last executing test programs: 33.752590477s ago: executing program 3 (id=3380): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 31.047716297s ago: executing program 3 (id=3386): socket$alg(0x26, 0x5, 0x0) r0 = syz_usbip_server_init(0x3) write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc506", 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x89, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21.165862951s ago: executing program 0 (id=3418): socket$rds(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x4) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000001"], 0x24}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000"], 0x1c}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) 19.74233842s ago: executing program 0 (id=3419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140020001000010000000000000000000000000a50000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f0c000b"], 0x78}}, 0x0) 19.48273735s ago: executing program 0 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x1c}}, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085"], &(0x7f00000001c0)='syzkaller\x00', 0x4}, 0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0xa, 0x3fffe) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 19.003994793s ago: executing program 0 (id=3421): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="4dfcda61763dff617b1f46968be03364c1a5ec05a16d333afaa5aca8cf08ff05a8173fe045dec66e41cec09164fbb0c7af9bc9cc05405b27631c130aadcefdec09d8a74cffb008a66428467570a1ef35f547b0cba721820a50c1925fb4725aebb7c20f79cffe830a3580282b70ef9e7ebf2bb49d5df2f619cb426c715b0d43ecab560d49ef462341279bc66d8ace0f4ebd553d770752ddb410a997bce7a0272051a323a351c82c61834a7e1c2b3c35b8034feed988af4add368bec1088f509f0d73de4eb3e6ad53c44f90dc645a0fbf5221c1d8d0ccf837c923531451032a26260ce7305cf685ad6ea3b3c4c964d7ab4a7bd31dfacb2eb655e997da4d8cb4d58244a7e971003d0e060cb21c8207e34a862e97478eb677ebbbc58e75bcc2408cd6444b5e8977714fdcf28f02ef79061211e4aea477da56c45ec813eca35a0d51b5404e210bc8c311c546922a4d099370ef4cc438f2c428708166931f339d91b92d334221e7cef3255026ab85c2abf9597b3d0616e6040238585a260fb4ffa388fb89f96727d501dd391cd2b9500fbe4749723059c4af6ddcc7b4d3eee4fbdbce89e8ed0d6fd7d7751c48a5f867a12a9edf431e9565700ee4998cea1cc31bef0ea7e0c95342ad46c74ed824341dfe9a79b19a4af2b95c2eacf49ff2cdc14e4dbe48a51d60bf09a4d96a1cc7a34a9405c4d2985333fa02e4272bf467d5cb20031a3a013d65dd077af5249c5242b7a404bbe6ac01df468365d27b8c695468204cb42585e83c97345fc456e5f7d6ab84325a8ce170a4630d3dd6d0c683f6a7506afa655de3c25d39407f9055685a637c02af3b424731ffe1d268217ff22ed277917840ace2ebacc2ba402275c00bdd36d3edc38c039c38cb0292dfbae12876429c53eaff3b1a64c26ae65544633c4f600c1e82a826b9cb2d87781efa5d8d964fde7ee4d3f6f044c529c42f5c2c3af903ef2b1304e5a77f78088c81357e914f9d5fe60af04aab855db0b23c9c0f911bcd03caf1633aaf32620ee38b75af49e4f23d652f126ee9f72b804116a106cb7ab2432983ac7c8dd5dcd4f5e40388962d5d161aef04c288508cd8fc6bd3e62a898e7b835f38eed5e0d1a55e6dd35d6ad20843023fb4fac5c5e3e72a221c68cdae67dfaed5e76ec9098f6c18f7aa0a58e9d5aa58676421cd9af8baac8a948b5d5b7f0bb566386bde8d8bffa669383fb5d7185194f3e32bb8422cefe874d38c8426b5b21796e7e4619224be6605a0fb8cce1dc3ba321eda8d13aa0adf856ecdd0918c64ae388993a2e4cb96c9be793116965cb1c16ed0d932729e4f5ccea1149a8729c0bdcbb90ce9c46d35ab3ab26b5fd88abd1c6e5526dd7672ad58a32cbb314d48f6cb13010720bf9796191c62abb490cf55ff54fada5274343f47f06e2f0f49a33976e76f6c338954f857f5fa8febc75670dd0270b9dc65bd51f14e9a0bf03747fbe56dfdaa38085f71627945e0a946789d2374188c21733798f43692077b697c71f49c7ab7b411e490dbba14ea3a1bec162843f3481dd2ae68d635cf4d44ecef9a8ce0baa82bc07f2fe690e26a467d5e9935b6a39e48e608811442cb7ae769dbd44830f5c2623ba80f6b74de37f4a47369e79d8f148ba5f1f9055c0d879700f07840aba2b34d8a5180eb9619556530fc76ca0c1c5bf0ec354b372f16c3949298fbfd03a602c91454f660ccc0cff70218a2016aae94b9bc8ead58110abe4896bc7880a861f16f9879058d1394452183d9acd1ba4e1b7bf31a8dfb5d8f9eeb149cedd8a78ba4a5800bac4e425debb54f28222e4ade6fa108b32927a4223588ffa67183d1f81829547e39d326cd2b4b9d873df6e5a8a93f95b911be0e88e70c664a439e96aec7ce93821b1469e5dbfc6d96d1a1070b64aedfa225b78cb0e054ec6f15a9c4c0812deaa7a45cd9ce557aa2030a8991b342f8b8997b9bba771cf3d4e8e1e87ea5798f1a9b66eef7a0265cefacee040d2bbb885622d22177ddabe66c84124fcf0c581e1b120af0bf5656616cbb48efb4cd605e4644fe0b701166b0e43ca1ed0267fae98cdbdba46f5edcaaace42dffe02f5e44e5f43d7b445944f6acc42048f94f1026de6af4b3091c878c665a66aaaf72ef0519a3489aebd174e6bde887d56b5df1004789e43c648e962547d65e5ca970be1733cf686aff66f862ef0fe5edd757c8240e4e5e53ea1f720e03bcc2efe908c59e9c01d6ed0fd1fe789494524107ecc958c72bc22e10aa3d77dbbc49988961014bf2c2da1b7298e525afa70dc900733eedf3d7fa2bb21caca7ab6d3c181a7eacf6eb4ca8e2e6e5ce9cc29de868773beb4b583a0bf4e19b20637c621c6600fad6fcc6a38f9d710f1b9fc961a18a8eb4efdd7ce70e9c365217c7c272ac6633171a2acc83e840b00cab4351074829aa5cf930dd762b9efdea67d41f7d72588090a0d0f20df02e6fea364686812c6ee5a28199fce56fa2597c5df96a16abcdc80ddab618c77040b090a3987cdeab024d62c079669a8edea44146a5e334b283f1b75eed3582c11353381338ce43d361f2bc39c27c3a20352bbf5e0a7b9111408c7c0174b2bba67f6e985808ba7c3d6b41da685e07a18eea715503825231761c9f2368cc7345172fbdbf954214c994e1242e068157af111c696e5e245dc1d558a7702447912cff9e4de795ac5e2cf11e0032a80165252fcfa012316c13f094ce01206b710479e81a7dc8a796adbff0a304c8b96a7ed1c7e9735d0b8926ab12a885e353bf7fa2ae9b5d16b70426e82c6126b44504d260d0c21f05774d465b80d9eced55a1da5901d6061aee3cccf165e0fe0a2fcb6c58ece7ce863725f36485299aa13ad7cccf06d7800552ba7d7c567aca102be5c823c83fa717021053c5be5fdfbdb106be54a60ef01af22ae29511b4fbec90dbc9112720623fe2c01cfc33b38150f11fc6a9a5649e70a5faceabda0a9fac92dfefa76eaf8bf624be632126dcee30ef71f1403c7abbf63bb17ada06e17a9023a05667818bbe43d4ed2873164e51d2454a50b00a007351c14d3433afaca06fa43285ff80d9bdcff5a959110cda16d5c144033c022fa1ae8ac6007631acbada7932acd69808c4bb407352e7588a141604bc2d48fd4a826872ab303464232bc4d1578779de50b7f9ce626152f046efc3bb20417b43c7a7ed9239eb3ec40815d838bddbd65de371367e5a9ee95766ebc4f6e66efbf66de6da16009794ff13ee7a7ea7cecb5b3d2997cd253d19d29991e44ae869b074783c525a63179bff68bcc8fe9e8cd9f3a3e957ef01a864eda255accd82e9b93f870aa8766941495b196612faee05265c0ee0ec6a10017a79a2187a62bba75ff82f403f8e919d0e23743faeba561c802ee0bc02ac1ee63d6e0898c97d6923177ad4c3c18ca320fbd518fa9b94b17470e535cfc15c4cde45843c18a1e456ee2c7eef7205d8b025967c5eb47f33d8e592168374a520ecf77682d0c02396fc77c40645b85a0d553ce7d87ca82aa76c5b4e5566a8d08cc06d058d0b93401c728487181c384da61c8f6261008987d51045714af3d9d949b62a7ffcc52871494d27c3e0dbbc18cd2c0a9f8c6c3fa53f75c836e569bae2634cabba4d84f73229fe5a6d56a853e0abe40d598af95dd6e91d594a72938da3afa0cea875dc46127ac8e78eb009bec784bc031e45ebac856839ebc690fe1d41de79ddd672e5ba90fab7bd0bfddc044396d78c67e543b234602aef6f8f9f36524fe2575b6df331f0b578aac28f2efbbe3d9ea407e269e539a5367a5a37dd04a691a99f54af6669fbbb5b6b19e573a665cc2ae8a84023e8bb81c3fe4cdc0ad596b43bd15c735a9fa3f13529220cd279b056abb70e57fd70f3c3ed53f94fb4999d4725c853363a4efd64f81c654ed8c86a1db1041cb23d7b377292720560c5ec3df70f2d9c4c87d64adbd84c5790ec9264af4a3c6c1cb7afa1a3f623cfdca586fc9c10036329a08244515ccec57167c22d9da3810fdd6949d899a16828ce0ea212431d470da06acd08f73a98ad022a712fed8adf82a08ba48ec0569f357221303d1223956a8531b0a37bd725d23487d83342760eccea51503948c98308492773c168d3f15ef187280d2cc9eb63e7cbe190b5678e56b42acc208f32529e766876eacfd5f391aa4806b2cc8effb9e142858b1fe2e2ea7e058964e9b081b718d6501075cda5624a689e4b773923e67c1c3a64384149f4c0b30959fa0db54802c8e525df3cd92506f0c6fe6cf704cede138626306811ad6c30c5e3aed978f1ab0e9a24a6fc069858daef5f8e50bee0e4d2cbb4ee2c95a9faf0f70a23b17a62db1581c34196c0bf4cecdb469e2bba2a15950f8441d907ebdfd1cb29a0bcab242c1a485efe0ab91e1b60b9564b1e387044f65c483ed27fb81e29e292194cabd390dc03bae6180adc57c90cfdcbf81a80112e49fd592cc321d6b4d6f019340e0b4bef7a4b8fee204c41e1937a279336e9a0ad082fb5763d7c585f5e111a86145df7657f8131740ff422fa3d36e976c1029825300b96c2f4398d56cd7eecb85580a80e9463f4fdb955c038a6742c96cc8f932d19f6f802359ab60cad0e7666a8b385a27e8a569f9cb7f7f2a3bec2a4c03466fe8712b48334cb8efc3a7c24e7514cabe2ca17cfdfccb103d63c814f19f36e654174564f9f9456bc319671138cad9aebca798ff0bf7909049aa4e83f4cd3874554d5d86f08a528bcbde0af33f22509debf2246aa1a2c3e162ecf2011bd11e9fce474661ff2176b4b86a82bf8bd139936212453476c7ebc3ff474be7a65944cb03340a30512742794077ab0e3efb7e735981ad61d6c8fecd25909384cd7f97f731e1d07ef00fdfdb59bba2d2b8fcbf4e842bf5b3cfc83ddd72558555ba323168868955d1c1106b08fc7790d8d88bc3333d862523f3c3d796b4dfa3946028a9a188041e6d9f3ca93b72061ef3dafaf05a716ee82dae9613711ee19d9c851ca807f773323f1d4e650d2b41332f1154336acedd946f8a824ef0395bf070b1491328f316dd9faa2ba3ac69d3b1631c0d11c34c561fa23e501eebf5a8d1daa377329b7163eb1d14aa439cc0de4aef5f484d6402a7ab515482dbc1983ac4d9638b1032d54d562bebbc7886eec027e098abebcf887092b52168a70463ae6368cb7ae087c01e6027fed0679bd36fe987ff4d87f6241f68249d5d1b1046f4e08dcae09dd7c452c6caf15486fbe9d72a9e4f7fc2599bb6d1b02981f196e6ef2054b63f000fb449afe2dbcb491f7c9c77191f786c3f28c237b6516ed5e898cc544f5a818cd517dd5bb7ef25e042e423e037d541dc67982cbc1c50a401c854a9a998264894fa2bf46a4090855c9866fff245fdcbfc1f5ef0874a7f1d9194b0ffb0cb9b227eb6bece97019ece1b235d1049bbf50a54931239552d7b4088a636d0157bcfe4074395ecc59fc597fb7fb5c58f37442eaf8cc25a085417df2ac3c7fcca743c638fbd4d74d2f385a03bcb853ffd124e7755ce5e77c95327b7cdb5e9b6d5187fce9240e6ced58caf66d46b1dcac09c33a4289d2f581d6c1e8e61b04622f3dd5537c2dd4382a659aeefe8e7ef50e71fb01b7e88cae9bc676cb535e9e8dcd846706d1e90a0e117d1d2a036aa0169afac25efd36221fa7d25a9c78e4866c8841e7364446f7332f389de93e7165f43db924bd9f5e656c43e3180eef305d377a8aeb76c390d4969abad2c30805b83f77c6194e697192620a73a08cd63ceeeeb55ad782f3383a9b4c1485aeb258e0c41d788565e55bb3de3f28ac47564cf0201a5aae39eabdc9730a7f569247bfaad55c4ef76c03f79b27d197336d9081a6053621454ed36a700f59926a27cec5605fa2cdcc970cd5e9be1e35d75d390742675afaf5c62a049e43c17747eca6336889b19f1269092de97067014ddce51ca13eea46313653f9a001a753117622b218e90115226a39cc485eed3fadc8ab08022b32a4aabc04d54d62114a824e43c23aa0fbd71f25c3da701339739397aa4995865d27a260677938182217bf6106262b84f4f836bfb5a688fdc5690e6faa42e0a40d1a573e8b1b9381c8f308607eadcdcfe16f72d79c5d5c41b1ad42e1dc6664aa44b32a195f54c63d503830552eddf6b66047426e46e5b45e16b12b730d3be5a6090310ae3346c99999be1b0a4b849f3e3387aecc0064409544df79a6aecd0a456edeb380bba6b6d1cbeaaf992716f1a539860e0500c9597883f194334109d55b5c6c7fe47278c2d32e3822b91f7ee856f30a5bab0f5b2823a6992b5077199079e17e9d62dd427cb5ca636abd84d078fa326e992c3f202f5086e8c114125f21e59054eb6b660e93958e2599a175536c01fc679c1018fabcba0743c5ff19a25d97f283c3f849c2376d6c0469f0ee5c2631801051e4ea3a6eb9eef400a57c1a984ac2da5ba2ed99dea3535057fcee1937ff16082c0f2717ba3f484fbe6bbf0d2b9b54487654c0a66b7dcecec7565c8c8d0f950702275f81646e0faad4a949b53a8f08478d86a53e28e396a49a69f47320235f3dc0affc98a31d8ca1cd0a3aa8bc19c91f0e725ce50aeb40179271ac570c720b882d1cf24e18b1556c7775c61605a6f01108f13d3b54958d09a0469c21dde2c3e1c265303646f1fbca7f79060f9ef2b1a1444668d8de32a30d2b630011feecb8e8da915a686a5e4d0dc0fb4f3ae5af2b87ad6c96af2f78e2e1109fe972aed4a35cebe8414fbca1cb5582d2b8c7bab70ce23dc614a73e7e215f306c22723c1f3714ecdd163342ae6ea9d14f1d8f9b1087c156b5ee9a3c061d006a235784f3995ff534856f25e8cbe30118f304f0347aa3c0b420d46479cb89ca8e022df9ae2772637e3a2f40b9a4e1526661afe212da274777799087999685cf0beadf654a3f773f07333d2e2bee5ca50434ace5173d3da67c4bbb901a7c0085023ba808689d794be69adfa926bc8893097ee81101412535a17c61c88b68f985c19643cccc65fe327f4fe6f1996b46b88cbd8271c7e6f5e48005bbf9cfd0b016d4cb0d954dd28a506d44baa97e13021ca3da301a576dcb7c698648013a3638eca6e81230d01f35298cbe25e017b37a872451a9ceddfb3123416e510412ead9fe0e9241a12ebdb1689d4d214cdae5074cafa785c2ec1d9dd477ba2f92e90d01d967662f9689cd7f10fd85d60deac2feee248c72897a93ee3b509a93f2cb66e17cb29e56610230d24fe0dd1b911e811f4fc997b48b81a0ab366bb80c66ae25a95b5344cdc62392fa892c61a3ff41889a867487f567a00d09d2e1e4cd0bd18f4eb491f25dd4d43d3559b5936375cf62bbcee0c138d3a3bce5ff90b7313b16f58b5ff9560b7520a658375d010dd6268b13ce3f0b5b8e4bd4ad7bc9148e0fe5201fe1128120a2951714b6947cae5f174c827d111f63c9af06e188c2ba29c584be3aa49e50314c8c62f5f8896bd450c29fa2a0627cfe17e7c0204e2ac9e98a75a4bd1addb07377a1a1dd03987194a8060eb5597704a1e093d05ef5aef615ff7f7df232bfbfc984bfa4f66865d22289e1361ac2d4b6910545a5452c7d84350586ddb40f7e0dff215e1df0da2391ea40a486bc744f7b6601280f23100605745a0f4fd05fbbfc19e09ac8b5881381eb4f051cdf7a9a70c458e6ab64413f1afbe0056e88f4a9dc0cf9010ff24e58511ab5d7c48067b7a6f2924f77fdf98a99f7ed41493d49d11ebae6fb16205429cff7faeff857e1c199481e4f47edcfa0ed88977cac5a2fa91e7095bdc313b4bef642b9fe41c51425bf6647efd2cd8102500cc8db17d194a8c917dc572852d813a26350821d5134138671329da198a764fb245fc9bc256446b639ca7dd6029f9e11bb82f5cc5d49d850324b5ea7865d09447b6488b6258a2474a9efb31e20cc4a699f8412718aa60cffca20e27b116ffeadd35cc02a22b1aae6f761147aded1daa3645cb8f154d86117ccdd1c8f41323884a5fd3b8e84cb06911c84cee967b05d27425f4f169c700731bf060e289d2d423314d45c16e646e0ca075e1665bc61d70528d6a2f44cbd712c55878cff4b52e8ec53d61cc93133060e17f4c321c7eec6a62b166e6088f6e1859a4c87a65c8c0c2636a6208943ab268f6f7bb149c10a3144ecda100722dea79e762092c795f5998c0224394cf6671683843a75153c831465d5cc2b96d6c265e1accb993d17e38f54ed7a560d6d4a9a2efb91d8e5d8f5a872d15aeadd8a547f923485af2b51dbb41c1190b305bd6fcb0902d752735e2ad9a7a382b11b233699883e58f69496f386742f24424d1628f63e3c4683d863aadbd2fea5fc62da953ea90edf3144b9099bc42de9f1761c3298e49f7e7ef982d9a3dd2cac0be0d7fbcfa871a0551def16a66326c1cd31494c2fc0c66eab049102ff64cd060a66d9bafd71cf4cf36b8239f61c1aafb456f3cabb704da3a57dc97ef4c33d086cd93d80ae6c0f4003f631cde44af03a563eb044e2fb7635154d3e600df7654bb2f003ee1bfad84617158af0252d24e248a90bdcaab49787309505fe56b431e9e8c9b4ae1e1915d3b2730eb71d1c43171568d0b7d110d897d1b99141b3875fcd72adef2ed3d23d4ad9b6b579d3210a4df7450d3362f027f258b2d000c206c61fd27829e31f2140e2ba2ff4508ad6607e9a92afdc0fb1649581496cba95e9d4a141a38139af7770c9f82c7fd8a60032b86211d7114b68738ca533e4471b474723b65ebfe492db2fee1605569c2e2f41b552216afc60699824ce85da297045f7494357d7564bf9e1a8e9cc649fa0d2c19d202d2884a1f4e2e3c7d23d6cdd6a68c391192f64e2884d6a22e6a001f39ab06886e1a44411cae0de297ba69ef5369a4f40f2beb776a1f1745da26a70a312cbb1529936e4b82348febbd38762054e03d7d685567cf9003c14768bf7eedaaa8a5ea32a0cbaac361de9057a51d55d3822b1779e6fc24d6b6d604e2e45ad67ea2d7056c64915ae435dee84aac0f6cec00b2a552a23b4c1e920cab9fea8799cd42b0f5cd8ef3066a36bb607e6a318c650a29c05715515bdac7d0dd2a93cfc0f73642aaeaeee1b589b0959bfc112184b775b2d95fc7656a37ffe12a7f70f98632ce7fa2973be8afda5b2726164302043c1a202c085680484aec29ec9557950adaf7a49865970dd94783075815d774062af88be0ffac2573da0c4142880dbc9310b446a49bd4bc84971f6cc63b5c053df2036cc596edd73ec936b35ec08825d021bf857709a3eee884d10ac78fea569d57028d6282c54346677604c5a3e1d7d7e2ffdb82eda5011ed46a3e1924ffaeca217a2f737e0aaab16bb7611ef474836105d6288e027d352bdb39072ad7c9e4394dd25d0706ab46500868975041faaf613f3b243c350f6ce696970516fbfecff3ddebe03c911770d598c871e2906adb0351977b7f4e639362686444eb763eaf0736f40d6d89dddc1fd95d5e300754ae54955c55262a32fe956db7246c58807d19f294cca724356ddbc3e886ca265c4bb06a4404c95705167b5f93443e826001f4a7240bbed179310450542289201361d409567fadfe70c0dcfa12d79580cd7e710882f0ab909a1ee9369601cc1ca41ee7320d598edb46b4ded84b829cbc62202a2f9653baf57e07ad879e5fa68ed8e564ca70d490340b0f639496b381e97aaead7e6f38ec15e4f32aa3ab0d6c84241ee77628039d8ec24cc7607899f9d85d63d6caa9cb37b9eef59f4bf27fe2507fd4166509e8879b75f6c88597535489b71b03427db98d929cdffdea57df6dd57aeb7a9b83d613dc5cc233367758c988aebfaf857caef5664a876a193f6827d0d0152da90df97ad11a37c054b845a8dd16c09b554701a7c8657e1c277a62c357e01a4b5ca38a9a36183bd8117e49043458e9b0ba94055cdfa860f0432f706ed15121f92aeacff5adb22fbbb4e5f01f9a4198184abb30de7463dbf8dbdc3d57067a53b140872487e77849f8445ebc180f1ea85b02523961e45c8ffeca013718f3526cfa21d42fb95202584f318ef6757d02de105c5651d43c597ee970d5d93b8fa60dbe62c413d4c1d2688b490f7149c8896210ebe2ed9a8b650115fd14d75982fe2d85965020d4dba7d6797156b90ecca71d2c18f36b6a4cdfbb5e3f8a5df735608ffd021effa63294bbb4682871036d84450df5cbf6541d870e2eeb98954c3d0b0fc486ae0bb1739b7662a4206940f1b40962000714ff25186b4029eb0887a38c7800d6798437b7354b15b42c905ec227d3f7363ddf1bb2a6edd4a18361da6e105b3a47361453bf720ac954881be7ac815957ed385758d389d109181216f87349962d759fe25a1072f849af004895d8839446450c2f49bd55530ce1ca28e3745bcf139f071c9066fbd8ee920e3fba79f546141f2c9300338406a8a454171688dfd7e866db034f45fc3678fb476b5a090d1815405370a36edfbb9f224bdc8dede771951e4471c9e13f43d96180b094bca2285d1be90b1553e3555e18d1fc47e7b20be79cec83a0765c424ff4f30b4772e40d0d6c3b0b158b26be5f5f7695f5288b6cbc35f9688517694e6ea784916ea9a1e2da6e51e5c5a0693bc2542302babfc5ca6f6be88fb0751ce1f0d87c40913ebe90bb7d8f0716d49632366c939a66d8ada16f7a0c50bb7774da244bf94cea882ebfe0b6f62b7a9e46dc2408bdafebb7c1af0365e7b229730b4926c15ebbf40f34e4eb747747aabf8f8f1fc312c49f76f2cff0e9d0a66661f92e648b2acf5d3b5e0b8aa8a463fb38c7eb1b1e037c110c9aef71feee2240b2633fbb8e9473b25820f821a396b977b221f41254389f71d45cbf589d65db581bb7d700fdde63ecac964273e757a55625703e0ddb9999a4e6299d49314aa25d18ab3286ec0f467a4ac5c2683deec1bffaf445b225ce2e9bed80a270d27f10cce8f3b2086fd0bf5e7e8b9c579f2293f3ea187f4c837ede136dd626782a8f26c06c77e3ac180e32cf61ddf1e262d753dc8f307a217a367476f2cdbc93d97d363aab8f4b9b5fdd9707ea1eba973a71616e4286a3c5bce14689f597f3468fc2a79e1615a9814472fda19fc123af0a7ae7d841de4b7311cae55e808835bb65f8aefee00ba4434c547086c74ae9052ec8eb590c4fcdcfe7ed043e6d969853c0bcf8236e439040a33aea289265f2dca95647f5c9846c58cea58de7fbef4e6dc186f1c9eaab6aa4129dce77f569a30465cdae98ad6fc3b9cb25c2d8477caae17b04e80c51fd5fd01b1a5312992d3ebc76c44ad6e21e54d6da0426cf5921ae2943403d06bb306d41fa912837a80596e3c342237eaca492d4534b5ead45f020bb9b10eb74332df1e0cc34139bb59533416236a579a4c2d5fb7d155619826dc48ecfe578ca38d1806f14867de65a00db28cee493c16169efaa11f4d3c09356daf090a3f678d890f54a4a4d50f02ad87261987487480851d8fea4472cbd666a318f98992a5cf423cf23ef515c241d1143b24a6d0f8295134210d7e7ba493468ba64127f8463cde77319c834d78c6d2d774f49ec37976a4b6799fd5325a2ea426858c45b7fba0013aa2db789999c1ce0dbc2e40931b0587acb2eb6d73d456ac4", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f000000ce00)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) getdents64(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) getdents(r1, &(0x7f0000002180)=""/33, 0x21) io_uring_setup(0x70c3, &(0x7f0000000180)) r5 = socket(0x2b, 0x1, 0x1) pipe(&(0x7f0000000100)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r9 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) r10 = fcntl$dupfd(r9, 0x0, r9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r10, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r11, 0xfffffffc) 18.226659574s ago: executing program 0 (id=3424): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x24040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e0007010012000000000000027c000004000000"], 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000140)={0x3, "5f638c123afb4194021a530723d5958592efbd8970f912f3a4890ef6351651d8", 0x0, 0x0, 0x1}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x5, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca2543667e306c360ce82f41f7d0430000868fecd32042417917653a8a0000611700008000", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600", [0x7]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="3f000e0080000000ffffffffffff0802110000010802110000000000000000000000000000000000010006020000710700000000000000760600000000000000"], 0x5c}}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x9}}) futex(&(0x7f0000000200)=0x2, 0x8, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x1, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001580)={r7, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000001, 0x41ac40) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 17.627709867s ago: executing program 0 (id=3429): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) 12.660412858s ago: executing program 3 (id=3388): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) (fail_nth: 3) 12.227735558s ago: executing program 3 (id=3443): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) fchdir(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 11.982506466s ago: executing program 3 (id=3444): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390003001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) 8.402379381s ago: executing program 4 (id=3448): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0xffffffed) setreuid(r0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x209d) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_clone(0x10000000, &(0x7f0000002100)="4853e05e2da44b83b9230956668a2bf85ecea6109f575345046e2c3d01ea352d87836adf3317ee8ebc44962b920b4e0af580d1d3f3d0bf28915000a56d0ec065d4", 0x41, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)="b85568558faca2ab195cd3499c0c595787069568d5101d3ec719131a2ef4f21a9c12ec9d75cabc966897f6de80681c83fd45f3a9b812770cf60df219b4ff664303804c7d8718b127c9f448858ae5f4a7f800af9c4b71cb6fd4537f1138e00b7e3f59fe25e18c2d0cfb04f25a36e648078e813b40e72c69d3ba166f8eca69faa6d1a30766bcfb873c542f35075f2a44b029dd17f1c208bd7f22c9b8ba953c1e8f7b0e08c1e6845e8ee942299487a7fdaa0e326c5facab5caa1a82a5fed5ec355c3792240c929d1626815d047a90e634b9a903eb629e440b3a2d51244e818faf4329bf3aec1e156d0738be234e") r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002300)={{0x2, r0, r3, 0x0, r4, 0x10, 0xaa4}, 0x3, 0x2, 0x0, 0x1, r5, r6, 0xc84}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='blkio.reset_stats\x00', 0x2, 0x0) r9 = signalfd(r8, &(0x7f0000000400)={[0x2]}, 0x8) fcntl$getownex(r9, 0x10, &(0x7f00000000c0)) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r9, 0x0, r10) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x2}, {0x2, 0x1, 0xee00}, {0x2, 0x1}], {0x4, 0x5}, [{0x8, 0x3, 0xee00}, {0x8, 0x4, r3}, {0x8, 0x6, r7}, {0x8, 0x0, r10}, {0x8, 0x6, r11}], {0x10, 0x6}, {0x20, 0x4}}, 0x64, 0x2) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r16 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r16, &(0x7f0000000040)=""/44, 0x2c) getdents64(r16, &(0x7f0000002f40)=""/4098, 0x1002) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x24, r14, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.224244081s ago: executing program 3 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="306d2c8662316546dbad888a86dd", 0xe, 0x48010, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @random="be7dab9e875f"}, 0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup3(r3, r3, 0x80000) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched_retired(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x64, 0x25, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0x2}, {0xfff1, 0x7}, {0xfff3, 0xc57dc96e05d8063e}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20040044) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x5a, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d", @ANYRESDEC=r0, @ANYRESOCT=r6], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x4}}, 0x1c) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @auto=[0x62, 0x61, 0x34, 0x63, 0x61, 0x36, 0x0, 0x31, 0x32, 0x33, 0x63, 0x35, 0x34, 0x62, 0x63, 0x62]}, &(0x7f0000000280)={0x0, "4a8d48a665491adf0fbc0b54d9391fec4647e0a1c2934c04e8e80d7f6e591e6a32084748ff49c73c03d81eca24cd27189b63760375c5831a0866ee64818b4000"}, 0x48, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x69, &(0x7f0000000600)=""/105, 0x0, 0x2d, '\x00', 0x0, 0x26, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xa, 0x4, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r6, r9], &(0x7f0000000800)=[{0x1, 0x5, 0xa, 0x7}], 0x10, 0x200}, 0x90) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0xb4) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r10, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@ipv6_newnexthop={0x5c, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_OIF={0x8, 0x5, r2}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x40}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xc004000) socket$inet6_sctp(0xa, 0x801, 0x84) 7.39804051s ago: executing program 2 (id=3455): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000050500007a11d5ebe87eab630000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030010"], 0x48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x4000007, 0xfffffffe}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x59fa, "fa6d636c908285c63b1a302d81179f161f30933aec414c98839991736c67285b", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r5}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000280000007e9fbf946d0949f9baeb413c9fbbafaf87f4bb1bf83e311ada708fcc3a68efc68ab4419a84c1ad54ec46f6c6b78a992a1ba24d9806df08cf7c0698e9e73d8105200ff040c83b12234e1eef70c79a2519bf0400804e8d00506a1277689874aefbe6d56da7566e2b072ef61089d5a35baf7173ce35b961a10c56d8f52dc4fecc8c17aef354d6ac8c68a7aa407b9f163b92b21b4929eec11cff7428fe9d25afe8d8b264159c6c32159d9364936fe5177a2cce571411add2201dfe6cdaafd25789ce5a2bc8c69046b919ef1cc3385e75ea0d97f861de0f9c407a395e302efb44c0aeba52e065d18ddce83fe0666085e3ff1184dd42"], 0x0, 0x0, 0x0, 0x0}) 6.530667986s ago: executing program 4 (id=3458): capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "72e57cd3"}]}}, 0x0}, 0x0) 6.366872268s ago: executing program 1 (id=3459): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf256d00000008000300", @ANYRES32=r1, @ANYBLOB="0c009927fd00000048000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40885) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)) syz_io_uring_submit(0x0, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) write$sequencer(r7, &(0x7f0000000080)=[@t={0x81, 0x1, 0x0, 0x0, @generic=0x40005}], 0x8) 5.220893601s ago: executing program 1 (id=3460): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c200", @ANYRES16=r4, @ANYRES16=r2], 0x90}}, 0x280488d0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x18) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x40085500, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040), 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_int(r10, 0x6, 0xa, &(0x7f0000000180)=0xdba, 0x4) 4.999523752s ago: executing program 2 (id=3461): timer_create(0xfffffffd, 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) 3.501582606s ago: executing program 2 (id=3462): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001200)={0x0, 0x34324241, 0x0, @stepwise={0x7f, 0xb0d, 0xc, 0x2, 0x100, 0x1}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "fee8a3ab78fc179fd1fca0e91ddaaca7bd64c6a4b4e00d9683d9a1affda79de2b7fb0ae20000000000cc000003000000009f000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000f0ffffff00"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x52, 0x2}, @ramp}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) signalfd4(r1, &(0x7f0000000180)={[0xfffffffffffffe00]}, 0x8, 0xc0800) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x1010, 0xffffffffffffffff, 0xf3fa5000) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) 3.375987061s ago: executing program 1 (id=3463): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) fanotify_init(0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fspick(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 3.258519499s ago: executing program 4 (id=3464): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) 2.736668152s ago: executing program 4 (id=3465): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff2}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "96a358c6adf5f471e9fc44f71c717f76c6d4df000874174eeef8b2c1467675e1"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2555cc93b245a776", "06a7758cddd1e7854dea36feabc4b02d", "a5a7691b", "480d9af15cd0bbe7"}, 0x28) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 2.300505677s ago: executing program 2 (id=3466): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'syzkaller0\x00'}, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) write$binfmt_elf64(r0, 0x0, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)=ANY=[], 0x30c) 2.240254349s ago: executing program 4 (id=3467): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a3240, 0x5ca7fd8adae1ec9f) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000013020000000000000100000000000000000000f01c806c6b34366daa95ce2cb0b9118b15fbf185e73e5a265b0f756208082c8bf52b5e18a7187e6b06c85660f10ec855836388f1923212bc2ec8c52d4e9f8d02e8d431f7fc652a98026f3e5c4d0e8bbd6ca161c5326534af40261ddcfc2931"], &(0x7f0000000080)=""/233, 0x32, 0xe9, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_io_uring_setup(0x2e93, &(0x7f0000000380)={0x0, 0xffffffff, 0x0, 0xfffffffc, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x2c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="2d82", 0x2, 0x24044050}) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000e7000000000000e00000020000000000000000000000000000008000000000000000000000000100000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/112], 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) r11 = socket(0x10, 0x803, 0x0) write(r11, &(0x7f0000000300)="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", 0xfc) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x1}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@icmp={{0x28}, {0x0, "0bfb"}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) timerfd_create(0x0, 0x0) 1.70674644s ago: executing program 1 (id=3468): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000001040000035883b2007bc6a0430e2cdeb7090509000000000000090585010000000000090507000000000000fc5dc632137ff031348320841bf01a76794fa4c5f71378806a2da89f9659a8048e6fd16d1bd2f8fac9b0046f3467a8007777fa726a9960a90b8840d333c192952d96a41d32ca83b15d43cd410eb45765d3be88c86539"], 0x0) 291.200128ms ago: executing program 1 (id=3469): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="d0ccb2b9d828", @void, {@ipv4={0x841, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x4000, 0x0, 0x6, 0x0, @local, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0x9, 0xfffffae5, 0x4, 0x51a1]}]}}}}}}}, 0x0) 179.569707ms ago: executing program 1 (id=3470): socket$rds(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x4) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000001"], 0x24}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 178.650699ms ago: executing program 2 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140021001000010000000000000000000000000a50000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f0c000b"], 0x78}}, 0x0) 176.089084ms ago: executing program 4 (id=3472): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180510f1a1d739470d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000000500000010000000bf"], 0x0}, 0x90) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0xc0481273, &(0x7f0000000000)) (fail_nth: 34) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$netlink(r7, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 0s ago: executing program 2 (id=3473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0xfe, 0x7f, 0x0, 0x0, @rand_addr=' \x01\x00', @remote, 0x8, 0x0, 0x5, 0x8}}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb056f3f59aaaaaabb0806000600000604"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x0, 'Qh'}]}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0xf0, 0x24, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {0x10, 0xfff2}, {0x13, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x50}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc4}}, @qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1e}, @TCA_PIE_TARGET={0x8, 0x1, 0xb8e}, @TCA_PIE_BETA={0x8, 0x5, 0x6}, @TCA_PIE_BETA={0x8, 0x5, 0x1d}, @TCA_PIE_BETA={0x8, 0x5, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}, @TCA_PIE_BETA={0x8, 0x5, 0x11}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0xfe, 0xa7a, 0x9, 0x0, 0x4, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x1, 0xccd, 0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008045) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x504}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r7 = memfd_create(&(0x7f0000000440)='\xf3\xde\x1d\xfa\xe9\x00\x00\"\x97x\x1e\x8a\x00\xf5i$\xff\x00\x00\xc2V\xf0\x99wp\xaaDqm\x85^\tu7\xac\xc4\x89cS\x89|\x95X\xb4\xad\xef3\xf5u\xfaw0V\xc3\a\x9fq\xc8z\x87S\xc3M+\x86O5\x99\xe8\x02\xd3|\xd9\xee\xda`\xfcy\xfaY0\xfcX;8$q*\xb4\x89\xaf1\xca\xec\xa3\xd8p\xe8]\x11\xfd\x16\xd0\xac\xff\xbe]\xc1\xc0\x8b\x99\xd4\xc1\xb5l\xed3\xe9\xd1\xc7\xef\x96\xbc\xd8\x04\xd3\x0f\xb0\xc4\x15\x00\xfb\x80\x03\x00\x00\x00\x00\x00\x00\x00\x95\x1e[\x95\xc6\x14(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xf0\xe7\xa2|\xd95Y\x01\x1f)\xd8\"\x00\xc5\xa9\x9eU\xfc\xbe\xd9\xc8\xa6\x82\xd2)\xb34\xbe\xdb\xd9\x16Bc\x93\x04\x96\x8e\xed?C{\xd4\x82H\xe7\xa1\xcbKt\xf4\x9c\xaf\x98(\xcf\xcf\xca\xa1>\x8fa+?\x13u', 0x6) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000c00)={@ax25={{0x3, @bcast, 0x25c0}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000380)=""/72, 0x48}, &(0x7f0000000a80), 0x20}, 0xa0) fstatfs(r7, &(0x7f0000000b40)=""/146) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4020aeb2, &(0x7f0000000000)={0x2, 0x2000}) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window={0x3, 0xffa6}, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r8, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000037c0)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="cbc815228efe009974a24b84ac94e5dc3869e87a60c5a6d3988c42880f91bfa9f36fd06be40293935585ea2bb33ebf6cbbe0293a759cda053300886a66d164f3fb8c4ea8baa358a8bac529081b3953b8", 0x50}, {&(0x7f0000001900)="46099a98338907711e2787de210fa03c768007259bfc03389ff9e22115c35aebd85b8e0246f9e19e646f7d362a7e8781c53093185ee505fef92ca73d93d4fe501e3e5e3b6a0ed36c138bfb91cd9af8bb587cd2d83ec851ff863bbe9b217bfeefa181132e2b6eff9c9466de715b0cb272c0258f8a3d5bc6a6790e89db63456e998ea4984616507cdc388f0d5660b409700887776332200e5bd8968da93940", 0x9e}, {&(0x7f00000057c0)="9c712267b2680506e2f655478a80d91340d97e3ea7eb67355d5396dba638163ee9cfa9308585d12a1af22e900ba3eb6ad6fc36c773424c71e4c9a329dd39f3ee4b8fcb7c2f87d66fefc7fe90df27ad3504efde82e8d975e27c4c48c9c9f24109d25328c37a4f1f4461f00077256dd7a327cfb061fe34b9880121e27bfc507bd35cf36e74502eca263f930fc01d8fad2f14ad3c89b766e88bb2a0a7535368abee", 0xa0}, {&(0x7f0000005880)="af9e8c302cf8560983e68ff3e4708775224f65e624f8a1fde70c4e82f90d427b5558e75ff1b4a1b4dab6d045b3880d764da3328004229a034990a0bc16025f270e282997074129a30ba6a3557ea9cb32d8aa3b5af61c23ce416f14edbac6262c8da855b4d28e2af08449a8677f6e0156bd441cf638e3c72cfd", 0x79}, {&(0x7f0000000e00)="b991003e55ac4a3dca94c891957cab6167888686a88a1cddf02d9e", 0x1b}, {&(0x7f00000019c0)="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", 0xc87}], 0x6}}], 0x3, 0x4008095) kernel console output (not intermixed with test programs): [ T47] ftdi_sio 2-1:64.248: FTDI USB Serial Device converter detected [ 1563.382411][ T47] usb 2-1: Detected SIO [ 1563.464495][ T47] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1563.512210][ T47] usb 2-1: USB disconnect, device number 95 [ 1563.553823][ T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1563.620435][ T47] ftdi_sio 2-1:64.248: device disconnected [ 1563.626495][ T2638] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1563.817207][T25064] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1563.838771][ T2638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1563.871064][T25064] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1563.894413][ T2638] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1563.914354][ T2638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.952082][T25064] Cannot find add_set index 0 as target [ 1563.961519][ T2638] usb 4-1: Product: syz [ 1563.967922][ T2638] usb 4-1: Manufacturer: syz [ 1563.980728][ T2638] usb 4-1: SerialNumber: syz [ 1564.008848][ T2638] usb 4-1: config 0 descriptor?? [ 1564.044513][ T2638] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 1564.095309][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 1564.172998][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 1564.272069][ T47] usb 4-1: USB disconnect, device number 92 [ 1564.877885][ T47] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1565.066252][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 1565.144216][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.179291][ T47] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1565.205027][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.250400][ T47] usb 5-1: config 0 descriptor?? [ 1565.315211][T25108] batman_adv: batadv0: Adding interface: vlan2 [ 1565.342560][T25108] batman_adv: batadv0: The MTU of interface vlan2 is too small (1420) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.367746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.377090][T25108] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1565.486284][ T5307] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1565.708264][ T5307] usb 2-1: Using ep0 maxpacket: 32 [ 1565.728370][ T5307] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.781179][T25124] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3213'. [ 1565.801634][ T47] hid-alps 0003:044E:121E.0035: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 1565.835134][ T5307] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1565.913113][ T5307] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1565.954348][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.036178][ T5307] hub 2-1:4.0: bad descriptor, ignoring hub [ 1566.065318][ T5307] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1566.104811][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1566.161572][ T5307] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1566.800830][T25146] cgroup: fork rejected by pids controller in /syz0 [ 1566.866523][ T47] usb 2-1: USB disconnect, device number 96 [ 1567.040934][T21848] syz_tun (unregistering): left promiscuous mode [ 1567.418839][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.601872][ T5307] usb 5-1: USB disconnect, device number 95 [ 1567.634758][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.798967][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.934044][T25162] FAULT_INJECTION: forcing a failure. [ 1567.934044][T25162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.986248][T25162] CPU: 1 UID: 0 PID: 25162 Comm: syz.3.3226 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1567.997164][T25162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1568.007259][T25162] Call Trace: [ 1568.010579][T25162] [ 1568.013549][T25162] dump_stack_lvl+0x241/0x360 [ 1568.018313][T25162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.023560][T25162] ? __pfx__printk+0x10/0x10 [ 1568.028203][T25162] ? __pfx_lock_release+0x10/0x10 [ 1568.033288][T25162] should_fail_ex+0x3b0/0x4e0 [ 1568.038030][T25162] _copy_from_iter+0x1f6/0x1960 [ 1568.042947][T25162] ? __virt_addr_valid+0x183/0x530 [ 1568.048104][T25162] ? __pfx_lock_release+0x10/0x10 [ 1568.053194][T25162] ? __alloc_skb+0x28f/0x440 [ 1568.057873][T25162] ? __pfx__copy_from_iter+0x10/0x10 [ 1568.063204][T25162] ? __virt_addr_valid+0x183/0x530 [ 1568.068347][T25162] ? __virt_addr_valid+0x183/0x530 [ 1568.073486][T25162] ? __virt_addr_valid+0x45f/0x530 [ 1568.078634][T25162] ? __check_object_size+0x49c/0x900 [ 1568.083987][T25162] netlink_sendmsg+0x73d/0xcb0 [ 1568.088805][T25162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1568.094133][T25162] ? __import_iovec+0x536/0x820 [ 1568.099027][T25162] ? aa_sock_msg_perm+0x91/0x160 [ 1568.104009][T25162] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1568.109335][T25162] ? security_socket_sendmsg+0x87/0xb0 [ 1568.114841][T25162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1568.120183][T25162] __sock_sendmsg+0x221/0x270 [ 1568.124891][T25162] ____sys_sendmsg+0x525/0x7d0 [ 1568.129705][T25162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1568.135058][T25162] __sys_sendmsg+0x2b0/0x3a0 [ 1568.139683][T25162] ? __pfx___sys_sendmsg+0x10/0x10 [ 1568.144821][T25162] ? vfs_write+0x7c4/0xc90 [ 1568.149293][T25162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1568.155657][T25162] ? do_syscall_64+0x100/0x230 [ 1568.160452][T25162] ? do_syscall_64+0xb6/0x230 [ 1568.165161][T25162] do_syscall_64+0xf3/0x230 [ 1568.169685][T25162] ? clear_bhb_loop+0x35/0x90 [ 1568.174381][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.180289][T25162] RIP: 0033:0x7fcfaf37cef9 [ 1568.184719][T25162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.204355][T25162] RSP: 002b:00007fcfaedff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.212795][T25162] RAX: ffffffffffffffda RBX: 00007fcfaf535f80 RCX: 00007fcfaf37cef9 [ 1568.220784][T25162] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1568.228790][T25162] RBP: 00007fcfaedff090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.236792][T25162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.244798][T25162] R13: 0000000000000000 R14: 00007fcfaf535f80 R15: 00007fcfaf65fa28 [ 1568.252824][T25162] [ 1568.419428][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.669999][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1568.681266][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1568.690656][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1568.700001][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1568.718307][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1568.725750][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1568.770417][ T5307] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1568.860118][T25186] FAULT_INJECTION: forcing a failure. [ 1568.860118][T25186] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.879139][ T80] bridge_slave_1: left allmulticast mode [ 1568.893571][ T80] bridge_slave_1: left promiscuous mode [ 1568.904347][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.938932][T25186] CPU: 1 UID: 0 PID: 25186 Comm: syz.4.3234 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1568.949792][T25186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1568.959891][T25186] Call Trace: [ 1568.963175][T25186] [ 1568.966112][T25186] dump_stack_lvl+0x241/0x360 [ 1568.970806][T25186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.976019][T25186] ? __pfx__printk+0x10/0x10 [ 1568.980628][T25186] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1568.986610][T25186] ? __pfx___might_resched+0x10/0x10 [ 1568.991992][T25186] should_fail_ex+0x3b0/0x4e0 [ 1568.996703][T25186] should_failslab+0xac/0x100 [ 1569.001450][T25186] ? __alloc_skb+0x1c3/0x440 [ 1569.006180][T25186] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1569.012052][T25186] __alloc_skb+0x1c3/0x440 [ 1569.016541][T25186] ? __pfx___alloc_skb+0x10/0x10 [ 1569.021538][T25186] ? netlink_autobind+0xd6/0x2f0 [ 1569.026532][T25186] ? netlink_autobind+0x2b0/0x2f0 [ 1569.031616][T25186] netlink_sendmsg+0x638/0xcb0 [ 1569.036457][T25186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.041800][T25186] ? __import_iovec+0x536/0x820 [ 1569.046716][T25186] ? aa_sock_msg_perm+0x91/0x160 [ 1569.051721][T25186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1569.057070][T25186] ? security_socket_sendmsg+0x87/0xb0 [ 1569.062582][T25186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.067828][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 1569.067885][T25186] __sock_sendmsg+0x221/0x270 [ 1569.077425][ T5307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.077714][T25186] ____sys_sendmsg+0x525/0x7d0 [ 1569.092626][T25186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1569.097984][T25186] __sys_sendmsg+0x2b0/0x3a0 [ 1569.099966][ T5307] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1569.102608][T25186] ? __pfx___sys_sendmsg+0x10/0x10 [ 1569.116681][T25186] ? vfs_write+0x7c4/0xc90 [ 1569.121189][T25186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1569.127587][T25186] ? do_syscall_64+0x100/0x230 [ 1569.128951][ T5307] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1569.132379][T25186] ? do_syscall_64+0xb6/0x230 [ 1569.132416][T25186] do_syscall_64+0xf3/0x230 [ 1569.150659][T25186] ? clear_bhb_loop+0x35/0x90 [ 1569.155386][T25186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.158341][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.161390][T25186] RIP: 0033:0x7f3bb477cef9 [ 1569.161417][T25186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.193465][T25186] RSP: 002b:00007f3bb5660038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.199902][ T5307] usb 3-1: config 0 descriptor?? [ 1569.201900][T25186] RAX: ffffffffffffffda RBX: 00007f3bb4935f80 RCX: 00007f3bb477cef9 [ 1569.214860][T25186] RDX: 0000000000000000 RSI: 0000000020001f80 RDI: 0000000000000003 [ 1569.222880][T25186] RBP: 00007f3bb5660090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.230985][T25186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.238993][T25186] R13: 0000000000000000 R14: 00007f3bb4935f80 R15: 00007f3bb4a5fa28 [ 1569.247030][T25186] [ 1569.256972][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.766885][ T47] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1569.966150][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 1569.983777][ T47] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.000760][ T47] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1570.029833][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1570.042035][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.088635][ T47] hub 5-1:4.0: bad descriptor, ignoring hub [ 1570.146834][ T47] hub 5-1:4.0: probe with driver hub failed with error -5 [ 1570.187785][ T47] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 1570.676286][T18167] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1570.746258][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.768195][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.801724][ T80] bond0 (unregistering): Released all slaves [ 1570.816704][T13884] Bluetooth: hci0: command tx timeout [ 1570.848089][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1570.876136][T18167] usb 2-1: Using ep0 maxpacket: 8 [ 1570.962617][T18167] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1571.002168][T18167] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1571.043269][T18167] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1571.068378][T18167] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1571.105167][T18167] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1571.144944][T18230] usb 5-1: USB disconnect, device number 96 [ 1571.152150][ T80] IPVS: stopping master sync thread 23504 ... [ 1571.180100][T18167] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1571.250673][T18167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.644781][T18167] usb 2-1: usb_control_msg returned -32 [ 1571.656341][T18167] usbtmc 2-1:16.0: can't read capabilities [ 1571.935729][T18230] usb 3-1: USB disconnect, device number 106 [ 1572.036574][T25215] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1572.123082][T25225] dvmrp0: entered allmulticast mode [ 1572.543267][T25185] chnl_net:caif_netlink_parms(): no params data found [ 1572.886453][T13884] Bluetooth: hci0: command tx timeout [ 1573.004129][ T80] hsr_slave_0: left promiscuous mode [ 1573.105366][ T80] hsr_slave_1: left promiscuous mode [ 1573.181470][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.207628][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.273303][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.313566][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.316190][T18167] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1573.329191][ T5307] usb 2-1: USB disconnect, device number 97 [ 1573.405317][ T80] batman_adv: batadv0: Removing interface: vlan2 [ 1573.501591][ T80] veth1_macvtap: left promiscuous mode [ 1573.507477][ T80] veth0_macvtap: left promiscuous mode [ 1573.513250][ T80] veth1_vlan: left promiscuous mode [ 1573.522769][ T80] veth0_vlan: left promiscuous mode [ 1573.546181][T18167] usb 4-1: Using ep0 maxpacket: 16 [ 1573.563737][T18167] usb 4-1: config 99 has an invalid descriptor of length 41, skipping remainder of the config [ 1573.584735][T18167] usb 4-1: config 99 has 0 interfaces, different from the descriptor's value: 1 [ 1573.618705][T18167] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 1573.638359][T18167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.656411][T18167] usb 4-1: Product: syz [ 1573.665179][T18167] usb 4-1: Manufacturer: syz [ 1573.672956][T18167] usb 4-1: SerialNumber: syz [ 1573.911558][T18167] usb 4-1: USB disconnect, device number 93 [ 1574.388726][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1574.440508][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1574.451346][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1574.459735][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1574.467855][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1574.475522][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1574.710772][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1574.787299][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1574.921638][T25261] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1574.966200][ T5239] Bluetooth: hci0: command tx timeout [ 1575.004412][T25262] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1575.026593][T25262] Cannot find add_set index 0 as target [ 1575.658996][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 1575.674670][T25251] vlan2: entered promiscuous mode [ 1575.683929][T25251] mac80211_hwsim hwsim286 wlan0: entered promiscuous mode [ 1575.694120][T25253] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3245'. [ 1575.703744][T25253] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1575.716320][T25253] 0ªX¹¦Dö»: entered allmulticast mode [ 1575.908851][T25185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.919721][T25185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.940696][T25185] bridge_slave_0: entered allmulticast mode [ 1575.949647][T25185] bridge_slave_0: entered promiscuous mode [ 1575.993384][T25185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.008488][T25185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.015934][T25185] bridge_slave_1: entered allmulticast mode [ 1576.025475][T25185] bridge_slave_1: entered promiscuous mode [ 1576.347824][T25185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.439026][T25185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.579772][ T5239] Bluetooth: hci1: command tx timeout [ 1576.743329][T25185] team0: Port device team_slave_0 added [ 1576.790510][T25185] team0: Port device team_slave_1 added [ 1576.909503][T25185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.943929][T25185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.005311][T25185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.049540][ T5239] Bluetooth: hci0: command tx timeout [ 1577.055242][T25185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.066631][T25185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.092997][T25185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.324792][T25185] hsr_slave_0: entered promiscuous mode [ 1577.345750][T25185] hsr_slave_1: entered promiscuous mode [ 1577.459358][T25303] team0: Port device vlan2 added [ 1577.904047][T25303] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 1577.918834][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.086298][T14845] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1578.102320][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.130884][T25258] chnl_net:caif_netlink_parms(): no params data found [ 1578.261230][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.272276][T18168] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1578.286214][T14845] usb 4-1: Using ep0 maxpacket: 8 [ 1578.297879][T14845] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff60, bcdDevice=99.8b [ 1578.314583][T14845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.334447][ T29] audit: type=1326 audit(1725415008.428:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.370738][T14845] usb 4-1: config 0 descriptor?? [ 1578.384937][T14845] option 4-1:0.0: GSM modem (1-port) converter detected [ 1578.394379][ T29] audit: type=1326 audit(1725415008.428:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.432328][ T29] audit: type=1326 audit(1725415008.428:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.458044][ T29] audit: type=1326 audit(1725415008.428:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.464352][T18168] usb 5-1: Using ep0 maxpacket: 8 [ 1578.481133][ T29] audit: type=1326 audit(1725415008.438:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.519057][ T29] audit: type=1326 audit(1725415008.438:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.526949][T18168] usb 5-1: config 64 has an invalid interface number: 248 but max is 0 [ 1578.543550][ T29] audit: type=1326 audit(1725415008.438:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.571355][T18168] usb 5-1: config 64 has no interface number 0 [ 1578.579820][T18168] usb 5-1: config 64 interface 248 altsetting 1 endpoint 0xC has an invalid bInterval 35, changing to 7 [ 1578.591696][T18168] usb 5-1: config 64 interface 248 has no altsetting 0 [ 1578.599273][ T29] audit: type=1326 audit(1725415008.558:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.632610][ T29] audit: type=1326 audit(1725415008.558:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.638997][T18168] usb 5-1: New USB device found, idVendor=5050, idProduct=0105, bcdDevice= 0.b7 [ 1578.659975][ T5239] Bluetooth: hci1: command tx timeout [ 1578.674844][ T29] audit: type=1326 audit(1725415008.558:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cea77cef9 code=0x7ffc0000 [ 1578.704619][T18168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.709384][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.713402][T18168] usb 5-1: Product: syz [ 1578.743247][T18230] usb 4-1: USB disconnect, device number 94 [ 1578.760605][T18230] option 4-1:0.0: device disconnected [ 1578.801051][T18168] usb 5-1: Manufacturer: syz [ 1578.811848][T18168] usb 5-1: SerialNumber: syz [ 1579.327512][T25258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.351241][T25258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.372253][T25258] bridge_slave_0: entered allmulticast mode [ 1579.388612][T25258] bridge_slave_0: entered promiscuous mode [ 1579.520162][T25357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1579.555645][T25258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.587828][T25258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.602645][T25258] bridge_slave_1: entered allmulticast mode [ 1579.630051][T25258] bridge_slave_1: entered promiscuous mode [ 1580.010624][T25258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.050268][T25258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1580.543244][ T80] bridge_slave_1: left allmulticast mode [ 1580.572437][ T80] bridge_slave_1: left promiscuous mode [ 1580.589284][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.614821][ T80] bridge_slave_0: left allmulticast mode [ 1580.627744][ T80] bridge_slave_0: left promiscuous mode [ 1580.650252][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.726547][ T5239] Bluetooth: hci1: command tx timeout [ 1581.186930][T13884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1581.211153][T13884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1581.222993][T13884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1581.233640][T13884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1581.257633][T13884] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1581.265439][T13884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1581.607320][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.630511][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.648164][ T80] bond0 (unregistering): Released all slaves [ 1581.713966][T25258] team0: Port device team_slave_0 added [ 1581.732533][T18168] ftdi_sio 5-1:64.248: FTDI USB Serial Device converter detected [ 1581.757210][T18168] usb 5-1: Detected SIO [ 1581.787000][T18168] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1581.824763][T25258] team0: Port device team_slave_1 added [ 1581.831777][T18168] usb 5-1: USB disconnect, device number 97 [ 1581.891492][T18168] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1581.903624][T18168] ftdi_sio 5-1:64.248: device disconnected [ 1581.939666][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1582.040065][T25258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.051799][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.080248][T25258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.144937][T25258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.158810][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.201098][T25258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.285636][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1582.429157][ T80] hsr_slave_0: left promiscuous mode [ 1582.442803][ T80] hsr_slave_1: left promiscuous mode [ 1582.453020][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.466532][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.475027][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1582.488588][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.502738][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.551196][ T80] veth1_macvtap: left promiscuous mode [ 1582.557115][ T80] veth0_macvtap: left promiscuous mode [ 1582.564829][ T80] veth1_vlan: left promiscuous mode [ 1582.573652][ T80] veth0_vlan: left promiscuous mode [ 1582.636127][T18230] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1582.806492][T13884] Bluetooth: hci1: command tx timeout [ 1582.846193][T18230] usb 4-1: Using ep0 maxpacket: 32 [ 1582.855217][T18230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1582.868203][T18230] usb 4-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=cc.96 [ 1582.887512][T18230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.895616][T18230] usb 4-1: Product: syz [ 1582.903505][T18230] usb 4-1: Manufacturer: syz [ 1582.908870][T18230] usb 4-1: SerialNumber: syz [ 1582.933155][T18230] usb 4-1: config 0 descriptor?? [ 1583.192383][T18230] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1583.264543][T18230] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1583.328535][T18230] usb 4-1: USB disconnect, device number 95 [ 1583.347096][T19642] udevd[19642]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1583.366497][T13884] Bluetooth: hci4: command tx timeout [ 1583.830870][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1583.928074][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1585.065719][T25258] hsr_slave_0: entered promiscuous mode [ 1585.083728][T25258] hsr_slave_1: entered promiscuous mode [ 1585.105530][T25258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.114521][T25258] Cannot create hsr debugfs directory [ 1585.153148][T25387] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1585.162516][T25387] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1585.381355][T25185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.447317][T13884] Bluetooth: hci4: command tx timeout [ 1585.463642][T25185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.544542][T25185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.587190][T25185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.741093][T25371] chnl_net:caif_netlink_parms(): no params data found [ 1585.939294][T25371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.959869][T25371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.975820][T25371] bridge_slave_0: entered allmulticast mode [ 1585.992854][T25371] bridge_slave_0: entered promiscuous mode [ 1586.054289][T25371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.072371][T25371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.084102][T25371] bridge_slave_1: entered allmulticast mode [ 1586.106342][T25371] bridge_slave_1: entered promiscuous mode [ 1586.272699][T25371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.320531][T25371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.453478][ T2558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.542877][T25408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1586.689236][ T2558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.761204][T25371] team0: Port device team_slave_0 added [ 1586.779381][T25371] team0: Port device team_slave_1 added [ 1586.797255][T25412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1586.908452][ T2558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.105945][T25404] delete_channel: no stack [ 1587.169851][ T2558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.218899][T25371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.246130][T25371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.304156][T25371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.392727][T25371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.407103][T25371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.436669][T25371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.526760][T13884] Bluetooth: hci4: command tx timeout [ 1587.535753][T25185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.582802][T25258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1587.628066][T25258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1587.636344][T14845] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1587.652745][T25258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1587.702598][T25371] hsr_slave_0: entered promiscuous mode [ 1587.712693][T25371] hsr_slave_1: entered promiscuous mode [ 1587.719684][T25371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.730051][T25371] Cannot create hsr debugfs directory [ 1587.740660][T25258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1587.800294][T25185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.836399][T14845] usb 5-1: Using ep0 maxpacket: 8 [ 1587.845369][T14845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.896834][T14845] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1587.926072][T14845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.945265][T14845] usb 5-1: config 0 descriptor?? [ 1587.989083][ T2558] bridge_slave_1: left allmulticast mode [ 1587.994897][ T2558] bridge_slave_1: left promiscuous mode [ 1588.012786][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.032268][ T2558] bridge_slave_0: left allmulticast mode [ 1588.038577][ T2558] bridge_slave_0: left promiscuous mode [ 1588.044526][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.126250][ T47] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1588.326576][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1588.340229][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.358073][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.375204][ T47] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1588.387767][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.407453][ T47] usb 4-1: config 0 descriptor?? [ 1588.467024][T14845] hid-alps 0003:044E:121E.0036: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 1588.715539][ T2558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.738514][ T2558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.757778][ T2558] bond0 (unregistering): Released all slaves [ 1588.803917][T17902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.811168][T17902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.868517][ T47] wacom 0003:056A:5000.0037: hidraw1: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.3-1/input0 [ 1588.962827][T17902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.970106][T17902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.049580][ T47] usb 4-1: USB disconnect, device number 96 [ 1589.475847][ T2558] hsr_slave_0: left promiscuous mode [ 1589.493285][ T2558] hsr_slave_1: left promiscuous mode [ 1589.507936][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.515512][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.527879][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.543929][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.606403][T13884] Bluetooth: hci4: command tx timeout [ 1589.634556][ T2558] veth1_macvtap: left promiscuous mode [ 1589.661052][ T2558] veth0_macvtap: left promiscuous mode [ 1589.674263][ T2558] veth1_vlan: left promiscuous mode [ 1589.680305][ T2558] veth0_vlan: left promiscuous mode [ 1589.968910][ T2558] team0 (unregistering): Port device vlan2 removed [ 1590.361728][T14845] usb 5-1: USB disconnect, device number 98 [ 1590.959022][ T2558] team0 (unregistering): Port device team_slave_1 removed [ 1591.085423][ T2558] team0 (unregistering): Port device team_slave_0 removed [ 1591.362589][T25477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1591.386113][T25477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1592.446980][T25258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.585581][T25258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.714202][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.721405][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.830232][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.837534][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.018461][T25185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.280203][T25371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1593.313791][T25185] veth0_vlan: entered promiscuous mode [ 1593.319823][ T5287] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1593.343149][T25185] veth1_vlan: entered promiscuous mode [ 1593.364264][T25371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1593.377231][ T2638] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1593.379225][T25371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1593.402179][T25371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1593.463233][T25258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.536364][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 1593.550345][ T5287] usb 4-1: config 64 has an invalid interface number: 248 but max is 0 [ 1593.561911][T25185] veth0_macvtap: entered promiscuous mode [ 1593.570667][ T5287] usb 4-1: config 64 has no interface number 0 [ 1593.577613][ T2638] usb 5-1: Using ep0 maxpacket: 8 [ 1593.583211][ T5287] usb 4-1: config 64 interface 248 altsetting 1 endpoint 0xC has an invalid bInterval 35, changing to 7 [ 1593.597373][ T5287] usb 4-1: config 64 interface 248 has no altsetting 0 [ 1593.602294][ T2638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.609342][ T5287] usb 4-1: New USB device found, idVendor=5050, idProduct=0105, bcdDevice= 0.b7 [ 1593.629923][ T2638] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1593.646421][T25185] veth1_macvtap: entered promiscuous mode [ 1593.674419][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.680337][ T2638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.685528][ T5287] usb 4-1: Product: syz [ 1593.698789][ T5287] usb 4-1: Manufacturer: syz [ 1593.704121][ T5287] usb 4-1: SerialNumber: syz [ 1593.730894][ T2638] usb 5-1: config 0 descriptor?? [ 1593.840174][T25185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.870491][T25185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.881521][T25185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.892580][T25185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.905104][T25185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.931466][T25258] veth0_vlan: entered promiscuous mode [ 1593.957040][T25185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.973660][T25185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.993626][T25185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.004275][T25185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.044326][T25185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.110367][T25258] veth1_vlan: entered promiscuous mode [ 1594.132424][T25185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.162608][T25185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.173548][T25185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.186128][T25185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.292872][ T2638] hid-alps 0003:044E:121E.0038: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 1594.314565][T25371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.597405][T25371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.655501][T25258] veth0_macvtap: entered promiscuous mode [ 1594.838770][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.846053][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.895456][T25258] veth1_macvtap: entered promiscuous mode [ 1594.969882][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.977273][ T9430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.000717][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.029273][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.173774][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1595.187928][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.225181][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1595.255731][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.279730][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1595.293567][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.314996][T25258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.345469][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.358439][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.474508][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.490392][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.501025][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.511629][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.522476][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.533781][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.568891][T25258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.642642][T25258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.662037][T25258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.680596][T25258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.694112][T25258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.735125][T25521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1596.090953][T14845] usb 5-1: USB disconnect, device number 99 [ 1596.174597][T25371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.197351][ T5287] ftdi_sio 4-1:64.248: FTDI USB Serial Device converter detected [ 1596.222130][ T5287] usb 4-1: Detected SIO [ 1596.240240][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.243606][ T5287] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1596.275274][T25524] pim6reg1: entered promiscuous mode [ 1596.290414][ T5287] usb 4-1: USB disconnect, device number 97 [ 1596.292611][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.297008][T25524] pim6reg1: entered allmulticast mode [ 1596.323421][ T5287] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1596.350872][ T5287] ftdi_sio 4-1:64.248: device disconnected [ 1596.463792][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1596.560438][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.571630][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1596.581801][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.737668][T25371] veth0_vlan: entered promiscuous mode [ 1596.796806][T25371] veth1_vlan: entered promiscuous mode [ 1596.908734][T25371] veth0_macvtap: entered promiscuous mode [ 1596.923018][T25371] veth1_macvtap: entered promiscuous mode [ 1596.941009][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 1597.062916][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.092417][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 1597.106149][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.126914][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.164448][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.184087][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.203992][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.225060][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.252472][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.288246][ T5291] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1597.298362][T25371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.374083][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.405379][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.477180][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.506135][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.534427][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 1597.537981][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.567403][ T5291] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1597.583094][ T5291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1597.596333][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.618767][ T5291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1597.643088][T25371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.656233][ T5291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1597.693958][T25371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.713302][ T5291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1597.729780][T25371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.743505][ T5291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1597.785173][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.807853][T25371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.853315][T25371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.902395][T25371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.913577][T25371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.127253][ T5291] usb 3-1: usb_control_msg returned -32 [ 1598.145820][ T5291] usbtmc 3-1:16.0: can't read capabilities [ 1598.269169][T25567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3306'. [ 1598.284820][T25565] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3305'. [ 1598.345334][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.369784][T25565] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3305'. [ 1598.396434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.409548][T25565] Cannot find add_set index 0 as target [ 1598.497381][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.522482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.691358][T25554] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1599.337554][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1599.489573][T25603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1599.958134][T22931] usb 3-1: USB disconnect, device number 107 [ 1600.340250][T25629] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 1601.211667][T25637] FAULT_INJECTION: forcing a failure. [ 1601.211667][T25637] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.243905][T25637] CPU: 0 UID: 0 PID: 25637 Comm: syz.0.3321 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1601.254747][T25637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1601.264844][T25637] Call Trace: [ 1601.268159][T25637] [ 1601.271120][T25637] dump_stack_lvl+0x241/0x360 [ 1601.275847][T25637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1601.281079][T25637] ? __pfx__printk+0x10/0x10 [ 1601.285690][T25637] ? ref_tracker_alloc+0x332/0x490 [ 1601.290840][T25637] should_fail_ex+0x3b0/0x4e0 [ 1601.295533][T25637] ? skb_clone+0x20c/0x390 [ 1601.299960][T25637] should_failslab+0xac/0x100 [ 1601.304644][T25637] ? skb_clone+0x20c/0x390 [ 1601.309069][T25637] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1601.314447][T25637] skb_clone+0x20c/0x390 [ 1601.318702][T25637] __netlink_deliver_tap+0x3cc/0x7c0 [ 1601.324021][T25637] ? netlink_deliver_tap+0x2e/0x1b0 [ 1601.329237][T25637] netlink_deliver_tap+0x19d/0x1b0 [ 1601.334408][T25637] netlink_unicast+0x7c4/0x990 [ 1601.339211][T25637] ? __pfx_netlink_unicast+0x10/0x10 [ 1601.344514][T25637] ? __virt_addr_valid+0x183/0x530 [ 1601.349645][T25637] ? __check_object_size+0x49c/0x900 [ 1601.354955][T25637] ? bpf_lsm_netlink_send+0x9/0x10 [ 1601.360086][T25637] netlink_sendmsg+0x8e4/0xcb0 [ 1601.364871][T25637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.370183][T25637] ? aa_sock_msg_perm+0x91/0x160 [ 1601.375146][T25637] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1601.380478][T25637] ? security_socket_sendmsg+0x87/0xb0 [ 1601.386101][T25637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.391530][T25637] __sock_sendmsg+0x221/0x270 [ 1601.396247][T25637] sock_write_iter+0x2dd/0x400 [ 1601.401046][T25637] ? __pfx_sock_write_iter+0x10/0x10 [ 1601.406376][T25637] do_iter_readv_writev+0x60a/0x890 [ 1601.411596][T25637] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1601.417335][T25637] ? bpf_lsm_file_permission+0x9/0x10 [ 1601.422727][T25637] ? security_file_permission+0x7f/0xa0 [ 1601.428295][T25637] ? rw_verify_area+0x1d2/0x6b0 [ 1601.433269][T25637] vfs_writev+0x37c/0xbb0 [ 1601.437695][T25637] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1601.443629][T25637] ? sb_end_write+0xe9/0x1c0 [ 1601.448243][T25637] ? __pfx_vfs_writev+0x10/0x10 [ 1601.453209][T25637] ? vfs_write+0x7c4/0xc90 [ 1601.457655][T25637] ? do_sys_openat2+0x17a/0x1d0 [ 1601.462577][T25637] do_writev+0x1b1/0x350 [ 1601.466862][T25637] ? __pfx_do_writev+0x10/0x10 [ 1601.471657][T25637] ? do_syscall_64+0x100/0x230 [ 1601.476461][T25637] ? do_syscall_64+0xb6/0x230 [ 1601.481262][T25637] do_syscall_64+0xf3/0x230 [ 1601.485811][T25637] ? clear_bhb_loop+0x35/0x90 [ 1601.490515][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.496539][T25637] RIP: 0033:0x7fd26477cef9 [ 1601.500974][T25637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.520607][T25637] RSP: 002b:00007fd26559a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1601.529129][T25637] RAX: ffffffffffffffda RBX: 00007fd264935f80 RCX: 00007fd26477cef9 [ 1601.537146][T25637] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1601.545162][T25637] RBP: 00007fd26559a090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.553174][T25637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.561164][T25637] R13: 0000000000000000 R14: 00007fd264935f80 R15: 00007fd264a5fa28 [ 1601.569172][T25637] [ 1601.572335][ C0] vkms_vblank_simulate: vblank timer overrun [ 1601.625607][T25637] tunl0: entered promiscuous mode [ 1601.677588][T25637] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 1601.692330][T25637] __nla_validate_parse: 2 callbacks suppressed [ 1601.692351][T25637] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1601.767283][T22931] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1601.960390][T22931] usb 5-1: config index 0 descriptor too short (expected 12336, got 27) [ 1602.004927][T22931] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1602.014875][T22931] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1602.016384][T18167] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1602.069633][T22931] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1602.119182][T22931] usb 5-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 1602.139110][T22931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.161879][T22931] usb 5-1: Product: syz [ 1602.176294][T22931] usb 5-1: Manufacturer: syz [ 1602.189795][T22931] usb 5-1: SerialNumber: syz [ 1602.234568][T18167] usb 2-1: Using ep0 maxpacket: 16 [ 1602.656942][ T5291] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1602.745202][T25653] FAULT_INJECTION: forcing a failure. [ 1602.745202][T25653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.765276][T25653] CPU: 1 UID: 0 PID: 25653 Comm: syz.3.3327 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1602.776114][T25653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1602.786203][T25653] Call Trace: [ 1602.789496][T25653] [ 1602.792476][T25653] dump_stack_lvl+0x241/0x360 [ 1602.797198][T25653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1602.802439][T25653] ? __pfx__printk+0x10/0x10 [ 1602.807076][T25653] ? __pfx_lock_release+0x10/0x10 [ 1602.812152][T25653] should_fail_ex+0x3b0/0x4e0 [ 1602.816881][T25653] _copy_from_iter+0x1f6/0x1960 [ 1602.821771][T25653] ? __virt_addr_valid+0x183/0x530 [ 1602.826923][T25653] ? __pfx_lock_release+0x10/0x10 [ 1602.832003][T25653] ? __alloc_skb+0x28f/0x440 [ 1602.836639][T25653] ? __pfx__copy_from_iter+0x10/0x10 [ 1602.841970][T25653] ? __virt_addr_valid+0x183/0x530 [ 1602.847114][T25653] ? __virt_addr_valid+0x183/0x530 [ 1602.852268][T25653] ? __virt_addr_valid+0x45f/0x530 [ 1602.857425][T25653] ? __check_object_size+0x49c/0x900 [ 1602.862766][T25653] netlink_sendmsg+0x73d/0xcb0 [ 1602.867579][T25653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.872908][T25653] ? __import_iovec+0x536/0x820 [ 1602.877788][T25653] ? aa_sock_msg_perm+0x91/0x160 [ 1602.882759][T25653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1602.888093][T25653] ? security_socket_sendmsg+0x87/0xb0 [ 1602.893616][T25653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.898951][T25653] __sock_sendmsg+0x221/0x270 [ 1602.903702][T25653] ____sys_sendmsg+0x525/0x7d0 [ 1602.908529][T25653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1602.913887][T25653] __sys_sendmsg+0x2b0/0x3a0 [ 1602.918535][T25653] ? __pfx___sys_sendmsg+0x10/0x10 [ 1602.923700][T25653] ? vfs_write+0x7c4/0xc90 [ 1602.928201][T25653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1602.934601][T25653] ? do_syscall_64+0x100/0x230 [ 1602.939423][T25653] ? do_syscall_64+0xb6/0x230 [ 1602.944138][T25653] do_syscall_64+0xf3/0x230 [ 1602.948672][T25653] ? clear_bhb_loop+0x35/0x90 [ 1602.953395][T25653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.959343][T25653] RIP: 0033:0x7fcfaf37cef9 [ 1602.963798][T25653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.983557][T25653] RSP: 002b:00007fcfaedff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1602.992021][T25653] RAX: ffffffffffffffda RBX: 00007fcfaf535f80 RCX: 00007fcfaf37cef9 [ 1603.000014][T25653] RDX: 0000000000000000 RSI: 0000000020001f80 RDI: 0000000000000003 [ 1603.008018][T25653] RBP: 00007fcfaedff090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.016022][T25653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.024130][T25653] R13: 0000000000000000 R14: 00007fcfaf535f80 R15: 00007fcfaf65fa28 [ 1603.032156][T25653] [ 1603.127590][ T5291] usb 3-1: device descriptor read/64, error -71 [ 1603.396147][ T5291] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1603.558563][ T5291] usb 3-1: device descriptor read/64, error -71 [ 1603.689688][ T5291] usb usb3-port1: attempt power cycle [ 1604.050989][T22931] usb 5-1: USB disconnect, device number 100 [ 1604.125377][ T5291] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1604.177044][ T5291] usb 3-1: device descriptor read/8, error -71 [ 1604.358977][T18167] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1604.379256][T18167] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1604.418692][T25663] team0: Port device vlan2 added [ 1604.426556][T18167] usb 2-1: can't read configurations, error -71 [ 1604.476229][ T5291] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1604.487549][T25665] ip6tnl2: entered promiscuous mode [ 1604.492831][T25665] ip6tnl2: entered allmulticast mode [ 1604.518535][T25667] x_tables: duplicate entry at hook 2 [ 1604.527002][ T5291] usb 3-1: device descriptor read/8, error -71 [ 1604.647805][ T5291] usb usb3-port1: unable to enumerate USB device [ 1605.109351][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1605.152587][T25683] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 1605.980218][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1606.926570][T22931] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1607.128986][T22931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.146604][T22931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.163742][T22931] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1607.174985][T22931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.191048][T22931] usb 4-1: config 0 descriptor?? [ 1607.347150][ T5287] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1607.365890][T25717] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1607.372941][T25717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1607.390157][T25717] vhci_hcd vhci_hcd.0: Device attached [ 1607.408599][T25718] vhci_hcd: connection closed [ 1607.417979][ T80] vhci_hcd: stop threads [ 1607.432271][ T80] vhci_hcd: release socket [ 1607.437042][ T80] vhci_hcd: disconnect device [ 1607.558791][ T5287] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1607.572115][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.586770][ T5287] usb 2-1: config 0 descriptor?? [ 1607.603735][ T5287] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1607.751926][T22931] wacom 0003:056A:0016.0039: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1607.773239][T22931] wacom 0003:056A:0016.0039: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0 [ 1607.788612][T22931] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.0039/input/input79 [ 1607.803708][ T5287] gspca_spca508: reg_read err -32 [ 1607.810440][ T5287] gspca_spca508: reg_read err -32 [ 1607.817719][ T5287] gspca_spca508: reg_read err -32 [ 1607.823551][ T5287] gspca_spca508: reg_read err -32 [ 1607.830401][ T5287] gspca_spca508: reg_read err -32 [ 1607.938655][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.945111][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.043331][ T5287] gspca_spca508: reg write: error -71 [ 1608.061058][ T5287] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1608.082025][ T5287] usb 2-1: USB disconnect, device number 100 [ 1608.142221][T14013] usb 4-1: USB disconnect, device number 98 [ 1608.376241][ T5291] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1608.571754][ T5291] usb 5-1: Using ep0 maxpacket: 32 [ 1608.596613][ T5291] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1608.605431][ T5291] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1608.635695][ T5291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.649282][ T5291] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1608.671579][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.680791][ T5291] usb 5-1: Product: syz [ 1608.685105][ T5291] usb 5-1: Manufacturer: syz [ 1608.690325][ T5291] usb 5-1: SerialNumber: syz [ 1608.804274][T25733] FAULT_INJECTION: forcing a failure. [ 1608.804274][T25733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.834619][T25735] pim6reg: entered allmulticast mode [ 1608.849114][T25733] CPU: 0 UID: 0 PID: 25733 Comm: syz.2.3354 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1608.859962][T25733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1608.870070][T25733] Call Trace: [ 1608.873388][T25733] [ 1608.876356][T25733] dump_stack_lvl+0x241/0x360 [ 1608.881081][T25733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1608.886337][T25733] ? __pfx__printk+0x10/0x10 [ 1608.890990][T25733] ? snprintf+0xda/0x120 [ 1608.895291][T25733] should_fail_ex+0x3b0/0x4e0 [ 1608.900071][T25733] _copy_to_user+0x2f/0xb0 [ 1608.904565][T25733] simple_read_from_buffer+0xca/0x150 [ 1608.910043][T25733] proc_fail_nth_read+0x1ec/0x260 [ 1608.915128][T25733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1608.920738][T25733] ? rw_verify_area+0x520/0x6b0 [ 1608.925644][T25733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1608.931248][T25733] vfs_read+0x204/0xbc0 [ 1608.935457][T25733] ? __pfx_lock_release+0x10/0x10 [ 1608.940549][T25733] ? __pfx_vfs_read+0x10/0x10 [ 1608.945289][T25733] ? __fget_files+0x29/0x470 [ 1608.949947][T25733] ? __fget_files+0x3f6/0x470 [ 1608.954723][T25733] ksys_read+0x1a0/0x2c0 [ 1608.959054][T25733] ? __pfx_ksys_read+0x10/0x10 [ 1608.963875][T25733] ? do_syscall_64+0x100/0x230 [ 1608.968690][T25733] ? do_syscall_64+0xb6/0x230 [ 1608.973419][T25733] do_syscall_64+0xf3/0x230 [ 1608.977979][T25733] ? clear_bhb_loop+0x35/0x90 [ 1608.982709][T25733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.988662][T25733] RIP: 0033:0x7feac877b93c [ 1608.993122][T25733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1609.012779][T25733] RSP: 002b:00007feac9491030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1609.021248][T25733] RAX: ffffffffffffffda RBX: 00007feac8935f80 RCX: 00007feac877b93c [ 1609.029275][T25733] RDX: 000000000000000f RSI: 00007feac94910a0 RDI: 0000000000000004 [ 1609.037295][T25733] RBP: 00007feac9491090 R08: 0000000000000000 R09: 002367732f766564 [ 1609.045313][T25733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1609.053339][T25733] R13: 0000000000000000 R14: 00007feac8935f80 R15: 00007feac8a5fa28 [ 1609.061381][T25733] [ 1609.264920][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1609.283328][T25742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1609.343422][T25725] input: syz0 as /devices/virtual/input/input82 [ 1609.441628][ T5291] usb 5-1: 0:2 : does not exist [ 1609.466158][ T5287] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1609.489544][ T5291] usb 5-1: USB disconnect, device number 101 [ 1609.534682][T19642] udevd[19642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1609.680091][ T5287] usb 3-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1609.699921][ T5287] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1609.711894][ T5287] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 1609.731647][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.751944][ T5287] usb 3-1: Product: 䟱â€å»‹é¹ƒï¹æ´¯ë›—銀삌å¦å‚‘剄ứੲ뼓ïºã¹°ë“왇䄠鼰튑Ы瓽틨剓ã¯î»®í„¬å§®ä”§á¦§ä²±ê…Œï«¥é ®î˜¼ï¬‹íŒ½ [ 1609.772000][ T5287] usb 3-1: Manufacturer: ဉ [ 1609.775537][T25754] program syz.1.3361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1609.777358][ T5287] usb 3-1: SerialNumber: ÐŒ [ 1610.018406][ T5291] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1610.206218][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 1610.214252][ T5291] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1610.224070][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.247599][ T5291] usb 4-1: config 0 descriptor?? [ 1610.469144][ T5291] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1610.588440][T25769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3364'. [ 1610.612962][T25769] random: crng reseeded on system resumption [ 1611.179986][T25752] netlink: 'syz.3.3359': attribute type 6 has an invalid length. [ 1611.189982][T25752] netlink: 138112 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1611.250807][ T5291] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1611.286812][ T5291] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1611.338569][ T5291] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1611.368934][ T5291] usb 4-1: USB disconnect, device number 99 [ 1611.498664][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.641082][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.748499][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.836910][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.179381][ T11] bridge_slave_1: left allmulticast mode [ 1612.209615][ T11] bridge_slave_1: left promiscuous mode [ 1612.233610][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.247975][ T5287] usbhid 3-1:1.0: can't add hid device: -71 [ 1612.275876][ T5287] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1612.297401][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.355925][ T5287] usb 3-1: USB disconnect, device number 112 [ 1612.555389][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.571936][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.597346][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1612.623431][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1612.640443][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1612.650768][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1613.436392][T14013] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1613.526806][ T5287] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1613.563871][T25815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 1613.626098][T14013] usb 4-1: Using ep0 maxpacket: 16 [ 1613.634384][T14013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.661666][T14013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.705339][T14013] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1613.725843][T14013] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1613.735913][T14013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.753571][T14013] usb 4-1: config 0 descriptor?? [ 1613.765269][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 1613.786538][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.802948][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.817164][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1613.836474][ T5287] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1613.849682][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.894975][ T5287] usb 2-1: config 0 descriptor?? [ 1613.896994][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.928815][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.952485][ T11] bond0 (unregistering): Released all slaves [ 1614.023150][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 1614.195678][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.246992][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.263016][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.280883][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.314174][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.327476][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.336811][T14013] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 1614.353339][T14013] microsoft 0003:045E:07DA.003A: No inputs registered, leaving [ 1614.401764][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.457545][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.464877][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.478824][T14013] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1614.524923][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.532462][T14013] microsoft 0003:045E:07DA.003A: no inputs found [ 1614.540176][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.548136][T14013] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 1614.577905][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.585212][ T5287] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1614.611870][ T5287] microsoft 0003:045E:07DA.003B: No inputs registered, leaving [ 1614.621442][ T5287] microsoft 0003:045E:07DA.003B: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1614.635633][ T5287] microsoft 0003:045E:07DA.003B: no inputs found [ 1614.643749][ T5287] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 1614.686128][T18167] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1614.726387][ T5239] Bluetooth: hci2: command tx timeout [ 1614.860928][ T47] usb 4-1: USB disconnect, device number 100 [ 1614.921516][T18167] usb 3-1: Using ep0 maxpacket: 8 [ 1614.950116][T18167] usb 3-1: config 64 has an invalid interface number: 248 but max is 0 [ 1614.976197][T18167] usb 3-1: config 64 has no interface number 0 [ 1614.991431][ T11] mac80211_hwsim hwsim286 wlan0: left promiscuous mode [ 1615.007164][T18167] usb 3-1: config 64 interface 248 altsetting 1 endpoint 0xC has an invalid bInterval 35, changing to 7 [ 1615.056137][T18167] usb 3-1: config 64 interface 248 has no altsetting 0 [ 1615.087480][T18167] usb 3-1: New USB device found, idVendor=5050, idProduct=0105, bcdDevice= 0.b7 [ 1615.105670][T18167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.132643][T18167] usb 3-1: Product: syz [ 1615.145218][T18167] usb 3-1: Manufacturer: syz [ 1615.161118][T18167] usb 3-1: SerialNumber: syz [ 1615.279307][ T5287] usb 2-1: USB disconnect, device number 101 [ 1615.393259][ T11] hsr_slave_0: left promiscuous mode [ 1615.405032][ T11] hsr_slave_1: left promiscuous mode [ 1615.446150][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.465514][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.504438][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.542724][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.700844][ T11] veth1_macvtap: left promiscuous mode [ 1615.726408][ T11] veth0_macvtap: left promiscuous mode [ 1615.736667][ T11] veth1_vlan: left promiscuous mode [ 1615.742141][ T11] veth0_vlan: left promiscuous mode [ 1616.816502][ T5239] Bluetooth: hci2: command tx timeout [ 1617.443987][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1617.531456][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1618.460785][T25791] chnl_net:caif_netlink_parms(): no params data found [ 1618.474137][T18167] ftdi_sio 3-1:64.248: FTDI USB Serial Device converter detected [ 1618.547537][T18167] usb 3-1: Detected SIO [ 1618.563835][T18167] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1618.608048][T18167] usb 3-1: USB disconnect, device number 113 [ 1618.627003][T18167] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1618.661714][T18167] ftdi_sio 3-1:64.248: device disconnected [ 1618.838929][T25869] tunl0: entered promiscuous mode [ 1618.876279][T25869] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 1618.893637][ T5239] Bluetooth: hci2: command tx timeout [ 1618.911728][T25869] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1618.926122][ T5291] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1618.991683][T25791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.022509][T25791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.040704][T25791] bridge_slave_0: entered allmulticast mode [ 1619.067872][T25791] bridge_slave_0: entered promiscuous mode [ 1619.108582][T25791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.115793][T25791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.131767][ T5291] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1619.140919][T25791] bridge_slave_1: entered allmulticast mode [ 1619.142786][T25791] bridge_slave_1: entered promiscuous mode [ 1619.166556][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.185631][ T5291] usb 2-1: config 0 descriptor?? [ 1619.204076][T25791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.214084][ T5291] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1619.251615][T25791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.321762][T25791] team0: Port device team_slave_0 added [ 1619.335247][T25791] team0: Port device team_slave_1 added [ 1619.410436][ T5291] gspca_spca508: reg_read err -32 [ 1619.416568][ T5291] gspca_spca508: reg_read err -32 [ 1619.427208][ T5291] gspca_spca508: reg_read err -32 [ 1619.436197][ T5291] gspca_spca508: reg_read err -32 [ 1619.443359][ T5291] gspca_spca508: reg_read err -32 [ 1619.483032][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.509101][T25791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.518634][T25791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.545604][T25791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.575664][T25791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.589986][T25791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.621060][T25791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.660663][ T5291] gspca_spca508: reg write: error -71 [ 1619.672516][ T5291] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1619.680936][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.693001][ T5291] usb 2-1: USB disconnect, device number 102 [ 1619.797896][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.821894][T25791] hsr_slave_0: entered promiscuous mode [ 1619.830162][T25791] hsr_slave_1: entered promiscuous mode [ 1619.837221][T25791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1619.845101][T25791] Cannot create hsr debugfs directory [ 1619.886478][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.246595][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 1620.275696][ T11] bridge_slave_1: left allmulticast mode [ 1620.293226][ T11] bridge_slave_1: left promiscuous mode [ 1620.326635][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.397040][ T11] bridge_slave_0: left allmulticast mode [ 1620.402905][ T11] bridge_slave_0: left promiscuous mode [ 1620.447356][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.968184][T13884] Bluetooth: hci2: command tx timeout [ 1621.002699][ T11] dvmrp0 (unregistering): left allmulticast mode [ 1621.183832][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1621.201936][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1621.211398][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1621.222770][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1621.232848][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1621.242416][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.515234][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.527349][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.539916][ T11] bond0 (unregistering): Released all slaves [ 1621.665049][T25898] FAULT_INJECTION: forcing a failure. [ 1621.665049][T25898] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.679190][T25898] CPU: 0 UID: 0 PID: 25898 Comm: syz.1.3389 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1621.690029][T25898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1621.700127][T25898] Call Trace: [ 1621.703427][T25898] [ 1621.706373][T25898] dump_stack_lvl+0x241/0x360 [ 1621.711096][T25898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.716337][T25898] ? __pfx__printk+0x10/0x10 [ 1621.720977][T25898] ? __kmalloc_node_noprof+0xb7/0x440 [ 1621.726394][T25898] ? __pfx___might_resched+0x10/0x10 [ 1621.731768][T25898] should_fail_ex+0x3b0/0x4e0 [ 1621.736497][T25898] should_failslab+0xac/0x100 [ 1621.741251][T25898] __kmalloc_node_noprof+0xdf/0x440 [ 1621.746477][T25898] ? crypto_create_tfm_node+0x88/0x3d0 [ 1621.752014][T25898] crypto_create_tfm_node+0x88/0x3d0 [ 1621.757332][T25898] crypto_spawn_tfm2+0x5c/0x90 [ 1621.762123][T25898] cryptd_aead_init_tfm+0x44/0xf0 [ 1621.767176][T25898] crypto_create_tfm_node+0x167/0x3d0 [ 1621.772572][T25898] crypto_alloc_tfm_node+0x161/0x360 [ 1621.777882][T25898] cryptd_alloc_aead+0xe2/0x200 [ 1621.782749][T25898] ? __pfx_cryptd_alloc_aead+0x10/0x10 [ 1621.788253][T25898] ? rcu_is_watching+0x15/0xb0 [ 1621.793072][T25898] simd_aead_init+0x67/0x150 [ 1621.797755][T25898] crypto_create_tfm_node+0x167/0x3d0 [ 1621.803163][T25898] crypto_alloc_tfm_node+0x161/0x360 [ 1621.808478][T25898] macsec_validate_attr+0x1a7/0x9d0 [ 1621.813822][T25898] ? __pfx_macsec_validate_attr+0x10/0x10 [ 1621.819582][T25898] ? nla_strscpy+0x100/0x180 [ 1621.824204][T25898] ? __nla_parse+0x40/0x60 [ 1621.828661][T25898] rtnl_newlink+0xbb8/0x20a0 [ 1621.833288][T25898] ? rtnl_newlink+0xa91/0x20a0 [ 1621.838107][T25898] ? __pfx_rtnl_newlink+0x10/0x10 [ 1621.843163][T25898] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1621.848410][T25898] ? __mutex_lock+0x9a5/0xd70 [ 1621.853122][T25898] ? __mutex_lock+0x527/0xd70 [ 1621.857938][T25898] ? __pfx_rtnl_newlink+0x10/0x10 [ 1621.863096][T25898] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1621.868239][T25898] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1621.873377][T25898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1621.878867][T25898] ? ref_tracker_free+0x643/0x7e0 [ 1621.884005][T25898] netlink_rcv_skb+0x1e3/0x430 [ 1621.888781][T25898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1621.894259][T25898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1621.900879][T25898] ? netlink_deliver_tap+0x2e/0x1b0 [ 1621.906096][T25898] netlink_unicast+0x7f6/0x990 [ 1621.910912][T25898] ? __pfx_netlink_unicast+0x10/0x10 [ 1621.916216][T25898] ? __virt_addr_valid+0x183/0x530 [ 1621.921340][T25898] ? __check_object_size+0x49c/0x900 [ 1621.926651][T25898] ? bpf_lsm_netlink_send+0x9/0x10 [ 1621.931809][T25898] netlink_sendmsg+0x8e4/0xcb0 [ 1621.936620][T25898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1621.941992][T25898] ? __import_iovec+0x536/0x820 [ 1621.946872][T25898] ? aa_sock_msg_perm+0x91/0x160 [ 1621.951861][T25898] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1621.957254][T25898] ? security_socket_sendmsg+0x87/0xb0 [ 1621.962766][T25898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1621.968081][T25898] __sock_sendmsg+0x221/0x270 [ 1621.972833][T25898] ____sys_sendmsg+0x525/0x7d0 [ 1621.977653][T25898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1621.983032][T25898] __sys_sendmsg+0x2b0/0x3a0 [ 1621.987672][T25898] ? __pfx___sys_sendmsg+0x10/0x10 [ 1621.992838][T25898] ? vfs_write+0x7c4/0xc90 [ 1621.997325][T25898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1622.004053][T25898] ? do_syscall_64+0x100/0x230 [ 1622.008853][T25898] ? do_syscall_64+0xb6/0x230 [ 1622.013576][T25898] do_syscall_64+0xf3/0x230 [ 1622.018109][T25898] ? clear_bhb_loop+0x35/0x90 [ 1622.022923][T25898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.029027][T25898] RIP: 0033:0x7f8e2037cef9 [ 1622.033501][T25898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.053153][T25898] RSP: 002b:00007f8e21235038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.061698][T25898] RAX: ffffffffffffffda RBX: 00007f8e20535f80 RCX: 00007f8e2037cef9 [ 1622.069710][T25898] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1622.077698][T25898] RBP: 00007f8e21235090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.085705][T25898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.093713][T25898] R13: 0000000000000000 R14: 00007f8e20535f80 R15: 00007f8e2065fa28 [ 1622.101742][T25898] [ 1622.104841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.137254][T25900] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1622.153194][T25900] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1622.848907][ T11] hsr_slave_0: left promiscuous mode [ 1622.855481][ T11] hsr_slave_1: left promiscuous mode [ 1622.871706][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.883699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.894733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.902986][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.937714][ T11] veth1_macvtap: left promiscuous mode [ 1622.943473][ T11] veth0_macvtap: left promiscuous mode [ 1622.949667][ T11] veth1_vlan: left promiscuous mode [ 1622.955143][ T11] veth0_vlan: left promiscuous mode [ 1623.145446][T25925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.171049][ T11] pim6reg (unregistering): left allmulticast mode [ 1623.265215][ T11] team0 (unregistering): Port device vlan2 removed [ 1623.287829][T13884] Bluetooth: hci3: command tx timeout [ 1624.125029][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1624.221598][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1624.898800][T25932] tunl0: entered promiscuous mode [ 1624.925450][T25932] netlink: 'syz.1.3398': attribute type 1 has an invalid length. [ 1624.938496][T25932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3398'. [ 1625.232452][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 1625.357303][T25791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1625.366998][T13884] Bluetooth: hci3: command tx timeout [ 1625.374135][T25948] tipc: Started in network mode [ 1625.393770][T25948] tipc: Node identity e0ef0001, cluster identity 4711 [ 1625.405644][T25948] tipc: Enabling of bearer rejected, failed to enable media [ 1625.434012][T25791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1625.510934][T25791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1625.563475][T25791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1625.622989][T25906] chnl_net:caif_netlink_parms(): no params data found [ 1626.037317][T25906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.067267][T25906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.094552][T25906] bridge_slave_0: entered allmulticast mode [ 1626.122075][T25906] bridge_slave_0: entered promiscuous mode [ 1626.148382][T25906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.158106][T25906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.168127][T25906] bridge_slave_1: entered allmulticast mode [ 1626.176708][T25906] bridge_slave_1: entered promiscuous mode [ 1626.305447][T25906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.349658][T25906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.434321][T25791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.554563][T25906] team0: Port device team_slave_0 added [ 1626.571084][T25906] team0: Port device team_slave_1 added [ 1626.724767][T25791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.774962][T25906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.792864][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.849523][T25906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.873606][T25906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.886725][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.956680][T25906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.018190][T25997] fuse: Bad value for 'fd' [ 1627.053881][T25993] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 1627.066321][T25993] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1627.095624][T25990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1627.192521][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.199800][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.348775][T25906] hsr_slave_0: entered promiscuous mode [ 1627.374936][T25906] hsr_slave_1: entered promiscuous mode [ 1627.393763][T25906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1627.409451][T25906] Cannot create hsr debugfs directory [ 1627.503952][T13884] Bluetooth: hci3: command tx timeout [ 1627.576535][T18168] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1627.636412][ T2588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.643656][ T2588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.809449][T18168] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.842597][T18168] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1627.867050][T18168] usb 3-1: New USB device strings: Mfr=0, Product=162, SerialNumber=123 [ 1627.893586][T18168] usb 3-1: Product: syz [ 1627.908913][T18168] usb 3-1: SerialNumber: syz [ 1627.943949][T18168] usb 3-1: config 0 descriptor?? [ 1627.963028][T18168] pwc: Askey VC010 type 2 USB webcam detected. [ 1627.994786][T25791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.185381][T18168] pwc: send_video_command error -71 [ 1628.191551][T18167] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1628.209419][T18168] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1628.229441][T18168] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1628.313583][T18168] usb 3-1: USB disconnect, device number 114 [ 1628.418079][T18167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.453720][T18167] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1628.507249][T18167] usb 2-1: New USB device strings: Mfr=0, Product=162, SerialNumber=123 [ 1628.520006][T18167] usb 2-1: Product: syz [ 1628.537058][T18167] usb 2-1: SerialNumber: syz [ 1628.555311][T18167] usb 2-1: config 0 descriptor?? [ 1628.587367][T18167] pwc: Askey VC010 type 2 USB webcam detected. [ 1628.640306][T25791] veth0_vlan: entered promiscuous mode [ 1628.698046][T25791] veth1_vlan: entered promiscuous mode [ 1628.718617][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1628.823659][T18167] pwc: send_video_command error -71 [ 1628.852500][T18167] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1628.860787][T18168] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1628.879523][T25791] veth0_macvtap: entered promiscuous mode [ 1628.894730][T18167] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1628.909750][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1628.930625][T25791] veth1_macvtap: entered promiscuous mode [ 1628.959842][T18167] usb 2-1: USB disconnect, device number 103 [ 1629.070271][T18168] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.093309][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.097972][T18168] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1629.113832][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.126379][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.143317][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.164013][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.181813][T18168] usb 3-1: New USB device strings: Mfr=0, Product=162, SerialNumber=123 [ 1629.186522][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.237418][T18168] usb 3-1: Product: syz [ 1629.242958][T25791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.247744][T18168] usb 3-1: SerialNumber: syz [ 1629.277810][T18168] usb 3-1: config 0 descriptor?? [ 1629.307957][T18168] pwc: Askey VC010 type 2 USB webcam detected. [ 1629.323127][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.344185][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.354539][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.365428][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.378054][T25791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.389416][T25791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.402661][T25791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.411801][T18167] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1629.430277][T25906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1629.454759][T25906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1629.517073][T25906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1629.526301][T13884] Bluetooth: hci3: command tx timeout [ 1629.588051][T25906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1629.610221][T18167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.616440][T25791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.635818][T25791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.639926][T18167] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1629.654552][T25791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.655826][T18167] usb 2-1: New USB device strings: Mfr=0, Product=162, SerialNumber=123 [ 1629.664891][T25791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.675498][T18167] usb 2-1: Product: syz [ 1629.698248][T18167] usb 2-1: SerialNumber: syz [ 1629.714598][T18167] usb 2-1: config 0 descriptor?? [ 1629.744125][T18167] pwc: Askey VC010 type 2 USB webcam detected. [ 1629.751864][T18168] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1629.778551][T18168] pwc: recv_control_msg error -32 req 02 val 2700 [ 1629.798747][T18168] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1629.822286][T18168] pwc: recv_control_msg error -32 req 04 val 1000 [ 1629.853582][T18168] pwc: recv_control_msg error -32 req 04 val 1300 [ 1630.183542][T18167] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1630.194757][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.210605][T18167] pwc: recv_control_msg error -32 req 02 val 2700 [ 1630.223986][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.234011][T18167] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1630.255730][T18167] pwc: recv_control_msg error -32 req 04 val 1000 [ 1630.270393][T18168] pwc: recv_control_msg error -71 req 04 val 1400 [ 1630.292614][T18167] pwc: recv_control_msg error -32 req 04 val 1300 [ 1630.299756][T18168] pwc: recv_control_msg error -71 req 02 val 2000 [ 1630.317724][T18168] pwc: recv_control_msg error -71 req 02 val 2100 [ 1630.332204][T18168] pwc: recv_control_msg error -71 req 04 val 1500 [ 1630.335867][ T2588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.347546][T18168] pwc: recv_control_msg error -71 req 02 val 2500 [ 1630.353422][ T2588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.367342][T18168] pwc: recv_control_msg error -71 req 02 val 2400 [ 1630.407950][T18168] pwc: recv_control_msg error -71 req 02 val 2600 [ 1630.447513][T18168] pwc: recv_control_msg error -71 req 02 val 2900 [ 1630.455899][T25906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.460631][T18168] pwc: recv_control_msg error -71 req 02 val 2800 [ 1630.510449][T18168] pwc: recv_control_msg error -71 req 04 val 1100 [ 1630.532924][T18168] pwc: recv_control_msg error -71 req 04 val 1200 [ 1630.570578][T25906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.581214][T18167] pwc: recv_control_msg error -71 req 04 val 1400 [ 1630.596673][T18168] pwc: Registered as video71. [ 1630.614627][T18168] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85 [ 1630.624551][T18167] pwc: recv_control_msg error -71 req 02 val 2000 [ 1630.642999][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.650252][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.661914][T18167] pwc: recv_control_msg error -71 req 02 val 2100 [ 1630.679872][T18167] pwc: recv_control_msg error -71 req 04 val 1500 [ 1630.703317][T18168] usb 3-1: USB disconnect, device number 115 [ 1630.724328][T18167] pwc: recv_control_msg error -71 req 02 val 2500 [ 1630.758520][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.765824][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.781764][T18167] pwc: recv_control_msg error -71 req 02 val 2400 [ 1630.797743][T18167] pwc: recv_control_msg error -71 req 02 val 2600 [ 1630.824938][T18167] pwc: recv_control_msg error -71 req 02 val 2900 [ 1630.858970][T18167] pwc: recv_control_msg error -71 req 02 val 2800 [ 1630.909357][T18167] pwc: recv_control_msg error -71 req 04 val 1100 [ 1630.958714][T18167] pwc: recv_control_msg error -71 req 04 val 1200 [ 1631.007209][T18167] pwc: Registered as video71. [ 1631.037502][T18167] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 1631.102176][T18167] usb 2-1: USB disconnect, device number 104 [ 1631.396996][T25906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.739048][T25906] veth0_vlan: entered promiscuous mode [ 1631.902546][T25906] veth1_vlan: entered promiscuous mode [ 1632.027847][T25906] veth0_macvtap: entered promiscuous mode [ 1632.036249][T14845] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1632.139882][T25906] veth1_macvtap: entered promiscuous mode [ 1632.246605][T14845] usb 3-1: Using ep0 maxpacket: 32 [ 1632.274953][T14845] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.308834][T18167] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1632.340308][T14845] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.370646][T14845] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1632.385046][T14845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.442143][T14845] hub 3-1:4.0: USB hub found [ 1632.471791][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.576233][T18167] usb 5-1: device descriptor read/64, error -71 [ 1632.803016][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.886597][T18167] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1632.944758][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.009139][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.038068][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.056593][T18167] usb 5-1: device descriptor read/64, error -71 [ 1633.073544][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.096049][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.119559][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.146492][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.173915][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.184924][T18167] usb usb5-port1: attempt power cycle [ 1633.218165][T25906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.397342][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.424494][T14845] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1633.490411][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.499182][T14845] usb 3-1: USB disconnect, device number 116 [ 1633.521896][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.565837][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.589111][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.609574][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.620730][T18167] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1633.642044][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1633.654354][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.665097][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1633.678542][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.689966][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1633.699763][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.711011][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1633.718736][T18167] usb 5-1: device descriptor read/8, error -71 [ 1633.725449][ T47] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1633.734648][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1633.747006][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1633.792907][T25906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.819662][T25906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.828780][T25906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.838243][T25906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.850091][T25906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.911006][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.927826][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.946297][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.956727][ T47] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1633.965841][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.994481][ T47] usb 2-1: config 0 descriptor?? [ 1634.016161][T18167] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1634.073216][T18167] usb 5-1: device descriptor read/8, error -71 [ 1634.207188][T18167] usb usb5-port1: unable to enumerate USB device [ 1634.583920][T26126] FAULT_INJECTION: forcing a failure. [ 1634.583920][T26126] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.587449][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.629321][T26126] CPU: 1 UID: 0 PID: 26126 Comm: syz.2.3434 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1634.640227][T26126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1634.640246][T26126] Call Trace: [ 1634.640257][T26126] [ 1634.640268][T26126] dump_stack_lvl+0x241/0x360 [ 1634.651367][ T54] bridge_slave_1: left allmulticast mode [ 1634.653629][T26126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.658730][ T54] bridge_slave_1: left promiscuous mode [ 1634.661256][T26126] ? __pfx__printk+0x10/0x10 [ 1634.661291][T26126] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1634.661320][T26126] ? __pfx___might_resched+0x10/0x10 [ 1634.661357][T26126] should_fail_ex+0x3b0/0x4e0 [ 1634.661400][T26126] should_failslab+0xac/0x100 [ 1634.661437][T26126] ? __alloc_skb+0x1c3/0x440 [ 1634.661465][T26126] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1634.661498][T26126] __alloc_skb+0x1c3/0x440 [ 1634.661532][T26126] ? __pfx___alloc_skb+0x10/0x10 [ 1634.661567][T26126] ? netlink_ack_tlv_len+0x6e/0x200 [ 1634.661595][T26126] netlink_ack+0x13f/0xa30 [ 1634.661618][T26126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1634.661675][T26126] netlink_rcv_skb+0x262/0x430 [ 1634.661701][T26126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1634.670739][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.672575][T26126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1634.761131][T26126] ? netlink_deliver_tap+0x2e/0x1b0 [ 1634.766380][T26126] netlink_unicast+0x7f6/0x990 [ 1634.771182][T26126] ? __pfx_netlink_unicast+0x10/0x10 [ 1634.776504][T26126] ? __virt_addr_valid+0x183/0x530 [ 1634.781649][T26126] ? __check_object_size+0x49c/0x900 [ 1634.786977][T26126] ? bpf_lsm_netlink_send+0x9/0x10 [ 1634.792179][T26126] netlink_sendmsg+0x8e4/0xcb0 [ 1634.797000][T26126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.802400][T26126] ? __import_iovec+0x536/0x820 [ 1634.807267][T26126] ? aa_sock_msg_perm+0x91/0x160 [ 1634.812238][T26126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1634.817575][T26126] ? security_socket_sendmsg+0x87/0xb0 [ 1634.823163][T26126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.828471][T26126] __sock_sendmsg+0x221/0x270 [ 1634.833178][T26126] ____sys_sendmsg+0x525/0x7d0 [ 1634.837969][T26126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1634.843373][T26126] __sys_sendmsg+0x2b0/0x3a0 [ 1634.848081][T26126] ? __pfx___sys_sendmsg+0x10/0x10 [ 1634.853242][T26126] ? vfs_write+0x7c4/0xc90 [ 1634.857723][T26126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1634.864076][T26126] ? do_syscall_64+0x100/0x230 [ 1634.868856][T26126] ? do_syscall_64+0xb6/0x230 [ 1634.873548][T26126] do_syscall_64+0xf3/0x230 [ 1634.878064][T26126] ? clear_bhb_loop+0x35/0x90 [ 1634.882762][T26126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.888703][T26126] RIP: 0033:0x7feac877cef9 [ 1634.893132][T26126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.912760][T26126] RSP: 002b:00007feac9491038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1634.921189][T26126] RAX: ffffffffffffffda RBX: 00007feac8935f80 RCX: 00007feac877cef9 [ 1634.929169][T26126] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 1634.937325][T26126] RBP: 00007feac9491090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.945303][T26126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.953279][T26126] R13: 0000000000000000 R14: 00007feac8935f80 R15: 00007feac8a5fa28 [ 1634.961271][T26126] [ 1634.964382][ C1] vkms_vblank_simulate: vblank timer overrun [ 1634.990228][ T54] bridge_slave_0: left allmulticast mode [ 1634.996064][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.996204][ T54] bridge_slave_0: left promiscuous mode [ 1635.009662][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.329887][ T47] wacom 0003:056A:0016.003C: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1635.385948][T26137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.416569][ T47] wacom 0003:056A:0016.003C: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 1635.457399][T26137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.459598][ T47] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.003C/input/input87 [ 1635.676203][T22931] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1635.850718][ T5239] Bluetooth: hci0: command tx timeout [ 1635.898985][T22931] usb 3-1: Using ep0 maxpacket: 16 [ 1635.922918][T22931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1635.981305][T14845] usb 2-1: USB disconnect, device number 105 [ 1635.996485][T22931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1636.041084][T22931] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1636.095863][T22931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.134944][T22931] usb 3-1: Product: syz [ 1636.140067][T22931] usb 3-1: Manufacturer: syz [ 1636.145461][T22931] usb 3-1: SerialNumber: syz [ 1636.165213][T22931] usb 3-1: config 0 descriptor?? [ 1636.184552][T22931] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1636.200121][T22931] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1636.472716][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.486467][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.500761][ T54] bond0 (unregistering): Released all slaves [ 1636.687760][T22931] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1636.694647][ T54] tipc: Left network mode [ 1636.751500][ T2588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.772540][ T2588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.818911][T22931] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1636.847041][T22931] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1636.867776][T22931] em28xx 3-1:0.0: No AC97 audio processor [ 1636.989717][T26113] chnl_net:caif_netlink_parms(): no params data found [ 1637.124521][T26163] netlink: 'syz.1.3439': attribute type 1 has an invalid length. [ 1637.133524][T26163] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1637.182530][ T54] hsr_slave_0: left promiscuous mode [ 1637.210477][ T54] hsr_slave_1: left promiscuous mode [ 1637.263636][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.273700][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.299832][ T25] usb 3-1: USB disconnect, device number 117 [ 1637.312280][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 1637.331551][ T25] em28xx 3-1:0.0: Freeing device [ 1637.344230][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.370945][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.443286][ T54] veth1_macvtap: left promiscuous mode [ 1637.456621][ T54] veth0_macvtap: left promiscuous mode [ 1637.468828][ T54] veth1_vlan: left promiscuous mode [ 1637.502968][ T54] veth0_vlan: left promiscuous mode [ 1637.536601][T14845] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1637.736322][T14845] usb 2-1: Using ep0 maxpacket: 16 [ 1637.746933][T14845] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1637.764821][T14845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1637.780557][T14845] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1637.802791][T14845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.830961][T14845] usb 2-1: Product: syz [ 1637.839530][T14845] usb 2-1: Manufacturer: syz [ 1637.844626][T14845] usb 2-1: SerialNumber: syz [ 1637.874255][T14845] usb 2-1: config 0 descriptor?? [ 1637.883615][T14845] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1637.886548][ T25] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1637.921921][T14845] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1637.942571][ T5239] Bluetooth: hci0: command tx timeout [ 1638.098085][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.114576][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.135954][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1638.164527][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.197214][ T25] usb 3-1: config 0 descriptor?? [ 1638.547593][T14845] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1638.570292][T14845] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1639.077757][ T25] wacom 0003:056A:0016.003D: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1639.126819][ T25] wacom 0003:056A:0016.003D: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 1639.193261][T14845] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1639.196457][ T25] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.003D/input/input90 [ 1639.214017][T26171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.215576][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1639.257355][T26171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.311740][T14845] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1639.338004][T14845] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1639.375898][T14845] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1639.387676][T14845] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1639.473016][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1639.552972][ T47] usb 3-1: USB disconnect, device number 118 [ 1639.598983][T14845] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1639.623688][T14845] usb 2-1: USB disconnect, device number 106 [ 1640.007640][ T5239] Bluetooth: hci0: command tx timeout [ 1641.616310][T26113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.629686][T26113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.648732][T26113] bridge_slave_0: entered allmulticast mode [ 1641.673237][T26113] bridge_slave_0: entered promiscuous mode [ 1641.698006][T26113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.719975][T26113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.738512][T26113] bridge_slave_1: entered allmulticast mode [ 1641.755718][T26113] bridge_slave_1: entered promiscuous mode [ 1641.773711][T26266] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 1641.781995][T26266] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3449'. [ 1641.969372][T26113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.029262][T26113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.096037][ T5239] Bluetooth: hci0: command tx timeout [ 1642.379517][T26113] team0: Port device team_slave_0 added [ 1642.411379][T26113] team0: Port device team_slave_1 added [ 1642.587322][T26113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.594440][T26113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.714130][T26113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.746629][T13884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1642.760364][T13884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1642.770951][T26113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.778251][T13884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1642.791853][T13884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1642.800114][T26113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.831071][T13884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1642.842351][T13884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1642.916901][T26113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.986316][ T47] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1643.191364][ T47] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 1643.229831][ T47] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 1643.243446][ T47] usb 3-1: Manufacturer: syz [ 1643.265938][ T47] usb 3-1: config 0 descriptor?? [ 1643.384156][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.473889][T26113] hsr_slave_0: entered promiscuous mode [ 1643.485363][T26113] hsr_slave_1: entered promiscuous mode [ 1643.573288][ T25] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1643.597398][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.704434][ T47] gs_usb 3-1:0.0: Configuring for 149 interfaces [ 1643.711485][ T47] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1643.720794][ T47] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1643.729626][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.778491][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.800198][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.812932][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1643.823528][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.843435][ T25] usb 5-1: config 0 descriptor?? [ 1643.891272][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.949723][T22931] usb 3-1: USB disconnect, device number 119 [ 1644.613437][ T54] bridge_slave_1: left allmulticast mode [ 1644.626158][ T54] bridge_slave_1: left promiscuous mode [ 1644.632180][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.693263][ T25] wacom 0003:056A:0016.003E: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1644.721457][ T54] bridge_slave_0: left allmulticast mode [ 1644.727711][ T54] bridge_slave_0: left promiscuous mode [ 1644.749684][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.756698][ T25] wacom 0003:056A:0016.003E: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.4-1/input0 [ 1644.784051][ T25] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0016.003E/input/input93 [ 1644.887256][T13884] Bluetooth: hci3: command tx timeout [ 1645.655040][T22931] usb 5-1: USB disconnect, device number 106 [ 1645.935304][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.951314][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.963113][ T54] bond0 (unregistering): Released all slaves [ 1646.040989][T26321] netlink: 'syz.1.3460': attribute type 4 has an invalid length. [ 1646.086573][T26323] netlink: 'syz.1.3460': attribute type 4 has an invalid length. [ 1646.128289][T26324] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 1646.138220][T26324] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1646.646653][T18167] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1646.654302][T26294] chnl_net:caif_netlink_parms(): no params data found [ 1646.866248][T18167] usb 2-1: Using ep0 maxpacket: 16 [ 1646.896645][T18167] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1646.924385][T18167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.938336][T18167] usb 2-1: Product: syz [ 1646.942699][T18167] usb 2-1: Manufacturer: syz [ 1646.948396][T18167] usb 2-1: SerialNumber: syz [ 1646.967613][T18167] usb 2-1: config 0 descriptor?? [ 1646.976778][T13884] Bluetooth: hci3: command tx timeout [ 1646.981126][T18167] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1647.227189][ T54] hsr_slave_0: left promiscuous mode [ 1647.240195][ T54] hsr_slave_1: left promiscuous mode [ 1647.252260][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.291473][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.302843][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.323719][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.389896][ T54] veth1_macvtap: left promiscuous mode [ 1647.395560][ T54] veth0_macvtap: left promiscuous mode [ 1647.415070][ T54] veth1_vlan: left promiscuous mode [ 1647.420699][ T54] veth0_vlan: left promiscuous mode [ 1647.438048][T18167] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1647.480132][T18167] usb 2-1: USB disconnect, device number 107 [ 1647.645480][T26359] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1647.727045][T26362] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1647.753651][T26362] Cannot find add_set index 0 as target [ 1648.346401][ T47] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1648.558134][ T47] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1648.570073][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1648.576589][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1648.594669][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1648.615445][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.627546][ T47] usb 2-1: config 0 descriptor?? [ 1648.668104][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1648.853699][ T5287] usb 2-1: USB disconnect, device number 108 [ 1649.056333][T13884] Bluetooth: hci3: command tx timeout [ 1649.638147][T26294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.645451][T26294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.670589][T26294] bridge_slave_0: entered allmulticast mode [ 1649.677077][T26375] FAULT_INJECTION: forcing a failure. [ 1649.677077][T26375] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.678715][T26294] bridge_slave_0: entered promiscuous mode [ 1649.719289][T26376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1649.729668][T26375] CPU: 0 UID: 0 PID: 26375 Comm: syz.4.3472 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1649.740499][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1649.750600][T26375] Call Trace: [ 1649.753911][T26375] [ 1649.756874][T26375] dump_stack_lvl+0x241/0x360 [ 1649.761614][T26375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1649.766877][T26375] ? __pfx__printk+0x10/0x10 [ 1649.771510][T26375] ? __kmalloc_noprof+0xb0/0x400 [ 1649.776581][T26375] ? __pfx___might_resched+0x10/0x10 [ 1649.781917][T26375] ? rcu_is_watching+0x15/0xb0 [ 1649.786743][T26375] should_fail_ex+0x3b0/0x4e0 [ 1649.791572][T26375] ? tracepoint_add_func+0x2e4/0x9e0 [ 1649.796984][T26375] should_failslab+0xac/0x100 [ 1649.801739][T26375] ? tracepoint_add_func+0x2e4/0x9e0 [ 1649.802667][T26294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.807053][T26375] __kmalloc_noprof+0xd8/0x400 [ 1649.807138][T26375] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1649.824888][T26375] tracepoint_add_func+0x2e4/0x9e0 [ 1649.824944][T26294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.830035][T26375] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1649.830077][T26375] tracepoint_probe_register+0x105/0x160 [ 1649.830112][T26375] ? __pfx___mutex_lock+0x10/0x10 [ 1649.830139][T26375] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1649.830174][T26375] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1649.830224][T26375] get_probe_ref+0x7c/0x400 [ 1649.845916][T26294] bridge_slave_1: entered allmulticast mode [ 1649.848933][T26375] do_blk_trace_setup+0x7eb/0x9b0 [ 1649.848989][T26375] blk_trace_setup+0x119/0x1e0 [ 1649.849028][T26375] ? __pfx_blk_trace_setup+0x10/0x10 [ 1649.849082][T26375] sg_ioctl+0xa4c/0x2e80 [ 1649.857257][T26294] bridge_slave_1: entered promiscuous mode [ 1649.860286][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1649.906452][T26375] ? __fget_files+0x29/0x470 [ 1649.911070][T26375] ? __fget_files+0x3f6/0x470 [ 1649.915788][T26375] ? __fget_files+0x29/0x470 [ 1649.920423][T26375] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1649.925434][T26375] ? security_file_ioctl+0x87/0xb0 [ 1649.930594][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1649.935321][T26375] __se_sys_ioctl+0xfc/0x170 [ 1649.939949][T26375] do_syscall_64+0xf3/0x230 [ 1649.944477][T26375] ? clear_bhb_loop+0x35/0x90 [ 1649.949184][T26375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.955099][T26375] RIP: 0033:0x7f59da37cef9 [ 1649.959527][T26375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.979668][T26375] RSP: 002b:00007f59db147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.988474][T26375] RAX: ffffffffffffffda RBX: 00007f59da535f80 RCX: 00007f59da37cef9 [ 1649.996470][T26375] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1650.004463][T26375] RBP: 00007f59db147090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.012466][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.020484][T26375] R13: 0000000000000000 R14: 00007f59da535f80 R15: 00007f59da65fa28 [ 1650.028510][T26375] [ 1650.041130][T26375] ------------[ cut here ]------------ [ 1650.047332][T26375] WARNING: CPU: 1 PID: 26375 at kernel/trace/blktrace.c:1097 get_probe_ref+0x32b/0x400 [ 1650.057303][T26375] Modules linked in: [ 1650.061246][T26375] CPU: 1 UID: 0 PID: 26375 Comm: syz.4.3472 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1650.072259][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1650.082482][T26375] RIP: 0010:get_probe_ref+0x32b/0x400 [ 1650.088001][T26375] Code: e4 00 00 00 e8 16 26 f8 ff 48 c7 c7 e0 11 99 8e 5b e9 79 0f 27 0a e8 04 26 f8 ff 90 0f 0b 90 e9 42 fd ff ff e8 f6 25 f8 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 e8 25 f8 ff 90 0f 0b 90 e9 80 fd ff ff [ 1650.107831][T26375] RSP: 0018:ffffc900043f7b58 EFLAGS: 00010293 [ 1650.114123][T26375] RAX: ffffffff819b66ba RBX: 00000000fffffff4 RCX: ffff888020328000 [ 1650.122898][T26375] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1650.131026][T26378] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1650.140912][T26375] RBP: ffff888022ad8480 R08: ffffffff819b6417 R09: 1ffff9200087ef40 [ 1650.149215][T26375] R10: dffffc0000000000 R11: fffff5200087ef41 R12: 1ffff1100455b096 [ 1650.157958][T26375] R13: ffffc900043f7c80 R14: ffff888022ad84b0 R15: dffffc0000000000 [ 1650.167193][T26375] FS: 00007f59db1476c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1650.176519][T26375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1650.183575][T26375] CR2: 00007f8e211f2f98 CR3: 000000006b542000 CR4: 00000000003506f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1650.191679][T26375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1650.200113][T26375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1650.208934][T26375] Call Trace: [ 1650.212338][T26375] [ 1650.215332][T26375] ? __warn+0x163/0x4e0 [ 1650.219652][T26375] ? get_probe_ref+0x32b/0x400 [ 1650.224516][T26375] ? report_bug+0x2b3/0x500 [ 1650.229905][T26375] ? get_probe_ref+0x32b/0x400 [ 1650.235187][T26375] ? handle_bug+0x3e/0x70 [ 1650.241411][T26375] ? exc_invalid_op+0x1a/0x50 [ 1650.241451][T26375] ? asm_exc_invalid_op+0x1a/0x20 [ 1650.241488][T26375] ? get_probe_ref+0x87/0x400 [ 1650.241541][T26375] ? get_probe_ref+0x32a/0x400 [ 1650.241587][T26375] ? get_probe_ref+0x32b/0x400 [ 1650.241645][T26375] ? get_probe_ref+0x32a/0x400 [ 1650.241700][T26375] do_blk_trace_setup+0x7eb/0x9b0 [ 1650.241771][T26375] blk_trace_setup+0x119/0x1e0 [ 1650.241831][T26375] ? __pfx_blk_trace_setup+0x10/0x10 [ 1650.241887][T26375] sg_ioctl+0xa4c/0x2e80 [ 1650.241951][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1650.242007][T26375] ? __fget_files+0x29/0x470 [ 1650.242073][T26375] ? __fget_files+0x3f6/0x470 [ 1650.242126][T26375] ? __fget_files+0x29/0x470 [ 1650.242194][T26375] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1650.242251][T26375] ? security_file_ioctl+0x87/0xb0 [ 1650.242301][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1650.242354][T26375] __se_sys_ioctl+0xfc/0x170 [ 1650.242416][T26375] do_syscall_64+0xf3/0x230 [ 1650.336989][T26375] ? clear_bhb_loop+0x35/0x90 [ 1650.337042][T26375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.337075][T26375] RIP: 0033:0x7f59da37cef9 [ 1650.337099][T26375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.337120][T26375] RSP: 002b:00007f59db147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.337147][T26375] RAX: ffffffffffffffda RBX: 00007f59da535f80 RCX: 00007f59da37cef9 [ 1650.337166][T26375] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1650.337184][T26375] RBP: 00007f59db147090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.337201][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.337217][T26375] R13: 0000000000000000 R14: 00007f59da535f80 R15: 00007f59da65fa28 [ 1650.337254][T26375] [ 1650.337268][T26375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1650.337284][T26375] CPU: 1 UID: 0 PID: 26375 Comm: syz.4.3472 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1650.337310][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1650.337324][T26375] Call Trace: [ 1650.337334][T26375] [ 1650.337345][T26375] dump_stack_lvl+0x241/0x360 [ 1650.337376][T26375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1650.337402][T26375] ? __pfx__printk+0x10/0x10 [ 1650.337422][T26375] ? _printk+0xd5/0x120 [ 1650.337453][T26375] ? vscnprintf+0x5d/0x90 [ 1650.337485][T26375] panic+0x349/0x860 [ 1650.337510][T26375] ? __warn+0x172/0x4e0 [ 1650.337536][T26375] ? __pfx_panic+0x10/0x10 [ 1650.337556][T26375] ? show_trace_log_lvl+0x4e6/0x520 [ 1650.337615][T26375] __warn+0x346/0x4e0 [ 1650.337639][T26375] ? get_probe_ref+0x32b/0x400 [ 1650.337678][T26375] report_bug+0x2b3/0x500 [ 1650.337712][T26375] ? get_probe_ref+0x32b/0x400 [ 1650.337751][T26375] handle_bug+0x3e/0x70 [ 1650.337778][T26375] exc_invalid_op+0x1a/0x50 [ 1650.337805][T26375] asm_exc_invalid_op+0x1a/0x20 [ 1650.337833][T26375] RIP: 0010:get_probe_ref+0x32b/0x400 [ 1650.337867][T26375] Code: e4 00 00 00 e8 16 26 f8 ff 48 c7 c7 e0 11 99 8e 5b e9 79 0f 27 0a e8 04 26 f8 ff 90 0f 0b 90 e9 42 fd ff ff e8 f6 25 f8 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 e8 25 f8 ff 90 0f 0b 90 e9 80 fd ff ff [ 1650.337886][T26375] RSP: 0018:ffffc900043f7b58 EFLAGS: 00010293 [ 1650.337908][T26375] RAX: ffffffff819b66ba RBX: 00000000fffffff4 RCX: ffff888020328000 [ 1650.337925][T26375] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1650.337940][T26375] RBP: ffff888022ad8480 R08: ffffffff819b6417 R09: 1ffff9200087ef40 [ 1650.337958][T26375] R10: dffffc0000000000 R11: fffff5200087ef41 R12: 1ffff1100455b096 [ 1650.337976][T26375] R13: ffffc900043f7c80 R14: ffff888022ad84b0 R15: dffffc0000000000 [ 1650.338010][T26375] ? get_probe_ref+0x87/0x400 [ 1650.338042][T26375] ? get_probe_ref+0x32a/0x400 [ 1650.338083][T26375] ? get_probe_ref+0x32a/0x400 [ 1650.338116][T26375] do_blk_trace_setup+0x7eb/0x9b0 [ 1650.338161][T26375] blk_trace_setup+0x119/0x1e0 [ 1650.338200][T26375] ? __pfx_blk_trace_setup+0x10/0x10 [ 1650.338254][T26375] sg_ioctl+0xa4c/0x2e80 [ 1650.338297][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1650.338330][T26375] ? __fget_files+0x29/0x470 [ 1650.338362][T26375] ? __fget_files+0x3f6/0x470 [ 1650.338389][T26375] ? __fget_files+0x29/0x470 [ 1650.338425][T26375] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1650.338459][T26375] ? security_file_ioctl+0x87/0xb0 [ 1650.338493][T26375] ? __pfx_sg_ioctl+0x10/0x10 [ 1650.338521][T26375] __se_sys_ioctl+0xfc/0x170 [ 1650.338551][T26375] do_syscall_64+0xf3/0x230 [ 1650.338576][T26375] ? clear_bhb_loop+0x35/0x90 [ 1650.338610][T26375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.338640][T26375] RIP: 0033:0x7f59da37cef9 [ 1650.338659][T26375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.338678][T26375] RSP: 002b:00007f59db147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.338702][T26375] RAX: ffffffffffffffda RBX: 00007f59da535f80 RCX: 00007f59da37cef9 [ 1650.338720][T26375] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1650.338737][T26375] RBP: 00007f59db147090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.338752][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.338768][T26375] R13: 0000000000000000 R14: 00007f59da535f80 R15: 00007f59da65fa28 [ 1650.338804][T26375] [ 1650.339126][T26375] Kernel Offset: disabled