last executing test programs: 10.014875058s ago: executing program 2 (id=3584): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$binfmt_elf32(r3, 0x0, 0x58) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8}, 0x48) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)}]) dup3(r0, r1, 0x0) 9.624178534s ago: executing program 2 (id=3588): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0x40405514, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) syz_open_dev$video4linux(0x0, 0x46f, 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x41000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x7ffd, 0x2a84, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xf}, 0x48) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="100100000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00028005000100000000003c0002800c00028005000100000000002c00018014000300fc0200000000000000000000000000001400040000000000000000000000000000000001080007400000000004001640060012400002"], 0x110}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002dbd0600fddbdf250200000008000b010300000005005900af00000008f168000700000008000b01b60b0000080026006c0900000500590005000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0xa, @string={0xa, 0x3, "3b1100cd86490e26"}}, 0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r8, 0xde34) mmap(&(0x7f0000648000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r7, 0x98ca4000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0x400448c9, &(0x7f0000001040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.880089659s ago: executing program 1 (id=3608): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r12 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) fsmount(r12, 0x0, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70e00000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@ocfs2={0xc, 0x1, {0x2}}, 0x10441) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r6, 0xc2c, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x64) 7.800193791s ago: executing program 1 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = io_uring_setup(0x7fe7, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{}, {0x8}, @device_b, @device_b}, 0x1000, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x6, 0x0, {0x6df, 0xff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x101, 0x5}}, @void, @void, @val={0x76, 0x6, {0x2, 0x10, 0x1b, 0x2}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4005}, 0x0) io_uring_enter(r2, 0x0, 0xe257, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000), 0xffe000) r8 = syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x0, 0x20000070], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x2}, {}]}, 0x108) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@generic="d96e6c"]}, 0x14}, {0x0}], 0x2}, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r14, 0x0, 0x0) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r16 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r15, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r16}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.61143838s ago: executing program 2 (id=3612): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0x4f2c, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 6.95550874s ago: executing program 1 (id=3615): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000c000180080001", @ANYRES32=r5, @ANYBLOB="0500050007000000050003"], 0x30}}, 0x0) r7 = syz_usbip_server_init(0x4) sendfile(r7, r0, &(0x7f0000000200)=0x1, 0x5e53) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x4800) 6.848617644s ago: executing program 2 (id=3617): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000001000)=""/102383, 0x18fef}], 0x1, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r3, 0x19f23}], 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x180002, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000001700)=0x7, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0003040001020403012c"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000000)={0x0, 0xd6, 0xde}) syz_usb_control_io(r5, &(0x7f0000000980)={0x18, &(0x7f0000000800)={0x0, 0x2, 0x13, {0x13, 0x23, "06f3571f23742af41942c3fdfcc025ad3e"}}, &(0x7f0000000840)={0x0, 0x3, 0x26, @string={0x26, 0x3, "74d4b3e2e95766124b9692c913f535281ade0b665192e7b310439a6c07a2ee6bfa2a88d2"}}, &(0x7f00000007c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0xff, 0xe5, "a290387c", "b62175c3"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x80, 0x40, 0xe, 0x3, 0x4}}}, &(0x7f0000000e40)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="000f9b000000b1a160b3462bd52becd1d6f36b0fd354f32994a23bc65f9430cf5fe830568df6342b6edcd0c273da2ce4d9e0740e107caa8911957b0e1dc4860c04623ac18af78c7dfc8a681da45a6c44334be6900115c1261642c2a38cf8ab7d06b584e21d9145244ed387c92ed3337f1c560e6acc128fca9d362e8d8aaaae4b9d04b3c92b861cd2b20bbfd41e069156774e2803a3ddb421280caa6e4b07c6c714"], &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f40)=ANY=[@ANYBLOB="20220800000020000000f000000099a6bf4ff1b0d6f286adc068db0425bdb4999eb753c10971c35a495d72ad455e570b98b82b51dd99af9e57569e0d56b7c9ada4877174e4dca6a74f022a267b35b67587feaf7ca532e2038bb910ba267adfa09d9a9c97432ca9fd3b49e2a8893e67caa192bf4e737254dd5f3a88c816ac"], &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "b95b"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "3aa0"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6c}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r5, &(0x7f0000000280)={0x18, &(0x7f000001a000)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f2f000000050f2f00050710020a120600bfde95be97ee664602000b140100e80004e2ac000000000000"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x18, 0x89, 0x1, "0300", "2b0388f8"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x4, 0x6, 0x4, 0x40, 0x6}}}, &(0x7f0000000740)={0xa7, &(0x7f000001a140)=ANY=[@ANYBLOB="2016780000008eab9c4ae804a6d44c49475650a36e1d15dad952b2b797977a1625c086bb00eb23d8a7c03272e61fe65fe4325423f6864a869d3f6418d6b19ee5de6d1464e1e134eb43e62b665449c52fd3784beef97a6c5944c67fdeddc2a47af6cf9a659653f4d86af3fc298d305bb244d6acb9ce7a0c66da449dafffb6b0ef03a41349bbb5f5613dc16957e7e693e06d731945480e59d598bf1e58d2e670b33aca5cbfd21265a8146710c09e23da2fe7dd772a8cea210efd50112b588f9fa0815dc4a47e7ea266de8aefe2b3ac7460e2d5edaaaa085a41563e0ff8ad10177931"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x14f}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "63bb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "f8a7"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x83}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="0c56bf6bb3baf02b9ab7fde676f32526c03ed51491838f438732f864b706a20873df4f29fe53dc049184abafc2bb563443641ed267b894e93a76cd0eb595a681ed40163d4319a0c1d4b2f1af412c1ad92e46192ba8f13ab88700785295acbfd5f0b7a29d66c035eb3f01570ffa6903253657c28df41f50564f9175a5bea19102876c3b9e1b30c5acfc500d6da1220831690f25857fd4d2c79229340d83b7cbba0cb5e4153fca7c66ea4b183e1dbd4c685d589a370b56a57d77b752615acd39aec11482fb74b3e4036e668df39b11e550a457e8fa7fd159dc81f3645c1c0b606d916cec0813b36b142509fcf96769331076f51dc9026cc5d5b50095fc876ba9e6350c158d3340795c03948bb00c8cd0407e67c90f125cae9050161392054026b20dcaa58896be95396a5c321e672065e49da32910e83b701f58cd776a64cfec5f26d48f5e43f451b66caeeccf3a90021611b6f006c76a40b66698b942ddec29d26a60eb01cdcc3fe8f34da7698b70d576591580e6f88b5a1f581d7835a10f598b4ade50f5a0d425d8235de898287d691cbe6770786172701a71df35331ecb2940f54e9c845fe3ef766d8ff5b89851d7ea3e2a5c9fa6ad1d387c43dc5e9c6fdcf8ceb6f2e0b2a6f8548c9c2104027c7f71692a671289a3e54562ebdc13a6230184e06e5d08685620d017ca7e870daeb3bee4fa2518dedd3db53c0e159624d7804bda3924495a0252fa5c8b04f5e493cb56551df3c36e71686c462c0259f0e49e849bd303382c1bfad5cdaf8e3fe96517c82e73145741f62b3beb95d733bdea541243b2784eb8ea008f47567ad664410d5b6e90dd050f329609713a67f3f38dfd0f6cd122a3c0b796db6d637e2f350212e91040757c855d10c71aebb15f702d784856a93f7f39d58feba303cc3bf1f8449def68b1b8ae35be5f4ff06b9e2dcefe575dd4a4b391023445cc638f775f39a557860e794475999b7677e6e28b655727c7a1e0c8c35fdb985d3ad453d7c7a09512509044e7ff02fd48e60241e0a5947f06dda5c983424f4fe19670597e36ae546a9406f4dddc3b1eb2fa4bd8013fd969bf74c91065e25b442701554d3354713fdea474702fa00080cab2afec5ec21d428d6bd81968775275d6d2d31f9d6bd63443db83cd820985f87cc9310cab4b49d2a8351b7c270aac0a5045e88f3e9df1facb07607b7bbb7dc0b58fdc5301410d274368841e1145888f9a9dfdea7480c3ce7b7635e034006f48e7f280f683705cb41fb3b6c90b3b1a967a234d0a197fd51216ec80b927baaaf4e7b91b6e300add576a717ec6f5ac00eb2b0d3bc0a52e2fe4100e4dda6c1ed2b99ade85a56c63880b10b771104611b5828fc41f4f6dfb3ace80dd22c6c04ebafbf07ab209f4e6212cdff1a186e4bb24db21a5ce9a6a5d0fb13d6e4e1d2bf5b369c1c1cca3774a5fee4ab9318a53c0ccb28b42f003705316c4a7e9d068b7120094c06addb3e9a230690e94975422d699540d66d4b4efda428fabb7d3eba20b5c98d8c2afe6c5c16d5a15b2398b36d929560f4647b81a5afe08b7a35a335b054762475f5a7eb3151e3dd4042ba9d67e0d781c4093d138950d637d605b488c82adf5d5c6a056db591e47694f796e0d4ffb45159780c0dfe88724e393c80d0a0166558210fb80c803d3e755c865ce7112ba393b3e34f1d2721838c6fb4f84d62743095d65752fb3332c3f51e130f19b23b5ad26fe5cb4da6f76711c502dee95a3217d9d7a757ec09b748224291ca10096dda69ef446edfbed2bbe1b47a35934197a842a11106cc8385b670e111301af2d2af93524504403b0efb77558327600ec5c432972247b68c87ade6687b193c893ab5dce94bdb47b8a3743b99ed87e5425d4e13a0fa7b45a835a486c5180572ef15b3d2e491b2e1d7416d8ef1ba6166872f7dc505a1f49f8f4c3bd7d80b3c016b6496f639cac8dd32455fce148755b4ad6fed72acc2df19456d79acf5679c3bfdff884c7a8e63dc1b18e6123ed1dfc789247770e47a42c0b29bb2f59ff0ff018b70cb69a6ba0391eb9fd9feeb543e089efd270c818923633e09a5ba04b1a60c95fb6dda75a50eaaf7701a7b586c264f10a6c9c9fa7f4e02536249525d3193829b03a9ca1eb858ffd95ad8b6ea4e3445caa8ac55fba6277f8d84596309a0e98053405a69166d2b69af81d6b755beb7f2082e7c4d7bbc9bca88bbcff6ee7687987b56feb0749c29177a396fbbc884e72e1828e9cd8819eb29b9db617355a25bd3a7900f58708aa12116a3597b7bb6fab4ce25a1cfffaed93787c63609120a6f9d73424831e415d909c0eb86aa74de86bd3164a0ada41509630048e6390799d9731e32a0b3dff811dccd6e58351a2421ccf1b77d147778facff2f0ca4145c7853d5a2e857bd5600be87093272d3b4336af55f195315f5ea534f3cf7d1a31a5f195e9768efb15ce9cacb414318bcfc93a6e377548ba447b12c44cdbf6bf72ff5cfb4ec4f81332067d4c9ac5b0829eee1243a8f05bdad9c6b4d92d17d0253d372555617e4c60493ab35ea11110c917f1ee4bf483e630c079586e9c6376e4da54d86a3d5300dc33470a42c1efdd9509cd6fe1da9330c667dc7822cec26ba25d92a4f08bf282d911f6e99a0c65cd25ed8b35ad7b4fd2a079874724a6dd143a8cabd1ed977db90404f3ef0446734d9b9c396a6e633784ef542bcc65817ed1ef259e1b0fe7e74199f98f5cb206847480269f7f1bd06c5651be5b3dca1261f52d4d2f9700e2a59a51a63a5ad201607fcbfba73e1c6cd7e39b1dd9ff8b34ac7aff2877449213fcf7df0c283bd78a538d91a1875a9f05d6f93bbdf4e7e20a3db136e36c05285dbfc1b348a8573ded32fe258142b6d62fc635dc9d74d73fd85dcb50738def9db4646a0284dd6890790706bb897b4fc442987adde96c9df15846db257acdfe8437626e6be5cf244feeb6eedf50f0a3e900f71cfb5b71495db50b423ac69d5ffae5845d4f7eb0cc417d977945e081d86fa938588e7f3976772e55c8c6c6d70b98fdc5b8f91d94e0f6b68d9479f9349dda1c03cb24b0a0ce77c0067a3c1223d1e5c551e7f97b7d4346aef12aaa741cbc3338c1b4d9a3d4b9169d67f7da22726316abdfb4c6dc6f8c546d6bdd60d437e4652684758a007f61d298477981c66b34a16ea509c7a0f6d3c076bb56efddbf248606c4aa9be4058b3c10708c952b7b0a78d1a68ad923dfc1b5505262db5b0528f6dfcad4493c43685a2ea77433ed168010f4b5321b3c996d47d30f7af6a3ba3d459f59a5c9612a126c6fe62138517b11393ac183809c8619520599c29aeea52c2609702ca2d6f883612bd56651ceadfbe2adf91a5f01d8bde413658dd118e8d0f8fb415f27063399e9595dccb68d15d749ede59891b9228817983f1ee0c8b523002cd406796266038d6a2d627ecec1aedb3d1ceffe6bbae380579dab73f97205ac78f6284fc5e3a002090aa3783d190d4825bb9ac6c08d7eb57c5a8de565681fde668e802e4e2394232181966a0ca6257bd2df988a8dff73a855d5d305cb30c9a7d8e3846df37d6c553f48aa7c8de8bf0c6d485e941b40c781c094f0b3249a96dad527f849345199d427457fb00af2160bac7a2c7a73871579ba9e737fdb1b22ece8e8405fe53c1491f44dfea36df84c41328728a1e19d019cbfed77c2cfbc1a170033fd41758478238fb6c0b5f6e3cd89e5db33755b3e3670942a0ae79485841bb8e3d5a7d3e9089641dec6016ef876956d5543e4047ed402f060095631dcea29d258b3820e5713e05e635489aeb7495a728b3fec4886b5e23448fcc36f72aabfc24a183b6fb518a88b99d87201497cfb30c635a70082352da98240940a1588a6708e4a0a0037049d0b451154bc70f10da41f779dc33f2a4ab0c5fb9faeaa70318f9df4492b5c6743bec001f5399d168f09c0dcffeb36b40b5669e31e893a2bf7de2221f278c45754f9b86f132587a142ba89eed4a8b0a6073ff4a653f7ef573c9012043cf9e569bdb1241039db1fcc9181e2bfe156b8fc8b4d4b3ddc52927e5305ed130ca76cd9120d3c72934dca24ebcd9b0d11113739c875e2921bcb2feaad54ba147fb8b3885528186de80e149678c0eb0f02413120db95bcd569bb9c3e05ef031eb51e16db33f911986ad1430614fb65e9501827a9197a20fe432edaed52da9f3e16e4dbf7e1c79a9abb716b5558b8eca92a142da92c0e197ae15ae232683c9ffd4bda9a7b9e7b7638dda9e15f669c191ff33c985e9cdc2a35da19df712de1aa88ea03d6bc84682334ca514d75ad5e6f8c50041edcbed15a340b673f498f853210a2e38b48cd05f9e22037967251b368e8e28ff779d3af87add48b456617c13ab83d083ce3d788c66eb2fa1d5b3a1c289c822c7d8dbf939439db6aa4c795751650a36eb31e2bd3f7b7bbb5119eebab64712e4d6efe99b6fdffa73dd4a4fa03c5d43172bb1b510df5a29d1dd12b972771349806ce3d42e39b88490330f17f61014ae43e55c315299450335207ed708d07a500421fa39b2170e46816eb6a1658e8b76ed4804b28d03ae6f536fc54d32e1e0489451b4c9c0bc2823f40f5771e4c8e947d031cb3eb0ac41ad9d9d177afcd807401babead6bfe84cc6aba840b31cf4f9b2e4a5078bd0030a3e4915339f3b92196c160c9b8e0cd64e6a43d0c0d47f766aafc151cb76858a9dc4544d43a7a55bad9113518a8e24f568dec35c04cf2dffd72f92994948528c0ec5a458c530a2738d88b6c227794ad84660d6d7a5edad80071c7de93b14c8fa58973788133c16652063bea22be7495c70640f5e1097d0dcd56f9e2a4c3f8521611152eef275f83f29a8ce228b24b55b4499a7c651dcba92bae2e7d608bee6703c56368cfc2836210f291ad3ae110606760b2c5d05af35d90144c7d2b31b0d7940422224bd737a15609c8960e48c11b7256a2152199a98d428dcd4cdd6064a479ba8043d77e38094b90d5ae33f85997d03dc67617d756a2ec35921895f2968d96efadbdc0a8f6a7a89fa345f379e2de0e73d2cf8ea61492e7387b9d68ab808b6820580f9264b634a080bf19be48c571c39b2727874c670a52f6b3bbb0a72468883437cd9536d91befe0bf81782160af6eaaf639c6aa44b4b012dc5228a6efb7d25eb75ae327ad4a646085e6bb5282a6b3a0f0b2b200b9037704f9b722ffc46e77e74de77832bcd5f6bfd6e16c78738fffeaac6a94f6e88a4c3fa2b9c6004b11b47743a7d7af39f445bdda9c0b201f82a0ef300820654799b2b46144cb66c518182325c464bc0657dece61bb7bc4e8bec73b3206c735eafd85878c83b16f56b6be0f648340b8b12ac1ea849b7a1053f03cb2cdc14556df49443fcf3b714921edf8139fce5398646e47ec87a1cc21140761ff069927d6f1ef5f077433811c4a1db4f3badf2451d42297708d96d9f4b7431d97615d76a0a134c91d83dbdd9943998c9d7508af2709e78e54b162592c95a924f2eecbd8d6f618a71e3b0ffa25319153434c4963ba53665b7183961b196454ae868bc3583b2f13e55075a29e13ab3c7308f5c4ed3c5663dc983a0260054f1afc642d0e247b02aa58efd96b75e191346c5a3028bd9f2e1162c7abc5316aaddf77b1d4be06b2774a761d9c6e4d57afb51c1457b13bf1dba9affe9e84033ffc8c1e691906ddd1b9c3aec8b1068f64170edfdc6a212e16c9dd981279a535fcc50b00488bd9a10c61ecd8e057f517688767c5901b9d83c8c8e04be5dd0a2c91b9894eaae9602956e604729459a2e37cf8b81b941142605f8857f927ad827c4227bc646708dc78ddef16b064cd5af73ea9210dadeb48cbbeb9fcc5aecbc7c4272123c753138cd005d9e62d106d5764ffaa3c98d2a0af64cf7eaeb85a542e79dd0330153612caff884d4aaec71eec41ab94cc7506862e280e6fcf94a47a33eb63957ed7aa308d014446b96a9043eab9846dc74f2431b2450d86f29b0861519cd690ffef5293f6d2f253de344f29c46c2112802e3f1cb7d5a3fcebaafbf447c0dffe63660cc719c1e4f542ae99b5b173c7ae74736c5091399ab7a07385ba2d7ef2e416f98c46ff1806a1061d3adc3fa5810e798243e06388db00a79aa37c631536fb2846f5983c02cb627ba4bd2aa860e1a9c1ac647f5e1c2faeb4c2d45fd567dc3bbfe35daae8884b5d1def75ab5ee1c308d5cbd8ea598529f8a0f144f0476b5b3ed5d3cb6f209fab07fe2c94da4d10f605293757116725446411d2b4c2298879071c2b9f6bd88666bedda62c9de54ac3fac823c005371cc3aae4cb3c6df8e0f8eeb263e6540cced93338ed287047cd3efd221c4cb2dfa41b3bc50e2bf29d175f2d92ba3de00a893b263e00d6185b86ce77f4432babf7a13668af5fb7e544edd085c106a9f264e2f4b7e23c20ae926b6c1c717c5bd1b4462858d1dae89c15c6c2e29ad8907a750c4c3510905cf1201f1037507129b5049e362813cdb8f00daa5350863b5701f725f01576c52711c9cac4ec074caeb6d43dde75027a33413dd85d6dc83ac57b5d2fc5e35d8d83dadf398eeb1b9c5d7ed90f4228e520591ae15ba6de091e57a29b65f716c181593a17afe2b2f465ef58e2f9588b53d4099ef6deca7f43d420b74abe0b48e6b63c57b5a6712122b03ce1dc281ecea7f553af0a2762806f2f3cac7e04fbea6b49888765378a19ec504f2f2fcb78d608d7b8e0446efe52c4752fd992e57e0168e57b83679cb18bb6756aed54da07d9de88650482288a0e8d2a65f69b7fee7117766ea426e0829cfac78cd82a6352c45c86a66489f5f0dae42bacd8e2f88cd1c3622ed355aa348a21cf1a42bf82833ed028f1ae9e06a01016a305208806f2145c52f78d6c3ebcd38eb5481ee79b12ebc072b97ed299c938521413b888c92321139c2ff4c50586c1d1248b56a4e7e77666d337a159c22da5d497d35c96efa048462ffc98c0726a20505d0ebb2b6666aea1750dcc5f4eab1b09fa0e2b5bbe6bd420110eb1ffe8889c2bb8537ed36a6cc01bbb0601cf81e23114705b257a27852cae1da0b290dd30384c38198631a80d9ceba039cff2b0665ffdb7bf7fbecac377029db1f5f13a64179a2b9696fed7599fd41db7a50bd093dda755d13363cb98d5800b164a4f462352225d3f9d136f2ac33c43d457852fdf3500e12b9996f3a68ba18506ee21b8e322e730de8c8cfe3451efff64cbeaa4d7d7445faf24dbfaa8b13fb6315d256c8e9463424f0cc1be6f916414383c6b3cb47dda38a7acf1dc530517f1115bda4eb63aa4bde5c80ea111f50c0c3845cb87e811aa61af0052f12cf816b3d467b079f97e170e4cd7eadd07b415ff200a3313d2e06bb75ef5d12b7bed63d896c787243ab267a8b0d2593a236e4e63524c8a5d4640c6e133a09ea94dba5daf95d54b5e6cfddd61ff2424cc406a5cf738820e47bb4956a3eaa4ec28cecf2e34ea417fe5735ab5ed00a2791746275b1c3cb8d4bbb9b7fbbae2d1450a20304610756d4b8cf1c68de447bd6b828a30dae3aa2071a1c682715ef9bda20f49961cc4db398f0f39bb8540004b551fd9af635a755b5d201bb798170a61620b0f9d475b72cc58ac208e4caf4d03fee3d4774994bab385bf6b0bcec938ea8cb03f7717d2b86f2cedd9bf456700c21054a0bf9bce55ab41db29aa664196d8c09b82e5672adf8deff00209d0b4b46e82e62ffd110862627e609a10212c2ed4deece164171d8c8c48ffe75195a3c63690f4173c502d477961405c8cc67b51399b8c5b470a7e681742111f27755247e888862fb49d8540ffa778f44195a0ce9613d504869a598ff8f468681b96655f160b52c770442c0139901b007d44c4086c60d4eb763869ce2c915d47d5704f29b63bb1da4bfb4c2244ef3dbe1636d909b1d4e0bf285e7b964b0da1ea12ba8ae52b65afac35365684cdf9f56f377344cfcf062896dc4d15506685b147a5d33eae0948bbaad3bafef07e9cfc79d7e42de2b0cf97b954726feefa09a9018d690e665c49b7837bbaec3a3d8efc22da9060f0a7c5b6d0523492bc7764350e10db44ce13c6f4fd62d4cbe6ca32b7c756698fd980593b976fb3425597cefd04fd626028f0934e7e55784f49e7c90d7dc18a4d50c812f4092f2d717921b8178af13abc436feabd81574342b4239f2a22b99914629ad9b57e366861fd016990f71b5fd288b9632b892a85ba53c31cc748c3c2f56b304187302b48daf3885dcacd6815f5966196944339d99aa65889d79e1ec6a3ffb85f896c27eb81216d935c2b8b78360d3e8e254b1c1f870d9482b8eb40b6a53fd144247eda6a20a804b37d40251473f738d65c4ff1e879ce25224f693350b60ff31368ebe0f4205c4bfb9eb2f7bc2bdb4e3349c894382c8050abc02b82ec52bc085b834d90409625c94cc8b7b82aa0ac45c79f5633bca9ee09977fec9627e5b6302ed69234ce47884f66534603f5a683d8642da2e1046e05db472a08c3c69b4aa5a0d2b5862830ae76d592bcb3288b1f611cc3b394fd831ccb0cd1b1e142c18503fb6d92e88222d0a413a124037e4d82f580f9b29f3edac46b6203b118377eb76796548f903802469cb30428ee77993c0c3458c39058904464d8ba4793d3773f31edf1db5da831a1e869990f13710e8c883e7f3df9bd2c70c8e697adb13c46cc110392abe565af80020ceac471a615bb3b241b94b3067b5a381fb3ea84e92ce0581db1d2885ba6a65f727a24d9827a6c4ba4eda4d73d16654b79a9a4f9d0c5eda02ef262270fde779df285e2d61dc18e21b807b883e6d5542fbeabf02afcea6fb26e5e7b93590d1073cadf25cfd4c5fefeebc9ba4d23cec6253be02b3a21d86743602d822540e3580f7458a761d23cf7945d244e7072527e3d62f87d5d141922d517fd15e837a9fa80f00af29d3610e55bf8e8d067b478fd036beaf79d9347dddc21185965d19462836866f11388606f4aa604aa07ef81fa0f9a20c5a33bd8515ef03d87f101c1c20c8c53ab824016e719ef7f592ea05c6541129c529837e3a9563dbca5a65baa2dea69ddb2fd93b4f03f3c9cbd31afb972acd955be97771155fcc26446ed9df9f3b7f2dd1c008a8f8e86fc60ebbc13020f20371098eb8d7232bbc5011580686e8408a7a5352d2fedf46bc57a0e81be1d62fa46ddc6997b4da2d24626d222a49eda179cfec104aef423461ebe50540d272242c324127675d4b90267d7baae6d700ab1b3fee7e765fd169a9d38c1ca51d133f3df9feb93c49e3543279ac48f16a82bbaf62aa097fdc05eea747e30d29215b391f0eca11a72ec4114229b2daebf3cb86366a1eefd4427104209d3f95dc3d77fb9bd613ac7bed316101d6b9ad2489e08dfa256e3ee3e4b397e22a3d275742e9cceee4e44fe53d52ae2878267db51710078e236afc0e5bae92a4fe04be47120159fee1af5fa7c4b2c8683cc2cf543e65625a0f2342620b31d8a5585f49f7de25edc624a70ff87b9b17c78c7ce93fdc4fa68c9462409ea09fa713b030ac2bce9276a9045666163fbfef7fe715f64313e1f7fe51b5f7cbf3688d6eddae9d8ae0ec6e9cb8783aa219f5c4107e146ac0ab386a4bce80d94f0d2106df00cbee7b4d2cb846b68e8b8ad53ad459cff5fc198c96f2689b275f96542bfed5ae02ebb647ad7da56e645ad826d82cd48e00199dfb2997e7116ac75e061eb3cdddce8416d7561f44391ec10c5ab6a807f8c094a412be6f40264d30cf4a66763446bec1d34b6cb6bd81fb408076110517b389c0a2f7eaf9cd9d0db7b0f493123db57fa1c544e846c63d9d43318c3870a42a9562d78d3b37df6ef2e7e5aeb95c29b3dc41c874df5f05676a56ffe82121dc7dd7706613ffeeb201dccb1166ed3a0ebc1f66ef053060d051bee5bfd8350382dd0a9667cead3813853330a26543b3b84bba2ff2da3eae8c593a2d68e05334b3b24c877d2a1c6c9c6e7881e29b01648b1f39d59ae19d3cdb555c39b17239de56f059d275638db6339a0861896a1cf62bf9b811deefbc3a604505bf1370814f6143d02c34a3e8274c927faf4a1b5b3a18b99441eb101f55ca2939d225aa9744314888b55b1783715f32b79421dec4607b931466b1b752fb683edf8a79b39e98f0e08faf2c55061b19688b7b1d8665b94cfbc1b3e2fe310a0897afb5e57505d63bef906b9590ca1eb0e52d7285a291590ee3c071a04f88d60ef31b6dd4170fba33e26001caa801d98573a64d3bb37f034c19a52eb34fe0edd29650c209631415b3343ad57eff0dbe833a4ecd406d6bda02879b52a96827ac19c2e4daf5542dacef7b1b0f6e583d99bdb09c9c3899b9f88d13fb4366a317e290437d70fd7eb2c9f1070878b2e98729d03d96fad951194c8f879c85a107da37ba8a001ea1495a9cde40effb24bfe7ba8b153cd1b37cfdf02d0fe05b0d201285dfc5cd22c83fdf6bb82c2455ec237a6b234b0288e047b07645fd37040287d0c927edbe42695bb21d3071902df247aaba97909e75dfa5b27446f2cb45f6d9d2ac8a7dc364a1f5b23a484d145eae0b95181c725f0ebb0328d2b30973a642ebb00f57cea63acc3c4b9951ce7864835ebec9fc5b24ebb73b8e4301f1a4334c365fbf5b80b326c34db997b7d5d947269e48ad8bdf4d01b69c7551cb32d5ff1a6745d3fc217d7f5a79de0f0597e973e0e49f071b0caaca88aeb1565fccbde3834db7420028079c8459ba9576648462576591c9e46d0f8fd7eab8c186106ef77ee249577b8e2255d30f549c2a991e03534e40edbdedbaa384e4fc13e79970e1d5636d7314c542a5b106b1b0a279965e85298caef35846afbdc9a36b8af202bf368a5f55c08084b3fa192607669ecfac68903e0363304f48ac8552dd16e8826e1daf820a009d50b2e560f413b7171fffe8de011f3f092d0d80fc2fcaf4dc8fff6fcd616041554584b85348591b3cbecfbdc65d0f420f63c818919cc72c6634291cd65a2708dbe69d9f56d47e2490a1d08852527827e7fbd0ac290606927889bb4557a850453a953376bb72b1405b9d6b90e586f5b829930222ebd2ecf3c60889c268bbadfa36797fe29869e439c0cd878b85263db6a6754250045c07ae1b9337b137526460353018f3eb006bf5c0e6edf68ba1cd92ca5c62c23eea5623c6ecc76b7bfa5ab0a2c8b0f8b290ec8e02a8de3a13fc2b23b0627b3f6aff3ec49ebdfd019c0c1df271c8432e6f929472926bb4a9beb32f92567b5d051466b58e032470b442c8f88e644ef1920621311e06e4a72e04690e203c6e032ee351222298722c20fa63e0e40c2bf54c5f68e8f618327b22e93985ab44dd25cc68c98d565340c1578e8f84fd0151cc23cbaecc38bd942771c691f2b7a651c54351ca1a71efd597aa5bffdcf6ea4b9dc65e634e54a6d737c7db6fc4c3a54951379e8e26bbb402e05641f4dec45e63603f6e8523bb6b2a8ce88032b7091e2230ba70db6bd6def319beea4482be6acc398f099b14dc8863b9d5fae5de44ae36e6b5693ccb9ecbc000543b5e9def0f49b6dba04eefee0d3accab0b8216665a6d505fa909f0b84ce62b2bf255fc532a4de7d4faff75a3480014629366f08b02009f2ee63118a5", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) writev(r8, &(0x7f0000000b40)=[{&(0x7f000001a240)="14f982c6742db7319ffcc0884906834654fb9b5f1cd54b29bdff8bafa14020822366f5fbdf12b962ac44c7973bac9b35604ac9c614c1169f898cce9130ee4e7eceb15a0300f19ea5d8bb0acc28e9372fb95ab02fe3a993b54062d13267b87bf70ae599e644aa324d4666c548e5574d89f641e0adb818a7fb50e69575bd7ecb", 0x7f}, {&(0x7f000001a2c0)="f7efefbf44f45abedecaea346fd92aa33306b96680b98f917d6552311926f0cbd5e2d32eef7979aafe3245a3254ef656ff33f11b6fbec10883dcb3eedb8cdd94aee651519deef4d9591c2f49a0aa5a4ddd7db79625475fbf3abdde01cffb4fe68b07868e478e303737", 0x69}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 5.79194732s ago: executing program 3 (id=3627): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0x4f2c, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 5.043375427s ago: executing program 3 (id=3632): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r2, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)=""/92, 0x5c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000067907800000000e00000000000000001000028250000000000000000000000e0000002ac1444492abe2c08594a200818213b2669bc927284dafa3f11127176d865146788a31207c3791950eb4a17edb5580000000000000000"], 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000002c0)=0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="0d0092", 0x3}], 0x1) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.968333489s ago: executing program 1 (id=3633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 4.708275812s ago: executing program 2 (id=3639): syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) setns(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.57654503s ago: executing program 4 (id=3640): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1}}, 0x28) clock_gettime(0x2, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) 4.559943778s ago: executing program 4 (id=3642): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0xa05}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 4.522079455s ago: executing program 4 (id=3643): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0x4f2c, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 3.816070301s ago: executing program 4 (id=3644): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000000000030000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0500050007000000050003"], 0x30}}, 0x0) r6 = syz_usbip_server_init(0x4) sendfile(r6, r0, &(0x7f0000000200)=0x1, 0x5e53) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x4800) 3.174637928s ago: executing program 0 (id=3649): iopl(0x3) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() 3.084247684s ago: executing program 0 (id=3650): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0xffffffe1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="10000000000000000000ed7fb868e25abad55c5cf170132928c5f17819a82181584af633f70b1f4e37410ee284ec6791e001adf8bc7bba03c77eca31f0bb3bd963fb445ed19795d488fde97ad2e807db793e0a4602c3d497e6cfd663109615cd992ea700b0d4a9a5e0584aa9cfd8e4c6305f0b57e765a9f44ec3d56990466b50c1184ea010b295686cdef6b74c1fbc25dfb5025353ceee1d0f53c97c61"], 0x10}}], 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000024c0)="e269c8f0854855231d656236ac6a3ee946a14f97e681073ededac91041a70e0b52ad1f50100c2e31b8adad8a8f08b8e92907d6b687a6cbd556d6725782c403f25de975fe64dd9015c06946c89f9f75f796f479daecb8df61b1d1fb1ed9fa16c68d58324a37b286af50a0dae7188b64be48c21dfca18981ca9e82ff0129c26b29e436dd992ecc15ab1388ec3798c2953855906cd6ea63aae87998f0e89676845a084018bfaa90082a95e6b2056dc942f94570697e55a46485", 0xb8}, {&(0x7f0000002580)="258977c42f53c6e2673f22887d1b07026b17ca21ec6579d20c95221710d835e18b3609cf7a4c9fa492907e66d58ce447599dff26ff5414ffc4808b568b99bdf3e5813a7b22634992f1d945102cf369a0c8683fd61f925fdef39540d51058d17ba7d23b921e4b40171a5ee273ceda5067fc0f5cb9dce48bbdd41404eda4412f0c72366e0055cf1604bcc66f0cd79faacd45962703a62c06989a523e78882ae1e489d741c491b5ed482fb59df7e2884fc155bf9a30473cfc8eb38870b821707f55ed9991381d396cade24cb29eb81c9436753b2c378219912ddf14026c5f994f5eff7db7d9", 0xe4}, {&(0x7f0000000380)="acf93dd7e32022d94b4df42f3f7dd061031e6a9ab96530c04cbbdaa39477f33632dd9152aab559e2893d7dc80e9b08636384e8", 0x33}], 0x3, 0x0, 0x0, 0xc010}}], 0x3, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x7, 0x0) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000) write(r6, &(0x7f0000000140)='i', 0x1) read(r5, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 3.083513082s ago: executing program 2 (id=3651): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000001000)=""/102383, 0x18fef}], 0x1, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r3, 0x19f23}], 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x180002, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000001700)=0x7, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0003040001020403012c"], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000000)={0x0, 0xd6, 0xde}) syz_usb_control_io(r5, &(0x7f0000000980)={0x18, &(0x7f0000000800)={0x0, 0x2, 0x13, {0x13, 0x23, "06f3571f23742af41942c3fdfcc025ad3e"}}, &(0x7f0000000840)={0x0, 0x3, 0x26, @string={0x26, 0x3, "74d4b3e2e95766124b9692c913f535281ade0b665192e7b310439a6c07a2ee6bfa2a88d2"}}, &(0x7f00000007c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0xff, 0xe5, "a290387c", "b62175c3"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x80, 0x40, 0xe, 0x3, 0x4}}}, &(0x7f0000000e40)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="000f9b000000b1a160b3462bd52becd1d6f36b0fd354f32994a23bc65f9430cf5fe830568df6342b6edcd0c273da2ce4d9e0740e107caa8911957b0e1dc4860c04623ac18af78c7dfc8a681da45a6c44334be6900115c1261642c2a38cf8ab7d06b584e21d9145244ed387c92ed3337f1c560e6acc128fca9d362e8d8aaaae4b9d04b3c92b861cd2b20bbfd41e069156774e2803a3ddb421280caa6e4b07c6c714"], &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f40)=ANY=[@ANYBLOB="20220800000020000000f000000099a6bf4ff1b0d6f286adc068db0425bdb4999eb753c10971c35a495d72ad455e570b98b82b51dd99af9e57569e0d56b7c9ada4877174e4dca6a74f022a267b35b67587feaf7ca532e2038bb910ba267adfa09d9a9c97432ca9fd3b49e2a8893e67caa192bf4e737254dd5f3a88c816ac"], &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "b95b"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "3aa0"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6c}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r5, &(0x7f0000000280)={0x18, &(0x7f000001a000)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f2f000000050f2f00050710020a120600bfde95be97ee664602000b140100e80004e2ac000000000000"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x18, 0x89, 0x1, "0300", "2b0388f8"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x4, 0x6, 0x4, 0x40, 0x6}}}, &(0x7f0000000740)={0xa7, &(0x7f000001a140)=ANY=[@ANYBLOB="2016780000008eab9c4ae804a6d44c49475650a36e1d15dad952b2b797977a1625c086bb00eb23d8a7c03272e61fe65fe4325423f6864a869d3f6418d6b19ee5de6d1464e1e134eb43e62b665449c52fd3784beef97a6c5944c67fdeddc2a47af6cf9a659653f4d86af3fc298d305bb244d6acb9ce7a0c66da449dafffb6b0ef03a41349bbb5f5613dc16957e7e693e06d731945480e59d598bf1e58d2e670b33aca5cbfd21265a8146710c09e23da2fe7dd772a8cea210efd50112b588f9fa0815dc4a47e7ea266de8aefe2b3ac7460e2d5edaaaa085a41563e0ff8ad10177931"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x14f}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "63bb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "f8a7"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x83}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) writev(r8, &(0x7f0000000b40)=[{&(0x7f000001a240)="14f982c6742db7319ffcc0884906834654fb9b5f1cd54b29bdff8bafa14020822366f5fbdf12b962ac44c7973bac9b35604ac9c614c1169f898cce9130ee4e7eceb15a0300f19ea5d8bb0acc28e9372fb95ab02fe3a993b54062d13267b87bf70ae599e644aa324d4666c548e5574d89f641e0adb818a7fb50e69575bd7ecb", 0x7f}, {&(0x7f000001a2c0)="f7efefbf44f45abedecaea346fd92aa33306b96680b98f917d6552311926f0cbd5e2d32eef7979aafe3245a3254ef656ff33f11b6fbec10883dcb3eedb8cdd94aee651519deef4d9591c2f49a0aa5a4ddd7db79625475fbf3abdde01cffb4fe68b07868e478e303737", 0x69}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 3.015819835s ago: executing program 3 (id=3652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) 2.861025353s ago: executing program 3 (id=3653): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0xfeffff, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) socket$igmp(0x2, 0x3, 0x2) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) 2.815015071s ago: executing program 0 (id=3654): getpid() setns(0xffffffffffffffff, 0x20000000) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x82002) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES32], 0x34}, 0x1, 0x1000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="040027bd7000ffdbdf25060000003800018008000100", @ANYBLOB="1400020076657468305f746f", @ANYRES32, @ANYBLOB="1b000100", @ANYBLOB='\b\x00', @ANYRES32=r5, @ANYBLOB="2000018008000100", @ANYRES32=r8, @ANYBLOB="1400020073797a6b616c6c657230000000000000880001801400020076657468305f6d61", @ANYRES32=r9, @ANYBLOB="0800030002000000140002006d6163766c616e300000000000000000140002006d61637365633000000000000000000014000200776731000000000000000000", @ANYRES32, @ANYBLOB="1400020070696d7265673100000000000000000008000100", @ANYRES32=r10, @ANYBLOB="4400018008000300020000001400020076657468315f766972745f776966690008000300010000001400020069703667726574617030000000000000080003000100000030000180080001", @ANYRES32, @ANYBLOB="08000300010000000800030002000000140002006c6f00000000000000000000000000000c0001800800030001"], 0x174}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 1.284305027s ago: executing program 3 (id=3655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = io_uring_setup(0x7fe7, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{}, {0x8}, @device_b, @device_b}, 0x1000, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x6, 0x0, {0x6df, 0xff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x101, 0x5}}, @void, @void, @val={0x76, 0x6, {0x2, 0x10, 0x1b, 0x2}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4005}, 0x0) io_uring_enter(r2, 0x0, 0xe257, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000), 0xffe000) r8 = syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x0, 0x20000070], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x2}, {}]}, 0x108) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d"]}, 0x14}, {0x0}], 0x2}, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r14, 0x0, 0x0) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r16 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r15, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r16}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.121097704s ago: executing program 1 (id=3656): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000006680)) r1 = syz_io_uring_setup(0x4f2c, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 1.099570506s ago: executing program 0 (id=3657): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 883.930648ms ago: executing program 0 (id=3658): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) 820.546268ms ago: executing program 0 (id=3659): syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 685.504984ms ago: executing program 4 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 535.158001ms ago: executing program 4 (id=3661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a686cf", 0x0, 0x7}) 452.293032ms ago: executing program 1 (id=3662): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x24, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x4000dc9b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getrlimit(0x7, &(0x7f0000000300)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="607fcbfde95eb10c5e7be1ca97310e38b7002271d52c1d5e2cdc72f12f57fe3da5a1462a191b13d95b9ef08787e0b9fb77aba71316", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@map, 0xffffffffffffffff, 0x1e, 0x20, 0x0, @prog_id}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0x19) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 3 (id=3663): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000004b5b5f0e6619bbede904", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x505}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0xa79, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x18}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r3, 0x22cd, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r9 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 2013, bcdDevice=54.48 [ 579.080456][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.115687][ T784] usb 2-1: config 0 descriptor?? [ 579.154818][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 579.474684][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 579.603101][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.632964][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.642850][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 579.644446][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 579.691883][ T3748] bond0 (unregistering): Released all slaves [ 579.713483][ T29] audit: type=1326 audit(1721104683.535:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15060 comm="syz.4.3118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 579.794873][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 579.804759][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 579.814875][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.858324][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.858538][T14965] bridge_slave_0: entered allmulticast mode [ 579.860134][T14965] bridge_slave_0: entered promiscuous mode [ 579.880594][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.880805][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.880997][T14965] bridge_slave_1: entered allmulticast mode [ 579.904351][T14965] bridge_slave_1: entered promiscuous mode [ 579.909424][ T3748] tipc: Disabling bearer [ 579.936637][ T3748] tipc: Disabling bearer [ 579.945541][ T3748] tipc: Disabling bearer [ 579.946707][ T3748] tipc: Left network mode [ 579.959779][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 580.023303][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 580.034770][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 580.039615][ T5092] Bluetooth: hci4: command tx timeout [ 580.205052][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 580.240984][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.247654][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.381647][T14965] team0: Port device team_slave_0 added [ 580.453686][ T784] usb 2-1: USB disconnect, device number 79 [ 580.474548][T14965] team0: Port device team_slave_1 added [ 580.514881][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 580.625579][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 580.674667][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 580.710091][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.732767][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.765188][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.800599][T15092] syzkaller0: entered promiscuous mode [ 580.822566][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.834613][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 580.843534][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.869565][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.943958][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.994781][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 581.068956][T15081] syzkaller0: left promiscuous mode [ 581.074658][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 581.235000][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 581.249947][T15115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 581.256504][T15115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 581.544890][T15120] hub 9-0:1.0: USB hub found [ 581.550923][T15120] hub 9-0:1.0: 8 ports detected [ 581.554368][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 581.714461][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 581.874538][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 582.034501][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 582.114616][ T5092] Bluetooth: hci4: command tx timeout [ 582.114731][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 582.137787][T14965] hsr_slave_0: entered promiscuous mode [ 582.170449][T15115] vhci_hcd vhci_hcd.0: Device attached [ 582.251887][T14965] hsr_slave_1: entered promiscuous mode [ 582.274755][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 582.285116][T14965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.292681][T14965] Cannot create hsr debugfs directory [ 582.374936][ T5133] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 582.424811][ T5240] vhci_hcd: vhci_device speed not set [ 582.437013][ T29] audit: type=1326 audit(1721104686.255:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15122 comm="syz.4.3133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 582.494982][ T5240] usb 15-1: new full-speed USB device number 17 using vhci_hcd [ 582.504658][ T5132] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 582.583855][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 582.594571][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 582.619584][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.670448][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.718344][ T5133] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 582.754581][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 582.763588][ T5132] usb 2-1: Using ep0 maxpacket: 8 [ 582.769107][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.796619][ T5132] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 582.806489][ T5133] usb 4-1: config 0 descriptor?? [ 582.817192][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.849425][ T5132] usb 2-1: config 0 descriptor?? [ 582.914701][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 583.075094][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 583.155045][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 583.238297][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 583.247445][T15117] vhci_hcd: connection reset by peer [ 583.265629][ T35] vhci_hcd: stop threads [ 583.277513][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 583.288470][ T35] vhci_hcd: release socket [ 583.302832][ T35] vhci_hcd: disconnect device [ 583.314454][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 583.332821][ T5133] usb 4-1: USB disconnect, device number 64 [ 583.339171][ T3748] hsr_slave_0: left promiscuous mode [ 583.380304][ T3748] hsr_slave_1: left promiscuous mode [ 583.418153][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.459490][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.488720][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.507127][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.567398][ T3748] veth1_macvtap: left promiscuous mode [ 583.584292][ T3748] veth0_macvtap: left promiscuous mode [ 583.599621][ T3748] veth1_vlan: left promiscuous mode [ 583.610668][ T3748] veth0_vlan: left promiscuous mode [ 583.634544][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 583.805169][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 583.954637][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 584.114547][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 584.195007][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 584.283145][ T5133] usb 2-1: USB disconnect, device number 80 [ 584.361421][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 584.674542][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 584.834732][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 584.994433][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 584.995165][ T3748] team0 (unregistering): Port device team_slave_1 removed [ 585.106355][ T3748] team0 (unregistering): Port device team_slave_0 removed [ 585.157698][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 585.182831][ T29] audit: type=1326 audit(1721104689.005:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15169 comm="syz.0.3143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0af75bd9 code=0x0 [ 585.234896][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 585.402776][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 585.412833][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 585.714471][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 585.773150][ T29] audit: type=1326 audit(1721104689.585:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 585.840254][ T29] audit: type=1326 audit(1721104689.585:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 585.884644][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 585.889041][ T29] audit: type=1326 audit(1721104689.605:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 585.917123][ T29] audit: type=1326 audit(1721104689.605:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 585.942714][ T29] audit: type=1326 audit(1721104689.625:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 586.016736][ T29] audit: type=1326 audit(1721104689.625:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 586.039594][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 586.064314][ T29] audit: type=1326 audit(1721104689.625:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 586.086741][ T29] audit: type=1326 audit(1721104689.625:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8846d74610 code=0x7ffc0000 [ 586.152135][ T29] audit: type=1326 audit(1721104689.625:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 586.194562][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 586.275293][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 586.339749][T15195] loop5: detected capacity change from 0 to 16384 [ 586.434735][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 586.475835][T15195] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.485687][T15195] Buffer I/O error on dev loop5, logical block 1, async page read [ 586.493655][T15195] Dev loop5: unable to read RDB block 8 [ 586.499550][T15195] loop5: unable to read partition table [ 586.507412][T15195] loop5: partition table beyond EOD, truncated [ 586.529856][T15195] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 586.754605][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 586.888609][ T3748] IPVS: stop unused estimator thread 0... [ 586.924588][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 587.074625][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 587.082072][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'. [ 587.234557][ T5129] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 587.234785][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 587.315236][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 587.332169][T14965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.382222][T14965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.400741][T14965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.428361][T14965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.444406][ T5129] usb 2-1: Using ep0 maxpacket: 32 [ 587.457302][ T5129] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.475504][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 587.491510][ T5129] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.514755][ T5129] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 587.551838][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.630469][ T5129] hub 2-1:4.0: USB hub found [ 587.644918][ T5240] vhci_hcd: vhci_device speed not set [ 587.744531][T15249] loop5: detected capacity change from 0 to 16384 [ 587.769563][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.794661][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 587.823682][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.834827][ T5129] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 587.863213][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.870499][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.896480][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.896798][T15249] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.903623][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.927279][T15249] Buffer I/O error on dev loop5, logical block 1, async page read [ 587.942100][T15249] Dev loop5: unable to read RDB block 8 [ 587.951281][T15249] loop5: unable to read partition table [ 587.957384][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 587.987987][T15249] loop5: partition table beyond EOD, truncated [ 588.001330][T15249] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 588.047113][T15257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 588.053782][T15257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 588.104711][T15257] vhci_hcd vhci_hcd.0: Device attached [ 588.114639][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 588.165163][ T5130] usb 2-1: USB disconnect, device number 81 [ 588.274695][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 588.356034][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 588.394321][ T4860] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 588.414269][ T5240] vhci_hcd: vhci_device speed not set [ 588.437482][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.485957][ T5240] usb 15-1: device descriptor read/64, error -110 [ 588.514851][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 588.518802][T14965] veth0_vlan: entered promiscuous mode [ 588.561877][T14965] veth1_vlan: entered promiscuous mode [ 588.608346][ T4860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.648969][ T4860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.675186][ T4860] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 588.701878][T14965] veth0_macvtap: entered promiscuous mode [ 588.714474][ T5240] vhci_hcd: vhci_device speed not set [ 588.714478][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.716600][ T4860] usb 4-1: config 0 descriptor?? [ 588.757227][T14965] veth1_macvtap: entered promiscuous mode [ 588.810547][ T5240] usb 15-1: new full-speed USB device number 18 using vhci_hcd [ 588.816376][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.835231][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 588.849748][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.860226][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.871710][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.891580][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.914004][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.937632][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.952637][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.975162][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.994876][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 589.054554][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.074878][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.094055][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.146665][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.157298][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 589.177572][T15261] vhci_hcd: connection reset by peer [ 589.185495][ T4860] usbhid 4-1:0.0: can't add hid device: -71 [ 589.195130][ T4860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 589.203392][ T12] vhci_hcd: stop threads [ 589.214213][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.218859][ T12] vhci_hcd: release socket [ 589.228826][ T4860] usb 4-1: USB disconnect, device number 65 [ 589.254257][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.266547][ T12] vhci_hcd: disconnect device [ 589.284227][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.304222][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.314702][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 589.343875][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.382893][T14965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.395744][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 589.424289][T14965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.448807][T14965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.464372][T14965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.508689][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 589.555850][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 589.753228][T12260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.778985][T12260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.839528][T12258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.860903][T12258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.874473][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 590.034397][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 590.037462][T15340] netlink: 'syz.0.3184': attribute type 2 has an invalid length. [ 590.085112][T15340] netlink: 'syz.0.3184': attribute type 5 has an invalid length. [ 590.194552][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 590.278895][T15350] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3090'. [ 590.354745][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 590.434893][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 590.566954][ T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 590.604725][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 590.784697][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 590.792187][T15370] syzkaller0: entered allmulticast mode [ 590.812417][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 590.842660][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 590.857299][T15370] syzkaller0 (unregistering): left allmulticast mode [ 590.908405][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.914773][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 590.952681][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'. [ 590.990441][ T25] usb 1-1: config 0 descriptor?? [ 591.074742][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 591.209311][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 591.209329][ T29] audit: type=1326 audit(1721104695.035:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15374 comm="syz.1.3194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x0 [ 591.239015][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 591.378953][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 591.394884][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 591.474830][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 591.531615][T15349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.556380][T15349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.635254][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 591.838589][ T25] hid-generic 0003:0158:0100.005D: unknown main item tag 0x1 [ 591.846781][ T25] hid-generic 0003:0158:0100.005D: unexpected long global item [ 591.859649][ T25] hid-generic 0003:0158:0100.005D: probe with driver hid-generic failed with error -22 [ 591.954391][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 592.124895][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 592.274502][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 592.444211][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 592.514838][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 592.611862][ T25] usb 1-1: USB disconnect, device number 69 [ 592.674422][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 592.997002][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 593.154575][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 593.314755][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 593.443886][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'. [ 593.475006][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 593.489413][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 593.519468][T15446] binder: 15444:15446 ioctl 4018620d 20000040 returned -22 [ 593.539018][T15446] binder: 15444:15446 ioctl c0306201 200003c0 returned -14 [ 593.555024][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 593.581843][T15446] binder: 15444:15446 ioctl c0306201 200001c0 returned -14 [ 593.615099][ T29] audit: type=1326 audit(1721104697.435:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15438 comm="syz.2.3211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879a575bd9 code=0x0 [ 593.724693][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 593.795882][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 593.873286][T15461] dummy0: entered promiscuous mode [ 593.913601][T15461] dummy0: left promiscuous mode [ 593.954681][ T5240] vhci_hcd: vhci_device speed not set [ 594.036103][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 594.059738][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 594.124570][ T25] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 594.165730][T15475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 594.172288][T15475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.194465][T15475] vhci_hcd vhci_hcd.0: Device attached [ 594.204585][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 594.324553][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 594.335241][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 594.354958][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 594.377073][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 594.400133][T15488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3222'. [ 594.424526][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.446089][ T5128] vhci_hcd: vhci_device speed not set [ 594.454458][ T25] usb 4-1: config 0 descriptor?? [ 594.525447][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 594.539222][ T5128] usb 17-1: new full-speed USB device number 11 using vhci_hcd [ 594.555773][ T5132] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 594.594764][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 594.755401][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 594.777720][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.798948][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.827993][ T5132] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 594.849824][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.894003][ T5132] usb 5-1: config 0 descriptor?? [ 595.029773][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.074550][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 595.074751][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.161464][ T25] hid-generic 0003:0158:0100.005E: unknown main item tag 0x1 [ 595.197616][ T25] hid-generic 0003:0158:0100.005E: unexpected long global item [ 595.215061][ T25] hid-generic 0003:0158:0100.005E: probe with driver hid-generic failed with error -22 [ 595.244630][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 595.322126][T15478] vhci_hcd: connection reset by peer [ 595.328635][ T5132] usbhid 5-1:0.0: can't add hid device: -71 [ 595.351170][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 595.371278][ T12] vhci_hcd: stop threads [ 595.375927][ T25] usb 4-1: USB disconnect, device number 66 [ 595.390240][ T5132] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 595.390680][ T12] vhci_hcd: release socket [ 595.403389][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 595.438383][ T5132] usb 5-1: USB disconnect, device number 63 [ 595.506895][ T12] vhci_hcd: disconnect device [ 595.554726][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 595.635032][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 595.794644][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 595.847577][T15532] dummy0: entered promiscuous mode [ 595.870102][T15532] dummy0: left promiscuous mode [ 596.114384][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 596.244856][ T29] audit: type=1326 audit(1721104700.075:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15534 comm="syz.4.3235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 596.250183][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 596.284788][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 596.330024][T15542] syzkaller0: entered promiscuous mode [ 596.340128][T15540] syzkaller0: left promiscuous mode [ 596.388457][ T5092] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 596.401745][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 596.434493][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 596.544621][ T5132] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 596.595060][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 596.674637][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 596.705709][T15556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 596.738438][ T5132] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 596.763318][ T5132] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 596.801115][ T5132] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 596.811264][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.845296][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 597.148674][ T4860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 597.156256][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 597.181080][ T4860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 597.198356][ T4860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 597.209730][ T4860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 597.312348][T15568] hub 9-0:1.0: USB hub found [ 597.317381][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 597.327382][T15568] hub 9-0:1.0: 8 ports detected [ 597.474301][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 597.634646][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 597.714541][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 597.884526][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 597.929656][ T4860] rtc rtc0: __rtc_set_alarm: err=-22 [ 597.994254][ T1147] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 598.174283][ T1147] usb 1-1: Using ep0 maxpacket: 16 [ 598.186087][ T1147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 598.198305][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 598.234221][ T1147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 598.243322][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.290641][ T1147] usb 1-1: config 0 descriptor?? [ 598.360655][T15592] loop5: detected capacity change from 0 to 16384 [ 598.367616][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 598.515814][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 598.593893][ T5132] usb 4-1: string descriptor 0 read error: -71 [ 598.622204][ T5132] usb 4-1: USB disconnect, device number 67 [ 598.631896][ T29] audit: type=1326 audit(1721104702.455:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15594 comm="syz.4.3257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 598.674654][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 598.754725][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 598.782991][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 598.914593][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 598.955922][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.072642][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.091543][ T1147] hid-generic 0003:0158:0100.005F: unknown main item tag 0x1 [ 599.108220][ T1147] hid-generic 0003:0158:0100.005F: unexpected long global item [ 599.125300][ T1147] hid-generic 0003:0158:0100.005F: probe with driver hid-generic failed with error -22 [ 599.219166][T15609] hub 9-0:1.0: USB hub found [ 599.224889][T15609] hub 9-0:1.0: 8 ports detected [ 599.234801][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 599.404551][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 599.554454][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 599.658509][ T5128] vhci_hcd: vhci_device speed not set [ 599.714836][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 599.794864][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 599.847210][ T5132] usb 1-1: USB disconnect, device number 70 [ 599.910828][ T5092] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 599.964505][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 600.277132][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 600.435319][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 600.594347][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 600.754748][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 600.834647][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 600.994420][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 601.236915][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 601.314438][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 601.361223][T15641] tunl0: entered promiscuous mode [ 601.416027][T15641] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 601.434466][T15641] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3274'. [ 601.474719][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 601.495661][T15644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3272'. [ 601.533666][ T29] audit: type=1326 audit(1721104705.355:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15640 comm="syz.0.3273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0af75bd9 code=0x0 [ 601.634741][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 601.696508][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 601.794810][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 601.874911][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 602.014267][ T4860] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 602.051581][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 602.253472][ T4860] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 602.294262][ T4860] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 602.322558][ T4860] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 602.347743][ T4860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.357867][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 602.514450][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 602.674839][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 602.834381][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 602.914654][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 602.974476][ T5128] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 603.074728][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 603.174202][ T5128] usb 4-1: Using ep0 maxpacket: 32 [ 603.186457][ T5128] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.207134][ T4860] usb 2-1: string descriptor 0 read error: -71 [ 603.226367][ T5128] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.226513][ T4860] usb 2-1: USB disconnect, device number 82 [ 603.266988][ T5128] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 603.283163][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.307660][ T5128] hub 4-1:4.0: USB hub found [ 603.394471][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 603.510273][ T5128] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 603.554368][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 603.714909][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 603.844391][ T5129] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 603.874489][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 603.955823][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 604.064322][ T5129] usb 3-1: Using ep0 maxpacket: 16 [ 604.114491][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 604.120242][ T5129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 604.389559][ T5129] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 604.415900][ T5129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.434437][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 604.455765][ T5129] usb 3-1: config 0 descriptor?? [ 604.468190][T15683] loop5: detected capacity change from 0 to 16384 [ 604.524576][ T5132] usb 4-1: USB disconnect, device number 68 [ 604.595999][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 604.754936][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 604.765672][T15690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 604.772239][T15690] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 604.775422][ T29] audit: type=1326 audit(1721104708.605:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15685 comm="syz.1.3288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x0 [ 604.784233][T15690] vhci_hcd vhci_hcd.0: Device attached [ 604.802219][ T1147] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 604.914736][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 604.985071][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.989281][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.994827][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 605.023844][ T5129] hid-generic 0003:0158:0100.0060: unknown main item tag 0x1 [ 605.023883][ T5129] hid-generic 0003:0158:0100.0060: unexpected long global item [ 605.044284][ T1147] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 605.044318][ T1147] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 605.044357][ T1147] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 605.044381][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.051278][ T5129] hid-generic 0003:0158:0100.0060: probe with driver hid-generic failed with error -22 [ 605.094466][ T5132] vhci_hcd: vhci_device speed not set [ 605.102646][ T5130] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 605.155035][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 605.204763][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 605.215627][ T5132] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 605.342689][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.354339][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.364478][ T5130] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 605.373990][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.405058][ T5130] usb 1-1: config 0 descriptor?? [ 605.474720][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 605.634713][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 605.795187][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 605.818601][T15693] vhci_hcd: connection reset by peer [ 605.824685][ T5130] usbhid 1-1:0.0: can't add hid device: -71 [ 605.837720][T12260] vhci_hcd: stop threads [ 605.844019][ T5130] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 605.852252][T12260] vhci_hcd: release socket [ 605.863242][ T5130] usb 1-1: USB disconnect, device number 71 [ 605.869406][T12260] vhci_hcd: disconnect device [ 605.877747][ T1147] usb 5-1: string descriptor 0 read error: -71 [ 605.908256][ T1147] usb 5-1: USB disconnect, device number 64 [ 605.954776][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 606.034633][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 606.205206][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 606.514414][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 606.674290][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 606.845977][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 607.004365][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 607.078014][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 607.147713][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'. [ 607.193035][T15728] syzkaller0: entered promiscuous mode [ 607.200115][T15727] syzkaller0: left promiscuous mode [ 607.234486][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 607.371268][ T29] audit: type=1326 audit(1721104711.195:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15737 comm="syz.4.3302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 607.374675][T15740] loop5: detected capacity change from 0 to 16384 [ 607.406842][T15736] evm: overlay not supported [ 607.503130][ T29] audit: type=1326 audit(1721104711.325:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15742 comm="syz.1.3303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x0 [ 607.554752][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 607.656900][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'. [ 607.714490][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 607.874445][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 608.034793][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 608.114614][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 608.274735][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 608.594498][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 608.644487][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 608.665047][T15767] syzkaller0: entered promiscuous mode [ 608.692401][T15766] syzkaller0: left promiscuous mode [ 608.754383][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 608.892858][ T5079] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 608.914358][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 609.074787][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 609.094290][ T25] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 609.154853][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 609.293525][ T25] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 609.304053][ T25] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 609.313397][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 609.323131][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 609.335018][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.634459][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 609.798918][ T5079] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 609.804570][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 609.853191][T15780] loop5: detected capacity change from 0 to 16384 [ 609.939467][T15782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3316'. [ 609.954685][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 610.115307][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 610.194538][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 610.207884][ T25] usb 5-1: string descriptor 0 read error: -71 [ 610.238170][ T25] usb 5-1: USB disconnect, device number 65 [ 610.336354][T15792] binder: 15791:15792 ioctl 4018620d 20000040 returned -22 [ 610.347310][T15792] binder: 15791:15792 ioctl c0306201 200003c0 returned -14 [ 610.364616][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 610.373654][ T5132] vhci_hcd: vhci_device speed not set [ 610.381361][T15792] binder: 15791:15792 ioctl c0306201 200001c0 returned -14 [ 610.674651][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 610.834540][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 610.867834][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 610.907818][T15803] syzkaller0: entered promiscuous mode [ 610.917923][T15801] syzkaller0: left promiscuous mode [ 610.994567][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 611.062673][T15808] loop5: detected capacity change from 0 to 16384 [ 611.154800][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 611.235186][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 611.318696][T15817] binder: 15815:15817 ioctl 4018620d 20000040 returned -22 [ 611.336187][T15817] binder: 15815:15817 ioctl c0306201 200003c0 returned -14 [ 611.349301][T15817] binder: 15815:15817 ioctl c0306201 200001c0 returned -14 [ 611.364936][ T5132] usb 3-1: USB disconnect, device number 75 [ 611.395299][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 611.621128][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 611.714577][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 611.774660][T15832] syzkaller0: entered promiscuous mode [ 611.791525][T15822] syzkaller0: left promiscuous mode [ 611.841677][T15835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.874614][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 612.035619][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 612.074406][ T5133] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 612.076187][ T5130] rtc_cmos 00:00: Alarms can be up to one day in the future [ 612.094087][ T5130] rtc_cmos 00:00: Alarms can be up to one day in the future [ 612.104226][ T5130] rtc_cmos 00:00: Alarms can be up to one day in the future [ 612.112596][ T5130] rtc_cmos 00:00: Alarms can be up to one day in the future [ 612.121133][ T5130] rtc rtc0: __rtc_set_alarm: err=-22 [ 612.169282][T15854] binder_alloc: 15853: binder_alloc_buf, no vma [ 612.195140][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 612.274648][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 612.286048][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 612.434581][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 612.520794][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 612.540760][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 612.553332][ T5133] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 612.562660][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.754340][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 612.914347][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 613.048385][ T5133] usb 1-1: config 0 descriptor?? [ 613.074390][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 613.234657][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 613.314706][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 613.335950][ T5079] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 613.336321][T15838] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3340'. [ 613.387302][T15872] rtc_cmos 00:00: Alarms can be up to one day in the future [ 613.484671][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 613.601264][ T5130] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 613.702198][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.719502][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.748084][ T5133] hid-generic 0003:0158:0100.0061: unknown main item tag 0x1 [ 613.766118][ T5133] hid-generic 0003:0158:0100.0061: unexpected long global item [ 613.783196][ T5133] hid-generic 0003:0158:0100.0061: probe with driver hid-generic failed with error -22 [ 613.794621][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 613.813060][ T5130] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 613.833531][ T5130] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 613.850210][ T5130] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 613.852662][T15885] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 613.859981][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.939416][ T1147] usb 1-1: USB disconnect, device number 72 [ 613.954564][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 614.029602][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.037717][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.066519][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.076035][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 614.101603][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 614.107968][T15887] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 614.114636][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 614.140558][T15887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 614.154986][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 614.176674][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 614.194563][ T5129] rtc rtc0: __rtc_set_alarm: err=-22 [ 614.274656][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 614.356029][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 614.460618][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.510013][T15892] loop5: detected capacity change from 0 to 16384 [ 614.522325][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.530890][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 614.561196][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.593517][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.774499][T15887] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.801521][ T5130] usb 2-1: string descriptor 0 read error: -71 [ 614.826119][ T5130] usb 2-1: USB disconnect, device number 83 [ 614.834509][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 614.875971][T15894] lo speed is unknown, defaulting to 1000 [ 614.887333][T15894] lo speed is unknown, defaulting to 1000 [ 614.902034][T15894] lo speed is unknown, defaulting to 1000 [ 614.991872][T15894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 615.004459][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 615.148000][T15894] lo speed is unknown, defaulting to 1000 [ 615.154875][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 615.325930][T15894] lo speed is unknown, defaulting to 1000 [ 615.333198][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 615.361221][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3363'. [ 615.377351][T15902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 615.383902][T15902] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.394894][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 615.564723][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 615.747330][T15902] vhci_hcd vhci_hcd.0: Device attached [ 615.874359][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 616.043591][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 616.113487][T15894] lo speed is unknown, defaulting to 1000 [ 616.129088][T15894] lo speed is unknown, defaulting to 1000 [ 616.159306][T15894] lo speed is unknown, defaulting to 1000 [ 616.194656][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 616.292312][ T5079] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 616.302502][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 616.314997][ T5128] vhci_hcd: vhci_device speed not set [ 616.364741][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 616.384243][ T1147] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 616.414981][T15912] syzkaller0: entered promiscuous mode [ 616.424317][ T5128] usb 13-1: new full-speed USB device number 11 using vhci_hcd [ 616.432733][T15911] syzkaller0: left promiscuous mode [ 616.439267][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 616.577067][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.594770][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 616.598545][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.617441][ T1147] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 616.630090][ T1147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.693206][ T1147] usb 3-1: config 0 descriptor?? [ 616.914484][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 617.076051][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 617.138712][ T5130] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 617.179087][T15905] vhci_hcd: connection reset by peer [ 617.188202][ T1147] usbhid 3-1:0.0: can't add hid device: -71 [ 617.198409][ T1147] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 617.201391][T12258] vhci_hcd: stop threads [ 617.227221][T12258] vhci_hcd: release socket [ 617.232124][T12258] vhci_hcd: disconnect device [ 617.238148][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 617.249547][ T1147] usb 3-1: USB disconnect, device number 76 [ 617.354981][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 617.371945][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 617.404481][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 617.430580][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 617.474646][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 617.487325][ T5130] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 617.518910][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.603106][ T5130] usb 1-1: config 0 descriptor?? [ 617.645162][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 617.825656][T15943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3376'. [ 617.874400][T15923] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3369'. [ 617.919572][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 617.954388][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 618.035608][T15947] syzkaller0: entered promiscuous mode [ 618.059234][T15946] syzkaller0: left promiscuous mode [ 618.124797][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 618.200286][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.224812][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.274864][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 618.299296][ T5130] hid-generic 0003:0158:0100.0062: unknown main item tag 0x1 [ 618.315044][ T5130] hid-generic 0003:0158:0100.0062: unexpected long global item [ 618.323530][ T5130] hid-generic 0003:0158:0100.0062: probe with driver hid-generic failed with error -22 [ 618.434564][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 618.498927][ T5130] usb 1-1: USB disconnect, device number 73 [ 618.514568][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 618.564239][ T25] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 618.675529][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 618.760555][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.782901][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.793628][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.817719][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.829619][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.850358][ T25] usb 5-1: config 0 descriptor?? [ 618.994481][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 619.135765][ T5130] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 619.144964][T15976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 619.151535][T15976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.159870][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 619.191256][T15976] vhci_hcd vhci_hcd.0: Device attached [ 619.307155][ T25] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 619.314815][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 619.329317][ T25] plantronics 0003:047F:FFFF.0063: unbalanced collection at end of report description [ 619.339697][ T5130] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 619.340736][ T25] plantronics 0003:047F:FFFF.0063: parse failed [ 619.358750][ T25] plantronics 0003:047F:FFFF.0063: probe with driver plantronics failed with error -22 [ 619.374361][ T5130] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 619.385345][ T784] vhci_hcd: vhci_device speed not set [ 619.403751][ T5130] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 619.439383][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 619.450403][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.464589][ T784] usb 15-1: new full-speed USB device number 19 using vhci_hcd [ 619.471421][T15989] syzkaller0: entered promiscuous mode [ 619.485039][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 619.494203][ T5133] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 619.511737][ T5129] usb 5-1: USB disconnect, device number 66 [ 619.520893][T15988] syzkaller0: left promiscuous mode [ 619.555142][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 619.608919][ T29] audit: type=1326 audit(1721104723.435:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15992 comm="syz.0.3393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0af75bd9 code=0x0 [ 619.696688][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.714745][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 619.739799][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.757683][ T5133] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 619.785352][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.793465][ T5133] usb 4-1: config 0 descriptor?? [ 619.837298][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 620.034741][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 620.194597][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 620.221326][T15980] vhci_hcd: connection reset by peer [ 620.225785][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 620.239346][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 620.247498][ T35] vhci_hcd: stop threads [ 620.258816][ T5133] usb 4-1: USB disconnect, device number 69 [ 620.268758][ T35] vhci_hcd: release socket [ 620.281797][ T35] vhci_hcd: disconnect device [ 620.354511][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 620.388071][ T5130] usb 3-1: string descriptor 0 read error: -71 [ 620.406953][ T5130] usb 3-1: USB disconnect, device number 77 [ 620.466266][T16008] loop5: detected capacity change from 0 to 16384 [ 620.514679][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 620.594826][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 620.618266][T16008] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 620.762444][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 621.074418][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 621.244739][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 621.394939][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 621.555212][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 621.555218][ T4860] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 621.578034][ T5128] vhci_hcd: vhci_device speed not set [ 621.591660][ T29] audit: type=1326 audit(1721104725.415:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.4.3409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 621.634947][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 621.728372][T16041] capability: warning: `syz.0.3404' uses 32-bit capabilities (legacy support in use) [ 621.764245][ T4860] usb 4-1: Using ep0 maxpacket: 16 [ 621.765979][ T4860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 621.766029][ T4860] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 621.766053][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.768518][ T4860] usb 4-1: config 0 descriptor?? [ 621.799295][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 621.857843][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 622.115107][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 622.274500][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 622.435296][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 622.604831][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 622.675043][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 622.703949][T16034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.712963][T16034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.718763][ T4860] hid-generic 0003:0158:0100.0064: unknown main item tag 0x1 [ 622.718806][ T4860] hid-generic 0003:0158:0100.0064: unexpected long global item [ 622.719525][ T4860] hid-generic 0003:0158:0100.0064: probe with driver hid-generic failed with error -22 [ 622.808274][T16055] loop5: detected capacity change from 0 to 16384 [ 622.845319][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 622.865683][T16053] binder: 16052:16053 ioctl 4018620d 0 returned -22 [ 622.931681][ T5128] usb 4-1: USB disconnect, device number 70 [ 622.948919][T16055] I/O error, dev loop5, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 0 [ 623.154429][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 623.324273][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 623.389600][T16072] hub 9-0:1.0: USB hub found [ 623.395571][T16072] hub 9-0:1.0: 8 ports detected [ 623.474401][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 623.644341][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 623.714529][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 623.875153][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 624.194372][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 624.304308][ T5128] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 624.309615][T16086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3425'. [ 624.354327][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 624.457306][ T5240] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 624.514392][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 624.539468][ T5128] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 624.558222][ T5128] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 624.581024][ T5128] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 624.600534][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.609290][ T784] vhci_hcd: vhci_device speed not set [ 624.620839][ T29] audit: type=1326 audit(1721104957.448:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16089 comm="syz.1.3427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x0 [ 624.685195][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 624.696804][ T5240] usb 3-1: Using ep0 maxpacket: 16 [ 624.705676][ T5240] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 624.734229][ T5240] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 624.739094][ T5240] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 624.739151][ T5240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.739173][ T5240] usb 3-1: Product: syz [ 624.739189][ T5240] usb 3-1: Manufacturer: syz [ 624.739204][ T5240] usb 3-1: SerialNumber: syz [ 624.744526][ T5240] r8152-cfgselector 3-1: Unknown version 0x0000 [ 624.758004][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 624.758785][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.759956][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.827148][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3427'. [ 624.915032][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 625.061604][T16098] binder: 16097:16098 ioctl 4018620d 0 returned -22 [ 625.175290][ T5240] r8152-cfgselector 3-1: Unknown version 0x0000 [ 625.195906][ T5240] r8152-cfgselector 3-1: bad CDC descriptors [ 625.208131][ T5240] r8152-cfgselector 3-1: USB disconnect, device number 78 [ 625.222351][T16105] loop5: detected capacity change from 0 to 16384 [ 625.239381][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 625.394563][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 625.406942][T16105] I/O error, dev loop5, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 625.493794][ T5128] usb 5-1: string descriptor 0 read error: -71 [ 625.518872][ T5128] usb 5-1: USB disconnect, device number 67 [ 625.554631][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 625.714562][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 625.734588][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3436'. [ 625.795356][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 625.954469][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 626.012472][T16127] binder: 16126:16127 ioctl 4018620d 0 returned -22 [ 626.275128][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 626.437667][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 626.447102][ T29] audit: type=1326 audit(1721104959.268:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16135 comm="syz.4.3443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x0 [ 626.594534][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 626.691543][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 626.764927][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 626.834856][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 626.988330][T16153] loop5: detected capacity change from 0 to 16384 [ 627.004637][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 627.265744][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3448'. [ 627.266432][T16162] rtc_cmos 00:00: Alarms can be up to one day in the future [ 627.314604][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 627.474429][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 627.634535][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 627.737765][ T784] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 627.794403][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 627.874681][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 627.880251][T16178] hub 9-0:1.0: USB hub found [ 627.892285][T16178] hub 9-0:1.0: 8 ports detected [ 628.034720][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 628.043922][ T784] usb 2-1: Using ep0 maxpacket: 16 [ 628.099225][ T784] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 628.264907][ T784] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 628.354345][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 628.398569][ T784] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 628.448715][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.514629][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 628.532026][ T784] usb 2-1: Product: syz [ 628.550091][ T784] usb 2-1: Manufacturer: syz [ 628.560278][ T784] usb 2-1: SerialNumber: syz [ 628.592128][ T784] r8152-cfgselector 2-1: Unknown version 0x0000 [ 628.674980][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 628.726687][ T29] audit: type=1326 audit(1721104961.558:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16186 comm="syz.2.3458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879a575bd9 code=0x0 [ 628.834775][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 628.865107][ T784] r8152-cfgselector 2-1: Unknown version 0x0000 [ 628.865253][ T784] r8152-cfgselector 2-1: bad CDC descriptors [ 628.914856][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 628.968437][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 629.074693][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 629.341234][ T5128] r8152-cfgselector 2-1: USB disconnect, device number 84 [ 629.394633][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 629.554725][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 629.695311][T16204] rtc_cmos 00:00: Alarms can be up to one day in the future [ 629.714727][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 629.855165][ T5128] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 629.886628][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 629.954711][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 630.054338][ T5128] usb 5-1: Using ep0 maxpacket: 16 [ 630.067693][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 630.089158][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 630.109451][ T5128] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 630.119283][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 630.147845][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.173081][ T5128] usb 5-1: config 0 descriptor?? [ 630.410411][T16201] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3459'. [ 630.434460][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 630.594866][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 630.605045][ T29] audit: type=1326 audit(1721104963.428:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16229 comm="syz.1.3471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x0 [ 630.715761][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.750637][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.758828][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 630.808479][ T5128] hid-generic 0003:0158:0100.0065: unknown main item tag 0x1 [ 630.808521][ T5128] hid-generic 0003:0158:0100.0065: unexpected long global item [ 630.809254][ T5128] hid-generic 0003:0158:0100.0065: probe with driver hid-generic failed with error -22 [ 630.868465][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'. [ 630.914683][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 630.994914][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 630.996772][ T784] usb 5-1: USB disconnect, device number 68 [ 631.155013][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 631.474480][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 631.527817][ T1147] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 631.529451][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3482'. [ 631.601296][T16263] syzkaller0: entered promiscuous mode [ 631.612313][T16262] syzkaller0: left promiscuous mode [ 631.634527][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 631.794415][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 631.964373][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 631.994556][T16213] Bluetooth: hci5: command 0x0406 tx timeout [ 632.034723][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 632.194611][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 632.514500][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 632.680628][T16280] hub 9-0:1.0: USB hub found [ 632.684306][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 632.784553][T16280] hub 9-0:1.0: 8 ports detected [ 632.834433][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 633.004656][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 633.074605][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 633.234606][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 633.554332][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 633.714396][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 633.733786][T16281] binder: 16275:16281 ioctl c0306201 0 returned -14 [ 633.833832][ T1147] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 633.853002][ T1147] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 633.874465][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 633.890675][ T1147] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 633.901918][ T29] audit: type=1326 audit(1721104966.718:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 633.929147][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.961884][ T29] audit: type=1326 audit(1721104966.718:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.000539][ T29] audit: type=1326 audit(1721104966.728:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.022158][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.044604][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 634.099448][ T29] audit: type=1326 audit(1721104966.728:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.121079][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.127995][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 634.212135][ T1147] usb 1-1: string descriptor 0 read error: -71 [ 634.229654][ T1147] usb 1-1: USB disconnect, device number 74 [ 634.247534][ T29] audit: type=1326 audit(1721104966.728:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.269119][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.284664][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 634.322871][ T29] audit: type=1326 audit(1721104966.728:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.360819][ T29] audit: type=1326 audit(1721104966.728:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.386511][ T29] audit: type=1326 audit(1721104966.728:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.403496][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 634.415370][ T29] audit: type=1326 audit(1721104966.728:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.1.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 634.438569][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.484029][T16306] syzkaller0: entered promiscuous mode [ 634.494923][T16304] syzkaller0: left promiscuous mode [ 634.594373][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 634.674600][ T4860] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 634.703288][T16314] binder: 16313:16314 ioctl c0306201 0 returned -14 [ 634.754393][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 634.854347][ T4860] usb 3-1: Using ep0 maxpacket: 16 [ 634.869138][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 634.914642][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 635.057235][T16321] hub 9-0:1.0: USB hub found [ 635.064743][T16321] hub 9-0:1.0: 8 ports detected [ 635.076044][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 635.154506][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 635.324452][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 635.458407][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 635.468333][ T4860] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 635.477467][ T4860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.509491][ T4860] usb 3-1: config 0 descriptor?? [ 635.634404][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 635.773277][T16301] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3495'. [ 635.794386][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 635.954404][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 636.109451][T16301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.124794][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 636.145011][T16301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.172708][ T4860] hid-generic 0003:0158:0100.0066: unknown main item tag 0x1 [ 636.184026][ T4860] hid-generic 0003:0158:0100.0066: unexpected long global item [ 636.194611][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 636.205869][ T4860] hid-generic 0003:0158:0100.0066: probe with driver hid-generic failed with error -22 [ 636.248964][T16346] binder: 16345:16346 ioctl c0306201 0 returned -14 [ 636.286143][ T5129] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 636.354729][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 636.383457][ T5132] usb 3-1: USB disconnect, device number 79 [ 636.477589][ T5129] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 636.502601][ T5129] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 636.520528][ T5129] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 636.531408][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.674631][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 636.834710][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 636.903285][T16360] hub 9-0:1.0: USB hub found [ 636.909000][T16360] hub 9-0:1.0: 8 ports detected [ 636.994376][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 637.154508][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 637.234557][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 637.394425][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 637.714560][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 637.874668][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 637.931498][ T5129] usb 2-1: string descriptor 0 read error: -71 [ 637.958036][ T5129] usb 2-1: USB disconnect, device number 85 [ 638.012453][T16371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 638.019008][T16371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 638.030047][T16371] vhci_hcd vhci_hcd.0: Device attached [ 638.036181][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 638.194770][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 638.214338][ T4860] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 638.228661][ T1147] vhci_hcd: vhci_device speed not set [ 638.274857][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 638.315364][ T5132] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 638.316129][ T1147] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 638.404363][ T4860] usb 3-1: device descriptor read/64, error -71 [ 638.434601][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 638.651634][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.663558][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.674553][ T4860] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 638.675724][ T5132] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 638.688172][ T5130] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 638.691839][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.729466][ T5132] usb 1-1: config 0 descriptor?? [ 638.754614][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 638.864368][ T4860] usb 3-1: device descriptor read/64, error -71 [ 638.901928][ T5130] usb 5-1: Using ep0 maxpacket: 16 [ 638.914641][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 638.915441][ T5130] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 638.945899][ T5130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.964420][ T5130] usb 5-1: Product: syz [ 638.968714][ T5130] usb 5-1: Manufacturer: syz [ 638.986616][ T4860] usb usb3-port1: attempt power cycle [ 639.000732][ T5130] usb 5-1: SerialNumber: syz [ 639.031657][ T5130] r8152-cfgselector 5-1: Unknown version 0x0000 [ 639.041829][ T5130] r8152-cfgselector 5-1: config 0 descriptor?? [ 639.075445][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 639.162597][T16378] vhci_hcd: connection reset by peer [ 639.171979][ T5132] usbhid 1-1:0.0: can't add hid device: -71 [ 639.178261][ T51] vhci_hcd: stop threads [ 639.178286][ T51] vhci_hcd: release socket [ 639.178368][ T51] vhci_hcd: disconnect device [ 639.224714][ T5132] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 639.234809][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 639.258350][ T5132] usb 1-1: USB disconnect, device number 75 [ 639.314745][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 639.414472][ T4860] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 639.464929][ T4860] usb 3-1: device descriptor read/8, error -71 [ 639.484706][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 639.506948][ T5128] r8152-cfgselector 5-1: USB disconnect, device number 69 [ 639.744314][ T4860] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 639.794832][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 639.810575][ T4860] usb 3-1: device descriptor read/8, error -71 [ 639.944839][ T4860] usb usb3-port1: unable to enumerate USB device [ 639.954619][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 640.118632][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 640.274544][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 640.354435][ T5128] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 640.354692][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 640.444223][ T5132] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 640.502312][T16440] loop5: detected capacity change from 0 to 16384 [ 640.524986][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 640.543523][ T5128] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 640.554034][ T5128] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 640.564334][ T5128] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 640.573397][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.594435][T14861] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 640.617141][ T57] I/O error, dev loop5, sector 768 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.627051][ T57] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 640.635696][ T57] I/O error, dev loop5, sector 776 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.646758][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 640.651933][ T57] Buffer I/O error on dev loop5, logical block 97, lost async page write [ 640.660536][ T57] I/O error, dev loop5, sector 784 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.670205][ T57] Buffer I/O error on dev loop5, logical block 98, lost async page write [ 640.679778][ T57] I/O error, dev loop5, sector 792 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.689653][ T57] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 640.698399][ T57] I/O error, dev loop5, sector 800 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.708037][ T57] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 640.717006][ T57] I/O error, dev loop5, sector 808 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.726596][ T57] Buffer I/O error on dev loop5, logical block 101, lost async page write [ 640.735170][ T57] I/O error, dev loop5, sector 816 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.744825][ T57] Buffer I/O error on dev loop5, logical block 102, lost async page write [ 640.757435][ T5132] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 640.766725][ T5132] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 640.779869][ T5132] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 640.791871][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.800857][ T5132] usb 5-1: Product: syz [ 640.805623][ T5132] usb 5-1: Manufacturer: syz [ 640.808072][T14861] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 640.810284][ T5132] usb 5-1: SerialNumber: syz [ 640.835513][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 640.838881][ T5132] r8152-cfgselector 5-1: Unknown version 0x0000 [ 640.848343][T16443] I/O error, dev loop5, sector 824 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 640.860898][T14861] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 640.860905][T16440] I/O error, dev loop5, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 640.870548][T14861] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 640.891503][T16443] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 640.895418][T14861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.994440][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 641.078475][ T5132] r8152-cfgselector 5-1: Unknown version 0x0000 [ 641.089761][ T5132] r8152-cfgselector 5-1: bad CDC descriptors [ 641.154700][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 641.314994][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 641.389230][T16453] syzkaller0: entered promiscuous mode [ 641.395565][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 641.412858][T16453] syzkaller0: entered allmulticast mode [ 641.422760][ T5128] usb 2-1: string descriptor 0 read error: -71 [ 641.450123][ T5128] usb 2-1: USB disconnect, device number 86 [ 641.520815][T16457] syzkaller0: entered promiscuous mode [ 641.528811][T16457] syzkaller0: entered allmulticast mode [ 641.551832][ T784] r8152-cfgselector 5-1: USB disconnect, device number 70 [ 641.559838][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 641.874461][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 641.998341][T14861] usb 1-1: string descriptor 0 read error: -71 [ 642.007571][T14861] usb 1-1: USB disconnect, device number 76 [ 642.044990][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 642.194703][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 642.355108][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 642.366722][ T784] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 642.434561][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 642.584768][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 642.594550][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 642.622670][ T784] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 642.642655][ T784] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 642.669965][ T784] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 642.702156][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.914430][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 642.975362][ T5130] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 643.084836][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 643.154306][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 643.168763][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 643.184295][ T5128] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 643.188162][ T5130] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 643.203121][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.219847][ T5130] usb 1-1: config 0 descriptor?? [ 643.234601][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 643.334278][T14861] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 643.377227][ T5128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.390666][ T5128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.400880][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 643.409938][ T5128] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 643.419167][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.431352][ T5128] usb 3-1: config 0 descriptor?? [ 643.474661][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 643.485266][ T1147] vhci_hcd: vhci_device speed not set [ 643.524244][T14861] usb 5-1: Using ep0 maxpacket: 16 [ 643.536924][T14861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 643.551285][T14861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 643.561391][T14861] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 643.571394][T14861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.585915][T14861] usb 5-1: config 0 descriptor?? [ 643.634863][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 643.802509][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.813977][T16491] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3571'. [ 643.824772][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.849598][ T5130] hid-generic 0003:0158:0100.0067: unknown main item tag 0x1 [ 643.863654][ T5130] hid-generic 0003:0158:0100.0067: unexpected long global item [ 643.880203][ T5130] hid-generic 0003:0158:0100.0067: probe with driver hid-generic failed with error -22 [ 643.908467][ T5128] usbhid 3-1:0.0: can't add hid device: -71 [ 643.922210][ T5128] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 643.938258][ T5128] usb 3-1: USB disconnect, device number 84 [ 643.955383][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 643.965742][ T5586] udevd[5586]: setting mode of /dev/bus/usb/003/084 to 020664 failed: No such file or directory [ 643.978069][ T5586] udevd[5586]: setting owner of /dev/bus/usb/003/084 to uid=0, gid=0 failed: No such file or directory [ 644.095404][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.105104][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.121801][T14861] hid-generic 0003:0158:0100.0068: unknown main item tag 0x1 [ 644.124513][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 644.132985][T14861] hid-generic 0003:0158:0100.0068: unexpected long global item [ 644.154369][T14861] hid-generic 0003:0158:0100.0068: probe with driver hid-generic failed with error -22 [ 644.274557][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 644.349587][T14861] usb 5-1: USB disconnect, device number 71 [ 644.425168][ T1147] usb 1-1: USB disconnect, device number 77 [ 644.435183][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 644.514724][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 644.684413][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 644.854336][ T5130] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 644.939744][T16516] syzkaller0: entered allmulticast mode [ 644.950722][T16516] syzkaller0 (unregistering): left allmulticast mode [ 644.994792][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 645.058242][ T5130] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 645.079826][ T5130] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 645.090140][ T5128] usb 2-1: USB disconnect, device number 87 [ 645.104633][ T5130] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 645.113874][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.154602][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 645.314726][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 645.474808][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 645.554648][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 645.714635][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 645.752194][T16541] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.024366][ T5130] usb 4-1: string descriptor 0 read error: -71 [ 646.034489][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 646.069934][ T5130] usb 4-1: USB disconnect, device number 71 [ 646.194436][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 646.209950][ T5128] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 646.354383][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 646.414541][ T5128] usb 3-1: Using ep0 maxpacket: 16 [ 646.424000][ T5128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 646.442384][ T5128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 646.453547][ T5128] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 646.462938][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.474653][ T5128] usb 3-1: config 0 descriptor?? [ 646.515983][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 646.544280][ T784] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 646.594785][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 646.695893][T16545] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3588'. [ 646.754958][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 646.804226][ T784] usb 1-1: Using ep0 maxpacket: 32 [ 646.836306][ T784] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 646.854406][ T784] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 646.869309][ T784] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 646.879517][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.013321][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.032006][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.059070][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 647.059088][ T29] audit: type=1326 audit(1721104979.888:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16576 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 647.074379][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 647.117104][ T5128] hid-generic 0003:0158:0100.0069: unknown main item tag 0x1 [ 647.159195][ T5128] hid-generic 0003:0158:0100.0069: unexpected long global item [ 647.165090][ T29] audit: type=1326 audit(1721104979.888:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16576 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 647.169294][ T5128] hid-generic 0003:0158:0100.0069: probe with driver hid-generic failed with error -22 [ 647.211242][ T29] audit: type=1326 audit(1721104979.918:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16576 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 647.234557][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 647.259737][ T29] audit: type=1326 audit(1721104979.918:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16576 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 647.290281][ T29] audit: type=1326 audit(1721104979.928:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16576 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fd75bd9 code=0x7ffc0000 [ 647.320106][ T1147] usb 3-1: USB disconnect, device number 85 [ 647.394358][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 647.554521][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 647.634604][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 647.794927][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 647.907943][ T29] audit: type=1326 audit(1721104980.738:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16609 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 647.944444][ T5128] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 647.981119][ T29] audit: type=1326 audit(1721104980.738:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16609 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 648.035222][ T29] audit: type=1326 audit(1721104980.788:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16609 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 648.083110][ T29] audit: type=1326 audit(1721104980.788:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16609 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 648.114419][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 648.138407][ T29] audit: type=1326 audit(1721104980.788:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16609 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8846d75bd9 code=0x7ffc0000 [ 648.143547][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 648.199971][ T5128] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 648.216393][ T5128] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 648.236221][ T5128] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 648.247872][T16618] syzkaller0: entered promiscuous mode [ 648.254621][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.256364][T16617] syzkaller0: left promiscuous mode [ 648.274494][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 648.434510][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 648.604344][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 648.674864][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 648.834503][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 648.900426][T16630] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 648.906994][T16630] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 648.919829][T16630] vhci_hcd vhci_hcd.0: Device attached [ 649.094341][ T1147] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 649.103762][ T5128] usb 4-1: string descriptor 0 read error: -71 [ 649.115255][T14861] vhci_hcd: vhci_device speed not set [ 649.130588][ T5128] usb 4-1: USB disconnect, device number 72 [ 649.154935][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 649.204247][ T5130] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 649.212603][T14861] usb 11-1: new full-speed USB device number 11 using vhci_hcd [ 649.252872][ T784] usb 1-1: USB disconnect, device number 78 [ 649.289877][ T1147] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 649.314561][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 649.319304][ T1147] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 649.353257][ T1147] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 649.363532][ T1147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.420193][ T5130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.431608][ T5130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.443110][ T5130] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 649.461041][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.473613][ T5130] usb 2-1: config 0 descriptor?? [ 649.479245][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 649.513803][T16648] kvm: emulating exchange as write [ 649.634819][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 649.715070][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 649.874855][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 649.906522][T16633] vhci_hcd: connection reset by peer [ 649.913441][ T5130] usbhid 2-1:0.0: can't add hid device: -71 [ 649.919695][ T3748] vhci_hcd: stop threads [ 649.924035][ T3748] vhci_hcd: release socket [ 649.932568][ T5130] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 649.940278][ T3748] vhci_hcd: disconnect device [ 649.964800][ T5130] usb 2-1: USB disconnect, device number 88 [ 650.087085][T16665] binder: 16664:16665 ioctl c0306201 0 returned -14 [ 650.194549][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 650.213850][ T1147] usb 3-1: string descriptor 0 read error: -71 [ 650.235087][ T1147] usb 3-1: USB disconnect, device number 86 [ 650.357632][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 650.515189][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 650.684726][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 650.754625][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 650.776825][ T5128] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 650.894276][ T784] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 650.914778][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 650.984345][ T5128] usb 4-1: Using ep0 maxpacket: 16 [ 650.997538][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 651.019259][ T5128] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 651.031806][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.050786][ T5128] usb 4-1: config 0 descriptor?? [ 651.084253][ T5130] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 651.084312][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 651.107076][ T784] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 651.125584][ T784] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 651.135101][ T784] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 651.144533][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.234562][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 651.306083][ T5130] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 651.324208][ T5130] usb 3-1: config 179 has no interface number 0 [ 651.330756][ T5130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 651.354708][ T5130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 651.374217][ T5130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 651.394912][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 651.395081][ T5130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 651.454634][ T5130] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 651.494256][ T5130] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 651.503340][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.527719][T16691] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 651.554536][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 651.565915][ T5130] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 651.661705][T16671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.680963][T16671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.707875][ T5128] hid-generic 0003:0158:0100.006A: unknown main item tag 0x1 [ 651.716306][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 651.744365][ T5128] hid-generic 0003:0158:0100.006A: unexpected long global item [ 651.773430][ T5128] hid-generic 0003:0158:0100.006A: probe with driver hid-generic failed with error -22 [ 651.775021][ T5130] usb 3-1: USB disconnect, device number 87 [ 651.794717][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 651.824038][T16709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 651.830634][T16709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 651.848060][T16709] vhci_hcd vhci_hcd.0: Device attached [ 651.901368][ T784] usb 4-1: USB disconnect, device number 73 [ 651.955135][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 652.044344][ T1147] vhci_hcd: vhci_device speed not set [ 652.115214][ T1147] usb 17-1: new full-speed USB device number 12 using vhci_hcd [ 652.134330][ T5129] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 652.275304][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 652.319601][ T5129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.340867][ T5129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.367276][ T5129] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 652.379175][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.391408][ T5129] usb 5-1: config 0 descriptor?? [ 652.434635][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 652.594516][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 652.754478][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 652.768589][T16742] loop5: detected capacity change from 0 to 16384 [ 652.775451][ T5130] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 652.816557][ T5129] usbhid 5-1:0.0: can't add hid device: -71 [ 652.824622][T16711] vhci_hcd: connection reset by peer [ 652.835912][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 652.928998][T12258] vhci_hcd: stop threads [ 652.934632][T12258] vhci_hcd: release socket [ 652.940482][T12258] vhci_hcd: disconnect device [ 652.945346][ T5129] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 652.981388][ T5129] usb 5-1: USB disconnect, device number 72 [ 652.994567][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 653.079027][T16747] hub 9-0:1.0: USB hub found [ 653.084956][T16747] hub 9-0:1.0: 8 ports detected [ 653.314404][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 653.484533][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 653.634398][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 653.794762][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 653.874525][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 654.031987][ T98] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.041455][ T98] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 654.044594][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 654.050001][ T98] I/O error, dev loop5, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.073008][ T98] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 654.081806][ T98] I/O error, dev loop5, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.094292][ T98] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 654.102820][ T98] I/O error, dev loop5, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.127851][ T98] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 654.137207][ T98] I/O error, dev loop5, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.148684][ T98] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 654.157307][ T98] I/O error, dev loop5, sector 40 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.174247][ T98] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 654.182645][ T98] I/O error, dev loop5, sector 48 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.194202][ T98] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 654.214297][ T98] I/O error, dev loop5, sector 56 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.223796][ T98] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 654.233077][ T98] I/O error, dev loop5, sector 64 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.243220][ T98] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 654.251649][ T98] I/O error, dev loop5, sector 72 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 654.261373][ T98] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 654.336987][ T784] usb 2-1: USB disconnect, device number 89 [ 654.354416][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 654.363479][T14861] vhci_hcd: vhci_device speed not set [ 654.401431][ T5130] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 654.415965][ T5130] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 654.425779][ T5130] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 654.452514][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.480211][T16755] syzkaller0: entered allmulticast mode [ 654.514514][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 654.534777][T16753] syzkaller0: left allmulticast mode [ 654.674692][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 654.834416][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 654.914996][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 655.054761][ T784] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 655.074806][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 655.394456][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 655.404198][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 655.412333][ T784] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 655.425556][ T784] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 655.454175][ T784] usb 1-1: config 179 has no interface number 0 [ 655.464539][ T784] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 655.497609][ T784] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 655.522543][ T5130] usb 3-1: string descriptor 0 read error: -71 [ 655.530434][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.539393][ T5130] usb 3-1: USB disconnect, device number 88 [ 655.554661][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:34) seen on [ 655.703224][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 655.703243][ T29] audit: type=1326 audit(1721104988.528:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16771 comm="syz.3.3663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd897d75bd9 code=0x0 [ 655.714521][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:35) seen on [ 655.796212][ T784] usb 1-1: USB disconnect, device number 79 [ 655.826710][T16775] ================================================================== [ 655.826728][T16775] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x39/0x250 [ 655.826767][T16775] Read of size 8 at addr ffff888061231b98 by task syz.4.3661/16775 [ 655.826785][T16775] [ 655.826795][T16775] CPU: 1 PID: 16775 Comm: syz.4.3661 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 655.826816][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 655.826829][T16775] Call Trace: [ 655.826841][T16775] [ 655.826851][T16775] dump_stack_lvl+0x241/0x360 [ 655.826881][T16775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.826908][T16775] ? __pfx__printk+0x10/0x10 [ 655.826932][T16775] ? _printk+0xd5/0x120 [ 655.826955][T16775] ? __virt_addr_valid+0x183/0x530 [ 655.826978][T16775] ? __virt_addr_valid+0x183/0x530 [ 655.827000][T16775] print_report+0x169/0x550 [ 655.827019][T16775] ? __virt_addr_valid+0x183/0x530 [ 655.827040][T16775] ? __virt_addr_valid+0x183/0x530 [ 655.827070][T16775] ? __virt_addr_valid+0x45f/0x530 [ 655.827093][T16775] ? __phys_addr+0xba/0x170 [ 655.827118][T16775] ? skb_release_head_state+0x39/0x250 [ 655.827142][T16775] kasan_report+0x143/0x180 [ 655.827161][T16775] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 655.827183][T16775] ? skb_release_head_state+0x39/0x250 [ 655.827210][T16775] skb_release_head_state+0x39/0x250 [ 655.827234][T16775] ? __hci_req_sync+0x62f/0x950 [ 655.827251][T16775] kfree_skb_reason+0x16d/0x3b0 [ 655.827276][T16775] __hci_req_sync+0x62f/0x950 [ 655.827297][T16775] ? __pfx___hci_req_sync+0x10/0x10 [ 655.827314][T16775] ? trace_contention_end+0x3c/0x120 [ 655.827342][T16775] ? __pfx___mutex_lock+0x10/0x10 [ 655.827366][T16775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.827393][T16775] ? __pfx_hci_inq_req+0x10/0x10 [ 655.827414][T16775] hci_req_sync+0xa9/0xd0 [ 655.827434][T16775] hci_inquiry+0x3e1/0x7d0 [ 655.827454][T16775] ? do_raw_spin_unlock+0x13c/0x8b0 [ 655.827480][T16775] ? __pfx_hci_inquiry+0x10/0x10 [ 655.827500][T16775] ? hci_sock_ioctl+0x55c/0xa40 [ 655.827521][T16775] sock_do_ioctl+0x158/0x460 [ 655.827540][T16775] ? __pfx_smack_log+0x10/0x10 [ 655.827566][T16775] ? __pfx_sock_do_ioctl+0x10/0x10 [ 655.827587][T16775] ? smk_tskacc+0x300/0x370 [ 655.827613][T16775] ? smack_file_ioctl+0x2fa/0x3a0 [ 655.827639][T16775] sock_ioctl+0x629/0x8e0 [ 655.827657][T16775] ? __pfx_sock_ioctl+0x10/0x10 [ 655.827684][T16775] ? __fget_files+0x3f6/0x470 [ 655.827704][T16775] ? __fget_files+0x29/0x470 [ 655.827725][T16775] ? bpf_lsm_file_ioctl+0x9/0x10 [ 655.827745][T16775] ? security_file_ioctl+0x87/0xb0 [ 655.827765][T16775] ? __pfx_sock_ioctl+0x10/0x10 [ 655.827791][T16775] __se_sys_ioctl+0xfc/0x170 [ 655.827817][T16775] do_syscall_64+0xf3/0x230 [ 655.827836][T16775] ? clear_bhb_loop+0x35/0x90 [ 655.827856][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.827889][T16775] RIP: 0033:0x7f8846d75bd9 [ 655.827910][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.827929][T16775] RSP: 002b:00007f8847bfe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.827952][T16775] RAX: ffffffffffffffda RBX: 00007f8846f04038 RCX: 00007f8846d75bd9 [ 655.827968][T16775] RDX: 00000000200000c0 RSI: 00000000800448f0 RDI: 0000000000000006 [ 655.827983][T16775] RBP: 00007f8846de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 655.827996][T16775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.828009][T16775] R13: 000000000000006e R14: 00007f8846f04038 R15: 00007ffd6d0f8af8 [ 655.828031][T16775] [ 655.828040][T16775] [ 655.828046][T16775] Allocated by task 5079: [ 655.828062][T16775] kasan_save_track+0x3f/0x80 [ 655.828087][T16775] __kasan_slab_alloc+0x66/0x80 [ 655.828104][T16775] kmem_cache_alloc_noprof+0x135/0x2a0 [ 655.828124][T16775] skb_clone+0x20c/0x390 [ 655.828144][T16775] hci_cmd_work+0x29e/0x670 [ 655.828165][T16775] process_scheduled_works+0xa2c/0x1830 [ 655.828183][T16775] worker_thread+0x86d/0xd50 [ 655.828200][T16775] kthread+0x2f0/0x390 [ 655.828220][T16775] ret_from_fork+0x4b/0x80 [ 655.828242][T16775] ret_from_fork_asm+0x1a/0x30 [ 655.828264][T16775] [ 655.828269][T16775] Freed by task 5079: [ 655.828279][T16775] kasan_save_track+0x3f/0x80 [ 655.828300][T16775] kasan_save_free_info+0x40/0x50 [ 655.828321][T16775] poison_slab_object+0xe0/0x150 [ 655.828344][T16775] __kasan_slab_free+0x37/0x60 [ 655.828368][T16775] kmem_cache_free+0x145/0x350 [ 655.828388][T16775] hci_cmd_work+0x273/0x670 [ 655.828409][T16775] process_scheduled_works+0xa2c/0x1830 [ 655.828425][T16775] worker_thread+0x86d/0xd50 [ 655.828442][T16775] kthread+0x2f0/0x390 [ 655.828461][T16775] ret_from_fork+0x4b/0x80 [ 655.828481][T16775] ret_from_fork_asm+0x1a/0x30 [ 655.828502][T16775] [ 655.828508][T16775] The buggy address belongs to the object at ffff888061231b40 [ 655.828508][T16775] which belongs to the cache skbuff_head_cache of size 240 [ 655.828524][T16775] The buggy address is located 88 bytes inside of [ 655.828524][T16775] freed 240-byte region [ffff888061231b40, ffff888061231c30) [ 655.828544][T16775] [ 655.828549][T16775] The buggy address belongs to the physical page: [ 655.828565][T16775] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888061231280 pfn:0x61231 [ 655.828584][T16775] memcg:ffff888078fa0001 [ 655.828594][T16775] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 655.828616][T16775] page_type: 0xffffefff(slab) [ 655.828636][T16775] raw: 00fff00000000200 ffff888018aa3000 ffffea0000c0c450 ffffea00018cf810 [ 655.828654][T16775] raw: ffff888061231280 00000000000c0009 00000001ffffefff ffff888078fa0001 [ 655.828665][T16775] page dumped because: kasan: bad access detected [ 655.828679][T16775] page_owner tracks the page as allocated [ 655.828686][T16775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 784, tgid 784 (kworker/1:2), ts 182746222404, free_ts 182530598001 [ 655.828719][T16775] post_alloc_hook+0x1f3/0x230 [ 655.828739][T16775] get_page_from_freelist+0x2e4c/0x2f10 [ 655.828760][T16775] __alloc_pages_noprof+0x256/0x6c0 [ 655.828780][T16775] alloc_slab_page+0x5f/0x120 [ 655.828802][T16775] allocate_slab+0x5a/0x2f0 [ 655.828825][T16775] ___slab_alloc+0xcd1/0x14b0 [ 655.828846][T16775] __slab_alloc+0x58/0xa0 [ 655.828866][T16775] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 655.828887][T16775] __alloc_skb+0x1c3/0x440 [ 655.828907][T16775] nsim_dev_trap_report_work+0x254/0xaa0 [ 655.828931][T16775] process_scheduled_works+0xa2c/0x1830 [ 655.828949][T16775] worker_thread+0x86d/0xd50 [ 655.828966][T16775] kthread+0x2f0/0x390 [ 655.828985][T16775] ret_from_fork+0x4b/0x80 [ 655.829005][T16775] ret_from_fork_asm+0x1a/0x30 [ 655.829027][T16775] page last free pid 7537 tgid 7537 stack trace: [ 655.829038][T16775] free_unref_folios+0xf12/0x19c0 [ 655.829064][T16775] folios_put_refs+0x93a/0xa60 [ 655.829083][T16775] free_pages_and_swap_cache+0x2ea/0x690 [ 655.829107][T16775] tlb_flush_mmu+0x3a3/0x680 [ 655.829125][T16775] tlb_finish_mmu+0xd4/0x200 [ 655.829141][T16775] exit_mmap+0x44f/0xc80 [ 655.829163][T16775] __mmput+0x115/0x3c0 [ 655.829179][T16775] exit_mm+0x220/0x310 [ 655.829198][T16775] do_exit+0x9aa/0x27e0 [ 655.829217][T16775] do_group_exit+0x207/0x2c0 [ 655.829236][T16775] __x64_sys_exit_group+0x3f/0x40 [ 655.829256][T16775] do_syscall_64+0xf3/0x230 [ 655.829271][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.829295][T16775] [ 655.829300][T16775] Memory state around the buggy address: [ 655.829310][T16775] ffff888061231a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 655.829324][T16775] ffff888061231b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 655.829337][T16775] >ffff888061231b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.829348][T16775] ^ [ 655.829359][T16775] ffff888061231c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 655.829373][T16775] ffff888061231c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.829383][T16775] ================================================================== [ 655.829395][T16775] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 655.829407][T16775] CPU: 1 PID: 16775 Comm: syz.4.3661 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 655.829428][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 655.829440][T16775] Call Trace: [ 655.829449][T16775] [ 655.829458][T16775] dump_stack_lvl+0x241/0x360 [ 655.829486][T16775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.829514][T16775] ? __pfx__printk+0x10/0x10 [ 655.829538][T16775] ? rcu_is_watching+0x15/0xb0 [ 655.829561][T16775] ? vscnprintf+0x5d/0x90 [ 655.829582][T16775] panic+0x349/0x860 [ 655.829607][T16775] ? check_panic_on_warn+0x21/0xb0 [ 655.829630][T16775] ? __pfx_panic+0x10/0x10 [ 655.829656][T16775] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 655.829675][T16775] ? lockdep_hardirqs_on+0x99/0x150 [ 655.829700][T16775] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 655.829719][T16775] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 655.829741][T16775] check_panic_on_warn+0x86/0xb0 [ 655.829763][T16775] ? skb_release_head_state+0x39/0x250 [ 655.829784][T16775] end_report+0x77/0x160 [ 655.829804][T16775] kasan_report+0x154/0x180 [ 655.829821][T16775] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 655.829841][T16775] ? skb_release_head_state+0x39/0x250 [ 655.829867][T16775] skb_release_head_state+0x39/0x250 [ 655.829891][T16775] ? __hci_req_sync+0x62f/0x950 [ 655.829909][T16775] kfree_skb_reason+0x16d/0x3b0 [ 655.829933][T16775] __hci_req_sync+0x62f/0x950 [ 655.829955][T16775] ? __pfx___hci_req_sync+0x10/0x10 [ 655.829971][T16775] ? trace_contention_end+0x3c/0x120 [ 655.829999][T16775] ? __pfx___mutex_lock+0x10/0x10 [ 655.830022][T16775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.830055][T16775] ? __pfx_hci_inq_req+0x10/0x10 [ 655.830075][T16775] hci_req_sync+0xa9/0xd0 [ 655.830095][T16775] hci_inquiry+0x3e1/0x7d0 [ 655.830114][T16775] ? do_raw_spin_unlock+0x13c/0x8b0 [ 655.830142][T16775] ? __pfx_hci_inquiry+0x10/0x10 [ 655.830164][T16775] ? hci_sock_ioctl+0x55c/0xa40 [ 655.830186][T16775] sock_do_ioctl+0x158/0x460 [ 655.830204][T16775] ? __pfx_smack_log+0x10/0x10 [ 655.830229][T16775] ? __pfx_sock_do_ioctl+0x10/0x10 [ 655.830250][T16775] ? smk_tskacc+0x300/0x370 [ 655.830276][T16775] ? smack_file_ioctl+0x2fa/0x3a0 [ 655.830301][T16775] sock_ioctl+0x629/0x8e0 [ 655.830319][T16775] ? __pfx_sock_ioctl+0x10/0x10 [ 655.830344][T16775] ? __fget_files+0x3f6/0x470 [ 655.830363][T16775] ? __fget_files+0x29/0x470 [ 655.830383][T16775] ? bpf_lsm_file_ioctl+0x9/0x10 [ 655.830403][T16775] ? security_file_ioctl+0x87/0xb0 [ 655.830423][T16775] ? __pfx_sock_ioctl+0x10/0x10 [ 655.830449][T16775] __se_sys_ioctl+0xfc/0x170 [ 655.830474][T16775] do_syscall_64+0xf3/0x230 [ 655.830493][T16775] ? clear_bhb_loop+0x35/0x90 [ 655.830512][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.830538][T16775] RIP: 0033:0x7f8846d75bd9 [ 655.830555][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.830571][T16775] RSP: 002b:00007f8847bfe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.830592][T16775] RAX: ffffffffffffffda RBX: 00007f8846f04038 RCX: 00007f8846d75bd9 [ 655.830607][T16775] RDX: 00000000200000c0 RSI: 00000000800448f0 RDI: 0000000000000006 [ 655.830621][T16775] RBP: 00007f8846de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 655.830634][T16775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.830647][T16775] R13: 000000000000006e R14: 00007f8846f04038 R15: 00007ffd6d0f8af8 [ 655.830670][T16775] [ 655.830900][T16775] Kernel Offset: disabled