 descriptor?? [ 1896.708328][T28058] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1896.746151][T28058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1896.775380][T28058] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1896.787846][T28058] usb 5-1: media controller created [ 1896.850142][T28058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.201070][T31015] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6625'. [ 1897.576681][T30988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.609095][T30988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.619851][T30988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.633545][T30988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.728073][T28058] az6027: usb out operation failed. (-71) [ 1897.734337][T28058] stb0899_attach: Driver disabled by Kconfig [ 1897.769225][T28058] az6027: no front-end attached [ 1897.769225][T28058] [ 1897.823136][T28058] az6027: usb out operation failed. (-71) [ 1897.847031][T28058] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1897.886578][T28058] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input156 [ 1897.952126][T28058] dvb-usb: schedule remote query interval to 400 msecs. [ 1898.002225][T28058] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1898.026703][ T5888] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1898.068927][T28058] usb 5-1: USB disconnect, device number 90 [ 1898.226183][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 1898.266345][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1898.310934][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1898.343346][ T5888] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1898.366454][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.388108][ T5888] usb 6-1: Product: syz [ 1898.392292][ T5888] usb 6-1: Manufacturer: syz [ 1898.399274][T30879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1898.410974][ T5888] usb 6-1: SerialNumber: syz [ 1898.424019][ T5888] usb 6-1: config 0 descriptor?? [ 1898.443077][ T5888] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1898.479612][T30879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1898.486038][T28058] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1898.698940][ T5888] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1898.722577][ T5888] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1898.893802][T30879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1898.933957][T28058] usb 6-1: USB disconnect, device number 40 [ 1899.176235][T30879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1899.605194][T30879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.657646][T30879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.702293][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.709461][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.735068][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.742209][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1900.449333][T30879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.764686][ T5888] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1900.775348][T30879] veth0_vlan: entered promiscuous mode [ 1900.904783][ T5888] usb 6-1: device descriptor read/64, error -71 [ 1900.919647][T30879] veth1_vlan: entered promiscuous mode [ 1900.931081][T31066] syz_tun: entered allmulticast mode [ 1901.006163][T31065] syz_tun: left allmulticast mode [ 1901.027440][T30879] veth0_macvtap: entered promiscuous mode [ 1901.052748][T30879] veth1_macvtap: entered promiscuous mode [ 1901.079803][T30879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.093742][T30879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.106932][T30879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.161511][T30879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.172093][ T5888] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1901.228981][T30879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.275375][T30879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.295146][T30879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.310281][T30879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.348392][ T5888] usb 6-1: device descriptor read/64, error -71 [ 1901.363679][T30879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.378278][T30879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.387428][T30879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.401022][T30879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.476414][ T5888] usb usb6-port1: attempt power cycle [ 1901.726347][T21714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.774322][T21714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.854616][ T5888] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1901.891099][ T5888] usb 6-1: device descriptor read/8, error -71 [ 1901.944013][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.961916][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.064953][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1902.114328][ T30] audit: type=1326 audit(1747101580.691:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1902.164686][ T5888] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1902.186265][ T5888] usb 6-1: device descriptor read/8, error -71 [ 1902.304340][ T5888] usb usb6-port1: unable to enumerate USB device [ 1902.314790][ T9] usb 5-1: config 0 has no interfaces? [ 1902.392894][ T30] audit: type=1326 audit(1747101580.691:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1902.416310][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1902.454635][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.472729][ T9] usb 5-1: Product: syz [ 1902.497062][ T9] usb 5-1: Manufacturer: syz [ 1902.501687][ T9] usb 5-1: SerialNumber: syz [ 1902.533683][ T9] usb 5-1: config 0 descriptor?? [ 1902.564625][ T30] audit: type=1326 audit(1747101580.691:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1902.815502][ T30] audit: type=1326 audit(1747101580.691:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1902.858930][ T30] audit: type=1326 audit(1747101580.691:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1902.938791][ T30] audit: type=1326 audit(1747101580.721:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49f418d2d0 code=0x7ffc0000 [ 1903.035196][ T30] audit: type=1326 audit(1747101580.721:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1903.140820][ T30] audit: type=1326 audit(1747101580.731:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1903.221272][ T30] audit: type=1326 audit(1747101580.731:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1903.402006][ T30] audit: type=1326 audit(1747101580.731:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.2.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7ffc0000 [ 1903.676152][T31114] fuse: Unknown parameter '0x0000000000000003' [ 1905.156422][T28058] usb 5-1: USB disconnect, device number 91 [ 1906.125864][T31178] loop6: detected capacity change from 0 to 7 [ 1906.185215][T31178] Dev loop6: unable to read RDB block 7 [ 1906.209881][T31173] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1906.223482][T31181] fuse: Unknown parameter 'al' [ 1906.228504][T31178] loop6: unable to read partition table [ 1906.234403][T31178] loop6: partition table beyond EOD, [ 1906.245716][T31179] binder: 31177:31179 ioctl c02c5638 200000000280 returned -22 [ 1906.262854][T31178] truncated [ 1906.268355][T31178] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1906.547530][T31190] netlink: 'syz.4.6653': attribute type 10 has an invalid length. [ 1906.706221][T31190] macvlan0: entered allmulticast mode [ 1906.716096][T31179] syz.2.6650 (31179): drop_caches: 2 [ 1906.722737][T31179] syz.2.6650 (31179): drop_caches: 2 [ 1906.739068][T31190] veth1_vlan: entered allmulticast mode [ 1906.796616][T31190] team0: Port device macvlan0 added [ 1906.984033][T31197] netlink: 'syz.4.6656': attribute type 2 has an invalid length. [ 1906.992598][T31197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1907.814665][T27932] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1907.839906][T31226] input: syz0 as /devices/virtual/input/input158 [ 1907.974633][T27932] usb 3-1: Using ep0 maxpacket: 8 [ 1908.002226][T27932] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1908.014684][T27932] usb 3-1: config 0 has no interface number 1 [ 1908.020858][T27932] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1908.075467][T27932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.100647][T27932] usb 3-1: config 0 descriptor?? [ 1908.562631][T31244] usb usb8: usbfs: process 31244 (syz.2.6658) did not claim interface 0 before use [ 1908.668458][T31244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.688673][T31244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.752732][T27932] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 1909.005295][T31252] netlink: 368 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1909.038242][T21714] syzkaller0: tun_net_xmit 76 [ 1909.169719][T21714] syzkaller0: tun_net_xmit 48 [ 1909.174963][T28061] syzkaller0: tun_net_xmit 76 [ 1909.841865][T31260] hfs: unable to load iocharset "io#harset" [ 1909.934827][T28058] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1910.100766][T28058] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.128262][T28058] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1910.167188][T28058] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1910.181838][T28058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1910.214863][T28058] usb 1-1: SerialNumber: syz [ 1910.257403][T28058] usb 1-1: 0:2 : does not exist [ 1910.263414][T28058] usb 1-1: unit 255 not found! [ 1910.437136][T28058] usb 1-1: USB disconnect, device number 14 [ 1911.298211][T27932] usb 3-1: USB disconnect, device number 101 [ 1911.357491][T27932] qcserial 3-1:0.2: device disconnected [ 1911.427448][T28061] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1911.486006][T31286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1911.541357][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1911.598487][T28061] usb 1-1: config 0 has no interfaces? [ 1911.606736][T28061] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1911.616238][T28061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.624304][T28061] usb 1-1: Product: syz [ 1911.628698][T28061] usb 1-1: Manufacturer: syz [ 1911.633323][T28061] usb 1-1: SerialNumber: syz [ 1911.646004][T28061] usb 1-1: config 0 descriptor?? [ 1911.879896][T31282] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6665'. [ 1911.902919][T28061] usb 1-1: USB disconnect, device number 15 [ 1912.805759][T27932] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1913.001987][T27932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1913.010628][T27932] usb 1-1: not running at top speed; connect to a high speed hub [ 1913.020653][T27932] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1913.029594][T27932] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 1913.043630][T27932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1913.052826][T27932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.061299][T27932] usb 1-1: Product: Й [ 1913.065507][T27932] usb 1-1: Manufacturer: 醓蔆㡠荃⹹︑쫭嬝囐例읷থ줪쌄疧굪씑ꔑ꒝渉궇굸憎딄ퟟ霚僉엱䱜蒍 [ 1913.080363][T27932] usb 1-1: SerialNumber: 䀘 [ 1913.427787][T31296] syzkaller1: entered promiscuous mode [ 1913.443277][T31296] syzkaller1: entered allmulticast mode [ 1913.474958][T31301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1913.774779][T31306] fuse: Unknown parameter 'use00000000000000000000' [ 1914.529253][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.538635][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.184694][T26090] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1915.314883][T28061] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1915.344539][T26090] usb 3-1: Using ep0 maxpacket: 32 [ 1915.376629][T26090] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1915.392231][T26090] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1915.403322][T26090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.416775][T26090] usb 3-1: Product: syz [ 1915.420995][T26090] usb 3-1: Manufacturer: syz [ 1915.428799][T26090] usb 3-1: SerialNumber: syz [ 1915.438565][T26090] usb 3-1: config 0 descriptor?? [ 1915.499877][T28061] usb 5-1: Using ep0 maxpacket: 8 [ 1915.513066][T28061] usb 5-1: config 0 has no interfaces? [ 1915.517898][T27932] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1915.532086][T28061] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1915.542474][T28061] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1915.550916][T28061] usb 5-1: Product: syz [ 1915.558830][T28061] usb 5-1: Manufacturer: syz [ 1915.563468][T28061] usb 5-1: SerialNumber: syz [ 1915.595770][T28061] usb 5-1: config 0 descriptor?? [ 1915.614022][T27932] usb 1-1: USB disconnect, device number 16 [ 1915.692302][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1915.828690][T31325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.839575][T31325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.858721][T27932] usb 5-1: USB disconnect, device number 92 [ 1916.204562][T31343] netlink: 368 bytes leftover after parsing attributes in process `syz.5.6682'. [ 1916.241934][T31343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6682'. [ 1916.263409][T31346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1916.264064][T31347] syzkaller0: create flow: hash 2134417960 index 1 [ 1916.394551][T31342] syzkaller0: delete flow: hash 2134417960 index 1 [ 1916.913641][T31356] fuse: Unknown parameter 'use00000000000000000000' [ 1917.258353][ T5888] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1917.438613][ T5888] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 1917.487715][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1917.501827][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.510713][ T5888] usb 5-1: Product: syz [ 1917.515546][ T5888] usb 5-1: Manufacturer: syz [ 1917.520167][ T5888] usb 5-1: SerialNumber: syz [ 1917.533807][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1917.564956][T27932] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1917.653539][T26090] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.003150][ T9] usb 3-1: USB disconnect, device number 102 [ 1918.021368][T27932] usb 2-1: config 0 has no interfaces? [ 1918.040670][T27932] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1918.050200][T27932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.062556][T27932] usb 2-1: Product: syz [ 1918.067081][T27932] usb 2-1: Manufacturer: syz [ 1918.071827][T27932] usb 2-1: SerialNumber: syz [ 1918.085605][T27932] usb 2-1: config 0 descriptor?? [ 1918.194926][ T9] usb 5-1: USB disconnect, device number 93 [ 1918.678654][T26090] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1918.686193][T26090] ath9k_htc: Failed to initialize the device [ 1918.692906][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 1918.874719][T27932] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1919.004746][T27932] usb 1-1: device descriptor read/64, error -71 [ 1919.254819][T27932] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1919.394787][T27932] usb 1-1: device descriptor read/64, error -71 [ 1919.506421][T27932] usb usb1-port1: attempt power cycle [ 1919.844752][T27932] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1919.865135][T27932] usb 1-1: device descriptor read/8, error -71 [ 1920.104535][T27932] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1920.125209][T27932] usb 1-1: device descriptor read/8, error -71 [ 1920.238223][T27932] usb usb1-port1: unable to enumerate USB device [ 1922.137036][T28061] usb 2-1: USB disconnect, device number 20 [ 1922.431501][T31394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6694'. [ 1922.580455][T31404] fuse: Unknown parameter 'use00000000000000000000' [ 1922.714611][ T9] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1922.861253][T31419] binder: 31418:31419 ioctl c00c620f 0 returned -14 [ 1922.876853][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1922.916810][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.938708][ T9] usb 3-1: config 0 descriptor?? [ 1922.956014][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1923.576852][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1923.740947][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1923.924728][ T9] usb 3-1: USB disconnect, device number 103 [ 1924.505477][T31445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1924.731245][T31456] fuse: Unknown parameter 'user_i00000000000000000000' [ 1924.841343][T31463] netlink: 'syz.0.6714': attribute type 29 has an invalid length. [ 1924.860566][T31463] netlink: 'syz.0.6714': attribute type 29 has an invalid length. [ 1924.875612][T31463] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6714'. [ 1925.155083][T28058] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1925.354607][T28058] usb 5-1: Using ep0 maxpacket: 16 [ 1925.383258][T28058] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1925.405117][T28058] usb 5-1: config 0 has no interface number 0 [ 1925.411277][T28058] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.453949][T28058] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.492584][T28058] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1925.501900][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.522773][T28058] usb 5-1: config 0 descriptor?? [ 1925.603196][T31481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1925.795782][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1925.795801][ T30] audit: type=1326 audit(1747101604.371:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1925.882025][ T30] audit: type=1326 audit(1747101604.371:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1925.940932][ T30] audit: type=1326 audit(1747101604.371:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.161456][ T30] audit: type=1326 audit(1747101604.371:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.234524][ T30] audit: type=1326 audit(1747101604.371:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.259600][ T30] audit: type=1326 audit(1747101604.371:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.385067][ T30] audit: type=1326 audit(1747101604.371:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.451600][ T30] audit: type=1326 audit(1747101604.371:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.487796][ T30] audit: type=1326 audit(1747101604.371:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.548358][ T30] audit: type=1326 audit(1747101604.561:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31465 comm="syz.4.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b78e969 code=0x7ffc0000 [ 1926.656158][T31492] fuse: Unknown parameter 'user_i00000000000000000000' [ 1926.798364][T28058] usbhid 5-1:0.1: can't add hid device: -71 [ 1926.804838][T28058] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1926.827296][T28058] usb 5-1: USB disconnect, device number 94 [ 1927.064768][T27932] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1927.227498][T27932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1927.258866][T27932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.283279][T27932] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1927.302827][T27932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.323877][T27932] usb 3-1: config 0 descriptor?? [ 1927.537246][T31498] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1927.543956][T31498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1927.556311][T31498] vhci_hcd vhci_hcd.0: Device attached [ 1927.587343][T26090] hid-generic 0000:0003:0000.0067: item fetching failed at offset 0/2 [ 1927.603762][T26090] hid-generic 0000:0003:0000.0067: probe with driver hid-generic failed with error -22 [ 1927.770434][T27932] hid-thrustmaster 0003:044F:B65D.0068: unknown main item tag 0x0 [ 1927.792621][T27932] hid-thrustmaster 0003:044F:B65D.0068: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 1927.806655][ T9] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 1927.823374][T27932] hid-thrustmaster 0003:044F:B65D.0068: Wrong number of endpoints? [ 1927.987380][T28061] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1927.993154][ C0] hid-thrustmaster 0003:044F:B65D.0068: Unknown packet type 0x0, unable to proceed further with wheel init [ 1928.114666][T27932] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1928.114822][T28061] usb 1-1: device descriptor read/64, error -71 [ 1928.209359][T26090] usb 3-1: USB disconnect, device number 104 [ 1928.275047][T27932] usb 5-1: Using ep0 maxpacket: 16 [ 1928.282475][T27932] usb 5-1: config 0 has no interfaces? [ 1928.293391][T27932] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1928.302720][T27932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.311484][T27932] usb 5-1: Product: syz [ 1928.315876][T27932] usb 5-1: Manufacturer: syz [ 1928.320911][T27932] usb 5-1: SerialNumber: syz [ 1928.330567][T27932] usb 5-1: config 0 descriptor?? [ 1928.361283][T31499] vhci_hcd: connection reset by peer [ 1928.367173][ T3477] vhci_hcd: stop threads [ 1928.371597][ T3477] vhci_hcd: release socket [ 1928.381837][ T3477] vhci_hcd: disconnect device [ 1928.394876][T28061] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1928.544885][T28061] usb 1-1: device descriptor read/64, error -71 [ 1928.557861][T31508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.569953][T31508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.630774][T31509] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6727'. [ 1928.655041][T28061] usb usb1-port1: attempt power cycle [ 1928.660220][T31509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1928.693826][T28059] usb 5-1: USB disconnect, device number 95 [ 1928.818726][T31519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6731'. [ 1929.004875][T28061] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1929.037927][T28061] usb 1-1: device descriptor read/8, error -71 [ 1929.144518][T27932] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1929.184528][T26090] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1929.274840][T28061] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1929.274860][T27932] usb 5-1: device descriptor read/64, error -71 [ 1929.325428][T28061] usb 1-1: device descriptor read/8, error -71 [ 1929.342912][T26090] usb 3-1: config 0 has no interfaces? [ 1929.373044][T26090] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1929.383339][T26090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.399022][T26090] usb 3-1: Product: syz [ 1929.403226][T26090] usb 3-1: Manufacturer: syz [ 1929.410330][T26090] usb 3-1: SerialNumber: syz [ 1929.424345][T26090] usb 3-1: config 0 descriptor?? [ 1929.434888][T28059] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1929.453320][T28061] usb usb1-port1: unable to enumerate USB device [ 1929.524542][T27932] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1929.611203][T28059] usb 6-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 1929.625030][T28059] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1929.634141][T28059] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1929.651588][T28059] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1929.664565][T27932] usb 5-1: device descriptor read/64, error -71 [ 1929.694619][T28059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.726762][T28059] usb 6-1: Product: syz [ 1929.730995][T28059] usb 6-1: Manufacturer: syz [ 1929.736976][T28059] usb 6-1: SerialNumber: syz [ 1929.755393][T28059] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1929.762463][T28059] cdc_ncm 6-1:1.0: bind() failure [ 1929.775212][T27932] usb usb5-port1: attempt power cycle [ 1930.044768][T31532] fuse: Unknown parameter 'user_i00000000000000000000' [ 1930.134558][T27932] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1930.168628][T27932] usb 5-1: device descriptor read/8, error -71 [ 1930.424563][T27932] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1930.445749][T27932] usb 5-1: device descriptor read/8, error -71 [ 1930.504699][T28059] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1930.565124][T27932] usb usb5-port1: unable to enumerate USB device [ 1930.666621][T28059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.678343][T28059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.689260][T28059] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1930.702786][T28059] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1930.711908][T28059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.725447][T28059] usb 2-1: config 0 descriptor?? [ 1931.204653][T27932] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1931.422558][T27932] usb 1-1: config 16 interface 0 has no altsetting 0 [ 1931.430998][T27932] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1931.440896][T27932] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1931.449378][T27932] usb 1-1: Manufacturer: syz [ 1931.487596][T28059] usbhid 2-1:0.0: can't add hid device: -71 [ 1931.509974][T28059] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1931.529804][T28059] usb 2-1: USB disconnect, device number 21 [ 1931.726465][T31537] netlink: 'syz.0.6737': attribute type 1 has an invalid length. [ 1931.924135][T28061] usb 3-1: USB disconnect, device number 105 [ 1931.950772][T27932] (null): keene_cmd_main failed (-71) [ 1931.974269][T27932] video4linux radio48: keene_cmd_main failed (-71) [ 1931.994832][T27932] radio-keene 1-1:16.0: V4L2 device registered as radio48 [ 1932.018628][T27932] usb 1-1: USB disconnect, device number 25 [ 1932.366968][T27932] usb 6-1: USB disconnect, device number 45 [ 1932.484695][T28061] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1932.534718][T26090] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1932.674640][T28059] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1932.730188][T31557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6742'. [ 1932.788257][T26090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.814599][T28061] usb 3-1: Using ep0 maxpacket: 16 [ 1932.821904][T26090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.837714][T28059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.852168][T28059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.864127][T28059] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1932.888953][T28059] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1932.898315][T26090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1932.899114][T28059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.911675][ T9] vhci_hcd: vhci_device speed not set [ 1932.942503][T28059] usb 5-1: config 0 descriptor?? [ 1932.971518][T26090] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1932.990178][T28061] usb 3-1: config 0 has no interfaces? [ 1932.998546][T28061] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1933.000098][T26090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.045074][T26090] usb 2-1: config 0 descriptor?? [ 1933.054972][T15188] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1933.086271][T28061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.114054][T28061] usb 3-1: config 0 descriptor?? [ 1933.227096][T15188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1933.238648][T15188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.252025][T15188] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 1933.261744][T15188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.277140][T15188] usb 1-1: config 0 descriptor?? [ 1933.349392][T26090] usbhid 2-1:0.0: can't add hid device: -71 [ 1933.359146][T26090] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1933.380588][T28059] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 1933.384887][T26090] usb 2-1: USB disconnect, device number 22 [ 1933.493341][T31567] gtp1: entered promiscuous mode [ 1933.520329][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.539984][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.561338][T28059] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1933.584766][T31553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.593551][T31553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.603055][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.622515][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.655872][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.674821][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.683497][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.709029][T28059] usb 5-1: USB disconnect, device number 100 [ 1933.712860][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.759293][T31569] fido_id[31569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1933.781553][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.798299][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.882258][T15188] usbhid 1-1:0.0: can't add hid device: -71 [ 1933.890259][T15188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1933.914018][T15188] usb 1-1: USB disconnect, device number 26 [ 1934.064387][T31577] fuse: Unknown parameter 'user_id00000000000000000000' [ 1934.097594][T31578] [U] .h0FwZ,iqgҏV2sO [ 1934.103900][T31578] [U] ` w*BBOLhU [ 1934.108441][T31578] [U] w$n|#%o.z\̧mРw [ 1934.114359][T31578] [U] R{ꫢ S [ 1934.134551][T31580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6748'. [ 1934.255648][T15188] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1934.457819][T15188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1934.494718][T15188] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1934.521360][T15188] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1934.541650][T15188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.614754][T15188] usb 1-1: Product: syz [ 1934.619142][T15188] usb 1-1: Manufacturer: syz [ 1934.625491][T15188] usb 1-1: SerialNumber: syz [ 1934.643202][T15188] usb 1-1: config 0 descriptor?? [ 1934.659664][T31575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1934.766498][T15188] usb 1-1: ucan: probing device on interface #0 [ 1934.855241][T15188] usb 1-1: ucan: invalid EP count (1) [ 1934.884239][T15188] usb 1-1: ucan: probe failed; try to update the device firmware [ 1935.268901][T31575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.311981][T31575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1935.371482][T31550] [U] [ 1935.376069][T15188] usb 3-1: USB disconnect, device number 106 [ 1936.204686][T31605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6754'. [ 1936.903072][T28059] usb 1-1: USB disconnect, device number 27 [ 1937.025838][T31617] QAT: failed to copy from user cfg_data. [ 1937.106889][T15188] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1937.269390][T15188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.289267][T15188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.344831][T15188] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1937.374801][T28059] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1937.382510][T15188] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1937.416761][T15188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.446365][T15188] usb 6-1: config 0 descriptor?? [ 1937.739007][T28059] usb 1-1: config 0 has no interfaces? [ 1937.997358][T28059] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1938.009158][T28059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.044804][T28059] usb 1-1: Product: syz [ 1938.074611][T28059] usb 1-1: Manufacturer: syz [ 1938.094156][T15188] usbhid 6-1:0.0: can't add hid device: -71 [ 1938.102605][T15188] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1938.127456][T15188] usb 6-1: USB disconnect, device number 46 [ 1938.157044][T28059] usb 1-1: SerialNumber: syz [ 1938.195946][T28059] usb 1-1: config 0 descriptor?? [ 1938.394845][T28061] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1938.548782][T28061] usb 3-1: Using ep0 maxpacket: 8 [ 1938.556863][T28061] usb 3-1: config 5 has an invalid interface number: 105 but max is 1 [ 1938.566714][T28061] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 1938.575849][T28061] usb 3-1: config 5 has an invalid descriptor of length 191, skipping remainder of the config [ 1938.594662][T28061] usb 3-1: config 5 has no interface number 0 [ 1938.600964][T28061] usb 3-1: config 5 has no interface number 1 [ 1938.607819][T28061] usb 3-1: config 5 interface 105 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1938.621335][T28061] usb 3-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1938.662365][T28061] usb 3-1: config 5 interface 105 has no altsetting 0 [ 1938.670650][T28061] usb 3-1: config 5 interface 4 has no altsetting 0 [ 1938.679687][T28061] usb 3-1: New USB device found, idVendor=10cf, idProduct=8064, bcdDevice=fe.e0 [ 1938.689636][T28061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.698246][T28061] usb 3-1: Product: syz [ 1938.710947][T28061] usb 3-1: Manufacturer: syz [ 1938.721657][T28061] usb 3-1: SerialNumber: syz [ 1938.848391][T31630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6758'. [ 1938.875279][T31630] netlink: 'syz.0.6758': attribute type 3 has an invalid length. [ 1938.964929][T28059] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1939.213954][T28059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.244561][T28059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.281642][T28059] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1939.310952][T28059] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1939.328357][T28059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.358257][T31632] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1939.372828][T28059] usb 6-1: config 0 descriptor?? [ 1939.642483][T28059] usbhid 6-1:0.0: can't add hid device: -71 [ 1939.684146][T28059] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1939.754196][T28059] usb 6-1: USB disconnect, device number 47 [ 1939.827430][T31640] fuse: Bad value for 'fd' [ 1939.994889][T15188] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1940.174899][T15188] usb 5-1: Using ep0 maxpacket: 16 [ 1940.182254][T15188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.193588][T15188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.209656][T15188] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1940.219200][T15188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.230602][T15188] usb 5-1: config 0 descriptor?? [ 1940.672394][T15188] samsung 0003:0419:0001.006A: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 1940.871674][T15188] usb 5-1: USB disconnect, device number 101 [ 1940.979084][T31648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6765'. [ 1940.995023][T28059] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1941.219755][T28059] usb 2-1: device descriptor read/64, error -71 [ 1941.309299][ T24] usb 1-1: USB disconnect, device number 28 [ 1941.542269][T28059] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1941.634710][T31653] netlink: 'syz.4.6767': attribute type 5 has an invalid length. [ 1941.782133][T28061] vmk80xx 3-1:5.105: driver 'vmk80xx' failed to auto-configure device. [ 1941.843243][T28061] vmk80xx 3-1:5.4: driver 'vmk80xx' failed to auto-configure device. [ 1941.914720][T28061] usb 3-1: USB disconnect, device number 107 [ 1942.166606][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1942.294943][T28059] usb 2-1: device descriptor read/64, error -71 [ 1942.302789][T31669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1942.388036][T28063] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1942.401035][T31675] fuse: Unknown parameter 'user_id00000000000000000000' [ 1942.408415][T28059] usb usb2-port1: attempt power cycle [ 1942.574954][T28063] usb 5-1: Using ep0 maxpacket: 8 [ 1942.583823][T28063] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1942.594780][T28063] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1942.603289][T28063] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1942.613214][T28058] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1942.622209][T28063] usb 5-1: config 250 has no interface number 0 [ 1942.629659][T28063] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1942.642056][T28063] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1942.652867][T28061] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1942.661081][T28063] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 256 [ 1942.672791][T28063] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1942.687853][T28063] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1942.707837][T28063] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1942.723557][T28063] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1942.732300][T28063] usb 5-1: Product: syz [ 1942.736770][T28063] usb 5-1: SerialNumber: syz [ 1942.748198][T28063] hub 5-1:250.228: bad descriptor, ignoring hub [ 1942.758199][T28063] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1942.765854][ T9] usb 1-1: device descriptor read/64, error -71 [ 1942.774586][T28059] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1942.794900][T28058] usb 6-1: Using ep0 maxpacket: 16 [ 1942.801521][T28059] usb 2-1: device descriptor read/8, error -71 [ 1942.810337][T28058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.821898][T28058] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1942.839564][T28058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.858302][T28058] usb 6-1: config 0 descriptor?? [ 1942.881364][T28061] usb 3-1: config 0 has no interfaces? [ 1942.918669][T28061] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1942.928850][T28061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.937642][T28061] usb 3-1: Product: syz [ 1942.942291][T28061] usb 3-1: Manufacturer: syz [ 1942.948890][T28061] usb 3-1: SerialNumber: syz [ 1942.955506][T28063] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 102 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1942.972349][T28061] usb 3-1: config 0 descriptor?? [ 1943.029115][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1943.048886][T28059] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1943.095473][T28059] usb 2-1: device descriptor read/8, error -71 [ 1943.211945][T28059] usb usb2-port1: unable to enumerate USB device [ 1943.239374][T31679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1943.239437][ C1] usblp0: nonzero read bulk status received: -71 [ 1943.277605][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.291916][T28058] uclogic 0003:28BD:0071.006B: interface is invalid, ignoring [ 1943.317761][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.372760][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1943.394538][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1943.441066][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1943.474459][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.475178][T28061] usb 5-1: USB disconnect, device number 102 [ 1943.491367][T31676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.520444][ T9] usb 1-1: config 0 descriptor?? [ 1943.579699][T28061] usblp0: removed [ 1943.614288][T31676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.628381][T31676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.642441][T31676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.005197][T28061] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1944.151381][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1944.161886][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1944.197742][ T9] usb 1-1: USB disconnect, device number 30 [ 1944.204851][T28061] usb 2-1: Using ep0 maxpacket: 32 [ 1944.237612][T28061] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1944.250369][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1944.261653][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1944.271462][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1944.283448][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1944.295728][T28061] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1944.305293][T28061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.313384][T28061] usb 2-1: Product: syz [ 1944.318355][T28061] usb 2-1: Manufacturer: syz [ 1944.323455][T28061] usb 2-1: SerialNumber: syz [ 1944.331159][T28061] usb 2-1: config 0 descriptor?? [ 1944.374654][T28058] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1944.434692][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1944.540843][T28061] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1944.541061][T31687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.561435][T28061] input input161: Device does not respond to id packet M [ 1944.562642][T28058] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1944.563162][T31687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.589506][T28058] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1944.600626][T28058] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1944.610069][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.618851][T28061] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1944.625906][T28061] input input161: Device does not respond to id packet P [ 1944.641400][T31686] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 1944.663527][T28058] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1944.680596][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.686232][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1944.689922][T28061] input input161: Device does not respond to id packet B [ 1944.727850][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.752253][T28061] input input161: Device does not respond to id packet N [ 1944.763708][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.786384][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.800534][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.812746][T28061] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1944.829598][T28061] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1944.847577][T28061] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1944.862329][T28061] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input161 [ 1944.903602][T28061] usb 2-1: USB disconnect, device number 27 [ 1944.963660][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.002060][T28058] usb 5-1: USB disconnect, device number 103 [ 1945.031200][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.041997][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1945.055818][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1945.065279][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.084560][ T9] usb 1-1: config 0 descriptor?? [ 1945.177896][T15188] usb 6-1: USB disconnect, device number 48 [ 1945.311790][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1945.338238][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1945.373397][ T9] usb 1-1: USB disconnect, device number 31 [ 1945.383001][T28061] usb 3-1: USB disconnect, device number 108 [ 1945.464691][T31696] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1945.873341][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6785'. [ 1946.214071][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1946.710935][T31732] loop6: detected capacity change from 0 to 7 [ 1946.724314][T31732] Dev loop6: unable to read RDB block 7 [ 1946.747003][T31732] loop6: unable to read partition table [ 1946.795750][T31732] loop6: partition table beyond EOD, truncated [ 1946.804258][T31732] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1946.899389][T31712] veth1_vlan (unregistering): left allmulticast mode [ 1946.979311][T31712] team0: Port device macvlan0 removed [ 1947.350861][T31751] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 1947.368625][T31751] gretap0: entered promiscuous mode [ 1947.397966][T31751] gretap0: left promiscuous mode [ 1947.895159][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1948.073841][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.119861][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.148013][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1948.165842][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1948.178128][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.209548][ T9] usb 3-1: config 0 descriptor?? [ 1948.575026][T15188] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1948.605791][T31778] loop6: detected capacity change from 0 to 7 [ 1948.636579][ T5926] Dev loop6: unable to read RDB block 7 [ 1948.642220][ T5926] loop6: unable to read partition table [ 1948.662448][ T5926] loop6: partition table beyond EOD, truncated [ 1948.682528][T31778] Dev loop6: unable to read RDB block 7 [ 1948.691830][T31778] loop6: unable to read partition table [ 1948.705532][T31778] loop6: partition table beyond EOD, truncated [ 1948.729649][T31778] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1948.847473][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1948.879702][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1948.888270][T15188] usb 2-1: Using ep0 maxpacket: 32 [ 1948.899244][T31783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1948.958740][ T9] usb 3-1: USB disconnect, device number 109 [ 1949.130927][T15188] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1949.139809][T15188] usb 2-1: config 0 has no interface number 0 [ 1949.147054][T15188] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 1949.158474][T15188] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1949.171011][T15188] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1949.180382][T15188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.189329][T15188] usb 2-1: Product: syz [ 1949.194761][T15188] usb 2-1: Manufacturer: syz [ 1949.199479][T15188] usb 2-1: SerialNumber: syz [ 1949.360634][T15188] usb 2-1: config 0 descriptor?? [ 1949.474609][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1949.484679][T27932] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1949.698051][ T9] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1949.734733][ T9] usb 1-1: config 0 has no interface number 0 [ 1949.741033][ T9] usb 1-1: config 0 interface 122 has no altsetting 0 [ 1949.748444][T27932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.765158][T27932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1949.775476][T27932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1949.790702][T27932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1949.800236][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1949.810118][T31772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1949.824454][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.835108][T15188] smsc95xx v2.0.0 [ 1949.842597][T27932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.874523][ T9] usb 1-1: Product: syz [ 1950.074119][T27932] usb 3-1: config 0 descriptor?? [ 1950.079262][ T9] usb 1-1: Manufacturer: syz [ 1950.144578][ T9] usb 1-1: SerialNumber: syz [ 1950.215783][ T9] usb 1-1: config 0 descriptor?? [ 1950.298939][T31772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1950.419160][T27932] usbhid 3-1:0.0: can't add hid device: -71 [ 1950.430535][T27932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1950.453628][T27932] usb 3-1: USB disconnect, device number 110 [ 1950.555093][T15188] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1950.566727][T15188] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1950.926971][T28058] usb 1-1: USB disconnect, device number 32 [ 1950.933633][T28058] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1951.200646][T31792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6806'. [ 1951.210792][T31792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6806'. [ 1951.225949][T31792] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6806'. [ 1951.323999][T31794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6806'. [ 1952.215427][T31806] xt_NFQUEUE: number of total queues is 0 [ 1952.306785][T31810] loop6: detected capacity change from 0 to 7 [ 1952.321369][T15188] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1952.333634][T31810] Dev loop6: unable to read RDB block 7 [ 1952.339596][T15188] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1952.344073][T15188] usb 2-1: USB disconnect, device number 28 [ 1952.358616][T31810] loop6: unable to read partition table [ 1952.366745][T31810] loop6: partition table beyond EOD, truncated [ 1952.378840][T31810] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1952.474521][T28058] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1952.625800][T28058] usb 1-1: Using ep0 maxpacket: 16 [ 1952.636683][T28058] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 1952.646795][T28058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.655267][T28058] usb 1-1: Product: syz [ 1952.659544][T28058] usb 1-1: Manufacturer: syz [ 1952.664169][T28058] usb 1-1: SerialNumber: syz [ 1952.673067][T28058] usb 1-1: config 0 descriptor?? [ 1952.703537][T15188] IPVS: starting estimator thread 0... [ 1952.724566][T28061] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1952.744544][T27932] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1952.799073][T31827] IPVS: using max 30 ests per chain, 72000 per kthread [ 1952.841379][T31828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.849243][T31828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.881491][T31808] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6812'. [ 1952.899675][T28058] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1952.901899][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.913952][T28058] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1952.919280][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1952.940453][T28058] usb 1-1: USB disconnect, device number 33 [ 1952.940904][T27932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1952.967655][T27932] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1952.980127][T27932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.985084][T28061] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.002428][T28061] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1953.011919][T28061] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1953.014388][T27932] usb 5-1: config 0 descriptor?? [ 1953.039924][T28061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.177940][T31828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1953.194255][T31828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.298499][T31828] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.308228][T31828] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.321118][T31828] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.330867][T31828] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.364902][T15188] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1953.524785][T15188] usb 2-1: Using ep0 maxpacket: 16 [ 1953.531011][T15188] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1953.541976][T15188] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1953.550548][T15188] usb 2-1: can't read configurations, error -61 [ 1953.645103][T27932] usbhid 5-1:0.0: can't add hid device: -71 [ 1953.655555][T27932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1953.688995][T27932] usb 5-1: USB disconnect, device number 104 [ 1953.695129][T15188] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1953.914871][T15188] usb 2-1: Using ep0 maxpacket: 16 [ 1953.962295][T15188] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1953.993794][T15188] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1954.004175][T15188] usb 2-1: can't read configurations, error -61 [ 1954.012783][T15188] usb usb2-port1: attempt power cycle [ 1954.101425][T31849] FAULT_INJECTION: forcing a failure. [ 1954.101425][T31849] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.114982][T31849] CPU: 1 UID: 0 PID: 31849 Comm: syz.2.6824 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1954.115009][T31849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1954.115022][T31849] Call Trace: [ 1954.115032][T31849] [ 1954.115041][T31849] dump_stack_lvl+0x189/0x250 [ 1954.115075][T31849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1954.115096][T31849] ? __pfx__printk+0x10/0x10 [ 1954.115115][T31849] ? __pfx___might_resched+0x10/0x10 [ 1954.115128][T31849] ? fs_reclaim_acquire+0x7d/0x100 [ 1954.115153][T31849] should_fail_ex+0x414/0x560 [ 1954.115171][T31849] should_failslab+0xa8/0x100 [ 1954.115191][T31849] __kmalloc_noprof+0xcb/0x4f0 [ 1954.115208][T31849] ? sock_kmalloc+0xd6/0x160 [ 1954.115227][T31849] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1954.115252][T31849] sock_kmalloc+0xd6/0x160 [ 1954.115274][T31849] hash_recvmsg+0x1c8/0x750 [ 1954.115291][T31849] ? __pfx_hash_recvmsg+0x10/0x10 [ 1954.115306][T31849] sock_recvmsg_nosec+0x183/0x1c0 [ 1954.115323][T31849] ____sys_recvmsg+0x3aa/0x460 [ 1954.115348][T31849] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1954.115378][T31849] ? import_iovec+0x74/0xa0 [ 1954.115400][T31849] ___sys_recvmsg+0x1b5/0x510 [ 1954.115423][T31849] ? __pfx____sys_recvmsg+0x10/0x10 [ 1954.115464][T31849] ? __might_fault+0xb0/0x130 [ 1954.115485][T31849] do_recvmmsg+0x307/0x760 [ 1954.115510][T31849] ? __pfx_do_recvmmsg+0x10/0x10 [ 1954.115538][T31849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1954.115569][T31849] __x64_sys_recvmmsg+0x190/0x240 [ 1954.115588][T31849] ? rcu_is_watching+0x15/0xb0 [ 1954.115615][T31849] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1954.115637][T31849] ? do_syscall_64+0xba/0x210 [ 1954.115659][T31849] do_syscall_64+0xf6/0x210 [ 1954.115677][T31849] ? clear_bhb_loop+0x45/0xa0 [ 1954.115694][T31849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.115708][T31849] RIP: 0033:0x7f49f418e969 [ 1954.115721][T31849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1954.115733][T31849] RSP: 002b:00007f49f506e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1954.115748][T31849] RAX: ffffffffffffffda RBX: 00007f49f43b6160 RCX: 00007f49f418e969 [ 1954.115759][T31849] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 1954.115768][T31849] RBP: 00007f49f506e090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.115777][T31849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.115786][T31849] R13: 0000000000000000 R14: 00007f49f43b6160 R15: 00007f49f44dfa28 [ 1954.115807][T31849] [ 1954.174783][T27932] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1954.384876][T26090] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1954.465766][T15188] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1954.505587][T15188] usb 2-1: Using ep0 maxpacket: 16 [ 1954.554572][T26090] usb 1-1: Using ep0 maxpacket: 32 [ 1954.562014][T26090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.573163][T26090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.587010][T15188] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1954.599768][T26090] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1954.622652][T15188] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1954.636338][T26090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.650581][T15188] usb 2-1: can't read configurations, error -61 [ 1954.660775][T26090] usb 1-1: config 0 descriptor?? [ 1954.678162][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.699779][T27932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.721206][T27932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1954.761116][T27932] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1954.788612][T27932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.808608][T15188] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1954.842680][T27932] usb 5-1: config 0 descriptor?? [ 1954.905326][T15188] usb 2-1: Using ep0 maxpacket: 16 [ 1954.997999][T15188] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1955.106062][T27932] usbhid 5-1:0.0: can't add hid device: -71 [ 1955.128177][T26090] ft260 0003:0403:6030.006C: unknown main item tag 0x0 [ 1955.144675][T27932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1955.185334][T15188] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1955.193897][T27932] usb 5-1: USB disconnect, device number 105 [ 1955.217357][T15188] usb 2-1: can't read configurations, error -61 [ 1955.235735][T15188] usb usb2-port1: unable to enumerate USB device [ 1955.321349][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.332169][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.342614][T31851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1955.358608][T26090] ft260 0003:0403:6030.006C: failed to retrieve chip version [ 1955.369142][T26090] ft260 0003:0403:6030.006C: probe with driver ft260 failed with error -71 [ 1955.391242][T26090] usb 1-1: USB disconnect, device number 34 [ 1955.432423][T28059] usb 6-1: USB disconnect, device number 49 [ 1955.595360][T31860] loop6: detected capacity change from 0 to 7 [ 1955.615686][T31860] Dev loop6: unable to read RDB block 7 [ 1955.621884][T31860] loop6: unable to read partition table [ 1955.629155][T31860] loop6: partition table beyond EOD, truncated [ 1955.636343][T31860] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1955.866792][T31869] fuse: Unknown parameter '0x0000000000000006' [ 1957.912897][T31891] FAULT_INJECTION: forcing a failure. [ 1957.912897][T31891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.940610][T31891] CPU: 0 UID: 0 PID: 31891 Comm: syz.0.6835 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1957.940641][T31891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1957.940655][T31891] Call Trace: [ 1957.940665][T31891] [ 1957.940675][T31891] dump_stack_lvl+0x189/0x250 [ 1957.940708][T31891] ? __lock_acquire+0xaac/0xd20 [ 1957.940740][T31891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1957.940770][T31891] ? __pfx__printk+0x10/0x10 [ 1957.940791][T31891] ? __might_fault+0xb0/0x130 [ 1957.940830][T31891] should_fail_ex+0x414/0x560 [ 1957.940857][T31891] _copy_from_user+0x2d/0xb0 [ 1957.940887][T31891] ___sys_recvmsg+0x12e/0x510 [ 1957.940921][T31891] ? __pfx____sys_recvmsg+0x10/0x10 [ 1957.940976][T31891] ? __might_fault+0xb0/0x130 [ 1957.941001][T31891] do_recvmmsg+0x307/0x760 [ 1957.941031][T31891] ? __pfx_do_recvmmsg+0x10/0x10 [ 1957.941063][T31891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1957.941099][T31891] __x64_sys_recvmmsg+0x190/0x240 [ 1957.941123][T31891] ? rcu_is_watching+0x15/0xb0 [ 1957.941150][T31891] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1957.941177][T31891] ? do_syscall_64+0xba/0x210 [ 1957.941202][T31891] do_syscall_64+0xf6/0x210 [ 1957.941224][T31891] ? clear_bhb_loop+0x45/0xa0 [ 1957.941244][T31891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.941261][T31891] RIP: 0033:0x7f5581d8e969 [ 1957.941276][T31891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1957.941292][T31891] RSP: 002b:00007f5582c6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1957.941310][T31891] RAX: ffffffffffffffda RBX: 00007f5581fb6160 RCX: 00007f5581d8e969 [ 1957.941323][T31891] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 1957.941335][T31891] RBP: 00007f5582c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.941346][T31891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.941356][T31891] R13: 0000000000000000 R14: 00007f5581fb6160 R15: 00007f55820dfa28 [ 1957.941380][T31891] [ 1958.972525][T31895] bond0: entered promiscuous mode [ 1959.031408][T31898] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1959.286797][T31904] loop6: detected capacity change from 0 to 7 [ 1959.294146][T31904] Dev loop6: unable to read RDB block 7 [ 1959.299947][T31904] loop6: unable to read partition table [ 1959.310744][T31904] loop6: partition table beyond EOD, truncated [ 1959.325298][T31904] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1959.350572][T31906] fuse: Unknown parameter '0x0000000000000006' [ 1959.455045][T28061] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1959.636664][T28061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.662040][T28061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.704840][T28061] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1959.741509][T28061] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1959.776729][T28061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.827216][T28061] usb 5-1: config 0 descriptor?? [ 1960.072696][T31925] syzkaller0: create flow: hash 2134417960 index 2 [ 1960.174735][T28059] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1960.479412][T28061] usbhid 5-1:0.0: can't add hid device: -71 [ 1960.526047][T28061] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1960.561700][T28061] usb 5-1: USB disconnect, device number 106 [ 1960.941852][T31925] syzkaller0: delete flow: hash 2134417960 index 2 [ 1961.029387][ T3437] syzkaller0: tun_net_xmit 76 [ 1961.034959][T28061] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1961.050771][ T3437] syzkaller0: tun_net_xmit 48 [ 1961.055933][T28058] syzkaller0: tun_net_xmit 76 [ 1961.174588][T28059] usb 3-1: config 0 has no interfaces? [ 1961.194784][T28063] syzkaller0: tun_net_xmit 76 [ 1961.211708][T28059] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1961.221411][T28061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.234776][T28061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.245283][T28059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.253315][T28059] usb 3-1: Product: syz [ 1961.258697][T28061] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1961.271836][T28059] usb 3-1: Manufacturer: syz [ 1961.277111][T28059] usb 3-1: SerialNumber: syz [ 1961.282058][T28061] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1961.295251][T28061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.307864][T28059] usb 3-1: config 0 descriptor?? [ 1961.323567][T28061] usb 5-1: config 0 descriptor?? [ 1961.389735][T28058] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1961.452164][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6838'. [ 1961.515274][ T24] syzkaller0: tun_net_xmit 76 [ 1961.543338][T28061] usbhid 5-1:0.0: can't add hid device: -71 [ 1961.549663][T28061] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1961.560163][T28058] usb 1-1: not running at top speed; connect to a high speed hub [ 1961.571113][T28061] usb 5-1: USB disconnect, device number 107 [ 1961.577716][T28058] usb 1-1: config 1 interface 0 altsetting 195 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1961.594081][T28058] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1961.603470][T28058] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 1961.614846][T28058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.622841][T28058] usb 1-1: Product: syz [ 1961.629257][T28058] usb 1-1: Manufacturer: 俻쿓쾿蜯俔삹욂₭퉕Ʂ髄躈ꮁⶋ⦖ [ 1961.649528][T28058] usb 1-1: SerialNumber: syz [ 1961.720139][T28059] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1961.877615][T28059] usb 6-1: Using ep0 maxpacket: 8 [ 1961.889683][T31927] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1961.899938][T28059] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1961.909565][T31927] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1961.922223][T31927] syzkaller0: Linktype set failed because interface is up [ 1961.924511][T28059] usb 6-1: config 0 has no interface number 0 [ 1961.936213][ T24] syzkaller0: tun_net_xmit 76 [ 1961.956516][T28059] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1961.958431][T31927] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6847'. [ 1961.983466][T28059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.994099][T28059] usb 6-1: Product: syz [ 1962.000970][T28059] usb 6-1: Manufacturer: syz [ 1962.012622][T28059] usb 6-1: SerialNumber: syz [ 1962.020244][T28058] usbhid 1-1:1.0: can't add hid device: -71 [ 1962.027783][T28058] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1962.035277][T26090] syzkaller0: tun_net_xmit 76 [ 1962.041577][T28059] usb 6-1: config 0 descriptor?? [ 1962.063066][T28058] usb 1-1: USB disconnect, device number 35 [ 1962.134725][T27932] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1962.238977][T31940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1962.327925][T27932] usb 2-1: Using ep0 maxpacket: 32 [ 1962.428303][T27932] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1962.441009][T27932] usb 2-1: config 0 has no interface number 0 [ 1962.456551][T27932] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1962.490495][T27932] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1962.501535][T27932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.510492][T27932] usb 2-1: Product: syz [ 1962.519146][T27932] usb 2-1: Manufacturer: syz [ 1962.524124][T27932] usb 2-1: SerialNumber: syz [ 1962.534634][T27932] usb 2-1: config 0 descriptor?? [ 1962.547424][T27932] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1962.572047][T27932] em28xx 2-1:0.132: Video interface 132 found: isoc [ 1962.594864][T31947] FAULT_INJECTION: forcing a failure. [ 1962.594864][T31947] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.607942][T31947] CPU: 0 UID: 0 PID: 31947 Comm: syz.4.6852 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1962.607973][T31947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1962.607991][T31947] Call Trace: [ 1962.608020][T31947] [ 1962.608030][T31947] dump_stack_lvl+0x189/0x250 [ 1962.608070][T31947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1962.608103][T31947] ? __pfx__printk+0x10/0x10 [ 1962.608128][T31947] ? __pfx___might_resched+0x10/0x10 [ 1962.608145][T31947] ? fs_reclaim_acquire+0x7d/0x100 [ 1962.608200][T31947] should_fail_ex+0x414/0x560 [ 1962.608236][T31947] should_failslab+0xa8/0x100 [ 1962.608267][T31947] __kmalloc_noprof+0xcb/0x4f0 [ 1962.608289][T31947] ? sock_kmalloc+0xd6/0x160 [ 1962.608313][T31947] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1962.608345][T31947] sock_kmalloc+0xd6/0x160 [ 1962.608373][T31947] hash_recvmsg+0x1c8/0x750 [ 1962.608402][T31947] ? __pfx_hash_recvmsg+0x10/0x10 [ 1962.608423][T31947] sock_recvmsg_nosec+0x183/0x1c0 [ 1962.608445][T31947] ____sys_recvmsg+0x3aa/0x460 [ 1962.608477][T31947] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1962.608515][T31947] ? import_iovec+0x74/0xa0 [ 1962.608548][T31947] ___sys_recvmsg+0x1b5/0x510 [ 1962.608578][T31947] ? __pfx____sys_recvmsg+0x10/0x10 [ 1962.608630][T31947] ? __might_fault+0xb0/0x130 [ 1962.608656][T31947] do_recvmmsg+0x307/0x760 [ 1962.608694][T31947] ? __pfx_do_recvmmsg+0x10/0x10 [ 1962.608730][T31947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1962.608768][T31947] __x64_sys_recvmmsg+0x190/0x240 [ 1962.608793][T31947] ? rcu_is_watching+0x15/0xb0 [ 1962.608827][T31947] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1962.608856][T31947] ? do_syscall_64+0xba/0x210 [ 1962.608882][T31947] do_syscall_64+0xf6/0x210 [ 1962.608905][T31947] ? clear_bhb_loop+0x45/0xa0 [ 1962.608927][T31947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.608948][T31947] RIP: 0033:0x7f259b78e969 [ 1962.608966][T31947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1962.608983][T31947] RSP: 002b:00007f259c5c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1962.609002][T31947] RAX: ffffffffffffffda RBX: 00007f259b9b6160 RCX: 00007f259b78e969 [ 1962.609016][T31947] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 1962.609028][T31947] RBP: 00007f259c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.609039][T31947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1962.609050][T31947] R13: 0000000000000000 R14: 00007f259b9b6160 R15: 00007f259badfa28 [ 1962.609078][T31947] [ 1963.169330][T26090] syzkaller0: tun_net_xmit 76 [ 1963.338681][T26090] usb 3-1: USB disconnect, device number 111 [ 1963.655461][T31954] loop6: detected capacity change from 0 to 7 [ 1963.674386][T31954] Dev loop6: unable to read RDB block 7 [ 1963.690435][T31954] loop6: unable to read partition table [ 1963.703987][T31954] loop6: partition table beyond EOD, truncated [ 1963.719753][T27932] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1963.732177][T31954] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1963.741581][T15188] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1963.818401][T27932] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1963.836743][T27932] em28xx 2-1:0.132: board has no eeprom [ 1963.928142][T15188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.941759][T15188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1963.951837][T27932] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1964.006867][T31956] fuse: Unknown parameter '0x0000000000000006' [ 1964.013255][T27932] em28xx 2-1:0.132: analog set to isoc mode. [ 1964.019559][T15188] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1964.049827][T31958] fuse: Unknown parameter 'd?0x0000000000000007' [ 1964.063695][T26090] em28xx 2-1:0.132: Registering V4L2 extension [ 1964.087957][T15188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.127626][T15188] usb 1-1: config 0 descriptor?? [ 1964.255692][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1964.255712][ T30] audit: type=1326 audit(1747101642.841:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31961 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f418e969 code=0x7fc00000 [ 1964.350109][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1964.375450][T15188] logitech 0003:046D:CA04.006D: unknown main item tag 0x0 [ 1964.404703][T15188] logitech 0003:046D:CA04.006D: unknown main item tag 0x0 [ 1964.417998][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1964.449551][T15188] logitech 0003:046D:CA04.006D: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 1964.463339][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1964.484742][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1964.493667][T15188] logitech 0003:046D:CA04.006D: no inputs found [ 1964.575624][T15188] usb 1-1: USB disconnect, device number 36 [ 1964.591294][T31973] fido_id[31973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1964.682173][T31972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6858'. [ 1964.729151][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1964.738500][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1964.754685][ C1] syzkaller0: tun_net_xmit 48 [ 1964.767596][T26090] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1964.790587][ T24] usb 2-1: USB disconnect, device number 33 [ 1964.798198][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 1964.878636][T26090] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1964.886335][T26090] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1964.893483][T26090] em28xx 2-1:0.132: No AC97 audio processor [ 1964.912347][T26090] usb 2-1: Decoder not found [ 1964.917153][T26090] em28xx 2-1:0.132: failed to create media graph [ 1964.923541][T26090] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1964.978353][T26090] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1964.983077][T31977] ================================================================== [ 1964.995076][T31977] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1965.002476][T31977] Read of size 8 at addr ffff88807ea78738 by task v4l_id/31977 [ 1965.010060][T31977] [ 1965.012403][T31977] CPU: 1 UID: 0 PID: 31977 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1965.012429][T31977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.012444][T31977] Call Trace: [ 1965.012453][T31977] [ 1965.012462][T31977] dump_stack_lvl+0x189/0x250 [ 1965.012495][T31977] ? __virt_addr_valid+0x18c/0x540 [ 1965.012522][T31977] ? rcu_is_watching+0x15/0xb0 [ 1965.012553][T31977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.012581][T31977] ? rcu_is_watching+0x15/0xb0 [ 1965.012612][T31977] ? lock_release+0x4b/0x3e0 [ 1965.012640][T31977] ? __virt_addr_valid+0x18c/0x540 [ 1965.012666][T31977] ? __virt_addr_valid+0x469/0x540 [ 1965.012693][T31977] print_report+0xb4/0x290 [ 1965.012717][T31977] ? v4l2_fh_open+0xc7/0x430 [ 1965.012742][T31977] kasan_report+0x118/0x150 [ 1965.012768][T31977] ? v4l2_fh_open+0xc7/0x430 [ 1965.012797][T31977] v4l2_fh_open+0xc7/0x430 [ 1965.012820][T31977] ? __pfx___mutex_lock+0x10/0x10 [ 1965.012849][T31977] em28xx_v4l2_open+0x157/0x9a0 [ 1965.012879][T31977] v4l2_open+0x20c/0x360 [ 1965.012908][T31977] chrdev_open+0x4c9/0x5e0 [ 1965.012936][T31977] ? __pfx_chrdev_open+0x10/0x10 [ 1965.012964][T31977] ? __pfx_chrdev_open+0x10/0x10 [ 1965.012988][T31977] do_dentry_open+0xdf0/0x1970 [ 1965.013022][T31977] vfs_open+0x3b/0x340 [ 1965.013049][T31977] ? path_openat+0x2ecd/0x3830 [ 1965.013071][T31977] path_openat+0x2ee5/0x3830 [ 1965.013089][T31977] ? arch_stack_walk+0xfc/0x150 [ 1965.013132][T31977] ? __pfx_path_openat+0x10/0x10 [ 1965.013150][T31977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.013180][T31977] do_filp_open+0x1fa/0x410 [ 1965.013201][T31977] ? __pfx_do_filp_open+0x10/0x10 [ 1965.013247][T31977] ? _raw_spin_unlock+0x28/0x50 [ 1965.013268][T31977] ? alloc_fd+0x64c/0x6c0 [ 1965.013298][T31977] do_sys_openat2+0x121/0x1c0 [ 1965.013330][T31977] ? __pfx_do_sys_openat2+0x10/0x10 [ 1965.013361][T31977] ? exc_page_fault+0x68/0x110 [ 1965.013386][T31977] ? do_user_addr_fault+0xc8a/0x1390 [ 1965.013409][T31977] __x64_sys_openat+0x138/0x170 [ 1965.013441][T31977] do_syscall_64+0xf6/0x210 [ 1965.013468][T31977] ? clear_bhb_loop+0x45/0xa0 [ 1965.013491][T31977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.013511][T31977] RIP: 0033:0x7fb5332a7407 [ 1965.013530][T31977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1965.013548][T31977] RSP: 002b:00007ffca893e7f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1965.013570][T31977] RAX: ffffffffffffffda RBX: 00007fb5339be880 RCX: 00007fb5332a7407 [ 1965.013585][T31977] RDX: 0000000000000000 RSI: 00007ffca893ef1a RDI: ffffffffffffff9c [ 1965.013600][T31977] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1965.013612][T31977] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1965.013625][T31977] R13: 00007ffca893ea40 R14: 00007fb533b25000 R15: 000056256c04e4d8 [ 1965.013648][T31977] [ 1965.013656][T31977] [ 1965.300405][T31977] Allocated by task 26090: [ 1965.304824][T31977] kasan_save_track+0x3e/0x80 [ 1965.309505][T31977] __kasan_kmalloc+0x93/0xb0 [ 1965.314105][T31977] __kmalloc_cache_noprof+0x230/0x3d0 [ 1965.319480][T31977] em28xx_v4l2_init+0x10b/0x2e70 [ 1965.324420][T31977] em28xx_init_extension+0x11d/0x1c0 [ 1965.329718][T31977] process_scheduled_works+0xadb/0x17a0 [ 1965.335284][T31977] worker_thread+0x8a0/0xda0 [ 1965.339872][T31977] kthread+0x70e/0x8a0 [ 1965.343946][T31977] ret_from_fork+0x4b/0x80 [ 1965.348361][T31977] ret_from_fork_asm+0x1a/0x30 [ 1965.353120][T31977] [ 1965.355444][T31977] Freed by task 26090: [ 1965.359510][T31977] kasan_save_track+0x3e/0x80 [ 1965.364189][T31977] kasan_save_free_info+0x46/0x50 [ 1965.369228][T31977] __kasan_slab_free+0x62/0x70 [ 1965.373998][T31977] kfree+0x193/0x440 [ 1965.377901][T31977] em28xx_v4l2_init+0x1683/0x2e70 [ 1965.382947][T31977] em28xx_init_extension+0x11d/0x1c0 [ 1965.388252][T31977] process_scheduled_works+0xadb/0x17a0 [ 1965.393804][T31977] worker_thread+0x8a0/0xda0 [ 1965.398397][T31977] kthread+0x70e/0x8a0 [ 1965.402469][T31977] ret_from_fork+0x4b/0x80 [ 1965.406893][T31977] ret_from_fork_asm+0x1a/0x30 [ 1965.411660][T31977] [ 1965.414074][T31977] The buggy address belongs to the object at ffff88807ea78000 [ 1965.414074][T31977] which belongs to the cache kmalloc-8k of size 8192 [ 1965.428129][T31977] The buggy address is located 1848 bytes inside of [ 1965.428129][T31977] freed 8192-byte region [ffff88807ea78000, ffff88807ea7a000) [ 1965.442114][T31977] [ 1965.444444][T31977] The buggy address belongs to the physical page: [ 1965.450874][T31977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ea78 [ 1965.459633][T31977] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1965.468133][T31977] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1965.476026][T31977] page_type: f5(slab) [ 1965.480023][T31977] raw: 00fff00000000040 ffff88801a042280 ffffea0000abea00 dead000000000003 [ 1965.488609][T31977] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1965.497223][T31977] head: 00fff00000000040 ffff88801a042280 ffffea0000abea00 dead000000000003 [ 1965.505907][T31977] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1965.514606][T31977] head: 00fff00000000003 ffffea0001fa9e01 00000000ffffffff 00000000ffffffff [ 1965.523286][T31977] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1965.531957][T31977] page dumped because: kasan: bad access detected [ 1965.538382][T31977] page_owner tracks the page as allocated [ 1965.544105][T31977] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25311, tgid 25310 (syz.5.5132), ts 1505370680539, free_ts 1505276212112 [ 1965.565913][T31977] post_alloc_hook+0x1d8/0x230 [ 1965.570695][T31977] get_page_from_freelist+0x21ce/0x22b0 [ 1965.576288][T31977] __alloc_frozen_pages_noprof+0x181/0x370 [ 1965.582105][T31977] alloc_pages_mpol+0x232/0x4a0 [ 1965.586962][T31977] allocate_slab+0x8a/0x3b0 [ 1965.591464][T31977] ___slab_alloc+0xbfc/0x1480 [ 1965.596148][T31977] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 1965.602572][T31977] kmemdup_noprof+0x2b/0x70 [ 1965.607113][T31977] ipv4_sysctl_init_net+0x47/0x3f0 [ 1965.612255][T31977] ops_init+0x359/0x5c0 [ 1965.616418][T31977] setup_net+0x238/0x830 [ 1965.620688][T31977] copy_net_ns+0x32e/0x590 [ 1965.625110][T31977] create_new_namespaces+0x3d3/0x700 [ 1965.630418][T31977] unshare_nsproxy_namespaces+0x11c/0x170 [ 1965.636149][T31977] ksys_unshare+0x4c8/0x8c0 [ 1965.640661][T31977] __x64_sys_unshare+0x38/0x50 [ 1965.645426][T31977] page last free pid 5926 tgid 5926 stack trace: [ 1965.651763][T31977] __free_frozen_pages+0xb0e/0xcd0 [ 1965.656880][T31977] __put_partials+0x161/0x1c0 [ 1965.661563][T31977] put_cpu_partial+0x17c/0x250 [ 1965.666337][T31977] __slab_free+0x2f7/0x400 [ 1965.670746][T31977] qlist_free_all+0x9a/0x140 [ 1965.675338][T31977] kasan_quarantine_reduce+0x148/0x160 [ 1965.680822][T31977] __kasan_slab_alloc+0x22/0x80 [ 1965.685688][T31977] __kmalloc_noprof+0x224/0x4f0 [ 1965.690558][T31977] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1965.696126][T31977] tomoyo_path_perm+0x213/0x4b0 [ 1965.700981][T31977] security_inode_getattr+0x12f/0x330 [ 1965.706363][T31977] __x64_sys_newfstat+0xfe/0x200 [ 1965.711315][T31977] do_syscall_64+0xf6/0x210 [ 1965.715826][T31977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.721722][T31977] [ 1965.724044][T31977] Memory state around the buggy address: [ 1965.729673][T31977] ffff88807ea78600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1965.737734][T31977] ffff88807ea78680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1965.745827][T31977] >ffff88807ea78700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1965.753911][T31977] ^ [ 1965.759796][T31977] ffff88807ea78780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1965.767852][T31977] ffff88807ea78800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1965.775913][T31977] ================================================================== [ 1965.787384][ T24] em28xx 2-1:0.132: Closing input extension [ 1965.825525][T28059] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1965.832017][T28059] usb 6-1: No streaming interface found for terminal 6. [ 1965.847546][T31977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1965.854799][T31977] CPU: 1 UID: 0 PID: 31977 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1965.864795][T31977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.874884][T31977] Call Trace: [ 1965.878187][T31977] [ 1965.881125][T31977] dump_stack_lvl+0x99/0x250 [ 1965.885728][T31977] ? __asan_memcpy+0x40/0x70 [ 1965.890324][T31977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.895557][T31977] ? __pfx__printk+0x10/0x10 [ 1965.900173][T31977] panic+0x2db/0x790 [ 1965.904081][T31977] ? __pfx_panic+0x10/0x10 [ 1965.908506][T31977] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1965.914495][T31977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1965.920852][T31977] ? print_memory_metadata+0x314/0x400 [ 1965.926328][T31977] ? v4l2_fh_open+0xc7/0x430 [ 1965.930940][T31977] check_panic_on_warn+0x89/0xb0 [ 1965.935904][T31977] ? v4l2_fh_open+0xc7/0x430 [ 1965.940527][T31977] end_report+0x78/0x160 [ 1965.944793][T31977] kasan_report+0x129/0x150 [ 1965.949411][T31977] ? v4l2_fh_open+0xc7/0x430 [ 1965.954021][T31977] v4l2_fh_open+0xc7/0x430 [ 1965.958463][T31977] ? __pfx___mutex_lock+0x10/0x10 [ 1965.963507][T31977] em28xx_v4l2_open+0x157/0x9a0 [ 1965.968375][T31977] v4l2_open+0x20c/0x360 [ 1965.972635][T31977] chrdev_open+0x4c9/0x5e0 [ 1965.977063][T31977] ? __pfx_chrdev_open+0x10/0x10 [ 1965.982014][T31977] ? __pfx_chrdev_open+0x10/0x10 [ 1965.986963][T31977] do_dentry_open+0xdf0/0x1970 [ 1965.991825][T31977] vfs_open+0x3b/0x340 [ 1965.995930][T31977] ? path_openat+0x2ecd/0x3830 [ 1966.000733][T31977] path_openat+0x2ee5/0x3830 [ 1966.005341][T31977] ? arch_stack_walk+0xfc/0x150 [ 1966.010222][T31977] ? __pfx_path_openat+0x10/0x10 [ 1966.015173][T31977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.021259][T31977] do_filp_open+0x1fa/0x410 [ 1966.025773][T31977] ? __pfx_do_filp_open+0x10/0x10 [ 1966.030824][T31977] ? _raw_spin_unlock+0x28/0x50 [ 1966.035685][T31977] ? alloc_fd+0x64c/0x6c0 [ 1966.040029][T31977] do_sys_openat2+0x121/0x1c0 [ 1966.044726][T31977] ? __pfx_do_sys_openat2+0x10/0x10 [ 1966.049956][T31977] ? exc_page_fault+0x68/0x110 [ 1966.054728][T31977] ? do_user_addr_fault+0xc8a/0x1390 [ 1966.060034][T31977] __x64_sys_openat+0x138/0x170 [ 1966.064900][T31977] do_syscall_64+0xf6/0x210 [ 1966.069409][T31977] ? clear_bhb_loop+0x45/0xa0 [ 1966.074093][T31977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.079988][T31977] RIP: 0033:0x7fb5332a7407 [ 1966.084413][T31977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1966.104034][T31977] RSP: 002b:00007ffca893e7f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1966.112457][T31977] RAX: ffffffffffffffda RBX: 00007fb5339be880 RCX: 00007fb5332a7407 [ 1966.120430][T31977] RDX: 0000000000000000 RSI: 00007ffca893ef1a RDI: ffffffffffffff9c [ 1966.128399][T31977] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1966.136369][T31977] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1966.144348][T31977] R13: 00007ffca893ea40 R14: 00007fb533b25000 R15: 000056256c04e4d8 [ 1966.152335][T31977] [ 1966.155700][T31977] Kernel Offset: disabled [ 1966.160024][T31977] Rebooting in 86400 seconds..