last executing test programs: 2m12.795160997s ago: executing program 32 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r1, r1, 0x0, 0x40008) syz_io_uring_setup(0x5b6d, &(0x7f0000000180)={0x0, 0x2, 0x10100, 0x3}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e24, 0xf, @local, 0x200}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0xd8, 0x6, 0x8, 0x9}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x9, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6e, "59a978f905af6085ab7f72e53e608e36"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xcb, 0x8, 0xa, 0x5, 0x7}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x468}}, {0xfc, &(0x7f0000000f00)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc04}}, {0x30, &(0x7f0000000440)=@string={0x30, 0x3, "813bb365a4de4b9440acc9d6aa94108d65df7823a7e50ed2dd5f6e0b78257a97f2b61b060000e8c4421fb9bd6cf5"}}]}) syz_usb_control_io(r6, &(0x7f0000000800)={0x18, &(0x7f0000000600)={0x0, 0x2, 0x59, {0x59, 0x11, "116e8b98531d43c827c6fff4690e1c3890415dcc93ca019fa5d5c17620448bb1e8cc7318e8c39d528fe900451ce697122bd2041e7c4cc9fc510c535692af7b830ad94eeedafd3fd7a81fe83ffda78590bc33da1d8bcb3b"}}, &(0x7f0000000c80)={0x0, 0x3, 0x26, @string={0x26, 0x3, "d4c21a38f882b9f09f825f1c01d08f7bd528e768953fced08923f1cb5cdc3eacbb4befb3"}}, &(0x7f0000000680)={0x0, 0xf, 0xde, {0x5, 0xf, 0xde, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6e097fa1ad66fbeafa71151304a7f1a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x6, 0x100}, @generic={0xa7, 0x10, 0x2, "0ab8c8748db39d7f9f084ca855586486f8a7099a05ae49f6c6a428d20d85d093b83db162e49c72f51bbace6e9b083cc10fb21e0adf5b9b0de21cf4adc7d87940d40b4214ba508008c25bc70f8e817b7ad153ef63c4dbb50938338d4c0504feba517f5a0b473d61b4ed2d58e5041f0d478e3a736ba66432ddb5a2ae6163e9ff22758c964618295b560944b88496745f1e84e74670190c0118577b6993a44bfb2a5bb6cd3b"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x85, 0xf00, 0xfffc, [0xc0, 0xc000]}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x3, 0x4, "d6fee32e", "5c0c3ee5"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0xfb, 0x1c, 0x0, 0x5, 0xd7e}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000840)={0x20, 0xf, 0xc7, "4d95bbe3eff02ad4db4137bc44ca6da2c3a74807a71afbaa9ba15f2c91bd95ea2aaf2ededdc0d9704b5f6fc1babbf838da09902b5a9eba9381b0031823f6cbf6d367fcbb0514af7e72b5c55f6c6f502e7666d529fea63a67bef045e4373042ef939335f2da0f54b3196807523faf7e40cf3e6241db29b6c13682686069a5463c7df2f3bf9693a3f3ce24584c738d0f3e4a15743a303ccee6586d62d647740ec7c11647ef42bd417543b91b2770e103aab1560f6e35bcc46e342fb015f4a723810be05875561e54"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0xb6, 0x8, [0x0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xbb}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "509c"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9cce58597188"}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "3c03"}, &(0x7f0000000080)={0x40, 0x1a, 0x2}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x39}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160004000140060700000000000000d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4e1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccfb42b1073520ae", 0xd8}], 0x1}, 0x0) r7 = io_uring_setup(0x1950, &(0x7f00000000c0)={0x0, 0x400}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m10.369033925s ago: executing program 33 (id=35): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)='[&#[!+$\x00', r0) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)="dee74a831afc061d37349cb9ae0412030022cff85c6c7bc31b201b44da51287ebd2c1833ff9b054eb7e8a5bc4ab2969cb230328931deb95ef3fcafb1ce277493f4713b7674c300000007000000000000a783fab7414f325300000000000000000000000000000000000000bd1f26a9e6985448195f376696525f346ab541ca9600000000000000000000c3f7fe6c97d203000000ad478d5c32c3d0a30df5825e172c2564c5cb56e31d992b10eb4ec58b7e6b6eaef9b60d2e96687bfc0b394b2e2c6ce3a79eead85d3517e69fa820", 0xce, r1) 1m53.338051738s ago: executing program 6 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 1m53.04875266s ago: executing program 6 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0) 1m52.597505643s ago: executing program 6 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1m52.141762132s ago: executing program 34 (id=150): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004080), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0xffffffffffffffff) 1m52.098541663s ago: executing program 6 (id=157): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x81, 0x100c050, 0x5, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0xc) lseek(r2, 0x1ff, 0x4) 1m48.83530295s ago: executing program 6 (id=177): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x105102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="cdb6d1667f2c6f3c4df60ce5c47773c6", 0x10) 1m47.891369679s ago: executing program 6 (id=183): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0xa) 1m47.331840343s ago: executing program 35 (id=183): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0xa) 59.65663491s ago: executing program 2 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 59.37646934s ago: executing program 2 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 59.249599015s ago: executing program 2 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 59.013801425s ago: executing program 2 (id=755): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x48}, @l2cap_cid_signaling={{0x44}, [@l2cap_move_chan_cfm={{0x10, 0xe, 0x4}, {0x87a7, 0x9}}, @l2cap_info_rsp={{0xb, 0xf, 0x38}, {0x1, 0x1, "bdba14b177aaa66171dc241204757d39d14ab0a4ce7d8bdf7f2f50d6ce26c277a86fa7630260ba5917fa7ca04be6d7a12a01058d"}}]}}, 0x4d) 55.867697618s ago: executing program 2 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 55.526653756s ago: executing program 2 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 55.164045852s ago: executing program 36 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 52.359252462s ago: executing program 7 (id=793): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 52.115338298s ago: executing program 7 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 51.868534589s ago: executing program 7 (id=795): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, r1, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 51.635318871s ago: executing program 7 (id=798): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x48}, @l2cap_cid_signaling={{0x44}, [@l2cap_move_chan_cfm={{0x10, 0xe, 0x4}, {0x87a7, 0x9}}, @l2cap_info_rsp={{0xb, 0xf, 0x38}, {0x1, 0x1, "bdba14b177aaa66171dc241204757d39d14ab0a4ce7d8bdf7f2f50d6ce26c277a86fa7630260ba5917fa7ca04be6d7a12a01058d"}}]}}, 0x4d) 49.557141914s ago: executing program 7 (id=812): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x80000) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 49.375863413s ago: executing program 7 (id=813): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, r5) 48.828312242s ago: executing program 37 (id=813): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, r5) 42.706989781s ago: executing program 8 (id=866): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8800) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 42.486758389s ago: executing program 8 (id=869): syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8) 41.631353888s ago: executing program 8 (id=875): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003d0007010000000000000000047c2b1cd83edcfed43458cfc802c147"], 0x20}}, 0x4040040) syz_io_uring_setup(0x234, &(0x7f0000000280)={0x0, 0x80f8, 0x10100, 0x0, 0x12c}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) iopl(0x3) 41.319309163s ago: executing program 8 (id=879): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x48}, @l2cap_cid_signaling={{0x44}, [@l2cap_move_chan_cfm={{0x10, 0xe, 0x4}, {0x87a7, 0x9}}, @l2cap_info_rsp={{0xb, 0xf, 0x38}, {0x1, 0x1, "bdba14b177aaa66171dc241204757d39d14ab0a4ce7d8bdf7f2f50d6ce26c277a86fa7630260ba5917fa7ca04be6d7a12a01058d"}}]}}, 0x4d) 38.208728442s ago: executing program 8 (id=897): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700020000000c000880050004000100000008000600f2000000080005", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20044c12}, 0x0) 37.903160992s ago: executing program 8 (id=900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003300)=""/4088, 0xff8}], 0x1}}], 0x1, 0x0, 0x0) 37.882004235s ago: executing program 3 (id=901): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003d0007010000000000000000047c2b1cd83edcfed43458cfc802c147"], 0x20}}, 0x4040040) r2 = syz_io_uring_setup(0x234, &(0x7f0000000280)={0x0, 0x80f8, 0x10100, 0x0, 0x12c}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x10) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) iopl(0x3) 37.342313143s ago: executing program 38 (id=900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003300)=""/4088, 0xff8}], 0x1}}], 0x1, 0x0, 0x0) 37.299031003s ago: executing program 3 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 37.218988725s ago: executing program 3 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 36.831845485s ago: executing program 3 (id=908): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x48}, @l2cap_cid_signaling={{0x44}, [@l2cap_move_chan_cfm={{0x10, 0xe, 0x4}, {0x87a7, 0x9}}, @l2cap_info_rsp={{0xb, 0xf, 0x38}, {0x1, 0x1, "bdba14b177aaa66171dc241204757d39d14ab0a4ce7d8bdf7f2f50d6ce26c277a86fa7630260ba5917fa7ca04be6d7a12a01058d"}}]}}, 0x4d) 33.685647403s ago: executing program 3 (id=928): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003d0007010000000000000000047c2b1cd83edcfed43458cfc802c147"], 0x20}}, 0x4040040) r2 = syz_io_uring_setup(0x234, &(0x7f0000000280)={0x0, 0x80f8, 0x10100, 0x0, 0x12c}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) iopl(0x3) 33.275353855s ago: executing program 3 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0xc096) 32.829620749s ago: executing program 39 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0xc096) 6.591361766s ago: executing program 5 (id=1106): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.71066825s ago: executing program 4 (id=1110): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x8200, 0xa) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f00000000c0)={0x9a0000, 0x101, 0x52e, r1, 0x0, &(0x7f0000000080)={0x9c0902, 0x70e7, '\x00', @value64=0x8000000000000001}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r0, r3, 0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r4, r1, 0xf, 0x10, 0x0, @void, @value=r1}, 0x20) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x100) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000180)) r5 = openat2$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x4800, 0x40, 0x20}, 0x18) ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f0000000280)) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000002c0)={0xfff, 0xe, 0x6, 0x80000000, 0x8001}) sendmsg$NFT_BATCH(r1, &(0x7f00000025c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002580)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x1d88, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d4c, 0x3, 0x0, 0x1, [{0x1718, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf4, 0x1, "2dbfdf818ba546b58379886e55331b40cd7a47b16a91702adb4bc59cd71e25f9e175010d46d1b8fdd06fdffb293bb4f775c7eb7850a8a041e4f0763c0f0affbe8c230d68a354a0611c2dff44c3c64b7ffe353b866d1a4e4d3bce6757b3bd078214fc0e4dee1b21f6f53f690cae5ecc0f677ea1ceb392ec34544490afcb82fe277a34ea20f2b2890fe170e045166b7ee114b8a3d5a09dd407d0ddb6073c38f3adf3877a6bdec2ddeef2183f682e040a42503c7e5b330ed6d19576e3fafb5a88b0f8ecdff066cd0c74c58b794c368ff35ff6d7eb3d8bbdc5f6c916f2e7341e82f7983702f9bcaaebdc3bae468adc9052a7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "65b107d2d88d4a783ae00dbe35ecaacaeb588feb30a36141993cc97f19f9dd1475e9673f1f5433cadfb6f01c0fa1771dc458b95bada8773c1f2ae423cc3b1c92e0f6683c48a4e59cfd867b6d6e0bf9cab6cf3297d74bf6cd09e6b6666339dc3c6ceba9eb66ed4e79a305e3ae2a1bb28921d3805bf96a2391066e1441e06bc768d13f24d2e47ba9808aa41ef0"}, @NFTA_DATA_VALUE={0xa5, 0x1, "e9b348c2dbeb46db0140bcddce0135a563d679359d773e06e14be9a42a93b6a7d05897b759134c8709890b66d3886826504ca4103c407df28ed70332dbd481960c504e9a02818e2ff29a23f68ad446411815da25051f1bcbbbd961e07dd43bc11f26116a574f430fb081442af01ed283b8fd42da5c199770b7d4a2b2ed4eae20b5d712b3b8658b313d125c912415fbe1b990483be2686e3f528727291d6913fd9e"}, @NFTA_DATA_VALUE={0x87, 0x1, "360be0eb332c06cd29f95ca699cb2da567c00a82cf5dece16ce888e8b77fb3358e127e9ed0fb26899550be3d1e007a4791550c9a7f7aa9b7b39c147dd6172ac568a1bacc501494ff22e0c62db268f400e66a3d7c94633c30bdb7747b85bd8e7001e12dfa4d476fd736098d07e923f819451fc507085ccc36702cd0f0c782d846a55d95"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1134, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "7e198081619f5f9ab710116e067893ef921ff3bc69b0a0f7e1b585b15c446ed9ecb97d8e6fa4ef871ee40a36799927433298f900196021ba15ec6f4f38f317fd3e0acee1d8feb62cdfd0ac83ffe345c9b7e05b92be3f4126de295488b0bc7b49121020ee299749b4bd67f77424af4047792cdbd9808911d034a2fef0e33cb683f7f220ffc1dfc3f1c0f3af31e6d4a30d44f0bf90ee51266bdcdf1ebc9c3ce844172c0ec4b54202a5d1710d83455ad8d567ab9e83fd485929e41d526ee60afee57c47de5fb6a7a0b7ade49fa16a2d24375c05fdf96a532d4d77393a8968237f5d77c03c08c4be68"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "62a569b5936a327dceaa5c15acb37f42f585b6f85bb512956572c6ca7d6620920cb636cb8da84c72b73f5c0eeb5f2e2a296309b557896087"}, @NFTA_DATA_VALUE={0xc7, 0x1, "4fff4bf036c6ea176fb5ea22bccf958631612f7f6fd543655df76a84d319612a6a61525cb44f0be7344729d2917fe649748ff34f64b894ef2dcaff18a8f6ec5ab88db092209c5951ed0e69f87e2d430e2e504f313c09836d7421300c0ebc2faf6464707497d8acf572c11106b9df5a34d24c635496c5abc55601d0e1f07a19b1e047ff2daa843886a02795d1fee33d624c04d751e8b060b271384b76a098729d3786a25ae5fd2b1c56a855abea6247832a1a527539c51726099f658425e633ab1fa0bb"}, @NFTA_DATA_VALUE={0x7d, 0x1, "6fe24b5781adb0e9fa177fd50704daee3bff959a425899f948e606e7331c619d79cdeb35ca542ca216d94f45a8965c1e1de5dd2231b4e3a811d8f335009365c698932bf92cb6801d1124e53809b8030ca8cb3e070b29f800bf66044bd7babe22f2aadca370a24175c61cd7c94abb757eb52725de30522e59c1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x69, 0x1, "639bb0dad94e0fccc7d0461306e10f047a93169636c3322ed3c43a0b55ec746cabd745a24f60417f00eb565e649d7746efd3763bbb50c9437404e9a8edd5c2bfbb561f5250eebbb2a96d3212ac227fa1576acbef6c62a949afd5e7c16df2f57196e5d8f6bb"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "e8f5b79b8361de5e8924c5dfec1f797165795e3a4c32e289cd1e8b579a07c20c8f2e3e053380ff46dd90cf3d81efdc37d6adef44d70ed5ff9f4ac5aa77238801426e36e2b9299caae6330612bac4fc040fe35b8137707cecd1f7c4ae77e4f248378db95f94bdbacce4636b8070"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x63, 0x1, "08edd273f5b8357bea80ed11c0b4f000221293a22198d6296022483bea4bf0df9d66241a2bbd6ce659fbc9e81d7ccb1634b83ccba16470e2d91c3b5c15b051a84429b36a9038a64e35a4632da7fa48410c7a849c6ad1f84636b1060bf8d1b8"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0xd8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "1f5015eb81518c2e41d3eef4d78adf0a2c06d2e037221ee88af6e1aab45d1ad9f9f5c8d3a8e89772a3f6b9d07076b9bf6ccc1c08720a0672cfd3"}, @NFTA_DATA_VALUE={0x14, 0x1, "9f0ea1d9ba9ac320b347d9b2c8410b05"}, @NFTA_DATA_VALUE={0x80, 0x1, "d363075a57b6d5b29542052b4378b66d598a48298480dfb0a5f4730bd8d2dd88d546b63924cab393ec24455410f647743dc1c6120bb1065b18b18a3b4636d4062fad1887ab7881bae40e27b55529b90d4a5dd1479c3842584fc842d96bc6c8b0eff8c9ec09a656da6aee1ed3292016b24746ccca794e7b970ef1b3a2"}]}, @NFTA_SET_ELEM_USERDATA={0x67, 0x6, 0x1, 0x0, "634b24aa6e3a3363c830eb14f88ed3bf1220164fd1b3320c0e0e69c22cd723f59170a757098cb22fa609647957efe928fd95e179101fef5fb12cc8b0b642155d2bba4309a6d7ed05e649dde2e58f06c40536948a55e6c7bf97575f7c64ec2e4789cf0b"}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x92, 0x1, "f1eec5fe744a1eb2e5da3e04dbc8fb502b43ec8f2225bef043697d8f51c12a102b3f98bc60d9504d19107c63fe6e32d1d2ac11de8ff7fcac293708f46560190bcdc860391f91d8e2d62b74dc29472d4ab6a079611d669dad0704244419535772b8b4d5f78718f61ee13e7a1c8c607c76b395191f9efcc52b3b78cb78eb15120d4c4ece1d0e9220d94686be555dbf"}, @NFTA_DATA_VALUE={0x6a, 0x1, "6811801e987194638946392cc0b02f3ab0aac113d790a1738a2027dd0e94c2b0261c4156d53e7bc0a61263a5425d6e3b8b474d08a4cfcf31a85d709c4bd3883a503d143d717acc5de98217e301d81656c245f32861e7b1885f347f5014143a78e41df94c7970"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "f6722250778cf913ed013321d00863b7e2dd0048b686c777c622bbfbaaa7c009071b9b89e935bc15165c202af31b7d2838afd0dc12beb90c2cbc507aa6aff6a8bc8374c79b7ba495b843a0ff3ea502ff922fcf62b26d974ab81b3687bad6fcfa1010b1de51fd5023f4e696fc8f55c9ea96"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x390, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x19c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '\xfb]\x00'}]}}}, {0x154, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x128, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "783c6f8dbe96bbf68ad2b6ebb0c5185dae650f6936622b7eafca34ce87187ef861c5947666dd1b418ec025ab21e12cdf21e2754fb53db87ffb857f3d17b471dad6c6c4f56ba489e3fbd874b1e712"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "7a7afb5f59fd5603d6db8ac6ea7ecf0098a1b450cbebf9289cf64b861df4c1662d7dd0de463f8144564aaf3acc26bb50637e50002bd0d80553411f5661304cf4f6d28d28a1edd78671f02653d51342c331ee8fcc74c64eeda112b3d71f519d4aa94995c792e34bc4fea9659c232b411e523adea081b118fc100c3a0534e9f1b4e9029eeca9b8dab545bd38a5b9ac1fd1aa317c747b180eceddce0559242aadbb88a7"}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0xf}, @NFTA_RULE_EXPRESSIONS={0x104, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x60, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x346}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x83ff}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x930}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xb2b1}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2224}, 0x1, 0x0, 0x0, 0x40004806}, 0x444) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000002640)={0xa3, 0x0, &(0x7f0000002600)}) mkdirat(0xffffffffffffffff, &(0x7f00000026c0)='./file0\x00', 0x107) r7 = syz_open_dev$video4linux(&(0x7f0000002700), 0xf, 0x202) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000002740)={0x1, 0x0, 0x0, 0x1, {0x1, 0x6, 0x5, 0x7f}}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000002780)={{0x0, @addr=0x1}, 0x8, 0x5, 0x101}) clock_gettime(0x0, &(0x7f0000002800)={0x0, 0x0}) utimes(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002840)={{r8, r9/1000+60000}, {0x0, 0xea60}}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002880)={0x6, 0x2, 0x605, 0x40, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002900)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000028c0), 0x13f, 0xa}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000002940)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) socket$unix(0x1, 0x5, 0x0) write$binfmt_script(r4, &(0x7f0000002980)={'#! ', './file0', [{0x20, 'counter\x00'}], 0xa, "5c866715f75b5a70a6326ee663d7361cc537aabed69f56e866176d11eeebb7f32275e0ed8927f5216ffc99fb4eaab47767d05c7a2b150f"}, 0x4b) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x8c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x9}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000081) openat$fuse(0xffffff9c, &(0x7f0000002b80), 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002bc0)={0x0, 0x7}, &(0x7f0000002c00)=0x8) openat$ptmx(0xffffff9c, &(0x7f0000002c40), 0x88280, 0x0) 5.331293724s ago: executing program 4 (id=1114): unshare(0x4a000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x8, 0x5, &(0x7f0000000000)={0xd, "4c07d50dbc8c9a0e7f2361788f1965b737e1f720034e0c8e38a490313860889a32"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c00000009060101000000000000000002000004050001"], 0x2c}, 0x1, 0x0, 0x0, 0x10000802}, 0x24000804) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x24004000) 5.050941845s ago: executing program 9 (id=1116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 4.68145352s ago: executing program 5 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) add_key$user(0x0, &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740), 0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'pimreg1\x00', 0x7101}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 4.663204206s ago: executing program 9 (id=1118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) pselect6(0x40, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3, 0x3, 0xa, 0x3ff, 0x1}, 0x0, &(0x7f0000000300)={0x9, 0x2, 0x2, 0xffff, 0x0, 0xe, 0x7, 0x9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}}, 0x0) 3.731153186s ago: executing program 9 (id=1123): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0xf29, 0x10, [0x7, 0x8, 0x4e, 0x80000000], &(0x7f0000000080)=[0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe2, 0x95, 0xf1, 0x20, 0xd46, 0x78, 0x8292, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x1, 0x45, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a010000000000000007006800", @ANYRES32=r2, @ANYBLOB="000000000120000024001a8009000100766c616e0000000014000480100003800c"], 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 3.543323209s ago: executing program 5 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0xc6}}, {@allow_other}], [{@appraise_type}, {@hash}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@appraise_type}]}}, 0x1, 0x0, &(0x7f00000002c0)="4d0d29b1d7f2c1a4d2e5e95344aa2d1a5e4643d909bbcd98414edf76798b926546c710f6c4c8635075c02d7f62ecad08fd10024c6c440ada6f2e82c723db1ff62de00a352e10142a65e2bc06769189285b1ff461c7dce12c0052a278f1691740b1c523914c15aa15fbc566eb727011968ec836a33ba808a3ac63b4b402e121c4b6fece4a140ce768d95669fbce0af5e670a170901a2ee3f6c2dc5d1d198bfbdbed176ef3012a7245537f096af57a83d0c9d2693762e4ff91348e49c680") openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2912dd7c96480496, 0x0, 0x2}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004700)=@delpolicy={0x50, 0x14, 0x1, 0x70bd2a, 0x25dfdbff, {{@in=@multicast2, @in=@empty, 0x4e21, 0x0, 0x4e22, 0x5, 0x0, 0x0, 0x80, 0x89}, 0x1, 0x1}}, 0x50}}, 0x28010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3.352094878s ago: executing program 1 (id=1125): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x501200) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd79e, 0x6}}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) r2 = dup2(0xffffffffffffffff, r0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x1, {0xa, 0x4e20, 0xa011, @empty, 0x3}, r4}}, 0x38) get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0x5, &(0x7f0000ffc000/0x4000)=nil, 0xa) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000003c0)={0x0, 0x2, r1, 0x6}) write$P9_RLOPEN(r1, &(0x7f0000000400)={0x18, 0xd, 0x1, {{0x2, 0x2, 0x3}, 0x5}}, 0x18) (async) write$P9_RLOPEN(r1, &(0x7f0000000400)={0x18, 0xd, 0x1, {{0x2, 0x2, 0x3}, 0x5}}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x5, 0x1, 0x10000}, {0x0, 0x80, 0x69}, {0x8000, 0x0, 0x7, 0x4dd}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) openat$tun(0xffffff9c, &(0x7f00000004c0), 0x84000, 0x0) (async) openat$tun(0xffffff9c, &(0x7f00000004c0), 0x84000, 0x0) close_range(r1, r5, 0x2) close_range(r5, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r4, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x2, @empty, 0x3}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r4, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x2, @empty, 0x3}}}, 0x118) sync() (async) sync() ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x268}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000680)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) readahead(r7, 0x577d, 0x788aed1a) (async) readahead(r7, 0x577d, 0x788aed1a) openat$snapshot(0xffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000780)={0x10, 0x9e2d, 0x2b}) (async) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000780)={0x10, 0x9e2d, 0x2b}) write$binfmt_elf32(r0, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x4, 0x3, 0x2, 0x9, 0x3, 0x6, 0x9, 0x1ed, 0x34, 0x39b, 0xfffffff7, 0x3, 0x20, 0x2, 0xfffc, 0x5, 0xffff}, [{0x6, 0x8, 0x8000, 0x7, 0x4, 0x8, 0x3b6b}, {0x7, 0x7ff, 0xffff, 0x94, 0x6, 0x8, 0x8b03, 0xffffff80}], "841902b30d710539feb9f5c14656e56a67e260c6ce3ce49595b6bdbb4c0f594ef38699e9109379650b5593e01ce6de0e6b01f290904d089276e1a65a66e8f04939d937f6b8518c5d078120af03cfa2ba65d74f788684ffed4e1930387634aa87fbd94e7619635437825c6c4e00bd896004ba5be0f0ce5a50c1f6f071cf63e428abcb9281fb7a0c6aa0233b5ae03ce0b43e5a73474281bbd7986a15604f7edd6cc819bcffae5a372fe66d598f9cf74b1a31f79f43db4ddf8a6fdb0fdabd0fb6fb3baf14648633d429d2265e6178632dcf22049d2c7a599d3834418863a0a30db2aafc85516c7090e59e673b2373d1ff160f11998085f1fe1c00d32a5a", ['\x00', '\x00']}, 0x370) (async) write$binfmt_elf32(r0, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x4, 0x3, 0x2, 0x9, 0x3, 0x6, 0x9, 0x1ed, 0x34, 0x39b, 0xfffffff7, 0x3, 0x20, 0x2, 0xfffc, 0x5, 0xffff}, [{0x6, 0x8, 0x8000, 0x7, 0x4, 0x8, 0x3b6b}, {0x7, 0x7ff, 0xffff, 0x94, 0x6, 0x8, 0x8b03, 0xffffff80}], "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", ['\x00', '\x00']}, 0x370) openat$ppp(0xffffff9c, &(0x7f0000000b40), 0x4000, 0x0) (async) openat$ppp(0xffffff9c, &(0x7f0000000b40), 0x4000, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000b80)={"07984876aeeed040f8a8675336cdf37d6d6d88989d76550220ee9b8f2831fba6", r2, 0xffffffffffffffff}) fcntl$getflags(r8, 0xb) 3.087174354s ago: executing program 5 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x2, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000027c0)="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", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0xc96a, {0x8000000000000000, 0x0, 0x0, {0x6, 0xffffffffffffa635, 0x3, 0x5, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x4, 0x0, 0x2000, 0x0, r3, 0x0, 0x3, 0x20006}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff, 0x100) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r5 = io_uring_setup(0x678d, &(0x7f0000000300)={0x0, 0x44e9, 0x400, 0x1, 0xc9}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/126, 0x7e}], 0x0, 0x1}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, &(0x7f00000021c0)="8ce31ca958757ecc8553e0d82078f6d507fd36d0b0531baedeeba155eec7eec85861af70c804ca0be895d407b6e809ee04760da02e5b5c1c2585c276f931de35ebf71460a43407aa3e8fa575cd98a0", 0x4f, 0x44, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c13121d", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501", @ANYRES64=r4, @ANYBLOB="fda10bd0b8213ea4469614986421cd345de3d09a44aa5207e9298ed0dc34781b05817e44efe278ca698647068332de46e0509f154155b9ba6920eed8a628f00fc7d09fbb9b39bf2f13ef9ec48343ecca0f67d48725db433a749d190646b0e1e61a52f90998ee5883a4514b3c55cfbfc8771164d0581df18bae55de70f971dbf78e0424b71266d7b322d074f1715f2a41ec07ff8ea990904448b6c87e2ffa8fe76918b8aff713e013381a8cc6f8d13a5fe5"], 0x84}}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x4e29, 0x12b1, 0xa, 0x10}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1}, {0x2, 0x40000000, 0x0, 0xff}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in=@private, 0xfffffffe, 0x4, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg$inet6(r7, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0}}], 0x1, 0x40040d4) sendto$inet6(r7, &(0x7f0000000100)="70e6f8a3659f4e9baf5e0eab3b7faa439bcd29336d501a2a656e9297925ba9347bf6202050f21a47edaa1db183ba95ca6ee0dae9bcac11699a8821605d0fd97b6cade2d97525590829f57148e6645ca6c4475f6ded42ff21cd2d7d6ebcfd482a044396d113f85122ef6ab7affbffbe9eae8d7439d2732ab46a2bb616606f9c147f841b0c5866707b9f5cd40281cfc19b589470ece1d088bcfa65a7c8fc79f7ec1653b8778d0aa81e25a80f203b5450efe486811d08ddcd827e812a0fcd4869a9cc9fbb5e49b990275efc6cab5b4d64598b5b649d9f60cba168ae71", 0xdb, 0x40040005, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7c}, 0x1c) 3.08694024s ago: executing program 4 (id=1128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 2.791713519s ago: executing program 4 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x8800) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 2.687015496s ago: executing program 4 (id=1132): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x53, 0x1, 0x2, "0000000000080005000000000042d3000700210200", 0x32314d48}) 2.527427693s ago: executing program 4 (id=1133): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023600020000000009049c00030103510009050a00000000000009050313000000000009010000000000000009"], 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, "8e6d90ca"}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80}], 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(r3, 0x0, 0x0, 0x6, 0x5, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.082853972s ago: executing program 5 (id=1135): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x100, 0xe2, 0x0, 0x0, 0x9, 0x6, 0x0, 0x800, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) pivot_root(0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0xa, "9122"}, @local=@item_012={0x1, 0x2, 0xa, "fc"}]}}, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x100, 0xe2, 0x0, 0x0, 0x9, 0x6, 0x0, 0x800, 0x0, 0x0}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) pivot_root(0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0xa, "9122"}, @local=@item_012={0x1, 0x2, 0xa, "fc"}]}}, 0x0}, 0x0) (async) 2.08233326s ago: executing program 1 (id=1136): syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8) 2.047131292s ago: executing program 0 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.900046545s ago: executing program 0 (id=1138): r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r1, &(0x7f0000000240)={0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) 1.74339224s ago: executing program 0 (id=1139): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x12) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) iopl(0x3) 1.743185095s ago: executing program 9 (id=1140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 1.541968209s ago: executing program 1 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x2400}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) 1.491811384s ago: executing program 9 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) (fail_nth: 12) 1.490284627s ago: executing program 0 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x8800) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.287379947s ago: executing program 1 (id=1144): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x8, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7800, 0x20, 0x9, 0x38ea, {{0xa, 0x4, 0x1, 0x1d, 0x28, 0x66, 0x0, 0xf7, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x14, 0xbc, 0x0, 0x8, [0xfffffffa, 0x8, 0x3, 0x3]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x58, 0x9a, 0x5, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x728, 0x80000000, 0x4ba}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev, @multicast1}, &(0x7f00000004c0)=0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1.26077098s ago: executing program 0 (id=1145): clock_gettime(0x0, 0x0) syz_emit_vhci(&(0x7f0000001c40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0x4, 0xc8, 0xff}}}}, 0xa) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0x87, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x1, 0xb, 0x1, {0x22, 0xec0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2a, 0x2, 0x7}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x8, 0x0, 0xbf, 0x1}, 0x13a, &(0x7f0000000100)={0x5, 0xf, 0x13a, 0x5, [@generic={0x5b, 0x10, 0x1, "2a101a7c679aaa5aaf616f76b4f481102a020dc9853fdaddffcb9e62267e51bb6eda5159444508cb85429493bce8f616f0d24b36285ae604fd7854f525af6bec9ea63dc82c44beb58100dffff730e4c6963e39db8ddca8c7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xa, 0x5, 0x34}, @generic={0xbe, 0x10, 0x0, "a6774ed335aa0c2b410e10368b258cfaea28da8971025ef0e03e154fd98f87f3f95cb98132ecc4a736165e9226a1d915c474bc9fb2a0b0bc83d55e9965e9da7eab7aecb8faf5d9231c147467f157985585f28fb4684c0c22082d87951880c43ef5d08d344d18dd1d087062b4fc8da2b74a55a69e421f09921e70288ece589d78a92994dbb18d6466656f28a0b8f65c455b30abe33d7c2d46c3b24970f10c848638cf0d1b04d5c8e72a3a6d5949cf23f6021aad85e45821f667ca67"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xae, 0xa5, 0xa59, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x6, 0x9}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2e72}}, {0x41, &(0x7f00000003c0)=@string={0x41, 0x3, "db398ee5bbc618c85fcdea9c6c212c0a57c39dee7f3d7e62d01314b2ee3fe6ce66f991168f7f98195817e92f6d620488adb308dc11d1db33702adde2359d7e"}}, {0x6f, &(0x7f0000000440)=@string={0x6f, 0x3, "c3d76c85e1bfa1904d954e0df814e76c33629300cf536bceca62378506ae38993c263bdbc173b9cc51f20d40d851f3eefb17e88b16f954598efebdac94d6feb14a25a527d9e0d809c88f46f421c52887b19a057c0e0b198a89ef32a450fd38b248d233b84ecfb3754dfa6c4afc"}}, {0x99, &(0x7f00000004c0)=@string={0x99, 0x3, "25ef1c49e932e081b246aca95bcee77c7da048f98afc375bd155ce33ee6cc41b5fd9b7f0e6cb66281bf01bab2dbbd590761b8fa73c20589c5a85160a465c352da011906aad4f5feec05a4b078475cbdedca1da43f68ffb627e09f6ef402490c8f5e3efc86863ba21f05a1347e3cef6efae72bfcd4cd05f0717c66f08c65be2782f87153ddeb945a0dd21c9065a802ae407853f9b6cebf3"}}, {0x97, &(0x7f0000000580)=@string={0x97, 0x3, "0d56a94d496ee3d29fe0a69c6edd95eb0e4426b4957fc57689822d5d88d85f1b73ac55dbd8db8b7ef68f2aea57f71b57fd6edab312dd653a1668cdf5ef1444e95cf141fe8df133fbe805915da7c7b860baf814e6e81e5a2b148aec3eebbf4707478e59e61553c2e1ed239ddbc8c4e774c7001edd29b35483af585b803aa9a3f2058b7acab9f9cd8fbd3d46a84cddda546cbe79df1f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x468}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xffe0, 0x9}, {0xc, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r3 = socket$inet(0x2, 0x3, 0x8d) fcntl$getflags(r3, 0x401) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$unix(r5, &(0x7f0000000040)=@abs={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000100)=@abs={0x1}, 0x6e) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) 917.843651ms ago: executing program 1 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0xffffffffffffff4b, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) (fail_nth: 19) 130.385181ms ago: executing program 0 (id=1147): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7fffffff, 0x501001) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x40280, 0x0) renameat2(r2, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00', 0x1) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80200, 0x482) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x102b82, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) r8 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='\x00\x00\a\x00\x00\x00\x00\x00\x00', 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a38d", 0xffffff4b) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r10, 0x541b, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000001c0)={r12}, 0x8) 51.400026ms ago: executing program 5 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 11.946372ms ago: executing program 1 (id=1149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) add_key$user(0x0, &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740), 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'pimreg1\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 0s ago: executing program 9 (id=1150): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) ioctl$FS_IOC_GETFSMAP(r1, 0x4c07, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x202) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000001c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@private0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, 0x0, &(0x7f0000000340)}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xbb, 0x7, 0x4}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000080)=@arm64={0xb, 0x1, 0x6, '\x00', 0x100002}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300020c00000027bd7000000000000300060000000000020000006401010100000000000000000200010000000000000006fd00000020030005000000000002000000640101010000000000000000020008000800000034000000000000007b371537d15a3357ba6d7e27f8f66bf7179698028d1c7934be014984170bb77861305861f1eac7f1aef2acf4243e029d9d1fe0cbf175a061eae85257e4e8023a9b96a49a314f1fcca30b36fee22d"], 0x60}, 0x1, 0x7}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0xffff7fff, 0x7fffffff, 0x32314d54, 0x34565348, 0x2, [{0x0, 0x7fffffff}, {0x67, 0xc0000000}, {0x86, 0x101}, {0x8, 0x3ff}, {0x101, 0x6}, {0x6, 0x579}, {0x5, 0xb}, {0x7, 0x9}], 0x4, 0x6c, 0x3, 0x1, 0x3}}) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d000000002400028005000300000000000800014000000000080044400000000008000240000000030900010073797a30"], 0xd4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff, 0xd) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="10005a801c001e800500060000000000"], 0x2c}}, 0x24004010) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0) kernel console output (not intermixed with test programs): Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.982421][ T6601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.991433][ T6601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.000491][ T6601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.011356][ T6784] bridge0: port 1(syz_tun) entered blocking state [ 115.019374][ T6784] bridge0: port 1(syz_tun) entered disabled state [ 115.028602][ T6784] syz_tun: entered allmulticast mode [ 115.038937][ T6784] syz_tun: entered promiscuous mode [ 115.176197][ T5883] usb 6-1: USB disconnect, device number 5 [ 115.377090][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.402700][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.501310][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.520730][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.689380][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.009804][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.075399][ T6825] bridge0: port 3(syz_tun) entered blocking state [ 116.095998][ T6825] bridge0: port 3(syz_tun) entered disabled state [ 116.096231][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.112951][ T6825] syz_tun: entered allmulticast mode [ 116.134286][ T6825] syz_tun: entered promiscuous mode [ 116.161601][ T6825] bridge0: port 3(syz_tun) entered blocking state [ 116.165104][ T5882] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.168236][ T6825] bridge0: port 3(syz_tun) entered forwarding state [ 116.650661][ T5882] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.650723][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.650749][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.650769][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.651704][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.651731][ T5882] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.651751][ T5882] usb 6-1: Manufacturer: syz [ 116.653888][ T5882] usb 6-1: config 0 descriptor?? [ 116.805373][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.050114][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.083590][ T5882] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 117.095710][ T5882] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 117.128430][ T5882] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 117.209289][ T29] audit: type=1326 audit(1737436690.211:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.8.267" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0 [ 117.785365][ T5901] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.958179][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.982340][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.023542][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.097337][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.114506][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.124396][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.159954][ T5901] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.184547][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.189788][ T5901] usb 8-1: config 0 descriptor?? [ 118.446481][ T5901] usbhid 8-1:0.0: can't add hid device: -71 [ 118.452556][ T5901] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 118.510096][ T5901] usb 8-1: USB disconnect, device number 2 [ 118.726811][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.945513][ T5901] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.077073][ T9] usb 6-1: USB disconnect, device number 6 [ 119.126713][ T5901] usb 8-1: Using ep0 maxpacket: 16 [ 119.135086][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.159891][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.160685][ T29] audit: type=1326 audit(1737436692.161:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.8.290" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0 [ 119.181751][ T5901] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 119.192514][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.281575][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.312966][ T5901] usb 8-1: config 0 descriptor?? [ 119.739345][ T5901] kye 0003:0458:5016.0007: control desc unexpectedly large [ 119.778018][ T5901] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0007/input/input7 [ 119.822854][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.850367][ T5901] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0007/input/input8 [ 119.944611][ T5901] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 120.083595][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 120.165266][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.181881][ T5885] usb 8-1: USB disconnect, device number 3 [ 120.585875][ T5901] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 120.808712][ T5901] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 120.834957][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.865037][ T5901] usb 9-1: Product: syz [ 120.869276][ T5901] usb 9-1: Manufacturer: syz [ 120.884640][ T5901] usb 9-1: SerialNumber: syz [ 120.912638][ T5901] usb 9-1: config 0 descriptor?? [ 121.163297][ T6997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.171926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.205819][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.235882][ T25] usb 9-1: USB disconnect, device number 2 [ 121.296780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.224960][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 122.251376][ T5901] net_ratelimit: 4 callbacks suppressed [ 122.251396][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.406782][ T9] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 122.416824][ T9] usb 9-1: config 0 has no interface number 0 [ 122.445561][ T9] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 120, changing to 4 [ 122.485216][ T9] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12288, setting to 1023 [ 122.513202][ T9] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 122.534973][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.561297][ T9] usb 9-1: config 0 descriptor?? [ 122.588141][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input9 [ 122.915575][ T9] usb 9-1: USB disconnect, device number 3 [ 123.212351][ T7071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.286468][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.425005][ T25] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 123.611041][ T25] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.630653][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.664254][ T25] usb 8-1: Product: syz [ 123.678115][ T25] usb 8-1: Manufacturer: syz [ 123.697928][ T25] usb 8-1: SerialNumber: syz [ 123.725981][ T25] usb 8-1: config 0 descriptor?? [ 123.806197][ T7096] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 123.984080][ T25] usb 8-1: USB disconnect, device number 4 [ 124.209026][ T7117] vlan2: entered promiscuous mode [ 124.225075][ T7117] vlan2: entered allmulticast mode [ 124.355128][ T29] audit: type=1326 audit(1737436697.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.5.356" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 125.773058][ T7184] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 126.074146][ T29] audit: type=1326 audit(1737436699.071:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.5.383" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 127.627400][ T29] audit: type=1326 audit(1737436700.621:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.410" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 127.859089][ T7282] binder: BINDER_SET_CONTEXT_MGR already set [ 127.889541][ T7282] binder: 7280:7282 ioctl 4018620d 200001c0 returned -16 [ 128.666072][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.301842][ T29] audit: type=1326 audit(1737436702.301:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.438" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 129.696830][ T7369] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 130.577846][ T7407] bridge0: port 3(syz_tun) entered blocking state [ 130.586071][ T7407] bridge0: port 3(syz_tun) entered disabled state [ 130.609976][ T7407] syz_tun: entered allmulticast mode [ 130.616775][ T7407] syz_tun: entered promiscuous mode [ 130.655421][ T7407] bridge0: port 3(syz_tun) entered blocking state [ 130.662017][ T7407] bridge0: port 3(syz_tun) entered forwarding state [ 131.166689][ T7432] binder: BINDER_SET_CONTEXT_MGR already set [ 131.172844][ T7432] binder: 7428:7432 ioctl 4018620d 200001c0 returned -16 [ 131.443283][ T7445] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.508093][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.471'. [ 131.567774][ T7450] netlink: 'syz.7.473': attribute type 10 has an invalid length. [ 131.569251][ T12] bond0: (slave bond_slave_0): interface is now down [ 131.639014][ T12] bond0: (slave bond_slave_1): interface is now down [ 131.651974][ T7450] bridge0: port 3(syz_tun) entered disabled state [ 131.702147][ T12] bond0: (slave bond_slave_0): interface is now down [ 131.709842][ T7450] syz_tun: left allmulticast mode [ 131.722163][ T12] bond0: (slave bond_slave_1): interface is now down [ 131.735381][ T7450] bridge0: port 3(syz_tun) entered disabled state [ 131.773272][ T7450] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.784918][ T12] bond0: (slave bond_slave_0): interface is now down [ 131.800233][ T12] bond0: (slave bond_slave_1): interface is now down [ 131.837825][ T12] bond0: (slave syz_tun): interface is now down [ 131.878850][ T12] bond0: now running without any active interface! [ 133.450284][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.505'. [ 133.459908][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.484913][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.589530][ T7590] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 135.459567][ T7630] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 136.275963][ T5882] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 136.458281][ T5882] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 136.498838][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.540040][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.560470][ T5882] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 136.625274][ T5882] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 136.644392][ T5882] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 136.653557][ T5882] usb 9-1: Manufacturer: syz [ 136.674151][ T5882] usb 9-1: config 0 descriptor?? [ 137.122942][ T5882] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 137.147598][ T5882] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 137.200380][ T7710] netlink: 'syz.3.568': attribute type 10 has an invalid length. [ 137.206360][ T5882] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 137.235182][ T7710] syz_tun: left allmulticast mode [ 137.253245][ T7710] bridge0: port 3(syz_tun) entered disabled state [ 137.313494][ T7710] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.478412][ T7767] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 138.491025][ T7767] syz_tun: left allmulticast mode [ 138.508495][ T7767] bridge0: port 1(syz_tun) entered disabled state [ 138.529296][ T7767] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.802966][ T7782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 138.820459][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'. [ 138.831250][ T7782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 138.846928][ T7782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 139.206931][ T5885] usb 9-1: USB disconnect, device number 4 [ 140.139001][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.600'. [ 140.575783][ T973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.727179][ T973] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.754431][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.794920][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.808640][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.855203][ T973] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.870225][ T973] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.884989][ T973] usb 4-1: Manufacturer: syz [ 140.911162][ T973] usb 4-1: config 0 descriptor?? [ 141.345255][ T973] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 141.375145][ T973] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 141.409627][ T973] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 141.775796][ T973] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.019072][ T973] usb 6-1: Using ep0 maxpacket: 8 [ 142.049984][ T973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.094685][ T973] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.127235][ T973] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 142.169453][ T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.215386][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.263448][ T973] usb 6-1: Product: syz [ 142.286623][ T973] usb 6-1: Manufacturer: syz [ 142.324430][ T973] usb 6-1: SerialNumber: syz [ 142.350183][ T7866] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 142.426182][ T973] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.677349][ T5901] usb 6-1: USB disconnect, device number 7 [ 143.030941][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.436235][ T5891] usb 4-1: USB disconnect, device number 7 [ 144.170349][ T7779] Set syz1 is full, maxelem 65536 reached [ 144.749740][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.978169][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.014845][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.032390][ T29] audit: type=1326 audit(1737436718.031:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.647" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 145.049493][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.132177][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.195509][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.224897][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.253397][ T9] usb 3-1: Manufacturer: syz [ 145.286196][ T9] usb 3-1: config 0 descriptor?? [ 145.747501][ T9] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 145.764200][ T9] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 145.800638][ T9] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 147.736922][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 147.808109][ T973] usb 3-1: USB disconnect, device number 10 [ 148.305310][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 148.635007][ T973] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.865172][ T973] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.876201][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.915488][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.916445][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.690'. [ 148.925789][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.998344][ T973] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 149.029596][ T973] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 149.045784][ T973] usb 4-1: Manufacturer: syz [ 149.062009][ T973] usb 4-1: config 0 descriptor?? [ 149.502760][ T973] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 149.537715][ T973] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 149.566496][ T973] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 149.912788][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.7.702'. [ 150.084400][ T7994] Set syz1 is full, maxelem 65536 reached [ 150.276232][ T8167] xt_TCPMSS: Only works on TCP SYN packets [ 150.544979][ T973] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 150.713698][ T973] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 150.735306][ T973] usb 6-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 150.761205][ T973] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 150.792049][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.844953][ T5883] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 151.025360][ T5883] usb 8-1: device descriptor read/64, error -71 [ 151.071152][ T8167] af_packet: tpacket_rcv: packet too big, clamped from 546 to 4294967286. macoff=82 [ 151.096955][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'. [ 151.275045][ T5883] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 151.425524][ T5883] usb 8-1: device descriptor read/64, error -71 [ 151.461642][ T9] usb 4-1: USB disconnect, device number 8 [ 151.565360][ T5883] usb usb8-port1: attempt power cycle [ 151.915058][ T5883] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 151.955676][ T5883] usb 8-1: device descriptor read/8, error -71 [ 152.195248][ T5883] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 152.236866][ T5883] usb 8-1: device descriptor read/8, error -71 [ 152.355406][ T5883] usb usb8-port1: unable to enumerate USB device [ 152.847162][ T5891] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 153.010537][ T5891] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.031671][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.069914][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.098077][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.142045][ T5891] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.151680][ T5891] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.174323][ T5891] usb 9-1: Manufacturer: syz [ 153.193299][ T5891] usb 9-1: config 0 descriptor?? [ 153.326122][ T973] usb 6-1: USB disconnect, device number 8 [ 153.613764][ T5891] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 153.653849][ T5891] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 153.695179][ T5891] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 154.034992][ T5891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.204932][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 154.217432][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 154.247803][ T5891] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 154.299667][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.322759][ T5891] usb 4-1: Product: syz [ 154.337131][ T5891] usb 4-1: Manufacturer: syz [ 154.341801][ T5891] usb 4-1: SerialNumber: syz [ 154.451878][ T5891] usb 4-1: config 0 descriptor?? [ 154.655120][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.675644][ T8351] Set syz1 is full, maxelem 65536 reached [ 154.834916][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 154.843949][ T9] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 154.854445][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.862923][ T9] usb 3-1: Product: syz [ 154.870042][ T9] usb 3-1: Manufacturer: syz [ 154.874683][ T9] usb 3-1: SerialNumber: syz [ 154.885719][ T9] usb 3-1: config 0 descriptor?? [ 154.908338][ T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 155.109437][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.128165][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.211310][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 155.220458][ T5836] Bluetooth: Wrong link type (-22) [ 155.514519][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.761'. [ 155.635692][ T9] usb 9-1: USB disconnect, device number 5 [ 156.724247][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.775'. [ 156.812320][ T8] usb 4-1: USB disconnect, device number 9 [ 157.195130][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 157.387898][ T9] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 157.404202][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.436838][ T5901] usb 3-1: USB disconnect, device number 11 [ 157.469114][ T9] usb 8-1: config 0 has no interface number 0 [ 157.507937][ T9] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 157.560218][ T9] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.614746][ T9] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 157.623887][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.642773][ T5849] bond0: (slave syz_tun): Releasing backup interface [ 157.679069][ T9] usb 8-1: Product: syz [ 157.694690][ T9] usb 8-1: Manufacturer: syz [ 157.719897][ T9] usb 8-1: SerialNumber: syz [ 157.730594][ T9] usb 8-1: config 0 descriptor?? [ 158.094902][ T5883] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 158.234712][ T8449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.776'. [ 158.263416][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.7.776'. [ 158.278797][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 158.290885][ T5883] usb 9-1: config 0 has an invalid interface number: 247 but max is 0 [ 158.310046][ T8449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.776'. [ 158.329763][ T5883] usb 9-1: config 0 has no interface number 0 [ 158.349784][ T5883] usb 9-1: New USB device found, idVendor=8e2d, idProduct=4e08, bcdDevice=df.dc [ 158.375059][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.391541][ T5883] usb 9-1: Product: syz [ 158.409008][ T5883] usb 9-1: Manufacturer: syz [ 158.454893][ T5901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.468529][ T5883] usb 9-1: SerialNumber: syz [ 158.502176][ T5883] usb 9-1: config 0 descriptor?? [ 158.506645][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.566087][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.641788][ T5901] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 158.675335][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.714014][ T5901] usb 4-1: Product: syz [ 158.735546][ T5901] usb 4-1: Manufacturer: syz [ 158.740207][ T5901] usb 4-1: SerialNumber: syz [ 158.771162][ T5883] usb-storage 9-1:0.247: USB Mass Storage device detected [ 158.791386][ T5901] r8152-cfgselector 4-1: Unknown version 0x0000 [ 158.814966][ T5901] r8152-cfgselector 4-1: config 0 descriptor?? [ 158.840223][ T5883] usb 9-1: USB disconnect, device number 6 [ 158.921936][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.935706][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.949393][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.974689][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.996067][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.016665][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.142693][ T5901] r8152-cfgselector 4-1: Unknown version 0x0000 [ 159.180794][ T5901] r8152-cfgselector 4-1: bad CDC descriptors [ 159.212949][ T5901] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 159.533394][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 159.889701][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.906704][ T5891] usb 8-1: USB disconnect, device number 9 [ 159.939056][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.954117][ T8497] bridge_slave_0: entered allmulticast mode [ 159.964160][ T8497] bridge_slave_0: entered promiscuous mode [ 159.980880][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.992830][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.002727][ T8497] bridge_slave_1: entered allmulticast mode [ 160.036263][ T8497] bridge_slave_1: entered promiscuous mode [ 160.121392][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.127551][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.790'. [ 160.162525][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.194920][ T5839] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 160.215059][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.790'. [ 160.224551][ T8524] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 160.269570][ T8497] team0: Port device team_slave_0 added [ 160.297821][ T8497] team0: Port device team_slave_1 added [ 160.412945][ T5839] usb 9-1: Using ep0 maxpacket: 16 [ 160.423441][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.436521][ T5839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 160.451197][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.495037][ T5839] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 160.504164][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.538963][ T5839] usb 9-1: Product: syz [ 160.543740][ T5839] usb 9-1: Manufacturer: syz [ 160.559958][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.595269][ T5839] usb 9-1: SerialNumber: syz [ 160.602484][ T5839] usb 9-1: config 0 descriptor?? [ 160.617134][ T5839] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 160.663194][ T5839] usb 9-1: Detected FT232R [ 160.669639][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.703372][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.784870][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.820391][ T5839] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 160.940270][ T8497] hsr_slave_0: entered promiscuous mode [ 161.025216][ T8497] hsr_slave_1: entered promiscuous mode [ 161.045774][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.048975][ T5839] ftdi_sio 9-1:0.0: GPIO initialisation failed: -5 [ 161.074249][ T8497] Cannot create hsr debugfs directory [ 161.114343][ T5839] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.135113][ T5831] Bluetooth: hci1: command tx timeout [ 161.283524][ T5839] usb 9-1: USB disconnect, device number 7 [ 161.321851][ T5839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.372643][ T5839] ftdi_sio 9-1:0.0: device disconnected [ 161.382319][ T8423] Set syz1 is full, maxelem 65536 reached [ 161.740749][ T8497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 161.836776][ T8497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 161.886144][ T8497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 161.955036][ T8497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 162.044941][ T5883] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 162.219864][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.235546][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 162.251389][ T5883] usb 8-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 162.304907][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.312969][ T5883] usb 8-1: Product: syz [ 162.355014][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.802'. [ 162.355872][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.363835][ T8577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 162.375921][ T5883] usb 8-1: Manufacturer: syz [ 162.383904][ T5883] usb 8-1: SerialNumber: syz [ 162.398997][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.406170][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.442847][ T5883] usb 8-1: config 0 descriptor?? [ 162.468618][ T5883] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 162.480640][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 162.525188][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.532389][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.686805][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.715591][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.742873][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.806100][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 162.814869][ T5831] Bluetooth: Wrong link type (-22) [ 162.909101][ T8497] veth0_vlan: entered promiscuous mode [ 162.963914][ T8497] veth1_vlan: entered promiscuous mode [ 163.054509][ T8497] veth0_macvtap: entered promiscuous mode [ 163.099781][ T8497] veth1_macvtap: entered promiscuous mode [ 163.151237][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.181907][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.204970][ T5831] Bluetooth: hci1: command tx timeout [ 163.205279][ T5883] usb 8-1: USB disconnect, device number 10 [ 163.220044][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.269857][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.318982][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.349166][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.374705][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.400439][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.443625][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.454345][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.472102][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.483559][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.516753][ T8497] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.544430][ T8497] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.553979][ T8497] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.579197][ T8497] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.710328][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.735056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.788134][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.804681][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.836952][ T6502] bond0: (slave syz_tun): Releasing backup interface [ 163.857399][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.014505][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.814'. [ 164.024125][ T8627] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.037630][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 164.046232][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.814'. [ 164.050323][ T5901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 164.082835][ T5901] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 164.110791][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.117204][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.146272][ T5901] usb 4-1: Product: syz [ 164.151423][ T5901] usb 4-1: Manufacturer: syz [ 164.168705][ T5901] usb 4-1: SerialNumber: syz [ 164.190074][ T5901] usb 4-1: config 0 descriptor?? [ 164.201253][ T5901] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 164.230557][ T5901] usb 4-1: Detected FT232R [ 164.416925][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.431391][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 164.628990][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.660454][ T5901] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 164.684929][ T5901] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.755015][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.787'. [ 164.875031][ T51] usb 4-1: USB disconnect, device number 11 [ 164.911429][ T51] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.941654][ T51] ftdi_sio 4-1:0.0: device disconnected [ 165.008522][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.284980][ T5831] Bluetooth: hci1: command tx timeout [ 165.351937][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.364179][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.374323][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.383201][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.393255][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.400986][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.409000][ T12] bridge_slave_1: left allmulticast mode [ 165.468890][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.825'. [ 165.477896][ T12] bridge_slave_1: left promiscuous mode [ 165.485490][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.526127][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.825'. [ 165.527458][ T8666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 165.568182][ T12] bridge_slave_0: left allmulticast mode [ 165.573916][ T12] bridge_slave_0: left promiscuous mode [ 165.615297][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.335331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.377995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.429915][ T12] bond0 (unregistering): Released all slaves [ 166.570715][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 166.870505][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.838'. [ 167.055113][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 167.204311][ T12] hsr_slave_0: left promiscuous mode [ 167.215687][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 167.222742][ T8] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 167.232347][ T12] hsr_slave_1: left promiscuous mode [ 167.253656][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.255125][ T8] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 167.278426][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.280217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.315091][ T8] usb 10-1: Product: syz [ 167.319589][ T8] usb 10-1: Manufacturer: syz [ 167.324399][ T8] usb 10-1: SerialNumber: syz [ 167.325351][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.340993][ T8] usb 10-1: config 0 descriptor?? [ 167.356635][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.366596][ T5831] Bluetooth: hci1: command tx timeout [ 167.367941][ T8] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 167.401235][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 167.414047][ T8731] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.421599][ T8] usb 10-1: Detected FT232R [ 167.438339][ T12] veth1_macvtap: left promiscuous mode [ 167.439401][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 167.444062][ T12] veth0_macvtap: left promiscuous mode [ 167.459397][ T5831] Bluetooth: hci2: command tx timeout [ 167.466710][ T12] veth1_vlan: left promiscuous mode [ 167.472199][ T12] veth0_vlan: left promiscuous mode [ 167.589435][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 167.800481][ T8] ftdi_sio 10-1:0.0: GPIO initialisation failed: -5 [ 167.823826][ T8] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.047402][ T5883] usb 10-1: USB disconnect, device number 2 [ 168.067531][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.089879][ T5883] ftdi_sio 10-1:0.0: device disconnected [ 168.173237][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.220485][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.861961][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.847'. [ 168.882378][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.850'. [ 169.063972][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 169.149422][ T8754] Set syz1 is full, maxelem 65536 reached [ 169.524894][ T5831] Bluetooth: hci2: command tx timeout [ 169.544595][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.568782][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.587348][ T8674] bridge_slave_0: entered allmulticast mode [ 169.595060][ T8674] bridge_slave_0: entered promiscuous mode [ 169.613774][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.621283][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.655193][ T8674] bridge_slave_1: entered allmulticast mode [ 169.667306][ T8674] bridge_slave_1: entered promiscuous mode [ 169.739619][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.773935][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.838777][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.861'. [ 169.858071][ T8785] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.875802][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 169.942152][ T8674] team0: Port device team_slave_0 added [ 169.949990][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.8.861'. [ 169.985497][ T8674] team0: Port device team_slave_1 added [ 170.062647][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 170.077900][ T8] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 170.093690][ T8] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 170.098214][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.118456][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.141882][ T8] usb 10-1: Product: syz [ 170.144890][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.154809][ T8] usb 10-1: Manufacturer: syz [ 170.201087][ T8] usb 10-1: SerialNumber: syz [ 170.230710][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.244433][ T8] usb 10-1: config 0 descriptor?? [ 170.256839][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 170.273114][ T8] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 170.275602][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.301135][ T8] usb 10-1: Detected FT232R [ 170.320643][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.321990][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.863'. [ 170.461973][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.479319][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 170.736562][ T8] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.749378][ T8674] hsr_slave_0: entered promiscuous mode [ 170.802072][ T8674] hsr_slave_1: entered promiscuous mode [ 170.936250][ T8] usb 10-1: USB disconnect, device number 3 [ 170.968603][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.990794][ T8] ftdi_sio 10-1:0.0: device disconnected [ 170.998364][ T8818] Set syz1 is full, maxelem 65536 reached [ 171.604995][ T5831] Bluetooth: hci2: command tx timeout [ 171.757768][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.875'. [ 171.767132][ T8843] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 171.780247][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.875'. [ 172.325234][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 172.415771][ T8674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.440052][ T8674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.488439][ T8674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.514909][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 172.523473][ T8] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 172.567745][ T8674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.574919][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.613515][ T8] usb 9-1: Product: syz [ 172.638644][ T8] usb 9-1: Manufacturer: syz [ 172.643315][ T8] usb 9-1: SerialNumber: syz [ 172.681603][ T8] usb 9-1: config 0 descriptor?? [ 172.701560][ T8] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 172.784043][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.837313][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.861269][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.868520][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.913901][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.921150][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.941179][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.955192][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.052637][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.072710][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 173.079769][ T5831] Bluetooth: Wrong link type (-22) [ 173.202029][ T8674] veth0_vlan: entered promiscuous mode [ 173.242442][ T8674] veth1_vlan: entered promiscuous mode [ 173.307389][ T8674] veth0_macvtap: entered promiscuous mode [ 173.349358][ T8674] veth1_macvtap: entered promiscuous mode [ 173.384061][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.400577][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.421068][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.445237][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.466194][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.508905][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.561091][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.597728][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.638914][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.662904][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.685399][ T5831] Bluetooth: hci2: command tx timeout [ 173.687984][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.728158][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.778169][ T8674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.825211][ T8674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.833974][ T8674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.838520][ T8905] __nla_validate_parse: 1 callbacks suppressed [ 173.838539][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 173.851236][ T8674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.867454][ T8905] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 173.914973][ T5901] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 174.042826][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.080240][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.088374][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 174.113669][ T5901] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 174.128331][ T5901] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 174.139277][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.173549][ T5901] usb 6-1: Product: syz [ 174.190720][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.199180][ T5901] usb 6-1: Manufacturer: syz [ 174.203813][ T5901] usb 6-1: SerialNumber: syz [ 174.216620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.245151][ T5901] usb 6-1: config 0 descriptor?? [ 174.262597][ T5901] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 174.295984][ T5901] usb 6-1: Detected FT232R [ 174.461272][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 174.703750][ T5901] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 174.906998][ T5901] usb 6-1: USB disconnect, device number 9 [ 174.928930][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 174.952865][ T5901] ftdi_sio 6-1:0.0: device disconnected [ 175.135615][ T976] usb 9-1: USB disconnect, device number 8 [ 175.220250][ T6601] bridge0: port 3(syz_tun) entered disabled state [ 175.267241][ T6601] syz_tun (unregistering): left allmulticast mode [ 175.287872][ T6601] syz_tun (unregistering): left promiscuous mode [ 175.310821][ T6601] bridge0: port 3(syz_tun) entered disabled state [ 175.612288][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 175.624992][ T8946] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 176.634609][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.654936][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.663706][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.675922][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.685009][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.695120][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.845376][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.004851][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 177.018513][ T5885] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 177.028549][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.048256][ T5885] usb 4-1: Product: syz [ 177.052491][ T5885] usb 4-1: Manufacturer: syz [ 177.079952][ T5885] usb 4-1: SerialNumber: syz [ 177.098638][ T5885] usb 4-1: config 0 descriptor?? [ 177.140338][ T5885] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 177.204038][ T8977] chnl_net:caif_netlink_parms(): no params data found [ 177.397650][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.478650][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.499921][ T8977] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.525516][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.545766][ T8977] bridge_slave_0: entered allmulticast mode [ 177.556623][ T8977] bridge_slave_0: entered promiscuous mode [ 177.573908][ T8889] Set syz1 is full, maxelem 65536 reached [ 177.581262][ T8977] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.589570][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 177.597940][ T5836] Bluetooth: Wrong link type (-22) [ 177.602090][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.655179][ T8977] bridge_slave_1: entered allmulticast mode [ 177.662336][ T8977] bridge_slave_1: entered promiscuous mode [ 177.777613][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.816952][ T8977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.830490][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 177.885198][ T9011] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.891344][ T8977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.941070][ T8977] team0: Port device team_slave_0 added [ 177.955102][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 177.967783][ T8977] team0: Port device team_slave_1 added [ 177.982632][ T5885] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 177.997154][ T5885] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 178.025484][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.033556][ T5885] usb 2-1: Product: syz [ 178.054720][ T5885] usb 2-1: Manufacturer: syz [ 178.061830][ T5885] usb 2-1: SerialNumber: syz [ 178.064683][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.077914][ T5885] usb 2-1: config 0 descriptor?? [ 178.094529][ T5885] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 178.097118][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.105965][ T5885] usb 2-1: Detected FT232R [ 178.139429][ T8977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.172582][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.200843][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.238329][ T8977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.314675][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 178.368251][ T8977] hsr_slave_0: entered promiscuous mode [ 178.375615][ T8977] hsr_slave_1: entered promiscuous mode [ 178.385096][ T8977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.398670][ T8977] Cannot create hsr debugfs directory [ 178.546875][ T5885] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 178.575397][ T5885] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.726227][ T5836] Bluetooth: hci0: command tx timeout [ 178.782667][ T5885] usb 2-1: USB disconnect, device number 3 [ 178.798777][ T5885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.826167][ T5885] ftdi_sio 2-1:0.0: device disconnected [ 179.477647][ T5839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 179.626585][ T5901] usb 4-1: USB disconnect, device number 12 [ 179.646832][ T5839] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 179.695727][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.725542][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.738597][ T5839] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 179.757861][ T8977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.790989][ T5839] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 179.815198][ T8977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.822309][ T5839] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 179.837375][ T5839] usb 10-1: Manufacturer: syz [ 179.860856][ T5839] usb 10-1: config 0 descriptor?? [ 179.879568][ T5848] bond0: (slave syz_tun): Releasing backup interface [ 179.948767][ T8977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.967629][ T8977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.246409][ T8977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.297066][ T8977] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.327901][ T5839] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 180.330028][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.342122][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.355959][ T5839] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 180.372957][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.380141][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.414591][ T5839] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 180.588095][ T8977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.722257][ T8977] veth0_vlan: entered promiscuous mode [ 180.778061][ T8977] veth1_vlan: entered promiscuous mode [ 180.805694][ T5836] Bluetooth: hci0: command tx timeout [ 180.857938][ T8977] veth0_macvtap: entered promiscuous mode [ 180.869961][ T8977] veth1_macvtap: entered promiscuous mode [ 180.899215][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.925259][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.949472][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.971748][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.983658][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.003339][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.017229][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.032141][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.062372][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.077744][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.087437][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.088485][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.105985][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.106016][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.116804][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.127966][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.140800][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.142422][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.152089][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.172628][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.181714][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.182614][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.220934][ T8977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.230148][ T8977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.239167][ T8977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.248268][ T8977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.443286][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.512618][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.588816][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.609053][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.742430][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 181.950838][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 181.962082][ T9088] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 182.014116][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 182.025911][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.033042][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.058464][ T9071] bridge_slave_0: entered allmulticast mode [ 182.065872][ T9071] bridge_slave_0: entered promiscuous mode [ 182.075534][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.082835][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.110008][ T9071] bridge_slave_1: entered allmulticast mode [ 182.125996][ T9071] bridge_slave_1: entered promiscuous mode [ 182.206553][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.232540][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.373560][ T9071] team0: Port device team_slave_0 added [ 182.486036][ T9071] team0: Port device team_slave_1 added [ 182.521963][ T5885] usb 10-1: USB disconnect, device number 4 [ 182.627395][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.653789][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.707497][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.780794][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.798121][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.866964][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.889782][ T5836] Bluetooth: hci0: command tx timeout [ 183.021760][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 183.031060][ T9118] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.064409][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 183.190986][ T9071] hsr_slave_0: entered promiscuous mode [ 183.262698][ T9071] hsr_slave_1: entered promiscuous mode [ 183.285963][ T5836] Bluetooth: hci3: command tx timeout [ 183.329434][ T9071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.426776][ T9071] Cannot create hsr debugfs directory [ 184.075062][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.275064][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 184.284485][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 184.314594][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 184.328084][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.344965][ T9] usb 2-1: Product: syz [ 184.355052][ T9] usb 2-1: Manufacturer: syz [ 184.364209][ T9] usb 2-1: SerialNumber: syz [ 184.378440][ T9] usb 2-1: config 0 descriptor?? [ 184.394239][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 184.424314][ T9] usb 2-1: Detected FT232R [ 184.518294][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'. [ 184.565698][ T9151] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 184.605869][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 184.627470][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.968'. [ 184.829705][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 184.845639][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 184.975199][ T5836] Bluetooth: hci0: command tx timeout [ 185.037228][ T5901] usb 2-1: USB disconnect, device number 4 [ 185.095411][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.132793][ T5901] ftdi_sio 2-1:0.0: device disconnected [ 185.377342][ T5836] Bluetooth: hci3: command tx timeout [ 185.471291][ T9071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.570572][ T9071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.686011][ T9071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.707545][ T9071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.977375][ T51] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 186.014253][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.142355][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.174922][ T51] usb 6-1: Using ep0 maxpacket: 8 [ 186.188395][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.195650][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.220896][ T51] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 186.232827][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.256169][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.263132][ T51] usb 6-1: Product: syz [ 186.263285][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.277708][ T51] usb 6-1: Manufacturer: syz [ 186.289302][ T51] usb 6-1: SerialNumber: syz [ 186.313232][ T51] usb 6-1: config 0 descriptor?? [ 186.349091][ T51] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 186.479642][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.554202][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.671061][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.741885][ T9071] veth0_vlan: entered promiscuous mode [ 186.787554][ T5891] usb 6-1: USB disconnect, device number 10 [ 186.803066][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 186.809704][ T5836] Bluetooth: Wrong link type (-22) [ 186.855862][ T9071] veth1_vlan: entered promiscuous mode [ 187.014647][ T9071] veth0_macvtap: entered promiscuous mode [ 187.047235][ T9071] veth1_macvtap: entered promiscuous mode [ 187.122967][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.982'. [ 187.128597][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.143184][ T9202] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 187.175069][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.193089][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.193664][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.982'. [ 187.223362][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.253407][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.280986][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.296980][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.308056][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.340610][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.399268][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.445049][ T5836] Bluetooth: hci3: command tx timeout [ 187.481881][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.544457][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.583278][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.612636][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.645725][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.679020][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.699991][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.728479][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.750546][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.773228][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.828851][ T9071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.861600][ T9071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.905082][ T9071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.939536][ T9071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.156052][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.184946][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.215006][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.287383][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.313010][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.354980][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 188.376686][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 188.397263][ T5901] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 188.414913][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.426300][ T5901] usb 2-1: Product: syz [ 188.430526][ T5901] usb 2-1: Manufacturer: syz [ 188.443817][ T5901] usb 2-1: SerialNumber: syz [ 188.464660][ T5901] usb 2-1: config 0 descriptor?? [ 188.479200][ T5901] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 188.494140][ T5901] usb 2-1: Detected FT232R [ 188.642549][ T9153] Set syz1 is full, maxelem 65536 reached [ 188.682983][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.902770][ T5901] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 188.971058][ T5901] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.070420][ T5901] usb 2-1: USB disconnect, device number 5 [ 189.134525][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 189.169777][ T5901] ftdi_sio 2-1:0.0: device disconnected [ 189.182921][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 189.225905][ T9261] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 189.270898][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 189.525562][ T5836] Bluetooth: hci3: command tx timeout [ 189.925048][ T5885] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.126816][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 190.132045][ T5881] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 190.154217][ T5885] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.184985][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.212645][ T5885] usb 2-1: Product: syz [ 190.215389][ T5839] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 190.225190][ T5885] usb 2-1: Manufacturer: syz [ 190.230322][ T5885] usb 2-1: SerialNumber: syz [ 190.268095][ T5885] usb 2-1: config 0 descriptor?? [ 190.296652][ T5881] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 190.353274][ T5881] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 190.388967][ T5881] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 190.402420][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.408213][ T5881] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 190.430018][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.453375][ T5881] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 190.459408][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.467114][ T5881] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 190.482659][ T5839] usb 1-1: Product: syz [ 190.491594][ T5885] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.506855][ T5839] usb 1-1: Manufacturer: syz [ 190.521784][ T5839] usb 1-1: SerialNumber: syz [ 190.528721][ T5881] usb 10-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 190.540412][ T5839] usb 1-1: config 0 descriptor?? [ 190.585552][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.615565][ T5881] usb 10-1: Product: syz [ 190.619987][ T5881] usb 10-1: Manufacturer: syz [ 190.624726][ T5881] usb 10-1: SerialNumber: syz [ 190.650268][ T5881] usb 10-1: ucan: probing device on interface #0 [ 190.657185][ T5881] usb 10-1: ucan: invalid endpoint configuration [ 190.678466][ T5881] usb 10-1: ucan: probe failed; try to update the device firmware [ 190.839893][ T5839] usb 1-1: USB disconnect, device number 6 [ 190.943467][ T5891] usb 10-1: USB disconnect, device number 5 [ 190.990888][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 191.006663][ T9319] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 191.096123][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.534907][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.705864][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 191.728673][ T5891] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 191.750589][ T5891] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 191.781745][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.825386][ T5891] usb 1-1: Product: syz [ 191.840685][ T5891] usb 1-1: Manufacturer: syz [ 191.866613][ T5891] usb 1-1: SerialNumber: syz [ 191.876973][ T5891] usb 1-1: config 0 descriptor?? [ 191.905952][ T5891] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 191.938349][ T5891] usb 1-1: Detected FT232R [ 192.109527][ T5891] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 192.146177][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.180683][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.196818][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1020'. [ 192.221773][ T9363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 192.234508][ T5885] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 192.287761][ T5885] usb 2-1: USB disconnect, device number 6 [ 192.339764][ T5891] ftdi_sio 1-1:0.0: GPIO initialisation failed: -32 [ 192.368627][ T5891] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.415398][ T9368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1021'. [ 192.427167][ T5891] usb 1-1: USB disconnect, device number 7 [ 192.467031][ T9373] FAULT_INJECTION: forcing a failure. [ 192.467031][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.471309][ T5891] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 192.509010][ T5891] ftdi_sio 1-1:0.0: device disconnected [ 192.536953][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 192.574947][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.5.1021 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 192.585293][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1021'. [ 192.594243][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 192.594260][ T9373] Call Trace: [ 192.594269][ T9373] [ 192.594279][ T9373] dump_stack_lvl+0x241/0x360 [ 192.615272][ T9373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.620508][ T9373] ? __pfx__printk+0x10/0x10 [ 192.625127][ T9373] ? __pfx_lock_release+0x10/0x10 [ 192.630185][ T9373] should_fail_ex+0x3b0/0x4e0 [ 192.634896][ T9373] _copy_from_iter+0x1e9/0x1c20 [ 192.639759][ T9373] ? __virt_addr_valid+0x183/0x530 [ 192.644883][ T9373] ? __alloc_skb+0x28f/0x440 [ 192.649502][ T9373] ? __pfx__copy_from_iter+0x10/0x10 [ 192.654814][ T9373] ? __virt_addr_valid+0x183/0x530 [ 192.659947][ T9373] ? __virt_addr_valid+0x183/0x530 [ 192.665063][ T9373] ? __virt_addr_valid+0x45f/0x530 [ 192.670180][ T9373] ? __phys_addr_symbol+0x2f/0x70 [ 192.675209][ T9373] ? __check_object_size+0x47a/0x730 [ 192.680514][ T9373] netlink_sendmsg+0x73d/0xcb0 [ 192.685307][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.690629][ T9373] ? __pfx_lock_release+0x10/0x10 [ 192.695667][ T9373] ? aa_sock_msg_perm+0x91/0x160 [ 192.700625][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.705920][ T9373] __sock_sendmsg+0x221/0x270 [ 192.710609][ T9373] ____sys_sendmsg+0x52a/0x7e0 [ 192.715390][ T9373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.720696][ T9373] __sys_sendmsg+0x269/0x350 [ 192.725294][ T9373] ? __pfx_lock_release+0x10/0x10 [ 192.730335][ T9373] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.735469][ T9373] ? __pfx_vfs_write+0x10/0x10 [ 192.740258][ T9373] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 192.746857][ T9373] ? lockdep_hardirqs_on+0x99/0x150 [ 192.752065][ T9373] __do_fast_syscall_32+0xb4/0x110 [ 192.757189][ T9373] ? exc_page_fault+0x590/0x8b0 [ 192.762043][ T9373] do_fast_syscall_32+0x34/0x80 [ 192.766897][ T9373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.773242][ T9373] RIP: 0023:0xf7f35579 [ 192.777320][ T9373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.796930][ T9373] RSP: 002b:00000000f506555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 192.805499][ T9373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 192.813471][ T9373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.821441][ T9373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.829413][ T9373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.837383][ T9373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.845396][ T9373] [ 193.225089][ T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 193.424887][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 193.432357][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 193.455452][ T8] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 193.492823][ T8] usb 10-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 193.495442][ T5839] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 193.502498][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.556819][ T8] usb 10-1: Product: syz [ 193.563465][ T8] usb 10-1: Manufacturer: syz [ 193.675246][ T8] usb 10-1: SerialNumber: syz [ 193.695793][ T8] usb 10-1: config 0 descriptor?? [ 193.706449][ T8] pn533_usb 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 193.706976][ T5839] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.766300][ T5839] usb 6-1: config 1 has no interface number 1 [ 193.800432][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 193.844910][ T5839] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 193.893609][ T5839] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.912548][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.930806][ T5901] usb 10-1: USB disconnect, device number 6 [ 193.944576][ T5839] usb 6-1: Product: syz [ 193.963837][ T5839] usb 6-1: Manufacturer: syz [ 193.973262][ T5839] usb 6-1: SerialNumber: syz [ 193.994351][ T9390] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 194.209675][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.248311][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.314440][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.379605][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.486926][ T5839] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 194.606575][ T5839] usb 6-1: USB disconnect, device number 11 [ 194.638695][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1034'. [ 194.705233][ T9424] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 194.855857][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.891051][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.900847][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.935294][ T51] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.035714][ T9439] netlink: 'syz.9.1037': attribute type 29 has an invalid length. [ 195.076279][ T9439] netlink: 'syz.9.1037': attribute type 29 has an invalid length. [ 195.121922][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 195.160487][ T51] usb 1-1: config 253 has an invalid interface number: 252 but max is 0 [ 195.160874][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1037'. [ 195.211669][ T51] usb 1-1: config 253 has no interface number 0 [ 195.221760][ T51] usb 1-1: config 253 interface 252 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 8 [ 195.252354][ T51] usb 1-1: config 253 interface 252 has no altsetting 0 [ 195.283481][ T51] usb 1-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0 [ 195.312957][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.332194][ T51] usb 1-1: Product: syz [ 195.343968][ T51] usb 1-1: Manufacturer: syz [ 195.355693][ T51] usb 1-1: SerialNumber: syz [ 195.379625][ T9428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.545783][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 195.645411][ T9428] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1035'. [ 195.672748][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 195.711058][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1035'. [ 195.724843][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 195.740777][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 195.761331][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 195.770814][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.798526][ T9] usb 6-1: Product: syz [ 195.813012][ T9] usb 6-1: Manufacturer: syz [ 195.831098][ T9] usb 6-1: SerialNumber: syz [ 195.866163][ T9] usb 6-1: config 0 descriptor?? [ 195.897515][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 195.935629][ T9] usb 6-1: Detected FT232R [ 196.048815][ T9458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1035'. [ 196.101171][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 196.337942][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -32 [ 196.379656][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 196.438821][ T9] usb 6-1: USB disconnect, device number 12 [ 196.473383][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 196.517750][ T9] ftdi_sio 6-1:0.0: device disconnected [ 197.561742][ T9511] syz.1.1054: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.664811][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: syz.1.1054 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 197.675224][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.685313][ T9511] Call Trace: [ 197.688624][ T9511] [ 197.691578][ T9511] dump_stack_lvl+0x241/0x360 [ 197.696296][ T9511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.701532][ T9511] ? __pfx__printk+0x10/0x10 [ 197.706162][ T9511] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 197.712620][ T9511] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 197.719168][ T9511] warn_alloc+0x278/0x410 [ 197.723535][ T9511] ? __pfx_warn_alloc+0x10/0x10 [ 197.728426][ T9511] ? xskq_create+0xb6/0x170 [ 197.732957][ T9511] ? __get_vm_area_node+0x1c8/0x2d0 [ 197.738189][ T9511] ? __get_vm_area_node+0x25c/0x2d0 [ 197.743437][ T9511] __vmalloc_node_range_noprof+0x62f/0x1380 [ 197.749391][ T9511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.755754][ T9511] ? __kasan_kmalloc+0x98/0xb0 [ 197.760572][ T9511] vmalloc_user_noprof+0x74/0x80 [ 197.765544][ T9511] ? xskq_create+0xb6/0x170 [ 197.770080][ T9511] xskq_create+0xb6/0x170 [ 197.774441][ T9511] xsk_init_queue+0xa1/0x100 [ 197.779079][ T9511] xsk_setsockopt+0x4ea/0x950 [ 197.783796][ T9511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.789031][ T9511] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.793920][ T9511] ? aa_sock_opt_perm+0x79/0x120 [ 197.798897][ T9511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.804135][ T9511] do_sock_setsockopt+0x3af/0x720 [ 197.809206][ T9511] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 197.814786][ T9511] ? __fget_files+0x2a/0x410 [ 197.819411][ T9511] ? __fget_files+0x395/0x410 [ 197.824196][ T9511] ? __fget_files+0x2a/0x410 [ 197.828833][ T9511] __ia32_sys_setsockopt+0x1f2/0x280 [ 197.834158][ T9511] __do_fast_syscall_32+0xb4/0x110 [ 197.839309][ T9511] ? exc_page_fault+0x590/0x8b0 [ 197.844203][ T9511] do_fast_syscall_32+0x34/0x80 [ 197.849092][ T9511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.855455][ T9511] RIP: 0023:0xf7f1f579 [ 197.859548][ T9511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.879196][ T9511] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 197.887649][ T9511] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 197.895651][ T9511] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 197.903676][ T9511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.911674][ T9511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.919689][ T9511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.927727][ T9511] [ 198.135086][ T9511] Mem-Info: [ 198.138278][ T9511] active_anon:9631 inactive_anon:0 isolated_anon:0 [ 198.138278][ T9511] active_file:1650 inactive_file:38290 isolated_file:0 [ 198.138278][ T9511] unevictable:766 dirty:91 writeback:0 [ 198.138278][ T9511] slab_reclaimable:10512 slab_unreclaimable:111730 [ 198.138278][ T9511] mapped:29479 shmem:4276 pagetables:1129 [ 198.138278][ T9511] sec_pagetables:0 bounce:0 [ 198.138278][ T9511] kernel_misc_reclaimable:0 [ 198.138278][ T9511] free:1323379 free_pcp:611 free_cma:0 [ 198.248840][ T9511] Node 0 active_anon:38620kB inactive_anon:0kB active_file:6600kB inactive_file:153088kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:117516kB dirty:364kB writeback:0kB shmem:15568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12532kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no [ 198.314972][ T9511] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 198.315180][ T9511] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.315246][ T9511] lowmem_reserve[]: 0 2492 2493 0 0 [ 198.315286][ T9511] Node 0 DMA32 free:1372228kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:35280kB inactive_anon:0kB active_file:6600kB inactive_file:152252kB unevictable:1532kB writepending:360kB present:3129332kB managed:2552748kB mlocked:0kB bounce:0kB free_pcp:4836kB local_pcp:3624kB free_cma:0kB [ 198.315363][ T9511] lowmem_reserve[]: 0 0 0 0 0 [ 198.315409][ T9511] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.315455][ T9511] lowmem_reserve[]: 0 0 0 0 0 [ 198.315523][ T9511] Node 1 Normal free:3906324kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1532kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.315573][ T9511] lowmem_reserve[]: 0 0 0 0 0 [ 198.315615][ T9511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.315871][ T9511] Node 0 DMA32: 373*4kB (UM) 100*8kB (UE) 85*16kB (UME) 57*32kB (UE) 35*64kB (UME) 12*128kB (UME) 4*256kB (UE) 4*512kB (M) 4*1024kB (UME) 2*2048kB (UM) 330*4096kB (M) = 1372196kB [ 198.316124][ T9511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.316265][ T9511] Node 1 Normal: 207*4kB (UME) 65*8kB (UME) 51*16kB (UME) 221*32kB (UME) 102*64kB (UME) 31*128kB (UME) 14*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906324kB [ 198.316489][ T9511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.316531][ T9511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.316547][ T9511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.316564][ T9511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.316581][ T9511] 43441 total pagecache pages [ 198.316590][ T9511] 0 pages in swap cache [ 198.316599][ T9511] Free swap = 124216kB [ 198.316608][ T9511] Total swap = 124996kB [ 198.316617][ T9511] 2097051 pages RAM [ 198.316625][ T9511] 0 pages HighMem/MovableOnly [ 198.316634][ T9511] 427014 pages reserved [ 198.316643][ T9511] 0 pages cma reserved [ 198.383040][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.495979][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.797977][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.881937][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.882209][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.895017][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.054918][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 199.060683][ T5891] usb 2-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 199.060715][ T5891] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 199.060736][ T5891] usb 2-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 199.060775][ T5891] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 199.060798][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.068158][ T5891] usb 2-1: probing VID:PID(2201:012C) [ 199.069883][ T5891] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 199.073184][ T5891] vub300 2-1:63.0: probe with driver vub300 failed with error -22 [ 199.250163][ T9372] Set syz1 is full, maxelem 65536 reached [ 199.279700][ T5839] usb 2-1: USB disconnect, device number 7 [ 199.481732][ T9560] xt_TCPMSS: Only works on TCP SYN packets [ 199.631272][ T9530] tty tty38: ldisc open failed (-12), clearing slot 37 [ 199.725100][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.882259][ T5885] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 199.885803][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 199.899482][ T5885] usb 5-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 199.940231][ T5885] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 199.974835][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.104900][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 200.123958][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 200.145274][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 200.171576][ T5891] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 200.191679][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.225774][ T5891] usb 6-1: Product: syz [ 200.234961][ T5891] usb 6-1: Manufacturer: syz [ 200.239672][ T5891] usb 6-1: SerialNumber: syz [ 200.271210][ T5891] usb 6-1: config 0 descriptor?? [ 200.298468][ T5891] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 200.301470][ T9] usb 5-1: USB disconnect, device number 4 [ 200.407348][ T51] keyspan 1-1:253.252: Keyspan 1 port adapter converter detected [ 200.423353][ T51] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 87 [ 200.437707][ T51] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 7 [ 200.447425][ T51] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 81 [ 200.479631][ T51] keyspan 1-1:253.252: unsupported endpoint type 0 [ 200.510153][ T51] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 2 [ 200.535141][ T9553] __nla_validate_parse: 2 callbacks suppressed [ 200.535163][ T9553] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1061'. [ 200.556465][ T51] keyspan 1-1:253.252: found no endpoint descriptor for endpoint 85 [ 200.595152][ T51] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 200.651702][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1069'. [ 200.770049][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 200.790901][ T9597] netlink: 'syz.1.1070': attribute type 3 has an invalid length. [ 201.124651][ T9605] Set syz1 is full, maxelem 65536 reached [ 201.403750][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1075'. [ 201.415026][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 201.585865][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 201.592754][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.614423][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 201.644887][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 201.653999][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.677599][ T9] usb 2-1: config 0 descriptor?? [ 202.144458][ T9] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 202.164845][ T9] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 202.177215][ T9] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 202.204675][ T9] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 202.212673][ T9] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 202.233706][ T9] corsair 0003:1B1C:1B34.000E: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0 [ 202.395601][ T9] usb 6-1: USB disconnect, device number 13 [ 202.463598][ T5891] usb 2-1: USB disconnect, device number 8 [ 202.474946][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 202.637176][ T8] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 202.655100][ T8] usb 5-1: config 0 has no interface number 0 [ 202.663740][ T8] usb 5-1: New USB device found, idVendor=abf7, idProduct=5d80, bcdDevice=bb.42 [ 202.683164][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.701168][ T8] usb 5-1: Product: syz [ 202.705690][ T8] usb 5-1: Manufacturer: syz [ 202.710319][ T8] usb 5-1: SerialNumber: syz [ 202.764142][ T8] usb 5-1: config 0 descriptor?? [ 202.855260][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 203.047017][ T9] usb 10-1: too many configurations: 241, using maximum allowed: 8 [ 203.078125][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.100876][ T9661] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1083'. [ 203.104810][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.134851][ T9] usb 10-1: Product: syz [ 203.148627][ T9] usb 10-1: Manufacturer: syz [ 203.155636][ T9666] xt_TCPMSS: Only works on TCP SYN packets [ 203.176484][ T9] usb 10-1: SerialNumber: syz [ 203.189419][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 203.270439][ T8] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.624099][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 204.060524][ T9692] FAULT_INJECTION: forcing a failure. [ 204.060524][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.135878][ T5881] usb 10-1: USB disconnect, device number 7 [ 204.137045][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.5.1089 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 204.152173][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 204.162266][ T9692] Call Trace: [ 204.165576][ T9692] [ 204.168542][ T9692] dump_stack_lvl+0x241/0x360 [ 204.173251][ T9692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.178478][ T9692] ? __pfx__printk+0x10/0x10 [ 204.183097][ T9692] ? __pfx_lock_release+0x10/0x10 [ 204.188160][ T9692] should_fail_ex+0x3b0/0x4e0 [ 204.192866][ T9692] _copy_from_user+0x2d/0xb0 [ 204.197485][ T9692] video_usercopy+0x378/0x1180 [ 204.202297][ T9692] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.207701][ T9692] ? __pfx_video_usercopy+0x10/0x10 [ 204.212948][ T9692] v4l2_ioctl+0x189/0x1e0 [ 204.217310][ T9692] v4l2_compat_ioctl32+0x1d7/0x260 [ 204.222450][ T9692] __se_compat_sys_ioctl+0x502/0xc10 [ 204.227769][ T9692] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 204.233612][ T9692] ? __fget_files+0x2a/0x410 [ 204.238247][ T9692] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.244264][ T9692] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.250638][ T9692] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 204.257257][ T9692] ? lockdep_hardirqs_on+0x99/0x150 [ 204.262489][ T9692] __do_fast_syscall_32+0xb4/0x110 [ 204.267625][ T9692] ? exc_page_fault+0x590/0x8b0 [ 204.272501][ T9692] do_fast_syscall_32+0x34/0x80 [ 204.277371][ T9692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.283732][ T9692] RIP: 0023:0xf7f35579 [ 204.287830][ T9692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.307476][ T9692] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.315930][ T9692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 204.323932][ T9692] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.331940][ T9692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.335102][ T8] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 204.339917][ T9692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.339934][ T9692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.339960][ T9692] [ 204.489584][ T8] ath9k_htc: Failed to initialize the device [ 204.501749][ T5881] usb 10-1: ath9k_htc: USB layer deinitialized [ 204.950266][ T8] usb 5-1: USB disconnect, device number 5 [ 205.274987][ T5891] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 205.381572][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 205.475070][ T5891] usb 10-1: Using ep0 maxpacket: 8 [ 205.503665][ T5891] usb 10-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 205.563499][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.595618][ T5891] usb 10-1: Product: syz [ 205.630066][ T5891] usb 10-1: Manufacturer: syz [ 205.644918][ T5891] usb 10-1: SerialNumber: syz [ 205.665493][ T5891] usb 10-1: config 0 descriptor?? [ 205.685302][ T5891] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 205.911051][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.975098][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.014308][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 206.015411][ T5891] usb 10-1: USB disconnect, device number 8 [ 206.022042][ T5831] Bluetooth: Wrong link type (-22) [ 206.042005][ T9735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 206.425438][ T29] audit: type=1326 audit(1737436779.411:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.4.1102" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f0f579 code=0x0 [ 206.472721][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 206.742077][ T9755] loop6: detected capacity change from 0 to 64 [ 206.767766][ T9754] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 206.875364][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.884889][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.923224][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.928964][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.932485][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 206.941625][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.969876][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.979146][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.008831][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.018115][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.031235][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.040517][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.111256][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.120602][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.132888][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.135779][ T51] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 207.142178][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.159506][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.168797][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.186418][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.215152][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 207.354884][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 207.385247][ T51] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 207.405224][ T51] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 207.414341][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.458009][ T51] usb 6-1: Product: syz [ 207.462253][ T51] usb 6-1: Manufacturer: syz [ 207.494852][ T51] usb 6-1: SerialNumber: syz [ 207.506484][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 207.517091][ T51] usb 6-1: config 0 descriptor?? [ 207.546129][ T51] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 207.608572][ T51] usb 6-1: Detected FT232R [ 207.730657][ T51] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 207.977817][ T51] ftdi_sio 6-1:0.0: GPIO initialisation failed: -32 [ 208.023508][ T51] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 208.061541][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1113'. [ 208.077913][ T9783] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 208.108256][ T51] usb 6-1: USB disconnect, device number 14 [ 208.175395][ T51] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 208.209458][ T51] ftdi_sio 6-1:0.0: device disconnected [ 208.328056][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1114'. [ 209.248627][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 209.504446][ T9825] syz.0.1121 (9825) used greatest stack depth: 17488 bytes left [ 209.859232][ T9691] Set syz1 is full, maxelem 65536 reached [ 209.976498][ T9840] fuse: Bad value for 'fd' [ 210.075077][ T5885] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 210.266699][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 210.288533][ T5885] usb 10-1: config 2 has an invalid interface number: 45 but max is 0 [ 210.311998][ T5885] usb 10-1: config 2 has no interface number 0 [ 210.315252][ T9849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.331064][ T5885] usb 10-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 210.351769][ T9849] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 210.389825][ T9849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.397631][ T9857] fuse: Bad value for 'fd' [ 210.405631][ T5885] usb 10-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 210.443097][ T9849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.455181][ T5885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.468200][ T5885] usb 10-1: Product: syz [ 210.472581][ T5885] usb 10-1: Manufacturer: syz [ 210.480124][ T5885] usb 10-1: SerialNumber: syz [ 210.480815][ T9849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.507712][ T5885] kobil_sct 10-1:2.45: KOBIL USB smart card terminal converter detected [ 210.519265][ T5885] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB1 [ 210.566468][ T9849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.572827][ T9849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.668382][ T9849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.718243][ T5881] usb 10-1: USB disconnect, device number 9 [ 210.731394][ T5881] kobil ttyUSB1: KOBIL USB smart card terminal converter now disconnected from ttyUSB1 [ 210.746054][ T5881] kobil_sct 10-1:2.45: device disconnected [ 210.760571][ T9849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.768744][ T9849] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.770351][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 210.838345][ T9849] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.852239][ T9849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.880770][ T9849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 210.942914][ T9849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 210.970033][ T9876] FAULT_INJECTION: forcing a failure. [ 210.970033][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.995044][ T9876] CPU: 1 UID: 0 PID: 9876 Comm: syz.0.1134 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 211.005439][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 211.015522][ T9876] Call Trace: [ 211.018830][ T9876] [ 211.021783][ T9876] dump_stack_lvl+0x241/0x360 [ 211.026496][ T9876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.031749][ T9876] ? __pfx__printk+0x10/0x10 [ 211.036385][ T9876] ? snprintf+0xda/0x120 [ 211.040671][ T9876] should_fail_ex+0x3b0/0x4e0 [ 211.045400][ T9876] _copy_to_user+0x31/0xb0 [ 211.049870][ T9876] simple_read_from_buffer+0xca/0x150 [ 211.055278][ T9876] proc_fail_nth_read+0x1e9/0x250 [ 211.060339][ T9876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.065913][ T9876] ? rw_verify_area+0x55e/0x6f0 [ 211.070789][ T9876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.076370][ T9876] vfs_read+0x1fc/0xb70 [ 211.080551][ T9876] ? __pfx___mutex_lock+0x10/0x10 [ 211.085604][ T9876] ? __pfx_vfs_read+0x10/0x10 [ 211.090315][ T9876] ? __fget_files+0x2a/0x410 [ 211.094940][ T9876] ? __fget_files+0x395/0x410 [ 211.099655][ T9876] ? __fget_files+0x2a/0x410 [ 211.104296][ T9876] ksys_read+0x18f/0x2b0 [ 211.108574][ T9876] ? __pfx_ksys_read+0x10/0x10 [ 211.113370][ T9876] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 211.119993][ T9876] ? lockdep_hardirqs_on+0x99/0x150 [ 211.125253][ T9876] __do_fast_syscall_32+0xb4/0x110 [ 211.130401][ T9876] ? exc_page_fault+0x590/0x8b0 [ 211.135287][ T9876] do_fast_syscall_32+0x34/0x80 [ 211.140165][ T9876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.146529][ T9876] RIP: 0023:0xf7f45579 [ 211.149615][ T9880] Set syz1 is full, maxelem 65536 reached [ 211.150603][ T9876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 211.175978][ T9876] RSP: 002b:00000000f5096590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 211.184425][ T9876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5096620 [ 211.192430][ T9876] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 211.200436][ T9876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 211.208439][ T9876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.216442][ T9876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.224461][ T9876] [ 211.274929][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.335172][ T5885] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 211.455042][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 211.476174][ T8] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 211.507784][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.516102][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 211.542892][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.558376][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.577676][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.602675][ T8] usb 5-1: config 0 descriptor?? [ 211.610803][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 211.625002][ T5885] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 211.647995][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.671080][ T5885] usb 6-1: config 0 descriptor?? [ 211.687657][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 212.012257][ T9909] FAULT_INJECTION: forcing a failure. [ 212.012257][ T9909] name failslab, interval 1, probability 0, space 0, times 1 [ 212.096417][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.9.1142 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 212.106820][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.116911][ T9909] Call Trace: [ 212.120207][ T9909] [ 212.123157][ T9909] dump_stack_lvl+0x241/0x360 [ 212.127873][ T9909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.133120][ T9909] ? __pfx__printk+0x10/0x10 [ 212.137750][ T9909] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 212.143155][ T9909] ? __pfx___might_resched+0x10/0x10 [ 212.148470][ T9909] ? rcu_is_watching+0x15/0xb0 [ 212.153271][ T9909] should_fail_ex+0x3b0/0x4e0 [ 212.157965][ T9909] should_failslab+0xac/0x100 [ 212.162677][ T9909] __kmalloc_node_noprof+0xe1/0x4d0 [ 212.167922][ T9909] ? __kvmalloc_node_noprof+0x72/0x190 [ 212.170924][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 212.173392][ T9909] __kvmalloc_node_noprof+0x72/0x190 [ 212.187565][ T9909] nf_hook_entries_grow+0x288/0x720 [ 212.192794][ T9909] __nf_register_net_hook+0x278/0x8d0 [ 212.198200][ T9909] nf_register_net_hook+0xb0/0x190 [ 212.203346][ T9909] nf_register_net_hooks+0x41/0x1a0 [ 212.208578][ T9909] nf_ct_netns_do_get+0x3b0/0x630 [ 212.213622][ T9909] ? _raw_spin_lock_irq+0xdf/0x120 [ 212.218763][ T9909] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 212.224347][ T9909] ? __flush_work+0xe9/0xc60 [ 212.228966][ T9909] ? __flush_work+0xe9/0xc60 [ 212.233587][ T9909] connmark_mt_check+0x57/0x100 [ 212.238465][ T9909] xt_check_match+0x368/0xa40 [ 212.243180][ T9909] ? __pfx_xt_check_match+0x10/0x10 [ 212.248412][ T9909] ? stack_depot_save_flags+0x37/0x940 [ 212.253164][ T5836] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 212.253905][ T9909] ? __nft_match_init+0x186/0xae0 [ 212.265746][ T9909] __nft_match_init+0x7f8/0xae0 [ 212.270680][ T9909] ? ____sys_sendmsg+0x52a/0x7e0 [ 212.275753][ T9909] ? __sys_sendmsg+0x269/0x350 [ 212.280543][ T9909] ? __do_fast_syscall_32+0xb4/0x110 [ 212.285872][ T9909] ? __pfx___nft_match_init+0x10/0x10 [ 212.291322][ T9909] ? rcu_is_watching+0x15/0xb0 [ 212.296118][ T9909] ? trace_kmalloc+0x1f/0xd0 [ 212.300741][ T9909] ? nf_tables_newrule+0x1609/0x2980 [ 212.306067][ T9909] nf_tables_newrule+0x185e/0x2980 [ 212.311239][ T9909] ? __pfx_nf_tables_newrule+0x10/0x10 [ 212.316753][ T9909] ? __nla_parse+0x40/0x60 [ 212.321213][ T9909] nfnetlink_rcv+0x14e3/0x2ab0 [ 212.324995][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 212.326028][ T9909] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.337157][ T9909] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.342391][ T9909] ? skb_clone+0x240/0x390 [ 212.346841][ T9909] ? __pfx_lock_release+0x10/0x10 [ 212.351909][ T9909] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.357145][ T9909] netlink_unicast+0x7f6/0x990 [ 212.361959][ T9909] ? __pfx_netlink_unicast+0x10/0x10 [ 212.367281][ T9909] ? __virt_addr_valid+0x45f/0x530 [ 212.372427][ T9909] ? __phys_addr_symbol+0x2f/0x70 [ 212.377485][ T9909] ? __check_object_size+0x47a/0x730 [ 212.382809][ T9909] netlink_sendmsg+0x8e4/0xcb0 [ 212.387619][ T9909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.392950][ T9909] ? __pfx_lock_release+0x10/0x10 [ 212.398000][ T9909] ? aa_sock_msg_perm+0x91/0x160 [ 212.402978][ T9909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.408295][ T9909] __sock_sendmsg+0x221/0x270 [ 212.412997][ T9909] ____sys_sendmsg+0x52a/0x7e0 [ 212.413005][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.413034][ T9909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.429062][ T9909] __sys_sendmsg+0x269/0x350 [ 212.433706][ T9909] ? __pfx_lock_release+0x10/0x10 [ 212.438764][ T9909] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.443925][ T9909] ? __pfx_vfs_write+0x10/0x10 [ 212.448753][ T9909] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 212.455371][ T9909] ? lockdep_hardirqs_on+0x99/0x150 [ 212.460596][ T9909] __do_fast_syscall_32+0xb4/0x110 [ 212.465749][ T9909] ? exc_page_fault+0x590/0x8b0 [ 212.470635][ T9909] do_fast_syscall_32+0x34/0x80 [ 212.475530][ T9909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.481886][ T9909] RIP: 0023:0xf7f6f579 [ 212.485983][ T9909] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.505626][ T9909] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 212.514096][ T9909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 212.522199][ T9909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.530204][ T9909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.538206][ T9909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.546210][ T9909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.554227][ T9909] [ 212.565509][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.585129][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.597577][ T9909] cannot load conntrack support for proto=2 [ 212.604615][ T8] gspca_vc032x: reg_w err -110 [ 212.610160][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.615548][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.616038][ T9920] FAULT_INJECTION: forcing a failure. [ 212.616038][ T9920] name failslab, interval 1, probability 0, space 0, times 0 [ 212.620836][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620851][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620861][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620870][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620881][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620900][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.620912][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.646478][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.650916][ T5885] hid (null): nested delimiters [ 212.686214][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.691547][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.699401][ T5885] stadia 0003:18D1:9400.000F: nested delimiters [ 212.705866][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.1.1146 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 212.716237][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.726324][ T9920] Call Trace: [ 212.729631][ T9920] [ 212.732589][ T9920] dump_stack_lvl+0x241/0x360 [ 212.737311][ T9920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.742552][ T9920] ? __pfx__printk+0x10/0x10 [ 212.747183][ T9920] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 212.752592][ T9920] ? __pfx___might_resched+0x10/0x10 [ 212.757924][ T9920] should_fail_ex+0x3b0/0x4e0 [ 212.762641][ T9920] should_failslab+0xac/0x100 [ 212.767346][ T9920] __kmalloc_node_noprof+0xe1/0x4d0 [ 212.772552][ T9920] ? __kvmalloc_node_noprof+0x72/0x190 [ 212.778022][ T9920] __kvmalloc_node_noprof+0x72/0x190 [ 212.783315][ T9920] __nf_hook_entries_try_shrink+0x330/0x730 [ 212.789223][ T9920] __nf_unregister_net_hook+0x5cf/0x800 [ 212.794787][ T9920] nf_unregister_net_hooks+0xd0/0x140 [ 212.800194][ T9920] nf_ct_netns_put+0x3bc/0x510 [ 212.804980][ T9920] ? __pfx_nft_ct_get_destroy+0x10/0x10 [ 212.810560][ T9920] nf_tables_abort+0x7b8f/0x8910 [ 212.815552][ T9920] ? __pfx_nf_tables_abort+0x10/0x10 [ 212.820914][ T9920] ? __nla_parse+0x40/0x60 [ 212.825339][ T9920] nfnetlink_rcv+0x19c2/0x2ab0 [ 212.830137][ T9920] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.835465][ T9920] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.840677][ T9920] ? skb_clone+0x240/0x390 [ 212.845104][ T9920] ? __pfx_lock_release+0x10/0x10 [ 212.850156][ T9920] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.855362][ T9920] netlink_unicast+0x7f6/0x990 [ 212.860140][ T9920] ? __pfx_netlink_unicast+0x10/0x10 [ 212.865433][ T9920] ? __virt_addr_valid+0x45f/0x530 [ 212.870558][ T9920] ? __phys_addr_symbol+0x2f/0x70 [ 212.875586][ T9920] ? __check_object_size+0x47a/0x730 [ 212.880883][ T9920] netlink_sendmsg+0x8e4/0xcb0 [ 212.885668][ T9920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.890971][ T9920] ? __pfx_lock_release+0x10/0x10 [ 212.896005][ T9920] ? aa_sock_msg_perm+0x91/0x160 [ 212.900953][ T9920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.906246][ T9920] __sock_sendmsg+0x221/0x270 [ 212.910933][ T9920] ____sys_sendmsg+0x52a/0x7e0 [ 212.915711][ T9920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.921016][ T9920] __sys_sendmsg+0x269/0x350 [ 212.925657][ T9920] ? __pfx_lock_release+0x10/0x10 [ 212.930690][ T9920] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.935818][ T9920] ? __pfx_vfs_write+0x10/0x10 [ 212.940621][ T9920] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 212.947213][ T9920] ? lockdep_hardirqs_on+0x99/0x150 [ 212.952414][ T9920] __do_fast_syscall_32+0xb4/0x110 [ 212.957533][ T9920] ? exc_page_fault+0x590/0x8b0 [ 212.962394][ T9920] do_fast_syscall_32+0x34/0x80 [ 212.967257][ T9920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.973597][ T9920] RIP: 0023:0xf7f1f579 [ 212.977669][ T9920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.997281][ T9920] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 213.005701][ T9920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 213.013676][ T9920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.021655][ T9920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.029635][ T9920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.037614][ T9920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.045604][ T9920] [ 213.052405][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.057829][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.063719][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.069095][ T5885] stadia 0003:18D1:9400.000F: item 0 1 2 10 parsing failed [ 213.076947][ T5885] stadia 0003:18D1:9400.000F: parse failed [ 213.082850][ T5885] stadia 0003:18D1:9400.000F: probe with driver stadia failed with error -22 [ 213.091732][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.097151][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.102468][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.110471][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.115894][ T8] gspca_vc032x: Unknown sensor... [ 213.121018][ T8] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 213.134996][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.177906][ T51] usb 6-1: USB disconnect, device number 15 [ 213.457573][ T9943] loop6: detected capacity change from 0 to 524287999 [ 213.471584][ C0] blk_print_req_error: 121 callbacks suppressed [ 213.471608][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.487230][ C0] buffer_io_error: 120 callbacks suppressed [ 213.487244][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.502912][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.512121][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.533282][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.542571][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.585546][ T9947] [ 213.588030][ T9947] ====================================================== [ 213.595068][ T9947] WARNING: possible circular locking dependency detected [ 213.602102][ T9947] 6.13.0-syzkaller-00164-g100ceb4817a2 #0 Not tainted [ 213.608874][ T9947] ------------------------------------------------------ [ 213.615916][ T9947] syz.9.1150/9947 is trying to acquire lock: [ 213.621913][ T9947] ffff88802567c1a8 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x43f/0x900 [ 213.631892][ T9947] [ 213.631892][ T9947] but task is already holding lock: [ 213.639280][ T9947] ffff88802567bb58 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 213.649083][ T9947] [ 213.649083][ T9947] which lock already depends on the new lock. [ 213.649083][ T9947] [ 213.659507][ T9947] [ 213.659507][ T9947] the existing dependency chain (in reverse order) is: [ 213.668543][ T9947] [ 213.668543][ T9947] -> #5 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 213.677205][ T9947] lock_acquire+0x1ed/0x550 [ 213.682263][ T9947] blk_mq_submit_bio+0x1536/0x2390 [ 213.687932][ T9947] __submit_bio+0x2c6/0x560 [ 213.692998][ T9947] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 213.699186][ T9947] mpage_readahead+0x630/0x780 [ 213.704514][ T9947] read_pages+0x176/0x750 [ 213.709416][ T9947] page_cache_ra_unbounded+0x606/0x720 [ 213.715439][ T9947] do_sync_mmap_readahead+0x499/0x970 [ 213.721364][ T9947] filemap_fault+0x8a9/0x1490 [ 213.726595][ T9947] __do_fault+0x135/0x390 [ 213.731472][ T9947] handle_pte_fault+0x39eb/0x5ed0 [ 213.737046][ T9947] handle_mm_fault+0x1106/0x1bb0 [ 213.742538][ T9947] exc_page_fault+0x2b9/0x8b0 [ 213.747766][ T9947] asm_exc_page_fault+0x26/0x30 [ 213.753161][ T9947] __get_user_4+0x18/0x30 [ 213.758038][ T9947] sctp_getsockopt+0x5d/0xbb0 [ 213.763273][ T9947] do_sock_getsockopt+0x3c4/0x7e0 [ 213.768855][ T9947] __ia32_sys_getsockopt+0x29f/0x370 [ 213.774694][ T9947] __do_fast_syscall_32+0xb4/0x110 [ 213.780359][ T9947] do_fast_syscall_32+0x34/0x80 [ 213.785760][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.792629][ T9947] [ 213.792629][ T9947] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 213.801169][ T9947] lock_acquire+0x1ed/0x550 [ 213.806197][ T9947] down_read+0xb1/0xa40 [ 213.810916][ T9947] filemap_fault+0x615/0x1490 [ 213.816112][ T9947] __do_fault+0x135/0x390 [ 213.820958][ T9947] handle_pte_fault+0x39eb/0x5ed0 [ 213.826511][ T9947] handle_mm_fault+0x1106/0x1bb0 [ 213.832009][ T9947] exc_page_fault+0x2b9/0x8b0 [ 213.837297][ T9947] asm_exc_page_fault+0x26/0x30 [ 213.842669][ T9947] rep_movs_alternative+0x4a/0x70 [ 213.848220][ T9947] _copy_from_user+0x7b/0xb0 [ 213.853326][ T9947] lo_ioctl+0x4eb/0x1f50 [ 213.858085][ T9947] lo_compat_ioctl+0x292/0x330 [ 213.863364][ T9947] compat_blkdev_ioctl+0x5d8/0x7b0 [ 213.868988][ T9947] __se_compat_sys_ioctl+0x502/0xc10 [ 213.874793][ T9947] __do_fast_syscall_32+0xb4/0x110 [ 213.880426][ T9947] do_fast_syscall_32+0x34/0x80 [ 213.885801][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.892657][ T9947] [ 213.892657][ T9947] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 213.900221][ T9947] lock_acquire+0x1ed/0x550 [ 213.905245][ T9947] __might_fault+0xc6/0x120 [ 213.910272][ T9947] _copy_from_user+0x28/0xb0 [ 213.915379][ T9947] blk_trace_ioctl+0x295/0x9a0 [ 213.920668][ T9947] compat_blkdev_ioctl+0x462/0x7b0 [ 213.926307][ T9947] __se_compat_sys_ioctl+0x502/0xc10 [ 213.932137][ T9947] __do_fast_syscall_32+0xb4/0x110 [ 213.937792][ T9947] do_fast_syscall_32+0x34/0x80 [ 213.943186][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.950044][ T9947] [ 213.950044][ T9947] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 213.957867][ T9947] lock_acquire+0x1ed/0x550 [ 213.962889][ T9947] __mutex_lock+0x1ac/0xee0 [ 213.967906][ T9947] blk_mq_init_sched+0x3fa/0x830 [ 213.973359][ T9947] elevator_init_mq+0x20e/0x320 [ 213.978725][ T9947] add_disk_fwnode+0x10d/0xf80 [ 213.984011][ T9947] sd_probe+0xba6/0x1100 [ 213.988782][ T9947] really_probe+0x2b8/0xad0 [ 213.993811][ T9947] __driver_probe_device+0x1a2/0x390 [ 213.999615][ T9947] driver_probe_device+0x50/0x430 [ 214.005159][ T9947] __device_attach_driver+0x2d6/0x530 [ 214.011050][ T9947] bus_for_each_drv+0x24e/0x2e0 [ 214.016417][ T9947] __device_attach_async_helper+0x22d/0x300 [ 214.022833][ T9947] async_run_entry_fn+0xa8/0x420 [ 214.028289][ T9947] process_scheduled_works+0xa66/0x1840 [ 214.034349][ T9947] worker_thread+0x870/0xd30 [ 214.039454][ T9947] kthread+0x2f0/0x390 [ 214.044038][ T9947] ret_from_fork+0x4b/0x80 [ 214.048970][ T9947] ret_from_fork_asm+0x1a/0x30 [ 214.054247][ T9947] [ 214.054247][ T9947] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 214.063121][ T9947] lock_acquire+0x1ed/0x550 [ 214.068144][ T9947] blk_queue_enter+0xe1/0x600 [ 214.073343][ T9947] blk_mq_alloc_request+0x4fa/0xaa0 [ 214.079061][ T9947] scsi_execute_cmd+0x16c/0x10e0 [ 214.084521][ T9947] read_capacity_16+0x2b4/0x1450 [ 214.090000][ T9947] sd_revalidate_disk+0x1013/0xbce0 [ 214.095723][ T9947] sd_probe+0x9fa/0x1100 [ 214.100484][ T9947] really_probe+0x2b8/0xad0 [ 214.105508][ T9947] __driver_probe_device+0x1a2/0x390 [ 214.111323][ T9947] driver_probe_device+0x50/0x430 [ 214.116869][ T9947] __device_attach_driver+0x2d6/0x530 [ 214.122762][ T9947] bus_for_each_drv+0x24e/0x2e0 [ 214.128131][ T9947] __device_attach_async_helper+0x22d/0x300 [ 214.134554][ T9947] async_run_entry_fn+0xa8/0x420 [ 214.140011][ T9947] process_scheduled_works+0xa66/0x1840 [ 214.146071][ T9947] worker_thread+0x870/0xd30 [ 214.151179][ T9947] kthread+0x2f0/0x390 [ 214.155767][ T9947] ret_from_fork+0x4b/0x80 [ 214.160697][ T9947] ret_from_fork_asm+0x1a/0x30 [ 214.165980][ T9947] [ 214.165980][ T9947] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 214.173629][ T9947] validate_chain+0x18ef/0x5920 [ 214.179003][ T9947] __lock_acquire+0x1397/0x2100 [ 214.184377][ T9947] lock_acquire+0x1ed/0x550 [ 214.189404][ T9947] __mutex_lock+0x1ac/0xee0 [ 214.194428][ T9947] loop_reconfigure_limits+0x43f/0x900 [ 214.200432][ T9947] lo_ioctl+0x1351/0x1f50 [ 214.205284][ T9947] lo_compat_ioctl+0x292/0x330 [ 214.210570][ T9947] compat_blkdev_ioctl+0x5d8/0x7b0 [ 214.216206][ T9947] __se_compat_sys_ioctl+0x502/0xc10 [ 214.222013][ T9947] __do_fast_syscall_32+0xb4/0x110 [ 214.227646][ T9947] do_fast_syscall_32+0x34/0x80 [ 214.233019][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.239868][ T9947] [ 214.239868][ T9947] other info that might help us debug this: [ 214.239868][ T9947] [ 214.250086][ T9947] Chain exists of: [ 214.250086][ T9947] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#23 [ 214.250086][ T9947] [ 214.264970][ T9947] Possible unsafe locking scenario: [ 214.264970][ T9947] [ 214.272415][ T9947] CPU0 CPU1 [ 214.277772][ T9947] ---- ---- [ 214.283130][ T9947] lock(&q->q_usage_counter(io)#23); [ 214.288508][ T9947] lock(mapping.invalidate_lock#2); [ 214.296333][ T9947] lock(&q->q_usage_counter(io)#23); [ 214.304230][ T9947] lock(&q->limits_lock); [ 214.308647][ T9947] [ 214.308647][ T9947] *** DEADLOCK *** [ 214.308647][ T9947] [ 214.316787][ T9947] 3 locks held by syz.9.1150/9947: [ 214.321903][ T9947] #0: ffff8880256fcb60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 214.330879][ T9947] #1: ffff88802567bb58 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 214.341076][ T9947] #2: ffff88802567bb90 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 214.351443][ T9947] [ 214.351443][ T9947] stack backtrace: [ 214.357325][ T9947] CPU: 0 UID: 0 PID: 9947 Comm: syz.9.1150 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 214.367650][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.377706][ T9947] Call Trace: [ 214.380986][ T9947] [ 214.383915][ T9947] dump_stack_lvl+0x241/0x360 [ 214.388601][ T9947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.393809][ T9947] ? __pfx__printk+0x10/0x10 [ 214.398418][ T9947] print_circular_bug+0x13a/0x1b0 [ 214.403447][ T9947] check_noncircular+0x36a/0x4a0 [ 214.408385][ T9947] ? __pfx_check_noncircular+0x10/0x10 [ 214.414023][ T9947] validate_chain+0x18ef/0x5920 [ 214.418888][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.424091][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.429290][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.434490][ T9947] ? lockdep_unlock+0x16a/0x300 [ 214.439528][ T9947] ? __pfx_lockdep_unlock+0x10/0x10 [ 214.444736][ T9947] ? mark_lock+0x9a/0x360 [ 214.449074][ T9947] __lock_acquire+0x1397/0x2100 [ 214.453930][ T9947] lock_acquire+0x1ed/0x550 [ 214.458435][ T9947] ? loop_reconfigure_limits+0x43f/0x900 [ 214.464074][ T9947] ? __pfx_lock_acquire+0x10/0x10 [ 214.469100][ T9947] ? __pfx___might_resched+0x10/0x10 [ 214.474386][ T9947] ? mark_lock+0x9a/0x360 [ 214.478735][ T9947] __mutex_lock+0x1ac/0xee0 [ 214.483235][ T9947] ? loop_reconfigure_limits+0x43f/0x900 [ 214.488872][ T9947] ? loop_reconfigure_limits+0x43f/0x900 [ 214.494519][ T9947] ? __pfx___mutex_lock+0x10/0x10 [ 214.499551][ T9947] loop_reconfigure_limits+0x43f/0x900 [ 214.505020][ T9947] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 214.511019][ T9947] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 214.516912][ T9947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.523233][ T9947] ? finish_wait+0xd4/0x1e0 [ 214.527739][ T9947] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 214.533456][ T9947] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 214.539524][ T9947] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.545595][ T9947] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 214.551492][ T9947] ? lo_ioctl+0x1344/0x1f50 [ 214.556007][ T9947] lo_ioctl+0x1351/0x1f50 [ 214.560337][ T9947] ? __pfx_lo_ioctl+0x10/0x10 [ 214.565016][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.570220][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.575429][ T9947] ? validate_chain+0x11e/0x5920 [ 214.580372][ T9947] ? __pfx_validate_chain+0x10/0x10 [ 214.585574][ T9947] ? mark_lock+0x9a/0x360 [ 214.590091][ T9947] ? validate_chain+0x11e/0x5920 [ 214.595064][ T9947] ? mark_lock+0x9a/0x360 [ 214.599409][ T9947] ? __lock_acquire+0x1397/0x2100 [ 214.604441][ T9947] ? __pfx_lock_acquire+0x10/0x10 [ 214.609476][ T9947] ? is_bpf_text_address+0x26/0x2a0 [ 214.614677][ T9947] ? __pfx_lock_release+0x10/0x10 [ 214.619700][ T9947] ? unwind_next_frame+0x18e6/0x22d0 [ 214.624989][ T9947] ? preempt_count_add+0x93/0x190 [ 214.630015][ T9947] ? is_bpf_text_address+0x285/0x2a0 [ 214.635306][ T9947] ? is_bpf_text_address+0x26/0x2a0 [ 214.640506][ T9947] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.646663][ T9947] ? kernel_text_address+0xa7/0xe0 [ 214.651780][ T9947] ? __kernel_text_address+0xd/0x40 [ 214.656983][ T9947] ? unwind_get_return_address+0x4d/0x90 [ 214.662616][ T9947] ? arch_stack_walk+0xfd/0x150 [ 214.667471][ T9947] ? stack_trace_save+0x118/0x1d0 [ 214.672496][ T9947] ? __pfx_stack_trace_save+0x10/0x10 [ 214.677865][ T9947] ? stack_depot_save_flags+0x37/0x940 [ 214.683330][ T9947] ? kasan_save_track+0x51/0x80 [ 214.688181][ T9947] ? kasan_save_track+0x3f/0x80 [ 214.693023][ T9947] ? kasan_save_free_info+0x40/0x50 [ 214.698218][ T9947] ? __kasan_slab_free+0x59/0x70 [ 214.703156][ T9947] ? kfree+0x196/0x430 [ 214.707227][ T9947] ? tomoyo_path_number_perm+0x679/0x860 [ 214.712862][ T9947] ? security_file_ioctl_compat+0xc6/0x2a0 [ 214.718690][ T9947] ? __se_compat_sys_ioctl+0xd6/0xc10 [ 214.724093][ T9947] ? do_vfs_ioctl+0xf07/0x2e40 [ 214.728879][ T9947] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 214.733914][ T9947] ? mark_lock+0x9a/0x360 [ 214.738258][ T9947] lo_compat_ioctl+0x292/0x330 [ 214.743030][ T9947] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 214.748325][ T9947] ? blkdev_common_ioctl+0xfb2/0x2460 [ 214.753701][ T9947] ? tomoyo_path_number_perm+0x679/0x860 [ 214.759343][ T9947] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 214.764978][ T9947] ? tomoyo_path_number_perm+0x6f9/0x860 [ 214.770617][ T9947] ? tomoyo_path_number_perm+0x206/0x860 [ 214.776255][ T9947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.782241][ T9947] ? __pfx_lock_acquire+0x10/0x10 [ 214.787277][ T9947] ? file_to_blk_mode+0xcc/0x140 [ 214.792211][ T9947] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 214.797497][ T9947] compat_blkdev_ioctl+0x5d8/0x7b0 [ 214.802615][ T9947] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 214.808255][ T9947] ? __fget_files+0x2a/0x410 [ 214.812855][ T9947] __se_compat_sys_ioctl+0x502/0xc10 [ 214.818137][ T9947] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 214.823950][ T9947] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.829933][ T9947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.836267][ T9947] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 214.842858][ T9947] ? lockdep_hardirqs_on+0x99/0x150 [ 214.848059][ T9947] __do_fast_syscall_32+0xb4/0x110 [ 214.853174][ T9947] ? ret_from_fork_asm+0x1a/0x30 [ 214.858116][ T9947] ? lockdep_hardirqs_on+0x99/0x150 [ 214.863319][ T9947] do_fast_syscall_32+0x34/0x80 [ 214.868172][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.874508][ T9947] RIP: 0023:0xf7f6f579 [ 214.878576][ T9947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 214.898204][ T9947] RSP: 002b:00000000f50a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 214.906626][ T9947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c09 [ 214.914606][ T9947] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.922594][ T9947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.930584][ T9947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.938570][ T9947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.946650][ T9947] [ 214.964343][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 214.970783][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.976937][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.017400][ T9947] Invalid logical block size (3) [ 215.034678][ T5885] usb 5-1: USB disconnect, device number 6 [ 215.060097][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.069346][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.119404][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.128650][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.143055][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.152301][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.161348][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.170582][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.180746][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.189992][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.198035][ T9943] ldm_validate_partition_table(): Disk read failed. [ 215.204902][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.206806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.220080][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.229524][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.238754][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.247782][ T8] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 215.256685][ T9943] Dev loop6: unable to read RDB block 0 [ 215.295307][ T9943] loop6: unable to read partition table [ 215.318409][ T9943] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 215.406155][ T8] usb 10-1: device descriptor read/64, error -71 [ 215.654951][ T8] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 215.814942][ T8] usb 10-1: device descriptor read/64, error -71 [ 215.935117][ T8] usb usb10-port1: attempt power cycle [ 216.274842][ T8] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 216.298050][ T8] usb 10-1: device descriptor read/8, error -71 [ 217.052045][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.052073][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.285595][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout