last executing test programs: 18m43.920508649s ago: executing program 4 (id=4529): r0 = socket$nl_route(0x10, 0x3, 0x0) lchown(&(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x40}, {0x17}, 0x0, 0x3, 0xb8}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) (async) unshare(0x22020600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x39, &(0x7f0000000440)="67d20fb7adc76c2c7ae93ab2e26a77f37c95f71c5b9f2a8cd8fe9f4971b19f80c1dadfb4af9c45272ab1df4f305053c38d0d8e9f649e67c620") recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) (async) r5 = openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000001bc0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000080)={{r6, 0x8, 0x1, 0x10000, 0xfffffffffffffff8, 0xc0000000, 0x7, 0xd268, 0x5, 0x9, 0x3, 0xffffffff, 0x1, 0x2, 0x3}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000bc0)={r6, 0x9}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000bc0)={r6, 0x9}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000b40)=@multiplanar_fd={0xfffffff5, 0x8, 0x4, 0xe000, 0x1, {}, {0x1, 0x2, 0x80, 0x1, 0x0, 0x74, "42d2c4b2"}, 0x8, 0x4, {0x0}, 0x9}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x0) (async) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) (async) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000001c0)={0x1, r9}) (async) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000001c0)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 18m42.97943174s ago: executing program 4 (id=4533): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='&\xfe`\x89\x00\xff', &(0x7f00000000c0)='%(:.', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000e00)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24086100feee22cd"}}}}}, 0x0) syz_emit_ethernet(0xd88, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd7a, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0xd66, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}, "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"}}}}}}, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x191}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r2, 0xc, 0x4010, 0xffffffffffffffff, 0x0) 18m42.7636207s ago: executing program 4 (id=4534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x94) 18m42.637102901s ago: executing program 4 (id=4535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = msgget$private(0x0, 0x7c) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r2, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82) msgsnd(r2, &(0x7f0000000000)={0x3, "13dee6e1027c6275d5f51b9c612d068af69402beb1359319a3561000f9f0cd92670bb09b1284760605a3559c0bf8a0a8875a"}, 0x36, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r5 = syz_io_uring_setup(0x35c0, &(0x7f0000000140)={0x0, 0x334e, 0x8, 0x3, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r5, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xffffffffe9001000, 0xfff8}}, 0x50) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 18m41.639639241s ago: executing program 4 (id=4540): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000dabeffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 18m41.187998804s ago: executing program 4 (id=4545): bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x20, &(0x7f0000000380)={0x0}, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x0, 0x7, 0x2083, 0x6ae0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r4, 0x4, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) 18m40.839995747s ago: executing program 32 (id=4545): bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x20, &(0x7f0000000380)={0x0}, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x0, 0x7, 0x2083, 0x6ae0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r4, 0x4, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) 6m29.442987587s ago: executing program 0 (id=7321): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000700007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m28.837638659s ago: executing program 0 (id=7323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x7}]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000002e000900f2fffffffddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendmsg$kcm(r2, &(0x7f0000002940)={&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0xfffff001, @empty, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000"], 0x10}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4, 0x60, 0x2d, 0x5}, {0x9, 0xc, 0x7, 0xff}, {0x1, 0x2, 0x7, 0x1}, {0x0, 0xa, 0x4, 0x3}, {0xb4, 0x6, 0x0, 0x847}]}) 6m28.706141733s ago: executing program 0 (id=7324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x300, 0x10000047}, 0x4000050) 6m28.597451857s ago: executing program 0 (id=7325): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9, 0x80000}]}}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 6m24.777832886s ago: executing program 0 (id=7336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x290, 0xfffffffc, 0x2000, 0x2, r3, 0x0, 0x104}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="3802000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000008401050020010000000000000000000000000000000000002b0000000a000000fc0100000000000000000000000000000000000004000000000000000000000000000000ac1414aa0000000000000000000000002d0000006c0000000a000000000000000000000000000000000000000000000000000000000000000400000000000000ac1e010100000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000e3ff"], 0x238}}, 0x2404c814) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x641, 0x96) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) read$hidraw(r5, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f00000000c0)={0x60000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x30}}, 0x1011) 6m24.537378768s ago: executing program 0 (id=7339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x40c000, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000001640)={0x0, 0x86f7, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000016c0), &(0x7f0000000000)) io_uring_enter(r3, 0x48eb, 0x0, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x3e, 0x0}, 0x20000010) 6m24.057448156s ago: executing program 33 (id=7339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x40c000, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000001640)={0x0, 0x86f7, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000016c0), &(0x7f0000000000)) io_uring_enter(r3, 0x48eb, 0x0, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x3e, 0x0}, 0x20000010) 22.716861636s ago: executing program 3 (id=8936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0xc3ffffff}, 0x0) 22.564141997s ago: executing program 3 (id=8937): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40009420}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x18}}, 0x20008080) 22.494897825s ago: executing program 3 (id=8938): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200f42, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x16, 0x2c, 0x1, 0xf, 0x7, 0xeb8e, 0x5, 0x9b}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) (async) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) (async) bind$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x18, 0xe6}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000480)={r11, @in={{0x2, 0x4e20, @remote}}, [0x7, 0x8, 0x8, 0x100000002, 0x3, 0x1400010000, 0x7, 0xfffffffffdffffff, 0x400000, 0x5, 0x3, 0xce, 0x2, 0xa0e6, 0xeff]}, &(0x7f0000000000)=0xfc) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000480)={r11, @in={{0x2, 0x4e20, @remote}}, [0x7, 0x8, 0x8, 0x100000002, 0x3, 0x1400010000, 0x7, 0xfffffffffdffffff, 0x400000, 0x5, 0x3, 0xce, 0x2, 0xa0e6, 0xeff]}, &(0x7f0000000000)=0xfc) io_setup(0x8, &(0x7f0000004200)) prctl$PR_SET_PDEATHSIG(0x21, 0x1e) (async) prctl$PR_SET_PDEATHSIG(0x21, 0x1e) 22.089507184s ago: executing program 3 (id=8939): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000140), 0x804408, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x911008, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range(r2, r2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x78, 0x101301) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x77359400}}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a110036c379000000000001000058000b4824ca945f6400940f6a51beb3aa600d228794e0ceb7651716758062e1d9f4ff46ede8ed4de6d2541072d8929067fd708935c22c8f086ba17249ad25cfb51f58f85bee1b1c0b44bf0e3772c226af31c01dae8692a3854e771e139774f7540000000000000007fdd353cef1c3e10e53821e99ee4db748a6857ba443a74012b8", 0xa0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x8000}) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) 21.147210744s ago: executing program 3 (id=8945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) 20.829013196s ago: executing program 3 (id=8947): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x70, 0x8, 0x3, 0x2c, @private0, @remote, 0x1, 0x1, 0x8, 0x1000}}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x1b, r3, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 20.160647366s ago: executing program 34 (id=8947): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x70, 0x8, 0x3, 0x2c, @private0, @remote, 0x1, 0x1, 0x8, 0x1000}}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x1b, r3, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 8.574305721s ago: executing program 7 (id=9006): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x32) (async) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x32) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002efa38a08cd061b01914f0102030109021b0001040340030904"], &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x10d, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080000}, 0xc014) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080000}, 0xc014) 5.370829634s ago: executing program 6 (id=9031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x7, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) sendmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @private2, 0x4000a, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x84, 0x71}], 0xc}}], 0x2, 0x44055) 5.281251048s ago: executing program 7 (id=9032): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.95074038s ago: executing program 6 (id=9034): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x80000001, 0x2}}) write(r2, &(0x7f0000000480)="240000001a005f0214f9f407000904ff80000000fe0200020000000008000400019e16f4309df19771868fcd9f8a4237049987f5b2076c9c0a966326455f2d3ca600000000cbe8f9f564d3c0dca1ee0c51a5560f7761c23070eeb5e089943d5b3c49288c3b34ce615b4a206e6d96d6511d03b9b6a04cea41f38f784e4617f8154b9da1765962f0145bc38c96835721beb6", 0x91) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x8864, {@llc={0x42, 0x0, "ec7f", "c89372dd2e1f829987f51d6ea22394782ed3c214e41e318b38de8c0d7b3d5cbb95c5ce7388edacc9"}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) open(&(0x7f0000000100)='./file0\x00', 0x800, 0x0) r7 = dup2(r6, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r7, &(0x7f0000000740)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) write$UHID_INPUT(r5, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) 4.645870573s ago: executing program 7 (id=9035): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72fa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xbb3bf6c7c9321795, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xc0, {0x9, 0x21, 0x62, 0x6, 0x1, {0x22, 0xd62}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x2, 0xd7}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xf8, 0x67, 0x93}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0xfb, 0x9, 0x10, 0x80}, 0x14d, &(0x7f0000000200)={0x5, 0xf, 0x14d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0xa, 0x19c}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "be6060eed2bb2ef93b2ba95a813767eb"}, @generic={0x100, 0x10, 0xa, "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"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x3, 0xbf3}, @generic={0x23, 0x10, 0xb, "46c76fb1eceed64eb65da83d6d0b330aca88556f5e64b63255727284a0c8468e"}]}, 0x5, [{0xbc, &(0x7f00000000c0)=@string={0xbc, 0x3, "e2405f4a24b2e737f7ba3fc3795131e526aad0cbef8e3e765105016f529ef877c38b28fb3c4a38646d98fb14d175fcbaab45263cd896c6699fdf6b10beacbba8472749fd36c9922843a68430a45a8982834de7b598229079226d4a817a8da6e01b7fe70a5b8e7fd61e13130be4a0c23b998a23813371ba2f0eb12bc40472befd9cfba0b7c8d2846a83e3a4a3fd90ad7d8117dbe71a376f4bb85266cae5de5b79d17c96e4fd27a1d24a3bbd82b60ced3f3483ee903406a890b533"}}, {0xac, &(0x7f0000000400)=@string={0xac, 0x3, "718ed2a7adffef3db1d8619ee5ddc19f3224a0c4a25a46fc13327d134d6cb71f22061ba0a8047ffdc354ed0aa48bf41c6363b4567e09fb1c099d5bdeee39c3c38118b9e5ee9a41e60a4e59851d3c771df814702e6d7785be9056098a54c479b073ee0c5ec0f6d008e54e9d6c712703678d96fa7a0b9e12ad932e71117305109e2120eae159a32282cadde290d261db92f1f61be26aefa697c239271508cde6e69ef49da5ee0929deb4b8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1001}}, {0x2d, &(0x7f0000000380)=@string={0x2d, 0x3, "846a1abaea33fb2449f3cc0b97ef8eae6c8793da39a080bde339b0bfee8ccc6745635a83fa103636328737"}}, {0x69, &(0x7f00000004c0)=@string={0x69, 0x3, "81353a9f4300a10643aa994d444a5013aa336caaea0668bd9cbdacfb44bc1acf9cc9e6ee97ebb3c0c70cb454e4fc05fd1f0ffb2e1d04dbd9c0599910b6ecfde8cb077318c5a7e7c474afd693d5053f1d80e1ed55dc8f24b80ecf3113051d371906efc18a12d675"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x14, &(0x7f0000000580)={0x0, 0xb, 0xc2, {0xc2, 0x4, "1c369bb256544907ad2c242458371fc4e9e82d096a132acb9649854574d7cada07b33896b5537b6d493068464f1a9e617cdbfb5b7ffd86d71d37cc15a723932370eb79a3b814d4377b2c8fa28ecfb9f367d9811f18cbc59e6e71de98675505be9b91d30cb67b25cb2a7fa765f34ea0931f5dc54108519bd4d4a8602aa1a3405f28f4f85c7b97d4f3b1429923162254dcbb632b9108c4c02268ead2c1d479c4748e2c13dbea2a6c92913dc73869dd87d1b0c8919c06f8b35abf4a1a60511ac171"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c24}}, &(0x7f00000006c0)={0x0, 0x22, 0x12, {[@local=@item_012={0x2, 0x2, 0xa, "8d4f"}, @global=@item_4={0x3, 0x1, 0x6, "7f119a17"}, @main=@item_012={0x2, 0x0, 0xc, "e820"}, @local=@item_4={0x3, 0x2, 0x2, "672ab3ef"}, @local=@item_012={0x1, 0x2, 0x9, "a9"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5bb}}}}, &(0x7f0000000a00)={0x18, &(0x7f0000000800)={0x40, 0x3, 0xc1, "522b8450ec757d50b59fbfdc97b76cc5b878b220f67c1841ad62969bcc8402a4f2b24d33e4d844482b52329207d8245f6541e67db6f2712fc2953a9a4d759fd7c99254f821c0b206256e6463283c7c2e78cbe2f57e85d0318acf8a4e71b3b65ea1e831e54f4a69e5894a1230fc6266107214b0758c14e6f5fcea173c2b2df1fdacf8b26c6501d0c57dd4288b95a720e253255300d1d7a5aba290a8536e61e75c1a4abe10d7a591439c7bd8dd38ecb43a47328ef03c364ab028bf05c244294407c1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x1, 0x74, "84e317e1447b2e36674475334866ddc2c70f970b22b189325d5aafe539cd46fc81c2cd1a08fcff6409a52ba58c49f111b8c97658a7c1d795069298c58d131ff693766402facf720f893fadcfa101cb3284cfdf682a455b984fdd60b9ebe5d4322ec8170a8553a9c22c7535bc46bdd26e6ee4aab5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.390446027s ago: executing program 6 (id=9036): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0xf93f000, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x1000, @empty, 0x8}, 0x1c) 3.65848192s ago: executing program 2 (id=9043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in=@local, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0xd, 0x9}, {0x0, 0x4}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x33}, 0x0, @in=@private=0xa0100ff, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000240), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x40080) socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00'}) 3.589728642s ago: executing program 5 (id=9044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x8864, {@llc={0x42, 0x0, "ec7f", "c89372dd2e1f829987f51d6ea22394782ed3c214e41e318b38de8c0d7b3d5cbb95c5ce7388edacc9"}}}}}, 0x0) 3.468636534s ago: executing program 5 (id=9045): unshare(0x8040600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000090601080000008bc66de5c408e3cea600070000000800094085800000050001000000007fffffff00070000000900020073797a3200000000000000b5171ea66fe8c5a0d1f24f09e3"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), 0xfffffffffffffebd) 3.309646233s ago: executing program 5 (id=9046): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x1c, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x8, 0xfa, "4ac2411e"}]}, 0x1c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="9e8794ebf606260046a6fd706f2cbcebc89cebdef0f7794e5651a0f57c982b03cf511ff9817b830fa407f6c3636f94366470ff8167d0ffe2c94e003f7a5257070547392d68d3a63dd1ea417af46ba55f11b2fef6fb0cc6c3e37fcc06550a56796557fcaca634ee8a82f7086cc0110f276bd7a796c59422444180a931734f", 0x7e}], 0x1, &(0x7f0000000300)=[@mark={{0x10, 0x1, 0x24, 0xfffffff9}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}], 0x24}, 0x804) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0010f19d04ffff00a7ffffffce7da35d81dca4afce63bf63b6d2d81b59f00220625c8f8fee4ac569f8968801ec626acc4709891838dcf39ff9fad85ea2e3b1655351921931f3308fefdafa182572b9979b7f375acf3f25"]) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xffbc, 0x21, 0xfff7, 0x5}, 'syz0\x00', 0x55}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fcf9ef000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 3.120488069s ago: executing program 5 (id=9047): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x0, 0x83, 0xc, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "004dda", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00', {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x0, 0x0, @local, @empty}}}}}, 0x62) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x9, 0x4, 0x100, 0xffffffff, {0x77359400}, {0x1, 0x8, 0xed, 0x5, 0x5, 0x1, "61b3067a"}, 0x1, 0x3, {0x0}, 0x9}) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r2, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) 2.891666962s ago: executing program 5 (id=9048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x7, 0x0, 0x9ac, 0xfffffc, 0x3, 0xfffffffffffffffb}, {0x0, 0x7, 0x200000000000000}, 0x800}}, 0xb4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000009e8ffffff000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000000000000000000000080ffffff0000000000000000000000000000ffffffffffffffff0700"], 0xb8}}, 0x10) 2.776439892s ago: executing program 1 (id=9049): geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.697203824s ago: executing program 5 (id=9050): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x63, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x40040d0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1f], 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x3, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\''}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001180)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x27) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x4, 0x4, 0x20002, 0x1009, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_4={0x3, 0x0, 0x0, "63ee201e"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @global=@item_012={0x1, 0x1, 0x5, '='}]}}, 0x0}, 0x0) 2.439698111s ago: executing program 2 (id=9051): geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x4bf9, 0x0, 0x0, 0x0) 1.849682083s ago: executing program 1 (id=9052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.779550795s ago: executing program 1 (id=9053): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000800)="f44320656fda21f51ce4cd7e32f5f86a53f2a3e4864ebebba59d9927f8bc3cb69af631", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000ca2ca1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x88000]}}) 1.656786991s ago: executing program 1 (id=9054): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x1, 0x75, 0x2}, 0x10) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x8) 1.535993296s ago: executing program 2 (id=9055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x8864, {@llc={0x42, 0x0, "ec7f", "c89372dd2e1f829987f51d6ea22394782ed3c214e41e318b38de8c0d7b3d5cbb95c5ce7388edacc9"}}}}}, 0x0) 1.408009742s ago: executing program 7 (id=9056): openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc1c4, 0x5, 0x4, 0xd311, 0x400, 0x9da, 0x92eb, 0x9fbd, 0x1}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xd, 0x3be7, 0xffffe540, 0x2, 0x8, 0x4}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) socket$igmp6(0xa, 0x3, 0x2) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x6, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000456810", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffff", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r12, @ANYRES32=r12, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.405413387s ago: executing program 2 (id=9057): geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 1.29985149s ago: executing program 1 (id=9058): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0xedffffff, 0x2000c0c1}, 0x40000) 1.228380587s ago: executing program 6 (id=9059): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x2, 0x1, "e70db0655ed2e56c9e205977fcc735021695ee853985fbfeb44c9bbb02b40614", 0x32315241}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) lseek(0xffffffffffffffff, 0x9, 0x2) readahead(r6, 0x0, 0x6) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.039032481s ago: executing program 1 (id=9060): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYRES8=r3], 0xbc}}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 769.702815ms ago: executing program 6 (id=9061): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 669.757128ms ago: executing program 6 (id=9062): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r3, &(0x7f0000012b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10060, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) setxattr$incfs_id(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f0000000180)=0x131) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x1, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x40009, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x4640, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x1db, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0x11, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18c, 0x6, 0x6, 0x454f, 0x206, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8001, 0x8, 0xfffffff3, 0x129432f6, 0xc8, 0xef, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0x6, 0x5, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x8, 0xb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x46, 0x9, 0x1, 0xfe000000, 0x8, 0x4, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0xfc, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x33c9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x8001, 0x3, 0x303c, 0xfffffffa, 0x8000000b, 0x5, 0x2, 0x2, 0x400007, 0x20000008, 0x3, 0x6d01, 0x6, 0x38, 0x800003, 0x202, 0x40000080, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x0, 0xa, 0x3, 0x5, 0x1c, 0x11fffd, 0x807ff, 0x2006, 0x80a2ef, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x4, 0xb9, 0x0, 0x1fb, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x1b57d867, 0xf4, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x106, 0x7, 0xffffffff, 0xfffffffd, 0x0, 0x5, 0xc8, 0x40000001, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x107, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x5, 0x5, 0x803, 0x3, 0x200, 0x0, 0x3]}, 0x45c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540500001e000701fefffffffcdbdf25017c0000040045803c0501"], 0x554}, 0x1, 0x0, 0x0, 0xc004}, 0xc044) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r7, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$inet(0x2, 0x3, 0x2) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x319}, &(0x7f00000001c0), &(0x7f00000005c0)) 488.115451ms ago: executing program 7 (id=9063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40) 341.624232ms ago: executing program 2 (id=9064): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x82, 0x64) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r2, &(0x7f0000000480)="33a6", 0x2, 0xa, 0x0, 0x0, r2}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x61, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5aa5ef4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe2$watch_queue(&(0x7f0000000080), 0x80) r5 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r5, r0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbe1, 0x20b, 0x10000}}) 292.96378ms ago: executing program 7 (id=9065): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000009040000030300000009"], 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x1000000400000000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=9066): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1000, 0x800) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x3d6c5bcd87437fa6) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{r0}, r1, 0xc, @inherit={0x60, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x3, {0x14, 0x7, 0x7, 0x8000000000000001, 0x8}, [0xffffffffffffffff, 0x5, 0x2]}}, @devid=r2}) r3 = inotify_init() sendfile64(r0, r3, &(0x7f0000001700)=0x4, 0xfffffff4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r4 = openat$cgroup_ro(r0, &(0x7f0000001740)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000001780)={0x54000, 0x107000}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000017c0)=0x2, 0x4) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000001800)={0x2, 0x0, [{0x9bf, 0x0, 0x10}, {0x3ad, 0x0, 0x3}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xc0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001a00)={&(0x7f0000001940), 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x3730ee37d181317b, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x40000804) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000001a40)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000001a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f0000001c80)={"bba98eb7d1822a92a7ee39ee1a0cdbab", r5, r1, {0x3, 0x5}, {0x5, 0x6}, 0x8000000000000001, [0x5, 0x4e54ce91, 0xd, 0x7fffffff, 0x5, 0x7, 0x3, 0x5, 0x0, 0xeca, 0x1, 0x5, 0x7, 0x9, 0x6, 0x921]}) fcntl$setsig(r0, 0xa, 0x14) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000001d80)={0x200000, 0x10, '\x00', 0x0, &(0x7f0000001d40)=[0x0, 0x0]}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001dc0)="5bc7d6a8372d14af5717d32bb36f6bf3", 0x10) openat$pidfd(0xffffff9c, &(0x7f0000001e00), 0x101202, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000001e40)={0x8, 0x0, 0x76, 0x5}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001e80)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}}, &(0x7f0000001f40)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001f80)={r8, @in={{0x2, 0x4e21, @private=0xa010102}}}, 0x84) r9 = signalfd(r0, &(0x7f0000002040)={[0x5f, 0x8]}, 0x8) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r9, 0x4068aea3, &(0x7f0000002080)={0xa4, 0x0, 0x1}) kernel console output (not intermixed with test programs): 940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.751620][T28940] usb 6-1: Product: syz [ 2080.756083][T28940] usb 6-1: Manufacturer: syz [ 2080.760725][T28940] usb 6-1: SerialNumber: syz [ 2080.778146][ T8237] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 2080.787323][ T8237] bridge2 (unregistering): left promiscuous mode [ 2080.794053][ T8237] bridge2 (unregistering): left allmulticast mode [ 2080.926178][ T8237] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 2080.934590][ T8237] bridge4 (unregistering): left promiscuous mode [ 2080.940980][ T8237] bridge4 (unregistering): left allmulticast mode [ 2080.972678][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.983410][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.011169][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.034789][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.044401][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.047981][ T8237] tipc: Disabling bearer [ 2081.054188][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.101789][T28940] cypress_m8 6-1:5.215: DeLorme Earthmate USB converter detected [ 2081.164353][T28940] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 2081.218312][T28940] usb 6-1: USB disconnect, device number 52 [ 2081.246727][T28940] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 2081.262106][T28940] cypress_m8 6-1:5.215: device disconnected [ 2081.368185][ T8237] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 2081.377883][ T8237] bridge6 (unregistering): left promiscuous mode [ 2081.495097][ T4119] binder: 4112:4119 ioctl 40044591 0 returned -22 [ 2081.542619][ T8237] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 2081.551007][ T8237] bridge8 (unregistering): left promiscuous mode [ 2081.570343][ T4120] binder: 4112:4120 ioctl c0306201 80000640 returned -22 [ 2081.672676][ T8237] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 2081.683436][ T8237] bridge9 (unregistering): left promiscuous mode [ 2081.691541][ T8237] bridge9 (unregistering): left allmulticast mode [ 2081.749454][ T8237] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 2081.761193][ T8237] bridge10 (unregistering): left promiscuous mode [ 2081.769364][ T8237] bridge10 (unregistering): left allmulticast mode [ 2081.782493][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8659'. [ 2081.829687][ T8237] bond9 (unregistering): (slave bridge11): Releasing backup interface [ 2081.838405][ T8237] bridge11 (unregistering): left promiscuous mode [ 2081.845229][ T8237] bridge11 (unregistering): left allmulticast mode [ 2082.012796][T22420] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2082.023766][T22420] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2082.047890][T22420] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2082.054194][T10910] Bluetooth: hci2: command tx timeout [ 2082.074530][T22420] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 2082.102760][T22420] usb 2-1: USB disconnect, device number 15 [ 2082.155532][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2082.169541][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2082.180064][ T8237] bond0 (unregistering): Released all slaves [ 2082.318106][ T8237] bond1 (unregistering): Released all slaves [ 2082.438954][T22420] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2082.458583][ T8237] bond2 (unregistering): Released all slaves [ 2082.598363][ T8237] bond3 (unregistering): Released all slaves [ 2082.604465][T22420] usb 2-1: Using ep0 maxpacket: 8 [ 2082.634011][T22420] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.650952][T22420] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2082.701617][T22420] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2082.718758][T22420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2082.726956][T22420] usb 2-1: Product: syz [ 2082.738859][T22420] usb 2-1: Manufacturer: syz [ 2082.743579][T22420] usb 2-1: SerialNumber: syz [ 2082.764549][T22420] usb 2-1: config 0 descriptor?? [ 2082.782558][T22420] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 2082.798379][T22420] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 2082.816183][T22420] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2082.845026][ T8237] bond4 (unregistering): Released all slaves [ 2082.981528][ T8237] bond5 (unregistering): Released all slaves [ 2083.125543][ T8237] bond6 (unregistering): Released all slaves [ 2083.139613][ T8237] bond7 (unregistering): Released all slaves [ 2083.269580][ T8237] bond8 (unregistering): Released all slaves [ 2083.400001][ T8237] bond9 (unregistering): Released all slaves [ 2083.414281][ T4066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2083.421265][ T4066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2083.450683][ T4066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2083.528150][ T4127] netlink: 'syz.1.8660': attribute type 3 has an invalid length. [ 2083.553688][ T4127] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8660'. [ 2083.708174][ T4131] loop2: detected capacity change from 0 to 7 [ 2083.725836][ T4131] Dev loop2: unable to read RDB block 7 [ 2083.731474][ T4131] loop2: unable to read partition table [ 2083.756234][ T107] usb 2-1: USB disconnect, device number 16 [ 2083.764518][ T4133] loop6: detected capacity change from 0 to 7 [ 2083.774126][ T4131] loop2: partition table beyond EOD, truncated [ 2083.789407][ T8237] tipc: Left network mode [ 2083.800800][ T4131] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2083.801669][ T4133] Dev loop6: unable to read RDB block 7 [ 2083.833290][ T4066] hsr_slave_0: entered promiscuous mode [ 2083.837013][ T4133] loop6: AHDI p3 p4 [ 2083.842939][ T4133] loop6: partition table partially beyond EOD, truncated [ 2083.851517][ T4133] loop6: p3 start 7305061 is beyond EOD, truncated [ 2083.868639][ T4066] hsr_slave_1: entered promiscuous mode [ 2083.882553][ T4066] debugfs: 'hsr0' already exists in 'hsr' [ 2083.927774][ T4066] Cannot create hsr debugfs directory [ 2084.133679][T10910] Bluetooth: hci2: command tx timeout [ 2084.227121][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 2084.227134][ T30] audit: type=1326 audit(1765598387.760:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.324120][ T30] audit: type=1326 audit(1765598387.790:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.351966][ T30] audit: type=1326 audit(1765598387.790:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.457351][ T30] audit: type=1326 audit(1765598387.790:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.501261][ T30] audit: type=1326 audit(1765598387.790:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.529255][ T30] audit: type=1326 audit(1765598387.800:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.571661][ T30] audit: type=1326 audit(1765598387.800:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.676118][ T30] audit: type=1326 audit(1765598387.800:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.700436][ T30] audit: type=1326 audit(1765598387.800:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.730565][ T30] audit: type=1326 audit(1765598387.800:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4139 comm="syz.5.8665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2084.896947][ T4143] bond2: option downdelay: invalid value (18446744073709551609) [ 2084.971862][ T4143] bond2: option downdelay: allowed values 0 - 2147483647 [ 2084.997095][ T4143] bond2 (unregistering): Released all slaves [ 2085.145418][ T4148] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2085.189877][ T4148] bond9 (unregistering): Released all slaves [ 2085.630924][ T8237] hsr_slave_0: left promiscuous mode [ 2085.645738][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2085.658328][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.673169][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2085.695602][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2085.736206][ T8237] veth1_macvtap: left promiscuous mode [ 2085.741736][ T8237] veth0_macvtap: left promiscuous mode [ 2085.812591][ T4177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8671'. [ 2086.206979][ T8237] team_slave_1 (unregistering): left promiscuous mode [ 2086.213644][T10910] Bluetooth: hci2: command tx timeout [ 2086.217463][ T8237] team_slave_1 (unregistering): left allmulticast mode [ 2086.230241][ T8237] team0 (unregistering): Port device team_slave_1 removed [ 2086.280398][ T8237] team_slave_0 (unregistering): left promiscuous mode [ 2086.288157][ T8237] team_slave_0 (unregistering): left allmulticast mode [ 2086.298067][ T8237] team0 (unregistering): Port device team_slave_0 removed [ 2087.311904][ T4182] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8672'. [ 2087.666456][ T4192] FAULT_INJECTION: forcing a failure. [ 2087.666456][ T4192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.762735][ T4192] CPU: 0 UID: 0 PID: 4192 Comm: syz.6.8675 Tainted: G L syzkaller #0 PREEMPT(full) [ 2087.762775][ T4192] Tainted: [L]=SOFTLOCKUP [ 2087.762784][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2087.762797][ T4192] Call Trace: [ 2087.762805][ T4192] [ 2087.762814][ T4192] dump_stack_lvl+0x189/0x250 [ 2087.762845][ T4192] ? __pfx____ratelimit+0x10/0x10 [ 2087.762874][ T4192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2087.762899][ T4192] ? __pfx__printk+0x10/0x10 [ 2087.762928][ T4192] ? __might_fault+0xb0/0x130 [ 2087.762969][ T4192] should_fail_ex+0x414/0x560 [ 2087.763001][ T4192] _copy_from_user+0x2d/0xb0 [ 2087.763024][ T4192] j1939_sk_setsockopt_flag+0xe1/0x200 [ 2087.763056][ T4192] ? __pfx_j1939_sk_setsockopt_flag+0x10/0x10 [ 2087.763088][ T4192] ? aa_sk_perm+0x7ee/0x920 [ 2087.763113][ T4192] j1939_sk_setsockopt+0x112/0x9f0 [ 2087.763145][ T4192] ? __pfx_aa_sk_perm+0x10/0x10 [ 2087.763165][ T4192] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 2087.763192][ T4192] ? aa_sock_opt_perm+0xff/0x1a0 [ 2087.763218][ T4192] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2087.763237][ T4192] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 2087.763267][ T4192] do_sock_setsockopt+0x17c/0x1b0 [ 2087.763292][ T4192] __ia32_sys_setsockopt+0x13f/0x1b0 [ 2087.763318][ T4192] __do_fast_syscall_32+0x1f7/0x570 [ 2087.763339][ T4192] ? rcu_is_watching+0x15/0xb0 [ 2087.763363][ T4192] ? do_fast_syscall_32+0x34/0x80 [ 2087.763387][ T4192] do_fast_syscall_32+0x34/0x80 [ 2087.763407][ T4192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2087.763438][ T4192] RIP: 0023:0xf7fa6539 [ 2087.763455][ T4192] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2087.763472][ T4192] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2087.763494][ T4192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000006b [ 2087.763507][ T4192] RDX: 0000000000000002 RSI: 0000000080000240 RDI: 0000000000000004 [ 2087.763520][ T4192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2087.763532][ T4192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2087.763543][ T4192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2087.763571][ T4192] [ 2088.239981][ T4200] netlink: 'syz.2.8676': attribute type 1 has an invalid length. [ 2088.309966][ T4195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8676'. [ 2088.509241][ T4200] bond16: entered promiscuous mode [ 2088.515162][ T4200] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2088.522614][ T4195] bond16: entered allmulticast mode [ 2088.757074][ T4200] bond16: (slave bridge14): making interface the new active one [ 2088.795924][ T4200] bridge14: entered promiscuous mode [ 2088.819989][ T4200] bridge14: entered allmulticast mode [ 2088.835271][ T4200] bond16: (slave bridge14): Enslaving as an active interface with an up link [ 2088.909294][ T4222] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2088.927579][ T4222] bond2 (unregistering): Released all slaves [ 2089.229677][ T8237] tipc: Subscription rejected, illegal request [ 2089.240791][ T4066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2089.269075][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2089.271268][ T30] audit: type=1326 audit(1765598392.790:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.326517][ T30] audit: type=1326 audit(1765598392.800:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.354895][ T30] audit: type=1326 audit(1765598392.800:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.379363][ T30] audit: type=1326 audit(1765598392.800:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.401569][ T30] audit: type=1326 audit(1765598392.800:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.423886][ T30] audit: type=1326 audit(1765598392.800:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.449339][ T30] audit: type=1326 audit(1765598392.800:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.472522][ T30] audit: type=1326 audit(1765598392.800:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.498797][ T30] audit: type=1326 audit(1765598392.800:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.521269][ T30] audit: type=1326 audit(1765598392.800:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4227 comm="syz.2.8680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2089.602316][ T4066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2089.806810][ T4233] bond17: option downdelay: invalid value (18446744073709551609) [ 2089.816162][ T4233] bond17: option downdelay: allowed values 0 - 2147483647 [ 2089.839156][ T4233] bond17 (unregistering): Released all slaves [ 2089.919569][ T4066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2089.997346][ T4066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2090.442208][ T4066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2090.525699][ T4066] 8021q: adding VLAN 0 to HW filter on device team0 [ 2090.594761][T30812] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.601974][T30812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2090.676185][T30809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.683402][T30809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2090.895912][ T4066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2090.923592][T22420] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2091.003989][ T4066] veth0_vlan: entered promiscuous mode [ 2091.058204][ T4066] veth1_vlan: entered promiscuous mode [ 2091.105461][T22420] usb 6-1: Using ep0 maxpacket: 8 [ 2091.128101][T22420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.169475][T22420] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 2091.203555][T22420] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2091.227426][T22420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2091.262262][T22420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.262510][ T4066] veth0_macvtap: entered promiscuous mode [ 2091.293900][T22420] usb 6-1: Product: syz [ 2091.308254][ T4066] veth1_macvtap: entered promiscuous mode [ 2091.316732][T22420] usb 6-1: Manufacturer: syz [ 2091.335536][T22420] usb 6-1: SerialNumber: syz [ 2091.360194][ T4270] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2091.389216][ T4066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2091.424298][ T4066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2091.459158][ T5967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.481180][ T5967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.490716][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2091.524074][ T5967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.555630][ T5967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.633815][ T5954] usb 2-1: device descriptor read/64, error -71 [ 2091.744827][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2091.757706][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.851381][T30813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2091.880993][T30813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.903600][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2092.053864][ T5954] usb 2-1: device descriptor read/64, error -71 [ 2092.176295][ T5954] usb usb2-port1: attempt power cycle [ 2092.430580][T22420] cdc_ncm 6-1:1.0: bind() failure [ 2092.475706][T22420] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 2092.543909][ T5954] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2092.548946][T22420] usb 6-1: USB disconnect, device number 53 [ 2092.572162][ T4317] openvswitch: netlink: Key type 30 is not supported [ 2092.592600][ T5954] usb 2-1: device descriptor read/8, error -71 [ 2092.793189][ T4319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8693'. [ 2092.843620][ T5954] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2092.884519][ T5954] usb 2-1: device descriptor read/8, error -71 [ 2093.013963][ T5954] usb usb2-port1: unable to enumerate USB device [ 2093.771529][ T5954] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2093.955655][ T5954] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2093.997223][ T5954] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2094.053657][ T5954] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2094.105535][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2094.116194][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2094.124971][ T5954] usb 3-1: Product: syz [ 2094.129235][ T5954] usb 3-1: Manufacturer: syz [ 2094.140561][ T5954] usb 3-1: SerialNumber: syz [ 2094.594060][ T5954] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2094.736281][ T5954] usb 3-1: USB disconnect, device number 119 [ 2094.790078][ T5954] usblp0: removed [ 2094.947463][ T4357] bond1: option downdelay: invalid value (18446744073709551609) [ 2094.955772][ T4357] bond1: option downdelay: allowed values 0 - 2147483647 [ 2095.029460][ T4357] bond1 (unregistering): Released all slaves [ 2095.152532][ T4381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2095.505184][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8703'. [ 2095.547089][ T4386] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8703'. [ 2095.587255][ T4386] netlink: 'syz.2.8703': attribute type 1 has an invalid length. [ 2095.622081][ T4386] netlink: 'syz.2.8703': attribute type 1 has an invalid length. [ 2095.653364][ T4386] netlink: 'syz.2.8703': attribute type 1 has an invalid length. [ 2096.633925][ T5954] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2096.685127][ T4396] loop6: detected capacity change from 0 to 7 [ 2096.692472][ T4396] Dev loop6: unable to read RDB block 7 [ 2096.699401][ T4396] loop6: AHDI p3 p4 [ 2096.703348][ T4396] loop6: partition table partially beyond EOD, truncated [ 2096.711812][ T4396] loop6: p3 start 7305061 is beyond EOD, truncated [ 2096.809048][ T5954] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2096.847874][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.883670][ T5954] usb 6-1: Product: syz [ 2096.887909][ T5954] usb 6-1: Manufacturer: syz [ 2096.892503][ T5954] usb 6-1: SerialNumber: syz [ 2097.004686][ T4407] program syz.2.8710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2097.411404][ T4426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8717'. [ 2097.544900][T22420] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2097.715842][T22420] usb 4-1: Using ep0 maxpacket: 8 [ 2097.727234][T22420] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.762910][T22420] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2097.789543][T22420] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2097.818556][T22420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2097.827203][T22420] usb 4-1: Product: syz [ 2097.831533][T22420] usb 4-1: Manufacturer: syz [ 2097.836285][T22420] usb 4-1: SerialNumber: syz [ 2097.844733][T22420] usb 4-1: config 0 descriptor?? [ 2097.854896][T22420] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 2097.877801][T22420] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 2097.901096][T22420] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2098.073209][ T4418] netlink: 'syz.3.8714': attribute type 3 has an invalid length. [ 2098.092386][ T4418] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8714'. [ 2098.173682][T22420] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2098.354888][T22420] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2098.370079][ T107] usb 4-1: USB disconnect, device number 121 [ 2098.384418][T22420] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 2098.417188][T22420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.444720][T22420] usb 2-1: config 0 descriptor?? [ 2098.603817][ T5954] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 2098.692722][ T5954] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2098.734031][ T5954] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2098.769429][ T5954] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2098.832288][ T5954] usb 6-1: USB disconnect, device number 54 [ 2098.951017][ T4445] netlink: 'syz.2.8722': attribute type 1 has an invalid length. [ 2099.025388][ T4448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8722'. [ 2099.049611][ T4445] bond17: entered promiscuous mode [ 2099.078565][ T4445] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2099.136024][ T4448] bond17: entered allmulticast mode [ 2099.232446][ T4445] bond17: (slave bridge15): making interface the new active one [ 2099.272456][ T4445] bridge15: entered promiscuous mode [ 2099.292974][ T4445] bridge15: entered allmulticast mode [ 2099.330547][ T4445] bond17: (slave bridge15): Enslaving as an active interface with an up link [ 2099.564881][ T4455] fuse: Unknown parameter 'rootmo*' [ 2099.832822][T22420] usb 2-1: USB disconnect, device number 21 [ 2100.628497][ T4470] loop2: detected capacity change from 0 to 7 [ 2100.647136][T29566] Dev loop2: unable to read RDB block 7 [ 2100.684212][T29566] loop2: unable to read partition table [ 2100.712115][T29566] loop2: partition table beyond EOD, truncated [ 2100.738973][ T4470] Dev loop2: unable to read RDB block 7 [ 2100.767059][ T4470] loop2: unable to read partition table [ 2100.796781][ T4470] loop2: partition table beyond EOD, truncated [ 2100.851670][ T4470] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2100.896303][ T4475] veth1_macvtap: left promiscuous mode [ 2100.947528][ T4475] macsec0: entered promiscuous mode [ 2101.012432][ T4476] veth1_macvtap: entered promiscuous mode [ 2101.047971][ T4476] macsec0: left promiscuous mode [ 2101.248736][ T4486] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2101.972844][ T4481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2102.097408][ T4481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2102.122779][ T4489] macsec2: entered promiscuous mode [ 2102.138222][ T4489] macsec2: entered allmulticast mode [ 2102.235883][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2102.235898][ T30] audit: type=1326 audit(1765598405.760:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.299546][ T30] audit: type=1326 audit(1765598405.760:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.325720][ T30] audit: type=1326 audit(1765598405.760:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.360963][ T30] audit: type=1326 audit(1765598405.760:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.391690][ T30] audit: type=1326 audit(1765598405.760:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.434006][ T30] audit: type=1326 audit(1765598405.760:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.461143][ T30] audit: type=1326 audit(1765598405.770:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.486216][ T30] audit: type=1326 audit(1765598405.770:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.510556][ T30] audit: type=1326 audit(1765598405.770:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.563319][ T30] audit: type=1326 audit(1765598405.770:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.5.8733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2102.671399][ T4500] bond2: option downdelay: invalid value (18446744073709551609) [ 2102.679494][ T4500] bond2: option downdelay: allowed values 0 - 2147483647 [ 2102.691866][ T4500] bond2 (unregistering): Released all slaves [ 2102.873812][T32632] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2103.043722][T32632] usb 4-1: Using ep0 maxpacket: 8 [ 2103.056952][T32632] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.099946][T32632] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2103.146160][T32632] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2103.155899][T32632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2103.165059][T32632] usb 4-1: Product: syz [ 2103.187177][T32632] usb 4-1: Manufacturer: syz [ 2103.191825][T32632] usb 4-1: SerialNumber: syz [ 2103.208445][T32632] usb 4-1: config 0 descriptor?? [ 2103.249811][T32632] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 2103.274138][T32632] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 2103.284605][T32632] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2103.458007][ T4508] netlink: 'syz.3.8735': attribute type 3 has an invalid length. [ 2103.474902][ T4508] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8735'. [ 2103.631448][ T4527] program syz.1.8740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2103.655284][T32632] usb 4-1: USB disconnect, device number 122 [ 2103.963628][ T3877] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2103.992242][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.998666][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.133611][ T3877] usb 2-1: Using ep0 maxpacket: 8 [ 2104.150264][ T3877] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2104.184399][ T3877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.200150][ T3877] usb 2-1: Product: syz [ 2104.204803][ T3877] usb 2-1: Manufacturer: syz [ 2104.233892][ T3877] usb 2-1: SerialNumber: syz [ 2104.260155][ T3877] usb 2-1: config 0 descriptor?? [ 2104.518160][ T3877] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2104.813858][T32632] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2105.057217][T32632] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2105.126697][T32632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.237746][T32632] usb 6-1: Product: syz [ 2105.241953][T32632] usb 6-1: Manufacturer: syz [ 2105.336644][T32632] usb 6-1: SerialNumber: syz [ 2105.375715][T32632] usb 6-1: config 0 descriptor?? [ 2105.567299][ T3877] gspca_sunplus: reg_w_riv err -71 [ 2105.572549][ T3877] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 2105.628443][ T3877] usb 2-1: USB disconnect, device number 22 [ 2105.651864][T10889] usb 6-1: USB disconnect, device number 55 [ 2105.726144][ T4557] loop2: detected capacity change from 0 to 7 [ 2105.750661][ T4557] Dev loop2: unable to read RDB block 7 [ 2105.759357][ T4557] loop2: unable to read partition table [ 2105.768930][ T4557] loop2: partition table beyond EOD, truncated [ 2105.777133][ T4557] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2105.813741][ T4559] netlink: 'syz.2.8752': attribute type 1 has an invalid length. [ 2105.877622][ T4554] bond3: option downdelay: invalid value (18446744073709551609) [ 2105.886202][ T4561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8752'. [ 2105.897362][ T4554] bond3: option downdelay: allowed values 0 - 2147483647 [ 2105.940744][ T4554] bond3 (unregistering): Released all slaves [ 2106.079515][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8752'. [ 2106.132192][ T4559] bond18: entered promiscuous mode [ 2106.156662][ T4559] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2106.199944][ T4561] bond18: entered allmulticast mode [ 2106.261262][ T4567] bond18: (slave bridge16): making interface the new active one [ 2106.292428][ T4567] bridge16: entered promiscuous mode [ 2106.311128][ T4567] bridge16: entered allmulticast mode [ 2106.325591][ T4567] bond18: (slave bridge16): Enslaving as an active interface with an up link [ 2106.648630][T10889] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2106.773884][T28940] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2106.813938][T10889] usb 2-1: Using ep0 maxpacket: 8 [ 2106.830936][T10889] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2106.843156][T10889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.854296][T10889] usb 2-1: Product: syz [ 2106.858647][T10889] usb 2-1: Manufacturer: syz [ 2106.863268][T10889] usb 2-1: SerialNumber: syz [ 2106.872224][T10889] usb 2-1: config 0 descriptor?? [ 2106.968799][ T4588] program syz.5.8758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2106.997180][T28940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2107.024075][T28940] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2107.048246][T28940] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2107.108539][T10889] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2107.126410][T28940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2107.169529][T28940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2107.186946][T28940] usb 4-1: Product: syz [ 2107.191521][T28940] usb 4-1: Manufacturer: syz [ 2107.211670][T28940] usb 4-1: SerialNumber: syz [ 2107.442565][T28940] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2107.525670][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8765'. [ 2107.545930][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8765'. [ 2107.576084][ T4608] netlink: 'syz.6.8766': attribute type 1 has an invalid length. [ 2107.646740][ T4611] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8766'. [ 2107.687320][ T4608] bond3: entered promiscuous mode [ 2107.699850][ T4608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2107.736835][T28940] usb 4-1: USB disconnect, device number 123 [ 2107.764043][ T4611] bond3: entered allmulticast mode [ 2107.782636][T28940] usblp0: removed [ 2107.802085][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8766'. [ 2107.868494][ T4608] bond3: (slave bridge4): making interface the new active one [ 2107.877640][ T4608] bridge4: entered promiscuous mode [ 2107.892706][ T4608] bridge4: entered allmulticast mode [ 2107.902722][ T4608] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 2107.933946][ T4618] loop2: detected capacity change from 0 to 7 [ 2107.955859][ T4618] Dev loop2: unable to read RDB block 7 [ 2107.974745][ T4618] loop2: unable to read partition table [ 2107.989416][ T4618] loop2: partition table beyond EOD, truncated [ 2108.008067][ T4618] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2108.534616][T10889] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2108.927708][ T4632] program syz.3.8773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2109.078282][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8774'. [ 2109.417051][ T3877] usb 2-1: USB disconnect, device number 23 [ 2109.559211][ T4649] loop6: detected capacity change from 0 to 7 [ 2109.569603][ T4649] Dev loop6: unable to read RDB block 7 [ 2109.583624][ T4649] loop6: AHDI p3 p4 [ 2109.593580][ T4649] loop6: partition table partially beyond EOD, truncated [ 2109.602399][ T4652] netlink: 'syz.5.8782': attribute type 9 has an invalid length. [ 2109.608871][ T4649] loop6: p3 start 7305061 is beyond EOD, truncated [ 2109.612738][ T4652] netlink: 'syz.5.8782': attribute type 6 has an invalid length. [ 2109.682081][ T4652] gre2: entered promiscuous mode [ 2109.714110][T10889] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2109.895881][T10889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2109.907521][ T3877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2109.927116][T10889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2109.957809][T10889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2109.999861][T10889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2110.014481][T10889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.033690][T10889] usb 4-1: config 0 descriptor?? [ 2110.074288][ T5954] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2110.082363][ T3877] usb 2-1: Using ep0 maxpacket: 8 [ 2110.093231][ T3877] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2110.102667][ T3877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.112769][ T3877] usb 2-1: Product: syz [ 2110.123091][ T3877] usb 2-1: Manufacturer: syz [ 2110.132994][ T3877] usb 2-1: SerialNumber: syz [ 2110.155965][ T4664] loop2: detected capacity change from 0 to 7 [ 2110.171494][ T3877] usb 2-1: config 0 descriptor?? [ 2110.177419][T29566] Dev loop2: unable to read RDB block 7 [ 2110.200015][T29566] loop2: unable to read partition table [ 2110.208659][ T3877] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2110.224376][T29566] loop2: partition table beyond EOD, truncated [ 2110.232220][ T4664] Dev loop2: unable to read RDB block 7 [ 2110.247085][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2110.253591][ T4664] loop2: unable to read partition table [ 2110.262852][ T4664] loop2: partition table beyond EOD, truncated [ 2110.280032][ T5954] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2110.290127][ T5954] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2110.293605][T32632] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2110.307903][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2110.315549][ T4664] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2110.333108][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2110.352298][ T5954] usb 6-1: Product: syz [ 2110.363908][ T5954] usb 6-1: Manufacturer: syz [ 2110.382609][ T5954] usb 6-1: SerialNumber: syz [ 2110.465123][T10889] plantronics 0003:047F:FFFF.0098: reserved main item tag 0xd [ 2110.484030][T10889] plantronics 0003:047F:FFFF.0098: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2110.506637][T32632] usb 3-1: Using ep0 maxpacket: 16 [ 2110.516736][T32632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.530378][T32632] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2110.541895][T32632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.556464][T32632] usb 3-1: config 0 descriptor?? [ 2110.610778][ T5954] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2110.824235][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8781'. [ 2110.844149][ T3877] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2110.864047][ T3877] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2110.876166][ T5954] usb 6-1: USB disconnect, device number 56 [ 2110.882641][ T3877] usb 2-1: USB disconnect, device number 24 [ 2110.905599][ T5954] usblp1: removed [ 2111.144576][T32632] mcp2221 0003:04D8:00DD.0099: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2111.695231][ T4684] program syz.3.8793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2111.903609][T10889] usb 4-1: reset high-speed USB device number 124 using dummy_hcd [ 2112.203811][T32632] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2112.375405][T32632] usb 2-1: Using ep0 maxpacket: 16 [ 2112.399904][T32632] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.425762][T32632] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.442207][T32632] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2112.450031][T32632] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2112.464975][T32632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.481340][T32632] usb 2-1: config 0 descriptor?? [ 2112.738378][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.781785][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.822143][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.872774][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.271190][ T4705] loop6: detected capacity change from 0 to 7 [ 2113.297538][T28940] usb 3-1: USB disconnect, device number 120 [ 2113.311806][ T4705] Dev loop6: unable to read RDB block 7 [ 2113.345472][ T4705] loop6: AHDI p3 p4 [ 2113.375920][ T4705] loop6: partition table partially beyond EOD, truncated [ 2113.420823][ T4690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8796'. [ 2113.433777][ T4705] loop6: p3 start 7305061 is beyond EOD, truncated [ 2113.543229][T32632] usbhid 2-1:0.0: can't add hid device: -71 [ 2113.598060][T32632] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2113.628476][T32632] usb 2-1: USB disconnect, device number 25 [ 2113.874925][ T4715] loop2: detected capacity change from 0 to 7 [ 2113.895063][ T4715] Dev loop2: unable to read RDB block 7 [ 2113.900821][ T4715] loop2: unable to read partition table [ 2113.908373][T28940] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2113.918630][ T4715] loop2: partition table beyond EOD, truncated [ 2113.925117][ T4715] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2114.063855][T28940] usb 3-1: Using ep0 maxpacket: 8 [ 2114.076860][T28940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.092515][T28940] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2114.113719][T28940] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2114.123895][T28940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2114.132208][T28940] usb 3-1: Product: syz [ 2114.137526][ T4721] program syz.6.8808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2114.147053][T28940] usb 3-1: Manufacturer: syz [ 2114.151945][T28940] usb 3-1: SerialNumber: syz [ 2114.181940][T28940] usb 3-1: config 0 descriptor?? [ 2114.210750][T28940] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 2114.263765][T28940] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 2114.320196][T28940] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2114.434395][ T4709] netlink: 'syz.2.8802': attribute type 3 has an invalid length. [ 2114.462569][ T4709] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8802'. [ 2114.548062][T28940] usb 3-1: USB disconnect, device number 121 [ 2114.837273][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2114.837294][ T30] audit: type=1326 audit(1765598418.370:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2114.959107][ T30] audit: type=1326 audit(1765598418.370:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.083950][ T30] audit: type=1326 audit(1765598418.400:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.172814][ T30] audit: type=1326 audit(1765598418.400:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.236214][ T30] audit: type=1326 audit(1765598418.410:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.302500][ T30] audit: type=1326 audit(1765598418.410:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.302591][ T30] audit: type=1326 audit(1765598418.410:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.302651][ T30] audit: type=1326 audit(1765598418.410:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.302724][ T30] audit: type=1326 audit(1765598418.410:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.302771][ T30] audit: type=1326 audit(1765598418.410:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2115.575069][ T4753] loop6: detected capacity change from 0 to 7 [ 2115.581059][ T4753] Dev loop6: unable to read RDB block 7 [ 2115.581095][ T4753] loop6: AHDI p3 p4 [ 2115.581123][ T4753] loop6: partition table partially beyond EOD, truncated [ 2115.581323][ T4753] loop6: p3 start 7305061 is beyond EOD, truncated [ 2115.904596][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8817'. [ 2116.206591][ T3877] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2116.381752][ T3877] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2116.392360][ T3877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.400671][ T3877] usb 3-1: Product: syz [ 2116.406600][ T3877] usb 3-1: Manufacturer: syz [ 2116.411429][ T3877] usb 3-1: SerialNumber: syz [ 2116.419936][ T4766] netlink: 'syz.1.8822': attribute type 1 has an invalid length. [ 2116.423371][ T3877] usb 3-1: config 0 descriptor?? [ 2116.469911][ T4770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8822'. [ 2116.600660][ T4766] bond9: entered promiscuous mode [ 2116.618927][ T4766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2116.661873][ T4770] bond9: entered allmulticast mode [ 2116.671663][ T107] usb 3-1: USB disconnect, device number 122 [ 2116.782840][ T4766] bond9: (slave bridge10): making interface the new active one [ 2116.812175][ T4777] loop2: detected capacity change from 0 to 7 [ 2116.818044][ T4766] bridge10: entered promiscuous mode [ 2116.831876][ T4766] bridge10: entered allmulticast mode [ 2116.839770][ T4777] Dev loop2: unable to read RDB block 7 [ 2116.859186][ T4766] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 2116.870626][ T4777] loop2: unable to read partition table [ 2116.883331][ T4777] loop2: partition table beyond EOD, truncated [ 2116.913845][ T4777] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2117.084107][T10889] usb 4-1: device descriptor read/64, error -110 [ 2117.208914][ T4790] fuse: Bad value for 'fd' [ 2117.354856][T10889] usb 4-1: reset high-speed USB device number 124 using dummy_hcd [ 2117.401558][ T4798] syzkaller0: entered promiscuous mode [ 2117.401583][ T4798] syzkaller0: entered allmulticast mode [ 2117.513850][T10889] usb 4-1: device descriptor read/64, error -32 [ 2117.763671][T10889] usb 4-1: reset high-speed USB device number 124 using dummy_hcd [ 2117.898536][T10889] usb 4-1: device descriptor read/8, error -32 [ 2118.163712][T10889] usb 4-1: reset high-speed USB device number 124 using dummy_hcd [ 2118.202233][T10889] usb 4-1: device descriptor read/8, error -32 [ 2118.353955][T10889] raw-gadget.0 gadget.3: failed to queue suspend event [ 2118.410696][ T5954] usb 4-1: USB disconnect, device number 124 [ 2118.597392][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2118.679919][ T4823] netlink: 'syz.6.8838': attribute type 1 has an invalid length. [ 2118.694728][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2118.742326][ T4828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8838'. [ 2118.796913][ T5954] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2118.828862][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2118.837756][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2118.930816][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2119.015347][ T5954] usb 4-1: device descriptor read/64, error -32 [ 2119.126065][ T5954] raw-gadget.0 gadget.3: failed to queue suspend event [ 2119.133429][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2119.150531][ T4805] bond19: option downdelay: invalid value (18446744073709551609) [ 2119.160583][ T4805] bond19: option downdelay: allowed values 0 - 2147483647 [ 2119.213633][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2119.283612][ T5954] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2119.296883][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2119.313591][T32632] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2119.323750][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2119.403700][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2119.413135][ T4805] bond19 (unregistering): Released all slaves [ 2119.426605][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.439408][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.463992][ T5954] usb 4-1: device descriptor read/64, error -32 [ 2119.483024][T32632] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2119.501301][T32632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.561506][T32632] usb 6-1: Product: syz [ 2119.573584][T32632] usb 6-1: Manufacturer: syz [ 2119.573623][ T5954] raw-gadget.0 gadget.3: failed to queue suspend event [ 2119.578201][T32632] usb 6-1: SerialNumber: syz [ 2119.591114][ T4823] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2119.592819][ T5954] usb usb4-port1: attempt power cycle [ 2119.611867][ T5954] raw-gadget.0 gadget.3: failed to queue disconnect event [ 2119.642282][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2119.685387][T32632] usb 6-1: config 0 descriptor?? [ 2119.714981][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2119.733799][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2119.908383][T32632] usb 6-1: USB disconnect, device number 57 [ 2119.958803][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2120.053663][ T5954] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2120.094007][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2120.107280][ T5954] usb 4-1: device descriptor read/8, error -32 [ 2120.236091][ T5954] raw-gadget.0 gadget.3: failed to queue suspend event [ 2120.266021][ T5954] raw-gadget.0 gadget.3: failed to queue reset event [ 2120.334784][ T4846] fuse: Bad value for 'fd' [ 2120.343688][ T5954] raw-gadget.0 gadget.3: failed to queue resume event [ 2120.420151][ T4848] loop2: detected capacity change from 0 to 7 [ 2120.443972][ T5954] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2120.453784][ T4848] Dev loop2: unable to read RDB block 7 [ 2120.471691][ T4848] loop2: unable to read partition table [ 2120.480499][ T4848] loop2: partition table beyond EOD, truncated [ 2120.491356][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2120.500616][ T5954] usb 4-1: device descriptor read/8, error -32 [ 2120.513635][ T4848] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2120.554938][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8846'. [ 2120.617252][ T5954] raw-gadget.0 gadget.3: failed to queue suspend event [ 2120.638726][ T5954] usb usb4-port1: unable to enumerate USB device [ 2120.797804][ T4857] program syz.3.8847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2120.813957][T32632] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2120.825101][ T4857] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8847'. [ 2121.004157][T32632] usb 6-1: Using ep0 maxpacket: 8 [ 2121.022286][T32632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.057261][T32632] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2121.119843][T32632] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2121.177655][T32632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2121.219865][T32632] usb 6-1: Product: syz [ 2121.270169][T32632] usb 6-1: Manufacturer: syz [ 2121.288074][T32632] usb 6-1: SerialNumber: syz [ 2121.323677][T32632] usb 6-1: config 0 descriptor?? [ 2121.347264][T32632] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 2121.397090][T32632] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 2121.432998][T32632] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2121.487883][ T4876] loop6: detected capacity change from 0 to 7 [ 2121.502512][T29545] Dev loop6: unable to read RDB block 7 [ 2121.508768][T29545] loop6: AHDI p3 p4 [ 2121.518740][T29545] loop6: partition table partially beyond EOD, truncated [ 2121.533919][T29545] loop6: p3 start 7305061 is beyond EOD, truncated [ 2121.553250][ T4876] Dev loop6: unable to read RDB block 7 [ 2121.585135][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8851'. [ 2121.595474][ T4876] loop6: AHDI p3 p4 [ 2121.626689][ T4852] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 2121.642966][ T4852] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8845'. [ 2121.653604][ T4876] loop6: partition table partially beyond EOD, truncated [ 2121.678687][ T4876] loop6: p3 start 7305061 is beyond EOD, truncated [ 2121.736379][ T5954] usb 6-1: USB disconnect, device number 58 [ 2122.354643][ T3877] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2122.479892][ T4897] fuse: Bad value for 'fd' [ 2122.543347][ T3877] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2122.579877][ T3877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.602648][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2122.602660][ T30] audit: type=1326 audit(1765598426.130:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.665905][ T3877] usb 3-1: Product: syz [ 2122.678155][ T3877] usb 3-1: Manufacturer: syz [ 2122.682851][ T3877] usb 3-1: SerialNumber: syz [ 2122.682892][ T30] audit: type=1326 audit(1765598426.170:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.736149][ T30] audit: type=1326 audit(1765598426.180:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.774283][ T3877] usb 3-1: config 0 descriptor?? [ 2122.790706][ T30] audit: type=1326 audit(1765598426.180:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.843408][ T30] audit: type=1326 audit(1765598426.180:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.890886][ T30] audit: type=1326 audit(1765598426.180:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2122.973371][ T30] audit: type=1326 audit(1765598426.180:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2123.018416][ T30] audit: type=1326 audit(1765598426.180:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2123.085655][ T43] usb 3-1: USB disconnect, device number 123 [ 2123.151256][ T30] audit: type=1326 audit(1765598426.180:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2123.228836][ T4902] bond2: option downdelay: invalid value (18446744073709551609) [ 2123.254414][ T4902] bond2: option downdelay: allowed values 0 - 2147483647 [ 2123.261893][ T30] audit: type=1326 audit(1765598426.180:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.5.8859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2123.345788][ T4908] loop2: detected capacity change from 0 to 7 [ 2123.356541][ T4902] bond2 (unregistering): Released all slaves [ 2123.406859][ T4908] Dev loop2: unable to read RDB block 7 [ 2123.432220][ T4908] loop2: unable to read partition table [ 2123.459100][ T4908] loop2: partition table beyond EOD, truncated [ 2123.480944][ T4908] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2123.628346][ T4915] program syz.3.8865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2123.947259][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8866'. [ 2124.004294][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8866'. [ 2124.057409][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8866'. [ 2124.085424][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8866'. [ 2124.123824][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8866'. [ 2124.150959][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8868'. [ 2124.357287][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2124.382692][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2124.407698][ T4932] i2c i2c-1: Invalid block write size 155 [ 2124.428955][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2124.449927][ T4933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2124.573695][ T5954] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2124.733568][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 2124.745607][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.773023][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2124.819556][ T5954] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2124.835571][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2124.861549][ T5954] usb 6-1: Product: syz [ 2124.875035][ T5954] usb 6-1: Manufacturer: syz [ 2124.892140][ T5954] usb 6-1: SerialNumber: syz [ 2124.924494][ T5954] usb 6-1: config 0 descriptor?? [ 2124.948679][ T5954] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 2124.966141][ T5954] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 2124.989054][ T5954] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2125.180241][ T4930] netlink: 'syz.5.8870': attribute type 3 has an invalid length. [ 2125.280059][ T3877] usb 6-1: USB disconnect, device number 59 [ 2125.447076][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.477555][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.603352][ T4948] program syz.2.8876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2125.633211][ T4948] __nla_validate_parse: 30 callbacks suppressed [ 2125.633226][ T4948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8876'. [ 2125.782601][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.814878][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.979944][ T4958] loop2: detected capacity change from 0 to 7 [ 2125.989914][T21848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2126.002080][T21848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2126.010266][T21848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2126.020166][T21848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2126.028073][T21848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2126.035716][ T5954] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2126.044924][ T4958] Dev loop2: unable to read RDB block 7 [ 2126.082211][ T4958] loop2: unable to read partition table [ 2126.090662][ T4958] loop2: partition table beyond EOD, truncated [ 2126.100002][ T4958] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2126.233681][ T5954] usb 2-1: device descriptor read/64, error -71 [ 2126.348440][ T4966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2126.494211][ T4971] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2126.500774][ T4971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2126.513658][ T5954] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2126.579141][ T4971] vhci_hcd vhci_hcd.0: Device attached [ 2126.673986][ T5954] usb 2-1: device descriptor read/64, error -71 [ 2126.788066][ T5954] usb usb2-port1: attempt power cycle [ 2126.813613][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2126.833574][ T3877] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 2126.876043][ T4976] bond4: option downdelay: invalid value (18446744073709551609) [ 2126.887957][ T4976] bond4: option downdelay: allowed values 0 - 2147483647 [ 2126.901482][ T4976] bond4 (unregistering): Released all slaves [ 2126.984473][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 2127.005353][ T43] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 2127.031512][T30595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2127.047157][T30595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2127.071443][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 2127.071473][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 2127.071493][ T43] usb 6-1: Product: syz [ 2127.071508][ T43] usb 6-1: Manufacturer: syz [ 2127.071523][ T43] usb 6-1: SerialNumber: syz [ 2127.088488][ T43] usb 6-1: config 0 descriptor?? [ 2127.106763][ T43] pwc: Philips SPC 880NC USB webcam detected. [ 2127.155819][ T5954] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2127.181370][ T5954] usb 2-1: device descriptor read/8, error -71 [ 2127.202454][ T4962] chnl_net:caif_netlink_parms(): no params data found [ 2127.348279][T30595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2127.372713][T30595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2127.393990][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2127.413605][ T5954] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2127.420279][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2127.446029][ T5954] usb 2-1: device descriptor read/8, error -71 [ 2127.559115][T30595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2127.564314][ T5954] usb usb2-port1: unable to enumerate USB device [ 2127.596215][T30595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2127.606892][ T3877] usb 43-1: device descriptor read/64, error -71 [ 2127.753979][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.771748][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.792846][ T4962] bridge_slave_0: entered allmulticast mode [ 2127.818809][ T4962] bridge_slave_0: entered promiscuous mode [ 2127.863514][ T3877] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 2127.877348][T30595] bond0: (slave netdevsim0): Releasing backup interface [ 2127.902785][T30595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2127.923250][T30595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2127.980400][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.988241][ T43] pwc: Warning: more than 1 configuration available. [ 2127.995402][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.996572][ T4972] vhci_hcd: connection closed [ 2128.004666][ T43] pwc: Failed to set LED on/off time (-71) [ 2128.015726][ T6589] vhci_hcd vhci_hcd.5: stop threads [ 2128.021359][ T4962] bridge_slave_1: entered allmulticast mode [ 2128.028573][ T6589] vhci_hcd vhci_hcd.5: release socket [ 2128.037922][ T43] pwc: send_video_command error -71 [ 2128.048752][ T6589] vhci_hcd vhci_hcd.5: disconnect device [ 2128.055809][ T4962] bridge_slave_1: entered promiscuous mode [ 2128.062803][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2128.080735][ T43] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 2128.133609][T10910] Bluetooth: hci4: command tx timeout [ 2128.143070][ T43] usb 6-1: USB disconnect, device number 60 [ 2128.266687][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.318962][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.495537][ T5001] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8887'. [ 2128.599049][ T5003] program syz.3.8888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2128.611221][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8887'. [ 2128.632704][ T5003] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8888'. [ 2128.823043][ T4962] team0: Port device team_slave_0 added [ 2128.846711][ T5004] bridge_slave_1: left allmulticast mode [ 2128.860367][ T5004] bridge_slave_1: left promiscuous mode [ 2128.861145][ T5006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.878218][ T5006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.881014][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.909372][ T5004] bridge_slave_0: left allmulticast mode [ 2128.915333][ T5004] bridge_slave_0: left promiscuous mode [ 2128.923506][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.053883][ T5010] netlink: 'syz.6.8891': attribute type 1 has an invalid length. [ 2129.121907][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8891'. [ 2129.772883][ T4962] team0: Port device team_slave_1 added [ 2129.871314][ T5026] loop2: detected capacity change from 0 to 7 [ 2129.888007][ T5026] Dev loop2: unable to read RDB block 7 [ 2129.917156][ T5026] loop2: unable to read partition table [ 2129.927553][ T5010] bond4: entered promiscuous mode [ 2129.934014][ T5026] loop2: partition table beyond EOD, truncated [ 2129.940805][ T5010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2129.953573][ T5026] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2129.975499][ T5011] bond4: entered allmulticast mode [ 2130.011178][ T5015] bond4: (slave bridge6): making interface the new active one [ 2130.028999][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2130.029016][ T30] audit: type=1326 audit(1765598433.560:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.061417][ T5015] bridge6: entered promiscuous mode [ 2130.067081][ T5015] bridge6: entered allmulticast mode [ 2130.085881][ T5015] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 2130.113815][ T30] audit: type=1326 audit(1765598433.590:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.195659][ T30] audit: type=1326 audit(1765598433.590:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.224802][T10910] Bluetooth: hci4: command tx timeout [ 2130.253942][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2130.260903][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2130.291136][ T30] audit: type=1326 audit(1765598433.590:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.325642][ T30] audit: type=1326 audit(1765598433.590:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.349884][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2130.415461][T30595] bridge0: port 3(batadv0) entered disabled state [ 2130.441384][ T30] audit: type=1326 audit(1765598433.590:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.490455][T30595] bridge_slave_1: left allmulticast mode [ 2130.529667][T30595] bridge_slave_1: left promiscuous mode [ 2130.547424][T30595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.557294][ T30] audit: type=1326 audit(1765598433.600:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.594332][T30595] bridge_slave_0: left allmulticast mode [ 2130.600028][T30595] bridge_slave_0: left promiscuous mode [ 2130.606153][ T30] audit: type=1326 audit(1765598433.600:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.667289][T30595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.714636][ T30] audit: type=1326 audit(1765598433.600:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2130.796992][ T5039] loop6: detected capacity change from 0 to 7 [ 2130.812854][ T5039] Dev loop6: unable to read RDB block 7 [ 2130.821383][ T5039] loop6: AHDI p3 p4 [ 2130.828594][ T5039] loop6: partition table partially beyond EOD, truncated [ 2130.849462][ T5039] loop6: p3 start 7305061 is beyond EOD, truncated [ 2130.878797][ T30] audit: type=1326 audit(1765598433.610:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.8895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2131.300969][T30595] gretap0 (unregistering): left allmulticast mode [ 2131.405612][T30595] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2131.499047][ T5048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8902'. [ 2131.613709][ T5954] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2131.678322][T30595] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 2131.687033][T30595] bridge1 (unregistering): left promiscuous mode [ 2131.693394][T30595] bridge1 (unregistering): left allmulticast mode [ 2131.759089][T30595] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 2131.767258][T30595] bridge2 (unregistering): left promiscuous mode [ 2131.769239][ T5954] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2131.788381][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.797128][ T5954] usb 6-1: Product: syz [ 2131.801310][ T5954] usb 6-1: Manufacturer: syz [ 2131.805987][ T5954] usb 6-1: SerialNumber: syz [ 2131.812805][ T5954] usb 6-1: config 0 descriptor?? [ 2131.844665][T30595] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 2131.855048][T30595] bridge3 (unregistering): left promiscuous mode [ 2131.918130][T30595] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 2131.928041][T30595] bridge4 (unregistering): left promiscuous mode [ 2131.992960][T30595] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 2132.001709][T30595] bridge5 (unregistering): left promiscuous mode [ 2132.025701][ T5954] usb 6-1: USB disconnect, device number 61 [ 2132.099914][T30595] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 2132.108115][T30595] bridge7 (unregistering): left promiscuous mode [ 2132.114829][T30595] bridge7 (unregistering): left allmulticast mode [ 2132.207967][T30595] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 2132.216390][T30595] bridge9 (unregistering): left promiscuous mode [ 2132.268139][T30595] bond11 (unregistering): (slave bridge10): Releasing backup interface [ 2132.276834][T30595] bridge10 (unregistering): left promiscuous mode [ 2132.295265][T10910] Bluetooth: hci4: command tx timeout [ 2132.345918][T30595] bond12 (unregistering): (slave bridge11): Releasing backup interface [ 2132.358949][T30595] bridge11 (unregistering): left promiscuous mode [ 2132.409288][T30595] bond14 (unregistering): (slave bridge12): Releasing backup interface [ 2132.417709][T30595] bridge12 (unregistering): left promiscuous mode [ 2132.424354][T30595] bridge12 (unregistering): left allmulticast mode [ 2132.469105][T30595] bond15 (unregistering): (slave bridge13): Releasing backup interface [ 2132.477619][T30595] bridge13 (unregistering): left promiscuous mode [ 2132.484174][T30595] bridge13 (unregistering): left allmulticast mode [ 2132.537671][T30595] bond16 (unregistering): (slave bridge14): Releasing backup interface [ 2132.546084][T30595] bridge14 (unregistering): left promiscuous mode [ 2132.552516][T30595] bridge14 (unregistering): left allmulticast mode [ 2132.596942][T30595] bond17 (unregistering): (slave bridge15): Releasing backup interface [ 2132.605501][T30595] bridge15 (unregistering): left promiscuous mode [ 2132.611925][T30595] bridge15 (unregistering): left allmulticast mode [ 2132.624643][ T5954] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2132.656174][T30595] bond18 (unregistering): (slave bridge16): Releasing backup interface [ 2132.664713][T30595] bridge16 (unregistering): left promiscuous mode [ 2132.671149][T30595] bridge16 (unregistering): left allmulticast mode [ 2132.793556][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 2132.817574][T30595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.818660][ T5954] usb 6-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 2132.837402][T30595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2132.837853][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.855668][T30595] bond0 (unregistering): Released all slaves [ 2132.856853][ T5954] usb 6-1: Product: syz [ 2132.865892][ T5954] usb 6-1: Manufacturer: syz [ 2132.870715][ T5954] usb 6-1: SerialNumber: syz [ 2132.888463][ T5954] usb 6-1: config 0 descriptor?? [ 2132.898540][ T5954] usb 6-1: selecting invalid altsetting 1 [ 2132.904812][ T5954] snd-usb-caiaq 6-1:0.0: can't set alt interface. [ 2132.911390][ T5954] usb 6-1: unable to init card! (ret=-5) [ 2132.925328][ T5954] snd-usb-caiaq 6-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 2133.014130][ T3877] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2133.033013][T30595] bond1 (unregistering): Released all slaves [ 2133.113000][ T5954] usb 6-1: USB disconnect, device number 62 [ 2133.171247][T30595] bond2 (unregistering): Released all slaves [ 2133.303193][T30595] bond3 (unregistering): Released all slaves [ 2133.436058][T30595] bond4 (unregistering): Released all slaves [ 2133.562716][T30595] bond5 (unregistering): Released all slaves [ 2133.691889][T30595] bond6 (unregistering): Released all slaves [ 2133.844405][T30595] bond7 (unregistering): Released all slaves [ 2133.916660][ T5060] netlink: 'syz.5.8906': attribute type 1 has an invalid length. [ 2133.978374][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8906'. [ 2133.998242][T30595] bond8 (unregistering): Released all slaves [ 2134.133888][T30595] bond9 (unregistering): Released all slaves [ 2134.289229][T30595] bond10 (unregistering): Released all slaves [ 2134.373600][T10910] Bluetooth: hci4: command tx timeout [ 2134.423655][T30595] bond11 (unregistering): Released all slaves [ 2134.561010][T30595] bond12 (unregistering): Released all slaves [ 2134.703182][T30595] bond13 (unregistering): Released all slaves [ 2134.829699][T30595] bond14 (unregistering): Released all slaves [ 2134.957496][T30595] bond15 (unregistering): Released all slaves [ 2135.087729][T30595] bond16 (unregistering): Released all slaves [ 2135.221284][T30595] bond17 (unregistering): Released all slaves [ 2135.349238][T30595] bond18 (unregistering): Released all slaves [ 2135.363273][ T5030] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 2135.366352][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2135.383541][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2135.435048][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2135.501258][ T5060] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2135.672134][ T5069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8907'. [ 2135.718035][ T5069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8907'. [ 2135.725543][T30595] tipc: Disabling bearer [ 2135.744638][T30595] tipc: Left network mode [ 2135.767737][ T5072] loop2: detected capacity change from 0 to 7 [ 2135.797930][ T5072] Dev loop2: unable to read RDB block 7 [ 2135.844737][ T5072] loop2: unable to read partition table [ 2135.863967][ T5072] loop2: partition table beyond EOD, truncated [ 2135.903591][ T5072] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2136.102658][ T5076] program syz.6.8910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2136.149271][ T5076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8910'. [ 2136.180134][ T4962] hsr_slave_0: entered promiscuous mode [ 2136.218161][ T4962] hsr_slave_1: entered promiscuous mode [ 2136.343673][T32632] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2136.511267][ T5087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8912'. [ 2136.514887][T32632] usb 6-1: Using ep0 maxpacket: 8 [ 2136.592774][T32632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.630555][T32632] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2136.686211][T32632] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2136.695720][T32632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2136.710945][T32632] usb 6-1: Product: syz [ 2136.715535][T32632] usb 6-1: Manufacturer: syz [ 2136.720799][T32632] usb 6-1: SerialNumber: syz [ 2136.736549][T32632] usb 6-1: config 0 descriptor?? [ 2136.757804][T32632] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 2136.766079][T32632] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 2136.785828][T32632] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2136.881292][T30595] hsr_slave_0: left promiscuous mode [ 2136.899408][T30595] hsr_slave_1: left promiscuous mode [ 2136.918281][T30595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2137.054571][T30595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2137.101851][T30595] batman_adv: batadv0: Removing interface: dummy0 [ 2137.677898][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.700356][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.877869][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8916'. [ 2137.888712][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8916'. [ 2138.448597][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.476255][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.528696][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.563717][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.012493][T30595] team0 (unregistering): Port device team_slave_1 removed [ 2139.131351][T30595] team0 (unregistering): Port device team_slave_0 removed [ 2139.563851][ T5119] loop6: detected capacity change from 0 to 1 [ 2139.572586][ T5119] Dev loop6: unable to read RDB block 1 [ 2139.579722][ T5119] loop6: unable to read partition table [ 2139.585959][ T5119] loop6: partition table beyond EOD, truncated [ 2139.592187][ T5119] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2139.900855][ T5075] netlink: 'syz.5.8909': attribute type 3 has an invalid length. [ 2139.910154][ T5075] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8909'. [ 2139.939548][ T5114] tipc: Started in network mode [ 2139.954973][ T5114] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 2139.962373][ T5114] tipc: Enabled bearer , priority 10 [ 2140.107588][T32632] usb 6-1: USB disconnect, device number 63 [ 2140.365740][T30595] IPVS: stop unused estimator thread 0... [ 2140.669236][T32632] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2140.764705][ T5140] netlink: 'syz.1.8924': attribute type 1 has an invalid length. [ 2140.828465][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8924'. [ 2140.845381][T32632] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 2140.853911][T32632] usb 6-1: config 0 has no interface number 0 [ 2140.860075][T32632] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2140.880905][T32632] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 2140.891713][T32632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.907977][T32632] usb 6-1: config 0 descriptor?? [ 2140.916758][ T5152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2140.929118][T32632] ttusbir 6-1:0.83: cannot find expected altsetting [ 2140.935312][ T5140] bond10: entered promiscuous mode [ 2140.958141][ T5140] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2140.991396][ T3877] tipc: Node number set to 8432298 [ 2141.099393][ T5145] bond10: entered allmulticast mode [ 2141.132562][ T4962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2141.146148][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.152799][ T43] usb 6-1: USB disconnect, device number 64 [ 2141.184392][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.210574][ T5140] bond10: (slave bridge11): making interface the new active one [ 2141.222063][ T5140] bridge11: entered promiscuous mode [ 2141.228822][ T5140] bridge11: entered allmulticast mode [ 2141.236063][ T5140] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 2141.248598][ T4962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2141.265923][ T4962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2141.306304][ T4962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2141.579252][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2141.631177][ T4962] 8021q: adding VLAN 0 to HW filter on device team0 [ 2141.668553][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.675773][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2141.724683][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.731858][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.812865][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2141.812899][ T30] audit: type=1326 audit(1765598445.340:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2141.895833][ T30] audit: type=1326 audit(1765598445.340:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2141.942435][ T30] audit: type=1326 audit(1765598445.340:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.006971][ T30] audit: type=1326 audit(1765598445.340:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.085522][ T4962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2142.088952][ T30] audit: type=1326 audit(1765598445.340:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.151481][ T30] audit: type=1326 audit(1765598445.340:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.175071][ T30] audit: type=1326 audit(1765598445.340:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.243874][ T30] audit: type=1326 audit(1765598445.340:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.269300][ T30] audit: type=1326 audit(1765598445.340:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.292505][ T30] audit: type=1326 audit(1765598445.390:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.1.8926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2142.408409][ T4962] veth0_vlan: entered promiscuous mode [ 2142.438419][ T4962] veth1_vlan: entered promiscuous mode [ 2142.647710][ T4962] veth0_macvtap: entered promiscuous mode [ 2142.673270][ T4962] veth1_macvtap: entered promiscuous mode [ 2142.693152][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2142.704383][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2142.930368][ T5175] bond11: option downdelay: invalid value (18446744073709551609) [ 2142.942938][ T5175] bond11: option downdelay: allowed values 0 - 2147483647 [ 2142.995287][ T5202] loop2: detected capacity change from 0 to 7 [ 2143.096734][ T5202] Dev loop2: unable to read RDB block 7 [ 2143.122696][ T5202] loop2: unable to read partition table [ 2143.153293][ T5202] loop2: partition table beyond EOD, truncated [ 2143.186061][ T5202] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2143.777797][ T5175] bond11 (unregistering): Released all slaves [ 2143.927458][ T5967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2143.947344][ T5967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2143.967680][ T5967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2143.998676][ T5967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.206258][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.233678][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2144.274516][T30813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.288165][T30813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2144.413826][ T5954] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2144.579085][ T5954] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2144.598378][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.628609][ T5954] usb 6-1: Product: syz [ 2144.642080][ T5954] usb 6-1: Manufacturer: syz [ 2144.656412][ T5954] usb 6-1: SerialNumber: syz [ 2144.677066][ T5235] netlink: 'syz.2.8935': attribute type 1 has an invalid length. [ 2144.689984][ T5954] usb 6-1: config 0 descriptor?? [ 2144.707734][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8935'. [ 2144.726825][ T5235] gretap0: entered promiscuous mode [ 2144.732410][ T5235] gretap0: entered allmulticast mode [ 2144.963668][T32632] usb 6-1: USB disconnect, device number 65 [ 2145.693702][T22420] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2145.866324][T22420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2145.893639][T22420] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2145.920861][T22420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.933412][T22420] usb 6-1: config 0 descriptor?? [ 2146.165799][T22420] usbhid 6-1:0.0: can't add hid device: -71 [ 2146.185730][T22420] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2146.198944][T22420] usb 6-1: USB disconnect, device number 66 [ 2146.263545][ T5954] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2146.428653][ T5954] usb 3-1: config 62 has an invalid interface number: 197 but max is 2 [ 2146.449508][ T5954] usb 3-1: config 62 has an invalid interface number: 129 but max is 2 [ 2146.459451][ T5279] program syz.1.8946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2146.459894][ T5954] usb 3-1: config 62 contains an unexpected descriptor of type 0x1, skipping [ 2146.471318][ T4667] raw-gadget.0 gadget.3: failed to queue disconnect event [ 2146.479596][ T5954] usb 3-1: config 62 has an invalid interface number: 59 but max is 2 [ 2146.495250][ T5954] usb 3-1: config 62 contains an unexpected descriptor of type 0x2, skipping [ 2146.504444][ T5954] usb 3-1: config 62 has no interface number 0 [ 2146.511390][ T5954] usb 3-1: config 62 has no interface number 1 [ 2146.518198][ T5954] usb 3-1: config 62 has no interface number 2 [ 2146.524854][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x6 has invalid maxpacket 2031, setting to 64 [ 2146.553124][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x5 has invalid maxpacket 44431, setting to 64 [ 2146.583573][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has an invalid descriptor for endpoint zero, skipping [ 2146.602440][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 2146.617494][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has a duplicate endpoint with address 0x7, skipping [ 2146.628960][ T107] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2146.639262][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has an invalid descriptor for endpoint zero, skipping [ 2146.649483][T30813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.651506][ T5954] usb 3-1: config 62 interface 197 altsetting 17 bulk endpoint 0x8 has invalid maxpacket 1024 [ 2146.671863][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2146.683706][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2146.695393][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has a duplicate endpoint with address 0x1, skipping [ 2146.720259][ T5954] usb 3-1: config 62 interface 197 altsetting 17 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 2146.760003][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has an invalid descriptor for endpoint zero, skipping [ 2146.771577][ T5954] usb 3-1: config 62 interface 197 altsetting 17 has a duplicate endpoint with address 0x7, skipping [ 2146.793771][ T107] usb 6-1: Using ep0 maxpacket: 32 [ 2146.804259][ T107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.818732][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2146.830878][ T107] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2146.840541][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2146.853150][ T107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.875017][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 2146.887418][ T107] usb 6-1: config 0 descriptor?? [ 2146.888842][T30813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.892636][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 2146.919118][ T107] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2146.929901][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2146.941955][ T107] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2146.954316][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 2146.965807][ T5954] usb 3-1: config 62 interface 129 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 2146.979473][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2146.990982][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2147.004039][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2147.017623][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x89, skipping [ 2147.030393][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2147.045131][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2147.057487][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2147.068525][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2147.079836][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2147.096066][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2147.108478][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2147.126565][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 2147.141306][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2147.142951][T30813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.158312][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 2147.174984][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 2147.186293][ T5954] usb 3-1: config 62 interface 59 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 2147.210620][ T5954] usb 3-1: config 62 interface 197 has no altsetting 0 [ 2147.217950][ T5954] usb 3-1: config 62 interface 129 has no altsetting 0 [ 2147.228789][ C1] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 2147.247299][ T5954] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0202, bcdDevice=df.af [ 2147.284313][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.292449][ T5954] usb 3-1: Product: ࠄ [ 2147.326511][ T5954] usb 3-1: Manufacturer: 詿▫굙픡ﺥꁓ霉훛ﱢﲽꨂ뭆闽㨔쭍竔ځ◍꾤㐞אַ㫾罆锽真䃓⻡噳䃺戂跹燈懽壟跛䨧ቮῌ킂큣﮴ਔ댨䟓华绗鯗銯㰺젝ཡ叞뼷쫄✝쬭˱鳨馨ꌈ秤볔澉芽影럞騖罙敊跴⢂陈⌎鲏証쏓沃筻㷬৒䙥뙡弜貝 [ 2147.358191][T30813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.359155][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8950'. [ 2147.387562][ T5286] netlink: 'syz.1.8951': attribute type 1 has an invalid length. [ 2147.387636][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8950'. [ 2147.406305][ T5954] usb 3-1: SerialNumber: syz [ 2147.431872][ T5277] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2147.441071][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8951'. [ 2147.536982][ T5286] bond11: entered promiscuous mode [ 2147.542568][ T5286] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2147.572385][T21848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2147.585299][T21848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2147.593688][T21848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2147.606305][ T5288] bond11: entered allmulticast mode [ 2147.626873][T21848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2147.636496][T21848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2147.753035][ T5286] bond11: (slave bridge12): making interface the new active one [ 2147.778299][ T5286] bridge12: entered promiscuous mode [ 2147.795955][ T5286] bridge12: entered allmulticast mode [ 2147.820358][ T5286] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 2147.821367][ T5954] cp210x 3-1:62.197: cp210x converter detected [ 2147.849813][ T5302] loop6: detected capacity change from 0 to 7 [ 2147.868255][ T5954] cp210x 3-1:62.197: failed to get vendor val 0x370b size 1: -71 [ 2147.890428][ T5302] Dev loop6: unable to read RDB block 7 [ 2147.895019][ T5954] cp210x 3-1:62.197: querying part number failed [ 2147.916880][ T5302] loop6: AHDI p3 p4 [ 2147.920873][ T5302] loop6: partition table partially beyond EOD, truncated [ 2147.931890][ T5954] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2147.974527][ T5302] loop6: p3 start 7305061 is beyond EOD, truncated [ 2148.030162][ T5954] cp210x 3-1:62.129: cp210x converter detected [ 2148.087200][ T5954] cp210x 3-1:62.129: failed to get vendor val 0x370b size 1: -71 [ 2148.115546][ T5954] cp210x 3-1:62.129: querying part number failed [ 2148.127714][ T5954] usb 3-1: cp210x converter now attached to ttyUSB1 [ 2148.149802][ T5954] cp210x 3-1:62.59: cp210x converter detected [ 2148.166105][ T5954] cp210x 3-1:62.59: failed to get vendor val 0x370b size 1: -71 [ 2148.189454][ T5307] loop2: detected capacity change from 0 to 7 [ 2148.208107][ T5954] cp210x 3-1:62.59: querying part number failed [ 2148.216717][ T5307] Dev loop2: unable to read RDB block 7 [ 2148.222292][ T5307] loop2: unable to read partition table [ 2148.237127][ T5954] usb 3-1: cp210x converter now attached to ttyUSB2 [ 2148.255765][ T5307] loop2: partition table beyond EOD, truncated [ 2148.303935][ T5307] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2148.333923][ T5954] usb 3-1: USB disconnect, device number 124 [ 2148.390177][T30813] bridge_slave_1: left allmulticast mode [ 2148.418983][T30813] bridge_slave_1: left promiscuous mode [ 2148.425976][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2148.432196][T30813] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.450883][ T5954] cp210x 3-1:62.197: device disconnected [ 2148.493206][ T5954] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2148.507607][T30813] bridge_slave_0: left allmulticast mode [ 2148.522498][ T5954] cp210x 3-1:62.129: device disconnected [ 2148.527944][T30813] bridge_slave_0: left promiscuous mode [ 2148.528177][T30813] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.546404][ T5954] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 2148.546973][ T5954] cp210x 3-1:62.59: device disconnected [ 2149.045737][ T5332] loop6: detected capacity change from 0 to 1 [ 2149.072722][ T5332] Dev loop6: unable to read RDB block 1 [ 2149.087621][ T5332] loop6: unable to read partition table [ 2149.104175][ T5332] loop6: partition table beyond EOD, truncated [ 2149.119204][ T5332] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2149.464856][ T5954] usb 6-1: USB disconnect, device number 67 [ 2149.474986][ T5954] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2149.555865][T30813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2149.564738][ T6108] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2149.577429][T30813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2149.589177][T30813] bond0 (unregistering): Released all slaves [ 2149.733682][ T6108] usb 2-1: Using ep0 maxpacket: 8 [ 2149.734199][T10910] Bluetooth: hci2: command tx timeout [ 2149.776016][ T6108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.779265][ T5346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8962'. [ 2149.793559][T30813] tipc: Disabling bearer [ 2149.812976][ T6108] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2149.829554][T30813] tipc: Left network mode [ 2149.864772][ T6108] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2149.885483][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2149.903390][ T6108] usb 2-1: Product: syz [ 2149.909272][ T6108] usb 2-1: Manufacturer: syz [ 2149.914251][ T6108] usb 2-1: SerialNumber: syz [ 2149.922254][ T6108] usb 2-1: config 0 descriptor?? [ 2149.931568][ T6108] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 2149.939398][ T6108] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 2150.010612][ T6108] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2150.068625][ T5352] netlink: 'syz.6.8964': attribute type 1 has an invalid length. [ 2150.121891][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8964'. [ 2150.226251][ T5352] bond5: entered promiscuous mode [ 2150.231760][ T5352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2150.243769][ T6108] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2150.246331][ T5353] bond5: entered allmulticast mode [ 2150.257769][ T5338] netlink: 'syz.1.8960': attribute type 3 has an invalid length. [ 2150.271534][ T5338] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8960'. [ 2150.430981][ T6108] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2150.449532][ T6108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.477388][ T6108] usb 3-1: Product: syz [ 2150.480673][ T5362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8965'. [ 2150.504572][ T6108] usb 3-1: Manufacturer: syz [ 2150.513752][ T6108] usb 3-1: SerialNumber: syz [ 2150.633909][ T6108] usb 3-1: config 0 descriptor?? [ 2150.746266][ T5352] bond5: (slave bridge7): making interface the new active one [ 2150.781166][ T5352] bridge7: entered promiscuous mode [ 2150.788178][ T5352] bridge7: entered allmulticast mode [ 2150.805259][ T5352] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 2150.860587][ T5954] usb 3-1: USB disconnect, device number 125 [ 2151.013778][T30813] hsr_slave_0: left promiscuous mode [ 2151.039968][T30813] hsr_slave_1: left promiscuous mode [ 2151.069233][T30813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2151.103516][T30813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.124249][T30813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2151.131679][T30813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2151.212687][T30813] veth1_macvtap: left promiscuous mode [ 2151.233660][T30813] veth0_macvtap: left promiscuous mode [ 2151.241656][T30813] veth1_vlan: left promiscuous mode [ 2151.294492][T30813] veth0_vlan: left promiscuous mode [ 2151.815512][T10910] Bluetooth: hci2: command tx timeout [ 2152.436171][ T6108] usb 2-1: USB disconnect, device number 30 [ 2152.533009][T30813] team0 (unregistering): Port device team_slave_1 removed [ 2152.586354][T30813] team0 (unregistering): Port device team_slave_0 removed [ 2153.189100][ T5298] chnl_net:caif_netlink_parms(): no params data found [ 2153.290151][ T5402] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8973'. [ 2153.348153][ T5407] program syz.1.8974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2153.438345][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.448041][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.455918][ T5298] bridge_slave_0: entered allmulticast mode [ 2153.464822][ T5298] bridge_slave_0: entered promiscuous mode [ 2153.475934][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2153.483231][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.491324][ T5298] bridge_slave_1: entered allmulticast mode [ 2153.503988][ T5298] bridge_slave_1: entered promiscuous mode [ 2153.565836][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2153.579455][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2153.637223][ T5298] team0: Port device team_slave_0 added [ 2153.651459][ T5298] team0: Port device team_slave_1 added [ 2153.708398][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2153.717146][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.745085][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2153.760452][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2153.767661][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.814642][ T6108] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2153.826432][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2153.895690][T10910] Bluetooth: hci2: command tx timeout [ 2153.947271][ T5418] netlink: 'syz.2.8976': attribute type 1 has an invalid length. [ 2153.955353][ T6108] usb 2-1: device descriptor read/64, error -71 [ 2153.968399][ T5418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8976'. [ 2153.978135][ T5298] hsr_slave_0: entered promiscuous mode [ 2153.986100][ T5298] hsr_slave_1: entered promiscuous mode [ 2153.992673][ T5298] debugfs: 'hsr0' already exists in 'hsr' [ 2154.001901][ T5298] Cannot create hsr debugfs directory [ 2154.009292][ T5418] team_slave_0: entered promiscuous mode [ 2154.015718][ T5418] team_slave_0: entered allmulticast mode [ 2154.194131][ T6108] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2154.363697][ T6108] usb 2-1: device descriptor read/64, error -71 [ 2154.487706][ T6108] usb usb2-port1: attempt power cycle [ 2154.541631][ T5433] loop2: detected capacity change from 0 to 7 [ 2154.549997][ T5433] Dev loop2: unable to read RDB block 7 [ 2154.556205][ T5433] loop2: unable to read partition table [ 2154.562392][ T5433] loop2: partition table beyond EOD, truncated [ 2154.583696][ T107] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2154.601679][ T5433] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2154.629355][ T5435] loop6: detected capacity change from 0 to 1 [ 2154.655291][ T5435] Dev loop6: unable to read RDB block 1 [ 2154.660918][ T5435] loop6: unable to read partition table [ 2154.687616][ T5435] loop6: partition table beyond EOD, truncated [ 2154.703757][ T5435] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2154.740431][ T5298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2154.760036][ T107] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2154.793772][ T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.806844][ T5298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2154.813935][ T107] usb 3-1: Product: syz [ 2154.826252][ T107] usb 3-1: Manufacturer: syz [ 2154.836919][ T107] usb 3-1: SerialNumber: syz [ 2154.853712][ T6108] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2154.858710][ T5298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2154.874640][ T107] usb 3-1: config 0 descriptor?? [ 2154.889941][ T6108] usb 2-1: device descriptor read/8, error -71 [ 2154.905681][ T5298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2155.119177][T22420] usb 3-1: USB disconnect, device number 126 [ 2155.134784][ T6108] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2155.205810][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.213640][ T6108] usb 2-1: device descriptor read/8, error -71 [ 2155.280312][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.320094][T26014] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.327378][T26014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.351828][ T6108] usb usb2-port1: unable to enumerate USB device [ 2155.396117][T30809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.396267][T30809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.627866][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2155.780155][ T5298] veth0_vlan: entered promiscuous mode [ 2155.828678][ T5298] veth1_vlan: entered promiscuous mode [ 2155.972483][ T5298] veth0_macvtap: entered promiscuous mode [ 2155.973777][T10910] Bluetooth: hci2: command tx timeout [ 2156.080393][ T5298] veth1_macvtap: entered promiscuous mode [ 2156.137367][ T5477] loop6: detected capacity change from 0 to 7 [ 2156.184726][ T5477] Dev loop6: unable to read RDB block 7 [ 2156.192691][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2156.215850][ T5477] loop6: AHDI p3 p4 [ 2156.232928][ T5477] loop6: partition table partially beyond EOD, truncated [ 2156.257805][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2156.268665][ T5477] loop6: p3 start 7305061 is beyond EOD, truncated [ 2156.285524][ T3724] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.346025][ T3724] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.404064][ T3724] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.457469][ T3724] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.782780][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8993'. [ 2156.795609][ T5489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2156.812274][T30595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.838796][T30595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.939885][T30595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.971682][T30595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2157.194113][T10889] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2157.356131][T10889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2157.375436][T10889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.401726][T10889] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 2157.430427][T10889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2157.452325][T10889] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 2157.489608][T10889] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 2157.525294][T10889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.543350][T10889] usb 6-1: Product: syz [ 2157.555726][T10889] usb 6-1: Manufacturer: syz [ 2157.566218][T10889] usb 6-1: SerialNumber: syz [ 2157.587783][T10889] usb 6-1: config 0 descriptor?? [ 2157.601523][ T5503] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2157.642603][ C1] usb 6-1: NFC: Urb failure (status -71) [ 2157.664872][T10889] usb 6-1: NFC: Unable to get FW version [ 2157.680338][T10889] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 2157.828478][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.843314][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.870689][T10889] usb 6-1: USB disconnect, device number 68 [ 2158.029693][ T5516] program syz.1.8997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2158.120175][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8998'. [ 2158.141121][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8998'. [ 2158.534145][ T5528] loop6: detected capacity change from 0 to 7 [ 2158.555500][T29545] Dev loop6: unable to read RDB block 7 [ 2158.569765][T29545] loop6: AHDI p3 p4 [ 2158.575580][T29545] loop6: partition table partially beyond EOD, truncated [ 2158.585614][T29545] loop6: p3 start 7305061 is beyond EOD, truncated [ 2158.597047][ T5528] Dev loop6: unable to read RDB block 7 [ 2158.603009][ T5528] loop6: AHDI p3 p4 [ 2158.623808][ T5528] loop6: partition table partially beyond EOD, truncated [ 2158.641337][ T5528] loop6: p3 start 7305061 is beyond EOD, truncated [ 2158.699090][ T107] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2158.873773][ T107] usb 3-1: Using ep0 maxpacket: 8 [ 2158.887528][ T107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2158.899565][ T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.909564][ T107] usb 3-1: Product: syz [ 2158.914164][ T107] usb 3-1: Manufacturer: syz [ 2158.915969][ T5541] loop2: detected capacity change from 0 to 7 [ 2158.919129][ T107] usb 3-1: SerialNumber: syz [ 2158.934533][ T5541] Dev loop2: unable to read RDB block 7 [ 2158.942707][ T5541] loop2: unable to read partition table [ 2158.948904][ T5541] loop2: partition table beyond EOD, truncated [ 2158.957307][ T5541] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2158.976099][ T107] usb 3-1: config 0 descriptor?? [ 2159.210148][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.224618][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.235538][ T107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2159.915919][ T107] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2159.951850][ T107] usb 3-1: USB disconnect, device number 127 [ 2160.257018][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9023'. [ 2160.264317][ T5954] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2160.275285][ T5582] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9023'. [ 2160.285676][ T5582] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9023'. [ 2160.435838][ T5954] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2160.455860][ T5585] program syz.6.9024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2160.474258][ T5954] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 2160.482382][ T5954] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 2160.514125][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.569824][ T5954] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2160.600550][ T5954] usb 6-1: config 0 has no interface number 0 [ 2160.626589][ T5954] usb 6-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2160.645446][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9025'. [ 2160.664830][ T5954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2160.676395][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9025'. [ 2160.688514][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.704383][ T5954] usb 6-1: Product: syz [ 2160.713906][ T5954] usb 6-1: Manufacturer: syz [ 2160.718537][ T5954] usb 6-1: SerialNumber: syz [ 2160.755958][ T5954] usb 6-1: config 0 descriptor?? [ 2160.998692][ T5954] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2161.029271][ T5954] usb 6-1: MIDIStreaming interface descriptor not found [ 2161.225536][ T5954] usb 6-1: USB disconnect, device number 69 [ 2161.454840][T29565] udevd[29565]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2162.472748][ T5615] loop6: detected capacity change from 0 to 7 [ 2162.517473][ T5615] Dev loop6: unable to read RDB block 7 [ 2162.527222][ T5616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2162.557454][ T5615] loop6: AHDI p3 p4 [ 2162.575462][ T5615] loop6: partition table partially beyond EOD, truncated [ 2162.670250][ T5615] loop6: p3 start 7305061 is beyond EOD, truncated [ 2163.436058][ T5632] delete_channel: no stack [ 2163.746036][ T743] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2163.945797][ T743] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2163.964406][ T743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.992706][ T743] usb 2-1: Product: syz [ 2164.011173][ T743] usb 2-1: Manufacturer: syz [ 2164.022857][ T743] usb 2-1: SerialNumber: syz [ 2164.054011][ T743] usb 2-1: config 0 descriptor?? [ 2164.162378][ T5659] program syz.5.9046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2164.290901][ T743] usb 2-1: USB disconnect, device number 35 [ 2164.573343][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9048'. [ 2164.613781][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9048'. [ 2165.003713][ T5954] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2165.133550][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2165.373622][ T5954] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2165.429271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.437239][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.513616][ T5954] usb 6-1: device descriptor read/64, error -71 [ 2165.624256][ T5954] usb usb6-port1: attempt power cycle [ 2165.656678][ T5680] loop6: detected capacity change from 0 to 1 [ 2165.665857][ T5680] Dev loop6: unable to read RDB block 1 [ 2165.671521][ T5680] loop6: unable to read partition table [ 2165.677957][ T5680] loop6: partition table beyond EOD, truncated [ 2165.686175][ T5680] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2165.988329][ T5954] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2166.039637][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2166.295266][ T5954] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2166.355541][ T5954] usb 6-1: device descriptor read/8, error -71 [ 2166.373172][ T5697] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2166.401574][ T5697] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2166.418197][ T5697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2166.442680][ T5697] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2166.465401][ T5697] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2166.480920][ T5697] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2166.484027][ T5954] usb usb6-port1: unable to enumerate USB device [ 2166.494680][ T5697] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2166.511966][ T5697] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2166.634173][ T5704] loop6: detected capacity change from 0 to 7 [ 2166.642268][ T5704] Dev loop6: unable to read RDB block 7 [ 2166.648335][ T5704] loop6: AHDI p3 p4 [ 2166.652820][ T5704] loop6: partition table partially beyond EOD, truncated [ 2166.661448][ T5704] loop6: p3 start 7305061 is beyond EOD, truncated [ 2166.793998][ T6108] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2166.978090][ T6108] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2167.018506][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.046870][ T6108] usb 2-1: Product: syz [ 2167.068194][ T6108] usb 2-1: Manufacturer: syz [ 2167.077468][ T6108] usb 2-1: SerialNumber: syz [ 2167.127658][ T6108] usb 2-1: config 0 descriptor?? [ 2167.361690][ T6108] usb 2-1: USB disconnect, device number 36 [ 2167.789379][ T5728] program syz.2.9067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2168.373570][T10910] Bluetooth: hci0: command 0x0c1a tx timeout [ 2168.462098][T10910] Bluetooth: hci4: command 0x0c1a tx timeout [ 2168.463342][T21848] Bluetooth: hci5: command 0x0c1a tx timeout [ 2168.533503][T21848] Bluetooth: hci2: command 0x0c1a tx timeout [ 2168.820217][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9074'. [ 2170.535331][T21848] Bluetooth: hci4: command 0x0c1a tx timeout [ 2170.623606][T21848] Bluetooth: hci2: command 0x0c1a tx timeout [ 2172.613607][T21848] Bluetooth: hci4: command 0x0c1a tx timeout [ 2172.703550][T21848] Bluetooth: hci2: command 0x0c1a tx timeout [ 2226.867031][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.874927][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.307315][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.313828][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2316.453701][ T31] INFO: task kworker/0:0:16610 blocked for more than 143 seconds. [ 2316.461545][ T31] Tainted: G L syzkaller #0 [ 2316.468476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2316.477327][ T31] task:kworker/0:0 state:D stack:19680 pid:16610 tgid:16610 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2316.489539][ T31] Workqueue: usb_hub_wq hub_event [ 2316.494701][ T31] Call Trace: [ 2316.498003][ T31] [ 2316.501058][ T31] __schedule+0x14bc/0x5000 [ 2316.505787][ T31] ? __pfx___schedule+0x10/0x10 [ 2316.510692][ T31] ? schedule+0x91/0x360 [ 2316.515212][ T31] schedule+0x165/0x360 [ 2316.520704][ T31] usb_kill_urb+0x1be/0x2d0 [ 2316.525422][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2316.530596][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2316.538499][ T31] usb_start_wait_urb+0x1e3/0x4f0 [ 2316.543711][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2316.549317][ T31] usb_control_msg+0x232/0x3e0 [ 2316.555019][ T31] hub_port_init+0xb1d/0x28e0 [ 2316.559730][ T31] hub_event+0x2573/0x4ef0 [ 2316.564414][ T31] ? __pfx_hub_event+0x10/0x10 [ 2316.569208][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2316.575072][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2316.580353][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2316.586256][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2316.592013][ T31] process_scheduled_works+0xad1/0x1770 [ 2316.597877][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2316.604006][ T31] worker_thread+0x8a0/0xda0 [ 2316.608621][ T31] kthread+0x711/0x8a0 [ 2316.612701][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2316.618276][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.623965][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2316.629225][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2316.634663][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.639299][ T31] ret_from_fork+0x599/0xb30 [ 2316.644208][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2316.649354][ T31] ? __switch_to_asm+0x39/0x70 [ 2316.654238][ T31] ? __switch_to_asm+0x33/0x70 [ 2316.659036][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.663892][ T31] ret_from_fork_asm+0x1a/0x30 [ 2316.668742][ T31] [ 2316.671888][ T31] [ 2316.671888][ T31] Showing all locks held in the system: [ 2316.679758][ T31] 1 lock held by khungtaskd/31: [ 2316.684753][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2316.694962][ T31] 2 locks held by getty/5592: [ 2316.699651][ T31] #0: ffff8880349b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2316.709696][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2316.720081][ T31] 5 locks held by kworker/0:0/16610: [ 2316.726534][ T31] #0: ffff888142ac7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2316.738092][ T31] #1: ffffc9000489fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2316.750094][ T31] #2: ffff888028feb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2316.759359][ T31] #3: ffff888029049518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2316.770011][ T31] #4: ffff888026d47668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2316.780026][ T31] [ 2316.782369][ T31] ============================================= [ 2316.782369][ T31] [ 2316.790922][ T31] NMI backtrace for cpu 1 [ 2316.790942][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2316.790971][ T31] Tainted: [L]=SOFTLOCKUP [ 2316.790979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2316.790993][ T31] Call Trace: [ 2316.791002][ T31] [ 2316.791011][ T31] dump_stack_lvl+0x189/0x250 [ 2316.791044][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2316.791071][ T31] ? __pfx__printk+0x10/0x10 [ 2316.791124][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2316.791156][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2316.791186][ T31] ? __pfx__printk+0x10/0x10 [ 2316.791227][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2316.791264][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2316.791295][ T31] sys_info+0x135/0x170 [ 2316.791317][ T31] watchdog+0xf95/0xfe0 [ 2316.791355][ T31] ? watchdog+0x20a/0xfe0 [ 2316.791394][ T31] kthread+0x711/0x8a0 [ 2316.791427][ T31] ? __pfx_watchdog+0x10/0x10 [ 2316.791457][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.791489][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2316.791519][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2316.791552][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.791582][ T31] ret_from_fork+0x599/0xb30 [ 2316.791606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2316.791638][ T31] ? __switch_to_asm+0x39/0x70 [ 2316.791673][ T31] ? __switch_to_asm+0x33/0x70 [ 2316.791701][ T31] ? __pfx_kthread+0x10/0x10 [ 2316.791732][ T31] ret_from_fork_asm+0x1a/0x30 [ 2316.791779][ T31] [ 2316.791788][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2316.949370][ C0] NMI backtrace for cpu 0 [ 2316.949390][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2316.949419][ C0] Tainted: [L]=SOFTLOCKUP [ 2316.949426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2316.949438][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2316.949469][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2316.949485][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2316.949501][ C0] RAX: 551371ecc0190900 RBX: ffffffff81978eba RCX: 551371ecc0190900 [ 2316.949515][ C0] RDX: 0000000000000001 RSI: ffffffff8d790209 RDI: ffffffff8bc07b60 [ 2316.949528][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2316.949541][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f81fa70 [ 2316.949555][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2316.949567][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 2316.949581][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2316.949593][ C0] CR2: 000055d4a4840168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2316.949609][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2316.949621][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2316.949634][ C0] Call Trace: [ 2316.949641][ C0] [ 2316.949648][ C0] default_idle+0x13/0x20 [ 2316.949667][ C0] default_idle_call+0x73/0xb0 [ 2316.949686][ C0] do_idle+0x1ea/0x520 [ 2316.949705][ C0] ? irqentry_exit+0x5ba/0x660 [ 2316.949734][ C0] ? __pfx_do_idle+0x10/0x10 [ 2316.949761][ C0] cpu_startup_entry+0x44/0x60 [ 2316.949780][ C0] rest_init+0x2de/0x300 [ 2316.949801][ C0] start_kernel+0x3a7/0x400 [ 2316.949822][ C0] x86_64_start_reservations+0x24/0x30 [ 2316.949848][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2316.949874][ C0] common_startup_64+0x13e/0x147 [ 2316.949905][ C0] [ 2317.159063][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2317.165948][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2317.176652][ T31] Tainted: [L]=SOFTLOCKUP [ 2317.180973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2317.191042][ T31] Call Trace: [ 2317.194331][ T31] [ 2317.197267][ T31] dump_stack_lvl+0x99/0x250 [ 2317.201865][ T31] ? __asan_memcpy+0x40/0x70 [ 2317.206453][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2317.211657][ T31] ? __pfx__printk+0x10/0x10 [ 2317.216266][ T31] vpanic+0x237/0x6d0 [ 2317.220283][ T31] ? __pfx_vpanic+0x10/0x10 [ 2317.224798][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2317.230288][ T31] panic+0xb9/0xc0 [ 2317.234027][ T31] ? __pfx_panic+0x10/0x10 [ 2317.238458][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2317.243833][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2317.249992][ T31] watchdog+0xfdf/0xfe0 [ 2317.254246][ T31] ? watchdog+0x20a/0xfe0 [ 2317.258581][ T31] kthread+0x711/0x8a0 [ 2317.262654][ T31] ? __pfx_watchdog+0x10/0x10 [ 2317.267345][ T31] ? __pfx_kthread+0x10/0x10 [ 2317.271964][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2317.277175][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2317.282379][ T31] ? __pfx_kthread+0x10/0x10 [ 2317.286973][ T31] ret_from_fork+0x599/0xb30 [ 2317.291562][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2317.296687][ T31] ? __switch_to_asm+0x39/0x70 [ 2317.301468][ T31] ? __switch_to_asm+0x33/0x70 [ 2317.306238][ T31] ? __pfx_kthread+0x10/0x10 [ 2317.310840][ T31] ret_from_fork_asm+0x1a/0x30 [ 2317.315720][ T31] [ 2317.319084][ T31] Kernel Offset: disabled [ 2317.323413][ T31] Rebooting in 86400 seconds..