last executing test programs: 25.504603665s ago: executing program 3 (id=1822): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x108c00, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$kcm(0xa, 0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000001040)="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", 0xa44}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @private}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x18, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x20000174, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fc3e594095c731f, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x10000, {0x2, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x8000000000000, 0x0, 0x0, 0x40, 0xd, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x22, 0x1, 0x2d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00242abd7000944209e8763797542b395e5473a2b86761522a", @ANYRES32, @ANYBLOB="0c00990004000000120000200a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r9 = socket$unix(0x1, 0x1, 0x0) listen(r9, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0/file0\x00') 24.562805273s ago: executing program 3 (id=1827): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0xfffffffffffffffe}, 0x10) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 24.140902375s ago: executing program 3 (id=1830): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.342810637s ago: executing program 4 (id=1851): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x1, 0x101, 0x0, 0x7, "7b227117ff6b4e19a415b364af60bcc114dfb1"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x7, 0x1a, 0x146, &(0x7f0000000040)}) open_by_handle_at(r0, &(0x7f0000000480)=@xfs_parent={0x1c, 0x82, {0x1, 0x7f, 0x1, 0x1cfa}}, 0x400) close_range(r0, r0, 0x2) r1 = signalfd(r0, &(0x7f00000004c0)={[0x6]}, 0x8) fcntl$lock(r1, 0x25, &(0x7f0000000500)={0x1, 0x2, 0x9cd4, 0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000540)={0x18, 0x1, 0x0, {0x1}}, 0x18) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000005c0)={0x47, &(0x7f0000000580)="d6ff094807ddd2102b8150af1331cd835f752bcfb00f792f42cb83f67eeb5a0ec8935c1cb10b2e96b42f0a19f09709d38710194fe4e848c653"}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000006c0)={0x1, 0x2, 0x1000, 0x42, &(0x7f0000000600)="9c3daa8bcf05e0af858475112f1c64dab7dfae40fd39d36ce71c236ef27b59398509ef94dcfb524538940112908653548a3c703bedd5266aa3a6d5e95251e749581c", 0x2e, 0x0, &(0x7f0000000680)="b0eb3b7e4eee16d3cac0e18ea500e385b74620246fcf601de8c6607cd89ba6ba93d1911b2ab6d195863f90ea0b94"}) syz_usb_connect(0x3, 0x40d, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x1d, 0x7a, 0x2b, 0x8, 0x9710, 0x7820, 0x93c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fb, 0x2, 0x81, 0x1, 0x10, 0x10, [{{0x9, 0x4, 0xbb, 0x5, 0x5, 0x18, 0xe2, 0x4f, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x81}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x8, "e29aa8"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0xf0, "b0e215ca65"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x0, 0x10, "cbac"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x6, 0x7c, "ce9f37"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x6, 0x8, "25d6f2bf7a"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x5, 0x4, 0x0, 0x80, 0x7}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x32, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}, @generic={0xf8, 0x22, "1967756f1431b2bd3ada82cb0684d31350aeeba2b6daa144b1561f1cb3cd2cefeb41f617b43fba85a1f7a529bce5628e20aa89fc9d866bbdcbc19389524e72e894a12dbce4a583f1d2a904867e405bdc69ebfad8f65062f4ee185438246d87d88f13b3a025978c9648bc16caf6439d16f341d79d081cd2ea5377624931dc67cbdd99ceccbcee5e4e05c000327751e553479004d9fe3cbf36225fc4203634745b85c1e0447feb935c20aeaad07307e83246774853d453a1ad30838e7d8db058f83fa96116d6bbd0258e74b207aa0092a9126210354e968f8c0817ff5dff28994a078da1424d373ed66dd80df94a04581e3f02e85583cb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0xc8, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x7, 0xf, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x2, 0xe3, [@generic={0xb2, 0xd, "571cf8c06f296f4bc572f74bbb9e2609334f7d8bc3d25fd31ee763a4382c5d6e69b4a0f512c61a0934411314bc742371450650c03c7d1537bc64a9ccc36a7a02a8c69f4063d02593449522c778be0db089d2b95855d847f8d10fba3f07471467a595e3a060b9d76a0e14cf5a58d30535e3f32322918f5a5d1cc432d516ff37b9c0f5b6783529e23065ec2ed3c9031786a1dc4a4d1194d79376c03b5a45a380ab4ad5249b355bfee3eb0a7f5724f69992"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}]}}, {{0x9, 0x5, 0xe10fb2cf5532142f, 0x2, 0x200, 0xf2, 0x7f, 0x6, [@generic={0xf6, 0x10, "7256adb4dec8509ff4db88152a9e68354e285ace5605a75329bc496e0f442b16678cb3c5286072ee9f7f479c3f9b09d9329bf1f475d0998648f9a740dce3d4942ee1e3ee12a04ad74fe52e4411ae243a41ecb7f0d7ee96d034bf4570c0f8b1c31b82d00768852f4d3d6df1275fa72bb871ea6856a4d39f718cb372970301ecc7a771aa116c6658e84a53bbe839ff312b2c5c7683cdaeab2ac29b2f710d51b5de769af4d98b3a848f106fe5cbf3a81f44bc38365b59814b407663cddc15c361126cadd5b50ec7ea1cc11c25e8ff97dd32444ae02b71ead43cc5cf6d496de50c0f26c1f29f5a1e400aa784dc90768ac7b185d47f3b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1a, 0x2}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x4, 0x14, 0xf4, 0xe3, 0x2, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xfd8d, 0x56, "e8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xff, 0x3, 0x5, "cd25557115eb3d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7b, 0x0, 0xd1, "6a995b7e7ba0ec289a"}]}, @hid_hid={0x9, 0x21, 0x40, 0x1, 0x1, {0x22, 0xe22}}], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x4, 0x6, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xbf}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x9, 0x9, 0x6, [@generic={0xc, 0x22, "e6aeb6b0a1394477f155"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x7, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x80}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0x9, 0x3, [@generic={0x2e, 0x48, "8694c002747dcbe341421f2e572f8a543cf2c791f9b1614efa560f31abc66706d8f78854d287198ecf85b69d"}, @uac_iso={0x7, 0x25, 0x1, 0xd3cd3ad5356714df, 0x6, 0x2}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x110, 0x5, 0x2, 0x5, 0x40, 0x6}, 0xfc, &(0x7f0000000bc0)={0x5, 0xf, 0xfc, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x8, 0x7}, @wireless={0xb, 0x10, 0x1, 0xe, 0xd4, 0x6, 0x3, 0x0, 0x7}, @generic={0x2c, 0x10, 0xb, "bb3266452747011ffe3c56091237422138e72534aafaf37ae9d96e0e2e36ff986df0573563a31e7417"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x9, 0x4}, @generic={0x29, 0x10, 0xa, "cdad6286d8c7fadddeba9d2aae3b25eef57abb767602dccb517b1a2b0da1eac86afd7f108ea9"}, @generic={0x86, 0x10, 0x2, "58de0428d3ebe9aadca798018e163e451290feca99f700325b289dc021dcaddb42fa2a8d8646cae0985bbd0b5c8c579f21c42f8c9b54a3c40119682a8e5ba0a797c8fdca399ffb9087b4fddb27442e0a42582ce6fe9a518939ffbca698b38866c2f69658597279c024966d9102dc70eee76987d0588bd7e6a9fed60032f04d3d981aa9"}]}, 0x9, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x41d}}, {0x64, &(0x7f0000000d40)=@string={0x64, 0x3, "a31fcd1241ec94dac01ca44c604585aac85392dd57383c5551b589cc551aaef5dcedaf39a734ce27b8c086f6670f72f5cf527dbc60498ad69d7216e52ada229209ab8bd1f9b59fc819f77d13a66844fde464a1ac24e055d0869dfce2839657f91896"}}, {0xd5, &(0x7f0000000dc0)=@string={0xd5, 0x3, "b7aed0c5cac6767c9a1fc4275d147262732f6358aadcea1a086cde59b0a00b07647929c5d9d393724865db42757a57f5efac31e9cd0a8c243fe795c437a78d69d2c3933097a9190114b5e37349b7b67b0f63c5560737afaa24a707deae01e016be76fff1e3b7800dfaf37da0f888dfb326c55a07ff2ace5451436d9172e9d38f50467fb97e87dc411a6870da83e95f07c65dbdc2bcebcacec9dd5ace6c75bfd1dc56b1cf801ef4bc1490250ec6f8f2695e9fcbfe982e9fc44e3f57fa1c1e069ac25cc464c93c05192612e6fde12621f0aae7eb"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x449}}, {0xbd, &(0x7f0000000f00)=@string={0xbd, 0x3, "b201bf3d6e10b0a11f802014e166be373edde7ca38f6b969b07a7c40069d89d1588b50c40087d55091c58ef9b003410c1f3f92d523e8847125eb425d92ee7acfaa28378535cad119cc467c4dabcfacd7d44e6e8a43d541a780f5f8212dd61f5334f4209de757d7c284489ab5ea72908823a895df657df902a79811a25f5c75f57074662ab61e350c6083960e52e38646036e2dfcbc1282e1821a05fb25d8c996480090d4a09d022ab8559b1b2405ec30f5301ca7e6a07dae147895"}}, {0x8d, &(0x7f0000000fc0)=@string={0x8d, 0x3, "14ee626605558abab6036ec46ee1836a50e6160b61f428ac04f256661a5f0d839e8a1ce6058df52f87f837c7007b918ab00977324aabcd500d5da4fef88ffbb82654e1f724840d5c7894d0589976a6034f29c12530cd44c6dba72340e1f3a8abcc199e046f8456ffee5b42d0d2e4f5c20eaddd064ecddcf0ff86a17ca9eaaa76db46f8535c195093e31aba"}}, {0x67, &(0x7f0000001080)=@string={0x67, 0x3, "5981c5aa9b1bf4ac3c5e5027d97dc961779d676508567ba9ec7dda5dc2d9fa00a9057bbe9ac9da6e1a7e603007a05b6c77da5765a53043707e41b7d6c9bc71e858e4a3ca8361fa1f2668ef75670284914d67e756c295e61554ca7fe03d9a52208b38adc1bd"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1c01}}]}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000002400)={0x4, &(0x7f0000002380)=[{0x6, 0x2e, &(0x7f0000001200)="78317728ab67235228bd0d8c3a65daab75a31ce363810f5d15fd44aba9baffe6d40612e7ed36c55077ee05b8c484"}, {0x7, 0x1000, &(0x7f0000001240)="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", 0x1, 0x1}, {0x1, 0x2a, &(0x7f0000002240)="a9f3dc4115e97e6a540ebbf927c930e931ecd9b3fb66c7738d7f05e30086cd6f70f31c8d1df2db0a184c", 0x1, 0x1}, {0xff61, 0xe3, &(0x7f0000002280)="d20fcbcd17ffccb6cc91bf977512997397569b340acdea50fef33d0cd10eed84b683c6360291a8b32c920c38a576958ede64424020d1ed5a2c9fcf303198199ab1e8a88d3e7d3e99e06cdf6840b503e8011deb54d74f1d12f82ab1579419fd1819569636ce926b9c040dd714dbc4a71f378f58814db6489e2f4de56f35e595d188abbf6d8f2d5b5572a6afbd19d7e1a431acda5aca3544a951ecbfea5777016a558d7b87a6634748514966e10e520a865edb39b364b8a748d45e6e3aef48abc9f74e1f6fb265ad71a262d77fa026dc997f7bdeb5fc84f1bb1115b20e332542b6442a81", 0x0, 0x1}]}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r2, &(0x7f0000002440)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000002480), 0x90140, 0x0) sendmsg$alg(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000024c0)="b5d3ab17b292a3983277a6f9ae4616ac043e3a33e2869eed7cf41d2452ee80561201", 0x22}, {&(0x7f0000002500)="a1aa1299647aeef71290773c81698fc5265784c91809ec3c83d1955e88d86dd154b4debb723e0f9a942efe949b8b5ae7ad1b119387cf73313e8283ce55e2fc082bcf6dbe0768af35b7d97480675ae1fe47c25070eec73eb908aef90f29bb5fb509", 0x61}], 0x2, &(0x7f00000025c0)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x6d2bc78a}, @iv={0xa0, 0x117, 0x2, 0x8c, "54c23c653ddb0aa955120ee42af9f6a5dc88263e81375bad1e1cec0a46ca50b7d04bc7ef2f43c8661e54fc5ed4a44234f66946db8b5e2364e12b2f9ffd116a307d09ee3b10044f434daaa2cea93ef98d0a40e6042f4af0b496081ad93ace2a5b1bb13cdfb6f9b80fdcdd6487e45f038f4bf01a10c74005b55978862285c026506a8103c79321b18f05d4d8f9"}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x7a55}, @op={0x18, 0x117, 0x3, 0x1}], 0x118, 0x240080c0}, 0x8004) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000002740)={0x6, 0x6}) epoll_pwait2(r1, &(0x7f0000002780)=[{}, {}, {}], 0x3, &(0x7f00000027c0)={0x77359400}, &(0x7f0000002800)={[0xb]}, 0x8) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) nanosleep(&(0x7f0000002880)={r3, r4+60000000}, &(0x7f00000028c0)) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000002900)=0x1) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000002940)=0x5) timer_create(0x3, &(0x7f0000002a00)={0x0, 0x2d, 0x2, @thr={&(0x7f0000002980)="bdbc9ccc8e23dca78a45f07e3a265ceda4e3e2c19583e563bd7d3df24e97a08c18fcbda59376d2acc833362ef673ba4a08", &(0x7f00000029c0)="362d9bc80e6b1d1002a63d288a8446cf4f66013c295813fd"}}, &(0x7f0000002a40)=0x0) timer_settime(r5, 0x0, &(0x7f0000002a80)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000002ac0)) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000002b00)={0xd9, "1fbe2f9a6ecbaf5435bd3a2c83b070b5776ed727ae2dd5040bcf5bf44988a334b3473c1f580ae3087b5788b7ef4d99ccd4b6b76f6ab8ee92fa1addc475abb10510e7b53f3460e6d0558cb8beeb8d3b4aef96c0ee86f9db77487f215f6c7830fd2f52a42e90ddce04b0a3ab6bdb97527ec4fd8f2c6b9cd259333fe0fc08d1c20bec21b6c81173ba0c6548238ef6145b38ec697fb51e1f663e6acba32f06a9aaebe7067f0d6ed2fd79672d027f73b5deafd8f8da91358fe841662047fe718e8eb9d08b211c478e4669a023fb26cbd27fcbe4204074c0c3711b53"}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x8010, r2, 0x57e95000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000002c00)={0x48}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000002c80)=""/246) 13.25075336s ago: executing program 4 (id=1855): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "81049b95114449764273d77c93777a91ede22731775c38c9b60f8acdfa5a9fb76bd2abe8e6d7ea78ba0bb419879d09421be5f0fd7f33baf63a038c181d37dc6c60ea479217ee760f32d49e88e4a95e3450801a4713e831f6f1d199a6e2ee1b7b9d8dd3f83773d8422620d15da1d417d3c842e25f2cf7a7b111acf952409cb124e247d27b8ff9083c915055e0218bf01856ed2ac4381f66337e674cae60c01f4505c8bbacb826fdd9647368e77227d190a833f9430407bebb8ea97c73ffa91b6be5bfde08cb399c08"}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) (async) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000041c0)="3ed9e61a56c808e5b9b93ba8b4f962a89463731128f3c66a19eb6c151bd431bca9464ad646717e1bdaa1189ea48a253bc16aa90182396226b965ad3d00d25625ada2ece4eb6552d3004b5ac7a76a0ba72ff572e9b35979d539ba0713768131f2b5b15a3a9da0ccd9688578a924a25fc668034e926e2767ed4733405fc481f9073497aa7ac129874ada5f5c26d0cf6be483a927a73d319bca9b44a95e4ab9ecbe6e389fdf9dea6faa57fd5fada03f7aeb1ac06abfb3fc3302b4d550db4fb7b010d38b61b61e6c6b84960b1c14b7b502106b67d8e6649042392dd043fe433dbbf4c67ffd9297a8b0d8acf91881d252a56a04fce66082a718f96e2e39165fa90d11b62346e19c089178b233f4afc32d0ea670e9214a627955bed6c23fa8eac69f59eff2890efeba4e3f5e0f07e83fb63d8f2e78c7b16fc91a08c52af90de4e092d8634ca6d04318d9746006e5e4b6751620a44b6043d4f0edfd1b41c304cecd4ea32f5ecf8e1c47f31b4615fdab752837c7b01f63e1a78ca6150e10f4460ad387b3ab7e36b20b07958fff41e4761c18057146ac4b3da65c0f91074681864e8ee77dcee66a347fd21f6e1030819ccf82f3fc5a7e3da65014c950e677bef86c7d21d46f0bdf18c887efae1946147328a2d3c8d9c607618ac4861f5f752d16640555208f9d482654d2c6a7ba11e15fb0cee3acd5cab74bf1ebe44837792c5a0bf3e3956f161802eaa4f09c028d1d9feb44b8dfe25cc4c145007f2e8d747805551d2f261cc25064882f56d77b79c68602687277d9fc9ffb4154ec26d01de6660676cc8294c725d7b5d7f948c4794e096bd72fbfe79b339e8b2fc70abd3df8ef8c56be55fa8b66b60bddd6a6b756e978fe3176e307a36ff782e2b20d07b32a1980a6e4e10efaf5aa5226a881b627af98d1300f481d557fb9ec6d2d4ff5ac7fe448723db213329137a3f92f0fdd620d28f05936177340cf1d8ef8a759281844f81e0075a8aeb5b8db471dee32d65e20e39acb438ad8bd9e4e402f7436e159a5d8f522a9085f8440c88a120f607fbc9cfde5cfead8cab7448558ef9c61ec636f2b199c8c52e575aa553560953b459727cc9985defe56dad6cbfe1ea7a47252696c579c548b6b4313e22db084153aaa8830bb582e9b8ef5a8b4f5ca6984a8be7709c4be5c39f6d68f36a4f22d9820e99fb9b8abe0d07e7a28a77fced16876fd8faeb378e9e5e32d7cd0a71da87a3eb1edbb1c9afc2f3e1bd6c930619bac69f6fed43f9e8b66d590b16eb2d022111d0e9b6acfbd36135ad5ac65736d2e6dacb034937863087395c425c2d1c5e28d55da90355a5f93e2fe7375662790f74b51a066dcf63ffc667542ceec658213ee6e26c3ba2055c826c711976068ee33fc42caa42bb7227eef080e6faa55d5bf7478c6cfc1f1fa93efb5aac1e72599a417a60042ea8bcd4db8bf34ecc357785dad926eff3fae0c98e7d0221cfb6afeb17bb204909349bb5a4e0935f39e53eecdc0ea86c5920f2b642e5272a49ea7b3d0e38b67c0ec351079bd39d61cfd86bb722395891e28d7a86a3204ae228021883a64124c44abac9c4150e6977c134c6f6ad4f5939d7bf26b58cb42a7eec2d0264b35efb6b743d84cc119f18e805ef8873817262f7d013cb1156462748cf2c39ef6f22e0375a2e09c40cadb7fac623d6cb6f3e7fbb9a06ba822ef0ec863b1f299cf9fcb4dca1d8c19b48d6d652a8143fe36afa23a19650d6d220409e53a50ce178f1aa1993f43600437d621bdbbea86106fe923f162755bc66a9c4488c85b178224b420f8ab18342eaca72246e164e155a98179b4283343c1e4c1f88f527abcffd185c5d7661e3f24b4479c89fd6319583088dad3e72a5f8c45320ba88433cec724af19905fbbb4b933c3b2933b2fb0b6134fa02764a5bc20e843757e5b75ec231d5f8605b537c463fb50a8af0357e1b7c380fc3a18de318b9b972bbd637b32f314dc265f00f51747f6c30e558a1c72543c85df77e7729b07e74f0f9a437529610be1d69e3842bf99eb0c3bf2ab30e5f03717dbcebd2e4ec16cbf4503272b300fd52cf177a96c19548e051d8a980acf9a130d51b908e7b78848f3a9442e5be2deaa9fa6a10f580399d3f894ba53ed20f028ac293d030f01961891abcd222e57b57e1c9a5884dbd86339ff616a4b9920fa10798eb12d0577c710ab1b98ad09f4d8a0fa22df901f7240285a03c77bb7fcd0ee40ab89918674084a7c5834e965514c5473527efe9e4cde7c4e417b52d9088d3c9d75e95250b547a9e86e747a61c954cdba4fe212ef730ad9a8786141b3ed49d0b0cd864463445d4acb72c4aa6d56933376858ccd62998bd9a5cd1e5cb66900b3fe63ecf110207b764836b3f331d04338c8eca0641c8315c520252b98ca319b84a06bf4c60fea2acbf0ba5d72cdb91f544a631f7969cb8f115356c217739b9be3cbc08ff29bd7711fd0ad0c4c68311ad002c409fce13379a23a8229a226e21bf6d1ce23a24b0a18fd366c21ad168c17e357b09edfe4ab4261f3105830609b0da8661753f9ef84fb5347c8c41b3d32f09adbc759ceb91e2c557e104519f0072b8843353b459e8c9544313f3e174acf8beb8fd9ebccf18babde6b39141e6f76c1357864b5f35a64b77ac0d609d66a5c2d425c952001867e62efcb2f50d85cb672d5466e781555b158cbd137cbdbfeb2becf958733a58487f9a4e7557027c3c5861b0d496cb72defdfbee54d51522b7e8eafcd8fc2a7a5c9543e28db72e2a3e7e392d9ef5145203d6c583a9e81a084ed4efb0ba5202c8a73e57a739fbdb553857da051847cfdaaf566273c10b93e4a67af78092ac08409e3ce352e253828bfbd6ea0af7aab7c98e81bc8b1d5c69fcc88edfdcc6f066561e5f525392818519206c42ebf256dcd2da61701a6f73884606f713a9addc0c01244120171d261cfead846feeb94d0408642671fffc23ea1fccfb2ca2ee4449349375f8dd9ec932b383af73815cdddface88a33c8a395c437625f5ddd0d0e991ccbe9eb7db2a21a3f7646ca7d00ec326794d8f0d0a64dc59cd34576df726fe978795d9b2cf98b282d8cfa1ff7b1e19ba198cd275fd1b3ed6780f1afa6d8c480a030b6b2d00609f2b5bb9ba2c25b7e1125ded723cad9c56d3acf7b59de2bb0241b92a1614d19ce0348ecebdfec892ea8370e7bdb1ec37492a0be6b8f325dd52de9736cf0bf45b6d70a84a1baedbf61bd0a58459166be21869f802f6368d50dec8ffadad3ceedc6d90d0670d8e68c13516508cb0e6df979be50bb25b0e92de9fd798bdb86b58690eac20fc523cfa29cf5c988363e2af7d1ec90005a849c2f590b173ffe4a1a22965648318c584995286909d623596f9fa9aaab84f1e4ee8b3acc2a611e9974de269bddf84cd5bf424c9d915c711e57fa0465ed5e7ff476e2adc7c44a5a30d1d4f7dcd61f8bd9aa2326c9d241dda0bf20db0fc5164ba30d866eb0b45c46a3daf113aae4c3945925e237fa36fbb862c030a370a8888fb16c245b86890bfdc3e6cfd75b2891eccfb0c5bd057f211f6e84b9c78dfe74d9d5286fc376e0b698ca5065d5f0df09202c63d92947fce76f4b45846ad98ee37f9e83d9d9ec19af9c382f2dec4bb51dc95cf26de95ff056b06e8da707df27d1f63183488edc089350624859c4cee6b8853ac920edc49ccfee4f57c12a75813cf745c67bbaed93f66b89207e7a6de876ea558c36e71299a8fc8957768c831ed711592f3a0b8e87593876fbf124c2cb07c7edd745680da68be13908e8567ca2c50be6738b4e4dc1d28c982b8e06f30361be5ebdc3e6a62bfacc5a2d05bf17a9c14c2eb7ee6c6b5d484aab4f78539e837499ccffdb661ba93e900f4760c55b0d34116166348b54c610d72625625ad2e6ff52fcc25856c32b520cce6a2495742e7e18cc4220bf358edccc3c581fd1f50ae884c1871a0b651fadddf89c14433d71d0a8c7052869d988b3aa3f515f8720852a8631e9f1fb0fbae0c36711f49b171b3077a788b281f4f2a1c80d784bba50cc03a1e2bab1e0c5ea847e7f35ccfc758d5237c798ae5ed73809b09d950e9824fa32e7d5053828b535e997d247420519ee17ea532a8a23671d648cbb772e4f89899fa007d5329b60874257966065af857df0c8b10bb132d199820296bf99d3287c67f8db99108117d5f810a7800d7aa7035df64a8e06cf0de62a34d68cb36c0749262985c3d057663170a1aa4ae922ff23855988583aa7807cb7d804ed7e0c93435a19d0b3a2d21ca1473f3f1029c8482166e3c9ef60102b1d8592ee9362016b83aa47b2ef78ea81775c8d8b6d331fa71b469b9257f5dabfc15651b8f9bfbf37f11639deb93d2290c531166a7ff4c02fa914dbf2564588741ba8a4ba26e94fb3b8f800386d45b7f12602004cb74fc9a8c5a5e8da428e38d17c834eded50bbddb8ead7eab90b1f64bcea75506220fe8271879c17bbedf143254c221b700339dca27b774ecb113ea13cdddc30a627f0d675b7fd12350541e9403e7b4aff03534963e033b91e1f985dfa177c15a67ea1f645573adcf4743fe250e31813125fa6b532dfdb37281652968b6d2a39c5d09368ade6a7f48cfcf6eeebf79e79dab6fbbfe06eb7320cdb0485e0c6de0e0ed33faaf685f409d5c01e093ff3ddf6abd272cdbb9efc5919dd6064c15d9dfbfe45279ab3cdfd90fa15bd437d9b1f7cd03c0c1a31ba5138b7dbe0173fe51659929cf0acc6c128790033481e8a1ac573bdccac7a71efc019e4abd08a3d618671edecc5d7e31c1b442591c7b46ddf24e585c9944d4915a677fe44de3587f5a8bdae328393fac377483c3fa9b7f0f68e6a655b9206d419eabbb7da9eecf23282933ab9b4aa8faaf5f0d9f4308dcc585db4b561ccfd97b0d528be53119f9287256ea6cfcaab1f875cac43030d0cdd952156668f01f19974d58b2f77009240e9613d8833b04597b1840edfca4dc36cd338e1acaac92c02a7e72447b5b3fe631170047f34ae529eecf9c8ee20081d1d01f04a08ac05c7717512ad9aded19c68c0fd56f6837de2039a03a43a86cd3ec765ab06c735069c2d15655acd008c215a87b6c32a626cfe528753d6bc6253e8e3bd666431726525e1675e33b32d551333fd0eb7765a502f90e02c5f0fe6ad8262968f70a70d027e1287984a3cb33adf2a35b7dab8b7c30502b2cfccf65cf0da4aec103759aa2503a45d6063db0f69b60a015c3569b15d8d9722d910200f62dfa77c7d2501cfb5f03a0fad7cc4357343edec5d2829b2fc5957f53d7a51a2e12968c67513be62ac8396f77115b86268c9f652e6837664127278368c907920bb26df6205d140c20f53c00eff4f201d6c8aa04904de099d813fe4ffba1c2a889ff33dde5c7007d27e1132d2a618e7877d02359a1696c8a9a24b1eac510722d9c0227f81d410b59c38afc1dfd12bbb8c1c59abf19f70d75a9db383d409f256c3ee7818f801907a25214d6d0ab95fb1c0e734aec1cb7538711d5cabd57034f3d236940610f4ba89e8270bce8d39453c704b6fdf00918eb6cea8b54b1018935ffaf7b77b4ab18717c5d1f5c053eb87a7d7742fc06146a2d34a56ecc4ccd66197242ef3d0d0751902162ccf7c583bbdbcf19a9f402eee6b11c7a6980d5654d20e8beae12211d2e3f1bdff456ffd6c3cbf2fd7681e1084234542f5a7460d3fae55611a58bf84bc4cde086be78c63f1436b170dad5961f63f8bf56c9efdb6fed94351ab39e3fefeb940d59a18efb92779703b28317b634d023fd27e9d998e7ee91bf4935a9856f07c26ca9b3bc0f337817e226c010ce1be5c4366e2d06045edb1f60950882ce4d34c1aa0879f5b6af951a709c2518989fd81c52878bf3a67d2a87fbade05359e0cd3213e388ed2be830b12c46e9f550467ea3d06cb2ba6d13273cc0aae12d48a0658c3bc6bd6cbb16ae593eb1b513f310edce983c4237c1329a7e9fbbf57ec26c67815396f385322ff898fec3761f1df87ec735346bdafa9b84ba36973fd35d09e95791445b820a5a09086486b1417d9ec8b9ab5c201f83fc96398af0a22552f48ddcd6b459904a7701abdbe17245a1cba26fe3c96030965741153cdf6b42ad687f70e40e5a7aeaa32c30eb79498254026276b3c2ff10e2d34791b516590f8f0760c65ec5514950aa4374c83be8aad7fd967e1383d14724c84b0a239484b6311b3ff1e53baa2de60950dcf6393f1d230c2dde99be06b9e168623da47fc0030e6f90454433aab91e07fba2ffdbd139f4c35d57dc489563a24c5a5e4d3e6ee2129151d8776b68c0a77fced00e8635a0474fbdeb36170eeaad4a3c0a98263334a41c288020ad0312d3673db67d1306e19b89cffe932951b0ec457f25cc6813e72e59a11d59b5f144ae9eff5bbefd952fec75e556422ca91c83839008a7d00e65ec96103506baa8355e3c6713a0cdfcb839cd21b2724570965db08073febb2e8f5cf36bd3d2a0c125c45223002ee6c36e3184298beb5d8f2fd027d414ef999b7aaf82318e46b829eef7a69f3a8f2b983a17c14bb4e5a939c21d4b8fa9866dc7d0f69cbb8704c20c9776390efc7afe7a1ad5a513ef48bf1b859dd39d95e7a9c76efd0ea02b384b4cf25c68ff65f027878637de939d6d2e1d43a10c99aafc357566990c95b9f19ff4a4a71a544c851d4f2cfdf865983694617d1f729f3f75071903ed8c0157e3a01cb58a4254bca6cd4edbd47c287b17bca0b9800def29645d6650d258cbd3d21c168d991cf6ab7ca65d643d9d0d718a0c605e57c5dbb006a01addd05202211cff89543331ecdeca6ce40176ca54a87158f26967f8ab06cf963ccf24a15e755975cab2c656597f4764ca3c87dbcaa1083e8bcbc1490c69a76eca20781adbbad046df8989e930389ba0db0909683bdcda76d7addb9dd01a3b3150fb3e95ae12793f3984392ef76b8b08b3699ca90c9f5064f2a2eec75e3bdbd6411783451607ed932a0638ca04891f312c2b715f7563fe275c2fc593faa47c5937068d9894e262ce676dede47151e6d4e04d543f7aa93dc2d7296ce21477e119c380482dfa4ac3e0c25776705f8568a4143c101b5a9b15fa69fe1dfc8ff92c76c05d4b74b16cbec265ceb18ba0eef535875b242fa0981c778fb8c9f37b43d9db887ff58f6584ece2cd07de26a5da464c40521d8e3d48381bda36ae7f4c75050da1981daf5a8555846bd5c0a5bf2819c687c858e49fe1aeab36a6f8457c15d75b5bf89628e9145709732a5ac0a4cb673c8ea6965d712dd77953631d19f1e808aa06c79f29ad429782ac25ea42b180d837f98ac850582067e9d59734b9a2e616a998006cf87cdf40219ab6f511c78d12af44729bacd101557cb30a3e0cdef412aaabcbadb2edcc1c181653c664de89d014935ed7c95d8a8b9c8084b97d8e07bfaeb5d6ea0fb67f6b4a6a5d526bee9f765b3499255c1d3309ef66503b1406472f3013014ab04682d652fcb6671d528020b3fcf82bdf022e8adc0606db4b26ad247a9c2057b9d99238111c36d32e3ff051290886685b17ac194e5fec8a6d561ad15f403dde1ee620f844d16478f32be34243e97604362a6231f63dfbd3bfdf138580275a2114c8620db538cfc3fee0f8bc34cf8985a3aa6310c757daf03680ab6b721a6f08a88e8e1d50dd8694f9f8bc44fcab7d91f3c22e9b89ec142e9549712715071e3c16c5a196229cabed9e28ea5ae0e61fdc2799851dcbed5c00018b7eebeccfbc9d6767a15825064ce36e457a94fdb3b533e99fc842f3c5f1e1a67f19cb211fc1e475ebc6c9b520b9a3a0d919106308427fe6af16d45ded4914a0a7ca65c762b7de4b540ac623e59f1a3fad25785b6b9460c01434aa3272b24a61c1ded967ca8a90c0b174fcf239f3fb4cad1d7204c7f05fd25317650f3a7928f7a6210a24a950b462a5eb8ceba5d65ce9f2cecee59b505928b9fc1b5242ff5108fc586a129124eac5a2d924a7c4ef7784aed4591cdb4b79c1bce4e99d7e02b33f42bac444a4b518eb288755eddf3601a600c6e7bbd427ed35e0b6a9f7877bf5d17efdc9f684b92cec7927a3075fbcc9ddcd6347aeed5002cc08645cccd994e169a40045a6d98c38b54bf08e90f6482ca4cce2ab6a83661a0e953f2abb981356e5564e149bb552dee13c274aef29a03493275741b4bbd8123c9653a09f5c55735696ffc2a873654afcc5ff386f14d26adc2dca69ba39fe64af5ca977892e13abf933bfc0242709474e8c304cb086492718fba1f36cc69253ee4b4d017d76e36179546cbc27ebb2001641be51cf5c9ce507871c7c3ebdceacc195afcaf34bd0fa6331120ed1f6d6109fbb905f0808ba0cb3892d0c670accf3fcf42db53aae903aae21c34ef53d33055363e4f5f5c44120f32f93d3dccb1d10209741d5b5ca699357b0e21637f9a246d366d90b7b6c007f21c4b141a37c98ff474ebb1de0f3237c98f142e37f090e74cb3e1629859cad93c252603505305f2fd3285cb7e66bf67ead403864b5d98c0e989ca29ff8423d0d4f91ab4ab0195746a10fd7a1370348458e144e6c58d2f7fee7de3c864d4b39e3ac30e1d0a8c84f9ce471d3bb15cb14d3f64b09a73966d765cc50a4de8dc61181e163d8bd83d95af2d706cf3412b277ff9622b6d3033eab184fa504f232372a944a9274dfc47a5ba8bf2d261c3f18614d9cd1ece3eee69c1a00dc5bd3b09256109788b96d6a66579634c455d2c1ca531bde926294d6e19b8db561e12fef2ea9ece7bb93d816e59d05586ac8e4306eed38d71429b88d2d7f7fc61c242d7b9c274386267fc7a19842db00df723b5e7abd197b7a2ec3d2c8575e92207352e2d07aa82b6d4a6fceca72c021a017a397885fdcd68d26a4e9ca494a586a8e4a971c6d9c8f6437f438edc6c1ff5f36aa1774480e7c4d6b91df793633cfc8b2def0f3cd2602f16bfd49a8d5c3f75c2b096fd22ca397ac8698ba34f104d8e50064b16de7b9a0e8f6743a9f80d60b0b7b5076912cf6d83f787472d6a84c2efe41be5dc2e70b16ed747b9eeb40e7be9355a45e87aa712b3a551d4339c5586eae65952111834d7b573ba71ded5b3b66ba53e501c43e5f445758dd8473bd9622651116591ae17c077085df5b794589d8f2736e96d28023314477cbb3c8f5a35716bc9840cd53f4bff39058765bda410565d717694c868a84a83551ce87a8d286a12e7a44088770a2a88685deafcc5452cfd5ae01731b18d9febc4f9d01cfd62416a61d77e8b9430c7a61037ff6ea79e19a303404f0bfc54d618a7feddb349a28d85ab20627e369d33d8f0f0e68688d827ae6a3d22460561745d4eaf6582da1020d75b0960d75fef607e19bc91954d43d35ace6d0a7ec9509d94dac4db6ae1962ad9b73a2a3ae7c98837a389dca1d494c06af78c1a608752f6559cd5e86da38c5fb1992ef987b56b21d1afdd592c6b9da42597b5035e57998850e750df553279c1b98d1ab23562fb32d04dca6ef7684acf19923c8c10a87aece43990e0681852eddf4a5a5b176dab5b6243c461f61a4c08d22fba0b21ae0d6acd78f4f0265eb1d614987a9cf5d1e033e159fc8161ded96ec73f04497245603053d5d777a2d71c633efc4ccbb5ff2d46dc6c3252a072830fd0ae68c652180672632ee20ff66a08605b7abc03c4445fbcd393c0820b635699b03b92cc3316ee3f20161d765b70aadf5ddc9744cdc9bc361a5a3a579184f5129a11d38f5da4c8c2caccb561263ad3ebb7033f34e346c0931cd869a0488ad68a957b2e7eab22aba041549a1d3fded120ed5906c9ecc0b668b52a376344ac184f0f479751c3c12f338a5d532d697af9edab71ae947ff96628ef939148edb5e23077c1f72c82a3e5f2b9177a35f2ba572eebff6e6bfdc21651349d2745efe40287482433d503292150ac367760b67d0432612540d340f86480243f57caa4ddca561464b5be81ea1656c0b9a1375bc4042b802cd0b26133bc688e498d6ccf4067439a286a75cde91474c397a8c2add6e4efd854ba3d059e174078ea94a0b407c165d1d20e846b6c8ee212ef7b3b1034ce6981557c1a433d4077a87e00193ca09ca73a3ef3c8f65a68a7fa142a5754f4c66073728f5f238d6c6ed202cb2408c45476eef8524b30381cd83a1bb51ceaea175c35b6ddacb448568390323a21a518057f8b2a7c4dcf4d3514b7658fba3d55ccefaa19a86eb1b321ae4d47eee87aac4e53bb187c2c5ecf97fa03b46ffc2a83e0bbe7b1eb31134c2b1d9543f41c09877ac1267819cef24fb86cee098694e87b43b421771dbb8a6e4af3008a90a4cb54212aca17299f2ad980b568751eacfc1d9e84e42e17eb217c1de6a38a2898a0a5941ebdbcb9e15bdb20a1a11e29f584222d468ef58481e3784476b887f99fdcf9deb61f9360dbec1208e4b96cdbbaff65ddd6fe4c6f04554c9f6f3c0f70dd19eaa295a9869eee5fa36e934d80f5a3f15804dba48709a8c823a144132d67cacad804960edb38e1772a00cf9db512c28e1024aff0abfc178f90f5ef6bfb9ec1804184c898c78211c3a3887699aea996914ff8635b226f49168b834f6ef1bc213e336767017ea805137a75ec7a03a814234e970656fb4c5f721e63b4d26d55b886000e7536162f9654beec6d72306034fadaa8671b2d41058fa8b86e96266ccb4001ca53fcb8c8e17cbaa2d55053b8f91ec441cc9b79aba89891027049f9be0b61de4e1645db5b998e076fd7fe1ec01b53f8d47f1d2b28b6a3712d543fc86419da87a9766bc2ca87aa04c9f1ad2fe8b01ce02c40dc5f66a0d451932d2310367f98c9bcf23ab40bf0ef6ca26029dd46cba11e1522c27939ff221c0cfcdddaecc5e3599c9f030efdd792dc9864dcbcef14a1aec8ddeac9193e7f8e6b79ba3256c6c95076f682ff3067831d7207dee637aff54eaa061d14e2c54f031a31f49ac8e5372df732a24eeb65a37e337e64984911160493dada90ddcc937fe948ef4627b1d877c486fea9467d988ff69ecf888a40a29e5d432c14c3e4dfaa427d9fad51054c005a3392987b1153c4bc6fd425e0a9200df0756ca4277a949e68ef1c3e3c32a66d18fde517a50977308b0625b9f5e98f429935c7300d6fe5ba24051af33bcaa2cdb9fbf737fa1a065cde1b5dc55d4d941d3ccbed897d55f6f5f7ca7c3dd4b4043e0af75705ff91795407fca341bc339d374ea120529f2c6d0c5346eb5276e671353dd2df7b5a94db42beae1b07d071e7119f2b94878fe050d65251ecd55ccb0e8065e7714aa50551887324e695ed552ca7267542f10485b4238daf164fc3519998e3538cbc034269bd9768b1ea3dba3d3c099bb9abf7b38945c346abcb6314e91a9ba1b6127255f7944e86fd0108b5c2fd27b531fac0d50d8d7e62996e4a0a812767f50bae2586886721dc2b4844e2544464b55602e1919cd7142a6190471fdd8775f2f415aa3af40a8ae2f2c55260803e736ef831771827dae45e737a717cea9db8d04bf7c7622dd12797367a2736a54b35d528393c89c3becb7442c9919d4e5f703884b66afa0f98ca471e3436f379450aa67102ad97227cc450f5624d1e11eb4d937c7ceb2e33dde35265ab6dc9df45b55bfe0731", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES16], 0x24) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x2, "d2c4924d5e89213dc6e4453739f82a75eb318fca428cc2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r6, 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x0, "c43b4e96154daaec00e544669f58668fd2c2a6bf85aaf3f2aaeeadd2a05396cf", 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r7}], 0x1, 0x0) (async) dup2(r8, r5) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x81) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000004c0)) (async) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 12.934610094s ago: executing program 4 (id=1856): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2000}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x2}}]}}]}, 0x84}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.745386713s ago: executing program 4 (id=1858): ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9c0, 0xffffffff}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="208588e01455bc18", @ANYBLOB="588c90aadaedde6a2e64f465b00fbdb8b6449c2f317140214a9be29c9e467325a38e1b43cddd210783f3dc083935e3b9dbfc09a3e0b8febcada80457edb664915cddb8986f5af7de376a1e77"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 6.814350367s ago: executing program 1 (id=1870): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x9, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (rerun: 32) r2 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) write$binfmt_script(r1, &(0x7f0000003300)={'#! ', './bus'}, 0x9) (rerun: 32) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x5e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/121, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r3, @ANYBLOB="14000610000000eaffffffffffffff0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24002081}, 0xee155e1be8da5c45) (async, rerun: 32) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x805, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000340)={r7, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r7, 0x200000, 0x10}, &(0x7f0000000300)=0xc) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x8, r8) (async) sched_setaffinity(0x0, 0x1d, &(0x7f0000000040)=0x10001) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) 6.614223103s ago: executing program 1 (id=1872): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'wlan0\x00', 0x1}) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) r3 = socket(0xa, 0x3, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x406900, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x80) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400", @ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX=r5], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r11, &(0x7f00000008c0)={&(0x7f00000004c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote}}}], 0x20}, 0x24008800) write$binfmt_aout(r11, 0x0, 0x20) r12 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES64=r8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x764}, 0x90) r13 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r13, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000040)={r6, r6}) 5.642227287s ago: executing program 2 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000001c0)=[{0x40, 0x10, 0x0, 0x3fe}, {0x6, 0x4c, 0x61}, {0x7ff, 0x8f, 0x2, 0x5}, {0x400, 0x8, 0x80, 0x1}, {0x80, 0x4, 0x10, 0x8001}, {0x0, 0x51, 0x83, 0xa}, {0x3, 0xfb, 0x3, 0x9}, {0x0, 0x81, 0xc, 0x5}]}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61be30d2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808006404b9d7a41449c50000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000010006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bf"], 0x0}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090583"], 0x0) 4.315327739s ago: executing program 0 (id=1874): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2000}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x2}}]}}]}, 0x84}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.095362959s ago: executing program 0 (id=1875): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="ecf5163231c8a2f6901a19404ad0d874f0", 0x11}, {&(0x7f00000002c0)="d72c2e5ca64b187b778b533241b9d4f2dd09938d94fdb6514db57fe009a84a888ab83852a419671555b88af1dbb47b63750500dc9460831c9b7c16a58126fb85f41dcf7ecc432342ae92c6d7f4a9f26af2948cce7a6029794b13faddf0c11f147f51b0b0ddb685d9b755c0531492328f2a6d5393bc0249cb1c620cdc96cbd94bde0a730974074a5afd754be0b9ead2f3c9e56b6507739ce03f4f0146974c8f0fc2e8e3da304448791ff1e3912eb07e49c55c78b2dcae4b085932d577389867d8ab3a", 0xc2}], 0x2, 0x0, 0x0, 0x20040004}, 0x4008044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_test={0xf}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) read$FUSE(0xffffffffffffffff, &(0x7f0000003a40)={0x2020}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf53, 0x0, [{0x0, 0xa}, {}, {}, {0x0, 0x35}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x3}, {0x20, 0x1}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xfe}, {}, {0x3}, {}, {}, {}, {0x0, 0x20}, {}, {}, {0x4, 0x4}]}}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x724d) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.910194284s ago: executing program 2 (id=1876): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.770613628s ago: executing program 0 (id=1877): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r1, 0x0, 0x4000041) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) process_vm_readv(0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000980)=""/149, 0x95}, {&(0x7f0000000a40)=""/4, 0x4}, {&(0x7f0000000a80)=""/232, 0xe8}], 0x4, &(0x7f0000000e00)=[{&(0x7f0000000bc0)=""/58, 0x3a}, {&(0x7f0000000c00)=""/181, 0xb5}, {&(0x7f0000000cc0)=""/11, 0xb}, {&(0x7f0000000d00)=""/195, 0xc3}], 0x4, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x17) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c91540"], 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x130, 0x0, 0x2f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 3.698413153s ago: executing program 2 (id=1878): eventfd2(0x0, 0x0) unshare(0x0) mkdir(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000080)=0xfffffbff, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001680)=ANY=[@ANYBLOB="f8000000160039030000000000000000e00000010000f867e305076eafc2000000000000400000000000ffffac14140000000000000000000000007cc7fde187", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2001000000000000000000000000000000000000000000000000000000000000000000000000000100"/176], 0xf8}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) 3.430357253s ago: executing program 1 (id=1879): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103040, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b930080000b800100000ba000000000f30c4e3e56b14740a650f01c8c4c3b97b9f00780000360f01cb0f01cac4c2192b00c4e2699fad00000000b80c000000ba000000000f30f4", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.763841621s ago: executing program 1 (id=1880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="2eec8c7a860270ce745079746dfa130dfc5349d2beffffffff", 0x19}], 0x1}, 0xff03}], 0x2, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x12a) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000140)="c2", 0x1}], 0x1, 0x10001, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000480)) prlimit64(0x0, 0x6, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40, 0x0, r3, 0x1000000, '\x00', 0x0, r3, 0x2, 0x3, 0x4}, 0x48) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\":/(\xa7'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1"}, 0x4a) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './bus', [{0x20, '\'])\':\xdd\xc6\x89w\x10\xba\xcf\xe1p^!\xe4%\x95r\xc2\xff\xe7O%\xf1&hN\xddk\xdc/\xd2\xbf\x97fJV\xc5\xae`\x8bVD\xa0/d\xc6n\xa4\x16{\xb5\xa3\x9c>P\xd2\x0f\x14\xa1\x9b\xbdk\xd5Zl\x9a\x8a\xcd\x10\xff$\xb0#\x8e\x991Af\x8d\xbdd\xad\xb4\xc1U\xcd\xe2_\x17\xbe#\xc472\xde\xb0lI\xbd\xf9\xe6\xfe\x81\x85+>\x95X\xfb\x00\xb2\xa5{kl\\q\x19d\xfd\x92?\xa9'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, {0x20, '#! -\xa4\xc3Z\xeb2\xfaH\xe5\x84\xa2i\x7fQ\x022\xf3N\x15{\xcf\xa1\v7\xc7\xa9\'\xe2\xaf>\xb6\xac\x9f\xa9\xb9\xcd\x9eU6;\x86\xa4\xdd\xa8\xd2Y\x8e\x14$\xe3\xc1\t\x8f\xd94\xfe.\x8b\xe6\t\x00\xeb^s\xc1\xaf\xf3\xb6'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, {0x20, '$+&M\\\\'}], 0xa, "f477d576439f501c50b5147116560a41c87bbcbc"}, 0x1ff) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) gettid() 2.731744418s ago: executing program 0 (id=1881): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x4, 0x5e, 0x0, 0x0, 0xf}) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'wg1\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {@ipv4=@private, [], @ipv4=@private}, {@ipv6=@private0, [], @ipv4=@broadcast}, {@ipv6=@mcast2, [], @ipv4=@broadcast}], 0x2}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x200000, {{@in6=@empty, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r5, 0xee00}, {}, {}, 0x1000000, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, 'y'}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r9 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa2a018062c200000008004400002c00000057c01c503590000006907864010101ac14145e6b850083aead1f6261f234f88ec3633a4c584c227e34eec41b00002c281c2610de9295000000000000554e2a83c19e0a709365ae2e788d22b05d76a336879e3e32b92ddf13e5824547e601cf09da74b3c227625cbd02f43ca186441f3fd079d5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c0200009078000013020000"], 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) 2.586656898s ago: executing program 2 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}}, 0x0) 2.500515521s ago: executing program 3 (id=1832): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[@ANYBLOB="000000000000ffffffffffff88a81e0081001040000d020000801602000075bb7527e744585bf46c500dcadf4c6095a71c8d2da3376d366e461bd475f1decff9e3ad10817d6b6bf202000000cab8b0a50d24ad0beb3ee06bca6dd743993366ac40c3d221aba7260d369a4b9b26c119106967c869a3e1b0bfc6b8084b1153f4d4ff3c041082cc7fccb844ba1634a748df33ae39801ab90199e42926032caa3710fa125a71f57c7e3f5137"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x7, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0x4, 0xfff}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x2}}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8007, 0x80, 0x1, 0x7042, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @loopback}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7a29466ba09fdca21ed26a5267b2d6d44a673ff6ae12db0a9fdea720474983eb2ad8b93c54fd5ae40b777848ca180c2c52a1f01a1e889924446d8b063d883113bfbcb0fb0b26f638c1e3f6aa438f8d67fae98e1d3a1841b8889043c5094cc898e64e7aaf52388a7d45e3cc4174f211fbc28b0503d4165a4bffacbadf0b27a241ff65aa304923c4ac695fd39636033118ca0cd93293", @ANYRES16=r8, @ANYBLOB="0103000000000000000017000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000426bd7000c7b148bba60f2866251ffedbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657773696d30000063655f6d61635f69735f6d756c746963617374000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x24010000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000140)={r11, 0x3, 0x6}, 0xfe5a) r12 = dup2(r10, r9) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x1, 0x6, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)) 2.479340282s ago: executing program 2 (id=1883): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.164540411s ago: executing program 2 (id=1884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040700c0ef0000000000001090224000100000000090400000203000000092100000001220500090581030000000000f340a4cf93c1e173a8901d13b77f1c77199db65f9988724dc80cae5aa1b60fb309837298dc4014984f57a8ebdc74f624d6850e94f5c6eda64a8d9b27a54e2ea3454e7754f36d6866dcc7b5cd076ee15c4952ea70eea0b98966c94a00"/155], 0x0) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000300000000fedbdf252e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034f80202020502020000d000"], 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x2855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94c, 0x0, 0x0, 0x0, 0x6]}) 1.838410325s ago: executing program 3 (id=1885): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="ecf5163231c8a2f6901a19404ad0d874f0", 0x11}, {&(0x7f00000002c0)="d72c2e5ca64b187b778b533241b9d4f2dd09938d94fdb6514db57fe009a84a888ab83852a419671555b88af1dbb47b63750500dc9460831c9b7c16a58126fb85f41dcf7ecc432342ae92c6d7f4a9f26af2948cce7a6029794b13faddf0c11f147f51b0b0ddb685d9b755c0531492328f2a6d5393bc0249cb1c620cdc96cbd94bde0a730974074a5afd754be0b9ead2f3c9e56b6507739ce03f4f0146974c8f0fc2e8e3da304448791ff1e3912eb07e49c55c78b2dcae4b085932d577389867d8ab3a", 0xc2}], 0x2, 0x0, 0x0, 0x20040004}, 0x4008044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_test={0xf}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) read$FUSE(0xffffffffffffffff, &(0x7f0000003a40)={0x2020}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf53, 0x0, [{0x0, 0xa}, {}, {}, {0x0, 0x35}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x3}, {0x20, 0x1}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xfe}, {}, {0x3}, {}, {}, {}, {0x0, 0x20}, {}, {}, {0x4, 0x4}]}}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x724d) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.703270502s ago: executing program 0 (id=1886): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.701797723s ago: executing program 1 (id=1887): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000080)={0x101, 0x0, 0x8000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000070000000000000000000085100000020000008500000005000000950032de000000009500a50500000000ac023582be4af58fa65a75a0d497ef7800536757d00634ab8d85bdeac4121a2fc4751be34b9a702004ea80efba0934d9b6b61d102f4d146b01600bc2a606d3cf7419104e7e7a3886c3408d03ec806daec9e450fe007685a0026b1c4d3a371e969d5fcd51c6"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f0000000780)=""/201, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000100e517c6be4b38099d9a1b63320b06e4272a2485b7ec711093039f0d16f1fc652fb8ef18ae6e1b700bf76be7806dd770974b5ad15ac1c4851ced07a649ed879b15e17b1aeebe0565d535c8de3d8d222feccbd58b", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r7, @ANYBLOB="100050800400050005000200000000000a0006000802110000010000"], 0x38}}, 0x0) pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f00000005c0)="c5fbc00f59c7850a0f835647f414b15ab9ca5545451795dfa011cf9ee13e5c4d84f2ccbe968182081616f2681701642d506f903b816bcf78422add26f0b2030288a628714f19ca2b128fa2927a8c46964ef05825c2fa4974af8ff19497f8d7f7b1069853d2fe6f0c1689fc3cafc64cac263c8f4a04ebb9166900df961c2750c53eac78b3ddcf7d6661fc0f4422b48282c040c57c58118003aa0ee666dee2a9d8ce6e145f22d63147527462317ccb301b1e096f74c62a67dc50cbf72787712492142e5dd82ea88410ab5decbf96984975ea8086e748c61d4def6ca25ce8e47552e5c74e7ac6744f13c2b314ca41e5d9438a42", 0xf2}, {&(0x7f00000006c0)="972728b0eec071075568fbcf4722785ce0dd63cb392054afaafc37b010f050b5b33c26dfa772cf48477c092bc0ffefd4617d80a4b32cff62565af1fa5d5f443b59fdae83f1ea8eb73f991e63ecc280b0d01c81185274d9a76b001fe4a94cd0ea4ab1c8ed1eb3f3b68470376f0cc14d1a40b1b3920eafc7c77eb4e48db8f313c0a253d826728451010bd167bcb6636dc3fa54a572c035b1", 0x97}], 0x2, 0xffff, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010500000000000000008000000000000000", @ANYRES32=r12, @ANYBLOB="05000800000000000800370002000000"], 0x2c}}, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1.317592634s ago: executing program 3 (id=1888): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x6, 0x17, 0xd0, 0x20, 0xdba, 0x5000, 0x11bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x12, 0x10, 0x89}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005940)=@newtfilter={0x888, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x8, 0x8, 0x10, 0x9, 0x8, 0x3ff, 0x5, 0xc3c, 0xfffffff9, 0x0, 0x101, 0x2000000, 0xefa0, 0x80000000, 0x0, 0x16d, 0x1, 0x4, 0x10001, 0x5, 0x8, 0xe8, 0x7ff, 0x3, 0xc, 0x7, 0x3, 0x0, 0x9, 0x7f, 0x5, 0xad2c, 0x3, 0x40, 0x9, 0x0, 0xd4, 0x2, 0x5, 0x1, 0x10, 0x2, 0x10000, 0x81, 0x51b5, 0x5, 0xf26, 0x1, 0x2, 0x1, 0x8000, 0x800, 0x2, 0x100, 0x80000001, 0x0, 0x7, 0x8, 0x9, 0x400, 0x4, 0x0, 0xb, 0x0, 0x9, 0x10000, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1, 0xf21, 0xe, 0x3, 0x0, 0x7, 0x10, 0x9, 0xd, 0x7fffffff, 0xed93, 0x1, 0x7, 0x1, 0x0, 0x2, 0x6, 0x4, 0x847d, 0x19da, 0x7, 0x1, 0xfffffff9, 0x3, 0x100, 0x6, 0x9, 0xc415, 0x5, 0x9, 0x6, 0xb7, 0x7fff, 0xfffffff7, 0x0, 0x5, 0x72, 0x8, 0xd, 0x3, 0x4, 0xc, 0x5, 0x4, 0x5, 0x1, 0x9, 0xf52, 0x0, 0x5, 0x8000, 0x81, 0x5, 0x1ff, 0x80000001, 0x8, 0x7ff, 0x9, 0x0, 0x0, 0x1, 0xa, 0x0, 0x401, 0x6, 0x100, 0x6, 0x4, 0xb7, 0x2c22, 0x8, 0x0, 0x9, 0x5e, 0x4, 0x5, 0xf14f, 0x5, 0x3, 0x3, 0x7, 0x3, 0x0, 0x6, 0x9709de23, 0x8, 0x9, 0x0, 0x2, 0xfffffff9, 0x1, 0x40, 0x40, 0x65, 0xe8c, 0x5, 0x4, 0x3, 0x5, 0x9, 0x2, 0x39000, 0x2, 0x7fff, 0x1, 0xf11, 0x10001, 0x95, 0x2, 0x70000000, 0x42, 0x7292, 0x9, 0x401, 0x400, 0x24, 0x0, 0x5, 0x1, 0x5, 0x0, 0xff, 0xffff, 0x36, 0x67, 0x9, 0x0, 0xe74, 0x1, 0xf, 0x4, 0x80, 0x0, 0x0, 0x9, 0x2, 0x5, 0xfb9, 0x9, 0x8000000, 0x1, 0x2, 0x100, 0x8000, 0x0, 0xf, 0x2, 0x6, 0x2, 0x0, 0x7, 0xfa0, 0x9, 0x8, 0x8e6, 0xfffffffc, 0x3, 0xffff8000, 0x2, 0xfff, 0x3ff, 0x5, 0x401, 0x5, 0x7, 0x401, 0x4, 0x1, 0x5, 0x3, 0x1, 0x40000000, 0x5, 0x1ff, 0x10001, 0x3, 0x8, 0x1, 0x6, 0x3, 0x4, 0x7, 0x2027]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x97e, 0x7, 0x200, 0x2, 0xffffb720, {0x5, 0x1, 0x8, 0x6, 0x81, 0x5}, {0x2, 0x2, 0x2, 0x3, 0x800, 0x4}, 0x4, 0x42, 0xe45}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x7f, 0x44, 0x5, 0xffff, 0x5, 0x7, 0x3, 0x80000001, 0x400, 0x6, 0x6, 0x5, 0x3, 0x83, 0x0, 0x101, 0x9, 0xfffff000, 0x6, 0x0, 0xffffff49, 0x3, 0x440, 0x0, 0xfffffff2, 0xb224, 0x8, 0xfffffffb, 0x6, 0x5b1, 0xd, 0x7, 0x6, 0x0, 0xffffffff, 0xf, 0x0, 0x80000001, 0xd017, 0x1, 0x5, 0xfffffff7, 0x6, 0x9, 0x800, 0x1, 0x7f, 0x7f, 0x1, 0x9, 0x7, 0x401, 0xfff, 0x8, 0x7fffffff, 0x1, 0xc4a, 0x7, 0x1, 0x8, 0x7, 0x401, 0x10001, 0x0, 0x4, 0x2fc6, 0x2, 0x8a4, 0x1, 0x4, 0xde4, 0x8, 0x4, 0xfffffeff, 0x4, 0xa, 0x101, 0x1, 0x6, 0x4, 0x5999, 0x6, 0x5, 0x3, 0x8, 0x69, 0x28, 0x6, 0xad61, 0xae11, 0x6, 0x2, 0xade6, 0xe862, 0x0, 0x0, 0x81, 0x101, 0x8000, 0xf, 0xfffffffd, 0xff, 0x0, 0x80000001, 0x6, 0x81, 0xffff, 0x2, 0xff, 0x4, 0x3, 0x1, 0x4f, 0xfffff570, 0x7, 0x1, 0x9, 0x6, 0x0, 0xb2, 0x10001, 0x6, 0x9, 0x80000000, 0xb4000000, 0x7, 0x10000, 0x89, 0x2, 0xd0d, 0x7, 0x6, 0x8000, 0x2, 0xd009, 0xfffeffff, 0x1ff, 0x8, 0x8000, 0x61, 0xa25, 0x101, 0x10001, 0x5, 0x5, 0x1, 0x80, 0x5, 0x0, 0x4, 0xc, 0x8, 0x1, 0x3, 0x30e, 0x400, 0x80, 0x0, 0x9, 0xe, 0xfffffff6, 0x0, 0x9, 0xed6, 0x3, 0xb, 0x3, 0x9, 0x9, 0x2, 0x3, 0x4, 0x3, 0x97, 0x401, 0x950, 0x8, 0x68, 0x5, 0x7, 0x9, 0x9, 0xa7c, 0xa, 0xa, 0x7fffffff, 0x81, 0x9, 0x0, 0x5, 0x410, 0x62, 0xfffffff8, 0x8, 0x200, 0x44b, 0x2, 0x0, 0x5, 0x7, 0x7fff, 0x7, 0x40, 0x5, 0xa, 0x5, 0x7ff, 0x7, 0x6, 0x2, 0x6, 0x1, 0x0, 0x80, 0x9, 0x1, 0x10000, 0xfffffff4, 0x7, 0x5, 0x60, 0x2, 0x9, 0x4, 0x3ff, 0xa, 0xfffffffe, 0xb, 0xd3, 0x7ff, 0x6, 0x60, 0x5, 0x8000, 0x0, 0xfffffffe, 0x7fff, 0x1ff, 0x9, 0x8, 0x8, 0xc, 0x8, 0x8, 0x5, 0xb, 0xffffb01c, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x800, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}]}}]}, 0x888}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) quotactl$Q_QUOTAON(0x0, 0x0, 0x0, &(0x7f0000000340)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x0, 0x4}}}) ioctl$FS_IOC_RESVSP(r4, 0x541b, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) read$sequencer(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc00c5512, &(0x7f0000000340)) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000f80)=0x100, 0x4) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xffff, 0x1, 0x5, 0x4}]}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r9, 0x100000000) 1.217926154s ago: executing program 0 (id=1889): ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x2) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x0, [0xd77, 0x6, 0x101, 0xfff7, 0x47e9, 0x88f, 0xb, 0x8, 0x8, 0x6, 0x1, 0xffff, 0xe82, 0x1, 0x80, 0x346, 0x9, 0x56ab, 0x7, 0x0, 0x7, 0x1, 0x7, 0x7, 0x5, 0x10, 0x7, 0x6, 0x0, 0xa123, 0xc, 0x2f26, 0x9, 0x6, 0xde85, 0x7, 0x5, 0x2, 0x5, 0x71e, 0x8, 0x0, 0x5, 0x3, 0x8, 0x78, 0x401, 0x72f], 0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) chmod(&(0x7f0000000140)='./file0\x00', 0x6c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@remote, @local, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x9, 0x0, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x5, 0xd, "5a666de622f579434ec98a"}, {0x0, 0xd, "898480e462be1e39a7e381"}, {0x2, 0xa, "ab0be9cf55648558"}]}, @cipso={0x86, 0x18, 0xd3b46ff7b82f6e0, [{0x6, 0xb, "abfb6ab60067dd0527"}, {0x0, 0x7, "a35aaee8de"}]}, @ssrr={0x89, 0x13, 0xb2, [@local, @private=0xa010100, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x58, 0x3, 0x6, [{@private=0xa010101, 0x4}, {@loopback, 0xfffffff8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xf8c}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008c04) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000540)=@req={0x4, 0x4, 0x10000, 0x5}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000580)={0x3b, 0x20, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1, 0xfa, "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"}]}, 0x110) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000700)=""/204) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000800)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) write(r8, &(0x7f0000000880)="0575773b4804dd745465c002eb93ed85b6655b05258db421376162befab675603a7087112736ba3faa1f8a5f39af063c5483743d95391d8f7fd7e052a4d224f29f6ad67a8a657bd3ebb2077b74a098088fffd1a9d38a5cf22da5f8632af48236301b3cf7688fc04e77d3b91aeecc51168d71160347d03bc6b4fd04729751e63956452278e4cc4d405bdfa3564cff0155819832d134c9ac6b548444d7c1833fa1e4383789d84fb15e9c510aa955ce4df69cae3b6f4a49525a43ce97628bb46981dd172be58a0bb259548e587f424be2a65d04f27bae602049da343c15876aedd82dba3445dd1b93", 0xe7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000980)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaefc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x3, 0x3, 0x3, 0x0, 0xb, 0xfffffffffffffffe}], &(0x7f0000000a00)='GPL\x00', 0x3, 0xe, &(0x7f0000000a40)=""/14, 0x40f00, 0xc, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000a80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x5, 0xb88d, 0xfffffc00}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r8, r8, r1, r0, r8, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x4, 0xc, 0xe8c9159ddca6ea3a}], 0x10, 0x7}, 0x90) syz_emit_ethernet(0xad, &(0x7f0000000c40)={@local, @link_local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0xdcf3, 0x0, 0x1}, {0xefeb, 0x0, 0x1}, {0x10}, {0x2d}, {0xe0000, 0x0, 0x1}, {0x14}], @llc={@snap={0xaa, 0xaa, "bc", "3fca97", 0x111ca, "8b9a755c564517a7b62fe4d1ecb0dc977e86ecba7149aa4fc2cd7cb45ff72993fc67547ad0765e7d43d43c4412dfdcc28652b83d9eb80f4c2b9459a5ae6adbfb450e8bbac9baca7fe74c5a6e340e23d1a6db340c55d4a1ab75c279da9040749eff45cb95c6edf5083408cc183374c6debe9522d3d5839b402c87d0"}}}}}}, &(0x7f0000000d00)={0x1, 0x2, [0x69c, 0xf41, 0xd2a, 0xda4]}) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8c, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x26, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xb5e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x6, 0xf9}}]}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x7, 0xf, 0xa, 0x40, 0x2}, 0x107, &(0x7f0000000dc0)={0x5, 0xf, 0x107, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "063190d52bf5a12e617ad4e3193b7df9"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0xbe6a, 0x0, 0x4, [0xf, 0xc0, 0xf]}, @generic={0xa8, 0x10, 0x1, "21f5e926a4cb526fe49e8fc0c733af6f43fc747a56793715ebde88d9e2f1f2d95f0846fe8421d2cfd38d76d33441e91613b2e053a4479901b46856d83ce1b7048f07f7ef15c7479cf58c9d9a6580aacc02fcb07ae5781f4d51cd1f6a03b40edf7fb471baa4ef03f5e41267d3fb7336ad1409fcd0a03e895be240b36c75aa5a35cec21075a7239e953d2faa9e455551c5f319c545224fee63a3b045aa8ad55dffedbf073dee"}, @generic={0x2b, 0x10, 0xb, "d966c54aec642dfd53dcc89e9a8073aa893b538612742a770cd35d1e4794e49c5fb3ac575dd81e40"}]}, 0x4, [{0x8c, &(0x7f0000000f00)=@string={0x8c, 0x3, "1beb1d8d68fd4b7637870403c3b60e17daa8c1ea33b4500bea7370e2eb3054c2c7bc91ab9e9ffc3f7ae0328cb3607a84106c3ee14ec0e37c631d35c79df94a18abe49568df2431bdd705bbcb18375ab7744fc6d8fa26e12b2079734b009164f6614c57cf81159ee41fef103a0b79fdf5987217c7041d5cfed5f09cfff97108b2e6ef807e9e51f613a00f"}}, {0xd2, &(0x7f0000000fc0)=@string={0xd2, 0x3, "47c79458da32e34ffdb4c7831bd43c6bd1a3f5b3e3e4fa4b170da334f3278ed9c1607c7e707b1e238c902fef757db8d5d36b296cc23121de520b14a5d04f58af7fe461e60a1c4cb08cf5882370bb123a5f47ef5c112ecdb4b4354cd33d6d00c59079b3284b5d1eab5414f7736907baa6beff0749b632aa69383160f341d42f0ca312d3d08ce74854b11f4ce09a6a02863f56a971a8011e93f80cf99992c101ef71fdd5e00c08ae8e846c7e81380410859709da58783408c7c7150c39492b69cb5ac5ec8efed0e6d8a85acab1347671db"}}, {0xd3, &(0x7f00000010c0)=@string={0xd3, 0x3, "043753c9cc42bd27a21d4d0a1b82cffd9dcb3766ead0accfa72ba704cfa079af41f05e2512452579bbef6ede109873ad2330ede14e6b8ef689296d6780cfa1774acc0c425844b24ca5eea310f9487629f5ccfb0efef860477c8d2942421738b960277fae2a837f44b7bc19ae6271058eed6dfe24da0285fa1ef09daa7d9e4e649a18fccb64fdb02c1373b0f74dc71bead048dbe1beb106ec11c7c8e30644e528d2a592ed6d648a9e97079cf7d5689e4c9e07f79e82fd7683423038d3bde9bd5da6e9e73514b95c3a7a16b435b3c505884a"}}, {0x5b, &(0x7f00000011c0)=@string={0x5b, 0x3, "5c39f6ed6e8a9f89f2707f69475c35a0f896f58d0c622ecc2bed76b72ce15f259f334deb0d9f91e675b00a1c66ce314fdfe1ceb5f72c7ff372dbc3ea37eca4d4b6b62d098d4da2cde23e60a93b6b34a665b1df5c5b8b2188df"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000001480)={0x24, &(0x7f00000012c0)={0x20, 0x22, 0xf2, {0xf2, 0x2c, "f2ee6e79bd2697a67f08075b94cdf877e29af21de7708287072738db8950806545dcac00741c43b02e22604861860c8bbff5377a1277519b92e47211f628977e68f9802c81cc0050df829a427bffcfcb94f3ef61e5f9149fa1894383c255a4f1c81e7d9d54ff1b4fdd7062fed5607dbfe64aa997a347d39bdfb7b71fd0c77af299732b9cddcdf68c51147da32217b617c47b9ecc307764ee341a193c1abbdc87f3b149976c00fc47b2202ed375a4a962961991869275211a1a43a3ba463df164bb80519bc07c38b77e6bd59ce384c409cbe5b0cd4f48ef0b7cbf9fa2c24b6957caefa024e6e9e36ce0232b623785ec99"}}, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000001400)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "d7a4bf32"}, @global=@item_4={0x3, 0x1, 0x7, "be312ba0"}, @local=@item_4={0x3, 0x2, 0x7, "9930decd"}, @global=@item_4={0x3, 0x1, 0x9, "b18acb41"}, @main=@item_012={0x1, 0x0, 0xa, "8e"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xd6, 0x1, {0x22, 0xf34}}}}, &(0x7f0000001680)={0x2c, &(0x7f00000014c0)={0x40, 0x7, 0xa8, "a460d9ca116b70cbcbda92eb50a861873ee2e3a17c3c237d239ff3a2fde10bbb35fd3fe2688dc3ce7ce4c04c2f91c23770465d5505846be076befe71dcc8f040a6839edc998df26092f9822ca4b9413e2cd13b5ffe65ed616e756116d3360308983e8789cd1f13aba00019170809d5a559edd72d6017ec26d89acf39add63a93eded3230db242e948c724a42eac43db77aaa06b10f222b93c58c6ae7371973f5469bac4f18d8efb2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000015c0)={0x0, 0x8, 0x1}, &(0x7f0000001600)={0x20, 0x1, 0x2c, "a82e2bdc5a378d9cecb2706bd7e3df5b8c47e375e759aaed90877e7dc936026e046584321b7e49ea274b14b6"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0x7f}}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000017c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000016c0)="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", 0xff, r10}, 0x68) sendto(r8, &(0x7f0000001840)="94bd9ad2e1adfa48a15fdc0acdf78c23bfaa0aad71a319646da1f9f22e4dc76427998670398c73250cc4c35891fb45d12d7e1e2ff0e0778e875124eb0a1322fc1ab75238d9427c864db7e266aa7a6808089cbdbda33407bb724983de046245536c3fdb34b5cfb4a055fc27f4c2a8b92d6d28e88daa39583faef92ff197a0d868225161fe920d7fa678a1ac9540ddeb92b8656c632e9dd76a5e324d8863307df0355b71b4e175", 0xa6, 0x40, &(0x7f0000001900)=@ll={0x11, 0xc, r5, 0x1, 0xf7, 0x6, @broadcast}, 0x80) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r0}, &(0x7f0000001980), &(0x7f00000019c0)=r8}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001a40)) 734.217725ms ago: executing program 1 (id=1890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 233.557303ms ago: executing program 4 (id=1859): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) tkill(r0, 0x7) 0s ago: executing program 4 (id=1891): bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251}, 0x90) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x101000) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x47aa}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000002000018008000100", @ANYRES32=r6, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) shmctl$SHM_STAT(r2, 0xd, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) kernel console output (not intermixed with test programs): 32 [ 594.655691][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.705312][ T5279] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 594.724655][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.740424][ T5279] usb 2-1: Product: syz [ 594.753031][ T5279] usb 2-1: Manufacturer: syz [ 594.758367][ T5279] usb 2-1: SerialNumber: syz [ 594.766877][ T5279] usb 2-1: config 0 descriptor?? [ 594.791907][ T5279] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.834769][ T5279] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 594.913532][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.004268][ T5233] usb 2-1: USB disconnect, device number 104 [ 596.505208][ T5282] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 596.722826][ T5282] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 596.742218][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.765021][ T5282] usb 4-1: Product: syz [ 596.769227][ T5282] usb 4-1: Manufacturer: syz [ 596.773832][ T5282] usb 4-1: SerialNumber: syz [ 596.794203][ T5282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 596.802970][ T5282] r8152-cfgselector 4-1: config 0 descriptor?? [ 597.043290][T14235] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 597.069688][T14235] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1576'. [ 597.102925][T14235] openvswitch: netlink: Flow key attr not present in new flow. [ 597.183413][ T5282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 597.215320][ T5282] r8152-cfgselector 4-1: bad CDC descriptors [ 597.241829][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 597.915214][ T5333] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 598.138731][ T5333] usb 2-1: config 0 has an invalid interface number: 186 but max is 1 [ 598.160349][ T5333] usb 2-1: config 0 has no interface number 1 [ 598.185133][ T5333] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 598.204562][ T5333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.224756][ T5333] usb 2-1: Product: syz [ 598.229094][ T5333] usb 2-1: Manufacturer: syz [ 598.233710][ T5333] usb 2-1: SerialNumber: syz [ 598.257122][ T5333] usb 2-1: config 0 descriptor?? [ 598.287914][ T5333] hub 2-1:0.186: bad descriptor, ignoring hub [ 598.304358][ T5333] hub 2-1:0.186: probe with driver hub failed with error -5 [ 598.625875][ T5333] usb 2-1: USB disconnect, device number 105 [ 600.053133][ T5282] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 600.255120][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 600.271745][ T5282] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 600.301273][ T5282] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 600.326172][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 600.343795][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.361386][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 600.393943][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 600.438691][ T5282] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 600.464455][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.488862][ T5282] usb 3-1: config 0 descriptor?? [ 600.685973][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.695774][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.704765][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.723561][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.731409][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 600.739262][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.783741][ T5282] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 600.978449][ T5333] usb 3-1: USB disconnect, device number 72 [ 601.022782][ T5333] usblp0: removed [ 601.360253][T14320] chnl_net:caif_netlink_parms(): no params data found [ 601.542658][T14338] fuse: Unknown parameter '0x0000000000000003' [ 601.686682][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.697220][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.704481][T14320] bridge_slave_0: entered allmulticast mode [ 601.715049][ T941] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 601.738807][T14320] bridge_slave_0: entered promiscuous mode [ 601.747801][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.755286][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.762515][T14320] bridge_slave_1: entered allmulticast mode [ 601.769887][T14320] bridge_slave_1: entered promiscuous mode [ 601.843541][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.866902][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.933050][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.964146][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.991113][ T941] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 602.033343][T14320] team0: Port device team_slave_0 added [ 602.040644][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.059829][T14320] team0: Port device team_slave_1 added [ 602.072693][ T941] usb 5-1: config 0 descriptor?? [ 602.148342][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.162077][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.214049][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.242047][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.250458][T14350] netlink: 'syz.3.1619': attribute type 3 has an invalid length. [ 602.267120][T14350] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 602.279719][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.315144][T14350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1619'. [ 602.324358][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.524645][T14320] hsr_slave_0: entered promiscuous mode [ 602.531369][ T941] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 602.561548][T14320] hsr_slave_1: entered promiscuous mode [ 602.579439][T14320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.604416][T14320] Cannot create hsr debugfs directory [ 602.626573][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 602.635815][ T941] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 602.700654][ T941] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 602.736443][ T941] usb 5-1: USB disconnect, device number 76 [ 602.789143][ T941] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 602.855232][T12465] Bluetooth: hci2: command tx timeout [ 603.082255][T14320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.229705][T14320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.348318][T14320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.460938][T14366] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 603.481944][T14320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.740086][T14369] random: crng reseeded on system resumption [ 603.801325][T14320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 603.840196][T14320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 603.880486][T14320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 603.918440][T14320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.139693][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.191817][T14320] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.241297][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.248499][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.330622][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.337938][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.591885][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.753579][T14320] veth0_vlan: entered promiscuous mode [ 604.786571][T14320] veth1_vlan: entered promiscuous mode [ 604.889281][T14320] veth0_macvtap: entered promiscuous mode [ 604.928511][T14320] veth1_macvtap: entered promiscuous mode [ 604.935402][T12465] Bluetooth: hci2: command tx timeout [ 604.982939][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.025201][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.064119][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.085058][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.116906][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.152966][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.181996][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.211962][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.242298][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.269181][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.298917][T14320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.332046][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 605.415759][T14385] bridge_slave_1: left allmulticast mode [ 605.423529][T14385] bridge_slave_1: left promiscuous mode [ 605.473699][T14385] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.515934][T14385] bridge1: port 1(bridge_slave_1) entered blocking state [ 605.549563][T14385] bridge1: port 1(bridge_slave_1) entered disabled state [ 605.585188][T14385] bridge_slave_1: entered allmulticast mode [ 605.613436][T14385] bridge_slave_1: entered promiscuous mode [ 605.640018][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.673308][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.704785][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.733581][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.764557][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.792074][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.815407][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.846156][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.875055][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.904041][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.923567][T14320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.974563][T14320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.993921][T14320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.045045][T14320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.074189][T14320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.330665][ T2547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.352318][ T2547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.455529][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.500573][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.615601][T14394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 606.757123][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1607'. [ 607.025408][T12465] Bluetooth: hci2: command tx timeout [ 607.185181][ T5916] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 607.196011][ T5333] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 607.415159][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 607.417259][ T5333] usb 5-1: Using ep0 maxpacket: 32 [ 607.436844][ T5333] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.438085][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.460348][ T5333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 607.492172][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.535242][ T5333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.535304][ T5333] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 607.535334][ T5333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.543542][ T5333] usb 5-1: config 0 descriptor?? [ 607.547368][T14403] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 607.556122][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 607.556156][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.558187][ T5333] hub 5-1:0.0: USB hub found [ 607.566891][ T5916] usb 3-1: config 0 descriptor?? [ 607.571733][ T5916] hub 3-1:0.0: USB hub found [ 607.798048][ T5333] hub 5-1:0.0: 2 ports detected [ 607.800910][ T5916] hub 3-1:0.0: 1 port detected [ 608.010324][ T5333] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 608.010418][ T5333] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 608.017843][ T5333] usbhid 5-1:0.0: can't add hid device: -71 [ 608.018500][ T5333] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 608.057390][ T5279] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 608.066512][ T5333] usb 5-1: USB disconnect, device number 77 [ 608.233423][T14415] tty tty21: ldisc open failed (-12), clearing slot 20 [ 608.247341][ T5279] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 608.265313][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 128, setting to 64 [ 608.298705][ T5279] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=71.8f [ 608.310695][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.325100][ T5279] usb 2-1: Product: syz [ 608.329360][ T5279] usb 2-1: Manufacturer: syz [ 608.343025][ T5279] usb 2-1: SerialNumber: syz [ 608.355911][ T5279] usb 2-1: config 0 descriptor?? [ 608.425554][ T8] hub 3-1:0.0: activate --> -90 [ 608.575322][ T5279] ath6kl: Failed to submit usb control message: -71 [ 608.595582][ T5279] ath6kl: unable to send the bmi data to the device: -71 [ 608.602712][ T5279] ath6kl: Unable to send get target info: -71 [ 608.612690][ T5279] ath6kl: Failed to init ath6kl core: -71 [ 608.622104][ T5279] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 608.663126][ T5279] usb 2-1: USB disconnect, device number 106 [ 608.911242][T14432] ALSA: seq fatal error: cannot create timer (-22) [ 609.095319][T12465] Bluetooth: hci2: command tx timeout [ 609.105599][ T8] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 609.107589][ T5278] usb 3-1: USB disconnect, device number 73 [ 609.360771][T14440] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1647'. [ 610.454240][T10597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.665220][ T5916] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 610.687926][T10597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.885160][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 610.893694][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 610.895388][T10597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.936358][ T5916] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 610.965990][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.010429][ T5916] usb 2-1: config 0 descriptor?? [ 611.040030][T14463] No such timeout policy "syz1" [ 611.189004][T10597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.421667][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.465489][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.490452][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.501647][T10597] bridge_slave_1: left allmulticast mode [ 611.507988][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.518851][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.528879][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.555051][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 611.564284][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.572202][T10597] bridge_slave_1: left promiscuous mode [ 611.579520][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.579553][ T5916] hid (null): unknown global tag 0xd [ 611.607036][T10597] bridge_slave_0: left allmulticast mode [ 611.612888][T10597] bridge_slave_0: left promiscuous mode [ 611.618893][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.668047][ T5916] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 611.704495][ T5916] hid-generic 0003:0158:0100.001C: unexpected long global item [ 611.753031][ T5916] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 611.839008][ T5916] usb 2-1: USB disconnect, device number 107 [ 612.432690][T10597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.464613][T10597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.465175][ T5916] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 612.493877][T10597] bond0 (unregistering): Released all slaves [ 612.526093][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 612.675048][ T5282] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 612.687097][ T5916] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 612.705976][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.718255][ T5916] usb 5-1: config 0 descriptor?? [ 612.931429][ T5282] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 612.953249][ T5282] usb 3-1: config 0 has no interface number 0 [ 612.974339][ T5282] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.999034][ T5282] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.055608][ T5282] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 613.105180][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.155783][ T5282] usb 3-1: config 0 descriptor?? [ 613.352216][ T5916] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 613.389555][ T5916] usb 5-1: USB disconnect, device number 78 [ 613.447836][T14466] chnl_net:caif_netlink_parms(): no params data found [ 613.595657][ T5282] uclogic 0003:5543:0522.001D: unknown main item tag 0x0 [ 613.602925][ T5282] uclogic 0003:5543:0522.001D: unknown main item tag 0x0 [ 613.613666][ T5282] uclogic 0003:5543:0522.001D: unknown main item tag 0x0 [ 613.622037][ T5282] uclogic 0003:5543:0522.001D: unknown main item tag 0x0 [ 613.629837][ T5282] uclogic 0003:5543:0522.001D: unknown main item tag 0x0 [ 613.637257][T10597] hsr_slave_0: left promiscuous mode [ 613.638455][ T5282] uclogic 0003:5543:0522.001D: No inputs registered, leaving [ 613.659448][ T5282] uclogic 0003:5543:0522.001D: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input2 [ 613.671459][ T5231] Bluetooth: hci2: command tx timeout [ 613.688229][T10597] hsr_slave_1: left promiscuous mode [ 613.719452][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.756635][T10597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.774710][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.788303][ T5282] usb 3-1: USB disconnect, device number 74 [ 613.814220][T10597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.888869][T10597] veth1_macvtap: left promiscuous mode [ 613.894450][T10597] veth0_macvtap: left promiscuous mode [ 613.908850][T10597] veth1_vlan: left promiscuous mode [ 613.929646][T10597] veth0_vlan: left promiscuous mode [ 614.705980][ T5282] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 614.906910][ T5282] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 614.925149][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.951994][ T5282] usb 3-1: config 0 descriptor?? [ 615.182523][T10597] team0 (unregistering): Port device team_slave_1 removed [ 615.311783][T10597] team0 (unregistering): Port device team_slave_0 removed [ 615.750863][ T5231] Bluetooth: hci2: command tx timeout [ 616.200954][ T5282] pegasus 3-1:0.0: can't reset MAC [ 616.217913][ T5282] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 616.245330][ T5282] usb 3-1: USB disconnect, device number 75 [ 616.656172][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.685906][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.701992][T14466] bridge_slave_0: entered allmulticast mode [ 616.717413][T14466] bridge_slave_0: entered promiscuous mode [ 616.751688][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.775352][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.796195][T14466] bridge_slave_1: entered allmulticast mode [ 616.815903][T14466] bridge_slave_1: entered promiscuous mode [ 617.035796][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.096286][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.304425][T14466] team0: Port device team_slave_0 added [ 617.352245][T14466] team0: Port device team_slave_1 added [ 617.535920][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.563412][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.650682][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.704262][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.765091][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.815306][ T5231] Bluetooth: hci2: command tx timeout [ 617.885299][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.124117][T14466] hsr_slave_0: entered promiscuous mode [ 618.172874][T14466] hsr_slave_1: entered promiscuous mode [ 618.189759][T14466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.212819][T14466] Cannot create hsr debugfs directory [ 618.317192][T14556] usb usb8: usbfs: process 14556 (syz.2.1677) did not claim interface 0 before use [ 619.082454][ T5233] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 619.286849][ T5233] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 619.295390][ T5279] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 619.310631][ T5233] usb 2-1: config 0 has no interface number 0 [ 619.336947][ T5233] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 619.353029][ T5233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.385177][ T5233] usb 2-1: Product: syz [ 619.392223][ T5233] usb 2-1: Manufacturer: syz [ 619.409716][ T5233] usb 2-1: SerialNumber: syz [ 619.431778][ T5233] usb 2-1: config 0 descriptor?? [ 619.460095][ T5233] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 619.469448][ T5233] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 619.505378][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 619.517165][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 619.545205][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.574366][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.621696][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.651158][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.666607][T14466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 619.677443][ T5231] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 619.686643][ T5278] usb 2-1: USB disconnect, device number 108 [ 619.694665][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 619.713608][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.730379][T14466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 619.742964][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.767220][T14466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 619.784323][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.825675][T14466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 619.855157][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.876251][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 619.883700][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.895980][ T5231] Bluetooth: hci2: command tx timeout [ 619.925824][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.971493][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.992864][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 620.030777][ T5279] usb 3-1: string descriptor 0 read error: -22 [ 620.047544][ T5279] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 620.073393][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.080161][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.136461][ T5279] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 620.161321][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.237498][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.244650][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.289305][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.296513][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.344215][ T5279] usb 3-1: USB disconnect, device number 76 [ 620.444640][T14592] mmap: syz.4.1686 (14592): VmData 37470208 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 620.503775][T14466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.671093][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.871257][T14466] veth0_vlan: entered promiscuous mode [ 620.943441][T14466] veth1_vlan: entered promiscuous mode [ 621.109749][T14466] veth0_macvtap: entered promiscuous mode [ 621.152742][T14466] veth1_macvtap: entered promiscuous mode [ 621.272285][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.282927][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.295889][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.306527][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.398980][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.484343][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.622852][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.678731][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.717497][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.752061][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.792173][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.838069][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.898219][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.955130][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.977508][T14626] kernel profiling enabled (shift: 0) [ 621.985740][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.031993][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.073281][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.102081][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.143120][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.171133][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.200175][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.247938][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.347979][T14466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.374889][T14466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.400861][T14466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.424623][T14466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.817083][ T2547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.854555][ T2547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.958672][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.006116][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.015586][ T5231] Bluetooth: hci4: command 0x041b tx timeout [ 623.315498][T14654] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 623.447199][T14655] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 623.881192][T14626] syz.3.1692: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 623.908547][T14626] CPU: 1 UID: 0 PID: 14626 Comm: syz.3.1692 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 623.919387][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 623.929467][T14626] Call Trace: [ 623.932777][T14626] [ 623.935729][T14626] dump_stack_lvl+0x241/0x360 [ 623.940748][T14626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.945990][T14626] ? __pfx__printk+0x10/0x10 [ 623.950629][T14626] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 623.957076][T14626] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 623.963609][T14626] warn_alloc+0x278/0x410 [ 623.967979][T14626] ? __pfx_warn_alloc+0x10/0x10 [ 623.972859][T14626] ? profile_init+0xb1/0x100 [ 623.977508][T14626] ? __get_vm_area_node+0x23d/0x270 [ 623.982747][T14626] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 623.988662][T14626] ? _printk+0xd5/0x120 [ 623.992875][T14626] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 623.999217][T14626] ? rcu_is_watching+0x15/0xb0 [ 624.004007][T14626] ? rcu_is_watching+0x15/0xb0 [ 624.008794][T14626] ? profile_init+0xb1/0x100 [ 624.013398][T14626] ? __pfx_sysfs_kf_write+0x10/0x10 [ 624.018701][T14626] vzalloc_noprof+0x79/0x90 [ 624.023222][T14626] ? profile_init+0xb1/0x100 [ 624.027827][T14626] profile_init+0xb1/0x100 [ 624.032264][T14626] profiling_store+0x6c/0xf0 [ 624.036882][T14626] kernfs_fop_write_iter+0x3a1/0x500 [ 624.042290][T14626] vfs_write+0xa72/0xc90 [ 624.046562][T14626] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 624.052404][T14626] ? __pfx_vfs_write+0x10/0x10 [ 624.057186][T14626] ? do_futex+0x392/0x560 [ 624.061575][T14626] ksys_write+0x1a0/0x2c0 [ 624.065939][T14626] ? __pfx_ksys_write+0x10/0x10 [ 624.070836][T14626] ? do_syscall_64+0x100/0x230 [ 624.075713][T14626] ? do_syscall_64+0xb6/0x230 [ 624.080406][T14626] do_syscall_64+0xf3/0x230 [ 624.084921][T14626] ? clear_bhb_loop+0x35/0x90 [ 624.089617][T14626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.095528][T14626] RIP: 0033:0x7fadefb79e79 [ 624.099958][T14626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.119587][T14626] RSP: 002b:00007fadf08da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.128033][T14626] RAX: ffffffffffffffda RBX: 00007fadefd15f80 RCX: 00007fadefb79e79 [ 624.136033][T14626] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003 [ 624.144467][T14626] RBP: 00007fadefbe7916 R08: 0000000000000000 R09: 0000000000000000 [ 624.152495][T14626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.160512][T14626] R13: 0000000000000000 R14: 00007fadefd15f80 R15: 00007fadefe3fa38 [ 624.168537][T14626] [ 624.195105][T14626] Mem-Info: [ 624.198307][T14626] active_anon:8807 inactive_anon:0 isolated_anon:0 [ 624.198307][T14626] active_file:12265 inactive_file:38564 isolated_file:0 [ 624.198307][T14626] unevictable:768 dirty:174 writeback:0 [ 624.198307][T14626] slab_reclaimable:9333 slab_unreclaimable:97909 [ 624.198307][T14626] mapped:26963 shmem:4115 pagetables:969 [ 624.198307][T14626] sec_pagetables:0 bounce:0 [ 624.198307][T14626] kernel_misc_reclaimable:0 [ 624.198307][T14626] free:1342694 free_pcp:3238 free_cma:0 [ 624.258896][T14626] Node 0 active_anon:35428kB inactive_anon:0kB active_file:49060kB inactive_file:154180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107952kB dirty:692kB writeback:0kB shmem:14924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10660kB pagetables:3976kB sec_pagetables:0kB all_unreclaimable? no [ 624.308269][T14626] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 624.346448][T14626] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.402999][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 624.412644][T14626] lowmem_reserve[]: 0 2561 2562 0 0 [ 624.426307][T14626] Node 0 DMA32 free:1418684kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:35268kB inactive_anon:0kB active_file:49060kB inactive_file:152852kB unevictable:1536kB writepending:736kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:2700kB local_pcp:1388kB free_cma:0kB [ 624.469890][T14683] bridge_slave_1: left allmulticast mode [ 624.481940][T14683] bridge_slave_1: left promiscuous mode [ 624.489431][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.504300][T14626] lowmem_reserve[]: 0 0 1 0 0 [ 624.511125][T14626] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 624.550197][T14626] lowmem_reserve[]: 0 0 0 0 0 [ 624.581045][T14626] Node 1 Normal free:3941116kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 624.664478][T14626] lowmem_reserve[]: 0 0 0 0 0 [ 624.687831][T14626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 624.733280][T14626] Node 0 DMA32: 3*4kB (UME) 18*8kB (ME) 123*16kB (UME) 328*32kB (UME) 250*64kB (ME) 40*128kB (UME) 17*256kB (UME) 16*512kB (UME) 12*1024kB (UME) 6*2048kB (UME) 329*4096kB (M) = 1418444kB [ 624.784694][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.791415][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.795113][T14626] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 624.878088][T14626] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (U) 1*128kB (U) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 961*4096kB (UM) = 3941116kB [ 624.932400][T14626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.951227][T14626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.962658][T14626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.973082][T14626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.984790][T14626] 52104 total pagecache pages [ 624.992822][T14626] 0 pages in swap cache [ 624.997518][T14626] Free swap = 124460kB [ 625.007671][T14626] Total swap = 124996kB [ 625.014189][T14626] 2097051 pages RAM [ 625.022011][T14626] 0 pages HighMem/MovableOnly [ 625.030241][T14626] 402773 pages reserved [ 625.073424][T14626] 0 pages cma reserved [ 625.491518][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.678181][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.837399][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.968950][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.237822][ T64] team0: left allmulticast mode [ 626.242803][ T64] team_slave_0: left allmulticast mode [ 626.255092][ T64] team_slave_1: left allmulticast mode [ 626.260810][ T64] bridge0: port 3(team0) entered disabled state [ 626.287404][ T64] bridge_slave_1: left allmulticast mode [ 626.293085][ T64] bridge_slave_1: left promiscuous mode [ 626.309184][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.329915][ T64] bridge_slave_0: left allmulticast mode [ 626.348611][ T64] bridge_slave_0: left promiscuous mode [ 626.354368][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.855101][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 627.373670][ T5233] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 627.417021][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 627.430265][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.445658][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 627.454582][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 627.463585][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 627.471397][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 627.575967][ T5278] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 627.633572][ T5233] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.674065][ T5233] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 627.687990][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.688794][ T5233] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.708508][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.728645][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.769715][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 627.790402][ T64] bond0 (unregistering): Released all slaves [ 627.801726][ T5233] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.856767][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 627.871618][ T64] bond1 (unregistering): Released all slaves [ 627.879079][ T5278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.934029][ T5278] usb 1-1: config 0 has no interfaces? [ 627.954273][ T5278] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 628.042383][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.091886][ T5233] usb 5-1: USB disconnect, device number 79 [ 628.094619][ T5278] usb 1-1: Product: syz [ 628.115720][ T5278] usb 1-1: Manufacturer: syz [ 628.131230][ T5278] usb 1-1: SerialNumber: syz [ 628.161047][ T5278] usb 1-1: config 0 descriptor?? [ 628.411192][T12465] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 628.483346][T14738] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 628.565337][T14738] batman_adv: batadv0: Adding interface: team0 [ 628.567536][T12465] Bluetooth: hci4: SCO packet for unknown connection handle 1481 [ 628.577086][T14738] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.610333][T14738] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 628.641515][T14739] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 628.686498][T14739] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1713'. [ 628.705474][T14739] team0: entered promiscuous mode [ 628.730792][T14739] team_slave_0: entered promiscuous mode [ 628.757774][T14739] team_slave_1: entered promiscuous mode [ 628.824351][T14739] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.887179][T14739] batman_adv: batadv0: Interface activated: team0 [ 628.911762][T14739] batman_adv: batadv0: Interface deactivated: team0 [ 628.911784][T14736] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 628.969112][T14739] batman_adv: batadv0: Removing interface: team0 [ 629.002450][T14739] bridge0: port 2(team0) entered blocking state [ 629.076285][T14739] bridge0: port 2(team0) entered disabled state [ 629.085989][T14739] team0: entered allmulticast mode [ 629.091888][T14739] team_slave_0: entered allmulticast mode [ 629.107178][T14739] team_slave_1: entered allmulticast mode [ 629.151775][T14739] bridge0: port 2(team0) entered blocking state [ 629.158223][T14739] bridge0: port 2(team0) entered forwarding state [ 629.505134][T12465] Bluetooth: hci0: command tx timeout [ 629.787862][ T64] hsr_slave_0: left promiscuous mode [ 629.824606][ T64] hsr_slave_1: left promiscuous mode [ 629.853117][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.879774][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.958300][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.007048][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.139825][ T64] veth1_macvtap: left promiscuous mode [ 630.260310][ T64] veth0_macvtap: left promiscuous mode [ 630.336340][ T64] veth1_vlan: left promiscuous mode [ 630.361422][ T64] veth0_vlan: left promiscuous mode [ 630.792162][ T5233] usb 1-1: USB disconnect, device number 94 [ 631.575323][T12465] Bluetooth: hci0: command tx timeout [ 632.133588][ T64] team_slave_1 (unregistering): left promiscuous mode [ 632.164401][ T64] team0 (unregistering): Port device team_slave_1 removed [ 632.251502][ T64] team_slave_0 (unregistering): left promiscuous mode [ 632.281926][ T64] team0 (unregistering): Port device team_slave_0 removed [ 632.781395][T14790] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 632.790024][T14790] PKCS7: Only support pkcs7_signedData type [ 633.425908][T14732] chnl_net:caif_netlink_parms(): no params data found [ 633.623724][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 633.655420][T12465] Bluetooth: hci0: command 0x040f tx timeout [ 633.832972][T14800] bridge_slave_1: left allmulticast mode [ 633.840784][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 633.855126][T14800] bridge_slave_1: left promiscuous mode [ 633.865111][ T5233] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 633.879841][T14800] bridge1: port 1(bridge_slave_1) entered disabled state [ 633.909194][T14800] bridge2: port 1(bridge_slave_1) entered blocking state [ 633.920781][T14800] bridge2: port 1(bridge_slave_1) entered disabled state [ 633.937276][T14800] bridge_slave_1: entered allmulticast mode [ 633.956302][T14800] bridge_slave_1: entered promiscuous mode [ 633.969902][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.987039][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.007015][T14732] bridge_slave_0: entered allmulticast mode [ 634.055227][T14732] bridge_slave_0: entered promiscuous mode [ 634.072793][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.091140][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.095941][ T5233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.108627][T14732] bridge_slave_1: entered allmulticast mode [ 634.123892][ T5233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.136017][T14732] bridge_slave_1: entered promiscuous mode [ 634.153890][ T5233] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 634.171094][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 634.184171][ T5233] usb 3-1: SerialNumber: syz [ 634.342552][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.405754][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.558017][T14732] team0: Port device team_slave_0 added [ 634.631416][T14732] team0: Port device team_slave_1 added [ 634.711618][ T5233] usb 3-1: 0:2 : does not exist [ 634.782845][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.817536][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.901656][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.995620][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 635.064598][ T64] tipc: Subscription rejected, illegal request [ 635.128126][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.163253][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.204892][T14836] ebt_among: src integrity fail: 100 [ 635.225031][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.240276][T14847] ebt_among: src integrity fail: 100 [ 635.341044][T14732] hsr_slave_0: entered promiscuous mode [ 635.379839][T14732] hsr_slave_1: entered promiscuous mode [ 635.735246][T12465] Bluetooth: hci0: command 0x040f tx timeout [ 636.565134][ T5333] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 636.756754][ T5333] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 636.771265][ T5333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.783497][ T5279] usb 3-1: USB disconnect, device number 77 [ 636.787832][ T5333] usb 5-1: config 0 descriptor?? [ 636.798195][ T5333] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 637.154235][T14893] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 637.176081][T14893] bridge0: port 2(team0) entered disabled state [ 637.184361][T14893] team0: left allmulticast mode [ 637.189592][T14893] team_slave_0: left allmulticast mode [ 637.200880][T14893] team_slave_1: left allmulticast mode [ 637.209938][T14893] team0: left promiscuous mode [ 637.217218][T14893] team_slave_0: left promiscuous mode [ 637.223290][T14893] team_slave_1: left promiscuous mode [ 637.232626][T14893] bridge0: port 2(team0) entered disabled state [ 637.243575][T14893] batman_adv: batadv0: Adding interface: team0 [ 637.249892][T14893] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.270142][T12465] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 637.280465][T14893] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 637.295093][ T5916] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 637.312682][T14894] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 637.324035][T14894] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1745'. [ 637.400694][T14894] team0: entered promiscuous mode [ 637.406254][T14894] team_slave_0: entered promiscuous mode [ 637.417360][T14894] team_slave_1: entered promiscuous mode [ 637.423737][ T5333] gspca_sonixj: reg_w1 err -71 [ 637.439724][ T5333] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 637.450917][T14894] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.458206][T14894] batman_adv: batadv0: Interface activated: team0 [ 637.464904][T14894] batman_adv: batadv0: Interface deactivated: team0 [ 637.477410][T14894] batman_adv: batadv0: Removing interface: team0 [ 637.484602][T12465] Bluetooth: hci4: SCO packet for unknown connection handle 1481 [ 637.492401][T14894] bridge0: port 2(team0) entered blocking state [ 637.496356][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 637.501735][ T5333] usb 5-1: USB disconnect, device number 80 [ 637.517827][T14894] bridge0: port 2(team0) entered disabled state [ 637.524921][T14894] team0: entered allmulticast mode [ 637.538124][T14895] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 637.542379][T14894] team_slave_0: entered allmulticast mode [ 637.563513][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.576084][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.669101][T14894] team_slave_1: entered allmulticast mode [ 637.670070][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 637.707710][T14894] bridge0: port 2(team0) entered blocking state [ 637.714130][T14894] bridge0: port 2(team0) entered forwarding state [ 637.742338][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.787824][T14732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.802563][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.819727][T12465] Bluetooth: hci0: command 0x040f tx timeout [ 637.837418][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.882235][T14732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.924237][T14732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.946386][T14732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.104668][ T5916] usb 1-1: GET_CAPABILITIES returned 0 [ 638.115049][ T5916] usbtmc 1-1:16.0: can't read capabilities [ 638.165709][ T5282] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 638.217251][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.311018][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.378319][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.396654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.403811][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.422708][ T5282] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 638.430107][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.438916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.467543][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.478093][ T5278] usb 1-1: USB disconnect, device number 95 [ 638.517973][ T5282] usb 3-1: config 0 descriptor?? [ 638.885654][ T5282] ath6kl: Failed to submit usb control message: -71 [ 638.916713][ T5282] ath6kl: unable to send the bmi data to the device: -71 [ 638.926967][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.945539][ T5282] ath6kl: Unable to send get target info: -71 [ 638.959067][ T5282] ath6kl: Failed to init ath6kl core: -71 [ 638.985309][ T5282] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 639.052933][ T5279] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 639.058130][ T5282] usb 3-1: USB disconnect, device number 78 [ 639.080773][T14732] veth0_vlan: entered promiscuous mode [ 639.123850][T14732] veth1_vlan: entered promiscuous mode [ 639.252832][T14732] veth0_macvtap: entered promiscuous mode [ 639.274110][T14732] veth1_macvtap: entered promiscuous mode [ 639.296926][ T5279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.308352][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.326200][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.345210][ T5279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.348302][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.367546][ T5279] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.371780][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.379223][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.437479][ T5279] usb 4-1: SerialNumber: syz [ 639.461015][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.520750][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.551432][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.562149][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.575320][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.588201][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.600344][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.617343][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 639.664287][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.687738][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.713860][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.738521][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.759066][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.777695][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.794473][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.833385][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.847750][T14957] loop8: detected capacity change from 0 to 7 [ 639.850903][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.872097][T14957] Dev loop8: unable to read RDB block 7 [ 639.878195][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.889338][T14957] loop8: unable to read partition table [ 639.894523][ T5279] usb 4-1: 0:2 : does not exist [ 639.904881][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.921042][T14957] loop8: partition table beyond EOD, truncated [ 639.935406][T14951] bridge_slave_1: left allmulticast mode [ 639.941235][T14951] bridge_slave_1: left promiscuous mode [ 639.955451][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.963222][T14957] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 639.963222][T14957] ) failed (rc=-5) [ 639.982610][T14951] bridge1: port 1(bridge_slave_1) entered blocking state [ 639.994547][T14951] bridge1: port 1(bridge_slave_1) entered disabled state [ 640.009776][T14951] bridge_slave_1: entered allmulticast mode [ 640.036923][T14951] bridge_slave_1: entered promiscuous mode [ 640.084608][T14732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.121174][T14732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.153245][T14732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.175224][T14732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.204887][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 640.276117][ T12] tipc: Subscription rejected, illegal request [ 640.346748][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 640.487663][T14975] netlink: 'syz.4.1757': attribute type 10 has an invalid length. [ 640.506549][T14975] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1757'. [ 640.529033][T14975] team0: entered promiscuous mode [ 640.551797][T14975] team_slave_0: entered promiscuous mode [ 640.570103][T12465] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 640.593290][T14975] team_slave_1: entered promiscuous mode [ 640.603933][T14975] bridge0: port 3(team0) entered blocking state [ 640.604221][T14975] bridge0: port 3(team0) entered disabled state [ 640.604352][T14975] team0: entered allmulticast mode [ 640.604368][T14975] team_slave_0: entered allmulticast mode [ 640.604385][T14975] team_slave_1: entered allmulticast mode [ 640.608814][T14975] bridge0: port 3(team0) entered blocking state [ 640.608878][T14975] bridge0: port 3(team0) entered forwarding state [ 640.609110][T14974] netlink: 'syz.2.1758': attribute type 32 has an invalid length. [ 640.609129][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 640.676779][T14974] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 640.708351][T12465] Bluetooth: hci3: SCO packet for unknown connection handle 1481 [ 640.760031][T14980] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 640.811804][T14974] bond1: entered promiscuous mode [ 640.825377][T14974] bond1: entered allmulticast mode [ 640.832448][T14974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.885657][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.910962][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.043767][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.061402][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.503764][T15001] loop2: detected capacity change from 0 to 7 [ 641.555062][T15001] Dev loop2: unable to read RDB block 7 [ 641.572087][T15001] loop2: unable to read partition table [ 641.579832][T15001] loop2: partition table beyond EOD, truncated [ 641.591026][T15001] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 641.822189][ T5279] usb 4-1: USB disconnect, device number 80 [ 641.829024][T15010] program syz.4.1764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.989132][T15018] loop8: detected capacity change from 0 to 7 [ 642.011449][T15018] Dev loop8: unable to read RDB block 7 [ 642.019018][T15018] loop8: unable to read partition table [ 642.035402][T15018] loop8: partition table beyond EOD, truncated [ 642.041779][T15018] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 642.041779][T15018] ) failed (rc=-5) [ 642.066636][ T5278] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 642.284366][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 642.295866][ T5278] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 642.328094][ T5278] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 642.337634][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.358238][ T5278] usb 1-1: Product: syz [ 642.372495][ T5278] usb 1-1: Manufacturer: syz [ 642.392558][ T5278] usb 1-1: SerialNumber: syz [ 642.412938][ T5278] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input34 [ 642.578693][T15029] netlink: 'syz.1.1770': attribute type 32 has an invalid length. [ 642.592516][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 642.608036][T15029] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 642.636069][ T4666] bcm5974 1-1:1.0: could not read from device [ 642.646285][ T5333] usb 1-1: USB disconnect, device number 96 [ 642.670159][ T6028] bcm5974 1-1:1.0: could not read from device [ 642.744141][T15029] bond1: entered promiscuous mode [ 642.749429][T15029] bond1: entered allmulticast mode [ 642.755317][T15029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.803282][ T4666] bcm5974 1-1:1.0: could not read from device [ 642.847119][ T4666] bcm5974 1-1:1.0: could not read from device [ 642.935845][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1772'. [ 643.524195][T15058] loop8: detected capacity change from 0 to 7 [ 643.542317][T15058] Dev loop8: unable to read RDB block 7 [ 643.551512][T15058] loop8: unable to read partition table [ 643.571799][T15058] loop8: partition table beyond EOD, truncated [ 643.593484][T15058] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 643.593484][T15058] ) failed (rc=-5) [ 643.725228][ T5282] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 643.941949][ T5282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.976209][ T5282] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.036213][ T5282] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 644.047692][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 644.065325][ T5282] usb 2-1: SerialNumber: syz [ 644.258953][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1786'. [ 644.380445][ T5333] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 644.495887][ T5282] usb 2-1: 0:2 : does not exist [ 644.575201][ T5333] usb 3-1: Using ep0 maxpacket: 16 [ 644.586967][ T5333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.602908][ T5333] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.628205][T15084] netlink: 'syz.4.1787': attribute type 32 has an invalid length. [ 644.631190][ T5333] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 644.659448][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 644.668771][T15084] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 644.685170][ T5333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.723095][ T5333] usb 3-1: config 0 descriptor?? [ 644.749803][T15084] bond2: entered promiscuous mode [ 644.755137][T15084] bond2: entered allmulticast mode [ 644.762048][T15084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.770885][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 644.889042][ T64] tipc: Subscription rejected, illegal request [ 645.488389][ T5233] usb 3-1: USB disconnect, device number 79 [ 645.675734][ T5231] Bluetooth: Unexpected start frame (len 12) [ 645.772282][T15109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.839192][T15109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.985904][ T5279] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 646.055643][ T5233] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 646.145157][ T5279] usb 1-1: device descriptor read/64, error -71 [ 646.248057][ T5233] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 646.279672][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.319063][ T5233] usb 3-1: config 0 descriptor?? [ 646.349006][ T5233] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 646.415345][ T5279] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 646.491553][ T5282] usb 2-1: USB disconnect, device number 109 [ 646.589157][ T5279] usb 1-1: device descriptor read/64, error -71 [ 646.715625][ T5279] usb usb1-port1: attempt power cycle [ 646.955860][ T5233] gspca_sonixj: reg_w1 err -71 [ 646.968837][ T5233] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 647.024856][ T5233] usb 3-1: USB disconnect, device number 80 [ 647.160191][ T5279] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 647.220749][ T5279] usb 1-1: device descriptor read/8, error -71 [ 647.335344][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 647.363464][T15127] futex_wake_op: syz.3.1797 tries to shift op by -1; fix this program [ 647.507359][ T5279] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 647.563706][ T5279] usb 1-1: device descriptor read/8, error -71 [ 647.651059][T15135] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1800'. [ 647.687391][T15137] ebt_among: src integrity fail: 100 [ 647.705483][ T5279] usb usb1-port1: unable to enumerate USB device [ 647.749770][T15139] xt_cgroup: invalid path, errno=-2 [ 648.302280][T15153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'. [ 648.430910][T15139] vxcan1: entered promiscuous mode [ 648.500413][T15139] vxcan1: left promiscuous mode [ 648.518342][T15139] vxcan1: entered allmulticast mode [ 648.585475][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 648.634516][T15157] bridge_slave_1: left allmulticast mode [ 648.635149][ T5916] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 648.652131][T15157] bridge_slave_1: left promiscuous mode [ 648.673202][T15157] bridge2: port 1(bridge_slave_1) entered disabled state [ 648.840942][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 648.865532][ T5916] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 648.873942][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 648.953257][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 648.992438][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 649.032178][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.092348][ T5916] usb 3-1: config 0 has no interface number 0 [ 649.116054][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 649.153010][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 649.196202][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 649.221522][ T5916] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.235964][T15176] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1812'. [ 649.247861][ T5916] usb 3-1: config 0 interface 125 has no altsetting 0 [ 649.260693][ T5916] usb 3-1: config 0 interface 125 has no altsetting 2 [ 649.280016][ T5916] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 649.299830][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.317623][ T5916] usb 3-1: Product: syz [ 649.330854][ T5916] usb 3-1: Manufacturer: syz [ 649.342214][ T5916] usb 3-1: SerialNumber: syz [ 649.356571][ T5916] usb 3-1: config 0 descriptor?? [ 649.372945][ T5916] usb 3-1: selecting invalid altsetting 2 [ 649.485193][ T5233] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 649.592348][ C0] usb 3-1: async_complete: urb error -71 [ 649.598165][ C0] usb 3-1: async_complete: urb error -71 [ 649.603887][ C0] usb 3-1: async_complete: urb error -71 [ 649.609601][ C0] usb 3-1: async_complete: urb error -71 [ 649.622475][ T5916] get_1284_register: usb error -71 [ 649.627803][ T5916] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 649.649288][ T5916] usb 3-1: USB disconnect, device number 81 [ 649.686137][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 649.698469][ T5233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 649.729757][ T5233] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 649.755552][ T5233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.795428][ T5233] usb 5-1: Product: syz [ 649.799656][ T5233] usb 5-1: Manufacturer: syz [ 649.804283][ T5233] usb 5-1: SerialNumber: syz [ 649.839460][ T5233] usb 5-1: config 0 descriptor?? [ 650.055225][ T5282] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 650.060057][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.072883][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.092556][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.112712][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.261706][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 650.277040][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 650.298716][ T5282] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 650.299740][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 650.308175][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.341749][T15197] bridge4: port 1(bridge_slave_1) entered blocking state [ 650.345000][ T5282] usb 2-1: Product: syz [ 650.349253][T15197] bridge4: port 1(bridge_slave_1) entered disabled state [ 650.360467][ T5282] usb 2-1: Manufacturer: syz [ 650.362892][T15197] bridge_slave_1: entered allmulticast mode [ 650.372917][ T5282] usb 2-1: SerialNumber: syz [ 650.373725][T15197] bridge_slave_1: entered promiscuous mode [ 650.397436][ T5282] usb 2-1: config 0 descriptor?? [ 650.562639][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.629098][ T5282] usb 2-1: USB disconnect, device number 110 [ 650.746574][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.043054][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.612157][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.746173][T15255] netlink: 'syz.2.1825': attribute type 6 has an invalid length. [ 651.776362][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.790270][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.798711][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.808689][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.816720][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 651.826667][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.254575][ T64] bridge_slave_0: left allmulticast mode [ 652.276089][ T64] bridge_slave_0: left promiscuous mode [ 652.302252][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.315289][ T5916] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 652.515111][ T5916] usb 3-1: device descriptor read/64, error -71 [ 652.806542][ T5916] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 652.872306][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.926276][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 652.953815][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 652.966441][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.977252][ T5916] usb 3-1: device descriptor read/64, error -71 [ 652.988482][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.010673][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.028483][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.048373][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.067239][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.085166][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.108949][ T5916] usb usb3-port1: attempt power cycle [ 653.113053][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.130466][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.151319][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.160967][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.168807][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.176329][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.184007][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.191682][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.198807][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.207371][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.215056][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 653.222107][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.229829][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.236891][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.245806][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.253306][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.333523][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.375799][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.383200][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.422026][ T5278] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 653.462325][ T5278] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 653.553825][ T5916] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 653.623109][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.625791][ T5916] usb 3-1: device descriptor read/8, error -71 [ 653.649301][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.667832][ T5278] usb 5-1: USB disconnect, device number 81 [ 653.692042][ T64] bond0 (unregistering): Released all slaves [ 653.905216][ T5231] Bluetooth: hci2: command tx timeout [ 653.935119][ T5916] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 653.975993][ T5916] usb 3-1: device descriptor read/8, error -71 [ 654.105667][ T5916] usb usb3-port1: unable to enumerate USB device [ 654.491070][T15260] chnl_net:caif_netlink_parms(): no params data found [ 654.537148][ T64] hsr_slave_0: left promiscuous mode [ 654.561613][ T64] hsr_slave_1: left promiscuous mode [ 654.597811][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.624589][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.636257][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.655477][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.694873][ T64] veth1_macvtap: left promiscuous mode [ 654.754268][ T64] veth0_macvtap: left promiscuous mode [ 654.771734][ T64] veth1_vlan: left promiscuous mode [ 654.778321][ T64] veth0_vlan: left promiscuous mode [ 654.946425][ T5282] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 655.155152][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 655.182501][ T5282] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 655.198899][ T5282] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 655.211049][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 655.222432][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 655.237437][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 655.249508][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.265409][ T5282] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 655.281034][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.322316][ T5282] usb 2-1: config 0 descriptor?? [ 655.335319][ T5231] Bluetooth: hci4: command tx timeout [ 655.542808][ T5282] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 655.605166][ T5282] usb 2-1: USB disconnect, device number 111 [ 655.650843][ T5282] usblp0: removed [ 655.975269][ T5231] Bluetooth: hci2: command tx timeout [ 655.989513][ T64] team0 (unregistering): Port device team_slave_1 removed [ 656.027312][ T5231] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 656.074532][ T64] team0 (unregistering): Port device team_slave_0 removed [ 656.100968][ T5231] Bluetooth: hci1: SCO packet for unknown connection handle 1481 [ 656.104193][T15316] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 656.128403][ T5916] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 656.172843][ T5282] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 656.331188][ T5916] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 656.350563][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.368574][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 656.369842][ T5916] usb 5-1: config 0 descriptor?? [ 656.403590][ T5282] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 656.404838][ T5916] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 656.429482][ T5282] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 656.441188][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 656.450360][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 656.460205][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 656.471830][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 656.501880][ T5282] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 656.526907][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.556897][ T5282] usb 2-1: config 0 descriptor?? [ 656.639744][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.672256][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.771719][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.792083][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.829466][ T5282] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 656.892319][T15314] netlink: 'syz.2.1839': attribute type 10 has an invalid length. [ 656.909351][T15314] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1839'. [ 656.922196][T15314] team0: entered promiscuous mode [ 656.934212][T15314] team_slave_0: entered promiscuous mode [ 656.942903][T15314] team_slave_1: entered promiscuous mode [ 656.951076][T15314] bridge0: port 2(team0) entered blocking state [ 656.960030][T15314] bridge0: port 2(team0) entered disabled state [ 656.966779][T15314] team0: entered allmulticast mode [ 656.972053][T15314] team_slave_0: entered allmulticast mode [ 656.980064][T15314] team_slave_1: entered allmulticast mode [ 656.988158][T15314] bridge0: port 2(team0) entered blocking state [ 656.994491][T15314] bridge0: port 2(team0) entered forwarding state [ 657.128008][ T5916] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 657.155208][ T5916] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 657.243772][ T5916] usb 5-1: USB disconnect, device number 82 [ 657.415761][ T5231] Bluetooth: hci4: command tx timeout [ 657.520099][T15279] chnl_net:caif_netlink_parms(): no params data found [ 657.579127][T15260] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.615107][T15260] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.631044][T15260] bridge_slave_0: entered allmulticast mode [ 657.646649][T15260] bridge_slave_0: entered promiscuous mode [ 657.677539][T15260] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.696320][T15260] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.718235][T15260] bridge_slave_1: entered allmulticast mode [ 657.742517][T15334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1842'. [ 657.743010][T15260] bridge_slave_1: entered promiscuous mode [ 658.055166][ T5231] Bluetooth: hci2: command tx timeout [ 658.094235][T15260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.175642][T15260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.422375][ T5282] usb 2-1: USB disconnect, device number 112 [ 658.436449][ T5282] usblp0: removed [ 658.497025][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.514463][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.530888][T15279] bridge_slave_0: entered allmulticast mode [ 658.557223][T15279] bridge_slave_0: entered promiscuous mode [ 658.579970][T15260] team0: Port device team_slave_0 added [ 658.598793][T15260] team0: Port device team_slave_1 added [ 658.635354][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.665084][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.678252][T15279] bridge_slave_1: entered allmulticast mode [ 658.686725][T15279] bridge_slave_1: entered promiscuous mode [ 658.860711][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.955331][ T5916] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 658.965892][T15260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.984868][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.017192][T15260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.033369][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.059082][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.140714][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.159540][ T5231] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 659.176697][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.196330][T15260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.205237][ T5916] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.215237][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.225242][ T5231] Bluetooth: hci0: SCO packet for unknown connection handle 1481 [ 659.228951][T15370] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 659.239237][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.275619][ T5916] usb 3-1: config 0 descriptor?? [ 659.292241][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 659.299222][T15260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.327459][T15372] ebt_among: dst integrity fail: 101 [ 659.355275][T15371] netlink: 'syz.1.1848': attribute type 10 has an invalid length. [ 659.372581][T15371] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1848'. [ 659.386590][T15371] team0: entered promiscuous mode [ 659.391774][T15371] team_slave_0: entered promiscuous mode [ 659.405212][T15371] team_slave_1: entered promiscuous mode [ 659.414435][T15371] bridge0: port 3(team0) entered blocking state [ 659.426616][T15371] bridge0: port 3(team0) entered disabled state [ 659.434398][T15371] team0: entered allmulticast mode [ 659.439698][T15371] team_slave_0: entered allmulticast mode [ 659.445878][T15371] team_slave_1: entered allmulticast mode [ 659.456786][T15371] bridge0: port 3(team0) entered blocking state [ 659.463246][T15371] bridge0: port 3(team0) entered forwarding state [ 659.490353][ T5916] pwc: send_video_command error -71 [ 659.497882][ T5231] Bluetooth: hci4: command tx timeout [ 659.507545][ T5916] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 659.515462][ T5916] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 659.526796][ T5916] usb 3-1: USB disconnect, device number 86 [ 659.606234][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.751632][T15279] team0: Port device team_slave_0 added [ 659.761236][T15279] team0: Port device team_slave_1 added [ 659.847301][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.879574][T15260] hsr_slave_0: entered promiscuous mode [ 659.895698][T15260] hsr_slave_1: entered promiscuous mode [ 659.905024][T15260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.922969][T15260] Cannot create hsr debugfs directory [ 660.075405][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.083273][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.122198][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.136439][ T5231] Bluetooth: hci2: command tx timeout [ 660.142071][ T5916] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 660.168792][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.184060][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.211569][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.325362][ T5278] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 660.327226][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.345474][ T5280] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 660.377687][ T5916] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 660.383992][T15279] hsr_slave_0: entered promiscuous mode [ 660.398199][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.409326][ T5916] usb 3-1: config 0 descriptor?? [ 660.409331][T15279] hsr_slave_1: entered promiscuous mode [ 660.423095][T15279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.437054][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 660.442152][T15279] Cannot create hsr debugfs directory [ 660.516000][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 660.536043][ T5278] usb 5-1: config 129 has an invalid interface number: 187 but max is 1 [ 660.544474][ T5278] usb 5-1: config 129 has an invalid interface number: 78 but max is 1 [ 660.553356][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 660.558646][ T5278] usb 5-1: config 129 has no interface number 0 [ 660.565812][ T5278] usb 5-1: config 129 has no interface number 1 [ 660.577374][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.580858][ T64] team0: left allmulticast mode [ 660.589687][ T5278] usb 5-1: config 129 interface 187 altsetting 5 endpoint 0x5 has invalid maxpacket 39650, setting to 64 [ 660.605411][ T64] team_slave_0: left allmulticast mode [ 660.610941][ T64] team_slave_1: left allmulticast mode [ 660.613685][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.631199][ T64] bridge0: port 2(team0) entered disabled state [ 660.639608][ T5280] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 660.648868][ T5278] usb 5-1: config 129 interface 187 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 660.653280][ T64] bridge_slave_0: left allmulticast mode [ 660.659916][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.673742][ T5278] usb 5-1: config 129 interface 187 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 660.675712][ T64] bridge_slave_0: left promiscuous mode [ 660.688673][ T5280] usb 2-1: config 0 descriptor?? [ 660.698086][ T5278] usb 5-1: config 129 interface 187 altsetting 5 has an endpoint descriptor with address 0x2F, changing to 0xF [ 660.710604][ T5278] usb 5-1: config 129 interface 187 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 660.712330][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.730144][ T5278] usb 5-1: config 129 interface 78 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 660.742910][ T5278] usb 5-1: config 129 interface 78 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 660.761454][ T5278] usb 5-1: config 129 interface 78 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 32 [ 660.771628][ T5278] usb 5-1: config 129 interface 78 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 660.782703][ T5278] usb 5-1: config 129 interface 187 has no altsetting 0 [ 660.789849][ T5278] usb 5-1: config 129 interface 78 has no altsetting 0 [ 660.793756][ T64] bridge_slave_1: left allmulticast mode [ 660.803085][ T64] bridge_slave_1: left promiscuous mode [ 660.811450][ T5278] usb 5-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=93.c2 [ 660.812009][ T64] bridge4: port 1(bridge_slave_1) entered disabled state [ 660.822619][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.836019][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 660.836208][ T5278] usb 5-1: Product: ᾣው᳀䲤䕠ꪅ又㡗唼땑첉ᩕ㦯㒧⟎삸ཧ勏뱽䥠횊犝鈢ꬉ톋뗹좟፽梦﵄擤겡큕鶆隃綾阘 [ 660.847572][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 660.869516][ T5278] usb 5-1: Manufacturer: Н [ 660.874098][ T5278] usb 5-1: SerialNumber: 꺷에웊籶ᾚ⟄ᑝ扲⽳塣᫪氈姞ꂰ܋祤씩폙犓效䋛穵곯્⒌쒕ꜷ榍쏒んꦗę디珣띉箶挏囅㜇ꪯꜤƮᛠ皾럣඀ꁽ裸돟씦ݚ⫿哎䍑酭迓䙐륿蝾䇜栚ݟ巆슽컊칚畬톿囜쾱Ẁ보途ล槲齞ﻋ⺘쒟㽎練Ḝ騆峂擄㳉ᤅሦ﷦⛡ [ 661.149812][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.165198][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.172662][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.179189][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.198827][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.209432][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.217084][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.217305][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.224627][ T5280] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 661.262771][ T5280] playstation 0003:054C:0CE6.001F: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 661.575132][ T5231] Bluetooth: hci4: command tx timeout [ 661.661346][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.675676][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.688222][ T64] bond0 (unregistering): Released all slaves [ 661.804623][ T5916] pwc: recv_control_msg error -71 req 04 val 1000 [ 661.834494][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 661.872711][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 661.884272][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 661.903494][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 661.923891][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 661.935554][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 661.942798][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 661.954680][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 661.963067][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 661.970280][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 661.977796][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 661.984623][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 661.999136][ T5916] pwc: Registered as video71. [ 662.013835][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 662.085234][ T5916] usb 3-1: USB disconnect, device number 87 [ 662.467472][ T5280] playstation 0003:054C:0CE6.001F: Failed to retrieve feature with reportID 9: -71 [ 662.485383][ T5280] playstation 0003:054C:0CE6.001F: Failed to retrieve DualSense pairing info: -71 [ 662.513643][ T5280] playstation 0003:054C:0CE6.001F: Failed to get MAC address from DualSense [ 662.541868][ T5280] playstation 0003:054C:0CE6.001F: Failed to create dualsense. [ 662.586064][ T5280] playstation 0003:054C:0CE6.001F: probe with driver playstation failed with error -71 [ 662.633871][ T64] hsr_slave_0: left promiscuous mode [ 662.654106][ T5280] usb 2-1: USB disconnect, device number 113 [ 662.664186][ T64] hsr_slave_1: left promiscuous mode [ 662.685807][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.693245][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.702654][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.721737][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.795365][ T64] veth0_macvtap: left promiscuous mode [ 662.810508][ T64] veth1_vlan: left promiscuous mode [ 662.822265][ T64] veth0_vlan: left promiscuous mode [ 663.019403][ T5278] mos7840 5-1:129.187: required endpoints missing [ 663.063034][ T5278] mos7840 5-1:129.78: required endpoints missing [ 663.121382][ T5278] usb 5-1: USB disconnect, device number 83 [ 663.622113][ T64] team_slave_1 (unregistering): left promiscuous mode [ 663.634614][ T64] team0 (unregistering): Port device team_slave_1 removed [ 663.678111][ T64] team_slave_0 (unregistering): left promiscuous mode [ 663.689375][ T64] team0 (unregistering): Port device team_slave_0 removed [ 664.221930][T15423] team0: Device ipvlan1 failed to register rx_handler [ 664.254469][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 664.265385][T15425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1854'. [ 664.282115][T15429] bridge_slave_1: left allmulticast mode [ 664.288014][T15429] bridge_slave_1: left promiscuous mode [ 664.293776][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.645131][ T5280] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 664.837543][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.858774][T15260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.888524][ T5280] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 1.d9 [ 664.908163][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 664.938678][ T5280] usb 2-1: Product: syz [ 664.942893][ T5280] usb 2-1: SerialNumber: syz [ 664.956052][T15260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.976690][T15260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.995118][ T5280] usb 2-1: config 0 descriptor?? [ 665.173057][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.215241][T15260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 665.223341][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.264526][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.279919][ T5280] usb 2-1: probing VID:PID(2201:012C) [ 665.308080][ T5280] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 665.368441][ T5280] vub300 2-1:0.0: probe with driver vub300 failed with error -22 [ 665.403472][ T5280] usb 2-1: USB disconnect, device number 114 [ 665.455818][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.525476][T12465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.544199][T12465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.563251][T12465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.588170][T12465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.612234][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.637140][T12465] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 665.651879][T12465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.761346][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.899006][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'. [ 665.998922][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.023262][T15260] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.071288][T15235] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.078535][T15235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.210174][T15279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 666.231736][T15279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 666.252683][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.259908][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.320512][T15279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 666.345818][ T8] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 666.387411][ T64] team0: left allmulticast mode [ 666.392402][ T64] team_slave_0: left allmulticast mode [ 666.402871][ T64] team_slave_1: left allmulticast mode [ 666.409134][ T64] bridge0: port 3(team0) entered disabled state [ 666.420684][ T64] bridge_slave_1: left allmulticast mode [ 666.427142][ T64] bridge_slave_1: left promiscuous mode [ 666.432907][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.461894][ T64] bridge_slave_0: left allmulticast mode [ 666.467853][ T64] bridge_slave_0: left promiscuous mode [ 666.473636][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.540808][ T8] usb 2-1: device descriptor read/64, error -71 [ 666.820998][ T8] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 666.906542][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.919566][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.930188][ T64] bond0 (unregistering): Released all slaves [ 666.949661][ T64] bond1 (unregistering): Released all slaves [ 667.003775][ T8] usb 2-1: device descriptor read/64, error -71 [ 667.115910][ T64] bond2 (unregistering): Released all slaves [ 667.125416][ T8] usb usb2-port1: attempt power cycle [ 667.132393][T15279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 667.159501][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 667.242697][T15464] chnl_net:caif_netlink_parms(): no params data found [ 667.555131][ T8] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 667.611855][T15260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.620227][ T8] usb 2-1: device descriptor read/8, error -71 [ 667.642942][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.667716][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.679674][T15464] bridge_slave_0: entered allmulticast mode [ 667.687263][T15464] bridge_slave_0: entered promiscuous mode [ 667.697126][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.704291][T15464] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.713479][T15464] bridge_slave_1: entered allmulticast mode [ 667.721466][T15464] bridge_slave_1: entered promiscuous mode [ 667.735954][ T5231] Bluetooth: hci3: command tx timeout [ 667.745075][ T5916] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 667.781840][ T64] hsr_slave_0: left promiscuous mode [ 667.792696][ T64] hsr_slave_1: left promiscuous mode [ 667.800308][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.808270][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.823473][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.840879][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.876428][ T64] veth1_macvtap: left promiscuous mode [ 667.892123][ T64] veth0_macvtap: left promiscuous mode [ 667.900410][ T64] veth1_vlan: left promiscuous mode [ 667.912765][ T64] veth0_vlan: left promiscuous mode [ 667.915888][ T8] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 667.955111][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 667.964880][ T8] usb 2-1: device descriptor read/8, error -71 [ 667.973694][ T5916] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 667.990580][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.005540][ T5916] usb 3-1: Product: syz [ 668.009747][ T5916] usb 3-1: Manufacturer: syz [ 668.014416][ T5916] usb 3-1: SerialNumber: syz [ 668.030470][ T5916] usb 3-1: config 0 descriptor?? [ 668.048074][ T5916] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 668.095463][ T8] usb usb2-port1: unable to enumerate USB device [ 668.116287][ T5916] usb 3-1: Found UVC 0.00 device syz (0d49:7000) [ 668.124686][ T5916] usb 3-1: No valid video chain found. [ 668.259995][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 668.552335][ T64] team_slave_1 (unregistering): left promiscuous mode [ 668.565709][ T64] team0 (unregistering): Port device team_slave_1 removed [ 668.614043][ T64] team_slave_0 (unregistering): left promiscuous mode [ 668.630074][ T64] team0 (unregistering): Port device team_slave_0 removed [ 669.019621][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.034414][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.099193][ T5916] usb 3-1: USB disconnect, device number 88 [ 669.266238][T15464] team0: Port device team_slave_0 added [ 669.282918][T15464] team0: Port device team_slave_1 added [ 669.358943][T15512] netlink: 'syz.1.1869': attribute type 5 has an invalid length. [ 669.373154][T15515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.389933][T15512] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1869'. [ 669.420640][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.437324][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.472549][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.552557][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.559943][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.623829][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.811581][T15260] veth0_vlan: entered promiscuous mode [ 669.817528][ T5231] Bluetooth: hci3: command tx timeout [ 669.832249][T15260] veth1_vlan: entered promiscuous mode [ 669.849353][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.884546][T15464] hsr_slave_0: entered promiscuous mode [ 669.898375][T15464] hsr_slave_1: entered promiscuous mode [ 669.913177][T15464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.927827][T15464] Cannot create hsr debugfs directory [ 670.084759][T15279] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.170322][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.177583][T10597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.225225][ T9] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 670.229620][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.240058][T10597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.261897][T15260] veth0_macvtap: entered promiscuous mode [ 670.298591][T15260] veth1_macvtap: entered promiscuous mode [ 670.445536][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 670.465152][ T9] usb 2-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 670.503853][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 670.504016][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.522544][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 670.533334][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.538878][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.549584][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.561383][ T9] usb 2-1: Product: syz [ 670.566618][ T9] usb 2-1: Manufacturer: syz [ 670.582051][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.584986][ T9] usb 2-1: SerialNumber: syz [ 670.606082][ T9] usb 2-1: config 0 descriptor?? [ 670.624782][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.644672][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.659221][T15260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.675363][T15279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.691333][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.726605][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.753901][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.780171][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.792261][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.810078][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.839498][T15260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.953133][T15260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.974586][T15260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.983802][T15260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.998589][T15260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.113701][T15279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.155216][ T5282] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 671.355172][T15464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.375574][T15464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.382612][T15241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.397757][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 191, setting to 64 [ 671.421988][T15241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.431650][ T5282] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 671.444801][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.453725][T15464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.478360][ T5282] usb 3-1: config 0 descriptor?? [ 671.508356][T15464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.574864][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.589419][T15279] veth0_vlan: entered promiscuous mode [ 671.617031][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.699983][T15279] veth1_vlan: entered promiscuous mode [ 671.725988][ T5282] ath6kl: Failed to submit usb control message: -71 [ 671.754613][ T5282] ath6kl: unable to send the bmi data to the device: -71 [ 671.788807][ T5282] ath6kl: Unable to send get target info: -71 [ 671.823182][ T5282] ath6kl: Failed to init ath6kl core: -71 [ 671.843533][ T5282] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 671.905484][ T5282] usb 3-1: USB disconnect, device number 89 [ 671.905658][ T5231] Bluetooth: hci3: command tx timeout [ 671.953055][T15279] veth0_macvtap: entered promiscuous mode [ 672.017970][T15279] veth1_macvtap: entered promiscuous mode [ 672.064404][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.132906][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.154865][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.170298][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.184545][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.213964][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.239957][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.260768][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.272863][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.294184][T15279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.314154][T15464] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.347966][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.390498][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.417891][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.432427][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.442906][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.455498][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.466438][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.481942][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.513502][T15279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.558318][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.565529][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.632860][T15279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.663924][T15279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.688697][T15279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.704422][T15279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.753199][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.760399][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.811628][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 672.854752][ T5231] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 672.864661][ T9] usb 2-1: failed to receive control message: -71 [ 672.889184][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 672.898264][T15614] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 672.902556][ T9] usb 2-1: USB disconnect, device number 119 [ 672.912430][T15614] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1877'. [ 672.913509][ T9] ch341 2-1:0.0: device disconnected [ 672.927123][T15614] team0: entered promiscuous mode [ 672.932287][T15614] team_slave_0: entered promiscuous mode [ 672.938763][T15614] team_slave_1: entered promiscuous mode [ 672.950506][T15614] bridge0: port 3(team0) entered blocking state [ 672.961132][T15614] bridge0: port 3(team0) entered disabled state [ 672.966175][ T5231] Bluetooth: hci2: SCO packet for unknown connection handle 1481 [ 672.970030][T15614] team0: entered allmulticast mode [ 672.983880][T15614] team_slave_0: entered allmulticast mode [ 672.992550][T15614] team_slave_1: entered allmulticast mode [ 673.011709][T15614] bridge0: port 3(team0) entered blocking state [ 673.018167][T15614] bridge0: port 3(team0) entered forwarding state [ 673.059692][T15612] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 673.418298][T15236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.459023][T15236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.579371][T15241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.594789][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.626720][T15241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.909707][T15464] veth0_vlan: entered promiscuous mode [ 673.974857][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 673.983066][T15464] veth1_vlan: entered promiscuous mode [ 673.986467][ T5231] Bluetooth: hci3: command tx timeout [ 674.257277][T15644] syzkaller0: entered promiscuous mode [ 674.292026][T15643] syzkaller0: left promiscuous mode [ 674.371097][T15464] veth0_macvtap: entered promiscuous mode [ 674.460108][T15464] veth1_macvtap: entered promiscuous mode [ 674.564383][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.602081][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.625304][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.651319][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.665522][ T5258] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 674.686137][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.710505][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.721026][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.742206][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.771857][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.784611][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.798562][T15464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.868718][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.945229][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.983364][ T5258] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.986292][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.079760][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.094836][ T5258] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 675.107977][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.146948][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.173934][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.193920][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.202352][ T5258] usb 3-1: config 0 descriptor?? [ 675.221931][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.234377][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.256221][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.284695][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.297190][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.332957][T15464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.389587][T15464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.402262][T15464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.413882][T15464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.423747][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 675.426257][T15464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.431708][ T5279] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 675.638393][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.648550][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 675.653816][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 675.695295][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.698289][ T9] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.719078][ T5279] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 675.731126][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.745572][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 675.752617][ T5279] usb 4-1: Product: syz [ 675.768110][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 675.777642][T15660] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1884'. [ 675.777736][ T5279] usb 4-1: Manufacturer: syz [ 675.791979][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.803093][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.804429][ T5279] usb 4-1: SerialNumber: syz [ 675.811765][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.824734][ T9] usb 1-1: Product: 㜄쥓䋌➽ᶢ੍舛﷏쮝昷탪쾬⮧ҧꃏ꽹╞䔒礥預굳〣歎⦉杭쾀瞡챊䈌䑘䲲Ⴃ䣹⥶쳵໻䝠赼䈩ᝂ뤸❠깿茪䑿벷긙煢踅淭⓾˚徭ꪝ鹽摎ᢚ쯼ﵤⲰ猓읍䣐놾윑䐆⣥ꗒ摭麊ޗ棕䲞ޞ黷ﶂ荶あ팸嶽㗧뤔㩜ᙺ㖴얳蠅 [ 675.824768][ T9] usb 1-1: Manufacturer: 읇墔㋚俣듽菇퐛欼ꏑ돵䯺ഗ㒣⟳惁繼筰⌞邌絵햸毓氩㇂୒ꔔ俐꽘ᰊ끌⎈뭰㨒䝟峯⸑듍㖴퍌洽씀禐⢳嵋꬞ᑔ珷ݩꚺᄒ䤇㊶榪ㄸ푁యኣ탓呈ᾱ檚蘂嘿熩ƨ錞೸駹솒ﵱࠌ躮沄腾и蔐গ壚㑸윈ᗇ㤌⭉쭩앚軬탾媨뇊瘴 [ 675.824796][ T9] usb 1-1: SerialNumber: 㥜詮覟烲楿屇ꀵ雸践戌찮띶╟㎟鼍끵ᰊ칦伱뗎⳷풤뚶भ䶍춢㻢ꥠ欻꘴녥峟譛蠡 [ 675.845760][ T5279] usb 4-1: config 0 descriptor?? [ 675.935252][ T5280] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 675.939106][ T5279] usb 4-1: MBOX3: Invalid descriptor size=18. [ 676.172580][ T5280] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 676.186547][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.201292][ T5280] usb 2-1: config 0 descriptor?? [ 676.210058][ T5280] cp210x 2-1:0.0: cp210x converter detected [ 676.263757][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 676.282668][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 676.321692][ T9] usb 1-1: USB disconnect, device number 101 [ 676.419708][ T5280] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 676.443462][ T5280] cp210x 2-1:0.0: querying part number failed [ 676.471360][ T5280] usb 2-1: cp210x converter now attached to ttyUSB0 [ 676.490295][T15684] dlm: non-version read from control device 0 [ 676.497773][ T5280] usb 2-1: USB disconnect, device number 120 [ 676.533451][ T5280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 676.557239][ T5279] usb 4-1: USB disconnect, device number 81 [ 676.566921][ T5280] cp210x 2-1:0.0: device disconnected [ 676.727588][T12465] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 676.738432][T12465] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12465, name: kworker/u9:1 [ 676.748024][T12465] preempt_count: 0, expected: 0 [ 676.753006][T12465] RCU nest depth: 1, expected: 0 [ 676.758401][T12465] 4 locks held by kworker/u9:1/12465: [ 676.765164][T12465] #0: ffff88807fd48148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 676.777790][T12465] #1: ffffc90009517d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 676.795202][T12465] #2: ffff88805dbe8078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 676.806323][T12465] #3: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 676.817845][T12465] CPU: 1 UID: 0 PID: 12465 Comm: kworker/u9:1 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 676.828893][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 676.839142][T12465] Workqueue: hci0 hci_rx_work [ 676.843913][T12465] Call Trace: [ 676.847181][T12465] [ 676.850124][T12465] dump_stack_lvl+0x241/0x360 [ 676.854815][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.860009][T12465] ? __pfx__printk+0x10/0x10 [ 676.864601][T12465] __might_resched+0x5d4/0x780 [ 676.869370][T12465] ? __mutex_lock+0x112/0xd70 [ 676.874038][T12465] ? __pfx___might_resched+0x10/0x10 [ 676.879344][T12465] __mutex_lock+0xc1/0xd70 [ 676.883769][T12465] ? __pfx_lock_acquire+0x10/0x10 [ 676.888792][T12465] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 676.895038][T12465] ? __pfx_lock_release+0x10/0x10 [ 676.900074][T12465] ? __pfx___mutex_lock+0x10/0x10 [ 676.905096][T12465] ? trace_contention_end+0x3c/0x120 [ 676.910376][T12465] ? skb_pull_data+0x112/0x230 [ 676.915138][T12465] ? hci_conn_set_handle+0x19a/0x270 [ 676.920428][T12465] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 676.926500][T12465] ? __copy_skb_header+0x437/0x5b0 [ 676.931784][T12465] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 676.937950][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 676.944534][T12465] ? hci_le_meta_evt+0x366/0x580 [ 676.949466][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 676.956057][T12465] hci_event_packet+0xa55/0x1540 [ 676.960995][T12465] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 676.966280][T12465] ? __pfx_hci_event_packet+0x10/0x10 [ 676.971642][T12465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 676.976927][T12465] ? hci_send_to_monitor+0xd8/0x7f0 [ 676.982127][T12465] ? kcov_remote_start+0x97/0x7d0 [ 676.987151][T12465] hci_rx_work+0x3e8/0xca0 [ 676.991569][T12465] ? process_scheduled_works+0x945/0x1830 [ 676.997288][T12465] process_scheduled_works+0xa2c/0x1830 [ 677.002854][T12465] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.009271][T12465] ? assign_work+0x364/0x3d0 [ 677.013863][T12465] worker_thread+0x86d/0xd40 [ 677.018457][T12465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.024442][T12465] ? __kthread_parkme+0x169/0x1d0 [ 677.029476][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.034589][T12465] kthread+0x2f0/0x390 [ 677.038655][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.043767][T12465] ? __pfx_kthread+0x10/0x10 [ 677.048354][T12465] ret_from_fork+0x4b/0x80 [ 677.052766][T12465] ? __pfx_kthread+0x10/0x10 [ 677.057356][T12465] ret_from_fork_asm+0x1a/0x30 [ 677.062130][T12465] [ 677.190825][T12465] [ 677.193170][T12465] ============================= [ 677.198022][T12465] [ BUG: Invalid wait context ] [ 677.202873][T12465] 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 Tainted: G W [ 677.211456][T12465] ----------------------------- [ 677.216295][T12465] kworker/u9:1/12465 is trying to lock: [ 677.221836][T12465] ffffffff8fdefee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x3d9/0xae0 [ 677.232456][T12465] other info that might help us debug this: [ 677.238347][T12465] context-{4:4} [ 677.241808][T12465] 4 locks held by kworker/u9:1/12465: [ 677.247175][T12465] #0: ffff88807fd48148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 677.258129][T12465] #1: ffffc90009517d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 677.270138][T12465] #2: ffff88805dbe8078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 677.280755][T12465] #3: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 677.291564][T12465] stack backtrace: [ 677.295287][T12465] CPU: 0 UID: 0 PID: 12465 Comm: kworker/u9:1 Tainted: G W 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 677.307692][T12465] Tainted: [W]=WARN [ 677.311488][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 677.321531][T12465] Workqueue: hci0 hci_rx_work [ 677.326219][T12465] Call Trace: [ 677.329498][T12465] [ 677.332480][T12465] dump_stack_lvl+0x241/0x360 [ 677.337170][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.342366][T12465] ? __pfx__printk+0x10/0x10 [ 677.347004][T12465] __lock_acquire+0x153b/0x2040 [ 677.351868][T12465] lock_acquire+0x1ed/0x550 [ 677.356539][T12465] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 677.362789][T12465] ? __pfx_lock_acquire+0x10/0x10 [ 677.367813][T12465] ? __mutex_lock+0x112/0xd70 [ 677.372487][T12465] ? __pfx___might_resched+0x10/0x10 [ 677.377776][T12465] __mutex_lock+0x136/0xd70 [ 677.382283][T12465] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 677.388622][T12465] ? __pfx_lock_acquire+0x10/0x10 [ 677.393649][T12465] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 677.399897][T12465] ? __pfx_lock_release+0x10/0x10 [ 677.404927][T12465] ? __pfx___mutex_lock+0x10/0x10 [ 677.409962][T12465] ? trace_contention_end+0x3c/0x120 [ 677.415267][T12465] ? skb_pull_data+0x112/0x230 [ 677.420044][T12465] ? hci_conn_set_handle+0x19a/0x270 [ 677.425339][T12465] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 677.431444][T12465] ? __copy_skb_header+0x437/0x5b0 [ 677.436554][T12465] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 677.442698][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 677.449294][T12465] ? hci_le_meta_evt+0x366/0x580 [ 677.454231][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 677.460863][T12465] hci_event_packet+0xa55/0x1540 [ 677.465815][T12465] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 677.471116][T12465] ? __pfx_hci_event_packet+0x10/0x10 [ 677.476489][T12465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 677.481713][T12465] ? hci_send_to_monitor+0xd8/0x7f0 [ 677.486923][T12465] ? kcov_remote_start+0x97/0x7d0 [ 677.491953][T12465] hci_rx_work+0x3e8/0xca0 [ 677.496364][T12465] ? process_scheduled_works+0x945/0x1830 [ 677.502078][T12465] process_scheduled_works+0xa2c/0x1830 [ 677.507643][T12465] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.513635][T12465] ? assign_work+0x364/0x3d0 [ 677.518223][T12465] worker_thread+0x86d/0xd40 [ 677.522820][T12465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.528707][T12465] ? __kthread_parkme+0x169/0x1d0 [ 677.533727][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.538839][T12465] kthread+0x2f0/0x390 [ 677.542916][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.548019][T12465] ? __pfx_kthread+0x10/0x10 [ 677.552613][T12465] ret_from_fork+0x4b/0x80 [ 677.557030][T12465] ? __pfx_kthread+0x10/0x10 [ 677.561611][T12465] ret_from_fork_asm+0x1a/0x30 [ 677.566401][T12465] [ 677.685972][T12465] ================================================================== [ 677.694067][T12465] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0x383/0xae0 [ 677.703080][T12465] Read of size 8 at addr ffff88806c1e8000 by task kworker/u9:1/12465 [ 677.711121][T12465] [ 677.713450][T12465] CPU: 1 UID: 0 PID: 12465 Comm: kworker/u9:1 Tainted: G W 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 677.725875][T12465] Tainted: [W]=WARN [ 677.729743][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 677.739829][T12465] Workqueue: hci0 hci_rx_work [ 677.744521][T12465] Call Trace: [ 677.747790][T12465] [ 677.750712][T12465] dump_stack_lvl+0x241/0x360 [ 677.755385][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.760586][T12465] ? __pfx__printk+0x10/0x10 [ 677.765161][T12465] ? _printk+0xd5/0x120 [ 677.769301][T12465] ? __virt_addr_valid+0x183/0x530 [ 677.774389][T12465] ? __virt_addr_valid+0x183/0x530 [ 677.779485][T12465] print_report+0x169/0x550 [ 677.783972][T12465] ? __virt_addr_valid+0x183/0x530 [ 677.789065][T12465] ? __virt_addr_valid+0x183/0x530 [ 677.794155][T12465] ? __virt_addr_valid+0x45f/0x530 [ 677.799262][T12465] ? __phys_addr+0xba/0x170 [ 677.803742][T12465] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 677.809968][T12465] kasan_report+0x143/0x180 [ 677.814464][T12465] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 677.820713][T12465] hci_le_create_big_complete_evt+0x383/0xae0 [ 677.826853][T12465] ? __copy_skb_header+0x437/0x5b0 [ 677.831948][T12465] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 677.838087][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 677.844678][T12465] ? hci_le_meta_evt+0x366/0x580 [ 677.849597][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 677.856190][T12465] hci_event_packet+0xa55/0x1540 [ 677.861110][T12465] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 677.866487][T12465] ? __pfx_hci_event_packet+0x10/0x10 [ 677.871842][T12465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 677.877022][T12465] ? hci_send_to_monitor+0xd8/0x7f0 [ 677.882201][T12465] ? kcov_remote_start+0x97/0x7d0 [ 677.887238][T12465] hci_rx_work+0x3e8/0xca0 [ 677.891640][T12465] ? process_scheduled_works+0x945/0x1830 [ 677.897350][T12465] process_scheduled_works+0xa2c/0x1830 [ 677.902884][T12465] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.908849][T12465] ? assign_work+0x364/0x3d0 [ 677.913447][T12465] worker_thread+0x86d/0xd40 [ 677.918117][T12465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.923997][T12465] ? __kthread_parkme+0x169/0x1d0 [ 677.929004][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.934095][T12465] kthread+0x2f0/0x390 [ 677.938157][T12465] ? __pfx_worker_thread+0x10/0x10 [ 677.943253][T12465] ? __pfx_kthread+0x10/0x10 [ 677.947827][T12465] ret_from_fork+0x4b/0x80 [ 677.952223][T12465] ? __pfx_kthread+0x10/0x10 [ 677.956794][T12465] ret_from_fork_asm+0x1a/0x30 [ 677.961545][T12465] [ 677.964566][T12465] [ 677.966967][T12465] Allocated by task 12465: [ 677.971356][T12465] kasan_save_track+0x3f/0x80 [ 677.976041][T12465] __kasan_kmalloc+0x98/0xb0 [ 677.980613][T12465] __kmalloc_cache_noprof+0x19c/0x2c0 [ 677.985965][T12465] __hci_conn_add+0x2f9/0x1850 [ 677.990717][T12465] hci_le_big_sync_established_evt+0x414/0xc20 [ 677.996854][T12465] hci_event_packet+0xa55/0x1540 [ 678.001770][T12465] hci_rx_work+0x3e8/0xca0 [ 678.006163][T12465] process_scheduled_works+0xa2c/0x1830 [ 678.011688][T12465] worker_thread+0x86d/0xd40 [ 678.016256][T12465] kthread+0x2f0/0x390 [ 678.020311][T12465] ret_from_fork+0x4b/0x80 [ 678.024712][T12465] ret_from_fork_asm+0x1a/0x30 [ 678.029546][T12465] [ 678.031847][T12465] Freed by task 12465: [ 678.035899][T12465] kasan_save_track+0x3f/0x80 [ 678.040579][T12465] kasan_save_free_info+0x40/0x50 [ 678.045607][T12465] poison_slab_object+0xe0/0x150 [ 678.050528][T12465] __kasan_slab_free+0x37/0x60 [ 678.055273][T12465] kfree+0x149/0x360 [ 678.059160][T12465] device_release+0x99/0x1c0 [ 678.063750][T12465] kobject_put+0x22f/0x480 [ 678.068143][T12465] hci_conn_del+0x8c4/0xc40 [ 678.072644][T12465] hci_le_create_big_complete_evt+0x619/0xae0 [ 678.078692][T12465] hci_event_packet+0xa55/0x1540 [ 678.083621][T12465] hci_rx_work+0x3e8/0xca0 [ 678.088018][T12465] process_scheduled_works+0xa2c/0x1830 [ 678.093544][T12465] worker_thread+0x86d/0xd40 [ 678.098143][T12465] kthread+0x2f0/0x390 [ 678.102221][T12465] ret_from_fork+0x4b/0x80 [ 678.107053][T12465] ret_from_fork_asm+0x1a/0x30 [ 678.111796][T12465] [ 678.114095][T12465] The buggy address belongs to the object at ffff88806c1e8000 [ 678.114095][T12465] which belongs to the cache kmalloc-8k of size 8192 [ 678.128146][T12465] The buggy address is located 0 bytes inside of [ 678.128146][T12465] freed 8192-byte region [ffff88806c1e8000, ffff88806c1ea000) [ 678.141840][T12465] [ 678.144146][T12465] The buggy address belongs to the physical page: [ 678.150543][T12465] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c1e8 [ 678.159378][T12465] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 678.167947][T12465] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 678.175901][T12465] page_type: 0xfdffffff(slab) [ 678.180561][T12465] raw: 00fff00000000040 ffff888015842280 0000000000000000 dead000000000001 [ 678.189125][T12465] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 678.197688][T12465] head: 00fff00000000040 ffff888015842280 0000000000000000 dead000000000001 [ 678.206334][T12465] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 678.214999][T12465] head: 00fff00000000003 ffffea0001b07a01 ffffffffffffffff 0000000000000000 [ 678.223663][T12465] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 678.232312][T12465] page dumped because: kasan: bad access detected [ 678.238712][T12465] page_owner tracks the page as allocated [ 678.244408][T12465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5282, tgid 5282 (kworker/1:6), ts 644512581015, free_ts 644508281563 [ 678.267308][T12465] post_alloc_hook+0x1f3/0x230 [ 678.272057][T12465] get_page_from_freelist+0x2e4c/0x2f10 [ 678.277582][T12465] __alloc_pages_noprof+0x256/0x6c0 [ 678.282760][T12465] alloc_slab_page+0x5f/0x120 [ 678.287421][T12465] allocate_slab+0x5a/0x2f0 [ 678.291904][T12465] ___slab_alloc+0xcd1/0x14b0 [ 678.296645][T12465] __slab_alloc+0x58/0xa0 [ 678.300958][T12465] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 678.306306][T12465] snd_mixer_oss_notify_handler+0x16a/0xfa0 [ 678.312193][T12465] snd_card_register+0x529/0x6c0 [ 678.317131][T12465] try_to_register_card+0x2f9/0x3d0 [ 678.322345][T12465] usb_audio_probe+0x16f2/0x2100 [ 678.327268][T12465] usb_probe_interface+0x645/0xbb0 [ 678.332361][T12465] really_probe+0x2b8/0xad0 [ 678.336869][T12465] __driver_probe_device+0x1a2/0x390 [ 678.342220][T12465] driver_probe_device+0x50/0x430 [ 678.347221][T12465] page last free pid 15082 tgid 15080 stack trace: [ 678.353697][T12465] free_unref_page+0xd22/0xea0 [ 678.358448][T12465] __put_partials+0xeb/0x130 [ 678.363017][T12465] put_cpu_partial+0x17c/0x250 [ 678.367761][T12465] __slab_free+0x2ea/0x3d0 [ 678.372179][T12465] qlist_free_all+0x9e/0x140 [ 678.376756][T12465] kasan_quarantine_reduce+0x14f/0x170 [ 678.382196][T12465] __kasan_slab_alloc+0x23/0x80 [ 678.387031][T12465] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 678.392818][T12465] sock_alloc_inode+0x28/0xc0 [ 678.397478][T12465] new_inode_pseudo+0x69/0x1a0 [ 678.402229][T12465] __sock_create+0x123/0x920 [ 678.406806][T12465] __sys_socket+0x150/0x3c0 [ 678.411293][T12465] __x64_sys_socket+0x7a/0x90 [ 678.415947][T12465] do_syscall_64+0xf3/0x230 [ 678.420426][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.426301][T12465] [ 678.428598][T12465] Memory state around the buggy address: [ 678.434203][T12465] ffff88806c1e7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 678.442240][T12465] ffff88806c1e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 678.450280][T12465] >ffff88806c1e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.458400][T12465] ^ [ 678.462443][T12465] ffff88806c1e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.470479][T12465] ffff88806c1e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.478516][T12465] ================================================================== [ 678.507328][T12465] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 678.514554][T12465] CPU: 1 UID: 0 PID: 12465 Comm: kworker/u9:1 Tainted: G W 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 678.526971][T12465] Tainted: [W]=WARN [ 678.530776][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 678.540847][T12465] Workqueue: hci0 hci_rx_work [ 678.545536][T12465] Call Trace: [ 678.548830][T12465] [ 678.551751][T12465] dump_stack_lvl+0x241/0x360 [ 678.556427][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.561618][T12465] ? __pfx__printk+0x10/0x10 [ 678.566202][T12465] ? rcu_is_watching+0x15/0xb0 [ 678.570961][T12465] ? preempt_schedule+0xe1/0xf0 [ 678.575809][T12465] ? vscnprintf+0x5d/0x90 [ 678.580231][T12465] panic+0x349/0x860 [ 678.584132][T12465] ? check_panic_on_warn+0x21/0xb0 [ 678.589244][T12465] ? __pfx_panic+0x10/0x10 [ 678.593669][T12465] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 678.599653][T12465] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 678.605975][T12465] ? print_report+0x502/0x550 [ 678.610648][T12465] check_panic_on_warn+0x86/0xb0 [ 678.615576][T12465] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 678.621806][T12465] end_report+0x77/0x160 [ 678.626044][T12465] kasan_report+0x154/0x180 [ 678.630541][T12465] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 678.636779][T12465] hci_le_create_big_complete_evt+0x383/0xae0 [ 678.642840][T12465] ? __copy_skb_header+0x437/0x5b0 [ 678.647945][T12465] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 678.654091][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 678.660675][T12465] ? hci_le_meta_evt+0x366/0x580 [ 678.665698][T12465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 678.672281][T12465] hci_event_packet+0xa55/0x1540 [ 678.677216][T12465] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 678.682495][T12465] ? __pfx_hci_event_packet+0x10/0x10 [ 678.687856][T12465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 678.693045][T12465] ? hci_send_to_monitor+0xd8/0x7f0 [ 678.698241][T12465] ? kcov_remote_start+0x97/0x7d0 [ 678.703258][T12465] hci_rx_work+0x3e8/0xca0 [ 678.707682][T12465] ? process_scheduled_works+0x945/0x1830 [ 678.713402][T12465] process_scheduled_works+0xa2c/0x1830 [ 678.718963][T12465] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.724957][T12465] ? assign_work+0x364/0x3d0 [ 678.729563][T12465] worker_thread+0x86d/0xd40 [ 678.734152][T12465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.740048][T12465] ? __kthread_parkme+0x169/0x1d0 [ 678.745094][T12465] ? __pfx_worker_thread+0x10/0x10 [ 678.750211][T12465] kthread+0x2f0/0x390 [ 678.754273][T12465] ? __pfx_worker_thread+0x10/0x10 [ 678.759378][T12465] ? __pfx_kthread+0x10/0x10 [ 678.763962][T12465] ret_from_fork+0x4b/0x80 [ 678.768376][T12465] ? __pfx_kthread+0x10/0x10 [ 678.772958][T12465] ret_from_fork_asm+0x1a/0x30 [ 678.777720][T12465] [ 678.780998][T12465] Kernel Offset: disabled [ 678.785307][T12465] Rebooting in 86400 seconds..