last executing test programs: 13m54.099533158s ago: executing program 2 (id=274): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x81, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x0, 0x3, 0x65, 0x75, 0x11, 0x88, 0xe, @broadcast, @multicast1}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x1, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) 13m51.467008689s ago: executing program 2 (id=282): r0 = io_uring_setup(0x55bd, &(0x7f00000001c0)={0x0, 0xaca0, 0x10, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="06fe002000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1, 0x0, 0x18}, 0x40000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 13m49.038027305s ago: executing program 2 (id=291): syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000024c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty=0x1000000}, {0x4e22, 0x7, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "56332bff136e171c551fcad29ba1783f807d52f046c7d18da03a29a4a6cfeed7", "6992717eb01b89d3f588871f8abe442f", {"20f320c5b58bc1fafc514f02a815a342", "8ec81f0d5ea58c9f2a16f57160e59b4c"}}}}}}}, 0x0) 13m48.779567147s ago: executing program 2 (id=292): bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="016f000d01000000f70b14"], 0x36) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x6) ioctl$UI_DEV_CREATE(r8, 0x5501) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89901) 13m47.53879372s ago: executing program 2 (id=297): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000057c900"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000e4d91021032632282b4846ce498d9be146776efd03082dac9f556698646654680aec18d1d38ba367458996fe882da4bb2fe5bc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0xfffffffd, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0x4c, 0x2, 0x0, 0x3}}, 0xfffffffd}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x10) fcntl$getownex(r4, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000200)='net/snmp\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 13m46.74525075s ago: executing program 2 (id=301): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x81, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x0, 0x3, 0x65, 0x75, 0x11, 0x88, 0xe, @broadcast, @multicast1}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}, 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x1, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) 13m46.15801703s ago: executing program 32 (id=301): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x81, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x0, 0x3, 0x65, 0x75, 0x11, 0x88, 0xe, @broadcast, @multicast1}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}, 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x1, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) 17.975138111s ago: executing program 4 (id=2768): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x8000, 0x0, 0x6}, {0xe, 0x9, 0x25}]}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_pidfd_open(r2, 0x0) read(r1, &(0x7f0000000080)=""/149, 0x95) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334a, 0x20, 0x3, 0x167}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r5, 0x7277, 0x0, 0x28, 0x0, 0x0) 14.772089582s ago: executing program 4 (id=2777): syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6654cefc00042f01fe80000000000000003306000000000000800000000000000000f500000000aab7"], 0x0) 11.696242294s ago: executing program 4 (id=2789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000004001ac1e000100000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c00140073686131"], 0x148}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) 8.631979945s ago: executing program 4 (id=2800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r5, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x200000, &(0x7f0000000440)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '^&.'}}, {@audit}, {@appraise_type}, {@flag='sync'}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) fchdir(r6) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x4, 0x5, 0x63e9}, 0x20) socket(0x9, 0x4, 0xd6b) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) 7.841616582s ago: executing program 1 (id=2802): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 7.755726269s ago: executing program 5 (id=2803): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000200)={0x0, 0x0, {0x9, 0xfffffff8, 0x200b, 0x7, 0x4, 0x0, 0x1, 0x1}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32], 0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x2000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 7.708147541s ago: executing program 1 (id=2804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x4, 0x2, {0x2, 0x9}}, &(0x7f0000000580)={0x0, 0x3, 0xce, @string={0xce, 0x3, "be4502a18ac4ff5e3d5f65d5a4b99e82dfced5bb5e7bd6953332e9227d3e2869f936a109b0560163dbb3adb6dc57a5148876184c9d0312668e1df504ca87e8d708238a5d0b53be9294bbfba5726c526eda7ad37afcb9f9cc76fe1c23b99cf28a31c05499ff71ba2d00354a1ea1c8f4a0c5039c4fec566c19a5c4970239fc1a7478611486eec35d2b3a5b78a404d4b0166f18db07945583a4c0ace1c7cf27dabf983c573685ccdc6d8133d8ca226694bf28fcfce2b4d733e9301c52f46f6672146a50b3aa19e8c7a733e3e921"}}, &(0x7f0000000080)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xa}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7b, 0x80, 0x7, 0x3e, "5eefd7d0", '`v~j'}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xc0, 0x3, 0x0, 0x100, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x0, 0x6, 0x54, "faf342b99eb5dde99ec99d0d42e9995ca377f32e507133fcc714583ceff42c6cc2e90405bbf735a31005fc6c9e18bf99002e1503731c061738f31e8cdcd5f162ea76e7422dda898c4554c3a5b34fdc414e2637b0"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x6, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x40}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0xb, 0x2, '\x00&'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "8a78"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x78f) keyctl$setperm(0x5, r1, 0x1000001) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x6, &(0x7f0000000240)={0x97, "b52462ffd607750100c4f83b4669b7d49cc44914050600"}}) 5.951299669s ago: executing program 3 (id=2807): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000100)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000140)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000001c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000200)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000240)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000280)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000002c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000300)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000340)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000380)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000003c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000400)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000440)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000480)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000004c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000500)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000540)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000580)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000005c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000600)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000640)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000680)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000006c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000700)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000740)) 5.765521288s ago: executing program 3 (id=2808): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x2, 0x1) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.491856429s ago: executing program 4 (id=2810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$sock(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="441065", 0x3}], 0x1, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x8000000}}], 0x18}}], 0x1, 0x24000881) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8002, r1}, 0x38) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x4, 0x2}, 0x9c) r5 = socket(0x22, 0x2, 0x3) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r4, 0x400}, 0x8) 5.45060351s ago: executing program 5 (id=2811): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x800, 0xffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x40004, &(0x7f0000000140)={0x11, 0x7, r7, 0x1, 0x81, 0x6, @remote}, 0x14) 5.371879962s ago: executing program 3 (id=2813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000100)=0x5) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="fbff2f005c0ffc45"], 0x24}}, 0x18) lseek(r4, 0x103, 0x1) sync() getdents(r4, 0x0, 0x58) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1e502d000000000001090224000100000000090400000503000200092100003301220500090581030000"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) 5.216498049s ago: executing program 0 (id=2815): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff830000580065159385e7"], 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) 5.151993995s ago: executing program 5 (id=2816): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0', [{}, {0x20, 'cgroup.stat\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '\x8f\xf5`\x15p\xc9?\x145\xb7\xd7\xe2\xed\xd2\xb41?\xc2;\x10\xb03\x05\x19\x8fr\x0e\xa4\x1aH\x8ei\x1ce\x04\xaa\xcc\xeb\xa8\xe0\x7f\xf4\xb2\xe4\x1b\xf3\x04\xf3\xfe\"`\x1a\x91\xe3\xf6\x97\x05\x870\f\xbc\xa4\xb4\x9b}\xa0j7\xfc%.\xfb\xb8KlZ8zRr\x88\a.\x05\x81\xc0nW9\xb0g\xf5\xe1^\xf1\xb43_:\xc2\x01xGn>\x98\x83/&IV#,\xa5\x16\xc3\xd4\v\xa9>*\xd1\x15\x1b\xb8\xfa]'}]}, 0xae) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc53349068054be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b1794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ef54f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab000078cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d960001000000000000000000000000000000000000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 4.992310262s ago: executing program 5 (id=2817): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r1, 0x0, 0x26, 0x0, &(0x7f0000000180)) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x98000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffa}, {0x7e902da6, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000200), 0x0, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000780), 0x0, 0x20e8086) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003006564010102ac1414aa000000000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa38d6d8af004500001c00007320dc029078000000139162e8579e1bd308d84ff005"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.573181716s ago: executing program 1 (id=2818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x8000, 0x0, 0x6}, {0xe, 0x9, 0x25}]}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_pidfd_open(r2, 0x0) read(r1, &(0x7f0000000080)=""/149, 0x95) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334a, 0x20, 0x3, 0x167}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r5, 0x7277, 0x0, 0x28, 0x0, 0x0) 3.323988221s ago: executing program 0 (id=2819): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="71100001000300009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) close(0x4) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_clone(0x880000, 0x0, 0xfffffffffffffc3d, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x40) sendto$inet(r7, &(0x7f0000000440)="72048168010834da7abd8b6bb9c807524b4d62f208953c944a2f47c263df64dfe2863033668acb8e05b9cbd8b5a4549fd2ef0f9fd3367292d6b8a9aba7c571b7b00396dbffa52b12ecf91660f934b7c454f1f837d91c313e2f11d3a236", 0x5d, 0x4000480, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = fsmount(r3, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000040)='./file0\x00') openat2(r8, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x4, 0x8}, 0x18) tkill(r2, 0x9) ptrace(0x4206, r2) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="2604000700000000fc0200000039a114243e4ca8421b90ad36f0ddee1ba3a1c998e7b1e0609f07000000"], 0x28) ptrace(0x4207, r2) 3.198644287s ago: executing program 1 (id=2820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r3, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd61d, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x5, 0xfffffffe}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x2c9ab000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000e00)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) close(r1) 3.075341878s ago: executing program 3 (id=2821): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYRES32, @ANYBLOB="080003000200000008001b000000000000d6b1dfffc20f9e9227c75bd4be524940d303652d8a978d935149b518a1be2f077b5ea3c9265e1a0a468ee6fddfd1b14579f324c06268a4cc44c96407c5737000021a86cfbdff1bbaeace6f516ec04295bc1b84b6167cb90c36858f4c5726b201d0ec665f002598e6c0"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 2.423884561s ago: executing program 4 (id=2822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1958, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x61d1, &(0x7f00000004c0)={0x0, 0x6824, 0x4000, 0x0, 0x3e0}, &(0x7f0000000140), &(0x7f0000000540)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc050}, 0xc000) unshare(0x8040480) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000010000000e748d304b1bb44c76943af5d86458dfba058447c71036f86398140b04e7c9609ad402801"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000000094ef81c192071ea87f98dbdac60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, 0x0, &(0x7f00000001c0)=r8}, 0x20) 2.335342015s ago: executing program 0 (id=2823): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x4000}) ioctl(r4, 0x8b0f, &(0x7f0000000040)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x50, 0xf) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r6, 0xd2a5, 0x40}, 0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=@newlink={0x34, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x8000) 2.179135848s ago: executing program 1 (id=2824): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000240)={0x0, 0x4, 0x4, 0x0, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x39}]}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001200b8684905ff000000000000000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000100), 0xfffffffffffffe9c, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r10, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3"], 0x66) 1.772130872s ago: executing program 0 (id=2825): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.712666036s ago: executing program 0 (id=2826): r0 = socket(0x15, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='timerslack_ns\x00') pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'geneve1\x00', {}, 0x3}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c004}, 0x8000) 1.56501286s ago: executing program 5 (id=2827): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0', [{}, {0x20, 'cgroup.stat\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '\x8f\xf5`\x15p\xc9?\x145\xb7\xd7\xe2\xed\xd2\xb41?\xc2;\x10\xb03\x05\x19\x8fr\x0e\xa4\x1aH\x8ei\x1ce\x04\xaa\xcc\xeb\xa8\xe0\x7f\xf4\xb2\xe4\x1b\xf3\x04\xf3\xfe\"`\x1a\x91\xe3\xf6\x97\x05\x870\f\xbc\xa4\xb4\x9b}\xa0j7\xfc%.\xfb\xb8KlZ8zRr\x88\a.\x05\x81\xc0nW9\xb0g\xf5\xe1^\xf1\xb43_:\xc2\x01xGn>\x98\x83/&IV#,\xa5\x16\xc3\xd4\v\xa9>*\xd1\x15\x1b\xb8\xfa]'}]}, 0xae) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc53349068054be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b1794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ef54f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab000078cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d960001000000000000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 1.279985149s ago: executing program 5 (id=2828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x4, 0x2, {0x2, 0x9}}, &(0x7f0000000580)={0x0, 0x3, 0xce, @string={0xce, 0x3, "be4502a18ac4ff5e3d5f65d5a4b99e82dfced5bb5e7bd6953332e9227d3e2869f936a109b0560163dbb3adb6dc57a5148876184c9d0312668e1df504ca87e8d708238a5d0b53be9294bbfba5726c526eda7ad37afcb9f9cc76fe1c23b99cf28a31c05499ff71ba2d00354a1ea1c8f4a0c5039c4fec566c19a5c4970239fc1a7478611486eec35d2b3a5b78a404d4b0166f18db07945583a4c0ace1c7cf27dabf983c573685ccdc6d8133d8ca226694bf28fcfce2b4d733e9301c52f46f6672146a50b3aa19e8c7a733e3e921"}}, &(0x7f0000000080)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xa}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7b, 0x80, 0x7, 0x3e, "5eefd7d0", '`v~j'}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xc0, 0x3, 0x0, 0x100, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x0, 0x6, 0x54, "faf342b99eb5dde99ec99d0d42e9995ca377f32e507133fcc714583ceff42c6cc2e90405bbf735a31005fc6c9e18bf99002e1503731c061738f31e8cdcd5f162ea76e7422dda898c4554c3a5b34fdc414e2637b0"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x6, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x40}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0xb, 0x2, '\x00&'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "8a78"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x78f) keyctl$setperm(0x5, r1, 0x1000001) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x6, &(0x7f0000000240)={0x97, "b52462ffd607750100c4f83b4669b7d49cc44914050600"}}) 1.101076235s ago: executing program 3 (id=2829): r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x100aee2, 0x200, 0x2, 0xb7dffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000200)="8ae5def4620cc4ac432287447d8921fbeb30f28c532db191ec8195756ca01fa12b5a9b142e170bf0805457e155bf0687bb9c78488d5ec7c19e5ee09478f21615f88140bf2f7cef88a581df15ee6865b5619209d08281b3e7a8713183995a824467ab91a90b2421f7e5cc3f6cd6bd86fb0fbd5d39a95473ce2f7f33a387de3cbd3b5879816f661af6638f53496f7bf902b8297b5aab656ffa169d9875c779310bbc1ba4db2268bfec307b45207495436cffa57b077d1f0cf597ec35a4db", 0xbd, 0x0, 0x7ff, 0x9}}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x28, 0x4004, @fd, 0x10001, 0x0, 0x0, 0x0, 0x36728f9944244714, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00006e", @ANYRES16=r7, @ANYBLOB="ad9c28bd7000fddbdf25050000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48855}, 0x42010) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100be55a0dbeec5e3aa0200e70308000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) 667.888201ms ago: executing program 3 (id=2830): syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240308000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) 644.483575ms ago: executing program 1 (id=2831): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000c0000"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRES64, @ANYRES8=r1], 0x0) 0s ago: executing program 0 (id=2832): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000040)=0x3d) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000140)="f20f8e341b341bf82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2325'. [ 853.184169][ T43] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 853.465654][ T43] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 853.474290][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.505980][ T43] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 853.534052][ T43] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 853.542091][ T43] usb 6-1: Manufacturer: syz [ 853.555497][T17734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 853.555855][ T43] usb 6-1: config 0 descriptor?? [ 853.645560][T17734] team0: Port device bond9 added [ 853.714006][ T43] rc_core: IR keymap rc-hauppauge not found [ 853.719981][ T43] Registered IR keymap rc-empty [ 853.744039][T12072] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 853.744163][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 853.786586][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 853.848697][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 853.946209][T12072] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 853.961075][T12072] usb 1-1: can't read configurations, error -61 [ 854.096434][T12072] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 854.174005][T12253] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 854.256373][T12072] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 854.267351][T12072] usb 1-1: can't read configurations, error -61 [ 854.278215][T12072] usb usb1-port1: attempt power cycle [ 854.334406][T12253] usb 4-1: Using ep0 maxpacket: 16 [ 854.352215][T12253] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 854.382934][T12253] usb 4-1: can't read configurations, error -61 [ 854.454202][ T5936] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 854.514046][T12253] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 854.594444][ T5936] usb 2-1: device descriptor read/64, error -71 [ 854.644466][T12072] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 854.667672][T12072] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 854.675402][T12253] usb 4-1: Using ep0 maxpacket: 16 [ 854.681106][T12072] usb 1-1: can't read configurations, error -61 [ 854.689666][T12253] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 854.697370][T12253] usb 4-1: can't read configurations, error -61 [ 854.705572][T12253] usb usb4-port1: attempt power cycle [ 854.814008][T12072] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 854.834092][ T5936] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 854.850516][T12072] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 854.858456][T12072] usb 1-1: can't read configurations, error -61 [ 854.866199][T12072] usb usb1-port1: unable to enumerate USB device [ 854.964188][ T5936] usb 2-1: device descriptor read/64, error -71 [ 855.044070][T12253] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 855.064947][T12253] usb 4-1: Using ep0 maxpacket: 16 [ 855.072153][T12253] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 855.080543][ T5936] usb usb2-port1: attempt power cycle [ 855.086067][T12253] usb 4-1: can't read configurations, error -61 [ 855.224694][T12253] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 855.244520][T12253] usb 4-1: Using ep0 maxpacket: 16 [ 855.252010][T12253] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 855.259783][T12253] usb 4-1: can't read configurations, error -61 [ 855.266586][T12253] usb usb4-port1: unable to enumerate USB device [ 855.424131][ T5936] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 855.444905][ T5936] usb 2-1: device descriptor read/8, error -71 [ 855.684124][ T5936] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 855.704872][ T5936] usb 2-1: device descriptor read/8, error -71 [ 855.730343][T12253] usb 6-1: USB disconnect, device number 102 [ 855.815192][ T5936] usb usb2-port1: unable to enumerate USB device [ 855.906629][T17751] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2332'. [ 857.519931][T17768] loop6: detected capacity change from 0 to 7 [ 857.544918][T17770] tipc: Started in network mode [ 857.550930][T17770] tipc: Node identity 42c6e5ba4c78, cluster identity 4711 [ 857.558525][T17770] tipc: Enabled bearer , priority 0 [ 857.567853][T17770] syzkaller0: entered promiscuous mode [ 857.573441][T17770] syzkaller0: entered allmulticast mode [ 857.589019][T17770] tipc: Resetting bearer [ 857.632230][T17768] Dev loop6: unable to read RDB block 7 [ 857.774799][T17768] loop6: unable to read partition table [ 857.847108][T17768] loop6: partition table beyond EOD, truncated [ 857.868960][T17768] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 858.574168][ T5936] tipc: Node number set to 247391674 [ 859.915556][T17765] tipc: Resetting bearer [ 859.953764][T17765] tipc: Disabling bearer [ 860.486073][T11294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.527115][T17797] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2344'. [ 860.754624][T11294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.959120][T11294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.318419][T11294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.294211][T13905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.304422][T13905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.314083][ T5936] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 862.323269][T13905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.334984][T13905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.344887][T13905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 862.433662][T11294] bond4 (unregistering): (slave gretap2): Releasing active interface [ 862.467871][ T5936] usb 6-1: device descriptor read/64, error -71 [ 862.714055][ T5936] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 863.044171][ T5936] usb 6-1: device descriptor read/64, error -71 [ 863.154206][ T5936] usb usb6-port1: attempt power cycle [ 863.370562][T11294] bond0 (unregistering): Released all slaves [ 863.494151][ T5936] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 863.503835][T13905] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 863.519883][T13905] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 863.536789][ T5936] usb 6-1: device descriptor read/8, error -71 [ 863.675608][T11294] bond1 (unregistering): Released all slaves [ 863.774021][ T5936] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 863.883692][ T5936] usb 6-1: device descriptor read/8, error -71 [ 864.004298][ T5936] usb usb6-port1: unable to enumerate USB device [ 864.108230][T11294] bond2 (unregistering): Released all slaves [ 864.131063][T11294] bond3 (unregistering): Released all slaves [ 864.171614][T11294] bond4 (unregistering): Released all slaves [ 864.394203][T13905] Bluetooth: hci2: command tx timeout [ 864.439707][T11294] team0: Port device bond5 removed [ 864.445994][T11294] bond5 (unregistering): Released all slaves [ 864.691993][T11294] team0: Port device bond6 removed [ 864.701261][T11294] bond6 (unregistering): Released all slaves [ 864.927009][T11294] team0: Port device bond7 removed [ 864.949609][T11294] bond7 (unregistering): Released all slaves [ 865.054329][T11294] bond8 (unregistering): Released all slaves [ 865.084897][T17846] netlink: 'syz.5.2355': attribute type 3 has an invalid length. [ 865.621764][T11294] team0: Port device bond9 removed [ 865.630251][T11294] bond9 (unregistering): Released all slaves [ 865.764184][T11294] tipc: Disabling bearer [ 865.790696][T17858] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2358'. [ 865.804554][T11294] tipc: Left network mode [ 866.469173][T13905] Bluetooth: hci2: command tx timeout [ 867.344415][T17814] chnl_net:caif_netlink_parms(): no params data found [ 867.664637][T11294] hsr_slave_0: left promiscuous mode [ 867.685511][T11294] hsr_slave_1: left promiscuous mode [ 868.545937][T13905] Bluetooth: hci2: command tx timeout [ 869.523032][ T30] audit: type=1326 audit(1758506794.155:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 869.590662][ T30] audit: type=1326 audit(1758506794.155:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 869.613439][ T30] audit: type=1326 audit(1758506794.155:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 869.671021][ T30] audit: type=1326 audit(1758506794.155:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 869.704777][ T30] audit: type=1326 audit(1758506794.215:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 869.741772][ T30] audit: type=1326 audit(1758506794.215:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0d98ec29 code=0x7ffc0000 [ 870.074905][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.081290][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.114044][ T43] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 870.303703][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.322737][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.624702][T13905] Bluetooth: hci2: command tx timeout [ 870.649737][T17891] batadv_slave_0: entered promiscuous mode [ 870.726502][T17895] batadv_slave_0: left promiscuous mode [ 870.984338][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.992337][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.012116][T17814] bridge_slave_0: entered allmulticast mode [ 871.101824][T17814] bridge_slave_0: entered promiscuous mode [ 871.359168][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.391832][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.401438][T17814] bridge_slave_1: entered allmulticast mode [ 871.609985][T17814] bridge_slave_1: entered promiscuous mode [ 871.626082][T11294] IPVS: stop unused estimator thread 0... [ 872.612501][T17814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.689884][T17814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.892165][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 872.915965][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 873.125890][ T43] usb 2-1: can't read configurations, error -71 [ 873.153191][T17945] loop8: detected capacity change from 0 to 8 [ 873.161303][T17814] team0: Port device team_slave_0 added [ 873.172706][T17945] Dev loop8: unable to read RDB block 8 [ 873.187370][T17814] team0: Port device team_slave_1 added [ 873.193543][T17945] loop8: unable to read partition table [ 873.207722][T17945] loop8: partition table beyond EOD, truncated [ 873.217914][T17945] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 873.294747][T12072] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 873.310017][T17814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.325158][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.448054][T17814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.470798][T12072] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 873.480698][T12072] usb 6-1: config 0 has no interface number 0 [ 873.488788][T12072] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 873.497016][T17814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.612255][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.647228][T12072] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 873.700591][T17814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.716916][T12072] usb 6-1: config 0 interface 113 has no altsetting 0 [ 873.899930][T12072] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 873.936650][T17814] hsr_slave_0: entered promiscuous mode [ 873.950283][T17814] hsr_slave_1: entered promiscuous mode [ 873.973827][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.994049][T17814] debugfs: 'hsr0' already exists in 'hsr' [ 874.009856][T12072] usb 6-1: Product: syz [ 874.019247][T17814] Cannot create hsr debugfs directory [ 874.043049][T12072] usb 6-1: Manufacturer: syz [ 874.056851][T12072] usb 6-1: SerialNumber: syz [ 874.118879][T12072] usb 6-1: config 0 descriptor?? [ 874.347626][ C0] usb 6-1: NFC: Urb failure (status -71) [ 874.374478][T12072] usb 6-1: NFC: Unable to get FW version [ 874.380872][T12072] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 875.782135][T17814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 875.926384][T17814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 876.001714][T17814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 876.084267][T17814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 876.181032][ T5936] usb 6-1: USB disconnect, device number 107 [ 876.260311][T17996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 876.549615][T17814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.609640][T17814] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.760455][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.768778][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.939994][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.947214][T14192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.201254][T17814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.341554][T17814] veth0_vlan: entered promiscuous mode [ 877.383537][T17814] veth1_vlan: entered promiscuous mode [ 877.484807][T12253] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 877.505662][T17814] veth0_macvtap: entered promiscuous mode [ 877.552228][T17814] veth1_macvtap: entered promiscuous mode [ 877.639724][T17814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.656774][T12253] usb 6-1: device descriptor read/64, error -71 [ 877.692593][T17814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.712771][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.750929][T18035] misc userio: Invalid payload size [ 877.762711][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.802925][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.819090][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.914450][T12253] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 878.074649][T12253] usb 6-1: device descriptor read/64, error -71 [ 878.194314][T12253] usb usb6-port1: attempt power cycle [ 878.341075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.354777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.374831][ T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 878.501828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.519539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.575856][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 878.584413][T12253] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 878.609041][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.639663][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.659112][T12253] usb 6-1: device descriptor read/8, error -71 [ 878.680021][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.720916][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.754003][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.775459][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.914578][T12253] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 878.946776][T12253] usb 6-1: device descriptor read/8, error -71 [ 879.174531][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 879.184006][ T43] usbtmc 4-1:16.0: can't read capabilities [ 879.185191][T12253] usb usb6-port1: unable to enumerate USB device [ 879.224135][ T5936] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 879.426709][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 879.487164][ T5936] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 879.496728][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.506650][ T5936] usb 2-1: Product: syz [ 879.516318][ T5936] usb 2-1: Manufacturer: syz [ 879.521796][ T5936] usb 2-1: SerialNumber: syz [ 879.540020][ T5936] usb 2-1: config 0 descriptor?? [ 879.558791][ T5936] gspca_main: etoms-2.14.0 probing 102c:6251 [ 879.873252][ T5936] usb 2-1: USB disconnect, device number 120 [ 880.520438][ T43] usb 4-1: USB disconnect, device number 106 [ 880.974003][ T43] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 881.246149][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 881.255970][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 881.280148][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 881.306714][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 881.337197][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.373666][ T43] usb 4-1: config 0 descriptor?? [ 881.404669][T18092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.451404][T18103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.476726][T18103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.624087][ T5936] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 881.674339][T12072] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 881.794089][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 881.806881][ T5936] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 881.815213][ T5936] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.838363][ T43] elecom 0003:056E:010D.002C: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 881.838363][T12072] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 881.862666][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.898722][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.917465][T12072] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.941943][ T5936] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.955277][T12072] usb 6-1: config 1 interface 0 has no altsetting 0 [ 881.978709][T12072] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 881.993217][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.003459][ T5936] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 882.017175][T12072] usb 6-1: Product: syz [ 882.021393][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.030077][T12072] usb 6-1: Manufacturer: ф [ 882.035793][T12072] usb 6-1: SerialNumber: syz [ 882.067743][T18104] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 882.068548][ T979] usb 4-1: USB disconnect, device number 107 [ 882.249993][ T5936] usb 2-1: usb_control_msg returned -32 [ 882.261525][ T5936] usbtmc 2-1:16.0: can't read capabilities [ 882.296704][T12072] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 112 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 882.335142][T12072] usb 6-1: USB disconnect, device number 112 [ 882.359973][T12072] usblp1: removed [ 883.044194][T18139] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 883.044405][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 883.059942][ T979] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 883.069088][T18125] netlink: 'syz.1.2400': attribute type 5 has an invalid length. [ 883.214430][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2400'. [ 883.247970][ T979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 883.264979][T18125] geneve2: entered promiscuous mode [ 883.275832][T18125] geneve2: entered allmulticast mode [ 883.287482][T13905] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 883.314865][ T979] usb 4-1: config 0 has no interface number 0 [ 883.345866][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 883.364678][ T979] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 883.389985][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 883.409842][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 883.420185][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 883.469869][ T979] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 883.574221][ T5936] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 883.631601][ T979] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 883.663974][ T5949] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 883.679297][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.767250][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 883.774771][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 883.786258][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 883.802631][ T5936] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 883.814491][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.823759][ T5936] usb 1-1: Product: syz [ 883.837117][ T979] usb 4-1: config 0 descriptor?? [ 883.849914][ T5936] usb 1-1: Manufacturer: syz [ 883.857427][ T5936] usb 1-1: SerialNumber: syz [ 883.868415][T18134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 883.880501][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 883.886638][ T5936] usb 1-1: config 0 descriptor?? [ 883.909920][ T979] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 883.943234][ T5936] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 883.961390][ T5949] usb 6-1: not running at top speed; connect to a high speed hub [ 883.993141][ T5949] usb 6-1: config 3 has an invalid interface number: 106 but max is 0 [ 884.001514][ T5949] usb 6-1: config 3 has no interface number 0 [ 884.026650][ T5949] usb 6-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 884.114623][ T5936] usb 1-1: USB disconnect, device number 117 [ 884.120767][T11294] usb 1-1: Failed to submit usb control message: -71 [ 884.174417][T11294] usb 1-1: unable to send the bmi data to the device: -71 [ 884.197967][ T5949] usb 6-1: config 3 interface 106 has no altsetting 0 [ 884.207178][ T979] usb 4-1: USB disconnect, device number 108 [ 884.232851][T11294] usb 1-1: unable to get target info from device [ 884.248970][T11294] usb 1-1: could not get target info (-71) [ 884.275801][T11294] usb 1-1: could not probe fw (-71) [ 884.278320][ T5949] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 884.295343][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.311143][ T5949] usb 6-1: Product: syz [ 884.320126][ T5949] usb 6-1: Manufacturer: syz [ 884.353914][ T5949] usb 6-1: SerialNumber: syz [ 884.365893][T18149] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 884.500463][ T43] usb 2-1: USB disconnect, device number 121 [ 885.202013][T18163] cgroup: fork rejected by pids controller in /syz1 [ 885.319732][ T43] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 885.474569][ T43] usb 1-1: device descriptor read/64, error -71 [ 885.728981][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 885.879364][ T43] usb 1-1: device descriptor read/64, error -71 [ 885.995554][ T43] usb usb1-port1: attempt power cycle [ 885.997918][T18503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.030793][T18503] team0: Port device bond3 added [ 886.180296][ T5949] kobil_sct 6-1:3.106: KOBIL USB smart card terminal converter detected [ 886.256576][ T5949] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 886.364355][ T5949] usb 6-1: USB disconnect, device number 113 [ 886.379792][ T43] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 886.471559][ T5949] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 886.501716][T18819] loop6: detected capacity change from 0 to 7 [ 886.511656][T18819] Dev loop6: unable to read RDB block 7 [ 886.524997][T18819] loop6: unable to read partition table [ 886.531155][T18819] loop6: partition table beyond EOD, truncated [ 886.547064][T18819] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 886.554184][ T43] usb 1-1: device descriptor read/8, error -71 [ 886.565677][ T5949] kobil_sct 6-1:3.106: device disconnected [ 886.803979][ T43] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 886.855643][T19069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2417'. [ 886.896747][ T43] usb 1-1: device descriptor read/8, error -71 [ 886.925685][T19161] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2417'. [ 886.935193][T19161] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 887.004109][ T5949] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 887.042044][ T43] usb usb1-port1: unable to enumerate USB device [ 887.237877][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.334289][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.364115][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.421290][ T5949] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.431219][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.505207][ T5949] usb 6-1: config 0 descriptor?? [ 887.789575][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.797299][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.804783][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.812384][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.819740][ T5949] usbhid 6-1:0.0: can't add hid device: -32 [ 887.826140][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 887.855777][ T5949] usb 6-1: USB disconnect, device number 114 [ 888.123995][ T43] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 888.182826][T19920] bond5 (unregistering): Released all slaves [ 888.272895][T19923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.291553][T19923] team0: Port device bond1 added [ 888.319259][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.351813][ T43] usb 4-1: config 0 has no interfaces? [ 888.358316][T19927] pimreg: entered allmulticast mode [ 888.380730][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 888.420123][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.465405][T19931] fuse: Bad value for 'fd' [ 888.479570][T19932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2424'. [ 888.508962][ T43] usb 4-1: config 0 descriptor?? [ 888.794145][ T5936] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 888.925254][ T5936] usb 1-1: device descriptor read/64, error -71 [ 888.970144][T19936] loop6: detected capacity change from 0 to 7 [ 888.986595][T19936] Dev loop6: unable to read RDB block 7 [ 888.992807][T19936] loop6: unable to read partition table [ 888.999315][T19936] loop6: partition table beyond EOD, truncated [ 889.021400][T19936] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 889.195033][ T5936] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 889.387020][ T5936] usb 1-1: device descriptor read/64, error -71 [ 889.479603][T19945] vivid-001: disconnect [ 889.499530][T19945] vivid-001: reconnect [ 889.505075][ T5936] usb usb1-port1: attempt power cycle [ 889.856298][ T5936] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 889.897572][ T5936] usb 1-1: device descriptor read/8, error -71 [ 890.104296][ T43] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 890.144110][ T5936] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 890.172989][ T5936] usb 1-1: device descriptor read/8, error -71 [ 890.273361][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 890.290285][ T43] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 890.299274][ T43] usb 6-1: config 0 has no interface number 0 [ 890.313048][ T43] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 890.325185][T19954] veth0_to_bond: entered allmulticast mode [ 890.332856][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 890.364498][ T5936] usb usb1-port1: unable to enumerate USB device [ 890.593344][ T43] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 890.614826][ T43] usb 6-1: config 0 interface 113 has no altsetting 0 [ 890.649059][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 890.749479][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.887379][ T43] usb 6-1: Product: syz [ 890.903816][ T43] usb 6-1: Manufacturer: syz [ 890.913814][ T43] usb 6-1: SerialNumber: syz [ 890.939505][ T43] usb 6-1: config 0 descriptor?? [ 891.004767][ T5949] usb 4-1: USB disconnect, device number 109 [ 891.047259][ C1] usb 6-1: NFC: Urb failure (status -71) [ 891.053643][ T43] usb 6-1: NFC: Unable to get FW version [ 891.059711][ T43] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 891.168240][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'. [ 891.236652][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'. [ 891.722871][T19929] pimreg: left allmulticast mode [ 892.853964][T18041] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 893.091341][ T979] usb 6-1: USB disconnect, device number 115 [ 893.185220][T18041] usb 2-1: Using ep0 maxpacket: 8 [ 893.240931][T18041] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 893.256530][T18041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 893.270717][T18041] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 893.297441][T18041] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 893.311317][T18041] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 893.357874][T18041] usb 2-1: Product: syz [ 893.494494][T18041] usb 2-1: Manufacturer: syz [ 893.508828][T18041] usb 2-1: SerialNumber: syz [ 893.518695][T18041] usb 2-1: config 0 descriptor?? [ 893.532955][T18041] smsusb:smsusb_probe: board id=2, interface number 0 [ 893.543058][T18041] smsusb:smsusb_probe: Device initialized with return code -19 [ 893.824020][ T979] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 894.004565][ T979] usb 6-1: device descriptor read/64, error -71 [ 894.254042][ T979] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 894.390630][ T979] usb 6-1: device descriptor read/64, error -71 [ 894.506623][ T979] usb usb6-port1: attempt power cycle [ 894.854865][ T979] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 894.880520][ T979] usb 6-1: device descriptor read/8, error -71 [ 895.199134][ T979] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 895.235433][ T979] usb 6-1: device descriptor read/8, error -71 [ 895.419230][ T979] usb usb6-port1: unable to enumerate USB device [ 895.628090][T18041] usb 2-1: USB disconnect, device number 122 [ 896.214590][ T979] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 896.364080][ T979] usb 2-1: device descriptor read/64, error -71 [ 896.409432][T20032] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2449'. [ 896.813819][ T979] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 896.954007][ T979] usb 2-1: device descriptor read/64, error -71 [ 897.064414][ T979] usb usb2-port1: attempt power cycle [ 897.364270][T12072] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 897.423945][ T979] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 897.444763][ T979] usb 2-1: device descriptor read/8, error -71 [ 897.628690][T12072] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 897.688498][T12072] usb 6-1: config 0 has no interface number 0 [ 897.704461][ T979] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 897.769353][ T979] usb 2-1: device descriptor read/8, error -71 [ 897.772674][T12072] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 897.879892][T12072] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.895384][ T979] usb usb2-port1: unable to enumerate USB device [ 897.932284][T12072] usb 6-1: config 0 interface 113 has no altsetting 0 [ 897.980028][T12072] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 897.989504][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.003209][T12072] usb 6-1: Product: syz [ 898.018632][T12072] usb 6-1: Manufacturer: syz [ 898.107075][T12072] usb 6-1: SerialNumber: syz [ 898.139878][T12072] usb 6-1: config 0 descriptor?? [ 898.173476][T20052] ipvlan2: entered promiscuous mode [ 898.191300][T20052] ipvlan2: entered allmulticast mode [ 898.210162][T20052] batadv0: entered allmulticast mode [ 898.233719][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.362825][ C0] usb 6-1: NFC: Urb failure (status -71) [ 898.374294][T20052] ipvlan2: entered promiscuous mode [ 898.379748][T20052] ipvlan2: entered allmulticast mode [ 898.386430][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.425465][T12072] usb 6-1: NFC: Unable to get FW version [ 898.440575][T12072] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 898.472862][T20052] ipvlan2: entered promiscuous mode [ 898.532590][T20052] ipvlan2: entered allmulticast mode [ 898.580362][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.679335][T20052] ipvlan2: entered promiscuous mode [ 898.684989][T20052] ipvlan2: entered allmulticast mode [ 898.691995][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.780218][T20052] ipvlan2: entered promiscuous mode [ 898.785898][T20052] ipvlan2: entered allmulticast mode [ 898.792309][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.859687][T20052] ipvlan2: entered promiscuous mode [ 898.865578][T20052] ipvlan2: entered allmulticast mode [ 898.877904][T20052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 899.677313][T20063] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 899.759543][T20066] netlink: 'syz.0.2460': attribute type 21 has an invalid length. [ 899.800105][T20066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2460'. [ 899.810106][T20066] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 899.825177][T20066] netlink: 'syz.0.2460': attribute type 5 has an invalid length. [ 899.833263][T20066] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2460'. [ 900.103722][T20074] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2462'. [ 900.205715][ T979] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 900.339947][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 900.357755][ T43] usb 6-1: USB disconnect, device number 120 [ 900.394706][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 900.420195][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 900.435513][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.482793][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.511414][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.645269][ T979] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 900.660710][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.677067][ T979] usb 2-1: config 0 descriptor?? [ 900.844007][ T43] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 901.005607][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.034804][ T43] usb 6-1: config 0 has no interfaces? [ 901.040430][ T43] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 901.054387][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.081646][ T43] usb 6-1: config 0 descriptor?? [ 901.104381][ T979] usbhid 2-1:0.0: can't add hid device: -71 [ 901.130830][ T979] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.144464][ T5949] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 901.164007][ T979] usb 2-1: USB disconnect, device number 127 [ 901.328140][ T5949] usb 4-1: config index 0 descriptor too short (expected 149, got 148) [ 901.336737][ T5949] usb 4-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 901.347875][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.358232][ T5949] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 901.371877][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 901.380435][ T5949] usb 4-1: SerialNumber: syz [ 901.396702][ T5949] usb 4-1: 0:2 : does not exist [ 901.596070][ T5949] usb 4-1: USB disconnect, device number 110 [ 901.924717][T20099] fuse: Bad value for 'user_id' [ 901.929591][T20099] fuse: Bad value for 'user_id' [ 902.410056][T20111] bond6 (unregistering): Released all slaves [ 902.870939][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 903.500094][T12072] usb 6-1: USB disconnect, device number 121 [ 905.013975][ T5949] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 905.194086][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 905.205107][ T5949] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 905.215517][ T5949] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 905.244731][ T5949] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 905.254502][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.262502][ T5949] usb 6-1: Product: syz [ 905.291023][ T5949] usb 6-1: Manufacturer: syz [ 905.302661][ T5949] usb 6-1: SerialNumber: syz [ 905.323148][ T5949] usb 6-1: config 0 descriptor?? [ 905.549271][T20153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.564294][T20153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.585005][T20153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.612767][T20153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.169475][ T979] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 907.346082][ T979] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 907.365863][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.377009][ T979] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 907.393239][ T979] usb 1-1: config 0 has no interface number 0 [ 907.440584][ T979] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 907.479810][ T979] usb 1-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 907.509124][ T979] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 907.539971][ T979] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 907.573758][ T979] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 907.603106][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.663328][ T979] usb 1-1: Product: syz [ 907.681833][ T979] usb 1-1: Manufacturer: syz [ 907.691451][ T979] usb 1-1: SerialNumber: syz [ 907.717108][ T979] usb 1-1: config 0 descriptor?? [ 907.743686][T18041] usb 6-1: USB disconnect, device number 122 [ 907.980961][ T979] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected [ 908.169076][ T979] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 908.218332][ T979] usb 1-1: USB disconnect, device number 126 [ 908.260864][ T979] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 908.291649][ T979] cypress_m8 1-1:0.74: device disconnected [ 908.713993][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 908.880934][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 908.892910][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.911044][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.101242][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.121623][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.138716][ T43] usb 2-1: Product: 樛䖇྄⫅観♉ᦛ히퍞升⨼Ⲃ䘣纵뉰ꩋ矓嬜꼗ᓸ股∓뢅塥䶣땱赽ꞈ왟쌫਀傤Ȓ夺悌ᛒ蟰㲤꩚纄䶥떁ᅺꑔ頓蕃 [ 909.166687][ T43] usb 2-1: Manufacturer: 귛묛䗮飤蕭ﰵ⦰谬꽽概熎ꗎ౨摗푀蛫밇๽㔇쎛鯥輼藗튼쳄㸉鷈堠ȋ㓄쪳돏뿀䫣聉꿿ឳ㡔᭄띷곮土଎픱觲荏効፸넽忛喱疕駘怄虎轫뱉ΐ쎳⎍夿뮙ꉚ痃憤㿇 [ 909.219265][ T43] usb 2-1: SerialNumber: 劝㯱聡這ㅳ䄌䮩谈륯ⅻ캰眤襄傅Ὓ猞暦蚛ዋ⭝젒㒜梩媌芉᷿큥끴刁䔢䀽绬専햡趐譪᤻߳Ⱐჭ˛톋勭໨柧ꭳЂ椵占퓍䰏妹麤텅ꋨ즨룱〸訬皯뻉ᡁ跗ᢥᖪ쿦졘ㄬ❄䈅Λ [ 909.684686][T20327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.703801][T20327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.752330][ T43] usb 2-1: 0:2 : does not exist [ 909.804419][ T43] usb 2-1: USB disconnect, device number 2 [ 910.484031][T18041] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 910.637735][T18041] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 910.648270][T18041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.657313][T18041] usb 4-1: Product: syz [ 910.664493][T18041] usb 4-1: Manufacturer: syz [ 910.670189][T18041] usb 4-1: SerialNumber: syz [ 910.744135][ T979] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 910.923952][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 910.931399][ T979] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 910.940270][ T979] usb 2-1: config 0 has no interface number 0 [ 910.961326][ T979] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 910.989297][ T979] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 911.011449][ T979] usb 2-1: config 0 interface 48 has no altsetting 0 [ 911.021909][ T979] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 911.110990][T12072] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 911.127885][ T979] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 911.140070][ T979] usb 2-1: Product: syz [ 911.144579][ T979] usb 2-1: Manufacturer: syz [ 911.149463][ T979] usb 2-1: SerialNumber: syz [ 911.179960][T18041] rtl8150 4-1:1.0: couldn't reset the device [ 911.187457][ T979] usb 2-1: config 0 descriptor?? [ 911.190915][T18041] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 911.284387][T12072] usb 6-1: Using ep0 maxpacket: 16 [ 911.310099][T12072] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.328617][T18041] usb 4-1: USB disconnect, device number 111 [ 911.360663][T12072] usb 6-1: config 0 has no interfaces? [ 911.374657][T12072] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 911.383749][T12072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.436596][T12072] usb 6-1: config 0 descriptor?? [ 911.462280][T21454] loop8: detected capacity change from 0 to 8 [ 911.489345][T21454] Dev loop8: unable to read RDB block 8 [ 911.513336][T21454] loop8: unable to read partition table [ 911.519760][T21454] loop8: partition table beyond EOD, truncated [ 911.531138][T21454] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 912.028578][T21464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2510'. [ 912.311960][T18041] usb 6-1: USB disconnect, device number 123 [ 912.746632][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2511'. [ 912.777234][T21475] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 912.849603][T21475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.562185][ T979] usb 2-1: USB disconnect, device number 3 [ 914.757031][T21507] loop6: detected capacity change from 0 to 7 [ 914.775378][T11080] Dev loop6: unable to read RDB block 7 [ 914.781880][T11080] loop6: AHDI p2 p3 [ 914.818642][T11080] loop6: partition table partially beyond EOD, truncated [ 914.827252][T11080] loop6: p2 size 46 extends beyond EOD, truncated [ 914.836381][T21510] loop8: detected capacity change from 0 to 8 [ 914.844757][T14447] Dev loop8: unable to read RDB block 8 [ 914.850433][T14447] loop8: unable to read partition table [ 914.857450][T14447] loop8: partition table beyond EOD, truncated [ 914.865598][T21510] Dev loop8: unable to read RDB block 8 [ 914.873285][T21510] loop8: unable to read partition table [ 914.887515][T21510] loop8: partition table beyond EOD, truncated [ 914.900726][T21510] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 914.912338][T21507] Dev loop6: unable to read RDB block 7 [ 915.019003][T21507] loop6: AHDI p2 p3 [ 915.048953][T21507] loop6: partition table partially beyond EOD, truncated [ 915.086154][T21507] loop6: p2 size 46 extends beyond EOD, truncated [ 915.527533][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 915.679792][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 915.867046][T21528] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2525'. [ 916.094512][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 916.103904][ T979] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 916.444158][ T979] usb 6-1: device descriptor read/64, error -71 [ 916.784333][ T979] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 916.937562][ T979] usb 6-1: device descriptor read/64, error -71 [ 917.134409][ T979] usb usb6-port1: attempt power cycle [ 917.514074][ T979] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 917.546873][ T979] usb 6-1: device descriptor read/8, error -71 [ 917.794324][ T979] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 917.864540][ T979] usb 6-1: device descriptor read/8, error -71 [ 917.974390][ T979] usb usb6-port1: unable to enumerate USB device [ 918.181898][T21556] input: syz0 as /devices/virtual/input/input49 [ 918.196448][T21556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 918.267846][T21556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 918.489350][T21571] loop8: detected capacity change from 0 to 8 [ 918.499436][T21571] Dev loop8: unable to read RDB block 8 [ 918.505467][T21571] loop8: unable to read partition table [ 918.514617][T21571] loop8: partition table beyond EOD, truncated [ 918.521564][T21571] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 918.616179][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 918.703347][ T979] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 918.822636][T21581] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 918.929120][ T979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 918.937249][ T979] usb 4-1: config 0 has no interface number 0 [ 918.951905][ T979] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 918.961549][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.970181][ T979] usb 4-1: Product: syz [ 918.974844][ T979] usb 4-1: Manufacturer: syz [ 918.979671][ T979] usb 4-1: SerialNumber: syz [ 918.991599][ T979] usb 4-1: config 0 descriptor?? [ 919.271415][ T979] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 919.289689][ T979] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 919.330300][ T979] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 919.754932][T21589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.782886][T21589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.074003][ T43] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 921.226263][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 921.247749][ T43] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 921.260488][ T43] usb 1-1: config 179 has no interface number 0 [ 921.281869][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 921.322291][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 921.357090][T12072] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 921.657120][T12072] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.674092][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 921.690271][T12072] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 921.718460][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 921.722098][T21608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'. [ 921.744415][T12072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.761857][T12072] usb 2-1: Product: syz [ 921.772147][T12072] usb 2-1: Manufacturer: syz [ 921.780428][T12072] usb 2-1: SerialNumber: syz [ 921.783209][ T43] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 921.823426][T12072] usb 2-1: config 0 descriptor?? [ 921.880224][ T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 921.985817][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.124913][T21611] loop8: detected capacity change from 0 to 8 [ 922.164961][T21599] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 922.199089][T21611] Dev loop8: unable to read RDB block 8 [ 922.215028][T21611] loop8: unable to read partition table [ 922.221143][T21611] loop8: partition table beyond EOD, truncated [ 922.255558][T21611] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 922.318041][T12072] usb 2-1: USB disconnect, device number 4 [ 922.397564][ T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input50 [ 922.676850][T21616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2551'. [ 923.263034][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 923.841656][ T43] usb 1-1: USB disconnect, device number 127 [ 923.841713][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 923.841762][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 923.903438][T21633] loop6: detected capacity change from 0 to 7 [ 923.922739][T21633] Dev loop6: unable to read RDB block 7 [ 923.931079][T21633] loop6: unable to read partition table [ 923.942576][T21633] loop6: partition table beyond EOD, truncated [ 923.953295][T21633] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 924.144471][T12072] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 924.286926][T21639] loop8: detected capacity change from 0 to 8 [ 924.297397][T21639] Dev loop8: unable to read RDB block 8 [ 924.303021][T21639] loop8: unable to read partition table [ 924.305550][T12072] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 924.309987][T21639] loop8: partition table beyond EOD, truncated [ 924.329465][ T5949] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 924.340808][T12072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 924.344275][T21639] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 924.380753][T12072] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.401486][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.432581][T12072] usb 6-1: Product: syz [ 924.441674][T12072] usb 6-1: Manufacturer: syz [ 924.470777][T12072] usb 6-1: SerialNumber: syz [ 924.479951][T12072] usb 6-1: config 0 descriptor?? [ 924.499718][T12072] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 924.524206][T12072] em28xx 6-1:0.0: Device initialization failed. [ 924.533937][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 924.541012][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.562445][T12072] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 924.583059][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.618644][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.648874][T21644] loop8: detected capacity change from 0 to 8 [ 924.652459][ T5949] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 924.665243][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.665819][T21644] Dev loop8: unable to read RDB block 8 [ 924.676931][ T5949] usb 2-1: config 0 descriptor?? [ 924.685244][T21644] loop8: unable to read partition table [ 924.695143][T21644] loop8: partition table beyond EOD, truncated [ 924.706567][T21630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2549'. [ 924.721736][T21644] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 924.726319][T21630] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2549'. [ 924.783607][T21630] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2549'. [ 924.800874][T21630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2549'. [ 924.831340][ T43] usb 6-1: USB disconnect, device number 2 [ 925.100640][ T5949] koneplus 0003:1E7D:2E22.002D: item fetching failed at offset 0/2 [ 925.116687][ T5949] koneplus 0003:1E7D:2E22.002D: parse failed [ 925.130391][ T5949] koneplus 0003:1E7D:2E22.002D: probe with driver koneplus failed with error -22 [ 925.296582][T21635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.307328][T21635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.455302][T12253] usb 2-1: USB disconnect, device number 5 [ 925.694563][T21661] atomic_op ffff8880532d9998 conn xmit_atomic 0000000000000000 [ 925.830515][T21666] fuse: Bad value for 'fd' [ 926.714849][T21677] loop6: detected capacity change from 0 to 7 [ 926.723340][T21677] Dev loop6: unable to read RDB block 7 [ 926.729820][T21677] loop6: unable to read partition table [ 926.739640][T21677] loop6: partition table beyond EOD, truncated [ 926.876830][T21677] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 927.137267][T21679] loop8: detected capacity change from 0 to 8 [ 927.165190][T21679] Dev loop8: unable to read RDB block 8 [ 927.185586][T21679] loop8: unable to read partition table [ 927.192617][T21679] loop8: partition table beyond EOD, truncated [ 927.255494][T21679] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 927.506657][T21688] loop8: detected capacity change from 0 to 8 [ 927.547092][T21688] Dev loop8: unable to read RDB block 8 [ 927.552711][T21688] loop8: unable to read partition table [ 927.602132][T21688] loop8: partition table beyond EOD, truncated [ 927.629810][T21688] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 927.719512][T21690] kvm: pic: non byte write [ 928.834485][ T5949] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 928.929096][T21719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2583'. [ 929.003982][ T5949] usb 6-1: Using ep0 maxpacket: 16 [ 929.012627][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 929.030311][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.043596][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 929.062860][ T5949] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 929.084629][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.097781][ T5949] usb 6-1: config 0 descriptor?? [ 929.121693][T21694] warn_alloc: 1 callbacks suppressed [ 929.121708][T21694] syz.0.2576: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 929.147224][T21694] CPU: 0 UID: 0 PID: 21694 Comm: syz.0.2576 Not tainted syzkaller #0 PREEMPT(full) [ 929.147249][T21694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 929.147261][T21694] Call Trace: [ 929.147269][T21694] [ 929.147278][T21694] dump_stack_lvl+0x189/0x250 [ 929.147309][T21694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.147332][T21694] ? __pfx__printk+0x10/0x10 [ 929.147357][T21694] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 929.147379][T21694] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 929.147403][T21694] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 929.147428][T21694] warn_alloc+0x214/0x310 [ 929.147461][T21694] ? __pfx_warn_alloc+0x10/0x10 [ 929.147497][T21694] ? __get_vm_area_node+0x28f/0x300 [ 929.147522][T21694] ? hash_ipport4_resize+0x1ec/0x1a50 [ 929.147547][T21694] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 929.147596][T21694] ? alloc_pages_mpol+0x3cd/0x4a0 [ 929.147624][T21694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 929.147654][T21694] ? rcu_is_watching+0x15/0xb0 [ 929.147675][T21694] ? hash_ipport4_resize+0x1ec/0x1a50 [ 929.147693][T21694] ? hash_ipport4_resize+0x1ec/0x1a50 [ 929.147711][T21694] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 929.147736][T21694] ? hash_ipport4_resize+0x1ec/0x1a50 [ 929.147765][T21694] hash_ipport4_resize+0x1ec/0x1a50 [ 929.147794][T21694] ? __pfx_hash_ipport4_add+0x10/0x10 [ 929.147841][T21694] call_ad+0x44b/0xb00 [ 929.147875][T21694] ? __pfx_call_ad+0x10/0x10 [ 929.147916][T21694] ? __nla_parse+0x40/0x60 [ 929.147941][T21694] ip_set_ad+0x791/0x930 [ 929.147976][T21694] ? __pfx_ip_set_ad+0x10/0x10 [ 929.148050][T21694] nfnetlink_rcv_msg+0xb4d/0x1130 [ 929.148077][T21694] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 929.148122][T21694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 929.148145][T21694] ? kasan_save_free_info+0x46/0x50 [ 929.148217][T21694] netlink_rcv_skb+0x208/0x470 [ 929.148238][T21694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 929.148265][T21694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 929.148297][T21694] ? bpf_lsm_capable+0x9/0x20 [ 929.148319][T21694] ? security_capable+0x7e/0x2e0 [ 929.148353][T21694] nfnetlink_rcv+0x26a/0x2520 [ 929.148382][T21694] ? __dev_queue_xmit+0x1d79/0x3b50 [ 929.148417][T21694] ? __dev_queue_xmit+0x27b/0x3b50 [ 929.148454][T21694] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 929.148478][T21694] ? __pfx___dev_queue_xmit+0x10/0x10 [ 929.148516][T21694] ? ref_tracker_free+0x63a/0x7d0 [ 929.148536][T21694] ? __asan_memcpy+0x40/0x70 [ 929.148555][T21694] ? __pfx_ref_tracker_free+0x10/0x10 [ 929.148571][T21694] ? __skb_clone+0x63/0x7a0 [ 929.148598][T21694] ? __skb_clone+0x483/0x7a0 [ 929.148628][T21694] ? skb_clone+0x246/0x3a0 [ 929.148654][T21694] ? __netlink_deliver_tap+0x807/0x850 [ 929.148673][T21694] ? netlink_deliver_tap+0x2e/0x1b0 [ 929.148699][T21694] ? netlink_deliver_tap+0x2e/0x1b0 [ 929.148728][T21694] netlink_unicast+0x82c/0x9e0 [ 929.148765][T21694] ? __pfx_netlink_unicast+0x10/0x10 [ 929.148794][T21694] ? netlink_sendmsg+0x642/0xb30 [ 929.148812][T21694] ? skb_put+0x11b/0x210 [ 929.148836][T21694] netlink_sendmsg+0x805/0xb30 [ 929.148867][T21694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.148891][T21694] ? aa_sock_msg_perm+0xf1/0x1d0 [ 929.148913][T21694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.148932][T21694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.148953][T21694] __sock_sendmsg+0x21c/0x270 [ 929.148983][T21694] ____sys_sendmsg+0x505/0x830 [ 929.149017][T21694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.149049][T21694] ? import_iovec+0x74/0xa0 [ 929.149077][T21694] ___sys_sendmsg+0x21f/0x2a0 [ 929.149102][T21694] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.149162][T21694] ? __fget_files+0x2a/0x420 [ 929.149178][T21694] ? __fget_files+0x3a0/0x420 [ 929.149207][T21694] __x64_sys_sendmsg+0x19b/0x260 [ 929.149232][T21694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.149265][T21694] ? rcu_is_watching+0x15/0xb0 [ 929.149289][T21694] ? do_syscall_64+0xbe/0x3b0 [ 929.149315][T21694] do_syscall_64+0xfa/0x3b0 [ 929.149333][T21694] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.149352][T21694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.149371][T21694] ? clear_bhb_loop+0x60/0xb0 [ 929.149394][T21694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.149412][T21694] RIP: 0033:0x7fbee838ec29 [ 929.149432][T21694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.149449][T21694] RSP: 002b:00007fbee9262038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.149470][T21694] RAX: ffffffffffffffda RBX: 00007fbee85d5fa0 RCX: 00007fbee838ec29 [ 929.149484][T21694] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 929.149496][T21694] RBP: 00007fbee8411e41 R08: 0000000000000000 R09: 0000000000000000 [ 929.149509][T21694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.149520][T21694] R13: 00007fbee85d6038 R14: 00007fbee85d5fa0 R15: 00007fbee86ffa28 [ 929.149552][T21694] [ 929.149560][T21694] Mem-Info: [ 929.552562][ T5949] hid-alps 0003:044E:120C.002E: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 929.563121][T21694] active_anon:26015 inactive_anon:1 isolated_anon:0 [ 929.563121][T21694] active_file:20920 inactive_file:40236 isolated_file:0 [ 929.563121][T21694] unevictable:768 dirty:153 writeback:0 [ 929.563121][T21694] slab_reclaimable:10626 slab_unreclaimable:113092 [ 929.563121][T21694] mapped:33319 shmem:20416 pagetables:1565 [ 929.563121][T21694] sec_pagetables:0 bounce:0 [ 929.563121][T21694] kernel_misc_reclaimable:0 [ 929.563121][T21694] free:1259610 free_pcp:16533 free_cma:0 [ 929.691830][T12072] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 929.702833][T21694] Node 0 active_anon:104560kB inactive_anon:4kB active_file:83580kB inactive_file:160740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133340kB dirty:612kB writeback:0kB shmem:80128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13732kB pagetables:6080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 929.739407][T21694] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 929.777205][T21694] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.801298][T21722] binder_alloc: 21713: binder_alloc_buf, no vma [ 929.809313][T21694] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 929.818489][T21694] Node 0 DMA32 free:1129236kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104112kB inactive_anon:4kB active_file:83580kB inactive_file:159184kB unevictable:1536kB writepending:612kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:49668kB local_pcp:28396kB free_cma:0kB [ 929.820267][T21714] binder: 21713:21714 ioctl c0306201 200000000580 returned -14 [ 929.851707][T21694] lowmem_reserve[]: 0 0 1 1 1 [ 929.864737][T21694] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 929.877441][T21722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.904247][T12072] usb 2-1: Using ep0 maxpacket: 16 [ 929.905984][T21694] lowmem_reserve[]: 0 0 0 0 0 [ 929.912671][T12072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.919734][T21694] Node 1 Normal free:3893152kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17500kB local_pcp:13308kB free_cma:0kB [ 929.926104][T21722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.958164][T12072] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 929.958192][T12072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.965352][T12072] usb 2-1: config 0 descriptor?? [ 929.989230][T21694] lowmem_reserve[]: 0 0 0 0 0 [ 929.998301][T21694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 930.012024][T21694] Node 0 DMA32: 502*4kB (UME) 878*8kB (UME) 538*16kB (UME) 518*32kB (UME) 183*64kB (UME) 136*128kB (UME) 69*256kB (UME) 16*512kB (UME) 39*1024kB (UME) 10*2048kB (UM) 240*4096kB (UM) = 1132648kB [ 930.031986][T21694] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 930.045635][T21694] Node 1 Normal: 144*4kB (UME) 44*8kB (UME) 42*16kB (UE) 247*32kB (UME) 62*64kB (UE) 24*128kB (UME) 3*256kB (UE) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3893152kB [ 930.047075][ T5949] usb 6-1: USB disconnect, device number 3 [ 930.064835][T21694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.080362][T21694] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 930.090548][T21694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.100897][T21694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 930.111211][T21694] 81552 total pagecache pages [ 930.116468][T21694] 1 pages in swap cache [ 930.120739][T21694] Free swap = 124992kB [ 930.126238][T21694] Total swap = 124996kB [ 930.130501][T21694] 2097051 pages RAM [ 930.134826][T21694] 0 pages HighMem/MovableOnly [ 930.139684][T21694] 425672 pages reserved [ 930.144367][T21694] 0 pages cma reserved [ 930.366733][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'. [ 930.406862][T12072] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 930.842207][ T5949] usb 2-1: USB disconnect, device number 6 [ 930.883067][T21731] loop8: detected capacity change from 0 to 8 [ 930.923522][T21731] Dev loop8: unable to read RDB block 8 [ 930.931204][T21731] loop8: unable to read partition table [ 930.941565][T21731] loop8: partition table beyond EOD, truncated [ 930.963120][T21731] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 931.380858][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2587'. [ 931.473023][T21738] fuse: Bad value for 'rootmode' [ 931.509255][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.529857][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.737226][T12072] hid_parser_main: 4 callbacks suppressed [ 931.737245][T12072] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 931.780214][T12072] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 932.013198][T21753] : renamed from bridge_slave_0 (while UP) [ 932.211767][T21758] netlink: 'syz.0.2594': attribute type 32 has an invalid length. [ 933.256205][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 933.573932][ T5928] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 933.585234][T18041] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 933.724016][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 933.731364][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 933.739286][ T5928] usb 1-1: can't read configurations, error -61 [ 933.759926][T18041] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 933.800118][T18041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.860793][T18041] usb 2-1: Product: syz [ 933.874354][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 933.880981][T18041] usb 2-1: Manufacturer: syz [ 933.914479][T18041] usb 2-1: SerialNumber: syz [ 933.941224][T18041] usb 2-1: config 0 descriptor?? [ 934.049563][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 934.058058][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 934.070144][ T5928] usb 1-1: can't read configurations, error -61 [ 934.077337][ T5928] usb usb1-port1: attempt power cycle [ 934.171378][T18041] usb 2-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 934.373069][T18041] usb 2-1: no permanent extended address found, random address set [ 934.393091][T18041] usb 2-1: atusb_probe: initialization failed, error = -524 [ 934.439341][T18041] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 934.454105][ T5928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 934.494723][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 934.545757][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 934.553624][ T5928] usb 1-1: can't read configurations, error -61 [ 934.581107][T18041] usb 2-1: USB disconnect, device number 7 [ 934.714192][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 934.734860][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 934.742235][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 934.751514][ T5928] usb 1-1: can't read configurations, error -61 [ 934.761328][ T5928] usb usb1-port1: unable to enumerate USB device [ 935.443972][T18041] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 935.596334][T18041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.607475][T18041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.623157][T18041] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 935.639364][T18041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.652156][T18041] usb 6-1: config 0 descriptor?? [ 936.075305][T18041] pyra 0003:1E7D:2CF6.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 936.441023][T21820] loop6: detected capacity change from 0 to 7 [ 936.448545][T21820] Dev loop6: unable to read RDB block 7 [ 936.455625][T21820] loop6: AHDI p2 p3 [ 936.459829][T21820] loop6: partition table partially beyond EOD, truncated [ 936.467740][T21820] loop6: p2 size 46 extends beyond EOD, truncated [ 936.528374][T14447] udevd[14447]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 936.689692][T21840] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 936.826931][T22105] fuse: Bad value for 'user_id' [ 936.839211][T22105] fuse: Bad value for 'user_id' [ 936.874233][T22105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2614'. [ 936.885049][T18041] pyra 0003:1E7D:2CF6.0031: couldn't init struct pyra_device [ 936.892521][T18041] pyra 0003:1E7D:2CF6.0031: couldn't install mouse [ 936.937527][T18041] pyra 0003:1E7D:2CF6.0031: probe with driver pyra failed with error -71 [ 936.960808][T18041] usb 6-1: USB disconnect, device number 4 [ 937.212646][T22339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.269868][T22339] team0: Port device bond3 added [ 937.318522][T22802] loop6: detected capacity change from 0 to 7 [ 937.339656][T22802] Dev loop6: unable to read RDB block 7 [ 937.363964][T22802] loop6: unable to read partition table [ 937.372291][T22802] loop6: partition table beyond EOD, truncated [ 937.386298][T22802] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 937.814214][T23114] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2619'. [ 937.872270][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 937.950829][T23153] veth1_macvtap (unregistering): left allmulticast mode [ 937.963179][T23153] bridge0: port 3(macsec0) entered disabled state [ 937.996775][T23153] macsec0 (unregistering): left allmulticast mode [ 938.007804][T23153] macsec0 (unregistering): left promiscuous mode [ 938.018002][T23153] bridge0: port 3(macsec0) entered disabled state [ 939.357490][T23816] loop6: detected capacity change from 0 to 7 [ 939.365256][T23897] ptrace attach of "./syz-executor exec"[17814] was attempted by "./syz-executor exec"[23897] [ 939.423036][T23816] Dev loop6: unable to read RDB block 7 [ 939.429069][T23816] loop6: AHDI p2 p3 [ 939.433483][T23816] loop6: partition table partially beyond EOD, truncated [ 939.444100][T23816] loop6: p2 size 46 extends beyond EOD, truncated [ 939.771726][T14447] udevd[14447]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 939.959099][T23904] netlink: zone id is out of range [ 939.994049][T23904] netlink: zone id is out of range [ 940.012958][T23904] netlink: del zone limit has 4 unknown bytes [ 940.274289][T12253] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 940.445468][T12253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.457386][T12253] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 940.474012][T12253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.493725][T12253] usb 2-1: config 0 descriptor?? [ 940.518275][T12253] usb 2-1: bad CDC descriptors [ 940.743708][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 941.029976][ T5928] usb 2-1: USB disconnect, device number 8 [ 941.111165][T23925] loop6: detected capacity change from 0 to 7 [ 941.126464][T23925] Dev loop6: unable to read RDB block 7 [ 941.132266][T23925] loop6: AHDI p2 p3 [ 941.143250][T23925] loop6: partition table partially beyond EOD, truncated [ 941.152914][T23925] loop6: p2 size 46 extends beyond EOD, truncated [ 941.259991][T14447] udevd[14447]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 941.554075][T18041] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 941.694206][T18041] usb 1-1: device descriptor read/64, error -71 [ 941.895086][T23934] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20001 [ 942.034507][T18041] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 942.111541][T23936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2638'. [ 942.248696][T18041] usb 1-1: device descriptor read/64, error -71 [ 942.375674][T18041] usb usb1-port1: attempt power cycle [ 942.869162][T18041] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 942.897264][T23947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.001732][T18041] usb 1-1: device descriptor read/8, error -71 [ 943.205821][ T30] audit: type=1326 audit(1758506867.845:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23945 comm="syz.1.2642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa097f8ec29 code=0x0 [ 943.248307][T18041] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 943.297373][T18041] usb 1-1: device descriptor read/8, error -71 [ 943.404183][T18041] usb usb1-port1: unable to enumerate USB device [ 943.436137][T23958] tipc: Enabled bearer , priority 0 [ 943.449405][T23958] syzkaller0: entered promiscuous mode [ 943.461615][T23958] syzkaller0: entered allmulticast mode [ 943.510512][T23958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2644'. [ 943.545985][T23958] tipc: Resetting bearer [ 943.554527][T23957] tipc: Resetting bearer [ 943.699677][T23957] tipc: Disabling bearer [ 943.902198][T23960] loop6: detected capacity change from 0 to 7 [ 943.932398][T14447] Dev loop6: unable to read RDB block 7 [ 943.942467][T14447] loop6: AHDI p2 p3 [ 943.946771][T14447] loop6: partition table partially beyond EOD, truncated [ 943.956173][T14447] loop6: p2 size 46 extends beyond EOD, truncated [ 943.962900][T23962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2646'. [ 943.986791][T23962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 943.993354][T23962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 944.008501][T23962] vhci_hcd vhci_hcd.0: Device attached [ 944.016973][T23960] Dev loop6: unable to read RDB block 7 [ 944.028381][T23960] loop6: AHDI p2 p3 [ 944.037612][T23960] loop6: partition table partially beyond EOD, truncated [ 944.106262][T23960] loop6: p2 size 46 extends beyond EOD, truncated [ 944.185843][T12072] vhci_hcd: vhci_device speed not set [ 944.208529][T14447] udevd[14447]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 944.251756][T14447] udevd[14447]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 944.264163][T12072] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 944.331989][T23966] kvm: Disabled LAPIC found during irq injection [ 944.339250][T23966] kvm: apic: phys broadcast and lowest prio [ 944.812363][T23963] vhci_hcd: connection reset by peer [ 944.821707][T14192] vhci_hcd: stop threads [ 944.826576][T14192] vhci_hcd: release socket [ 944.857527][T14192] vhci_hcd: disconnect device [ 945.833311][T23994] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.2657'. [ 945.884583][T23994] netlink: zone id is out of range [ 945.889743][T23994] netlink: zone id is out of range [ 945.917791][T23994] netlink: del zone limit has 4 unknown bytes [ 945.941361][T23996] bond6 (unregistering): Released all slaves [ 946.004122][T12253] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 946.144307][T24001] @: renamed from bond_slave_0 [ 946.254176][T12253] usb 2-1: Using ep0 maxpacket: 16 [ 946.354286][T12253] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 946.368965][T12253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 946.415716][T12253] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 946.432763][T12253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.442823][T12253] usb 2-1: Product: syz [ 946.452936][T12253] usb 2-1: Manufacturer: syz [ 946.463048][T12253] usb 2-1: SerialNumber: syz [ 946.479952][T12253] usb 2-1: config 0 descriptor?? [ 946.512174][T12253] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 946.527078][T12253] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 946.854233][T24007] binder: 24006:24007 ioctl c0306201 200000001a80 returned -14 [ 947.126899][T12253] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 947.134025][T12253] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 947.774505][T12253] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 947.782518][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 947.791635][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 947.801026][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 947.808421][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 947.815978][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 948.432238][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 948.439112][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 948.451827][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 948.555006][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 948.571614][T12253] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 948.598591][T12253] usb 2-1: USB disconnect, device number 9 [ 949.381140][T24039] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.2669'. [ 949.391092][T24039] netlink: zone id is out of range [ 949.396542][T24039] netlink: zone id is out of range [ 949.405855][T24039] netlink: del zone limit has 4 unknown bytes [ 949.416124][T12072] vhci_hcd: vhci_device speed not set [ 949.647076][T24045] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[24045] [ 949.784239][T12253] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 949.935515][T12253] usb 6-1: Using ep0 maxpacket: 8 [ 949.942263][T12253] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 949.969316][T12253] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 949.993991][T12253] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 950.005265][T12253] usb 6-1: Product: syz [ 950.009459][T12253] usb 6-1: Manufacturer: syz [ 950.017557][T12253] usb 6-1: SerialNumber: syz [ 950.067573][T12253] usb 6-1: config 0 descriptor?? [ 950.281083][T12253] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 950.414145][T18041] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 950.568472][T18041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.581770][T18041] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.611916][T18041] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.622905][T18041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.638569][T18041] usb 1-1: Product: syz [ 950.643478][T18041] usb 1-1: Manufacturer: syz [ 950.649050][T18041] usb 1-1: SerialNumber: syz [ 950.875545][T24058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.893275][T24058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.911481][T18041] usb 1-1: 0:2 : does not exist [ 950.942579][T18041] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 950.971044][T18041] usb 1-1: USB disconnect, device number 10 [ 951.042687][T11066] udevd[11066]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.712989][T12253] gspca_sunplus: reg_w_riv err -71 [ 951.735155][T12253] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 951.758930][T12253] usb 6-1: USB disconnect, device number 5 [ 951.944345][ T5928] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 952.154063][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.164710][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 952.176016][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.210371][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 952.278174][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.354699][ T5928] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.419235][T24073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.443278][ T5928] usb 1-1: Manufacturer: syz [ 952.479597][ T5928] usb 1-1: config 0 descriptor?? [ 952.517462][T24073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.894331][ T5928] rc_core: IR keymap rc-hauppauge not found [ 952.901927][ T5928] Registered IR keymap rc-empty [ 952.908102][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.967482][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.995436][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 953.031337][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 953.077441][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.144261][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.184228][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.207544][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.233985][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.254159][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.274180][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.377919][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.404052][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.496121][ T5928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.523742][ T5928] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 953.540558][ T5928] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 953.573068][ T5928] usb 1-1: USB disconnect, device number 11 [ 953.724694][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 953.748843][T24089] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.2682'. [ 953.759250][T24089] netlink: zone id is out of range [ 953.764949][T24089] netlink: zone id is out of range [ 953.770784][T24089] netlink: del zone limit has 4 unknown bytes [ 953.873970][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 953.881142][ T43] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 953.893447][ T43] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 953.909880][ T43] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 953.922506][ T43] usb 6-1: config 250 has no interface number 0 [ 953.937927][ T43] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 953.950746][ T43] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 953.968896][ T43] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 953.981881][ T43] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 953.996909][ T43] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 954.026193][ T43] usb 6-1: config 250 interface 228 has no altsetting 0 [ 954.042450][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 954.060247][ T43] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 954.068654][ T43] usb 6-1: Product: syz [ 954.073176][ T43] usb 6-1: SerialNumber: syz [ 954.094109][ T43] hub 6-1:250.228: bad descriptor, ignoring hub [ 954.101310][ T43] hub 6-1:250.228: probe with driver hub failed with error -5 [ 954.294841][ T43] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 954.381974][T24092] bond7 (unregistering): Released all slaves [ 955.735893][T24118] FAULT_INJECTION: forcing a failure. [ 955.735893][T24118] name failslab, interval 1, probability 0, space 0, times 0 [ 955.749468][ T5928] usb 6-1: USB disconnect, device number 6 [ 955.760113][ T5936] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 955.768878][ T5928] usblp0: removed [ 955.772759][T24118] CPU: 1 UID: 0 PID: 24118 Comm: syz.5.2692 Not tainted syzkaller #0 PREEMPT(full) [ 955.772783][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 955.772794][T24118] Call Trace: [ 955.772801][T24118] [ 955.772809][T24118] dump_stack_lvl+0x189/0x250 [ 955.772835][T24118] ? __pfx____ratelimit+0x10/0x10 [ 955.772855][T24118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 955.772872][T24118] ? __pfx__printk+0x10/0x10 [ 955.772890][T24118] ? genl_rcv+0x28/0x40 [ 955.772910][T24118] ? ____sys_sendmsg+0x505/0x830 [ 955.772930][T24118] ? __x64_sys_sendmsg+0x19b/0x260 [ 955.772962][T24118] should_fail_ex+0x414/0x560 [ 955.772990][T24118] should_failslab+0xa8/0x100 [ 955.773017][T24118] kmem_cache_alloc_noprof+0x73/0x3c0 [ 955.773038][T24118] ? skb_clone+0x212/0x3a0 [ 955.773060][T24118] skb_clone+0x212/0x3a0 [ 955.773083][T24118] __netlink_deliver_tap+0x404/0x850 [ 955.773112][T24118] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.773132][T24118] netlink_deliver_tap+0x19c/0x1b0 [ 955.773152][T24118] netlink_sendskb+0x68/0x140 [ 955.773178][T24118] netlink_unicast+0x397/0x9e0 [ 955.773199][T24118] ? __asan_memcpy+0x40/0x70 [ 955.773232][T24118] ? __pfx_netlink_unicast+0x10/0x10 [ 955.773266][T24118] netlink_rcv_skb+0x28c/0x470 [ 955.773283][T24118] ? __lock_acquire+0xab9/0xd20 [ 955.773306][T24118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 955.773329][T24118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 955.773366][T24118] ? down_read+0x1ad/0x2e0 [ 955.773390][T24118] genl_rcv+0x28/0x40 [ 955.773409][T24118] netlink_unicast+0x82c/0x9e0 [ 955.773440][T24118] ? __pfx_netlink_unicast+0x10/0x10 [ 955.773465][T24118] ? netlink_sendmsg+0x642/0xb30 [ 955.773481][T24118] ? skb_put+0x11b/0x210 [ 955.773504][T24118] netlink_sendmsg+0x805/0xb30 [ 955.773531][T24118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.773551][T24118] ? aa_sock_msg_perm+0xf1/0x1d0 [ 955.773570][T24118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.773587][T24118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.773605][T24118] __sock_sendmsg+0x21c/0x270 [ 955.773631][T24118] ____sys_sendmsg+0x505/0x830 [ 955.773659][T24118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.773689][T24118] ? import_iovec+0x74/0xa0 [ 955.773719][T24118] ___sys_sendmsg+0x21f/0x2a0 [ 955.773743][T24118] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.773801][T24118] ? __fget_files+0x2a/0x420 [ 955.773814][T24118] ? __fget_files+0x3a0/0x420 [ 955.773840][T24118] __x64_sys_sendmsg+0x19b/0x260 [ 955.773862][T24118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.773893][T24118] ? __pfx_ksys_write+0x10/0x10 [ 955.773913][T24118] ? rcu_is_watching+0x15/0xb0 [ 955.773936][T24118] ? do_syscall_64+0xbe/0x3b0 [ 955.773959][T24118] do_syscall_64+0xfa/0x3b0 [ 955.773976][T24118] ? lockdep_hardirqs_on+0x9c/0x150 [ 955.773994][T24118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.774010][T24118] ? clear_bhb_loop+0x60/0xb0 [ 955.774029][T24118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.774046][T24118] RIP: 0033:0x7faa3318ec29 [ 955.774062][T24118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.774077][T24118] RSP: 002b:00007faa34004038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.774097][T24118] RAX: ffffffffffffffda RBX: 00007faa333d5fa0 RCX: 00007faa3318ec29 [ 955.774110][T24118] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 955.774122][T24118] RBP: 00007faa34004090 R08: 0000000000000000 R09: 0000000000000000 [ 955.774133][T24118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 955.774145][T24118] R13: 00007faa333d6038 R14: 00007faa333d5fa0 R15: 00007faa334ffa28 [ 955.774173][T24118] [ 956.213207][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2693'. [ 956.276581][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.287272][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.338501][ T5936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 956.564159][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 956.604421][ T5936] usb 2-1: SerialNumber: syz [ 956.707340][T24132] bond6 (unregistering): Released all slaves [ 956.837665][T24105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 956.995981][ T5936] usb 2-1: 0:2 : does not exist [ 957.056798][ T5936] usb 2-1: USB disconnect, device number 10 [ 957.130017][T14447] udevd[14447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.219647][T24139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2697'. [ 957.534169][T18041] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 957.689784][T18041] usb 6-1: Using ep0 maxpacket: 8 [ 957.731222][T18041] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 957.749551][T18041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.760274][T18041] usb 6-1: Product: syz [ 957.769389][T18041] usb 6-1: Manufacturer: syz [ 957.776970][T18041] usb 6-1: SerialNumber: syz [ 957.798496][T18041] usb 6-1: config 0 descriptor?? [ 957.807618][T18041] gspca_main: se401-2.14.0 probing 047d:5003 [ 958.129052][ C0] vkms_vblank_simulate: vblank timer overrun [ 958.414025][T18041] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 959.262553][T18041] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 959.274681][T18041] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 959.297551][T18041] usb 6-1: USB disconnect, device number 7 [ 960.008789][T24193] geneve2: entered promiscuous mode [ 961.304203][T24212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 961.315125][T24212] team0: Port device bond5 added [ 962.764956][T12253] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 962.935813][T12253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.963242][T12253] usb 1-1: config 0 has no interfaces? [ 962.987098][T12253] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 963.202220][T12253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.237382][T12253] usb 1-1: config 0 descriptor?? [ 964.045599][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 964.057146][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.067401][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.077701][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.087255][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.125563][T11293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.157551][T11293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.200541][T11293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 964.363092][T11293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.376741][T24250] loop6: detected capacity change from 0 to 7 [ 964.389651][T11293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.389693][T24250] Dev loop6: unable to read RDB block 7 [ 964.401757][T11293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 964.424348][T24250] loop6: unable to read partition table [ 964.432976][T24250] loop6: partition table beyond EOD, truncated [ 964.448624][T24250] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 964.518279][T11293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.548255][T11293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.578646][T11293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 964.680021][T11293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.712231][T11293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.742956][T11293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 965.149699][T24263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 965.167740][T24263] team0: Port device bond6 added [ 965.203443][T11293] bridge_slave_1: left allmulticast mode [ 965.210969][T11293] bridge_slave_1: left promiscuous mode [ 965.226949][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.237279][T11293] bridge_slave_0: left allmulticast mode [ 965.242951][T11293] bridge_slave_0: left promiscuous mode [ 965.254926][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.424477][T12253] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 965.478967][ T5928] usb 1-1: USB disconnect, device number 12 [ 965.566506][T12253] usb 6-1: device descriptor read/64, error -71 [ 965.826487][T24276] loop6: detected capacity change from 0 to 7 [ 965.860139][T24276] Dev loop6: unable to read RDB block 7 [ 965.863998][T12253] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 965.876502][T24276] loop6: unable to read partition table [ 965.903526][T24276] loop6: partition table beyond EOD, truncated [ 965.918314][T24276] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 966.004005][T12253] usb 6-1: device descriptor read/64, error -71 [ 966.114343][T12253] usb usb6-port1: attempt power cycle [ 966.144804][T13905] Bluetooth: hci1: command tx timeout [ 966.456732][T12253] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 966.717548][T12253] usb 6-1: device descriptor read/8, error -71 [ 966.953973][T12253] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 966.973277][T11293] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 967.014645][T12253] usb 6-1: device descriptor read/8, error -71 [ 967.178293][T12253] usb usb6-port1: unable to enumerate USB device [ 967.762689][T11293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.776780][T11293] bond0 (unregistering): Released all slaves [ 967.987086][T24298] program syz.3.2746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 968.037919][ T30] audit: type=1326 audit(1758506892.685:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.0.2747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbee838ec29 code=0x0 [ 968.131795][T11293] bond1 (unregistering): Released all slaves [ 968.231176][T13905] Bluetooth: hci1: command tx timeout [ 968.416414][T11293] team0: Port device bond2 removed [ 968.424766][T11293] bond2 (unregistering): Released all slaves [ 968.553910][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 968.670272][T11293] bond3 (unregistering): Released all slaves [ 968.696320][T11293] bond4 (unregistering): Released all slaves [ 968.708368][T24307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2750'. [ 968.744852][ T43] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 968.756648][ T43] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 968.769356][ T43] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 968.779405][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.035017][T11293] bond5 (unregistering): Released all slaves [ 969.044032][ T5928] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 969.193951][ T5928] usb 1-1: device descriptor read/64, error -71 [ 969.306867][T11293] team0: Port device bond6 removed [ 969.316130][T11293] bond6 (unregistering): Released all slaves [ 969.357577][T24247] chnl_net:caif_netlink_parms(): no params data found [ 969.435750][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 969.474556][T11293] tipc: Left network mode [ 969.583998][ T5928] usb 1-1: device descriptor read/64, error -71 [ 969.694499][ T5928] usb usb1-port1: attempt power cycle [ 970.000924][T24247] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.012098][T24247] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.023567][T24247] bridge_slave_0: entered allmulticast mode [ 970.038890][T24247] bridge_slave_0: entered promiscuous mode [ 970.073355][T24247] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.092559][T24247] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.109633][T24247] bridge_slave_1: entered allmulticast mode [ 970.119592][T24247] bridge_slave_1: entered promiscuous mode [ 970.147595][ T5928] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 970.206792][ T5928] usb 1-1: device descriptor read/8, error -71 [ 970.219542][T11293] hsr_slave_0: left promiscuous mode [ 970.238514][T11293] hsr_slave_1: left promiscuous mode [ 970.254719][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.266416][T11293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.306763][T13905] Bluetooth: hci1: command tx timeout [ 970.320844][T11293] veth1_macvtap: left promiscuous mode [ 970.339705][T11293] veth0_macvtap: left promiscuous mode [ 970.357717][T11293] veth1_vlan: left promiscuous mode [ 970.370989][T11293] veth0_vlan: left promiscuous mode [ 970.558862][ T5928] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 970.605116][ T5928] usb 1-1: device descriptor read/8, error -71 [ 970.716513][ T5928] usb usb1-port1: unable to enumerate USB device [ 971.064185][T24335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2754'. [ 971.277898][ T5949] usb 6-1: USB disconnect, device number 12 [ 971.429324][T11293] team0 (unregistering): Port device team_slave_1 removed [ 972.335149][T11293] team0 (unregistering): Port device team_slave_0 removed [ 972.386345][T13905] Bluetooth: hci1: command tx timeout [ 972.521441][T24347] loop6: detected capacity change from 0 to 7 [ 972.530422][T24347] Dev loop6: unable to read RDB block 7 [ 972.542823][T24347] loop6: unable to read partition table [ 972.549194][T24347] loop6: partition table beyond EOD, truncated [ 972.591569][T24347] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 972.643983][ T5949] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 972.813946][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 972.820976][ T5949] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 972.844217][ T5949] usb 1-1: config 0 has no interface number 0 [ 972.850360][ T5949] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.873738][ T5949] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 972.927007][ T5949] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 972.939535][ T5949] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 972.952992][ T5949] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 972.962119][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.980593][ T5949] usb 1-1: config 0 descriptor?? [ 973.020325][ T5949] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 973.360581][T24247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.392022][ T5936] usb 1-1: USB disconnect, device number 17 [ 973.413073][ T5936] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 973.486039][T24247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.609630][T24247] team0: Port device team_slave_0 added [ 973.635497][T24247] team0: Port device team_slave_1 added [ 973.809862][T11293] IPVS: stop unused estimator thread 0... [ 973.818043][T24247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.839973][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.865925][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.972360][T24247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.029060][T24247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.039192][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.079711][T24247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.289037][T24247] hsr_slave_0: entered promiscuous mode [ 974.307870][T24247] hsr_slave_1: entered promiscuous mode [ 974.652711][T24381] netlink: 'syz.5.2764': attribute type 28 has an invalid length. [ 975.867819][T24247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 975.889783][T24247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 975.933220][T24247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 975.985231][T24247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 976.039826][T24403] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2767'. [ 976.368842][T24247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.908929][T24247] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.958768][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.965899][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.001109][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.008264][T11293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.122837][T24420] loop6: detected capacity change from 0 to 7 [ 977.144641][T24420] Dev loop6: unable to read RDB block 7 [ 977.153384][T24420] loop6: unable to read partition table [ 977.164217][T24420] loop6: partition table beyond EOD, truncated [ 977.193623][T24420] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 977.361952][T24247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.585263][T24247] veth0_vlan: entered promiscuous mode [ 977.611263][T24433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2771'. [ 977.667598][T24247] veth1_vlan: entered promiscuous mode [ 977.727389][T24247] veth0_macvtap: entered promiscuous mode [ 977.740154][T24247] veth1_macvtap: entered promiscuous mode [ 977.775090][T24247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.822119][T24247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.861722][T11293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.896821][T11293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.941180][T11293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.966121][T11293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.994320][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 978.117233][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.149280][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.151710][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 978.184365][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.212716][ T43] usb 1-1: Product: syz [ 978.238976][ T43] usb 1-1: Manufacturer: syz [ 978.252581][ T43] usb 1-1: SerialNumber: syz [ 978.265757][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.278775][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 978.299887][T24271] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 978.338264][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.859956][T24435] veth3: entered promiscuous mode [ 978.932055][T24436] team0: Device gtp0 is of different type [ 979.388751][ T5936] usb 1-1: USB disconnect, device number 18 [ 979.586795][T24271] usb 1-1: Service connection timeout for: 256 [ 979.594048][T24271] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 979.608241][T24271] ath9k_htc: Failed to initialize the device [ 979.738453][ T5936] usb 1-1: ath9k_htc: USB layer deinitialized [ 979.923952][T12072] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 980.003190][T24492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2782'. [ 980.213348][T12072] usb 2-1: Using ep0 maxpacket: 16 [ 980.362501][T12072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.391868][T12072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.412139][T12072] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 980.435927][T12072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.483000][T12072] usb 2-1: config 0 descriptor?? [ 980.504173][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 980.667140][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.686619][ T43] usb 1-1: config 0 has no interfaces? [ 980.701891][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 980.729633][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.773348][ T43] usb 1-1: config 0 descriptor?? [ 980.932634][T12072] hid-multitouch 0003:1FD2:6007.0032: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 981.130510][ T43] usb 2-1: USB disconnect, device number 11 [ 981.578451][T24525] geneve3: entered promiscuous mode [ 981.584401][T24525] geneve3: entered allmulticast mode [ 981.628558][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 982.352545][T24542] fuse: Bad value for 'group_id' [ 982.361186][T24542] fuse: Bad value for 'group_id' [ 982.738993][ T979] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 982.755126][ T43] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 982.892087][ T979] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 982.945907][ T43] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 982.966302][ T979] usb 4-1: USB disconnect, device number 112 [ 982.972506][ T43] usb 2-1: config 0 has no interface number 0 [ 983.014953][ T43] usb 2-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 983.050929][ T43] usb 2-1: config 0 interface 81 has no altsetting 0 [ 983.083972][ T43] usb 2-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 983.104246][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.125082][ T43] usb 2-1: Product: syz [ 983.139944][ T43] usb 2-1: Manufacturer: syz [ 983.207520][ T43] usb 2-1: SerialNumber: syz [ 983.249259][T12072] usb 1-1: USB disconnect, device number 19 [ 983.625998][ T43] usb 2-1: config 0 descriptor?? [ 983.764425][T24547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.988240][ T43] HFC-S_USB 2-1:0.81: probe with driver HFC-S_USB failed with error -5 [ 984.041543][ T43] usb 2-1: USB disconnect, device number 12 [ 984.424003][T12072] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 984.617722][T12072] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.644658][T12072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.665525][T24569] fuse: Bad value for 'fd' [ 984.675519][T12072] usb 6-1: config 0 descriptor?? [ 984.713718][T12072] cp210x 6-1:0.0: cp210x converter detected [ 984.784661][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 984.927453][T12072] usb 6-1: cp210x converter now attached to ttyUSB0 [ 985.119194][T24271] usb 6-1: USB disconnect, device number 13 [ 985.130905][T24271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 985.172933][T24271] cp210x 6-1:0.0: device disconnected [ 986.456070][T24606] fuse: Bad value for 'fd' [ 986.463170][T24606] netlink: 'syz.3.2799': attribute type 5 has an invalid length. [ 986.524001][T18041] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 986.843017][T18041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.863657][T18041] usb 2-1: config 0 has no interfaces? [ 986.877644][T18041] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 986.941380][T18041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.980173][T18041] usb 2-1: config 0 descriptor?? [ 988.098062][T24620] loop6: detected capacity change from 0 to 7 [ 988.162649][T24620] Dev loop6: unable to read RDB block 7 [ 988.176946][T24620] loop6: AHDI p2 p3 [ 988.187509][T24620] loop6: partition table partially beyond EOD, truncated [ 988.209302][T24620] loop6: p2 size 46 extends beyond EOD, truncated [ 988.337467][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 988.632503][T24636] loop8: detected capacity change from 0 to 8 [ 988.640774][T24636] Dev loop8: unable to read RDB block 8 [ 988.647455][T24636] loop8: unable to read partition table [ 988.653667][T24636] loop8: partition table beyond EOD, truncated [ 988.673767][T24636] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 988.673859][ T5973] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 988.845489][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.854225][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 988.857787][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.894134][ T5973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 988.915406][ T5973] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.933867][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.965273][ T5973] usb 4-1: config 0 descriptor?? [ 989.013903][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 989.021091][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.042207][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.053146][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 989.068719][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 989.081259][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.098482][ T43] usb 1-1: config 0 descriptor?? [ 989.181696][T18041] usb 2-1: USB disconnect, device number 13 [ 989.447072][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 989.542769][T24646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.552093][T24646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.932076][ T43] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 990.001922][ T43] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 990.013888][ T43] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 990.130285][ T5973] usbhid 4-1:0.0: can't add hid device: -71 [ 990.149733][ T5973] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 990.183112][ T5973] usb 4-1: USB disconnect, device number 113 [ 990.211887][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0033/input/input54 [ 990.335321][ T43] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 990.469965][ T43] usb 1-1: USB disconnect, device number 20 [ 991.187736][T24666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.197147][T24666] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.331019][T24666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.461893][T24668] vim2m vim2m.0: vidioc_s_fmt queue busy [ 991.635103][T24672] macvlan0: entered promiscuous mode [ 991.683003][T24672] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 991.712983][T24672] netlink: 'syz.0.2823': attribute type 2 has an invalid length. [ 992.299222][T24682] loop8: detected capacity change from 0 to 8 [ 992.310256][T11080] Dev loop8: unable to read RDB block 8 [ 992.318879][T11080] loop8: unable to read partition table [ 992.325926][T11080] loop8: partition table beyond EOD, truncated [ 992.344457][T24682] Dev loop8: unable to read RDB block 8 [ 992.351375][T24682] loop8: unable to read partition table [ 992.360577][T24682] loop8: partition table beyond EOD, truncated [ 992.372789][T24682] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 992.542446][T12072] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 992.715523][T12072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.729548][T12072] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 992.759738][T12072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 992.775951][T12072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 992.792242][T12072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 992.805802][T12072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 992.820829][T12072] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.838363][T12072] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 992.848067][T12072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.864051][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 992.882182][T12072] usb 1-1: Product: syz [ 992.892517][T12072] usb 1-1: Manufacturer: syz [ 992.902694][T12072] usb 1-1: SerialNumber: syz [ 992.912876][T12072] usb 1-1: config 0 descriptor?? [ 992.949124][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.951636][T24680] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 992.955613][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.986134][T12072] ati_remote 1-1:0.0: Initializing ati_remote hardware failed. [ 993.022221][T12072] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5 [ 993.038980][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.052470][ T43] usb 6-1: config 0 has no interfaces? [ 993.065643][ T43] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 993.083394][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.132887][ T43] usb 6-1: config 0 descriptor?? [ 993.190833][ T5973] usb 1-1: USB disconnect, device number 21 [ 993.218920][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2831'. [ 993.414054][T12072] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 993.474010][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 993.565838][T12072] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 993.576481][T12072] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 993.586342][T12072] usb 4-1: config 220 interface 0 has no altsetting 0 [ 993.599765][T12072] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 993.609287][T12072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.617738][T12072] usb 4-1: Product: syz [ 993.621925][T12072] usb 4-1: Manufacturer: syz [ 993.626593][T12072] usb 4-1: SerialNumber: syz [ 993.638491][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 993.648428][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 993.660124][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 993.671590][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 993.687178][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 993.696521][ T43] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 993.715884][ T43] usb 2-1: Manufacturer: syz [ 993.723347][ T43] usb 2-1: config 0 descriptor?? [ 993.739054][T24692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 993.753093][ T43] smsusb:smsusb_probe: board id=9, interface number 0 [ 993.770333][ T43] smsusb:siano_media_device_register: media controller created [ 993.781998][ T43] usb 2-1: BOGUS urb xfer, pipe 3 != type 1 [ 993.788597][ T43] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 993.799863][ T43] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 993.810669][ T43] ------------[ cut here ]------------ [ 993.816519][ T43] WARNING: CPU: 1 PID: 43 at mm/slub.c:4805 free_large_kmalloc+0x15c/0x1f0 [ 993.825250][ T43] Modules linked in: [ 993.829592][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 993.839842][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.850094][ T43] Workqueue: usb_hub_wq hub_event [ 993.855224][ T43] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 993.861149][ T43] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 6b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 6b 88 10 48 3b 44 24 08 75 32 48 89 df 48 [ 993.880920][ T43] RSP: 0018:ffffc90000b36b00 EFLAGS: 00010206 [ 993.887124][ T43] RAX: 00000000ff000000 RBX: ffffea00014f5880 RCX: 0000000000000000 [ 993.890363][T24691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.895164][ T43] RDX: ffffc90019835000 RSI: ffff888053d62000 RDI: ffffea00014f5880 [ 993.895233][ T43] RBP: 0000000000000100 R08: ffff88805a599003 R09: 1ffff1100b4b3200 [ 993.895243][ T43] R10: dffffc0000000000 R11: ffffed100b4b3201 R12: 1ffff11006650e82 [ 993.895252][ T43] R13: 0000000000000000 R14: ffff88805a599060 R15: dffffc0000000000 [ 993.895261][ T43] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 993.895270][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.895282][ T43] CR2: 00007fbee85cab38 CR3: 0000000029194000 CR4: 00000000003526f0 [ 993.895306][ T43] DR0: 0000000000000000 DR1: 0000000000036800 DR2: 0000000000009951 [ 993.895318][ T43] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 993.895331][ T43] Call Trace: [ 993.895341][ T43] [ 993.895358][ T43] usb_free_urb+0xd0/0x120 [ 993.895388][ T43] smsusb_term_device+0x1d6/0x3b0 [ 993.895421][ T43] smsusb_probe+0x1a04/0x2060 [ 993.895476][ T43] ? __pfx_smsusb_probe+0x10/0x10 [ 993.895507][ T43] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 993.895531][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 993.895556][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 993.895590][ T43] ? __pm_runtime_set_status+0x785/0xa50 [ 993.918000][T24691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.920251][ T43] usb_probe_interface+0x668/0xc30 [ 993.949140][T24691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.952286][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 993.952316][ T43] really_probe+0x26a/0x9e0 [ 994.057337][ T43] __driver_probe_device+0x18c/0x2f0 [ 994.062672][ T43] driver_probe_device+0x4f/0x430 [ 994.068032][ T43] __device_attach_driver+0x2ce/0x530 [ 994.073738][ T43] bus_for_each_drv+0x251/0x2e0 [ 994.078661][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 994.081914][T24691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.084717][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 994.097871][ T43] __device_attach+0x2b8/0x400 [ 994.102693][ T43] ? __pfx___device_attach+0x10/0x10 [ 994.108059][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 994.113296][ T43] bus_probe_device+0x185/0x260 [ 994.118262][ T43] device_add+0x7b6/0xb50 [ 994.122624][ T43] usb_set_configuration+0x1a87/0x20e0 [ 994.128629][ T43] usb_generic_driver_probe+0x8d/0x150 [ 994.134148][ T43] usb_probe_device+0x1c4/0x390 [ 994.139081][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 994.144639][ T43] really_probe+0x26a/0x9e0 [ 994.149187][ T43] __driver_probe_device+0x18c/0x2f0 [ 994.154607][ T43] driver_probe_device+0x4f/0x430 [ 994.159664][ T43] __device_attach_driver+0x2ce/0x530 [ 994.165137][ T43] bus_for_each_drv+0x251/0x2e0 [ 994.170009][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 994.175994][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 994.181412][ T43] __device_attach+0x2b8/0x400 [ 994.186405][ T43] ? __pfx___device_attach+0x10/0x10 [ 994.188533][T12072] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 994.191807][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 994.205358][ T43] bus_probe_device+0x185/0x260 [ 994.210247][ T43] device_add+0x7b6/0xb50 [ 994.214667][ T43] usb_new_device+0xa39/0x16f0 [ 994.219471][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 994.224757][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.230049][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.235308][ T43] hub_event+0x2958/0x4a20 [ 994.239819][ T43] ? __pfx_hub_event+0x10/0x10 [ 994.244672][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.250420][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.255788][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.261616][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.262687][T12072] usb 4-1: USB disconnect, device number 114 [ 994.267437][ T43] process_scheduled_works+0xae1/0x17b0 [ 994.267496][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 994.267535][ T43] worker_thread+0x8a0/0xda0 [ 994.267585][ T43] kthread+0x70e/0x8a0 [ 994.267613][ T43] ? __pfx_worker_thread+0x10/0x10 [ 994.267632][ T43] ? __pfx_kthread+0x10/0x10 [ 994.267654][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.308920][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.314177][ T43] ? __pfx_kthread+0x10/0x10 [ 994.318798][ T43] ret_from_fork+0x439/0x7d0 [ 994.323432][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 994.328627][ T43] ? __switch_to_asm+0x39/0x70 [ 994.333413][ T43] ? __switch_to_asm+0x33/0x70 [ 994.338275][ T43] ? __pfx_kthread+0x10/0x10 [ 994.342886][ T43] ret_from_fork_asm+0x1a/0x30 [ 994.347850][ T43] [ 994.350886][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 994.358188][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 994.367392][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 994.377458][ T43] Workqueue: usb_hub_wq hub_event [ 994.382520][ T43] Call Trace: [ 994.385813][ T43] [ 994.388758][ T43] dump_stack_lvl+0x99/0x250 [ 994.393367][ T43] ? __asan_memcpy+0x40/0x70 [ 994.397972][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.403209][ T43] ? __pfx__printk+0x10/0x10 [ 994.407822][ T43] vpanic+0x281/0x750 [ 994.411818][ T43] ? __pfx__printk+0x10/0x10 [ 994.416403][ T43] ? __pfx_vpanic+0x10/0x10 [ 994.420896][ T43] ? is_bpf_text_address+0x26/0x2b0 [ 994.426139][ T43] panic+0xb9/0xc0 [ 994.429854][ T43] ? __pfx_panic+0x10/0x10 [ 994.434275][ T43] __warn+0x31b/0x4b0 [ 994.438249][ T43] ? free_large_kmalloc+0x15c/0x1f0 [ 994.443463][ T43] ? free_large_kmalloc+0x15c/0x1f0 [ 994.448651][ T43] report_bug+0x2be/0x4f0 [ 994.452970][ T43] ? free_large_kmalloc+0x15c/0x1f0 [ 994.458175][ T43] ? free_large_kmalloc+0x15c/0x1f0 [ 994.463365][ T43] ? free_large_kmalloc+0x15e/0x1f0 [ 994.468555][ T43] handle_bug+0x84/0x160 [ 994.472796][ T43] exc_invalid_op+0x1a/0x50 [ 994.477290][ T43] asm_exc_invalid_op+0x1a/0x20 [ 994.482132][ T43] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 994.488050][ T43] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 6b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 6b 88 10 48 3b 44 24 08 75 32 48 89 df 48 [ 994.507674][ T43] RSP: 0018:ffffc90000b36b00 EFLAGS: 00010206 [ 994.513766][ T43] RAX: 00000000ff000000 RBX: ffffea00014f5880 RCX: 0000000000000000 [ 994.521748][ T43] RDX: ffffc90019835000 RSI: ffff888053d62000 RDI: ffffea00014f5880 [ 994.529716][ T43] RBP: 0000000000000100 R08: ffff88805a599003 R09: 1ffff1100b4b3200 [ 994.537677][ T43] R10: dffffc0000000000 R11: ffffed100b4b3201 R12: 1ffff11006650e82 [ 994.545638][ T43] R13: 0000000000000000 R14: ffff88805a599060 R15: dffffc0000000000 [ 994.553709][ T43] usb_free_urb+0xd0/0x120 [ 994.558127][ T43] smsusb_term_device+0x1d6/0x3b0 [ 994.563175][ T43] smsusb_probe+0x1a04/0x2060 [ 994.567946][ T43] ? __pfx_smsusb_probe+0x10/0x10 [ 994.573062][ T43] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 994.578617][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 994.584510][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 994.590842][ T43] ? __pm_runtime_set_status+0x785/0xa50 [ 994.596503][ T43] usb_probe_interface+0x668/0xc30 [ 994.601615][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 994.607234][ T43] really_probe+0x26a/0x9e0 [ 994.611757][ T43] __driver_probe_device+0x18c/0x2f0 [ 994.617132][ T43] driver_probe_device+0x4f/0x430 [ 994.622150][ T43] __device_attach_driver+0x2ce/0x530 [ 994.627514][ T43] bus_for_each_drv+0x251/0x2e0 [ 994.632365][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 994.638266][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 994.643636][ T43] __device_attach+0x2b8/0x400 [ 994.648829][ T43] ? __pfx___device_attach+0x10/0x10 [ 994.654108][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 994.659305][ T43] bus_probe_device+0x185/0x260 [ 994.664154][ T43] device_add+0x7b6/0xb50 [ 994.668479][ T43] usb_set_configuration+0x1a87/0x20e0 [ 994.673973][ T43] usb_generic_driver_probe+0x8d/0x150 [ 994.679441][ T43] usb_probe_device+0x1c4/0x390 [ 994.684293][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 994.689668][ T43] really_probe+0x26a/0x9e0 [ 994.694173][ T43] __driver_probe_device+0x18c/0x2f0 [ 994.699452][ T43] driver_probe_device+0x4f/0x430 [ 994.704478][ T43] __device_attach_driver+0x2ce/0x530 [ 994.709853][ T43] bus_for_each_drv+0x251/0x2e0 [ 994.714691][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 994.720674][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 994.726151][ T43] __device_attach+0x2b8/0x400 [ 994.730947][ T43] ? __pfx___device_attach+0x10/0x10 [ 994.736251][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 994.741544][ T43] bus_probe_device+0x185/0x260 [ 994.746417][ T43] device_add+0x7b6/0xb50 [ 994.750855][ T43] usb_new_device+0xa39/0x16f0 [ 994.755636][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 994.760852][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.766073][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.771292][ T43] hub_event+0x2958/0x4a20 [ 994.775755][ T43] ? __pfx_hub_event+0x10/0x10 [ 994.780524][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.786256][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.791485][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.797194][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 994.802909][ T43] process_scheduled_works+0xae1/0x17b0 [ 994.808470][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 994.814469][ T43] worker_thread+0x8a0/0xda0 [ 994.819080][ T43] kthread+0x70e/0x8a0 [ 994.823146][ T43] ? __pfx_worker_thread+0x10/0x10 [ 994.828247][ T43] ? __pfx_kthread+0x10/0x10 [ 994.832915][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 994.838112][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.843313][ T43] ? __pfx_kthread+0x10/0x10 [ 994.847918][ T43] ret_from_fork+0x439/0x7d0 [ 994.852525][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 994.857723][ T43] ? __switch_to_asm+0x39/0x70 [ 994.862488][ T43] ? __switch_to_asm+0x33/0x70 [ 994.867240][ T43] ? __pfx_kthread+0x10/0x10 [ 994.871824][ T43] ret_from_fork_asm+0x1a/0x30 [ 994.876592][ T43] [ 994.879753][ T43] Kernel Offset: disabled [ 994.884058][ T43] Rebooting in 86400 seconds..