last executing test programs: 43.295462166s ago: executing program 2 (id=4863): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x101900) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb82", 0x94}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') setns(r5, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'team_slave_0\x00', 0x1000}) 39.207794177s ago: executing program 2 (id=4867): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x63, 0x9b, 0x35, 0x8, 0x10b8, 0x1e6e, 0x2ca4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x4, 0x20, 0x4, [{{0x9, 0x4, 0xe6, 0x80, 0x0, 0x37, 0xcb, 0x3b, 0x9}}]}}]}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000178500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000008fc0)="61fac9346f0157e63f7f0bd87b942881243cf0afaae05ddba3b467cfa43ec97dd9d464e36a4c896aaf76eb76bf9ad99cb10b807065cdb9e2f7c083608001337a29b65fb992215f705ac168a727d90ca7133eea9cb1331ad45819100fed88e3d8c515940b1bf69239709bddaa3ead2c7eea7aa5e2fbc7917706c3f5cc02ad13b023ea6ead6efef3ae4e6ea7d710b8f173416e42e4696aa25b54c24d8883615453de03af79a0b6252142b131bd8636bbf4eaf18eff79d16d64d0eb5e8ed97d9ccf3440b75ab89b02fe61beb593851929c29a88e31f81bf27827ef06949e1b73c7ae7fff67f4319c73ef7180693782e7394a654749527708d516780bb3d856c6ad42053396ae4505102b5d9fbcc8236aebf42615ce859f046cbfb197db76212a4ca281f20e040d67d160bec526d04f1155fea87f66e2b9a51cb2616297414dc731645f9c59e298426f6eac09cb077ad382485c1b0a26bd382c21c7f1b6f970e65ed9f126caf8c52cf189e0d45270de56bad1aa190702c01883d444bc40a47dcf817e565b1842088863c541b19f962b69bd380aba7e9df489aebfb76e5e35820259f3db6195061d93fc3edc808f32d1245c2c70af80f5890161b9ae2a75b04260fb604982301870e3bcc63065d08927e0e3c8572956610c23419794bd73507ced9b9ea11665df8b6515a258e32bb9e8e58cb83f9708a0353df73a2af9664a46418b6c3892e993c4e53ac3a105a5ff8fb4763981f613187d92795b1c669d7c2c178dd22fb5dd5c07265c21a7bee8fe03efab5d6e6edd1ece78570d1fc1ce5885f3cfdca6f12db6aff4ce499330a0b3159387cd001c97ab3c8fd5d2fb20a2c0361ef9a1e4ff520a3c3b9c14228589604c08f8a2a8fc2168fea2e73cc06dcea66d66345827f84fbbcb56b37b32fc284a52179a92266d51751d96b7dfdd87c9afb9630c489df64390a3fb8f5ac641e0cbc65c739de2852cb837bae98dcfed8f67c10eb0bd85b151306ebca86b7778ce50830a5f930aa7b1ec91986419059d35fb6a62f3226f31f0364047183872023e8eef9421a282cf6cfc79b12a61d7216b61df3e237ce3372104029752124d36c1c9b605802a75288a76aa9b32397989e33dc95cb7ca3507a19cd89d78854665aeef1eb841365051ade94e8f5e4b383c4cf471cb8e1b4cd6530eab3257d89d8909513fcf3e2513e05394bf751b464557090779b2d59d00a6baecb05cab2362b7f8c62b12131fb7a384f11ea8eb5dabfdfbaa9a88ab8aa4a6f02ed0d003a5f1f74e0db7b354ecd78edaf960e81924edca4d6601837bea3e704fe9b78d0553d9988f44833bab6853a82d00d8c01d575c8d3b61a2253664c4ad7de1e53934da52226e5dce8be05ac68cc42148e280ed27c82d4c201478b5fe22e9ba74f56da5da95235155179afddcedcff4bffef6cfa6d047c08139980d0427d57a9075e006e256643c963b5aa42c642cba156440f04cb2f7143aa165d9bcb5310b5a676162af4a131b2ebd150ef39b68bdb02a250d42c9c61bdcaa56f25cb631395e6421a72e63f635ea0e73cda24576984ca26c82d1f3d35f92cb2b76c7fd741889fa38bc4bfb4688bbfffc678313cf287f29a7c799f03414edb8e432c5850f8c177ada930c84fbff8a35d619e971c5bea737ed2367c05fc3f1778ffbde05457afe2f21ac559e7d530999508bf6d62b8c799d5000848c58b5637cdd9057b5b2693c74e43fdcd5fd776aaac7df50e6166c84dc66054810c8cbb3f2d4085316489f780c6dc3d950027f53cab6af134fa807512cc53b2d9434dcc4515038f4107e73e04f49cd0187ac0e1cf4d77a8230d00d2589f3bfe461ce354b46e8d0658da48b66bddfc8790b137a1e8a3470716ea1c2a3ce7066ffe5357d7e21df8430f3d1a8f4c852a71f7148b5bffe5cd9b1b9b2aaea78c608d899c5d5641d7b66f4d359793faec4b9c993bd895512f5a09f42742eb3bc23b2463f390fd563ba216f34a0a7c5f7befe2d38df42dd3eef4484737e4e0b65c602df59896dcb185122e04c8070f10f107aac71119f932faca3dc31aa04f0096576f36e95f705df265132b1b2dbd914c0b2b87d5283d7769c9543eca6c10227c2903dd870980006257c765114f74c9872680c861e808f18dfbb973e1fa97791215b8e16c61402dfa4f51f53395f845680aed3bcd8c8187fb9b3e121215743fda6964a4ce95e2343699c27f012c5466a5445d252cf8cb12ba1bf6d29aeed6df79b07809657438e873022936b1916b811644b0c23468a95192fbc6200e88197eb97f9775731c9ff47fb50f187244320da7fb86f4cd66c00ceb197db218d7eed70af017cb0b7e82acaeca255c05dde86251ed2fc594a67ccfa72bdccc7e260c1eaf4f1b7f344bbfd34213bfab5accca23d0cf466d58f736c4ee5f36856e4cd136d81e26e8fc0a45abe9664a1504a23ff28b5b16249e751f70236b974f1ea320580dc5ab2ec92303ccba9522a4368be3bdccadf2529d80acde6201eee4c1fbc2f29bbea385c5a00081f04bdb0dcb90dd8993d86ea0b79cfad536babcb4aefa2fcd457052b3c723c34f6001169938a6dcc283d836c47c443f8fb12ca723e6ca791bc7fac669b2e737f9523f4d5b5b926e9dbbb74578315ab0e452643723b626a338d5c91ef40f00aebe54223dce074c8d0d1b8997113654ecec6b27d81d19459dd148a641a2d7211a2f9af17157facf43ccd49180c802ac6626f3b6e010782f19d069c1eb831d6c889ac8ea3a19e60d7291482147300a8f4aa4a0de2e5ad6087356845e58e3caaf390e7a5eac6c1d0146bd8174b862c0925c7506f35b7158f0dd012eb0bf0ab59ccc5a13395ee1599a029c47f0983923f7f6f1c003dd598917413f1ef9a28ae8793232f09005b7ebd00bb4fa4685b49ebed3fa4b2e0ff5ad1a9074e1030e570028f9ed3b49e6d8e26c8c7bd971f828db049b2d18b53fe00549c959eb86b5becdfc45a2e67991b8735a93004147c32751bad8c5f40bb32e56f20b81b27499b1da7188ab33a45a6bb9af6c0b42c204eb809187a95a92344fe47b8b6777802d65a6198922852da6da4a6eab4316a5cb6e9aa333d44b91c30c45d0afbd7d4c9be53d3b95da291ded92a1e3b02f1519831fecc6bd1a958f0a48a2008c2b10e097bb4da984c95ab0f7a09f08151a520a5325498bbb2427f810c5430cd951ad9840c3e0433e0b3f2c4f604e40532fee5d7554b0316b7386ef06dd0765b9b2ec6370cd84e3ca390580af3826533b120f6566fb821f3d209127167403bc06e4d2202e81bfe46abd6195441498ec0d1cd0f827adcc1f981d59d299047b03c49a41849fc14bdfd155c33b5a766be9069506ddd8523e7adba7a3d55d52b3364d2fbfe4cd88c8513bc911d0187ebf337c9f592015504ed547be66f0590965e97cb17c9575cc0f44e0e8ab702b6cf5c03d0f40ad44a9aae6a83b4f2c518ca5c389723ddc0f7d55d29c861398ec1f9eb46d6a74c2c5cc40ed20e83f6141a3b9451c85f9330e921f9a85113cd35d1294300ea8b5a7f2cd103996eff033cd11e53dda5ec094ac2a4763bb5616994f0a9486d8ade22e614370476932c1203cc8906711bcf0dae093c038cc335ec009edeb7af702d433937a5dce886b1733db864099aabf71674831abbb2db87e3e9334754a7a88588b82ef141b5970b0bd069c0476ee3bcc8f02dc49997aab56b8b4f29e7e9f0c8adabdc3b942d19159a095e38dad29258fa968c0cc70accb38a98c4823beea477544996c479c4c86f820c6c59850a75ea26877167847c282084cc83b75f164562274bd51d0aa71f99eea5131b5be1a2995f56c12a6ef888fb4e0e4c4e739c4cbba000461382e979191c6c74211a93520df0e749f3ec999538d9accfb5225515e48fe1f8f24a744dfa47122428d20988528e30d99e6995c1b1c970e177f9180f0038c0246ce7a3706e7daa595db434355f97e149e7f05229350afb2ddab419726d673f9cc5a7d5362c26808abed78a607e26beee124e198e21b0fd47b8f56b4fcc9c48d92bc66e055b08e03d6404f9b2720984f63325227999c001e54dd57a5dc9942e3b20eb50c009a5c95bc5857308b6ffaa742a6847cd61209d8bb37c8c0388af5a5ebe009903ef24f1d90052aa2bd67a4c65850b15aae1c3c345eb2a66c7856ca15443511641c55a150443f398ba6dac2360931a2003534f860bd1bbc5420076d48aa8c81972c65113398fa346883af8789cdb374f8a961aa4586768e488f40f45fc2748587ff43e6a331e4cfd7cdf4beca2fd3048fef50d0de1803cb30d8336d8cb77f8fd4ab476e23b4db0803bdcd130a58186b004b9fd4f9434949aeb818be4b558c9fed61f492526c22c8c7905ae4061967df8f9035207b9ddbfb205bafd439fe1bbad18816e820b9b869b4759075efd4f678bcf6ef0099985d18fc7e5582dcbfaa9c85e9b9d9c8aebcee1496b779d6a3ebdae96ac0a3498037505904bf037505102eef9409ed8f1954e28831a0d22750a60dc20f7c868493db7fb3fb49ea93da74aa220a6b22d839d4a0e1390758a75fddb0bcbbd40a94eec2de4616809885ef4c02345ad5cadcee6a44e1e3c96f2e141b394dd0d5f25a5757e57bdec849f3d069fffbf0ca2770ded71eecebf7b80ad80a3708904b0b2218234925fa41b2109bd945fe2ed9a10293d71df5c5ce9f7f33a7081f888c2c320beda0d4bebed1744286b0fc921266160bed7e698ec68d5e891e25f27afcc08da59174260f8f79732bc0abbf3401586308be7381483fbc6e209877d6ee2025009f4b385ab80192bcbd4f2e7ea4d1949574dca16ef6fc6a205bc4cc2fd6986cb674f05315ea0ab04630213f3dacd3c94f37f8dd573c6faee49ae6a8110aa3de681e7009df51f62d65e3b78763739e805dc4e277a7d494984dc52d9b43be0b8a77b590797d7a7ceb0bb514eab1561869c7ed46f26ab51128da2c74c8d94663ae8513b72b7d6bd96f5a0e1eac773f1ff3826082faa2e3828fa14381c3ae172cfe862284449643b60dfc40e96e535e319b506152afef00bc78bb423dda7b33263a5e1d502b3efc32164a0cb53e34849ac0c42d3f56248345479e27b77f5a5e3d58ed8d9a360ea9832650d30fa62436609ff2727568411bce59a9472f509b0f04df7066d4ee4cb5b5cc74edaf6c231d5c43d9dba84ff528cb0cead4284f7a1d78cad8debd8a5987b547bfadfab12e2468ead8d93cb7e46fce10caae10b1d072cc4e672b3318390611a9adff55b73127f3c3982088257e6fc7e5025b5b747e52733718badddff5fd567057f862b384fc98d33833a4a41034f4528ff790fd5572fa62eafe3d9ff629b9872deb5a635ce333f2c7daf53f5d1d3e00bf011ce0bbf4c5a3875ee035f5ebcd156a16eea3ce1a3a05385ac2667d9d9b5d6cdaf1a52a2868c58a123f98c6709942680745713450fd0228c962320e076c612a6545020e0976f5181b12bb34eccd38170827b26f2486ad36c4ab872105618efe5a0a18366f4282b815bb9b6283cddef4838d2d7e74b006734783c9b31a5534ff1bf5cff5b04a8f4ec67b7c0db3fa404f718525e28c848fd6c65d2719201413d1ddd2ec2b2ae4f6906a4d63c773e9423c8a5acfe5d2ca3057269fb46178c37fc945772ba6514cf463e358e3dd800283a25189da184fe709abf55b4cd5f26777cb1bc591891c694e472987b98f1ae53b82b036cda9293b4a99e3db94db66d89e2114936b6effc19b1138e3d491534ba4e476897f545975236869d588098a831bdb97b13162d9a4b1bac9d440e1f989a71380c5a2fc42922fb2d004aa4ed798746edcd01eb797ff8216dff4df9ee877c7704911bd422efdf9569a15b59eb77c6e7c99cbd5c99c230cd0ba0842cad7125ecfe7c95e76670b92e40bc5ab9b1ffb8820325d0860a4af0f24c473c1c6e6319f41b45a295390710ebc8e1ca00052fb986706f1df831fe4711c70fc6bd09c4664e6e083f7238ccad76805d28f7e96cc928a6bdbf5dfeab23b962c14eb6a1644386c79b29b49029526cf0b324e0ba98ced58cba103f8901ac0e76980b4d38a3a2624c5cdf3b5f207422884e16c295e2bafea926107407678a375ccfb159bed10859d76ccc59362c359bc9a5d624458394dff40ea07d2c8918edd4648cb855ffbdb133d4b362efaacdce55f6ee474d64c189ea47e1a14f7a57c2ef070fbd4075ec55fc9402d02eb8ac75d0b1f52fddde836c88c2acdb208d2845737d00ba16ccce6846a3d9aef03a15b67932086e065357e39c08cf486df2d95a424a48b1c3561639065a392595ea7d7d886f781c932485b0587b66933c9868a2acf49518ccd8b12a18fb860040acd1a36c8f81e71322a44bff1f9b966650f83ed24a035124c75c116189959698ff1268319f6c806bf4b44546248a84c9391e4ec4b883f0205eadb5fdef083907c1ff186459099d5e79d0c04f6b2f91e9ae897ac76e7a8df13a06739446147d90ba6d0c914815d8e5f6cd9cb15a27216e056263d147e3be247dcdc9e891a0356b9d13c8339921ebeedd7c6f6d8cfd4529749f4066d19fdfe5911cec8d572274450413e5f0a854b62aca580daf335af2dc3879cff40e0b0a54881cdad510c7e27272b3bee2dbfda962488a87e369c9f7393b55c243cd30180690c49fffe628936180fe065a9cef262b4a9d03f61845b2a58e0bdb7cd65956a40f9b8a41744f99830c2dc254084e808083c07ab6d6481fd27179dd53e0bc2f68391f92b894f6f2172f7f38eb2d03c540dd496f47320fafe199f15eaf6dbbcaf375f8cf8ae8c9c39bda24e7209eb8992fd9e51e150be74a275ed3c6283b061351b4c84ed87edd685e971519d7f05663faca62bd2143940318b463cfcdeffec73d297d8537db1eb74ac0626326f6289e56f3535a73f8c13937079b9a603ee65a8f914fb8cc4cc85c75ada7278e7d9425b2a08fc612adcb29ebcf4b60b5b1f2038723143f7a6b8c911f01d43365ca32509df95800d9759df47b8b6088137f9443a91009be6c96cca9a20709abb932047d8cc81abed7d197780db953dd0d5a4a2fac17a099a7f8e8646b41f3ec9d61f62735277c244cee5f7016bb51a13f54c2555d5efc172e80754849e837e30f6c5eb272b02cabab87dd64e4e079c17333eec71b67065fc97067a58a6f0779be278a4eef7926513af18bf65bf47cd1dbc5b78571d0f3fe09ab1c27e709023055aa1219460600c75e641543b956c5e763db417b2b46ebc436c6ea3d022b2c956f2a705abbf16eb3b9c26fd7f0690f372bbaf648fcf4a951397c31d8fb36200fe369cc34d460518f13fbdea1fb0f286e85f90b955fc914240c371b6bd458cbdca8db8ad80a54cfc599918cfa968175a57b598856ce5bb3409289aaf9818f539411355b7311157f774b59ebf62e4147608d4901fa1ea9b49805fa55dc8c11af4475521064ea04154fccf2ebc4ace511f7faa87c5abf41f2414514d0c1f2ca6a347d3cfe24add7d6df70e887ae839faa8ba04f84554347402c91c41b3ef5d2e6d45e625a0a11b87afc780f330d23964a8450177e2e5e8af377c58a8b1f0289c6c0da1a563819425bbac451baeea950d6562101c97a5255a8c95c55562c63389fb11467a0924874a622f64666cbc70379dbf31af573c0b4b0f9ac7385fbb215403fd5d4541622e202ce5d20b66927df0c483af98d2df99cbf2a0df1543d491018f05edc5cf66fb2864577a04a2420482889cca792c80177ea07a0a858c7bb08e49caba3e7df5a21b6274963b2e2012d29b3c2f79feb0450ce4bb403a651a3c568c5ee216ec49aae6fc745d114319bc77265067765a7980e338fab49840ad6711887b22d090a440752dbb6d3094c5d53427da401709734a78633664d9239a58d4b63bdb4cd012d6e06180e294c18f849bff42e98820621c24212f56073ae4f2772e7f6464ea345caaf4066250aa1ca543b0625ac7fa39705597a4b49aa04d6d133e5c27fc44c3a8ef1444129ca4b1cecfa12f4f33ecc094ed46fa36debf12ade8d37f37d69e4ecf705fbfb3879e1e03ef71c058d69c5f716e01c6979489d622a0f51e24d12c333fa641d8e13351d841f078cdba057883d4b76bd0c51ed4c4f4cdd87b43d025eb9703b93ca00704930ba40005791fce4c40372ffa37b3cae28212d0d2d9f3c644b55efd24782b5a150cc33eecee9b6ce8dbec27bfe513cf89a57a42b30815f6ffc57d3dd2128442a8c4c1693d14a83d765f757f55561cc9adba0f763b2ff8491bcb41ec19d5233c07afcfdd8accfbedbaad2061c125405c82aa79e35564f0d7c0a47120f05d1251083611f6d806290fdf5480be46546e6fd6c3488a83323c11d7b6de4da62d2e82da4816ce42546d507937abb93186c68b02e03b148754f0d5074744b4c7ee66b1f876562dd4f71abc86fe07edb7686478c7ba6ffc1365bb5730842d1b47e2467f1fe38803063abb77518dcb3b062e44fa84623c02bf47c429ffce37e7cf3731da45fc918d0a2b9a0d3137a69e8175ffc226e70fa15e4abb81fc6d6c1d01059d4647d34696806aabd26010a8fedd39bbffeb179bc82cb2bd0268103f43a1c38855d30b2e160d2d35950e7d65f747579ffff2370e8b237b919ddf91c2e91590853ddb7f564ba6b42da88e27b0fc2d533b3d795e3b2dbfa1b84597a0a994bed3695a19fad0c94acbbf6a57a4dd6bd5899ebfb919be8d18a897ce5054813c2c76e834450beb22cb9a3bb05c501a14b18050c9dbaffe52aa8e24802759992b9bc54856109de07efe107553f12c69730ace284ba470a4d59139e24e1931f30e4f0712811d0a6bd256da5ff4c8851cd1cfe28294ec3222e42b027e7e1f41a2104ea3d2f6c853036b51f23384beec14311daef744882dcf10c5e1c9e9dda296665208131ec51559cff934e61af36a6f33b5958f7369e8c964ba5197de11065181e0118a9440dc8f6982312a41d6207c1009bf984d49a1e4aa5add53202c1237a2984f5c330b97381305434adddd17c0bc20c95b68c0ee502824997b725eed25d47558ae504a3c9c281c5a0da12084c7687ad1a2f200933c83d25fc2be2fd4e1af7e59cb47847a82fba1c0e50e2ec5d3d793483f96ee54812652c3e4567b9d3d34ead5bd5878aa8c881ea57cdf2d47ba5b50dc22cb00898035e3efe735f7624d5ad11d1f3181b6677ddcbb48c1a399f03963be77e8446694ee0493eb36aba6d3c3fefd645cdc030165399953f8b6cbfad396142fd5d704688bc042c83bcc02a0db1f845ff0bade5aa407df9e4fe8e58f4eceb780dad935126c34b58c179e2085b716fb14ae57f1ebcf9f76c8e86cdc4258af250b0ff67dde4eb0465a290f0e084b473a9add49da2eeed5f5eb8458d3b1b8179711831a1a38965dc0c5464b4a34c2c2be10a33b0684d093d06bdb8206eb020e31579a68e605c9dbd95c76b260c8692b022776fd2eaa49b108f4d03c95cc29071e59be7e9306a677335ec5a0f0aee96819861b1545a027db7f6c737e2b9a6a88251336b6b4d84b29d7eb147fd6db792eba363bc5d053cb00a2593fdad4ce22e370ddd84a3f438026748a991525d61cb04bf2bcf32f89608940434787c6bb84444fc73f0cda55abf35d197a5150f69699de6b3f72b782669b3695b9673576abaa48cf03605fb4ecdde92eb781dbf3df56e1389ee44408694694aa559dbbf25599988f01e17ad617d21ef5e82a0eec90fb821bd462fae93041e4cb1916234026fa3e7f230a19ebf4d09edec826ee3a03c12bb5d79973ea31cb44dab9b1ba7ee9585232798c046b3f212aaf7ce2d388cb1398c59876f74f87fa051b33972e70d129c3507017e2d80427042921e27337647864516455b7a60ceac1103bdc61adcfb3c381460a656dc5c056f2cb60a30010c236755d7353dcf4a637780c98473f564ad0ac36cf0254262ac2618914bc844d7cafb76253cd3be5400c82b85ee9fc6965f0e2e1117556db246d97bfe5c4faa55901a83fea98637351703c46c20cab4673bca96bc9f3ec6556836c8c1cb49048c9ca7950b9c7dc90a726aad2507115569dcdca7d0579330cfd32cb56fb707ef053fdf56c05e3df0fb02616acb324e283a52a57f2d8ca85aa720920971cb6ff5faa592e3a0264bdf2d46eeec7adb63d08ba41068f0dace01fe7585c79d9377194e56d008a6b78d40bb5ea131b59242b37f01ea7bc15554600ce552f2a429f7ab80cc3a19a4b46d0adfa128881f5942c4ffc8ae76c7f8e4d04ccb0085b8511236f8ec367bd4d8e3601952b3274d24ba50e411ad0de43781cb7ce03ae2a6c61b06b597246aa65794c052e1f939d1ee0e58b6cd56e35f55a74b2189fd122a90dd36482eb0bf726b19d315b91e115ea802e82ca6d385ef3c3e48c4b3d84bc1d9e85d901a9f76f3b1dbeed07afc24661ebd774b8a6a3c490fd47030432bfc0f7278dc5a2908abead8edabc4d407a521cb7f5c2401a3d01465a8ed36dc9a168fca9bb7b62106acaa95a3121e007c388cd9262aaa87a5d8f99b6509bdc02256fa2a19593eaf3e0ebd3151627b391adf935cb8c0a2d756ee204418fa729abd23d2a46b527ba0cf20ab6fe8587e59a6e454e82c574f68be7abb4363aa14cd9dbaf702f97ed7ab26181e06abf1949a769ba1603fa7bc1c03df3c1b8ce582b45a814475a17b9a707b247d5930017bdea374559dc32d92ea9e35d8c3e7e730a5741761156455df0be39c4ec9b665f7429daae8356dd86280432165d93765d884d5c41b9eb90f1b940caabb2d0b88ac4c3491d035cf4d0aaade0c7719043e9b06838d602e53953236f08f792cbe3880f87ea1daaf390f3b585719b33036afe2ae4ff6016175d4ec4e859289aa9cee043a9106374a7f02e370c7b33bd96c087a44c93e03d5eda2b7421cb16577647f8c187d476e1b7f83361b471e5640622135a7ee7a96ab4bcdf0822e174c5e35040cd405786620cc95a5211fecbd53ca8f79105318afc4ee270ce25c5e91071290e103aa08866ad38522f81416e2dc089a672a52143f28797e0e8c24aa86b96c484423f610139739107d84fc3c89c1b93ce6cec1479e4d4943e9dd0442ea35dec788693d8360a3da641e8d72ab9523aa0330f7c8560bfa7c66b4a8fc17fa493950c89bac22e8c5ff9d20b891e0e23cf88878e72eeb57eb4c74d42f0584640bd957108430657b7e871a52992a5fd51077efc27e1a9942b7d5813dec17c974dd035c6900bfaeae0449a28bcfc474deb7e36191dc8662d01f981f1d82f7bb7517c83c8376692f4cc15d292d217e65b149f794c2a8048cc9d6e7d9bc3eb721e743fc36f54d4d004615f76fdfa462428ce54b7bd096ea853301e882c6abddca825065d89ff548eff1d5ff88aea2bb55f9f610d051135aa422afb4122460f6c148443e83d38209f560f7f92c45557a54ee9fb3ded2f157d8b47ee9b4b13cb597ac722a37868db3263fbaa498bca847bf865deff385161424966a22b21f349590a231254eadb79379b63ba22882b8783833873ebc15131cf0a88a318a0d9bed1f4a124e64571c5b74892b18ef6f7254ee584bf31a0c949ba18adfc46616363569199b866f2", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000006380)=""/1024, 0x400) syz_usb_disconnect(r0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0x8, 0xb1, 0x98, 0x10, 0xd46, 0x2012, 0x74ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1c, 0x30, 0x5, [{{0x9, 0x4, 0x10, 0x3, 0x0, 0x3a, 0x32, 0xcc, 0x8}}]}}]}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000002240)={0x24, 0x0, &(0x7f0000002180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r5}, 0x18) syz_usb_control_io(r6, &(0x7f0000002740)={0x2c, 0x0, &(0x7f0000002600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003840)={0x84, &(0x7f0000003380)={0x20, 0xa, 0x1, 'L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.313834797s ago: executing program 2 (id=4869): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc44fb8f", @ANYRES16=r6, @ANYBLOB="08002abd7000fbdbdf2508000000050005007f000000080003000300000005000500ac0000000800030005000000050005000a0000000800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040845) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/127, 0x7f}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a88000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="66b9800000c00ff0b4b435000800000f300f0f1c9a65660ff3b20618baa000640f2091672e660f38803d00400000f61366b9800000c00f326635004000000fb06635800000000f22e0f3cea657a6", 0x4e}], 0xaaaaaaaaaaaab69, 0x10, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000"]) 30.179881673s ago: executing program 4 (id=4889): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=@newtaction={0xa04, 0x30, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{0x8d8, 0x1, [@m_ctinfo={0x14c, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x7ff, 0x7, 0x2, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xdd2a, 0x3, 0x2, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0xfffffff8, 0x4, 0x800, 0x401}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x9d, 0x6, "25c2ad9014e43486d15d930831913e333e8d3f19990be79665e3150d6121f0090ba28c77adba968d89cf23bb94510077191b932dcfbd7edb78122d600253bc5cc9235471bb7f018b74e72278a6bc611bfa14a6083be1bcbe16fe69f527cc7d106e1733bbacc7eb0717dca6af1102db8445fdbd17df180ac59aef8a2fb04e168b4c1c207e64bef49b2af80485415b32c40e8177e1012524f37d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xe8, 0x8, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x200, 0x5, 0x80, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}]}, {0x89, 0x6, "b4a879d555530b915b7806a74591d7f3190cfabba882df9c88de367714cd0e0dc73ffab33415e2dc3a28b91d1e1f3b2c579435575649f8f0c4271025fa47a4be73fc81f1c432cf1e6e81f46f8cacf1abd9964be1f726f7b390fa8f026685800f8253b97fa04f6af76a2cf6a69c0046afda36e34d11ddaf19e1633d58644905c6b4f0b4e7cd"}, {0xc, 0x7, {0x31698e8d54fd2dff}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xc0, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x50, 0x8, 0x1, 0xfe37}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x74}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf19b}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x1a6ea37f, 0xffffffffffffffff, 0x753, 0x100}, 0xa}}]}, {0x2d, 0x6, "12bc072b4796b17ab910f5c10492b4762a4d6e4ce237cad610b3826dd100c31c36c97d57e3e86a2d2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x284, 0xe, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x31, 0x6, {0xe, 'security\x00', 0x6, 0x0, "0666e1ae055bef"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x119, 0x6, {0x5b7, 'raw\x00', 0x6, 0x1000, "c157a4394767e165c3d0595675fc7514ebe1b6811e31e6a2e79e00008f0735729db40e704590de84ad3617324e287d14386e5374423ba356474b0f7dfb364d785038017dd3f49253378a1bbb1ab5f2bbbcf70cc93e2e0a3afaf230d64515aa6380f9ee10736c07fa2b2cf3af0c688c4c349a64e4233f154ee9f656ccdfbed5c5becef5d0e7f29c2abda93c8d746a06bfc8c2335493633a3e51e8a0b48d8c6c87df1316ef9a2fbb7baa9b54e1e8eeaea0e05a3841696d7791de81cc089ec0804fa4628f4c48118c005d4343ccac9842fcb080b6bd21d8b57b46a776c8796263a0c98ebe2729be84d3342273b657a9ac"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xd5, 0x6, "f13017300acae4509340f6215d40ce405ca83188009e07be1aaba53ac90cd51f0a65b15ce1c46287cfc83e7385983450618fd1eba6181aba516ce5f3361a38f19cb9e5e18e47778d5513f1fb367ba7d26bcdd626b9cb8ccd343fb3dd6b33cd5321ac2af17018f24a317897d8ce20ebf5a0ae7f7b8905f4546796b44222e8bc9c156dc6f0d477d3f3876d0d02ebc7c243dc27c10d1497f19ef318764f944b04c673b1684aa05d7be96b14671ba56b5366f3890d13b9563f0da0b18692295bc7669eef1af63691d4f2515e2f7c2393f8f656"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x130, 0xd, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7fff, 0x5, 0x8000, 0x9b1b}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9377}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x5}}]}, {0xa9, 0x6, "76adc489435096c016d3269a117c181a7e77ce217afcd5211d2f97753ae4451b6179391a0ac49282ff5e28ec152e2bc3544efa44bd7a29a012461615c493866baedab0061e7c656c2541ad26ba18764f610dd641987b9eec8d0da867b379a7abb1be1d0ad3cf2a3c4e919b76f73167ad18737a60d7b52bd2cb307b3f20939df53c073dadd4e49ce9b8e7186f41476ff6af434a270ee627b4cc36c11666a49878cd2aa504d8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xa4, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x20000000, 0xb, 0x6}, 0x4}}]}, {0x55, 0x6, "065ac1512fbd36841c207fda506e8382e394a901f2a2db35ae6adabb8ba017ab1f820acec1c7364952c7a6ca38527bb12ab7c4a9741047d6b641281f26f9cff6cdb08b504f59ded2e34a044763d6e1a704"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x90, 0x4, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x20000006, 0x965, 0x3ff}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0x7, 0x7, 0xfff, 0x401}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x37}, @TCA_MPLS_LABEL={0x8, 0x5, 0x11d89}]}, {0x11, 0x6, "5c7a4a9e1b2e0723535bc3ba76"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf8, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc1, 0x6, "cd0fed5748e9ccb7e3a71960a9bd109a6aea54be8cbd2b04d945746f4c2ec6eca374c7b86919480d083ce013668f6306b4867db2c3957939b27abc292892b89324f338659f8980fd78e7aeb9a3b8c63a8d2b8086f27228373b1e1a51a50f98725c2f2cb8848148158a2a485ec2dce8bf33c5dbcd05ada0aecaaa66af79ac3b1be74832eed55f6cddf31fa165df9914b5a991cafb54129bfa3dd8282fcb9eb5e1d63ec37f6d58bfc572cf24881e5054fecda103ca8896c02e6268213995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x118, 0x1, [@m_mpls={0x114, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0xe5, 0x6, "17e2de27fffc182ed6ba67b94b92f1d6b7bbdb7b359429e64fb2c07a450a706962d99cea7363aa35b501364693036cb5de3b48df91d7360b49196a22b96e56b5e8963a433954d622bf081563bebb37dce9d1aca512c990a9b78bffb90eab2a48bb1281d48d9f53d5371d592bc9b24089f1abdebc35208d3676651f5dcb1e198294f9fd91528f52959ed50e5bd652634da864efbcf33779e2699f7e1e7466ded93134977ee04820e1f9563d0510daab703331f7cb94b03306a02df8e12fbe4e2dc87281b14bf9fa2395b22c140359947483e409d38ba1a3039df867b0350605f7df"}, {0xc}, {0xc}}}]}]}, 0xa04}}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x300000000000000) 26.411568348s ago: executing program 3 (id=4897): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 23.340477726s ago: executing program 0 (id=4909): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd01a}, 0x1c) listen(r1, 0xe795) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x19, 0x4, "c0f881bb0dc214048530e41d5cc1818b1ef0fd9dce50590d3f4d984b588ee897b569c086f6e183459bfbbf8f8cb6018e2e077286e516910f33ed753d3c141f39", "f6fb5f7536692fba49ec6bdf208fe668f732ee24f347a805fe040041a37ae954ceb8309a03077d42e8305bb809567b92b5066b1f69daa629986b1346b0a5aa66", "9379efc8914bc7821d7141a4451dc61aacb2a33b7486fb8dfef890cb2ecef5ea", [0x7ff, 0x10]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14440, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000200)="7800000018001feeb8f9f50dffff00000204be04fe05fe02061123094300050015000000fac8388827a685a168d0bf46d323456536f7578d04001000c291214549975ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400180012000a000000000000000018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) 23.100287872s ago: executing program 0 (id=4910): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x40}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x80000) fanotify_mark(r3, 0x201, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xbdbe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 20.271938718s ago: executing program 0 (id=4914): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 20.06595045s ago: executing program 0 (id=4915): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000000)=0x9, 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000d40)="91", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f00000000c0)) r4 = open_tree(r1, &(0x7f0000000000)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 19.902195714s ago: executing program 0 (id=4916): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb15}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f00000002c0), 0xc8, 0x400) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000300)={{r5}, "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"}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001300)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000001380)={0x6, 0x118, 0xfa00, {{0x0, 0xb, "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", 0x31, 0xc, 0x1, 0x84, 0x5, 0xf3, 0x8}, r6}}, 0x120) r7 = openat$cgroup_ro(r2, &(0x7f00000014c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000001500)=0xb8d, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000015c0)={0x3, &(0x7f0000001580)=[{0x8, 0x3, 0x1, 0x10000}, {0xec, 0xcb, 0x1, 0x8}, {0x0, 0x5, 0x7f, 0x6}]}) pipe2$watch_queue(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000001680)={0x11, &(0x7f0000001640)=""/17}) openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x22000, 0x0) fcntl$setown(r0, 0x8, 0x0) statx(r8, &(0x7f0000001700)='./file0\x00', 0x4000, 0x800, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000001840)={0xd83e758a62ea244, 0x4b0, 0x1e0, 0x30, 0x4, 0x7f, 0x8, 0x0, {0x6, 0xfff}, {0x8, 0x1, 0x1}, {0x7, 0x5}, {0x0, 0x6}, 0x2, 0x10, 0x4, 0x6, 0x0, 0x4, 0x6, 0x4, 0x40, 0x7, 0x48b3, 0x5, 0x20, 0x200, 0x1, 0xc}) fallocate(r3, 0x40, 0x0, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001900)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x6, 0xaf9c, 0x2, 0xf, 0x9, 0x0, 0x8}, 0x9c) r10 = open_tree(r8, &(0x7f00000019c0)='./file0\x00', 0x81801) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f0000001c40)={&(0x7f0000001a00), 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)=@delqdisc={0x1c0, 0x25, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {0xffe0, 0xb}, {0x0, 0xfff1}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf10a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001d00)) 19.42800747s ago: executing program 0 (id=4917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000240000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 13.484509009s ago: executing program 1 (id=4923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x99) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x29d}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x44}}, 0x0) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x300}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r9, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r9, r10, 0x0, 0x0, 0x0, 0x1, {0x9, 0x9, 0x9, 0x21, 0x100, 0x0, 0x1, 0x6, 0x2, 0xbd7a, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb, 0x8001}}}]}, 0x38}}, 0x4000000) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "8b"}, @main=@item_4={0x3, 0x0, 0x0, "521e3d3b"}]}}, 0x0}, 0x0) 13.301065303s ago: executing program 2 (id=4870): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) r1 = gettid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000023c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004e80)="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", 0x2000, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) read$FUSE(r2, &(0x7f0000002dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0xffffffffffffffda, r4}, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x185000, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000100)=0x10, 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r7, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000006e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x1fbc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1f90, 0x3, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "9d7f9ceef1363ce191cace9ef6def7338c2d75ac9eed8cf04f8ddc76f02b74b533efe91ce31069655242f8950e4a9e96bf01fccebed8b8b6e2c3997b58c5a240926aa5f04ae0d6a2e5410482c371560a8d8f5668fc650f190761f9c7cc8911eb6d3c82c52777fbf914058f2caf3643fca2dd6bdc58908d481c2e2a2d722b4ae96466c6c0d84bcd2a84c7f9fd5929a6edc014dd689ca36f28dc12607c24f03a"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd, 0x1, "f18889b57333869636"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffbff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x1a0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "47f3892cfd8cc3dc4210e8e46b68e80760e8129e0f6e810b049f0ac9e9d8a8688c860e946753c91c518cb904a5d9f621eb5de052fa74eacab0f6a31f157697cd9262553a11f0c5cb"}, @NFTA_DATA_VALUE={0x102, 0x1, "d8b8d169e684b52ceb86e9146871219112aa423dfecb11e533ef4e508fd149014a58cfeb553ec9462c672e5cabf2e8b3d670167fc260c9aada0edaa64e85a0ba940ab7d5576857df1c9cf616932a31bc32fcf164c7d0c91770d7ce462e81c9f1d1c672a5967a26712deec27adc02db248c05e1ad1789f4fd9c1194d5f7875eb087036937e6dd51e838b33dcf7f1173037a5af6dc0be17cd5de512477d0325871db3a0f52f078fbdf4e48d2a6ed56234aa161a5a9a66b6571faf7aba011f8c62a69ac6fbeef8340021cef8b7853e58748d4c45ff1755bbb3e99af7e30e9f42e4f9f6940d85338192e4cc6767b32a7c4b9b65ebe8ecc082e0cd567efa13090"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x5d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc8, 0x1, "05cd169ec623847b1a3a034fada62e4cd97e9e17a43a7339ad519c3ed2377b2e63169b3eaaeebaa4a80ed9da7411776f6884d0ca9e468a46a8c7929c42d398fd68fbc581a11c0f7121c26ca574948106a4416730f24a94a8e797d64baceb2da0f5e46d7c8e61ed3e4e162bff15a47a7dcbd296adb08f29e7bd94c35d32a1d0062c55631280d7178a8b88a1910a4bdd70f5f0297814118315edf282de3d815ec211ecf1be62faf510ecdd095eebec67fcfa1e77634aedeaa43374d91596b888b5d7bc6257"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x32, 0x1, "1870b1155bf34ba5076a211733808f8c594b6b021e3e863acf6591c47e11daccc120ff1fc35cade9e2b84634676d"}, @NFTA_DATA_VALUE={0x7d, 0x1, "c0d949aceda9625936275f2949096083472c1f363efcf7bd1d2380e86f7425c8777798c8a6009426204bca71aec16e7d0472b8b4e84fb8c5f5083e64d5561ce1ae00a6ae3838ea2c279ab8f87d9380d641ead9dd7d42dab0876e3339f764f02a230e0804396f660aa2d108fa826f0e05c84314c711aa797204"}]}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "fc106f715017a058de6c77b3236c075d80e22fc3ada24d6105b22363748de8d1d12710274c183437932008a49b"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff7fffffff}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "fdeffa3e397f1b020f9b1045398784ab8eb42f2585d7736a9d9e7bbf4cdb3cb49dc9213d0fb3e93c13b713a21d88d98819e1f6d4f521653a6070d756abbed0a96cd94bdd21f9fa7ce9d5e5d9add114643667ef097e535047cb4a0b64337ebc55b01c3086b1c5f40d47f3b2a65064a8d115594b8b6df97039a26a6eecd1a996d5285d31fd71860e33c08f1cde21d08700700d6644a0525d1b6e36f7d1535f19ca40f740b1b69d41e029c61514ab364709bb01e1cc5f5e6dae815cea452aabdbea648355912d129a86665c5b4f24d214272fd356da"}, @NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x94, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x70, 0xa, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x290a}, @NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "e3020ef4aad0d3ac83f1a29c166371f9463ad6a2a345e45af9b6df55dfecada5f0a5228cec8191fded697049ba25b2534e47ea280339ef78ef0e5973a820bd25a9b98c85e1711e1f83d65ae7983c05434b736936b19c1cd91c9a9a410c9b6053475fcf205d47dfdc3d38e4ecd92e4b68c8c0d2e42ece3b2f241ea8ba84f695a20ad104f669f7fc53e1d77c072d37820ef21247433a048e9ce8849db7340386f2627700dd7e80240d2a8b0cf6cdaeb2562b03acc7bc99ad381153935efd6e484dd6e75f7ed0b75800f0926da6f2e4dd293b89df8cbb1e8b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x136c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x12c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "de94ed72c9b63f4e7af5f24f4550126bf6003598cc75fd4a016c41bb63c12961e4f1085926d83837ed6e284267907582189ec209a174621a5575f4be1152ad1357fbbc6e5f627ef487be5f4ed4dc0b3065afc9c036822f744b815f10733bf7fc10f4b9cad6e216feb19ce54e3756f221fee17e8423d929366681d830df99d334c4b1e113f25df55695cdd8ef5e452db353cc296dd2b81736a9f869e4d071889be512cb58f9d82f777ec35aa82a6d1b07cdcf837ca3f4257db11220493830884adf0668700eb57dd6b6b3b15b294fd0f0214c247a9c90763d632e2acdb5c5ffb895a02a80ebcf9926f3b3b01a315e51d0f050e8"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x1110, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "6fc880bcf51cae644301b5fee54fee298bf3a7aafe12de238b3810a8bb9a558504af8bc7310f3a08fc547c290e91726ee9738aa051c814a614893cf3155f158636a1c8bc4bb6e74eda"}, @NFTA_DATA_VALUE={0x1004, 0x1, "aee77851e5f1129d6fda5581995d1c7a04f3f7c6405ebfcdeef87bb852f08264529b36f8e183d47714ae9c7a7a0ef7627158b6daac92ad6bebcb2d2cb38b33d32cc503ae905bc0193e26cf28b672bf1f3a36e532938bb27f8a7f5f33149647ccef9018bd3de521efb1bc056c5185a4fc5194445cf0ba008e246876039822d52d92aa6cccbef0f7f9f7b4fa87c3fa067f718963ff89ce2cf29e1c7526a9bde15c2831035589a047a572c30bad844f80b8cb31fd654095b2f914a36ce3e00c711d4705d28aa91dd90eb7be69d9ee35d2be176cf2841d2d17b1a12d2dad73c311104a44150138da890af7775bb6fb1e9650d1bdbd4f96d0b678dd664a0c6c6761e07596a9ddbfb85caaa118b06d41dcb89997fc1fcf4307eff41cf4fd2faad0c49d5335d39199752371af01ebd8ada8854f3d42fa7b2694d6a0a081805492b1b8f0cb552928624778c03644c5065c2a0af62ed4f071ca9729909dbbcac44d3324d140846f16bade6ab8e7fa8d15b1ea4cfb7e4ab9678e2e076d142b5995e28ee9d3271f4a095ca94fa1b8a454459dbe1689deaddcca1e8fe148e1c0ec9d8f8b344cd23675fbcc2a2f6fc8f3a44f4fead392222134662cb10e05a1a84a84b1a0ff2d3fc208ceb960dc3b5b35f675b84369c6cd47f6f55bc7c070b39a80fc7811cab01fd0e264d5ad3007336645c2cda5b0130831a5c36a495fdb4ceebc5dbcbff77709e7ebe70b8faec1184b490c7b1d6dab4f3e1665d3dc66c0eea2ceaf5290cae2258ba4cacd56e513805405a6eb45264aa202c19ac3a9af2b6d037e14e73f1bf439b1cd9acdefa87cb52abe746af1c73f266d1de573182ec69ac26fa30d59ddb8dea726d562dd35986af23c64226aae29c5374baf757aab59b062b2e005344f9f97b5439aea62a51b1bb0a6d3a4d9f15a2bddf9f69c09153b6de6d108d1d092434ee15c6c26dea8206eb1e8a20f4eab6f83b86809867faab9ee2726b9e597b7c2223ade714c4da1c0c1a6149c09569d50c2831ff989b9ef01a3d1398e988e71fc713914b5e553c1b825ae2244f67e903b3a82cf6b32029fcf24a88dee7fae02d9440c862e64b2efd19e579b40ac3c78c2a9074d2b7dbe88c264852e2a18ed3ab4b022c8c083adea1d7e577cbce5254fe14f180fc1f7e5078740ad017869fc55708eb804f9754db3a6a3c9ba79337d8fedb2f600636a836886e3ff362adbccd23cd5d04add9dcfc3cfdf4b2fb080c6f375b4fd7669dc52d2518d6722e735e607015f98c8e52498eb5a5b9c3b60898b848de29130692fc103469d9c0538845dc9bdaf54065b3d15c94c7f33ed2d32dbc7c0183f5226044f6f45db397536d63420ebf4f2cf23e7f13791b47c3cd8a43292360ddba26d9f54bab5eb1a3cf72bf329c56f0c8d7ba2d85ba8a5f817d74dae174faa4e043244c79ca279114bb1cf2bcb6372af7d9c96617167c2c8f8dcd9534024fa7873b2e072b7907ae9dc4de0ab69b785b1d5068c59f9e4f85afae76d82b407fba7172488441d9db8ff54f4ceafd66eb2317ce56e28ed3bee8670ce1e190f5ea1347b6e43d42800945f2677382af599d59dde0cf2194581d12d0cb2484877227aec361eb90490b172adfa82414ba8190058c744bfc26552a6920d0d2c5b30a90320338c8ed4c4595ed9b1229fa47fbd3eaf2bfe58d83eb8705b106f2a4b9cf02acd3a79736cdb640eefd6fa871093a5673e14b50339e8d938189d97a0845de5223fa2449d934ae8f4675d410cf4d229ec50758ccf4470d66692eee1d01c4d55a368022a85b814c88e7600e9a8dff2653106ba2b11ede70b5461b35b007a9a4e1cdab8041c401b608fe982de749115635fd9eac000823278368f85e5a37efc2b3ba4aa5ec07c5a9db632e99375de7f25410f5dfd7849fd434bda434a735feb10f1829dafe70ef711e47b75ef7d20f2536a2762df2032a6c658309fd3b3b0ed9ea022c95bca7bdca9060058259f83fd284443adb9cba3220e09ee69e0a8902cf831101abf29c74aa600a70a770982ccbf620719a8d9427b67231953e49f2f9232b43f139681c05e22b7a686eb3bfc8872c175aad849363cbaaf3da057c07b8548a3dda7f108d58b75405affd27ea885bc7eeb24c6dc89eda5852fc7e6cc9181b5ba1cb9a54ed28b0d726ccb733e9ad9fdaaa9c3403f4e0494fb7ba433c56f9f0aa4832dbe7a8033c244c9988a8f20668e40ebfea0f554d2cfddccc1271106c8223e01468914bb381e937386b0d9cd436b38c8204d371b240095ce0936418c2d29734642a2c414eb7654978c13753ec25dc06f1f34115976b9dadc584f42be45edccdeda4352d7c220b0347d807f1d687250752856b5c460d50401e8c5a7538bf9cf5b6735fee941da0e5de3378f7effdf2aaef689e71602382d7076289118e06ef3dd765d7c01420fc64a908c0f94c867cf924c06afc6422f50c358ce34b31f035ef79363ddd9e8ae68aac0e2a2699486a16a2167b46e2831084e672c2eae5289dcb177b29ba0e34c7f3652668b4c4ebf64e61a127d8c8afb6883dbf5bfda8b04cae52237ac1ab21283d2762b4359150648b93931f863596cdbe161380fed0688cee32f9c333f3dc7363a0dce1be430b472b48e15ce84919eb0825457cd2623e6d33af2a5064be4b27796b7b11633f25e302e71548fab1f3fd708f28c8e108cde3879733b742cba05a35cbbcce15821a4c6b69edbc58550f9af361a21fe7b49a317fbd4e8d210611607ee945da42778cc082d59df7efb2c8db451a756977a8ef061c75dde97df27e6b3a260f449846c4a9656bd978f22c89a40651e443dfc33698999ed17818c704830a8e9f75132db63460cb15f06ffe8f19dd28a6973cf61c596bb2a4a2efe1429d912c670aefa6eb490f65951f416080666d31af1961d7e02ff787c9cd3dbae42a1ee6f17f2474d4c7974bd6c6ee9d56250242936a6c8a1b8e4f0ab410783d89ac6dbb4dfe094a98574f2a90c2521e5c2f7fd21da5f9c99ebd12c59dce85991040a7bf592f2a723ce8f977a31f40ae0e02e1bc97d21b53e97e25dedecd4c36e6309709282adf49fcdca3619688f47fb98d26483ccd3a97b5fa60d40b296fda3e46c35e7f3ef42e7816c37490b04f610f6e41124d6ead250ec134bcf1df36a71812440651d9559d84f5f81fb6e370e9902c30cf2a3b28e71392871990f6f524379cebee69d61a56f83dfb2efa3dbe261754a186d914bdc2babbfae41af4947d9f64e800a1ae772ae8b748c45126130374299503b57898e6861910753d6523626ce50f75f29855e854e944b7e2c63150bfe06fabca3ca114bac430dd79a4656983e0c1106cca03b4e432305575faf2fb4e1e92e07e28e321e8636eca444ad086d65f84964ac27ae5cfdd1ec3fd6687254f987e671b46d7dabedb3b2ce274ca61d63b2a4460dd636bc86511b8ee54f2e2f49456ba9a16fb47d6db0fad24ca8cc0e32d3df339fb0035eee1434220f37289c5467c18db41a1329babb5edd4f57e8a9878d9cc33a0add30801a859f5fc812aa498917cdf32d223810c8d3bc709af2143c5e7ed8d3fcd33338efc74c5f94bf4cf2afe8e0e419aa49877fb39bc2b33cf86863de7511b8c4a934d8188ec0ab75d48e48f5d7a19576631053d16adcf18917ebe4fa4484dbf6d9ffb84e9ee3f91bd066346f3b9c26b8c70fe8826200b8d45e3ba6eff20ed5a57592b8f46cdd9a2e473510977a799b0101e5ff4d50855ec4588ef3af9fb6ddfce6af7c903d995bb50fd438133bfacaa6b05b764d8912b117b5f6e8f6fd63fcbac92561711f3d1022096e88dcdbedd678eea176fd5d956928c8f624f94a89361939f15f5a06f86d8e8e062ff4ba923b49ef301b6e110b69c82ca7d05c547f5c3de1b9523690d15a37c8d7a25719e4f0487513de077173223676b3b91c9a7ae7ccf00246e13b4cb7968be6a0e24bab7d7733d9453079e25d38a4b92896dbcf27002cb5bfc8bf9fb8c333dd7a88b560e309b0bd7fa736812a1cf6f9cfad126cfa6dc5c3914e40a2eb8a8bdaf7d69df7134d2f0270525e0d353c949f251a0c9c42963ca6c1d7253de2194aa85314803dea01503440faa4b625732595b61ab162ec498d7572445fb2b69506f2de2f062945465e78b6d06790d0818460cb973cc0594ff545a7f47aed28bd16bbf0a49ac87548670d32390b6593a960167f8ea87b2825bb12a7ce5c0cc51e09b2242cdcd9bc549f70dd049fb300dbf3874f94a1e2409847c01c5a447a7ebec2b48d4111c1fc072b946b205edd78789b7b7ce964f01badcfc62f6cedc1a25280bb1e62bd092e6439a1fc192de419c6c85fc6d381fbafdb65480e683fb00af98c0c7ab64bf6e250bbe8149c181688614bc07a3dc3bf3d148acb421e06fe94d46680109ca0408f337d8d964ebedb95ffc6ea59cfaa9acb46851fc9bcb1f3cd822f448705ff26478b1dbb5a5c9ad979da82ad87c92638019435284dceba4f2bfa026d8b8ebb46d84f59e047dc21513cce80ebed22b4e21f1f4517c754b360aba1e8b8cf06346379205eddc809f432c186f8bdabe3b2706deada1f019f17a593dade70adfa08447d290abb60f754bbd11eacfd61c3e2b9d6a3031c001b9dfb6910af2b9a8a8e6b88f1f3bd0ea66df69133b4aaab8ba50e7cc62c8d058b5d6f0081e6235857d73a680a4e45c48d0257ea6b48a4b569ecf423685699fb03119a72a7ccf8538066bd459e0c80b61f73a97937a15d68ce35a733c4090d1ea56d724e5139ee179422b407b32868d3b49229350a88209cab17880c7f35c46fd29a767120e567cda47b2711ff20cb50439f0f2b723b58db63d526277341dc8419fc529cadb8fc363c290a41b251b4d08350e46c22f4d21a9efbb5b49e12eb2e877f0cdbc7a877c18b19c72f4f21b5692662e99d40400dd3dca377f9b6c720b5ee47d64c0c2f4bd12b209d71be1f1b19a6553c19b870958a5f5cf48d0a9f7cffbfaa0b50d7108a2c67ed28ff351cbaec67ab6e7ced707ac3d74be7bb7d369bb1889395b3a7eea54f45531b56e3d35fc611f0f118609766b201d3005f241cf5142099c775f31d6dd09143a949c3d8339d9bb61175662f1b8df563a7558d5f28dbfb9af1673ceb2f9f7a9032af5f59752e7c83e6ebe9ccb5d77b843d61d67a58d5c075357bb5c6a7825ab546ed462032dd9cb6b33c3a7fac3b4fa02a0377472e3390f4aa08b87eb50e2759b876e25b56789c3084b4e86d323afafb671fcb7d93d3d682e4b9d2a2056ebbde8ae9312ca839ed62150ca2b202476c25e50eb56feb711b19306bcd84c812d202ea031672227c4fc7c1b1ceb9b614f8642231a7e76de9d3f581371c26fc2445a63543e7ebe6592111e6d9d1c2fdade0490c47444ce40fa0c8570f64a63f81f73ac5081a5affa4a6bb551cab659a8801b6c1053103d5feddb784cbf7d14561ba45502a6adf7ced68db6ae622f07e31b34b194d4cdfd84f3b9620222591c9a61b61eb98494b6dcf48f12b241be696ba45890df8dbec5f008ceb8368d20d250dafb6ec47b01c3ee5d7175fa0c4597b116f4ed8ae43df1c35ee37295b0833d32da10ce5c90ff8fd4ea6396de1a915e78444cf8d7c7fef7afbe60f7fd5eed684c65cae031a4734504866ffb7ef41f23eb08644eb091ef59b7bd363d436f20a80a6c29336e42e80bf2e102a44a2a626602ce8f9295e44f3f63c79a1646e69caf0f23e02a6d5835cb7f03ab861a32cee419a1ffb5ad456d31a6dd92eedae82498488c7a8795c69fab60a718a66985072791b256f347bd03a0f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x41, 0x1, "3c8c5ba5bdafd35bc9e7df3c97732c42f6ac1de61edb4b4f6906cc40fba9130d92a055a0f2031c69cfe4fdf662dda5d313c135dc0e60e0f1cc3bb370f1"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "53bd322a0c5419979b86777cb7ec00ac8f8a24c0c9904962732838d3f9e898a0a9cdd8b56114767eedd5f51ef77eccfb69a2a3ae004b9910da949f0911bd9b7b6cb5e9759865cc31322951d23831879f0eb59e46cf46ed96ae2b5cb44f22ba33fd205c358786a06f0cba9a6b936cfd564cdb9c05eaeea6217252162f8d731f723346315dfc79a9e58c00fe0c07d0ee3a8f608490f0aeacb62fcb546bd223a1f5341d18844c1e0f724beef2b75eb4ad2ed51b010c2f2accd1cf679236f071d552ee6338b0a14bf2f2bb46b040004d7e"}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x220, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "54cadc2a7be1abbe96071bea14bdbc906493faeb216f5ada34f5aae30234cd76c7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "ecd3442260636199f2c068a6a35f968d2a0eb42685e1e34065b204819c7ae06ba4242c9ae02a5283e590e4af8b827cfc68439c5a7d456c45486eb63ee52e3000191b98a00bf44b31d0a1542b1e8370a9d3797edda4d3cf9da6c6488e601d192e3b2ccf46887d21a6a9878c8a525887f66fea09ea2dee46bc1033dc71d3bc7520b91945486f73f4d7bb508a5e111d8eabfab2858810ea57293f8ca367cf1d2b0d672b7c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "00eb8efd73c11ceb6dcc02525b313e9fdede7a2293f3293a69b6c869f5f0d401f2e41a2c151f9e5576e8d061aefba9cd5508b0b51c310997c49d9b1e46b07297dc5554d5ab670bb3dacae0b0713f1a93bc4164daa537306564f99004cb0db4552851aa789b2e5765f734a5f6e3f15343f46b5bacf68f1b06c0af3aa14c798232c7479b68ee0869cb8d53d7792bcd5cd852e1f6247b28eca408216f790c562e5b21cf293271234e8e3446559f9dc0a88ab71c94028f64fde815be38b2354a1cfad353a8d06ba95b653071b65f52addc33591e01b4a9141ad9ce"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "d372bfdd07ddcf1ece5b70e29a7aa0b15ac2e64d3926fac26ded0666b435d5ce96bd65635560b2464c80e3ee0dc197de7dd712ea5e75e6960da8b0e5cace4ac25517602fdb27d9c40f17536bcc3e992d19e6dc6ac4298d92de396d4a5ef5988005842ae6a822dc1544074ab3f56496c8"}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x202c}, 0x1, 0x0, 0x0, 0x84}, 0x81) 12.319854556s ago: executing program 2 (id=4924): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r7 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r7, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) write(r7, &(0x7f0000000100)="1400000016004f7fb3e4bf80a000080040030000", 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r6, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 9.483561535s ago: executing program 1 (id=4925): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x10001, 0x8}}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x856d}, {r3, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x6, 0x0) dup3(r4, r5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 9.236027768s ago: executing program 2 (id=4926): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_pidfd_open(r2, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='`'], 0x60}, 0x20000810) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x8d0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 7.433582851s ago: executing program 1 (id=4928): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) writev(r1, &(0x7f0000000240)=[{&(0x7f00000053c0)='+', 0x1}], 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'veth1_to_hsr\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000280)) r4 = socket(0x5, 0xa, 0x1ffffc) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r5 = syz_io_uring_setup(0x27f3, &(0x7f0000000440)={0x0, 0x0, 0x100, 0x0, 0x3e1}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2e49, &(0x7f00000004c0)={0x0, 0xd8f6, 0x2, 0x803, 0x168, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) bind$inet(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd68}}], 0x1, 0x0, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x45c043, 0x0) close(r8) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r9, &(0x7f0000000540)=[{&(0x7f0000000640)=""/194, 0xc2}], 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$binfmt_elf64(r10, &(0x7f0000000400)=ANY=[], 0xff8a) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2b1c587, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) syz_open_dev$dri(0x0, 0x1, 0x0) 6.288344824s ago: executing program 1 (id=4929): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 5.673404742s ago: executing program 1 (id=4930): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x10001, 0x8}}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x856d}, {r3, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x6, 0x0) dup3(r4, r5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000c80)) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b00010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005f1082406050001", @ANYRESDEC], 0x0) 2.195649572s ago: executing program 1 (id=4931): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x10001, 0x8}}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x6, 0x0) dup3(r3, r4, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000c80)) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b00010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005f1082406050001", @ANYRESDEC], 0x0) 1.791448413s ago: executing program 4 (id=4891): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b00000081"]) lsetxattr$system_posix_acl(0xfffffffffffffffe, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="d041362e4c1bf63cf13a51220800", 0x63, 0x8814, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) fanotify_init(0x200, 0x0) r4 = dup2(r0, r0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r5, &(0x7f0000000140)=[@l={0x92, 0x7, 0xe0, 0x1f, 0x7, 0x80, 0x800}, @l={0x92, 0x0, 0xd0, 0xe, 0x4, 0x81, 0x7}, @e={0xff, 0xa, 0xf, 0x81, @SEQ_CONTROLLER=0xfe, 0x8, 0x8, 0xc0}], 0x18) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) socket$kcm(0xa, 0x3, 0x3a) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) 1.58379035s ago: executing program 4 (id=4932): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xf6}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0xfc0, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0xf8a, 0x3a, 0x0, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.size\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.388330418s ago: executing program 4 (id=4933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x81}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x3, 0x2, 0xfffffffd, 0x100880}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="0fab93000066b94202000066b8623f0000fe66ba000043000000000f38f908baf80c66b890cfa98066efbafc0cb815b0ef66b9800000c00f326635000100000f30b82a008ec0660f38804cf1f20f7cca66b9bd0200000f32670f01c3", 0x5c}], 0x1, 0x20, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.284279674s ago: executing program 3 (id=4898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d80000000001010400000000030000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c000180", @ANYBLOB="04bef6e478"], 0xd8}}, 0x4000) 1.031838839s ago: executing program 4 (id=4934): r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7o\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\f\xff\x7f\x00\x00\x00\x00\x00\x00\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x8aP;s\xd2\xd7\xd4\xad(\x1bpG\x01\\%(\xd8\x17\x1a\x0e\xc7~\xea\xdf\xd0BK\xd9\xfd\xda\x81R\rEg\x98\xa5\x06\xbfR2\n\xac\xa2\xd0;D\xe4pA\xe3\xbc?\r\x0f\x11\xd87\xdbf\xe7C\xe4\xd3\xf1\x16\xe6\xfc\x15\x9dD\\U\xca\xc6y\xda<\xdfX\xef\x9bl\xe7Y\x05\x15w\x14w\xc6p\x0f\x8b\xdf\xdfr\xf4S\xa6\xf2~\n\xf6\xfa]\f\x15\x9d\xba9-\b\x9e\xa4\xf67\xdd\x8a\x13\xc9O\xda\x1f\x13\xa5V\xdf\x00!\x8c\xec)\xf1P<\x05\xbfE\xbb\xe0\xafQ\x19\xa4mx\xecPs\xa3\xc2\x04\x87C\xfb>G\xdb\x8b\r\xe6\xb6\xe2\xea\xa0\a4(1\xbb?\xcc\x8b\xf4\xd2\x88k\xec\xd9\xf6^7>\xb3\x02\x0eu\x9c\"\x93\x9eD\xe7P\x1a\xb8\x9c\xf8\xc3\xf0\xa5\xc9\x19', 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port1\x00', 0xa7, 0x1b1800, 0x0, 0x4054, 0x0, 0x2, 0x100000, 0x0, 0x8, 0xff}) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x8000400) fcntl$addseals(r0, 0x409, 0x8) 1.03155998s ago: executing program 3 (id=4935): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 833.870478ms ago: executing program 3 (id=4936): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 632.150809ms ago: executing program 4 (id=4937): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x10001, 0x8}}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x856d}, {r3, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x6, 0x0) dup3(r4, r5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000c80)) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b00010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005f1082406050001", @ANYRESDEC], 0x0) 407.728358ms ago: executing program 3 (id=4938): bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f59004"]) 0s ago: executing program 3 (id=4939): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000010c0)=0xffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) kernel console output (not intermixed with test programs): packets [ 1388.345039][T10590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.355361][T10590] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1388.526455][T10590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1388.535785][T10590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1388.543978][T10590] usb 2-1: SerialNumber: syz [ 1388.553202][ T5611] usb 5-1: 0:2 : does not exist [ 1388.567834][T10590] usb 2-1: bad CDC descriptors [ 1388.595357][ T5611] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1388.636542][ T5611] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1388.662120][ T5611] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1388.696992][ T5611] usb 5-1: USB disconnect, device number 15 [ 1388.710358][T26257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.799053][T20516] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1388.968605][T20516] usb 3-1: Using ep0 maxpacket: 8 [ 1388.977678][T20516] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1389.004177][T20516] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1389.065101][T20516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1389.075197][T20516] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1389.085476][T20516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1389.095472][T20516] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1389.108566][T20516] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1389.117654][T20516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.137490][T20516] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 1389.416384][T26268] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1389.505283][T26271] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1389.584848][T26271] ALSA: seq fatal error: cannot create timer (-22) [ 1389.627834][T26271] ALSA: seq fatal error: cannot create timer (-22) [ 1389.719545][ T5465] usb 3-1: USB disconnect, device number 31 [ 1390.268368][ T5611] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1390.390256][ T5465] usb 2-1: USB disconnect, device number 68 [ 1390.439622][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 1390.450385][T26285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1390.467362][ T5611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.507789][ T5611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.566590][ T5611] usb 1-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1390.600446][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.640613][ T5611] usb 1-1: Product: syz [ 1390.670349][ T5611] usb 1-1: Manufacturer: syz [ 1390.681820][ T5611] usb 1-1: SerialNumber: syz [ 1390.743703][T26292] netlink: 'syz.4.4633': attribute type 11 has an invalid length. [ 1390.888554][ T5465] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1391.029330][T26296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.060744][ T5465] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.082543][ T5465] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1391.108477][ T5465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.135323][ T5465] usb 2-1: config 0 descriptor?? [ 1391.152575][ T5465] pwc: Askey VC010 type 2 USB webcam detected. [ 1391.353154][ T5465] pwc: send_video_command error -71 [ 1391.370447][ T5465] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1391.385498][T26300] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1391.393845][ T5465] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1391.418598][ T5465] usb 2-1: USB disconnect, device number 69 [ 1391.663333][T26304] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1391.694743][T26304] ALSA: seq fatal error: cannot create timer (-22) [ 1391.888387][ T5465] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1391.994753][ T29] audit: type=1326 audit(1729150687.385:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.2.4639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c8ed7dff9 code=0x0 [ 1392.049946][ T5465] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.068979][ T5465] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1392.084922][ T5465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.108962][ T5465] usb 2-1: config 0 descriptor?? [ 1392.152133][ T5465] pwc: Askey VC010 type 2 USB webcam detected. [ 1392.350830][T26287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.409105][T26287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.644726][T26287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.839074][T26287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.898624][ T5465] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1392.997258][T26312] netlink: 'syz.3.4640': attribute type 10 has an invalid length. [ 1393.007011][T26312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1393.037031][T26312] team0: entered promiscuous mode [ 1393.067329][T26312] team_slave_0: entered promiscuous mode [ 1393.088730][T26312] team_slave_1: entered promiscuous mode [ 1393.103766][T26312] team0: entered allmulticast mode [ 1393.115956][T26312] team_slave_0: entered allmulticast mode [ 1393.124890][T26312] team_slave_1: entered allmulticast mode [ 1393.140392][ T5465] pwc: recv_control_msg error -32 req 02 val 2700 [ 1393.165760][T26312] bridge0: port 2(team0) entered blocking state [ 1393.177826][T26312] bridge0: port 2(team0) entered disabled state [ 1393.238709][ T5465] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1393.300507][T26312] xt_hashlimit: max too large, truncated to 1048576 [ 1393.324906][ T5465] pwc: recv_control_msg error -71 req 04 val 1000 [ 1393.426393][ T5465] pwc: recv_control_msg error -71 req 04 val 1300 [ 1393.458780][ T5465] pwc: recv_control_msg error -71 req 04 val 1400 [ 1393.488763][ T5465] pwc: recv_control_msg error -71 req 02 val 2000 [ 1393.510669][ T5465] pwc: recv_control_msg error -71 req 02 val 2100 [ 1393.518931][ T5465] pwc: recv_control_msg error -71 req 04 val 1500 [ 1393.525719][ T5465] pwc: recv_control_msg error -71 req 02 val 2500 [ 1393.533347][ T5465] pwc: recv_control_msg error -71 req 02 val 2400 [ 1393.541470][ T5465] pwc: recv_control_msg error -71 req 02 val 2600 [ 1393.548811][ T5465] pwc: recv_control_msg error -71 req 02 val 2900 [ 1393.556218][ T5465] pwc: recv_control_msg error -71 req 02 val 2800 [ 1393.565219][ T5465] pwc: recv_control_msg error -71 req 04 val 1100 [ 1393.572540][ T5465] pwc: recv_control_msg error -71 req 04 val 1200 [ 1393.580579][ T5465] pwc: Registered as video71. [ 1393.599926][ T5465] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113 [ 1393.651549][ T5465] usb 2-1: USB disconnect, device number 70 [ 1394.192929][ T5611] usb 1-1: 0:2 : does not exist [ 1394.207381][T26332] netlink: 'syz.0.4646': attribute type 11 has an invalid length. [ 1394.247101][ T5611] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1394.287084][T26333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1394.296722][ T5611] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1394.323961][T26333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1394.342394][T26333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1394.357482][T26333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1394.455615][ T5611] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1394.484599][ T5611] usb 1-1: USB disconnect, device number 73 [ 1394.518819][T26335] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1394.538571][ T5285] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1394.549372][T26044] udevd[26044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.682089][T26337] netlink: 'syz.0.4647': attribute type 10 has an invalid length. [ 1394.728439][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 1394.783160][ T5285] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1394.806671][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1394.946069][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1395.037132][ T5285] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.052688][ T29] audit: type=1326 audit(1729150690.465:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.3.4649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9f5f7dff9 code=0x0 [ 1395.100352][ T5285] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1395.115803][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.258437][T23560] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1395.407227][ T5285] usb 3-1: GET_CAPABILITIES returned 0 [ 1395.412923][ T5285] usbtmc 3-1:16.0: can't read capabilities [ 1395.452396][T23560] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.486516][T23560] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1395.515435][T23560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.607122][T23560] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1395.635332][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1396.682241][T23560] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1396.713422][T23560] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1396.748899][T23560] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1396.782385][T23560] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1396.825072][T23560] usb 1-1: USB disconnect, device number 74 [ 1397.148357][T23560] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1397.230294][T10591] usb 3-1: USB disconnect, device number 32 [ 1397.318981][T23560] usb 1-1: Using ep0 maxpacket: 16 [ 1397.348745][T23560] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1397.384565][T23560] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1397.415295][T23560] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1397.457547][T23560] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1397.493869][T23560] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1397.509229][T23560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.537598][T23560] usb 1-1: Product: syz [ 1397.551523][T23560] usb 1-1: Manufacturer: syz [ 1397.557225][T26369] syzkaller1: entered promiscuous mode [ 1397.563082][T23560] usb 1-1: SerialNumber: syz [ 1397.568473][T26369] syzkaller1: entered allmulticast mode [ 1397.788408][T10591] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1397.862687][T23560] usb 1-1: USB disconnect, device number 75 [ 1397.950658][T26044] udevd[26044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.003269][T10591] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=50.61 [ 1398.040404][T10591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.072950][T10591] usb 2-1: Product: syz [ 1398.080476][T10591] usb 2-1: Manufacturer: syz [ 1398.085120][T10591] usb 2-1: SerialNumber: syz [ 1398.095851][T10591] usb 2-1: config 0 descriptor?? [ 1398.104622][T10591] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1398.501384][T26398] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1398.959492][T10591] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1399.108541][T10591] usb 4-1: Using ep0 maxpacket: 8 [ 1399.119218][T10591] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1399.140096][T10591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.170637][T10591] usb 4-1: Product: syz [ 1399.176512][T10591] usb 4-1: Manufacturer: syz [ 1399.187597][T10591] usb 4-1: SerialNumber: syz [ 1399.213906][T10591] usb 4-1: config 0 descriptor?? [ 1399.430474][T10591] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1399.462275][T26397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1399.677733][T10591] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1399.727321][T10591] usb 4-1: USB disconnect, device number 39 [ 1400.226941][T10591] usb 2-1: USB disconnect, device number 71 [ 1400.598496][T10590] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1400.738593][ T5611] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1400.748432][T10590] usb 1-1: Using ep0 maxpacket: 16 [ 1400.767252][T10590] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 1400.786877][T10590] usb 1-1: config 0 has no interface number 0 [ 1400.804797][T10590] usb 1-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 1400.848738][T10590] usb 1-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1400.872148][T10590] usb 1-1: config 0 interface 11 has no altsetting 0 [ 1400.892772][T10590] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 1400.903693][T10590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.911929][T10590] usb 1-1: Product: syz [ 1400.916524][ T5611] usb 4-1: Using ep0 maxpacket: 32 [ 1400.921816][T10590] usb 1-1: Manufacturer: syz [ 1400.926849][T10590] usb 1-1: SerialNumber: syz [ 1400.932623][ T5611] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1400.943674][ T5611] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1400.953558][T10590] usb 1-1: config 0 descriptor?? [ 1400.958711][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.967069][ T5611] usb 4-1: Product: syz [ 1400.971862][ T5611] usb 4-1: Manufacturer: syz [ 1400.976548][ T5611] usb 4-1: SerialNumber: syz [ 1400.984978][ T5611] usb 4-1: config 0 descriptor?? [ 1401.173978][T26425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.233339][T26425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.234585][T26435] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4678'. [ 1401.272588][ T5611] usb 4-1: USB disconnect, device number 40 [ 1401.303017][T10590] usb 1-1: Expected 3 endpoints, found: 0 [ 1401.358611][T10590] usb 1-1: USB disconnect, device number 76 [ 1401.554406][T26456] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1401.623606][T20516] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1401.814073][T20516] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 1401.834121][T20516] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 1401.853775][T20516] usb 3-1: Manufacturer: syz [ 1401.864369][T10590] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1401.865305][T20516] usb 3-1: config 0 descriptor?? [ 1401.968383][ T5465] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1402.015279][T26465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1402.040053][T10590] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1402.058381][T10590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.088991][T10590] usb 2-1: config 0 descriptor?? [ 1402.105921][T10590] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1402.118633][ T5465] usb 5-1: device descriptor read/64, error -71 [ 1402.299255][T20516] gs_usb 3-1:0.0: Configuring for 149 interfaces [ 1402.305904][T20516] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1402.320510][T20516] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1402.338510][T23560] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1402.425892][ T5465] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1402.506549][T23560] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1402.530725][ T5464] usb 3-1: USB disconnect, device number 33 [ 1402.558554][ T5465] usb 5-1: device descriptor read/64, error -71 [ 1402.565087][T23560] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.585946][T23560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 9 [ 1402.606343][T23560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1402.626888][T23560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1402.646523][T23560] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1402.657216][T23560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.666540][T23560] usb 4-1: Product: syz [ 1402.671477][T23560] usb 4-1: Manufacturer: syz [ 1402.676540][T23560] usb 4-1: SerialNumber: syz [ 1402.696319][T23560] usb 4-1: config 0 descriptor?? [ 1402.703215][T10590] gspca_cpia1: usb_control_msg 03, error -71 [ 1402.715418][T26465] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1402.727204][T23560] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1402.739854][T10590] gspca_cpia1: usb_control_msg 01, error -71 [ 1402.742003][ T5465] usb usb5-port1: attempt power cycle [ 1402.765863][T10590] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1402.784623][T10590] usb 2-1: USB disconnect, device number 72 [ 1403.138339][ T5465] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1403.184138][ T5465] usb 5-1: device descriptor read/8, error -71 [ 1403.447449][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1403.478742][ T5465] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1403.496959][T23560] usb 4-1: USB disconnect, device number 41 [ 1403.529811][ T5465] usb 5-1: device descriptor read/8, error -71 [ 1403.568296][ T5464] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1403.642068][T26487] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1403.650287][ T5465] usb usb5-port1: unable to enumerate USB device [ 1403.728283][ T5464] usb 3-1: Using ep0 maxpacket: 8 [ 1403.735744][ T5464] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1403.748291][ T5464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.806229][ T5464] usb 3-1: config 0 descriptor?? [ 1403.928597][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1404.094838][T12167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.211768][T12167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.319797][T12167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.399201][T26495] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1404.461925][T12167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.509143][T26495] netlink: 'syz.1.4702': attribute type 10 has an invalid length. [ 1404.526612][T26495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.534290][T26495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.573715][T26495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.580951][T26495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.588505][T26495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.595678][T26495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.622033][T26495] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1404.660777][ T2507] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 1404.836497][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1404.846966][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1404.861198][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1404.869351][T12167] bridge0: port 2(team0) entered disabled state [ 1404.909523][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1404.927953][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1404.936960][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1405.016112][T26501] FAULT_INJECTION: forcing a failure. [ 1405.016112][T26501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.067447][T26501] CPU: 0 UID: 0 PID: 26501 Comm: syz.1.4703 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1405.078297][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1405.088391][T26501] Call Trace: [ 1405.089260][T12167] bridge_slave_0: left allmulticast mode [ 1405.091680][T26501] [ 1405.097325][T12167] bridge_slave_0: left promiscuous mode [ 1405.100261][T26501] dump_stack_lvl+0x241/0x360 [ 1405.100297][T26501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1405.100323][T26501] ? __pfx__printk+0x10/0x10 [ 1405.100352][T26501] ? snprintf+0xda/0x120 [ 1405.100381][T26501] should_fail_ex+0x3b0/0x4e0 [ 1405.100420][T26501] _copy_to_user+0x2f/0xb0 [ 1405.100453][T26501] simple_read_from_buffer+0xca/0x150 [ 1405.100491][T26501] proc_fail_nth_read+0x1e9/0x250 [ 1405.100530][T26501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1405.100570][T26501] ? rw_verify_area+0x55e/0x6f0 [ 1405.100603][T26501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1405.100641][T26501] vfs_read+0x201/0xbc0 [ 1405.100682][T26501] ? __pfx_lock_release+0x10/0x10 [ 1405.100723][T26501] ? __pfx_vfs_read+0x10/0x10 [ 1405.100764][T26501] ? __fget_files+0x3f3/0x470 [ 1405.100799][T26501] ? fdget_pos+0x24e/0x320 [ 1405.100828][T26501] ksys_read+0x183/0x2b0 [ 1405.100853][T26501] ? __pfx_ksys_read+0x10/0x10 [ 1405.100876][T26501] ? do_syscall_64+0x100/0x230 [ 1405.197110][T26501] ? do_syscall_64+0xb6/0x230 [ 1405.201811][T26501] do_syscall_64+0xf3/0x230 [ 1405.206330][T26501] ? clear_bhb_loop+0x35/0x90 [ 1405.211026][T26501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.216939][T26501] RIP: 0033:0x7fc528b7ca3c [ 1405.221376][T26501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1405.240996][T26501] RSP: 002b:00007fc5285ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1405.249429][T26501] RAX: ffffffffffffffda RBX: 00007fc528d36058 RCX: 00007fc528b7ca3c [ 1405.257406][T26501] RDX: 000000000000000f RSI: 00007fc5285ff0a0 RDI: 0000000000000005 [ 1405.265385][T26501] RBP: 00007fc5285ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.273374][T26501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.281355][T26501] R13: 0000000000000000 R14: 00007fc528d36058 R15: 00007fc528e5fa28 [ 1405.289350][T26501] [ 1405.296003][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.248879][T12167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.260891][T12167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.277446][T12167] bond0 (unregistering): Released all slaves [ 1406.322007][T26530] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1406.333584][T26516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1406.381200][T26478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4693'. [ 1406.449280][ T5464] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1406.468097][ T5464] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1406.510265][ T5464] usb 3-1: USB disconnect, device number 34 [ 1406.597386][T26536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4710'. [ 1406.632564][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1406.844467][T26503] chnl_net:caif_netlink_parms(): no params data found [ 1406.959039][ T5243] Bluetooth: hci4: command tx timeout [ 1407.005350][T12167] hsr_slave_0: left promiscuous mode [ 1407.025331][T12167] hsr_slave_1: left promiscuous mode [ 1407.053437][T12167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.085332][T12167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.572188][ T5465] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1407.778145][ T5465] usb 3-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1407.799347][ T5465] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1407.826234][ T5465] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1407.849714][ T5465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.866231][ T5465] usb 3-1: Product: syz [ 1407.870632][ T5465] usb 3-1: Manufacturer: syz [ 1407.875287][ T5465] usb 3-1: SerialNumber: syz [ 1407.898089][ T5465] usb 3-1: config 0 descriptor?? [ 1407.988471][ T5464] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1408.132097][T26564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.151491][T26564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.182620][ T5285] usb 3-1: USB disconnect, device number 35 [ 1408.198452][ T5611] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1408.220483][ T5464] usb 1-1: config 0 has no interfaces? [ 1408.245007][ T5464] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1408.254961][ T5464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.263625][ T5464] usb 1-1: Product: syz [ 1408.279559][ T5464] usb 1-1: Manufacturer: syz [ 1408.284981][T12167] team_slave_1 (unregistering): left promiscuous mode [ 1408.294114][ T5464] usb 1-1: SerialNumber: syz [ 1408.299373][T12167] team_slave_1 (unregistering): left allmulticast mode [ 1408.309252][ T5464] usb 1-1: config 0 descriptor?? [ 1408.323313][T12167] team0 (unregistering): Port device team_slave_1 removed [ 1408.373350][ T5611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.405895][ T5611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.425240][ T5611] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1408.440585][T12167] team_slave_0 (unregistering): left promiscuous mode [ 1408.447786][T12167] team_slave_0 (unregistering): left allmulticast mode [ 1408.457222][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.466357][T12167] team0 (unregistering): Port device team_slave_0 removed [ 1408.483623][ T5611] usb 5-1: config 0 descriptor?? [ 1408.735633][ T5611] itetech 0003:06CB:73F4.004F: item fetching failed at offset 5/7 [ 1408.776857][ T5611] itetech 0003:06CB:73F4.004F: probe with driver itetech failed with error -22 [ 1408.832624][ T5611] usb 5-1: USB disconnect, device number 20 [ 1409.047270][ T5243] Bluetooth: hci4: command tx timeout [ 1409.310945][ T5611] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1409.491365][ T5611] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1409.500026][ T5611] usb 5-1: config 0 has no interface number 0 [ 1409.517480][ T5611] usb 5-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1409.520095][T26503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.538960][T26503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.547154][T26503] bridge_slave_0: entered allmulticast mode [ 1409.563183][ T5611] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1409.579236][T26503] bridge_slave_0: entered promiscuous mode [ 1409.635925][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'. [ 1409.660162][T26584] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4719'. [ 1409.692262][ T5611] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1409.695992][T26584] ipvlan0: entered promiscuous mode [ 1409.701419][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.701447][ T5611] usb 5-1: Product: syz [ 1409.710861][T26503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.715415][ T5611] usb 5-1: Manufacturer: syz [ 1409.720555][T26503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.726462][ T5611] usb 5-1: SerialNumber: syz [ 1409.781178][ T5611] usb 5-1: config 0 descriptor?? [ 1409.794711][T26503] bridge_slave_1: entered allmulticast mode [ 1409.823698][T26503] bridge_slave_1: entered promiscuous mode [ 1409.960243][T26587] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1410.029530][T26582] binder: 26581:26582 ioctl c0306201 0 returned -14 [ 1410.154406][T26503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.236695][T26503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.357486][ T5611] usb 5-1: USB disconnect, device number 21 [ 1410.657238][T26503] team0: Port device team_slave_0 added [ 1410.680440][T26599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.714718][T23560] usb 1-1: USB disconnect, device number 77 [ 1410.718303][T26599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.748407][T26599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.765859][T26599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.782022][T26599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.808349][T26599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.832852][T26599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.855065][T26599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.869343][T26599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.888782][T26599] batadv_slave_0: entered promiscuous mode [ 1410.934620][T26503] team0: Port device team_slave_1 added [ 1410.998737][T26606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1411.014186][T12167] IPVS: stop unused estimator thread 0... [ 1411.119160][ T5243] Bluetooth: hci4: command tx timeout [ 1411.160362][T26503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.204691][T26503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.313222][T26503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.326445][T26503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.333864][T26503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.361061][T26503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.553277][T26630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1411.675274][T26630] wireguard0: entered promiscuous mode [ 1411.685477][T26630] wireguard0: entered allmulticast mode [ 1411.774894][T26639] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1412.109409][T26503] hsr_slave_0: entered promiscuous mode [ 1412.147377][T26503] hsr_slave_1: entered promiscuous mode [ 1412.176320][T12167] bridge_slave_1: left allmulticast mode [ 1412.217465][T12167] bridge_slave_1: left promiscuous mode [ 1412.238842][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.253932][T12167] bridge_slave_0: left allmulticast mode [ 1412.264287][T12167] bridge_slave_0: left promiscuous mode [ 1412.274014][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.592590][T23560] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1412.752639][T23560] usb 1-1: New USB device found, idVendor=9594, idProduct=9052, bcdDevice=15.f5 [ 1412.818786][T23560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.838495][T23560] usb 1-1: Product: syz [ 1412.843999][T23560] usb 1-1: Manufacturer: syz [ 1412.857454][T23560] usb 1-1: SerialNumber: syz [ 1412.869867][T23560] usb 1-1: config 0 descriptor?? [ 1413.209837][ T5243] Bluetooth: hci4: command tx timeout [ 1413.230117][T23560] usb 1-1: USB disconnect, device number 78 [ 1413.495347][T26663] FAULT_INJECTION: forcing a failure. [ 1413.495347][T26663] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.547413][T26663] CPU: 1 UID: 0 PID: 26663 Comm: syz.0.4736 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1413.558241][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1413.568330][T26663] Call Trace: [ 1413.571651][T26663] [ 1413.574627][T26663] dump_stack_lvl+0x241/0x360 [ 1413.579345][T26663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1413.584621][T26663] ? __pfx__printk+0x10/0x10 [ 1413.589240][T26663] ? __kmalloc_node_noprof+0xb7/0x440 [ 1413.594649][T26663] ? __pfx___might_resched+0x10/0x10 [ 1413.600031][T26663] should_fail_ex+0x3b0/0x4e0 [ 1413.604762][T26663] should_failslab+0xac/0x100 [ 1413.609488][T26663] __kmalloc_node_noprof+0xdf/0x440 [ 1413.614714][T26663] ? __kvmalloc_node_noprof+0x72/0x190 [ 1413.620235][T26663] __kvmalloc_node_noprof+0x72/0x190 [ 1413.625573][T26663] xt_alloc_table_info+0x3d/0xa0 [ 1413.630569][T26663] do_ip6t_set_ctl+0xba0/0x1270 [ 1413.635462][T26663] ? __pfx___might_resched+0x10/0x10 [ 1413.640789][T26663] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1413.646116][T26663] ? __pfx_lock_release+0x10/0x10 [ 1413.651205][T26663] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1413.656879][T26663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1413.662920][T26663] ? aa_sk_perm+0x96d/0xab0 [ 1413.667455][T26663] ? __pfx_aa_sk_perm+0x10/0x10 [ 1413.672339][T26663] nf_setsockopt+0x295/0x2c0 [ 1413.676986][T26663] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1413.682926][T26663] do_sock_setsockopt+0x3af/0x720 [ 1413.687984][T26663] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1413.693552][T26663] ? __fget_files+0x29/0x470 [ 1413.698173][T26663] ? __fget_files+0x3f3/0x470 [ 1413.702897][T26663] ? __fget_files+0x29/0x470 [ 1413.707545][T26663] __sys_setsockopt+0x1a2/0x250 [ 1413.712439][T26663] __x64_sys_setsockopt+0xb5/0xd0 [ 1413.717504][T26663] do_syscall_64+0xf3/0x230 [ 1413.722049][T26663] ? clear_bhb_loop+0x35/0x90 [ 1413.726759][T26663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.732697][T26663] RIP: 0033:0x7f2c2f57dff9 [ 1413.737145][T26663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.756783][T26663] RSP: 002b:00007f2c302ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1413.765232][T26663] RAX: ffffffffffffffda RBX: 00007f2c2f736058 RCX: 00007f2c2f57dff9 [ 1413.773312][T26663] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 1413.781311][T26663] RBP: 00007f2c302ee090 R08: 0000000000000638 R09: 0000000000000000 [ 1413.789329][T26663] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1413.797413][T26663] R13: 0000000000000000 R14: 00007f2c2f736058 R15: 00007f2c2f85fa28 [ 1413.805427][T26663] [ 1413.860655][T26663] ALSA: seq fatal error: cannot create timer (-22) [ 1413.868376][T26663] ALSA: seq fatal error: cannot create timer (-22) [ 1414.057142][T12167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.118701][T12167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.144474][T12167] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1414.200677][T12167] bond0 (unregistering): Released all slaves [ 1414.369732][T12167] bond1 (unregistering): Released all slaves [ 1414.689048][T12167] tipc: Disabling bearer [ 1414.694913][T12167] tipc: Left network mode [ 1415.243418][T12167] hsr_slave_0: left promiscuous mode [ 1415.267103][T12167] hsr_slave_1: left promiscuous mode [ 1415.318906][T12167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.337647][T12167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.423540][T12167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.431131][T12167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.458849][T12167] veth1_macvtap: left promiscuous mode [ 1415.464385][T12167] veth0_macvtap: left promiscuous mode [ 1415.470883][T12167] veth1_vlan: left promiscuous mode [ 1415.525545][T12167] veth0_vlan: left promiscuous mode [ 1415.738541][T23560] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1415.898796][T23560] usb 5-1: Using ep0 maxpacket: 16 [ 1415.909012][T23560] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.058878][T23560] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.116301][T23560] usb 5-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1416.139812][T23560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.148582][T23560] usb 5-1: Product: syz [ 1416.152939][T23560] usb 5-1: Manufacturer: syz [ 1416.157547][T23560] usb 5-1: SerialNumber: syz [ 1416.479696][T26692] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1416.672566][T26696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1418.079775][T26694] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1418.748944][T26715] FAULT_INJECTION: forcing a failure. [ 1418.748944][T26715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.792873][T23560] usb 5-1: 0:2 : does not exist [ 1418.806772][T23560] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1418.863539][T23560] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1418.899283][T26715] CPU: 0 UID: 0 PID: 26715 Comm: syz.0.4746 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1418.910121][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1418.910846][T23560] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1418.920189][T26715] Call Trace: [ 1418.920203][T26715] [ 1418.920213][T26715] dump_stack_lvl+0x241/0x360 [ 1418.920245][T26715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1418.943963][T26715] ? __pfx__printk+0x10/0x10 [ 1418.948641][T26715] ? __pfx_lock_release+0x10/0x10 [ 1418.955225][T26715] should_fail_ex+0x3b0/0x4e0 [ 1418.955272][T26715] _copy_from_user+0x2f/0xe0 [ 1418.955308][T26715] copy_msghdr_from_user+0xae/0x680 [ 1418.969800][T26715] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1418.975652][T26715] __sys_sendmsg+0x22d/0x380 [ 1418.980284][T26715] ? __pfx___sys_sendmsg+0x10/0x10 [ 1418.985431][T26715] ? __pfx_vfs_write+0x10/0x10 [ 1418.990213][T26715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1418.996558][T26715] ? do_syscall_64+0x100/0x230 [ 1419.001324][T26715] ? do_syscall_64+0xb6/0x230 [ 1419.006022][T26715] do_syscall_64+0xf3/0x230 [ 1419.010528][T26715] ? clear_bhb_loop+0x35/0x90 [ 1419.015229][T26715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.021164][T26715] RIP: 0033:0x7f2c2f57dff9 [ 1419.025599][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.045229][T26715] RSP: 002b:00007f2c3030f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.053670][T26715] RAX: ffffffffffffffda RBX: 00007f2c2f735f80 RCX: 00007f2c2f57dff9 [ 1419.061656][T26715] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1419.069660][T26715] RBP: 00007f2c3030f090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.077642][T26715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.085618][T26715] R13: 0000000000000000 R14: 00007f2c2f735f80 R15: 00007f2c2f85fa28 [ 1419.093617][T26715] [ 1419.122252][T23560] usb 5-1: USB disconnect, device number 22 [ 1419.476961][T26729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1419.512753][T26737] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1419.568970][T26737] ALSA: seq fatal error: cannot create timer (-22) [ 1419.586155][T26741] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1419.627344][T26503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1419.685529][T26737] ALSA: seq fatal error: cannot create timer (-22) [ 1419.734141][T26503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1419.765077][T26503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1419.824079][T26503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1420.113396][T26503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.226267][T26503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.278588][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.285675][T19038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.298400][ T5611] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1420.345067][T26757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4756'. [ 1420.384527][T26757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.412848][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.419994][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.458556][ T5611] usb 5-1: Using ep0 maxpacket: 16 [ 1420.480335][ T5611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.540195][ T5611] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.577877][ T5611] usb 5-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1420.602176][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.634193][ T5611] usb 5-1: Product: syz [ 1420.649448][ T5611] usb 5-1: Manufacturer: syz [ 1420.660983][ T5611] usb 5-1: SerialNumber: syz [ 1420.770358][T26503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.813597][T26503] veth0_vlan: entered promiscuous mode [ 1420.825278][T26503] veth1_vlan: entered promiscuous mode [ 1420.846891][T26503] veth0_macvtap: entered promiscuous mode [ 1420.856108][T26503] veth1_macvtap: entered promiscuous mode [ 1420.872500][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.883655][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.893600][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.907308][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.917400][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.927986][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.946949][T26503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.979249][T10591] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1421.030444][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.067628][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.124645][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.138507][T10591] usb 2-1: Using ep0 maxpacket: 16 [ 1421.154741][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.158531][T10591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.205702][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.230687][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.233829][T10591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.286589][T10591] usb 2-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1421.306396][T10591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.315875][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.326874][T10591] usb 2-1: Product: syz [ 1421.337472][T10591] usb 2-1: Manufacturer: syz [ 1421.348974][T10591] usb 2-1: SerialNumber: syz [ 1421.398517][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.429054][T26503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.518638][T26503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.556345][T26503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.654046][T26503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.694790][T26503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.743377][T26503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.798413][T26503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.015168][T19038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.059719][T19038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.155581][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.176702][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.689083][ T5465] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1422.967311][ T5465] usb 4-1: Using ep0 maxpacket: 8 [ 1422.985555][ T5465] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.000068][ T5465] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=c3.34 [ 1423.009402][ T5465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.025921][ T5465] usb 4-1: Product: syz [ 1423.055257][ T5465] usb 4-1: Manufacturer: syz [ 1423.093579][ T5465] usb 4-1: SerialNumber: syz [ 1423.168793][ T5465] usb 4-1: config 0 descriptor?? [ 1423.193665][ T5465] sisusb 4-1:0.0: Invalid USB2VGA device [ 1423.214515][ T5465] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 1423.292010][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.298948][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.392915][T20516] usb 4-1: USB disconnect, device number 42 [ 1423.774452][ T5611] usb 5-1: 0:2 : does not exist [ 1423.805244][ T5611] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1423.851315][ T5611] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1423.949190][ T5611] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1424.012461][ T5611] usb 5-1: USB disconnect, device number 23 [ 1424.280947][T26814] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1424.660531][T10591] usb 2-1: 0:2 : does not exist [ 1424.681610][T10591] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1424.690556][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'. [ 1424.722222][T10591] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1424.775531][T10591] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1424.816656][T26836] all: renamed from bridge_slave_0 (while UP) [ 1424.841117][T10591] usb 2-1: USB disconnect, device number 73 [ 1424.913714][T26042] udevd[26042]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.950280][T26044] udevd[26044]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1425.232257][T26853] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4775'. [ 1425.298418][T23560] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1425.459753][T23560] usb 3-1: Using ep0 maxpacket: 8 [ 1425.488453][T23560] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1425.533070][T23560] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1425.557186][T23560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.566030][T23560] usb 3-1: Product: syz [ 1425.571962][T23560] usb 3-1: Manufacturer: syz [ 1425.612450][T23560] usb 3-1: SerialNumber: syz [ 1425.631102][T23560] usb 3-1: config 0 descriptor?? [ 1425.642547][T23560] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1425.649331][T10591] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1425.812059][T10591] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1425.823412][T10591] usb 4-1: not running at top speed; connect to a high speed hub [ 1425.860079][T10591] usb 4-1: config 196 has an invalid interface number: 135 but max is 0 [ 1425.910160][T10591] usb 4-1: config 196 has no interface number 0 [ 1425.952203][T10591] usb 4-1: config 196 interface 135 altsetting 16 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1425.990946][T10591] usb 4-1: config 196 interface 135 altsetting 16 has a duplicate endpoint with address 0xD, skipping [ 1426.002806][T10591] usb 4-1: config 196 interface 135 has no altsetting 0 [ 1426.014457][T10591] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=57.58 [ 1426.023723][T10591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.045511][T10591] usb 4-1: Product: syz [ 1426.057413][T10591] usb 4-1: Manufacturer: syz [ 1426.063526][T10591] usb 4-1: SerialNumber: syz [ 1426.244409][T26888] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1426.269617][T26888] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1426.309890][T26859] veth0_to_bridge: entered allmulticast mode [ 1426.336465][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.367511][T26890] netlink: 'syz.0.4781': attribute type 11 has an invalid length. [ 1426.556606][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1426.598787][T26900] wireguard0: entered promiscuous mode [ 1426.633063][T26900] wireguard0: entered allmulticast mode [ 1426.882088][T23560] gspca_zc3xx: reg_w_i err -71 [ 1427.518263][T23560] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1427.524784][T23560] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1427.570735][T23560] usb 3-1: USB disconnect, device number 36 [ 1427.608449][T20516] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1427.760279][T20516] usb 5-1: device descriptor read/64, error -71 [ 1427.998956][T20516] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1428.148453][T20516] usb 5-1: device descriptor read/64, error -71 [ 1428.269225][T20516] usb usb5-port1: attempt power cycle [ 1428.309611][T10591] usb 4-1: USB disconnect, device number 43 [ 1428.432599][ T76] bridge_slave_1: left allmulticast mode [ 1428.461713][ T76] bridge_slave_1: left promiscuous mode [ 1428.467613][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.534765][ T76] bridge_slave_0: left allmulticast mode [ 1428.548245][ T76] bridge_slave_0: left promiscuous mode [ 1428.555598][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.618364][T20516] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1428.660675][T20516] usb 5-1: device descriptor read/8, error -71 [ 1428.918490][T20516] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1428.969698][T20516] usb 5-1: device descriptor read/8, error -71 [ 1428.983169][T26969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1429.088800][T20516] usb usb5-port1: unable to enumerate USB device [ 1430.064376][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.114823][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.167224][ T76] bond0 (unregistering): Released all slaves [ 1430.245539][T26966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1430.309206][ T76] tipc: Disabling bearer [ 1430.320930][ T76] tipc: Left network mode [ 1430.424111][T27000] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4804'. [ 1430.592027][ T76] hsr_slave_0: left promiscuous mode [ 1430.616401][ T76] hsr_slave_1: left promiscuous mode [ 1430.693703][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.721998][T27004] dccp_flush_write_queue: CCID did not manage to send all packets [ 1430.740092][T27004] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(140525225595760) <= P.seqno(140525225595759) <= S.SWH(140525225595834)) and (P.ackno exists or LAWL(187645176011398) <= P.ackno(187645176011398) <= S.AWH(187645176011403), sending SYNC... [ 1430.758373][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.840035][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.895893][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.991742][ T76] veth1_macvtap: left promiscuous mode [ 1431.016917][ T76] veth0_macvtap: left promiscuous mode [ 1431.031071][ T76] veth1_vlan: left promiscuous mode [ 1431.044143][ T76] veth0_vlan: left promiscuous mode [ 1431.913742][T23560] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1432.068357][T23560] usb 3-1: Invalid ep0 maxpacket: 32 [ 1432.628363][T23560] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1433.028952][T23560] usb 3-1: Invalid ep0 maxpacket: 32 [ 1433.035061][T23560] usb usb3-port1: attempt power cycle [ 1433.226807][T27023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1433.265037][T27023] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1433.379551][T23560] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1433.417268][T27034] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1433.459550][T23560] usb 3-1: Invalid ep0 maxpacket: 32 [ 1433.646816][T27041] qrtr: Invalid version 0 [ 1433.698104][T27041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1434.288334][T23560] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1434.308765][T23560] usb 3-1: Invalid ep0 maxpacket: 32 [ 1434.314325][T23560] usb usb3-port1: unable to enumerate USB device [ 1434.411866][T27056] pim6reg: entered allmulticast mode [ 1434.455248][T27054] batadv_slave_0: entered allmulticast mode [ 1434.539686][T10591] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1434.688383][T10591] usb 4-1: Using ep0 maxpacket: 16 [ 1434.696421][T10591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1434.708446][T23560] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1434.717012][T10591] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1434.744461][T10591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.773688][T10591] usb 4-1: Product: syz [ 1434.794937][T10591] usb 4-1: Manufacturer: syz [ 1434.820403][T10591] usb 4-1: SerialNumber: syz [ 1434.840547][T10591] usb 4-1: config 0 descriptor?? [ 1434.906872][T10591] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1434.916720][T23560] usb 1-1: Invalid ep0 maxpacket: 64 [ 1434.922554][T10591] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1435.068398][T23560] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 1435.173107][T27066] bridge0: entered promiscuous mode [ 1435.189739][T27064] bridge0: left promiscuous mode [ 1435.258324][T23560] usb 1-1: Invalid ep0 maxpacket: 64 [ 1435.264160][T23560] usb usb1-port1: attempt power cycle [ 1435.394958][T27069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4827'. [ 1435.439814][T27069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4827'. [ 1435.526188][T10591] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1435.728481][T23560] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 1435.768871][T23560] usb 1-1: Invalid ep0 maxpacket: 64 [ 1435.928356][T23560] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 1435.978973][T23560] usb 1-1: Invalid ep0 maxpacket: 64 [ 1435.998887][T23560] usb usb1-port1: unable to enumerate USB device [ 1436.149594][T10591] em28xx 4-1:0.0: board has no eeprom [ 1436.568443][T10591] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1436.598384][T10591] em28xx 4-1:0.0: dvb set to bulk mode. [ 1436.604034][T23560] em28xx 4-1:0.0: Binding DVB extension [ 1436.665405][T10591] usb 4-1: USB disconnect, device number 44 [ 1436.696312][T10591] em28xx 4-1:0.0: Disconnecting em28xx [ 1436.793855][T23560] em28xx 4-1:0.0: Registering input extension [ 1436.833706][T10591] em28xx 4-1:0.0: Closing input extension [ 1436.879995][T10591] em28xx 4-1:0.0: Freeing device [ 1438.055326][T27108] qrtr: Invalid version 0 [ 1438.145616][T27108] FAULT_INJECTION: forcing a failure. [ 1438.145616][T27108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.188412][T27108] CPU: 1 UID: 0 PID: 27108 Comm: syz.0.4842 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1438.199203][T27108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1438.209273][T27108] Call Trace: [ 1438.212558][T27108] [ 1438.215507][T27108] dump_stack_lvl+0x241/0x360 [ 1438.220189][T27108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1438.225383][T27108] ? __pfx__printk+0x10/0x10 [ 1438.229975][T27108] ? __pfx_lock_release+0x10/0x10 [ 1438.235001][T27108] ? do_raw_spin_lock+0x14f/0x370 [ 1438.240031][T27108] should_fail_ex+0x3b0/0x4e0 [ 1438.244731][T27108] _copy_to_user+0x2f/0xb0 [ 1438.249175][T27108] do_timer_create+0xda8/0x13f0 [ 1438.254067][T27108] ? do_timer_create+0x69a/0x13f0 [ 1438.259114][T27108] ? __pfx_do_timer_create+0x10/0x10 [ 1438.264452][T27108] ? __might_fault+0xc6/0x120 [ 1438.269135][T27108] __x64_sys_timer_create+0x144/0x190 [ 1438.274515][T27108] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1438.280413][T27108] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1438.286416][T27108] ? do_syscall_64+0x100/0x230 [ 1438.291189][T27108] ? do_syscall_64+0xb6/0x230 [ 1438.295871][T27108] do_syscall_64+0xf3/0x230 [ 1438.300387][T27108] ? clear_bhb_loop+0x35/0x90 [ 1438.305101][T27108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.311044][T27108] RIP: 0033:0x7f2c2f57dff9 [ 1438.315495][T27108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.335123][T27108] RSP: 002b:00007f2c3030f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1438.343632][T27108] RAX: ffffffffffffffda RBX: 00007f2c2f735f80 RCX: 00007f2c2f57dff9 [ 1438.351609][T27108] RDX: 0000000020000140 RSI: 0000000020533fa0 RDI: 0000000000000000 [ 1438.359582][T27108] RBP: 00007f2c3030f090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.367556][T27108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.375528][T27108] R13: 0000000000000000 R14: 00007f2c2f735f80 R15: 00007f2c2f85fa28 [ 1438.383540][T27108] [ 1438.998582][ T5285] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1439.189059][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 1439.190624][T27126] xt_TCPMSS: Only works on TCP SYN packets [ 1439.223531][ T5285] usb 4-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 1439.248576][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1439.279662][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 136, changing to 11 [ 1439.313219][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 57932, setting to 1024 [ 1439.344656][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1439.456889][ T5285] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1439.477919][ T5285] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1439.511269][ T5285] usb 4-1: Manufacturer: syz [ 1439.521964][ T5285] usb 4-1: config 0 descriptor?? [ 1439.636484][T27139] netlink: 'syz.2.4852': attribute type 11 has an invalid length. [ 1439.736605][T27143] netlink: 'syz.0.4853': attribute type 11 has an invalid length. [ 1439.759442][T10590] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1439.893863][ T5285] usb 4-1: USB disconnect, device number 45 [ 1439.966070][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1440.088042][T27149] usb usb8: usbfs: process 27149 (syz.0.4857) did not claim interface 0 before use [ 1440.111416][T10591] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1440.132949][T10590] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1440.142291][T10590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.150578][T10590] usb 5-1: Product: syz [ 1440.154739][T10590] usb 5-1: Manufacturer: syz [ 1440.173424][T10590] usb 5-1: SerialNumber: syz [ 1440.189563][T10590] usb 5-1: config 0 descriptor?? [ 1440.202428][T10590] usb 5-1: selecting invalid altsetting 3 [ 1440.220494][T10590] comedi comedi0: could not set alternate setting 3 in high speed [ 1440.238256][T10590] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1440.255626][T10590] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 1440.288436][T10591] usb 3-1: Using ep0 maxpacket: 8 [ 1440.318797][T10591] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1440.340622][T10591] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1440.361050][T10591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.378395][T10591] usb 3-1: Product: syz [ 1440.382734][T10591] usb 3-1: Manufacturer: syz [ 1440.387326][T10591] usb 3-1: SerialNumber: syz [ 1440.448151][T10591] usb 3-1: config 0 descriptor?? [ 1440.459110][T27152] fuse: Bad value for 'fd' [ 1440.476922][T10591] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1441.114461][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1441.124645][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1441.133489][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1441.142793][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1441.152491][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1441.159895][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1441.665528][T27161] chnl_net:caif_netlink_parms(): no params data found [ 1441.947733][T10591] gspca_zc3xx: reg_w_i err -71 [ 1442.221681][T27161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.249155][T27161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.298162][T27161] bridge_slave_0: entered allmulticast mode [ 1442.311274][T27161] bridge_slave_0: entered promiscuous mode [ 1442.326715][T27161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.350691][T27161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.370966][T27161] bridge_slave_1: entered allmulticast mode [ 1442.387141][T27161] bridge_slave_1: entered promiscuous mode [ 1442.466072][T27161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.506772][T27161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.756561][T27172] FAULT_INJECTION: forcing a failure. [ 1442.756561][T27172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.782630][T20516] usb 5-1: USB disconnect, device number 28 [ 1442.865027][T27173] ALSA: seq fatal error: cannot create timer (-22) [ 1442.919750][T27161] team0: Port device team_slave_0 added [ 1442.963625][T27161] team0: Port device team_slave_1 added [ 1442.969833][T27172] CPU: 1 UID: 0 PID: 27172 Comm: syz.3.4860 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1442.980653][T27172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1442.990712][T27172] Call Trace: [ 1442.994001][T27172] [ 1442.996951][T27172] dump_stack_lvl+0x241/0x360 [ 1443.001646][T27172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1443.006885][T27172] ? __pfx__printk+0x10/0x10 [ 1443.011486][T27172] ? __pfx_lock_release+0x10/0x10 [ 1443.016550][T27172] should_fail_ex+0x3b0/0x4e0 [ 1443.021255][T27172] _copy_from_user+0x2f/0xe0 [ 1443.025865][T27172] copy_from_sockptr_offset+0x6b/0xb0 [ 1443.031264][T27172] do_ip6t_set_ctl+0xbe6/0x1270 [ 1443.036132][T27172] ? __pfx___might_resched+0x10/0x10 [ 1443.041431][T27172] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1443.046737][T27172] ? __pfx_lock_release+0x10/0x10 [ 1443.051789][T27172] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1443.057436][T27172] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1443.063418][T27172] ? aa_sk_perm+0x96d/0xab0 [ 1443.067928][T27172] ? __pfx_aa_sk_perm+0x10/0x10 [ 1443.072787][T27172] nf_setsockopt+0x295/0x2c0 [ 1443.077408][T27172] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1443.083313][T27172] do_sock_setsockopt+0x3af/0x720 [ 1443.088348][T27172] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1443.093913][T27172] ? __fget_files+0x29/0x470 [ 1443.098512][T27172] ? __fget_files+0x3f3/0x470 [ 1443.103195][T27172] ? __fget_files+0x29/0x470 [ 1443.107795][T27172] __sys_setsockopt+0x1a2/0x250 [ 1443.112670][T27172] __x64_sys_setsockopt+0xb5/0xd0 [ 1443.117727][T27172] do_syscall_64+0xf3/0x230 [ 1443.122244][T27172] ? clear_bhb_loop+0x35/0x90 [ 1443.126933][T27172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.132843][T27172] RIP: 0033:0x7f3ab077dff9 [ 1443.137272][T27172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1443.156890][T27172] RSP: 002b:00007f3ab151b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1443.165313][T27172] RAX: ffffffffffffffda RBX: 00007f3ab0936058 RCX: 00007f3ab077dff9 [ 1443.173294][T27172] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 1443.181272][T27172] RBP: 00007f3ab151b090 R08: 0000000000000638 R09: 0000000000000000 [ 1443.189246][T27172] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1443.197237][T27172] R13: 0000000000000000 R14: 00007f3ab0936058 R15: 00007f3ab0a5fa28 [ 1443.205226][T27172] [ 1443.260900][ T4623] Bluetooth: hci5: command tx timeout [ 1443.278357][T10591] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1443.284691][T10591] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1443.298893][T10591] usb 3-1: USB disconnect, device number 41 [ 1443.385535][T27161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.402857][T27161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.447262][T27161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.472437][T27161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.483184][T27161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.637779][T27161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.785864][T27161] hsr_slave_0: entered promiscuous mode [ 1443.826275][T27161] hsr_slave_1: entered promiscuous mode [ 1443.832196][T10591] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1443.861241][T27161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.897999][T27161] Cannot create hsr debugfs directory [ 1443.988469][T10591] usb 4-1: Using ep0 maxpacket: 32 [ 1444.258943][T10591] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.401090][T10591] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1444.464094][T10591] usb 4-1: New USB device found, idVendor=042c, idProduct=7505, bcdDevice=32.a8 [ 1444.510462][T10591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.522482][T27161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.559349][T10591] usb 4-1: config 0 descriptor?? [ 1444.763931][T27161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.087613][T27161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.278546][ T5243] Bluetooth: hci5: command tx timeout [ 1445.356952][T27161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.899918][T27161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1446.036338][T27161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1446.173321][T27161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1446.294413][T27161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1446.656640][T27161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.737594][T27161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.753905][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.761060][T12167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.930502][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.937645][T12167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.179132][T27161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1447.218823][T27161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1447.358658][ T5243] Bluetooth: hci5: command tx timeout [ 1447.400791][T10588] usb 4-1: USB disconnect, device number 46 [ 1447.655697][T27161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.183291][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.434184][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.578200][T27161] veth0_vlan: entered promiscuous mode [ 1448.803278][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.924251][T27161] veth1_vlan: entered promiscuous mode [ 1449.061112][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.157756][T27161] veth0_macvtap: entered promiscuous mode [ 1449.223416][T27161] veth1_macvtap: entered promiscuous mode [ 1449.289426][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.300005][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.309935][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.320574][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.330528][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.341675][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.353832][T27161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.366540][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.377168][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.387181][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.397721][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.407648][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.418150][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.428071][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.438960][T25637] Bluetooth: hci5: command tx timeout [ 1449.445238][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.455805][T27161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.466341][T27161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.477603][T27161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.487530][T27161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.496331][T27161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.505312][T27161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.514163][T27161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.539751][T25637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1449.551422][T25637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1449.559870][T25637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1449.567527][T25637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1449.575798][T25637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1449.583651][T25637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1449.702004][ T1868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.735600][ T1868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.846699][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.868475][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.044189][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1450.057401][T27207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1450.096327][ T76] bridge_slave_0: left allmulticast mode [ 1450.102521][ T76] bridge_slave_0: left promiscuous mode [ 1450.126070][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.299961][ T5321] IPVS: starting estimator thread 0... [ 1450.429038][T27223] IPVS: using max 29 ests per chain, 69600 per kthread [ 1450.898312][T10590] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1450.962885][T25637] Bluetooth: hci0: command 0x0406 tx timeout [ 1451.162484][T10590] usb 4-1: Using ep0 maxpacket: 32 [ 1451.239845][T10590] usb 4-1: config 148 has an invalid interface number: 223 but max is 0 [ 1451.253839][T10590] usb 4-1: config 148 has no interface number 0 [ 1451.278361][T10590] usb 4-1: config 148 interface 223 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1451.290374][T10590] usb 4-1: config 148 interface 223 has no altsetting 0 [ 1451.305450][T10590] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=27.b4 [ 1451.327295][T10590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.359020][T10590] usb 4-1: Product: syz [ 1451.363584][T10590] usb 4-1: Manufacturer: syz [ 1451.391179][T10590] usb 4-1: SerialNumber: syz [ 1451.472767][T27249] FAULT_INJECTION: forcing a failure. [ 1451.472767][T27249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.486191][T27249] CPU: 0 UID: 0 PID: 27249 Comm: syz.0.4877 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1451.497000][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1451.507095][T27249] Call Trace: [ 1451.510401][T27249] [ 1451.513354][T27249] dump_stack_lvl+0x241/0x360 [ 1451.518048][T27249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1451.523259][T27249] ? __pfx__printk+0x10/0x10 [ 1451.527881][T27249] ? __pfx_lock_release+0x10/0x10 [ 1451.532959][T27249] should_fail_ex+0x3b0/0x4e0 [ 1451.537667][T27249] _copy_from_user+0x2f/0xe0 [ 1451.542306][T27249] copy_msghdr_from_user+0xae/0x680 [ 1451.547536][T27249] ? __pfx___might_resched+0x10/0x10 [ 1451.552838][T27249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1451.558695][T27249] ? rcu_is_watching+0x15/0xb0 [ 1451.563487][T27249] ? __might_fault+0xaa/0x120 [ 1451.568199][T27249] __sys_sendmmsg+0x36d/0x730 [ 1451.572942][T27249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1451.578183][T27249] ? __pfx_lock_release+0x10/0x10 [ 1451.583244][T27249] ? kstrtouint_from_user+0x128/0x190 [ 1451.588660][T27249] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1451.594583][T27249] ? ksys_write+0x229/0x2b0 [ 1451.599109][T27249] ? __pfx_lock_release+0x10/0x10 [ 1451.604162][T27249] ? vfs_write+0x7bf/0xc90 [ 1451.608583][T27249] ? kmem_cache_free+0x1a2/0x420 [ 1451.613542][T27249] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1451.619190][T27249] ? __fget_files+0x3f3/0x470 [ 1451.623884][T27249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1451.629875][T27249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1451.636227][T27249] ? do_syscall_64+0x100/0x230 [ 1451.641008][T27249] __x64_sys_sendmmsg+0xa0/0xb0 [ 1451.645888][T27249] do_syscall_64+0xf3/0x230 [ 1451.650413][T27249] ? clear_bhb_loop+0x35/0x90 [ 1451.655101][T27249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.661032][T27249] RIP: 0033:0x7f2c2f57dff9 [ 1451.665450][T27249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.685063][T27249] RSP: 002b:00007f2c3030f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1451.693490][T27249] RAX: ffffffffffffffda RBX: 00007f2c2f735f80 RCX: 00007f2c2f57dff9 [ 1451.701467][T27249] RDX: 17fd147c801ae9ab RSI: 0000000020000ac0 RDI: 0000000000000005 [ 1451.709449][T27249] RBP: 00007f2c3030f090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.717429][T27249] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002 [ 1451.725429][T27249] R13: 0000000000000000 R14: 00007f2c2f735f80 R15: 00007f2c2f85fa28 [ 1451.733439][T27249] [ 1451.839134][ T4623] Bluetooth: hci1: command tx timeout [ 1451.873378][T27243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.927773][T27243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.014869][ T76] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1452.052956][ T76] bridge0 (unregistering): left allmulticast mode [ 1452.178316][ T5321] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1452.328307][ T5321] usb 1-1: Using ep0 maxpacket: 8 [ 1452.335207][ T5321] usb 1-1: config 0 has no interfaces? [ 1452.343061][ T5321] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 1452.352781][ T5321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.361040][ T5321] usb 1-1: Product: syz [ 1452.365359][ T5321] usb 1-1: Manufacturer: syz [ 1452.370291][ T5321] usb 1-1: SerialNumber: syz [ 1452.383938][ T5321] usb 1-1: config 0 descriptor?? [ 1452.598319][T27251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.659475][T27251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.767752][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.785158][ T76] bond_slave_0: left allmulticast mode [ 1452.797306][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.815676][ T76] bond_slave_1: left allmulticast mode [ 1452.825984][ T76] bond0 (unregistering): Released all slaves [ 1453.117170][T27251] batadv0: entered promiscuous mode [ 1453.137710][T27251] macvlan2: entered allmulticast mode [ 1453.143346][T27251] batadv0: entered allmulticast mode [ 1453.150821][T27251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1453.186253][T27251] batadv0: left allmulticast mode [ 1453.191626][T27251] batadv0: left promiscuous mode [ 1453.431064][ T5465] usb 1-1: USB disconnect, device number 83 [ 1453.681769][T27205] chnl_net:caif_netlink_parms(): no params data found [ 1453.757282][T10590] peak_usb 4-1:148.223 can0: unable to request usb[type=0 value=1] err=-71 [ 1453.766049][T10590] peak_usb 4-1:148.223: unable to read PCAN-USB X6 firmware info (err -71) [ 1453.834898][ T76] hsr_slave_0: left promiscuous mode [ 1453.858756][ T76] hsr_slave_1: left promiscuous mode [ 1453.872637][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.892791][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.914386][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.921908][ T4623] Bluetooth: hci1: command tx timeout [ 1453.938328][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.977841][ T76] veth1_macvtap: left promiscuous mode [ 1454.028548][ T76] veth0_macvtap: left promiscuous mode [ 1454.040788][ T76] veth1_vlan: left promiscuous mode [ 1454.072659][ T76] veth0_vlan: left promiscuous mode [ 1454.969064][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1455.029725][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1455.669447][T10590] peak_usb 4-1:148.223: probe with driver peak_usb failed with error -71 [ 1455.699764][T10590] usb 4-1: USB disconnect, device number 47 [ 1455.982710][T27205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.007326][T27205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.013741][ T4623] Bluetooth: hci1: command tx timeout [ 1456.073586][T27205] bridge_slave_0: entered allmulticast mode [ 1456.189587][T27205] bridge_slave_0: entered promiscuous mode [ 1456.231645][T27205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.249150][T27205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.273149][T27205] bridge_slave_1: entered allmulticast mode [ 1456.294556][T27205] bridge_slave_1: entered promiscuous mode [ 1456.486615][T27205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.552829][T27205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.754387][T27205] team0: Port device team_slave_0 added [ 1456.962578][T27205] team0: Port device team_slave_1 added [ 1457.070554][T25637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1457.080209][T25637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1457.089084][T25637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1457.098340][T25637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1457.106473][T25637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1457.115144][T25637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1457.208323][T10590] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1457.240090][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1457.325831][T27338] wireguard0: entered promiscuous mode [ 1457.337184][T27338] wireguard0: entered allmulticast mode [ 1457.368360][T10590] usb 2-1: device descriptor read/64, error -71 [ 1457.491613][T27205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.499238][T27205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.513425][ T76] IPVS: stop unused estimator thread 0... [ 1457.537403][T27205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.600946][T27205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.608705][T10590] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1457.620551][T27205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.698533][T27205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.805894][T27205] hsr_slave_0: entered promiscuous mode [ 1457.812664][T10590] usb 2-1: device descriptor read/64, error -71 [ 1457.838108][T27205] hsr_slave_1: entered promiscuous mode [ 1457.849006][T27205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.863214][T27205] Cannot create hsr debugfs directory [ 1457.928612][T10590] usb usb2-port1: attempt power cycle [ 1458.027288][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.063892][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.083731][ T4623] Bluetooth: hci1: command tx timeout [ 1458.168422][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.188512][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.278469][T10590] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1458.351025][T10590] usb 2-1: device descriptor read/8, error -71 [ 1458.396362][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.447738][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.668400][T10590] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1458.701545][T10590] usb 2-1: device descriptor read/8, error -71 [ 1458.743420][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.761213][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.808775][T10590] usb usb2-port1: unable to enumerate USB device [ 1458.992061][T27340] chnl_net:caif_netlink_parms(): no params data found [ 1459.200172][ T4623] Bluetooth: hci0: command tx timeout [ 1459.689174][ T76] bridge_slave_1: left allmulticast mode [ 1459.696722][ T76] bridge_slave_1: left promiscuous mode [ 1459.713096][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.727667][ T76] bridge_slave_0: left allmulticast mode [ 1459.734736][ T76] bridge_slave_0: left promiscuous mode [ 1459.746574][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.764945][ T76] bridge_slave_1: left allmulticast mode [ 1459.771877][ T76] bridge_slave_1: left promiscuous mode [ 1459.777747][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.796070][ T76] bridge_slave_0: left allmulticast mode [ 1459.804148][ T76] bridge_slave_0: left promiscuous mode [ 1459.815440][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.519086][T25637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1460.547861][T25637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1460.569328][T25637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1460.581482][T25637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1460.611094][T25637] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1460.622512][T25637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1460.961975][ T76] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1461.153958][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.165812][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.176903][ T76] bond0 (unregistering): Released all slaves [ 1461.282310][ T4623] Bluetooth: hci0: command tx timeout [ 1461.339298][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.353410][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.376140][ T76] bond0 (unregistering): Released all slaves [ 1461.523582][T27340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.550735][T27340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.558051][T27340] bridge_slave_0: entered allmulticast mode [ 1461.579594][T27340] bridge_slave_0: entered promiscuous mode [ 1461.607237][T27375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'. [ 1461.628356][T27378] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 1461.795093][T27340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.813824][T27340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.828545][T27340] bridge_slave_1: entered allmulticast mode [ 1461.846448][T27340] bridge_slave_1: entered promiscuous mode [ 1461.854110][T27427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.926033][T27340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.940443][ T5465] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1462.032000][T27340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.102983][T27490] netlink: 'syz.0.4905': attribute type 11 has an invalid length. [ 1462.115639][T27340] team0: Port device team_slave_0 added [ 1462.126694][ T5465] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1462.154378][ T5465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1462.204158][ T5465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1462.266140][T27340] team0: Port device team_slave_1 added [ 1462.269220][ T5465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1462.287871][ T5465] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1462.297337][ T5465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.309890][ T5465] usb 2-1: config 0 descriptor?? [ 1462.316059][T27411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1462.553637][T27614] qrtr: Invalid version 0 [ 1462.567555][T27614] FAULT_INJECTION: forcing a failure. [ 1462.567555][T27614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.582594][T27614] CPU: 0 UID: 0 PID: 27614 Comm: syz.0.4908 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1462.593408][T27614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1462.603484][T27614] Call Trace: [ 1462.606762][T27614] [ 1462.609709][T27614] dump_stack_lvl+0x241/0x360 [ 1462.614407][T27614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.619613][T27614] ? __pfx__printk+0x10/0x10 [ 1462.624217][T27614] ? snprintf+0xda/0x120 [ 1462.628473][T27614] should_fail_ex+0x3b0/0x4e0 [ 1462.633165][T27614] _copy_to_user+0x2f/0xb0 [ 1462.637592][T27614] simple_read_from_buffer+0xca/0x150 [ 1462.643007][T27614] proc_fail_nth_read+0x1e9/0x250 [ 1462.648077][T27614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1462.653662][T27614] ? rw_verify_area+0x55e/0x6f0 [ 1462.658527][T27614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1462.664082][T27614] vfs_read+0x201/0xbc0 [ 1462.668255][T27614] ? __pfx_lock_release+0x10/0x10 [ 1462.673292][T27614] ? __pfx_vfs_read+0x10/0x10 [ 1462.677977][T27614] ? irqtime_account_irq+0x18e/0x1e0 [ 1462.683263][T27614] ? __fget_files+0x3f3/0x470 [ 1462.687942][T27614] ? fdget_pos+0x24e/0x320 [ 1462.692381][T27614] ksys_read+0x183/0x2b0 [ 1462.696655][T27614] ? __pfx_ksys_read+0x10/0x10 [ 1462.701457][T27614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1462.707793][T27614] ? __irq_exit_rcu+0x100/0x1c0 [ 1462.712649][T27614] ? do_syscall_64+0xb6/0x230 [ 1462.717342][T27614] do_syscall_64+0xf3/0x230 [ 1462.721851][T27614] ? clear_bhb_loop+0x35/0x90 [ 1462.726532][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.732431][T27614] RIP: 0033:0x7f2c2f57ca3c [ 1462.736850][T27614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1462.756508][T27614] RSP: 002b:00007f2c3030f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1462.764925][T27614] RAX: ffffffffffffffda RBX: 00007f2c2f735f80 RCX: 00007f2c2f57ca3c [ 1462.772897][T27614] RDX: 000000000000000f RSI: 00007f2c3030f0a0 RDI: 0000000000000009 [ 1462.780865][T27614] RBP: 00007f2c3030f090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.788844][T27614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.796845][T27614] R13: 0000000000000000 R14: 00007f2c2f735f80 R15: 00007f2c2f85fa28 [ 1462.804868][T27614] [ 1462.809635][ T4623] Bluetooth: hci3: command tx timeout [ 1462.819201][ T5465] plantronics 0003:047F:FFFF.0050: unknown main item tag 0xd [ 1462.830109][ T5465] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 1462.830423][T27340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.851321][ T5465] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1462.904311][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.932174][T27340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.999363][T27637] support for cryptoloop has been removed. Use dm-crypt instead. [ 1463.016240][T27340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.024636][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.051836][T27340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.070343][T27205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1463.080149][T27637] netlink: 'syz.0.4909': attribute type 5 has an invalid length. [ 1463.130124][ T76] hsr_slave_0: left promiscuous mode [ 1463.155827][ T76] hsr_slave_1: left promiscuous mode [ 1463.163441][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.174990][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.183452][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.192556][ T76] hsr_slave_0: left promiscuous mode [ 1463.200806][ T76] hsr_slave_1: left promiscuous mode [ 1463.206984][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.215113][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.222918][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.255224][ T76] veth1_macvtap: left promiscuous mode [ 1463.260963][ T76] veth0_macvtap: left promiscuous mode [ 1463.266996][ T76] veth1_vlan: left promiscuous mode [ 1463.272743][ T76] veth0_vlan: left promiscuous mode [ 1463.279360][ T76] veth1_macvtap: left promiscuous mode [ 1463.284990][ T76] veth0_macvtap: left promiscuous mode [ 1463.359366][ T4623] Bluetooth: hci0: command tx timeout [ 1463.460564][ T76] pim6reg (unregistering): left allmulticast mode [ 1463.883288][ T76] batadv_slave_0 (unregistering): left allmulticast mode [ 1463.956407][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1464.010991][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1464.879198][T25637] Bluetooth: hci3: command tx timeout [ 1465.053212][T23560] usb 2-1: USB disconnect, device number 78 [ 1465.444097][T25637] Bluetooth: hci0: command tx timeout [ 1465.813133][T27382] chnl_net:caif_netlink_parms(): no params data found [ 1465.864852][T27205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1465.941133][T27205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.020397][T27340] hsr_slave_0: entered promiscuous mode [ 1466.042185][T27340] hsr_slave_1: entered promiscuous mode [ 1466.058352][T27340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1466.065964][T27340] Cannot create hsr debugfs directory [ 1466.101764][T27205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.246819][T27382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.259976][T27382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.287818][T27382] bridge_slave_0: entered allmulticast mode [ 1466.313913][T27382] bridge_slave_0: entered promiscuous mode [ 1466.328612][T25637] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.407010][T27382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.414516][T27382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.427644][T27382] bridge_slave_1: entered allmulticast mode [ 1466.434948][T27382] bridge_slave_1: entered promiscuous mode [ 1466.638093][T27382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.701908][T27382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.861314][T27382] team0: Port device team_slave_0 added [ 1466.926614][T27205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.949428][T27382] team0: Port device team_slave_1 added [ 1466.968392][ T4623] Bluetooth: hci3: command tx timeout [ 1467.114006][T27382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.115056][ T76] IPVS: stop unused estimator thread 0... [ 1467.138949][T27382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.142752][ T76] IPVS: stop unused estimator thread 0... [ 1467.208241][T27382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.249370][T27205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.266373][T27382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.278795][T27382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.321593][T27382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.417001][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.424208][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.463445][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.470591][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.489967][T25637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1467.502575][T25637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1467.518083][T25637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1467.533724][T25637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1467.544688][T25637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1467.552356][T25637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1467.876451][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.929520][T27382] hsr_slave_0: entered promiscuous mode [ 1467.944988][T27382] hsr_slave_1: entered promiscuous mode [ 1467.959553][T27382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.967171][T27382] Cannot create hsr debugfs directory [ 1468.116987][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.262695][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.315963][T27205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.480726][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.782874][T27205] veth0_vlan: entered promiscuous mode [ 1468.836314][T27205] veth1_vlan: entered promiscuous mode [ 1468.846370][T27340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1468.941219][T27382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.977909][T27340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1469.011658][T27919] chnl_net:caif_netlink_parms(): no params data found [ 1469.038839][ T4623] Bluetooth: hci3: command tx timeout [ 1469.064193][T27340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1469.092167][T27340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1469.155907][T27382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.193989][T27205] veth0_macvtap: entered promiscuous mode [ 1469.302024][T27205] veth1_macvtap: entered promiscuous mode [ 1469.367175][T27382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.517783][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.568359][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.608323][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.619583][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.629728][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.658952][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.678430][ T4623] Bluetooth: hci2: command tx timeout [ 1469.689904][T27205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.720269][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.731045][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.741262][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.752085][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.762362][T27205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.773072][T27205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.785215][T27205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.878909][T27382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.997849][T27205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.009141][T27205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.017886][T27205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.029039][T27205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.060636][T27919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.067736][T27919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.093917][T27919] bridge_slave_0: entered allmulticast mode [ 1470.116347][T27919] bridge_slave_0: entered promiscuous mode [ 1470.153944][T27919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.176610][T27919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.186111][T27919] bridge_slave_1: entered allmulticast mode [ 1470.201434][T27919] bridge_slave_1: entered promiscuous mode [ 1470.301662][ T76] bridge_slave_1: left allmulticast mode [ 1470.307393][ T76] bridge_slave_1: left promiscuous mode [ 1470.323765][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.346871][ T76] bridge_slave_0: left allmulticast mode [ 1470.358456][ T76] bridge_slave_0: left promiscuous mode [ 1470.369736][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.390842][ T76] bridge_slave_1: left allmulticast mode [ 1470.396554][ T76] bridge_slave_1: left promiscuous mode [ 1470.403281][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.424306][ T76] bridge_slave_0: left allmulticast mode [ 1470.434409][ T76] bridge_slave_0: left promiscuous mode [ 1470.448970][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.494445][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.506977][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.533442][ T76] bond0 (unregistering): Released all slaves [ 1471.762970][ T4623] Bluetooth: hci2: command tx timeout [ 1471.769807][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.790805][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.811158][ T76] bond0 (unregistering): Released all slaves [ 1471.837863][T27919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.853003][T27919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.915828][T27960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1472.140690][T28271] binder: 28270:28271 ioctl c0306201 0 returned -14 [ 1472.157050][T27919] team0: Port device team_slave_0 added [ 1472.177106][T27919] team0: Port device team_slave_1 added [ 1472.184372][T28271] Cannot find add_set index 0 as target [ 1472.296424][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.300383][T27919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.308275][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.334990][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.371786][T27919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.445899][T27382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1472.464209][T27382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1472.502481][T27919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.519312][T27919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.546263][T27919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.588325][T27382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1472.703608][T12167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.719818][T12167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.736834][T27382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1472.834521][T27919] hsr_slave_0: entered promiscuous mode [ 1472.845352][T27919] hsr_slave_1: entered promiscuous mode [ 1472.856289][T27919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.865989][T27919] Cannot create hsr debugfs directory [ 1472.978762][T27340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.050755][ T5321] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1473.204733][ T76] hsr_slave_0: left promiscuous mode [ 1473.219276][ T76] hsr_slave_1: left promiscuous mode [ 1473.230503][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.242810][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.252780][ T5321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1473.255746][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.265874][ T5321] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1473.283711][ T5321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.293404][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.302542][ T5321] usb 2-1: config 0 descriptor?? [ 1473.320211][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.327791][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.344025][ T76] hsr_slave_0: left promiscuous mode [ 1473.350478][ T76] hsr_slave_1: left promiscuous mode [ 1473.361471][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.378414][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.396787][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.414808][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.524621][ T76] veth1_macvtap: left promiscuous mode [ 1473.537896][ T76] veth0_macvtap: left promiscuous mode [ 1473.554036][ T76] veth1_vlan: left promiscuous mode [ 1473.564139][ T76] veth0_vlan: left promiscuous mode [ 1473.577470][ T76] veth1_macvtap: left promiscuous mode [ 1473.587255][ T76] veth0_macvtap: left promiscuous mode [ 1473.604616][ T76] veth1_vlan: left promiscuous mode [ 1473.614720][ T76] veth0_vlan: left promiscuous mode [ 1473.844063][ T4623] Bluetooth: hci2: command tx timeout [ 1474.587813][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1474.665241][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1475.812308][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1475.880801][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1475.918663][ T4623] Bluetooth: hci2: command tx timeout [ 1476.740058][ T5321] usbhid 2-1:0.0: can't add hid device: -71 [ 1476.755910][ T5321] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1476.782480][ T5321] usb 2-1: USB disconnect, device number 79 [ 1476.797008][T27340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.881112][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.888416][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.976157][ T1868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.983341][ T1868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.257068][T27382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.346164][T27340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1477.380491][T27340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1477.681872][T27382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.752108][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.759311][T19038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.811920][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.819106][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.943697][T27340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.271524][T25637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1478.288748][T25637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1478.298747][T25637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1478.312761][T25637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1478.322397][T25637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1478.330023][T25637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1478.531072][T27919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1478.601796][T27919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1478.658069][T27382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.692883][T27919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1478.743412][T27340] veth0_vlan: entered promiscuous mode [ 1478.819693][T27919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1478.927077][T12172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.034626][T27340] veth1_vlan: entered promiscuous mode [ 1479.109807][T12172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.147393][T27382] veth0_vlan: entered promiscuous mode [ 1479.221985][T12172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.243768][T27382] veth1_vlan: entered promiscuous mode [ 1479.414333][T12172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.435663][T27382] veth0_macvtap: entered promiscuous mode [ 1479.456533][T28552] chnl_net:caif_netlink_parms(): no params data found [ 1479.493789][T27382] veth1_macvtap: entered promiscuous mode [ 1479.514546][T27340] veth0_macvtap: entered promiscuous mode [ 1479.586296][T27382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.601118][T27382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.613260][T27382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.626017][T27382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.638539][T27382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.667878][T27340] veth1_macvtap: entered promiscuous mode [ 1479.735777][T27382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1479.753520][T27382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.763626][T27382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1479.774395][T27382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.785621][T27382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.802323][T28552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.809768][T28552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.816975][T28552] bridge_slave_0: entered allmulticast mode [ 1479.824569][T28552] bridge_slave_0: entered promiscuous mode [ 1479.862617][T27382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.877112][T27382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.886073][T27382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.895033][T27382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.912135][T27919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.920357][T28552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.927567][T28552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.935668][T28552] bridge_slave_1: entered allmulticast mode [ 1479.943066][T28552] bridge_slave_1: entered promiscuous mode [ 1480.015803][T28552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.032494][T12172] bridge_slave_1: left allmulticast mode [ 1480.041008][T12172] bridge_slave_1: left promiscuous mode [ 1480.046937][T12172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.057572][T12172] bridge_slave_0: left allmulticast mode [ 1480.063649][T12172] bridge_slave_0: left promiscuous mode [ 1480.069755][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.399777][ T4623] Bluetooth: hci1: command tx timeout [ 1480.501809][T12172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.513731][T12172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.524788][T12172] bond0 (unregistering): Released all slaves [ 1480.544780][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.565971][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.580295][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.590900][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.605675][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.618785][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.620313][T27340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.625278][T28552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.717629][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.729699][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.739888][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.750530][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.761697][T27340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.772441][T27340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.793387][T27340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.894654][T27340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.905437][T27340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.922171][T27340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.956623][T27340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.976878][T28552] team0: Port device team_slave_0 added [ 1481.047444][T27919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.071265][T28552] team0: Port device team_slave_1 added [ 1481.206543][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.213700][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.311234][ T5464] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1481.326411][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.333540][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.391088][T12172] hsr_slave_0: left promiscuous mode [ 1481.397076][T12172] hsr_slave_1: left promiscuous mode [ 1481.416837][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.434965][T12172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.451999][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.462272][T12172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.502548][T12172] veth1_macvtap: left promiscuous mode [ 1481.508080][T12172] veth0_macvtap: left promiscuous mode [ 1481.513617][ T5464] usb 2-1: Using ep0 maxpacket: 16 [ 1481.527867][ T5464] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.550573][T12172] veth1_vlan: left promiscuous mode [ 1481.555900][T12172] veth0_vlan: left promiscuous mode [ 1481.561335][ T5464] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1481.579360][ T5464] usb 2-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1481.612240][ T5464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.645752][ T5464] usb 2-1: Product: syz [ 1481.665196][ T5464] usb 2-1: Manufacturer: syz [ 1481.674692][ T5464] usb 2-1: SerialNumber: syz [ 1482.478702][ T4623] Bluetooth: hci1: command tx timeout [ 1482.515710][T12172] team0 (unregistering): Port device team_slave_1 removed [ 1482.593592][T12172] team0 (unregistering): Port device team_slave_0 removed [ 1483.459382][T28552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.472634][T28552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.506102][T28552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.523107][T28552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.543329][T28552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.577672][T28552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.777125][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.802535][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.879517][T28552] hsr_slave_0: entered promiscuous mode [ 1483.886536][T28552] hsr_slave_1: entered promiscuous mode [ 1484.044297][ T5464] usb 2-1: 0:2 : does not exist [ 1484.066165][ T5464] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1484.110793][ T5464] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1484.135926][ T2507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.155384][ T2507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.169486][ T5464] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1484.246570][ T5464] usb 2-1: USB disconnect, device number 80 [ 1484.411562][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.424185][T27919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.458321][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.559659][ T4623] Bluetooth: hci1: command tx timeout [ 1484.720763][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.727104][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.783271][T12167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.793414][T12167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.883984][ T5464] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1484.953203][T27919] veth0_vlan: entered promiscuous mode [ 1485.053850][T29023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4898'. [ 1485.058384][ T5464] usb 2-1: Using ep0 maxpacket: 16 [ 1485.079429][T29023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4898'. [ 1485.110813][ T5464] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.115608][T27919] veth1_vlan: entered promiscuous mode [ 1485.141787][ T5464] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1485.222023][ T5464] usb 2-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1485.237433][ T5464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.262058][ T5464] usb 2-1: Product: syz [ 1485.277852][ T5464] usb 2-1: Manufacturer: syz [ 1485.290553][T27919] veth0_macvtap: entered promiscuous mode [ 1485.306743][ T5464] usb 2-1: SerialNumber: syz [ 1485.331442][T27919] veth1_macvtap: entered promiscuous mode [ 1485.385783][T29038] netlink: 'syz.4.4934': attribute type 21 has an invalid length. [ 1485.544424][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.606838][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.655582][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.667262][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.685172][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.709405][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.733432][T27919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.832725][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.878577][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.928883][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.976559][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.016802][T27919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.058437][T27919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.091444][T27919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.174402][T27919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.220360][T27919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.239440][T27919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.361908][T27919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.378449][ T5611] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1486.467978][T29086] [ 1486.470373][T29086] ===================================================== [ 1486.477325][T29086] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1486.484818][T29086] 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 Not tainted [ 1486.491948][T29086] ----------------------------------------------------- [ 1486.498905][T29086] syz.3.4939/29086 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1486.506679][T29086] ffff88801c2a1750 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 1486.515456][T29086] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1486.515456][T29086] and this task is already holding: [ 1486.522851][T29086] ffff888029279230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 1486.532603][T29086] which would create a new lock dependency: [ 1486.534330][T28552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1486.538498][T29086] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 1486.538564][T29086] [ 1486.538564][T29086] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1486.538574][T29086] (&dev->event_lock#2){..-.}-{2:2} [ 1486.538601][T29086] [ 1486.538601][T29086] ... which became SOFTIRQ-irq-safe at: [ 1486.538611][T29086] lock_acquire+0x1ed/0x550 [ 1486.538651][T29086] _raw_spin_lock_irqsave+0xd5/0x120 [ 1486.538681][T29086] input_inject_event+0xc5/0x340 [ 1486.538708][T29086] led_trigger_event+0x138/0x210 [ 1486.538731][T29086] kbd_bh+0x1b5/0x290 [ 1486.538748][T29086] tasklet_action_common+0x321/0x4d0 [ 1486.538779][T29086] handle_softirqs+0x2c5/0x980 [ 1486.610024][T29086] run_ksoftirqd+0xca/0x130 [ 1486.614653][T29086] smpboot_thread_fn+0x544/0xa30 [ 1486.619708][T29086] kthread+0x2f0/0x390 [ 1486.623871][T29086] ret_from_fork+0x4b/0x80 [ 1486.628399][T29086] ret_from_fork_asm+0x1a/0x30 [ 1486.633261][T29086] [ 1486.633261][T29086] to a SOFTIRQ-irq-unsafe lock: [ 1486.638348][ T4623] Bluetooth: hci1: command tx timeout [ 1486.640270][T29086] (tasklist_lock){.+.+}-{2:2} [ 1486.645758][T29086] [ 1486.645758][T29086] ... which became SOFTIRQ-irq-unsafe at: [ 1486.658404][T29086] ... [ 1486.658416][T29086] lock_acquire+0x1ed/0x550 [ 1486.665608][T29086] _raw_read_lock+0x36/0x50 [ 1486.670233][T29086] __do_wait+0x12d/0x850 [ 1486.674567][T29086] do_wait+0x1e9/0x560 [ 1486.678739][T29086] kernel_wait+0xe9/0x240 [ 1486.683172][T29086] call_usermodehelper_exec_work+0xbd/0x230 [ 1486.689183][T29086] process_scheduled_works+0xa63/0x1850 [ 1486.694837][T29086] worker_thread+0x870/0xd30 [ 1486.699540][T29086] kthread+0x2f0/0x390 [ 1486.703697][T29086] ret_from_fork+0x4b/0x80 [ 1486.708211][T29086] ret_from_fork_asm+0x1a/0x30 [ 1486.713082][T29086] [ 1486.713082][T29086] other info that might help us debug this: [ 1486.713082][T29086] [ 1486.723322][T29086] Chain exists of: [ 1486.723322][T29086] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1486.723322][T29086] [ 1486.736303][T29086] Possible interrupt unsafe locking scenario: [ 1486.736303][T29086] [ 1486.744633][T29086] CPU0 CPU1 [ 1486.750010][T29086] ---- ---- [ 1486.755379][T29086] lock(tasklist_lock); [ 1486.759649][T29086] local_irq_disable(); [ 1486.766411][T29086] lock(&dev->event_lock#2); [ 1486.773626][T29086] lock(&new->fa_lock); [ 1486.780401][T29086] [ 1486.783856][T29086] lock(&dev->event_lock#2); [ 1486.788735][T29086] [ 1486.788735][T29086] *** DEADLOCK *** [ 1486.788735][T29086] [ 1486.796886][T29086] 6 locks held by syz.3.4939/29086: [ 1486.802093][T29086] #0: ffff88802927b110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 1486.811280][T29086] #1: ffff888029279230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 1486.821411][T29086] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 1486.831133][T29086] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 1486.840742][T29086] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 1486.850873][T29086] #5: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 1486.859968][T29086] [ 1486.859968][T29086] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1486.870374][T29086] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1486.875986][T29086] IN-SOFTIRQ-W at: [ 1486.879981][T29086] lock_acquire+0x1ed/0x550 [ 1486.886155][T29086] _raw_spin_lock_irqsave+0xd5/0x120 [ 1486.893115][T29086] input_inject_event+0xc5/0x340 [ 1486.899723][T29086] led_trigger_event+0x138/0x210 [ 1486.906329][T29086] kbd_bh+0x1b5/0x290 [ 1486.911982][T29086] tasklet_action_common+0x321/0x4d0 [ 1486.918947][T29086] handle_softirqs+0x2c5/0x980 [ 1486.925371][T29086] run_ksoftirqd+0xca/0x130 [ 1486.931553][T29086] smpboot_thread_fn+0x544/0xa30 [ 1486.938160][T29086] kthread+0x2f0/0x390 [ 1486.943919][T29086] ret_from_fork+0x4b/0x80 [ 1486.950013][T29086] ret_from_fork_asm+0x1a/0x30 [ 1486.956452][T29086] INITIAL USE at: [ 1486.960356][T29086] lock_acquire+0x1ed/0x550 [ 1486.966428][T29086] _raw_spin_lock_irqsave+0xd5/0x120 [ 1486.973303][T29086] input_inject_event+0xc5/0x340 [ 1486.979829][T29086] kbd_led_trigger_activate+0xb8/0x100 [ 1486.986853][T29086] led_trigger_set+0x582/0x9c0 [ 1486.993184][T29086] led_trigger_set_default+0x229/0x260 [ 1487.000208][T29086] led_classdev_register_ext+0x6e6/0x8a0 [ 1487.007417][T29086] input_leds_connect+0x489/0x630 [ 1487.014032][T29086] input_register_device+0xd3b/0x1110 [ 1487.021004][T29086] atkbd_connect+0x752/0xa00 [ 1487.027165][T29086] serio_driver_probe+0x7f/0xa0 [ 1487.033598][T29086] really_probe+0x2b8/0xad0 [ 1487.039675][T29086] __driver_probe_device+0x1a2/0x390 [ 1487.046538][T29086] driver_probe_device+0x50/0x430 [ 1487.053153][T29086] __driver_attach+0x45f/0x710 [ 1487.059513][T29086] bus_for_each_dev+0x239/0x2b0 [ 1487.065967][T29086] serio_handle_event+0x1c7/0x920 [ 1487.072572][T29086] process_scheduled_works+0xa63/0x1850 [ 1487.079708][T29086] worker_thread+0x870/0xd30 [ 1487.085885][T29086] kthread+0x2f0/0x390 [ 1487.091527][T29086] ret_from_fork+0x4b/0x80 [ 1487.097544][T29086] ret_from_fork_asm+0x1a/0x30 [ 1487.103894][T29086] } [ 1487.106456][T29086] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1487.115508][T29086] [ 1487.115508][T29086] the dependencies between the lock to be acquired [ 1487.115522][T29086] and SOFTIRQ-irq-unsafe lock: [ 1487.129054][T29086] -> (tasklist_lock){.+.+}-{2:2} { [ 1487.134375][T29086] HARDIRQ-ON-R at: [ 1487.138545][T29086] lock_acquire+0x1ed/0x550 [ 1487.145069][T29086] _raw_read_lock+0x36/0x50 [ 1487.151592][T29086] __do_wait+0x12d/0x850 [ 1487.157882][T29086] do_wait+0x1e9/0x560 [ 1487.163969][T29086] kernel_wait+0xe9/0x240 [ 1487.170327][T29086] call_usermodehelper_exec_work+0xbd/0x230 [ 1487.178238][T29086] process_scheduled_works+0xa63/0x1850 [ 1487.185794][T29086] worker_thread+0x870/0xd30 [ 1487.192422][T29086] kthread+0x2f0/0x390 [ 1487.198510][T29086] ret_from_fork+0x4b/0x80 [ 1487.204977][T29086] ret_from_fork_asm+0x1a/0x30 [ 1487.211768][T29086] SOFTIRQ-ON-R at: [ 1487.215992][T29086] lock_acquire+0x1ed/0x550 [ 1487.222522][T29086] _raw_read_lock+0x36/0x50 [ 1487.229066][T29086] __do_wait+0x12d/0x850 [ 1487.235328][T29086] do_wait+0x1e9/0x560 [ 1487.241402][T29086] kernel_wait+0xe9/0x240 [ 1487.247774][T29086] call_usermodehelper_exec_work+0xbd/0x230 [ 1487.255701][T29086] process_scheduled_works+0xa63/0x1850 [ 1487.263265][T29086] worker_thread+0x870/0xd30 [ 1487.269875][T29086] kthread+0x2f0/0x390 [ 1487.275951][T29086] ret_from_fork+0x4b/0x80 [ 1487.282395][T29086] ret_from_fork_asm+0x1a/0x30 [ 1487.289180][T29086] INITIAL USE at: [ 1487.293265][T29086] lock_acquire+0x1ed/0x550 [ 1487.299715][T29086] _raw_write_lock_irq+0xd3/0x120 [ 1487.306658][T29086] copy_process+0x2267/0x3d50 [ 1487.313278][T29086] kernel_clone+0x226/0x8f0 [ 1487.319724][T29086] user_mode_thread+0x132/0x1a0 [ 1487.326542][T29086] rest_init+0x23/0x300 [ 1487.332638][T29086] start_kernel+0x47f/0x500 [ 1487.339136][T29086] x86_64_start_reservations+0x2a/0x30 [ 1487.346535][T29086] x86_64_start_kernel+0x9f/0xa0 [ 1487.353453][T29086] common_startup_64+0x13e/0x147 [ 1487.360327][T29086] INITIAL READ USE at: [ 1487.364852][T29086] lock_acquire+0x1ed/0x550 [ 1487.371797][T29086] _raw_read_lock+0x36/0x50 [ 1487.378701][T29086] __do_wait+0x12d/0x850 [ 1487.385332][T29086] do_wait+0x1e9/0x560 [ 1487.391794][T29086] kernel_wait+0xe9/0x240 [ 1487.398496][T29086] call_usermodehelper_exec_work+0xbd/0x230 [ 1487.406763][T29086] process_scheduled_works+0xa63/0x1850 [ 1487.414676][T29086] worker_thread+0x870/0xd30 [ 1487.421659][T29086] kthread+0x2f0/0x390 [ 1487.428137][T29086] ret_from_fork+0x4b/0x80 [ 1487.434936][T29086] ret_from_fork_asm+0x1a/0x30 [ 1487.442085][T29086] } [ 1487.444787][T29086] ... key at: [] tasklist_lock+0x18/0x40 [ 1487.452704][T29086] ... acquired at: [ 1487.456702][T29086] lock_acquire+0x1ed/0x550 [ 1487.461427][T29086] _raw_read_lock+0x36/0x50 [ 1487.466125][T29086] send_sigio+0x108/0x390 [ 1487.470638][T29086] kill_fasync+0x256/0x4f0 [ 1487.475243][T29086] lease_break_callback+0x26/0x30 [ 1487.480457][T29086] __break_lease+0x6d5/0x1820 [ 1487.485414][T29086] vfs_truncate+0x26b/0x3b0 [ 1487.490087][T29086] do_sys_truncate+0xdb/0x190 [ 1487.494948][T29086] do_syscall_64+0xf3/0x230 [ 1487.499663][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.505756][T29086] [ 1487.508080][T29086] -> (&f_owner->lock){....}-{2:2} { [ 1487.513407][T29086] INITIAL USE at: [ 1487.517406][T29086] lock_acquire+0x1ed/0x550 [ 1487.523669][T29086] _raw_write_lock_irq+0xd3/0x120 [ 1487.530445][T29086] __f_setown+0x6b/0x380 [ 1487.536447][T29086] generic_setlease+0xc74/0x1550 [ 1487.543126][T29086] fcntl_setlease+0x404/0x540 [ 1487.549583][T29086] do_fcntl+0x69d/0x1a60 [ 1487.555609][T29086] __se_sys_fcntl+0xd2/0x1e0 [ 1487.561969][T29086] do_syscall_64+0xf3/0x230 [ 1487.568254][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.575915][T29086] INITIAL READ USE at: [ 1487.580365][T29086] lock_acquire+0x1ed/0x550 [ 1487.587073][T29086] _raw_read_lock_irqsave+0xdd/0x130 [ 1487.594555][T29086] send_sigio+0x37/0x390 [ 1487.601003][T29086] kill_fasync+0x256/0x4f0 [ 1487.607685][T29086] lease_break_callback+0x26/0x30 [ 1487.614910][T29086] __break_lease+0x6d5/0x1820 [ 1487.621778][T29086] do_dentry_open+0x8d4/0x1460 [ 1487.628739][T29086] vfs_open+0x3e/0x330 [ 1487.635039][T29086] path_openat+0x2c84/0x3590 [ 1487.641833][T29086] do_filp_open+0x235/0x490 [ 1487.648527][T29086] do_sys_openat2+0x13e/0x1d0 [ 1487.655395][T29086] __x64_sys_openat+0x247/0x2a0 [ 1487.662429][T29086] do_syscall_64+0xf3/0x230 [ 1487.669127][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.677242][T29086] } [ 1487.679832][T29086] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1487.688777][T29086] ... acquired at: [ 1487.692669][T29086] lock_acquire+0x1ed/0x550 [ 1487.697369][T29086] _raw_read_lock_irqsave+0xdd/0x130 [ 1487.702852][T29086] send_sigio+0x37/0x390 [ 1487.707327][T29086] kill_fasync+0x256/0x4f0 [ 1487.711965][T29086] lease_break_callback+0x26/0x30 [ 1487.717178][T29086] __break_lease+0x6d5/0x1820 [ 1487.722028][T29086] do_dentry_open+0x8d4/0x1460 [ 1487.726994][T29086] vfs_open+0x3e/0x330 [ 1487.731260][T29086] path_openat+0x2c84/0x3590 [ 1487.736069][T29086] do_filp_open+0x235/0x490 [ 1487.740769][T29086] do_sys_openat2+0x13e/0x1d0 [ 1487.745627][T29086] __x64_sys_openat+0x247/0x2a0 [ 1487.750667][T29086] do_syscall_64+0xf3/0x230 [ 1487.755359][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.761450][T29086] [ 1487.763791][T29086] -> (&new->fa_lock){....}-{2:2} { [ 1487.768940][T29086] INITIAL USE at: [ 1487.772840][T29086] lock_acquire+0x1ed/0x550 [ 1487.778957][T29086] _raw_write_lock_irq+0xd3/0x120 [ 1487.785573][T29086] fasync_remove_entry+0xff/0x1d0 [ 1487.792188][T29086] lease_modify+0x1bd/0x3a0 [ 1487.798268][T29086] locks_remove_file+0x577/0x10c0 [ 1487.804949][T29086] __fput+0x1a6/0x880 [ 1487.810523][T29086] task_work_run+0x24f/0x310 [ 1487.816708][T29086] syscall_exit_to_user_mode+0x168/0x370 [ 1487.823949][T29086] do_syscall_64+0x100/0x230 [ 1487.830116][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.837604][T29086] INITIAL READ USE at: [ 1487.841938][T29086] lock_acquire+0x1ed/0x550 [ 1487.848479][T29086] _raw_read_lock_irqsave+0xdd/0x130 [ 1487.855786][T29086] kill_fasync+0x199/0x4f0 [ 1487.862237][T29086] lease_break_callback+0x26/0x30 [ 1487.869285][T29086] __break_lease+0x6d5/0x1820 [ 1487.875975][T29086] do_dentry_open+0x8d4/0x1460 [ 1487.882766][T29086] vfs_open+0x3e/0x330 [ 1487.888860][T29086] path_openat+0x2c84/0x3590 [ 1487.895488][T29086] do_filp_open+0x235/0x490 [ 1487.902018][T29086] do_sys_openat2+0x13e/0x1d0 [ 1487.908713][T29086] __x64_sys_openat+0x247/0x2a0 [ 1487.915611][T29086] do_syscall_64+0xf3/0x230 [ 1487.922160][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.930089][T29086] } [ 1487.932614][T29086] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1487.941405][T29086] ... acquired at: [ 1487.945241][T29086] lock_acquire+0x1ed/0x550 [ 1487.949945][T29086] _raw_read_lock_irqsave+0xdd/0x130 [ 1487.955434][T29086] kill_fasync+0x199/0x4f0 [ 1487.960040][T29086] mousedev_notify_readers+0x719/0xc80 [ 1487.965691][T29086] mousedev_event+0x5ca/0x1390 [ 1487.970650][T29086] input_handler_events_default+0x107/0x1c0 [ 1487.976760][T29086] input_pass_values+0x286/0x860 [ 1487.981884][T29086] input_event_dispose+0x30f/0x600 [ 1487.987186][T29086] input_handle_event+0xa71/0xbe0 [ 1487.992411][T29086] input_inject_event+0x22f/0x340 [ 1487.997631][T29086] evdev_write+0x5fd/0x790 [ 1488.002234][T29086] vfs_write+0x29c/0xc90 [ 1488.006656][T29086] ksys_write+0x183/0x2b0 [ 1488.011149][T29086] do_syscall_64+0xf3/0x230 [ 1488.015857][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.021959][T29086] [ 1488.024280][T29086] [ 1488.024280][T29086] stack backtrace: [ 1488.030184][T29086] CPU: 1 UID: 0 PID: 29086 Comm: syz.3.4939 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 1488.040951][T29086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1488.051019][T29086] Call Trace: [ 1488.054303][T29086] [ 1488.057279][T29086] dump_stack_lvl+0x241/0x360 [ 1488.061980][T29086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1488.067201][T29086] ? __pfx__printk+0x10/0x10 [ 1488.071809][T29086] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1488.078173][T29086] validate_chain+0x4ebd/0x5920 [ 1488.083062][T29086] ? __pfx_validate_chain+0x10/0x10 [ 1488.088285][T29086] ? __pfx_validate_chain+0x10/0x10 [ 1488.093500][T29086] ? __pfx_validate_chain+0x10/0x10 [ 1488.098718][T29086] ? register_lock_class+0x102/0x980 [ 1488.104025][T29086] ? __pfx_register_lock_class+0x10/0x10 [ 1488.109669][T29086] ? __lock_acquire+0x1384/0x2050 [ 1488.114723][T29086] ? mark_lock+0x9a/0x360 [ 1488.119071][T29086] __lock_acquire+0x1384/0x2050 [ 1488.123942][T29086] lock_acquire+0x1ed/0x550 [ 1488.128468][T29086] ? kill_fasync+0x199/0x4f0 [ 1488.133077][T29086] ? __pfx_lock_acquire+0x10/0x10 [ 1488.138109][T29086] ? __pfx_lock_acquire+0x10/0x10 [ 1488.143143][T29086] _raw_read_lock_irqsave+0xdd/0x130 [ 1488.148457][T29086] ? kill_fasync+0x199/0x4f0 [ 1488.153061][T29086] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1488.159002][T29086] kill_fasync+0x199/0x4f0 [ 1488.163445][T29086] ? kill_fasync+0x54/0x4f0 [ 1488.167968][T29086] mousedev_notify_readers+0x719/0xc80 [ 1488.173449][T29086] ? mousedev_notify_readers+0x2a/0xc80 [ 1488.179016][T29086] mousedev_event+0x5ca/0x1390 [ 1488.183820][T29086] ? __pfx_mousedev_event+0x10/0x10 [ 1488.189035][T29086] input_handler_events_default+0x107/0x1c0 [ 1488.194956][T29086] input_pass_values+0x286/0x860 [ 1488.199897][T29086] ? input_pass_values+0x8f/0x860 [ 1488.204942][T29086] input_event_dispose+0x30f/0x600 [ 1488.210069][T29086] input_handle_event+0xa71/0xbe0 [ 1488.215116][T29086] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1488.220602][T29086] ? __pfx_input_handle_event+0x10/0x10 [ 1488.226169][T29086] input_inject_event+0x22f/0x340 [ 1488.231246][T29086] ? input_inject_event+0xd6/0x340 [ 1488.236381][T29086] evdev_write+0x5fd/0x790 [ 1488.240816][T29086] ? __pfx_evdev_write+0x10/0x10 [ 1488.245767][T29086] ? bpf_lsm_file_permission+0x9/0x10 [ 1488.251253][T29086] ? security_file_permission+0x74/0x280 [ 1488.256900][T29086] ? rw_verify_area+0x1c3/0x6f0 [ 1488.261777][T29086] ? __pfx_evdev_write+0x10/0x10 [ 1488.266724][T29086] vfs_write+0x29c/0xc90 [ 1488.270974][T29086] ? kmem_cache_free+0x1a2/0x420 [ 1488.275937][T29086] ? __pfx_vfs_write+0x10/0x10 [ 1488.280708][T29086] ? __fget_files+0x29/0x470 [ 1488.285313][T29086] ? __fget_files+0x3f3/0x470 [ 1488.290008][T29086] ? __fget_files+0x29/0x470 [ 1488.294635][T29086] ? fdget_pos+0x19a/0x320 [ 1488.299074][T29086] ksys_write+0x183/0x2b0 [ 1488.303411][T29086] ? __pfx_ksys_write+0x10/0x10 [ 1488.308294][T29086] ? do_syscall_64+0x100/0x230 [ 1488.313085][T29086] ? do_syscall_64+0xb6/0x230 [ 1488.317772][T29086] do_syscall_64+0xf3/0x230 [ 1488.322300][T29086] ? clear_bhb_loop+0x35/0x90 [ 1488.327021][T29086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.332959][T29086] RIP: 0033:0x7f0b6db7dff9 [ 1488.337391][T29086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1488.357008][T29086] RSP: 002b:00007f0b6e99e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1488.365440][T29086] RAX: ffffffffffffffda RBX: 00007f0b6dd35f80 RCX: 00007f0b6db7dff9 [ 1488.373423][T29086] RDX: 0000000000000918 RSI: 0000000020000040 RDI: 0000000000000006 [ 1488.381428][T29086] RBP: 00007f0b6dbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1488.389408][T29086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.397384][T29086] R13: 0000000000000000 R14: 00007f0b6dd35f80 R15: 00007f0b6de5fa28 [ 1488.405380][T29086] [ 1488.489881][ T29] audit: type=1326 audit(1729150783.925:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1488.513355][T28552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1488.550686][ T5611] usb 5-1: Using ep0 maxpacket: 16 [ 1488.588453][ T29] audit: type=1326 audit(1729150783.955:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1488.613511][ T29] audit: type=1326 audit(1729150783.955:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1488.771985][ T29] audit: type=1326 audit(1729150783.955:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1488.848326][ T29] audit: type=1326 audit(1729150783.955:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1489.008460][ T29] audit: type=1326 audit(1729150783.955:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1489.148411][ T29] audit: type=1326 audit(1729150783.955:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1489.320723][ T29] audit: type=1326 audit(1729150783.955:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29085 comm="syz.3.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6db7dff9 code=0x7ffc0000 [ 1489.735712][ T1868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.017913][ T1868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.076341][ T1868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.175392][ T1868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.239734][ T5611] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1490.247343][ T5611] usb 5-1: can't read configurations, error -71 [ 1490.257437][ T5464] usb 2-1: 0:2 : does not exist [ 1490.319894][ T1868] bridge_slave_1: left allmulticast mode [ 1490.327159][ T1868] bridge_slave_1: left promiscuous mode [ 1490.341583][ T5464] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1490.350357][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.371593][ T5464] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1490.381220][ T1868] bridge_slave_0: left allmulticast mode [ 1490.386863][ T1868] bridge_slave_0: left promiscuous mode [ 1490.418606][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.435183][ T5464] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1490.571410][ T5464] usb 2-1: USB disconnect, device number 81 [ 1490.758778][ T1868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.769508][ T1868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.779649][ T1868] bond0 (unregistering): Released all slaves [ 1490.961661][ T1868] hsr_slave_0: left promiscuous mode [ 1490.967507][ T1868] hsr_slave_1: left promiscuous mode [ 1490.973796][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.981771][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.992014][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.000851][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.010577][ T1868] veth1_macvtap: left promiscuous mode [ 1491.016694][ T1868] veth0_macvtap: left promiscuous mode [ 1491.022659][ T1868] veth1_vlan: left promiscuous mode [ 1491.027963][ T1868] veth0_vlan: left promiscuous mode [ 1491.194201][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 1491.222965][ T1868] team0 (unregistering): Port device team_slave_0 removed [ 1491.585863][ T1868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.633946][ T1868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.697893][ T1868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.765829][ T1868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.883689][ T1868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.965349][ T1868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.013653][ T1868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.074751][ T1868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.369410][ T1868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.442722][ T1868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.484496][ T1868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.533979][ T1868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.620633][ T1868] bridge_slave_1: left allmulticast mode [ 1492.626343][ T1868] bridge_slave_1: left promiscuous mode [ 1492.641680][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.650359][ T1868] bridge_slave_0: left allmulticast mode [ 1492.656316][ T1868] bridge_slave_0: left promiscuous mode [ 1492.662379][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.672579][ T1868] bridge_slave_1: left allmulticast mode [ 1492.678620][ T1868] bridge_slave_1: left promiscuous mode [ 1492.684255][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.692950][ T1868] bridge_slave_0: left allmulticast mode [ 1492.698898][ T1868] bridge_slave_0: left promiscuous mode [ 1492.704565][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.713496][ T1868] bridge_slave_1: left allmulticast mode [ 1492.719738][ T1868] bridge_slave_1: left promiscuous mode [ 1492.725392][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.733611][ T1868] bridge_slave_0: left allmulticast mode [ 1492.739382][ T1868] bridge_slave_0: left promiscuous mode [ 1492.745018][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.753983][ T1868] bridge_slave_1: left allmulticast mode [ 1492.760127][ T1868] bridge_slave_1: left promiscuous mode [ 1492.765764][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.774141][ T1868] bridge_slave_0: left allmulticast mode [ 1492.779876][ T1868] bridge_slave_0: left promiscuous mode [ 1492.785515][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.143713][ T1868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.155156][ T1868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.165631][ T1868] bond0 (unregistering): Released all slaves [ 1493.177610][ T1868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.192055][ T1868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.202119][ T1868] bond0 (unregistering): Released all slaves [ 1493.214997][ T1868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.224865][ T1868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.234613][ T1868] bond0 (unregistering): Released all slaves [ 1493.246783][ T1868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.258229][ T1868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.270106][ T1868] bond0 (unregistering): Released all slaves [ 1493.591834][ T1868] hsr_slave_0: left promiscuous mode [ 1493.597780][ T1868] hsr_slave_1: left promiscuous mode [ 1493.604375][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.612044][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.622141][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.638445][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.653142][ T1868] hsr_slave_0: left promiscuous mode [ 1493.658934][ T1868] hsr_slave_1: left promiscuous mode [ 1493.664688][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.673253][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.683665][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.691403][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.702667][ T1868] hsr_slave_0: left promiscuous mode [ 1493.710581][ T1868] hsr_slave_1: left promiscuous mode [ 1493.716438][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.724318][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.739557][ T1868] hsr_slave_0: left promiscuous mode [ 1493.745400][ T1868] hsr_slave_1: left promiscuous mode [ 1493.753560][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.762097][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.772416][ T1868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.780162][ T1868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.795643][ T1868] veth1_macvtap: left promiscuous mode [ 1493.801369][ T1868] veth0_macvtap: left promiscuous mode [ 1493.806948][ T1868] veth1_vlan: left promiscuous mode [ 1493.814628][ T1868] veth0_vlan: left promiscuous mode [ 1493.820586][ T1868] veth1_macvtap: left promiscuous mode [ 1493.826123][ T1868] veth0_macvtap: left promiscuous mode [ 1493.834133][ T1868] veth1_vlan: left promiscuous mode [ 1493.843170][ T1868] veth0_vlan: left promiscuous mode [ 1493.851478][ T1868] veth1_macvtap: left promiscuous mode [ 1493.857015][ T1868] veth0_macvtap: left promiscuous mode [ 1493.862958][ T1868] veth1_vlan: left promiscuous mode [ 1493.868492][ T1868] veth0_vlan: left promiscuous mode [ 1494.086410][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 1494.116425][ T1868] team0 (unregistering): Port device team_slave_0 removed [ 1494.299579][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 1494.313401][ T1868] team0 (unregistering): Port device team_slave_0 removed [ 1494.511585][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 1494.523061][ T1868] team0 (unregistering): Port device team_slave_0 removed [ 1494.684150][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 1494.713544][ T1868] team0 (unregistering): Port device team_slave_0 removed [ 1495.629938][ T1868] IPVS: stop unused estimator thread 0...