last executing test programs: 1m15.722709408s ago: executing program 3 (id=645): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0xc008aec1, &(0x7f0000000200)=ANY=[]) (fail_nth: 3) 52.850568897s ago: executing program 1 (id=706): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/29, 0x1d) getdents64(r0, &(0x7f0000000140)=""/104, 0x68) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800800030004000000050006"], 0x4c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}}, 0x0) 51.380299248s ago: executing program 1 (id=708): syz_usb_connect$cdc_ncm(0x3, 0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902880002010120070904000001020d0000042406"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) 49.192660374s ago: executing program 1 (id=711): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7fffffff, 0x101, 0x1, 0x3, 0xffffffffffffa578, 0x107ff, 0xc2b, 0x6, 0x1, 0x6, 0x400000, 0x0, 0xbf, 0x0, 0xa, 0x22, {0x2, 0x3d9}, 0x1, 0x4}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000880)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f00000001c0)={0x3, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 48.342635454s ago: executing program 3 (id=648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5, 0x0, 0x80000000000000}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}, 0xfdff}, 0x19) 48.035082887s ago: executing program 3 (id=713): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x34e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000004000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0xe, 0x7, "b8a3e100908f6164000000fc00000000000000000000ff0bc0fe00000000008879e66474201a0015ca83747357e0274500040000000000"}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000380)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x90) 47.080099652s ago: executing program 3 (id=717): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000019dc15d88000000000000000000"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000740)={&(0x7f0000000500), 0x18, &(0x7f0000000700)={&(0x7f0000000600)='U', 0x1}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000440)=""/153, 0x99}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x27, 0x0, 0x1000, 0x2000}}, 0x50) r6 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r6, 0x9) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) 46.99293838s ago: executing program 1 (id=718): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2b, 0x25dfdbff, 0x6, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c041}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0xa0, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_LTF={0xfffffd79}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}]}, 0xa0}}, 0x0) 45.706444228s ago: executing program 3 (id=721): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000086a05ec0000000000000109022400010000000d0904000001030000007429683a2e5f12ac092100000701debd645b058103080000000075b6cf9a93ffb3f9194614b8ec0a6bfbaa92e53a7770ac29f308d011b2aa38473162708f71410bcb08154389cc182ba7c64bd65dba4867b77693fb66786ac4d6b8dad24a6050ccb6809a6912e95e69d52f6e4420e78e6859a12039bdc71334b756cdbdd5ab4c9fd5974dd06273ddddaac678d58bef793ae9fb70a245f36a06a5d0a6b781ed0c72c1a0662e4d528bd334b783fcab5cfb3eba27dc5c77bce2e10c960607b6e77d725c43431183a02d2b10b85f8e9161c5ee26cb1fa7d3db1b9011c8497005a9c0bb5a434b5ecba15b18a0ef18cb7709b05a2a330322c382acd548d0daf5968f2ae01fd5163f782eb801cfb1b5ae2eeddfb6791b4877791cc359cd3362fc143287d824f1881f5a6aed9d1a712bb124a9a9bf2677da92cd630320638bf0b9e5f175b30c0941c88979dd2ca10fcdce1d99617f891d2107f83b59a03572caeeb490f736d42c88889137658dff9fccf6a36d9274bfee1a81aec26d48"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000005180)=""/102396, 0x18ffc}, {&(0x7f0000000140)=""/156, 0x9c}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x64ae, &(0x7f0000000580)={0x0, 0xc229, 0x80, 0xfffffffd, 0x35f}, 0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000200)=0xfffffffc, 0x0, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00), 0x428, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket(0x28, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') pread64(r4, &(0x7f0000004180)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00006b8000/0x2000)=nil, 0x2000, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x1f, &(0x7f0000000000), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 45.564657062s ago: executing program 1 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{{}, {0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1}}], 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3418000006000000000000000000000400000b000000000000002f6465762f6877726e670000"], 0x34) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001880)=""/102400, 0x19000}], 0x1, 0x0, 0x90c536e) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getpid() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x10000000000000, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000ffffffffffffff960000000800", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c00"], 0x34}}, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8901) move_mount(r7, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(r6, &(0x7f000001c8c0)={0x2020}, 0x160e) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0xa400, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000000100)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) 44.948666164s ago: executing program 3 (id=725): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast2, @private0, [], [], 'batadv_slave_1\x00', 'syz_tun\x00'}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@hbh={{0x48}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmmsg$alg(r6, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb061c94084050d49b5f9dc271450ebc85f9479e56e3800f", 0x28}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x1c8, 0x1c8, 0x1c8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@private, @loopback, 0x40000, 0x0, 'vlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfc}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 42.673710559s ago: executing program 1 (id=727): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000140)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, "ddebca56255fbf7f048955f6f876b2ff"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}, 0x0, 0x2400}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc048aeca, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x1) 27.918449381s ago: executing program 4 (id=749): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x64045010) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffff}, {0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x5f7], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 27.545688074s ago: executing program 4 (id=751): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r3 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.844629936s ago: executing program 2 (id=766): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x31) 16.80082202s ago: executing program 4 (id=767): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e23, @loopback}}) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1080) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1407, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000002c0)="57a97567af92e3add0b1033add6a331ba8e25dbe7ec6f1dfa64899580bc5cacfdaac43b553502bf783a958a305ea69f9c13d712e1b05f2a987fc143702c3ef567342636db2d8bd57fb6931f3acf5d519a3c5fe9ade1e0bfd00865b0e7a9caaf738d2f1c2b839c8f3344db92c051fb496") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r8 = fcntl$dupfd(r2, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7fff, 0x2a, &(0x7f0000000480)=""/42, 0x41100, 0xb, '\x00', r6, @sched_cls, r2, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x1, 0x10000}, 0x10, r7, r5, 0x3, &(0x7f0000000880)=[r5, r8, r1, r1], &(0x7f00000008c0)=[{0x5, 0x2, 0x8, 0x3}, {0x4, 0x4, 0x8, 0x18}, {0x1, 0x5, 0x4, 0x4}], 0x10, 0x7, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs2/binder1\x00', 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) r9 = syz_open_dev$hiddev(&(0x7f0000000b00), 0x0, 0x1c440) ioctl$HIDIOCGUSAGE(r9, 0xc018480b, &(0x7f0000000b40)={0x3, 0x200, 0x7, 0x80000000, 0x2, 0xe88}) r10 = accept$inet(r2, &(0x7f0000000b80)={0x2, 0x0, @multicast1}, &(0x7f0000000bc0)=0x10) sendto$inet(r10, &(0x7f0000000c00)="210ce7e8985547a98174a21014049b201c5e6a900583d31aba9062a3ec6d2b7c5539e4adbe66a484005f2dea130ad22a73b66d40a5d43fc05602fc460c693516aa88475aabb7ff4920ff6a185a74181abae26fe03241ca750bd9f83b080170acaaec8185595ba29720b134cfd416a5d03a93ae8b44df80e00cffe5630dead6407b094015053001b1dd377208e97eec4ff94c338d32ec1274f27cb3bf532a1a749dd39eb415591b584064b1d190ed68", 0xaf, 0x14040, &(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000d00)=0xfff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x88, 0x0, 0x710, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x13}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c83e1d080aad1aad2d1c85322f0492d5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d04142ccc345e39c4efba8d5caefd2d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "10dc26fe13a668398a6a6700796fe305"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4bd432a59d2fdab8f7af67468c4fbab8"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x88}, 0x1, 0x0, 0x0, 0x48010}, 0x40051) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='./file0\x00', 0x0, 0x10}, 0x18) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) r13 = dup(r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000fc0)='kmem_cache_free\x00', r13, 0x0, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000001280)={&(0x7f0000001040), 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x1b0, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_LABELS_MASK={0x24, 0x17, [0x32d2, 0xffffffff, 0x9, 0x80000001, 0x3, 0x7, 0xe, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd300000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f96}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xb4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x813a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2b5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x7fffffff, 0x2, 0x8, 0x25, 0x111]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8b}]}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r11, &(0x7f00000012c0)="3346ad63a555922cec46", 0xa, 0x4000, &(0x7f0000001300)={0x2, 0x4e22, @empty}, 0x10) 14.587542513s ago: executing program 2 (id=770): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) creat(&(0x7f0000000180)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x8000004, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5118) 14.58701077s ago: executing program 4 (id=771): syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000045}}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) r5 = socket$inet6(0xa, 0x3, 0x103) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0x7, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070c2abd7000ffdbdf2501000000000800000141000000140017000000100000000069623a7767200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0xff00) 14.582304391s ago: executing program 0 (id=772): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="74120000200000022bbd7000fedbdf251e00000059010e801c00850056b26580ee402b54d4a428f30b2980282f9c89a7b2fc7d3f08006d00", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32, @ANYBLOB="0c0020000400000000000000bfcf6f01d5078211567963daafd56d729d5892d35461c7eb14e5b5c077e20af53a5c78503952b9a8e5911c5a5edaba75f642e26b8210f7264c78e3e1889d6f205d357b60e2c1ade7554cb90d84b0d841fe7628b91039daa0869e1e3fbb502d05588e3c24fe0e4826cc38a92e06da5db2abfac5e291aff754dbcc97393f140155f5a5eb37f22b588d81216eb5b814899431b20e14d1747965d7edef88aa94ab40e3bdb797c5d0c0a4ab5201f2b1b520f89f8c22a79d1ab15294c801801764797d8b9b8d0563cea53f11e86b226f6f0cc75471ce5ecb9760d524d2c21a111e030f95a017ca204144aa894b61e3a888ceeb226508e6901c393753c12940f5bf14c6ab73c0001b170a90e4a7a4e55bb6c20c254972cd9fa1c8b1c99127565f00000001117e80a8580d6ce670431d65ee573747d0e04ad5a858e2f9d3b7a4b3fa1a85f27ce3419514561517578fe965f84fe0baf15fda19a3e29c9bdeffc99e0bca939b6eebdf6b46280a9df7b5e1cd9b7865da10aec655513a9cd1b0c83a8343a8accb716fd693272f8e6459ef9e321ededf52337ac86cb38389b56fcbb6989f58d08ca80843e7e66e1ac7962cfff0874d4844283de678009f581d730128f5aafca687361256f0cd1a1734ef41f2fa0df9b36c10a8f30e2fa02a658199d5bb66736f9bcb8f573d96f07a339065702491f96db3f36439c4f8b1f416876206d946a873ec9dd4af696b4993b9ef9e7fea814447a71a8b5aa0639a16036588843534ada7f241ca93c4d2c341bd8da10cdc8dc56b99ddb47c5b9593783ae426fc77ff724ca770cc816b7903480115ff3cfcdb82517d725ee77f55e4c616ec5f12fabb72b3ba6ac7cc4db6fc746ff03fc6b4b3f07f541351f6d4a6a3a15bd7496f8ab32c94bf38ea693b4c941d0853c1bf61d0bc8c8e540e9ff472964feb9ad45081f3ccc6349fed874d1d8cc5872c9784c6d17af8562ac748fe3714747356d250fefed073147cd26bec535e52041738e4b9a5a2518154ce4b9504ce6f0ddadb79e5256587358e7e5dab22b9355c1790ada72fdfd84689bb1802d242305ef048fd36f5519d1806f456ea7a18aa94a2a909a3f3f8fa08b49f54c6cee4c71e547ca3e2b82683589086aec9106f626b7433e74fcc9583ccc404e4a5e2d5d3d75ea46b2c1dd16ff4e53e9825e3637e9b9fec0d8d9439a99f68990c762a8ecaf474d5ff5713e61336241743433517f1eb605f2cb19c84247c4c911e2cf4012e72a00ece6e2ebcc70ee075f94ee11289119ef5af5ee1eb7365a082c011932e8ef1bff775b97c55af087295a3b44b87aea67b843949d1d486b7937a062a2fb927a386f5368f91651567420a338f2742b26c29379fec7664aa84c34227bc27ef2f03cc52bc2762526dc2f02a6173c49233c8fd780e98c405b8bbaf57eb112eac6fa427cd294cff006c814fcca2fe71ec0ac68af03885833d96c655ed6d568ad3361d96ca9fb4a09a7f311a0b8f22e0e619b7604776b1db6b9394008394dd693ad5e40449ef4dc23b304e5b1c417b955c08633dcec9fd258b8563581f0390d7d87906fda6c6533508264774170377c0be47b992f3c0819b5b8d2ec17eb8a6dd4c1b5774e494615e43766647df55f0ef36bebc13acea5b349956a5c25cd08ee15a4d6d389b6cafd02d92e43221ee3915dc30a3f0fbf4503cced322665914f899119d9b068d7ef5bb848ff17e5fc7bd27a32917e34daae98010b929b838ded932c89d89b599c152180b23e36f2d7d735145f782c58cb38ce4efe0c1d0901fd409147ece9d4df902658a3957a836a4089df3349b3bac94fbc7f856974897cbda13e5606098dbee3655f7521298c1dac0b4ddd74e567a844556f11bd3ff66a194f050f3f392d92d9c1663a121125e2fb7979e97ec74b1f11f2c9b82b909741e13bec5bbf9ab3a04be4fc3a38c57af097da9816d1bb00749ba4c3010dbe6c9ded15c87dc9c3536d678a81fb41eb46f47c8163fb78f8a5b3360f7e2103b6a2c8437c6c30d1c617ed8072da48e3ce45b81b4f160f5ed5a452801e97acdfb7d3e9818c7e0d0a579f05308365004f739aa9d4a108afdfefa333f1b79e000db829c8bbcbe5615c926b1bcd8a6481f9a9eb186c0ecbbda3c7e65f7a33e8b71c4652f3f11a2df36b67a3a4630e293f7525674456a5bb7bbfa52d796cad6ec42cdd1ae61d3c2c597bb91723c2560dd5f99a17b26f21cc5518a9838c7659bff7b1555c07e02b0e3e0a4a012a2e797c4b30cfd61d966272419f06ba072f1a1ce1e5078fd705e630643bfba9efef01f981cd186ab728f00c98c45e9e4bf87fbe589f97ac5059350df9f03e650bcea54cb612be675ebbfb7753e3ce3ace7b2e43bb3b4a1484db102eb23bbd979a8f69c28316c57aba81994cf274aeb2a7cfe92b207e75be7eb588c6a66f29420995e090fc1411381b658d60e9963983971ef63c47ec575f1507a962be171e28e949e5fef4648bbd88d7bf37d132876110df072fcede2f66f3f671a3a2912d8eb14c8d1d06fa3e6546854edd28226b26e8a82feb5b55eac6b6cde7cf952c188d1cc524f65ddc02c996b8976ebdd7a083c5bbc36190618d1805559baba4e07235a8bdf70bfe3ea42d233cf47a766a630549f87d67885849c1c35e37aa5f3b73e65a2d77cdb26c6871d060e5297a27e6b4e99c6e8763065685186857561292521d81b147e4df821bb5485ba71272ef67e6b9512dc6f9e6192870adc10ab68d0161149fe15855dc613d1ffe4509ad7986dca98d5921ee23ae075be66df50c8d285efe9cbc1363f5f96656494dafa8617fadedae58e1aeaa70bf25312dfb3aacf996fb1190f17e33235bdb966ba4dbb6ccd16ef8c806f2bb074400f543e009974a74f193a950039d13d782331c81027845801ecfd429fccede27e6c3034be77fb170676c1d202adef0949b57d6879f74df4c7ec453350415f5db8562adf8bb5042cc415020455b4a5c95740411494f6cd6c1afdc96be183491981e4d6ae7e5ee0e07684821acecadcf8e187919b35a0468ed53078c4bea8f775e9f0c9d4e95233f1a773f9a3480fd1e18f43a24ac7ebc25ee83db614fa634de13957359e52cbcf0921522cd68f7b9cc36cee3100299cd4708902ebcd34d6d6c4842f62eb935991366cbbb86eafef68e65205bf2f6c95b2b74477e4b14b30b9249cf9b57479fd6d67b6c82fb0f045d11df6b10b881ef08e7c81219555c3cc857b826fbc52de0994e6750d8cb4b1db825c1c5aa423664b859f234daced9ce794b829d1b09c2e02bca4f260f60c04e1e06f98d7433fce21103488f6da8651c823e059c44ca84aebdadb89654c357998fc37eb3449a7f2b42b1539b587fff138aa1409bf5a7c3ea7cfb980e3ce9adb85699d82d6d2a930a5114f6af98338d02c774765bf038aeef628185a287fdea17ed591e17266b5b1645a6f4c64a913a961e05136e8fd5c99ce0e1ceac8ae75f7e4a62015089fdd04f8fc23a8a829a45c1418b9f85068d7f4e0da3913607ec6f3fa5ef3cb9281fa8d12c4e0d032a42e9e1458b96cd87a205991b68bd259f632a96cec0eaa566adca2707cd8fcc9a49e4f52d85828d2c1b6f0ef069fc580371bb28ae0567a66c0562976775f7f4a9faa96ecbbf81a8339f4ec38d07488ef0fe32cfc7dfa1dbeabaa2246fd9a7fd7ef10f7acecd2c2abb7f6ea9ebb80e6a105f16983fde199c07f9a63b7b8f0cb15e5bb612a0d3c473f734a41675b7a2e744a8738c37523383b876ba3c2ffd0a67e256e67c967e809b20b90202cbc17c62ccc85e5bf35c1fde2287c823bebef05a05bcf2001dc8ee70b52f26ab5901f844f68ffc74e2a389178fd9253673b291ab33490f940fe2804ecb71d3ce5d872a82bc3f76f380df9408aeb9d773a6faf6a8c243c6feb7048e394666b4cc0036c54c9d5ec3d6ff6e8fd0f23420b1bf09fc9886df095f64e2565e0f4bca872799e2b299f341aec15444759d2eb53c45f90a2b04d6bf2894e6485dd5154afbbade31a37b94e9afed20efdd9b2a58a9fef15ec6da05a13e62119f3d23225a88fadb362ae88df56c8c9e284ce33d5e6781a3da17cf6c8beeefe7f5055135da3f89d2dfd57c99696e3862996ec63d996c6067fc8db61e76fcd7c9ef4e8d7b66e5f67f2309c8b294f473900c04cf1d9b13160440da0b21d4d09a08f86498b73685c17755551d6d4681c38c7c230b345a795cbcad40c4e5a37726334f8ecf43b392220bc0ce94e101563dd80fed695e8c24d34436c2b649323e67f72b94414d9949f53cad8e96ac6bb457c51bb4a4918cfa73050d1fedd7f4d1ec12dd0fb6cbd111a38da6878fd64d53c16642e04bef9b4a496224654cdfc4832a50d94af30c7cc2efe73f020774166507c1af607d7de67749b7d15be665763f3b83fe778fa0c37412ac16ee29f49c6fff4cb705dafd5952568aa7c064dd8312e21f1b4458424c4ed18dfbdd997a9529e4479e611ac3cd41a571d789c025f8352dba1add0e14f12663b8f6ed7be8ee3edc7995d9f93f9fc6bfae6c91fac82d53b1afcac7743db776db147e613921ba04aea3a5005e3ef2a204de28a3a0c37ff75598007367bf4ac0310fa3e1e94861ead959b6f805798fe39f3c63a3257b6da7d4be7320a66b6147e65fa6f38b1495359a87d54e1c197147f8f586a33b98ac798d3645d0d3db4ce60c6b5a039fda4ce785653a5ce8dbf244c44528d9c08f6a5d3641b50e622fade8d173e4d094b3d34552be697804ca8023bde68ff155de72dd69860ae5c72249f6be1f047eaaba3c759dbb54e0aba052727e1f44adbd3354015255aac651a57470ec393d31c3b67c44673684b8730d8e8247dba900b458a32a102ca5738655bf882fd715431eb9d5e5560d97b5f766cef027c28fc0f31d2740506ba6b8fc53b89aa1f5c9552ff034a9f1d9ecadf4d295492aa53c3dddb500a9fca3b90636287e7c84d4b3a54d1a31b859ff06d6a0f11bbb383d8d5a00503549a4c8a844736c6f8652b2363c55ca6fd137e0b3423e318e875c3729a2155ff53f4e92ec6e05529f42cf4e5a9410821a7006096941053e54a992b9ac2ee94351731ad4f409a09c6e24509513cdcac1e59835363f1e6cee44813d0846ab19d6f24b4c8e42bac59e1485505b65269dc192ca92753abf87441cbd0bcb2ee2469f9c28886acb1bac7cc206001496c4840a8715779545f6a5ecffcde3009e8a11884996a5408177b4efd06e7976edb084cabdaafbbf9d22f17cccf94ff1230ba894e9016954752756baead1ac4ea0b9c58f8d269d077181b655a60f1549b63e22a30316c91d1e34f0411176c72672d5a872eef4e18b04c3ca036a13ee5c6e83db454f5f7264cc14eba2178f643f1af942fe9f01b33a92a17403331f24bf443104832e1180f2a8377ff5b8599bcaa852d3df6493d2e3933a9cf7f49420e7f1fb5790797018067cc1005ffe85a9469b85674b2e3adcd1dcf983307ffd50c44849392869ba56a856d589ce363ad0d40bc1bfbf1c9cc311dc6ec446e60d8ad70e90cf4a3b2000d8561e9ac43a291855cebecc9387219dc2c7a3e7aec1864b38fe5753ee67bd572ca3a81653d5c141c7e1334de4dd9c551ec8864245038e450978439f0798273106a554453b637b08447fddb5e50a76ccce4520c7b93d58e0e0ec6ded2980ef7c47cdc3273ad69248528b89e4aef77a5d4dc591427ed369427027272e5b9d0f1196fe8b29799b99fb03af8d3db12aa56d1a2ac37bbaa24f41e4001e166a4eef7d69f39ef52cade504fe147421393d1ffb6d90ad0a153ed2fed7f87617e47951478be9d9530b648978d49d3f159958d36f1eed2dc21c0b36b326a0abe5ac94c30375164065e2c6d2af96f0ae039909a1ab19ea950718459271fa861121b4ee5b2faf7fd1b15389a55bd56b2f12e9ba31297a295b4cff7dccd2b484a8021e06920681cc784045c3122b6ef6c92939869ce3964b00866ad502c988730b1a40201a2aa7c98e2456ca63e9aa30060531d23a9c7bb63ca861f87f363726b67d520d92e187e9e1ad99bf3d7d87b56078743ef874c24e73b016f8b992d6ecad122e35acbadec58a7112dd4ce03030bbf1ec0698ceaeb9fff7f672db8b2e0f481216c29409d231718e569c4e8df29dc59da380dbf6eeeba9f4ab3bb33ecb2c3717244ff62d19a280ee2b9bf5f971ada0e906d96aec4c5fa3e2d5e758787464e8cb383b23d8dfe99b7f65de2fe39a84be480da6168a5398f1eb81f3c7f52121ba9a9443416a8acf71e16d1a5d59f08648c14ec2da1cc9b5f7ba9d5dc0c2cf9c59d247a64b29bb4b7517137e49ebf32058d363d37b5fa8c04323e663a82ff192f3ed454a6bd4cecca5a5d6c55a32ba26dce33bf7069dd51a64453ae83aff504051e312f29a5100e28b00d504f5e359f4739b65a93bc1906f1ffa767bdf095ee0219625186a64c785e84a81741a2a81efca9acb836507cf84a112465873cfb39a03379f64030f2b6b718b200b0bc53d2c9d8f624f03092abbbf7d3f7a508aff2e830d23c4b212d4db3d7415ba4510d07006b00408c0000000000"], 0x1274}, 0x1, 0x0, 0x0, 0x4}, 0x44001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x700, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$unix(0x1, 0x2, 0x0) syz_io_uring_setup(0xa91, &(0x7f0000000340), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x108, &(0x7f0000000040)=0x1e13, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) pread64(r4, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 13.235491539s ago: executing program 0 (id=773): syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c000000) 12.317170431s ago: executing program 2 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x15, &(0x7f0000000140)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1}}], 0x1, 0x40002002, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 12.31515203s ago: executing program 4 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) write(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_buf(r6, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0xf}, {0x12, 0x9}, {0x0, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) 9.752324531s ago: executing program 2 (id=776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000001c0)}], 0x8, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) sendmmsg$inet6(r4, &(0x7f0000007b80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x7b, &(0x7f0000000880)}}], 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r5, &(0x7f0000000840)=[{0x0}, {&(0x7f00000007c0)=""/117, 0x48}], 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.567085768s ago: executing program 0 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x20, 0x0, 0x400}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r3, 0x0, 0xfdef, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000240)=[{0x2, 0x7fff}], 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00') getdents(r2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) semop(0x0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000080)) 7.403276318s ago: executing program 4 (id=778): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) ioctl$TIOCSETD(r1, 0x5423, 0x0) epoll_create(0x47f) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x3, 0x80000001, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x1f, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd000000000000000081", 0x0, 0x15d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="2ef30f9c451c660f38202ef44f660f38804099b800018ec0ff59f066b9800000c00f326635001000000f3066b96c0a000066b80000000066ba000000800f30d3ca0fc71c6467670f01c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r7, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/46, 0x2e}], 0x2, 0xc6, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff) 6.188769177s ago: executing program 0 (id=779): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x31) 5.078523216s ago: executing program 2 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001fffffff500000000000000000a20000000010a03000000000000000000070000000900010073797a30000000003c000000090a010480000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001a0a05010000000000000000070000000900020073797a3100000000090001"], 0xc0}}, 0x0) 2.837224011s ago: executing program 0 (id=781): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff0a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3074, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x38, r5, 0x436ef9a9e9e5d58f, 0x0, 0xfffffffb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000080)=0xf, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') 1.410265036s ago: executing program 2 (id=782): syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000001280)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109028100030109d0030904000000010100000a24010a00be0201020c240200080202080400010009040100000101010102000007199b05070210090501090004032e810725010004064009040200000102000009040201010102000008240203010102f10724013b0602"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0xddb0570830f10b23, 0x300) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000055c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5452, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300"], 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x9}, 0x8) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000020000010200"], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) keyctl$setperm(0x5, 0x0, 0x8000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @private2, 0xffffffa0}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4}], 0x38) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xffffffffffffd518, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xf}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x122}]}}]}, 0x54}}, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x8031, r9, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') 0s ago: executing program 0 (id=783): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=0x0], 0x6) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x20, 0x0, [{0x2, 0xb, "34a6caf58db76931cc"}, {0x0, 0xf, "e39335900f115624170e15dad0"}]}, @noop]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100d4483000000000000001901000037"], 0x10}, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000003c0)={{r5}, 0x0, 0x10, @inherit={0x58, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000002000000000000007109000000000000070000000000000005000000000000000f00000080000000ff000000000100000056000000000000000200000000000000020000000000000007000000000000"]}, @name="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="07000000050000000700000080000000000000002e187d258c19e4b5a942628841abdc4aa7e37427473ecb4751216406dd6fa328f1a3bc2e1b224b9aba4629ca2cea9e74b911abb253397657d720a6896cfb75ddb68f5b5b5dbbb4cac9286705794948fabced8493977b9c3264e8f65095f66663d9041c7d1dd9066fd49a99be6b97d4b464bde7064634f9f36324801f4c39ff64ae0d1499f627a774a118414c58dcdeae8ba664200097d0c46d02e8079f3e97710bc38b51f35d", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRESHEX=r6, @ANYBLOB="05000000020000040500"/28], 0x50) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="1839000005000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000cc00000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703f41064455cc90d1400000d000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aea424ea80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffff0000deff0000000200", 0x53}], 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) kernel console output (not intermixed with test programs): strings: Mfr=0, Product=0, SerialNumber=0 [ 297.975830][ T9] usb 2-1: config 0 descriptor?? [ 298.219178][ T72] IPVS: stop unused estimator thread 0... [ 298.508174][ T7578] FAULT_INJECTION: forcing a failure. [ 298.508174][ T7578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.563050][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.2.412 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 298.573682][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.583757][ T7578] Call Trace: [ 298.587041][ T7578] [ 298.589983][ T7578] dump_stack_lvl+0x241/0x360 [ 298.594674][ T7578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.599887][ T7578] ? __pfx__printk+0x10/0x10 [ 298.604515][ T7578] ? snprintf+0xda/0x120 [ 298.608775][ T7578] should_fail_ex+0x3b0/0x4e0 [ 298.613721][ T7578] _copy_to_user+0x2f/0xb0 [ 298.618152][ T7578] simple_read_from_buffer+0xca/0x150 [ 298.623537][ T7578] proc_fail_nth_read+0x1ec/0x260 [ 298.628574][ T7578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.634128][ T7578] ? rw_verify_area+0x520/0x6b0 [ 298.638989][ T7578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.644545][ T7578] vfs_read+0x204/0xbc0 [ 298.648714][ T7578] ? __pfx_lock_release+0x10/0x10 [ 298.653760][ T7578] ? __pfx_vfs_read+0x10/0x10 [ 298.658445][ T7578] ? __fget_files+0x29/0x470 [ 298.663049][ T7578] ? __fget_files+0x3f6/0x470 [ 298.667748][ T7578] ksys_read+0x1a0/0x2c0 [ 298.672194][ T7578] ? __pfx_ksys_read+0x10/0x10 [ 298.677059][ T7578] ? do_syscall_64+0x100/0x230 [ 298.681852][ T7578] ? do_syscall_64+0xb6/0x230 [ 298.686539][ T7578] do_syscall_64+0xf3/0x230 [ 298.691065][ T7578] ? clear_bhb_loop+0x35/0x90 [ 298.695763][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.701679][ T7578] RIP: 0033:0x7fcd42f7c93c [ 298.706107][ T7578] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 298.725729][ T7578] RSP: 002b:00007fcd43da3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.734155][ T7578] RAX: ffffffffffffffda RBX: 00007fcd43135f80 RCX: 00007fcd42f7c93c [ 298.742136][ T7578] RDX: 000000000000000f RSI: 00007fcd43da30a0 RDI: 0000000000000004 [ 298.750117][ T7578] RBP: 00007fcd43da3090 R08: 0000000000000000 R09: 0000000000000000 [ 298.758091][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.766067][ T7578] R13: 0000000000000000 R14: 00007fcd43135f80 R15: 00007fcd4325fa28 [ 298.774068][ T7578] [ 298.781525][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.961717][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.119975][ T7279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.174215][ T7279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.212626][ T7279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.402941][ T7279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.889988][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 300.089182][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.124811][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.146841][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.173399][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 229, changing to 11 [ 300.225723][ T7373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.246809][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 300.267598][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.281491][ T7373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.312266][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.319460][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.342041][ T7373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.346741][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.371781][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.378923][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.398377][ T7373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.487316][ T9] usb 1-1: config 0 descriptor?? [ 300.516109][ T7603] tipc: Started in network mode [ 300.538840][ T7603] tipc: Node identity 4, cluster identity 4711 [ 300.546372][ T7603] tipc: Node number set to 4 [ 300.628027][ T7604] sctp: [Deprecated]: syz.2.417 (pid 7604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.628027][ T7604] Use struct sctp_sack_info instead [ 300.698740][ T8] usb 2-1: USB disconnect, device number 44 [ 300.896340][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.919607][ T7607] usb usb7: usbfs: process 7607 (syz.1.418) did not claim interface 0 before use [ 300.984012][ T9] wacom 0003:056A:0116.000B: hidraw0: USB HID v0.05 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0 [ 301.187792][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.225660][ T7279] veth0_vlan: entered promiscuous mode [ 301.335841][ T7279] veth1_vlan: entered promiscuous mode [ 301.428944][ T29] audit: type=1326 audit(1726449550.612:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.2.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd42f7def9 code=0x0 [ 301.479242][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 301.573596][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.668794][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.675950][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.703386][ T7279] veth0_macvtap: entered promiscuous mode [ 301.724808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.731984][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.818648][ T7279] veth1_macvtap: entered promiscuous mode [ 301.872666][ T7373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.883956][ T7373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.973372][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.006483][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.023058][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.042845][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.096516][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.131889][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.160432][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.186354][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.209418][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.283018][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.311863][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.353711][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.437058][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.472637][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.493350][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.515706][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.532403][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.563847][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.626838][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 302.668998][ T7279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.717948][ T7279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.756875][ T7279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.780545][ T7279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.865482][ T7373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.877680][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 302.928060][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.950536][ T58] usb 1-1: USB disconnect, device number 26 [ 302.986345][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.042933][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.152393][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.205280][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.304451][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.321954][ T7373] veth0_vlan: entered promiscuous mode [ 303.350248][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.399438][ T9] usb 2-1: config 0 descriptor?? [ 303.587263][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.589955][ T7373] veth1_vlan: entered promiscuous mode [ 303.640243][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.806307][ T7643] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 303.854830][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 303.885977][ T7373] veth0_macvtap: entered promiscuous mode [ 303.886840][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 303.931093][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.032606][ T7373] veth1_macvtap: entered promiscuous mode [ 304.040649][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.071133][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.144380][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.189583][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.204868][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.236331][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 304.258848][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.272397][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x7 [ 304.288798][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.303206][ T9] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 304.338459][ T9] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 304.350323][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.395363][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.412697][ T9] microsoft 0003:045E:07DA.000C: no inputs found [ 304.436805][ T9] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 304.448100][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.525960][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.585197][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.609121][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.661282][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.673671][ T29] audit: type=1326 audit(1726449553.852:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.4.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x0 [ 304.687183][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.811776][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.831641][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.857836][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.893994][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.916362][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.962716][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.984136][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.997853][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.014973][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.028531][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.049031][ T5299] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 305.053864][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.109752][ T7373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.121917][ T7373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.161482][ T7373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.183208][ T7373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.240327][ T940] usb 2-1: USB disconnect, device number 45 [ 305.264683][ T5299] usb 5-1: device descriptor read/64, error -71 [ 305.517517][ T6341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.548113][ T6341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.615073][ T7670] Invalid logical block size (65535) [ 305.622696][ T5299] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 305.700417][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.732361][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.788055][ T5299] usb 5-1: device descriptor read/64, error -71 [ 305.883545][ T29] audit: type=1326 audit(1726449555.062:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x0 [ 305.950227][ T5299] usb usb5-port1: attempt power cycle [ 306.204796][ T7686] netlink: 'syz.3.374': attribute type 9 has an invalid length. [ 306.240098][ T7686] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.374'. [ 306.376974][ T5299] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 306.447614][ T5299] usb 5-1: device descriptor read/8, error -71 [ 306.577395][ T940] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 306.748934][ T5299] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 306.786822][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 306.807936][ T5299] usb 5-1: device descriptor read/8, error -71 [ 306.815483][ T940] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 306.857004][ T940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 306.881447][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.914845][ T940] usb 2-1: Product: syz [ 306.931671][ T940] usb 2-1: Manufacturer: syz [ 306.946565][ T940] usb 2-1: SerialNumber: syz [ 306.959702][ T5299] usb usb5-port1: unable to enumerate USB device [ 306.981853][ T7683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.240264][ T7703] dccp_invalid_packet: invalid packet type [ 307.257724][ T940] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 307.560331][ T5231] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 307.560543][ T5231] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 307.617780][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 307.736497][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 307.784565][ C1] usblp0: nonzero write bulk status received: -71 [ 307.836077][ T940] usb 2-1: USB disconnect, device number 46 [ 307.856168][ T940] usblp0: removed [ 309.046944][ T940] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 309.277253][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 309.305645][ T940] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.348639][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 309.391424][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.423174][ T940] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.437433][ T5281] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 309.457235][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.513971][ T940] usb 2-1: config 0 descriptor?? [ 309.522861][ T7768] xt_cgroup: invalid path, errno=-2 [ 309.542938][ T7751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.563623][ T940] hub 2-1:0.0: USB hub found [ 309.627510][ T5281] usb 5-1: device descriptor read/64, error -71 [ 309.798850][ T940] hub 2-1:0.0: 2 ports detected [ 309.931059][ T5281] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 309.949155][ T7768] vxcan1: entered promiscuous mode [ 310.117791][ T5281] usb 5-1: device descriptor read/64, error -71 [ 310.260106][ T5281] usb usb5-port1: attempt power cycle [ 310.721988][ T5281] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 310.769818][ T5281] usb 5-1: device descriptor read/8, error -71 [ 311.097120][ T5281] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 311.138910][ T5281] usb 5-1: device descriptor read/8, error -71 [ 311.167864][ T7798] dccp_v6_rcv: dropped packet with invalid checksum [ 311.220794][ T940] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 311.277325][ T5281] usb usb5-port1: unable to enumerate USB device [ 312.128807][ T940] hub 2-1:0.0: set hub depth failed [ 312.134507][ T46] usb 2-1: USB disconnect, device number 47 [ 312.551605][ T7823] netlink: 'syz.2.456': attribute type 11 has an invalid length. [ 312.565877][ T7823] netlink: 'syz.2.456': attribute type 11 has an invalid length. [ 312.592282][ T7823] netlink: 209800 bytes leftover after parsing attributes in process `syz.2.456'. [ 312.846803][ T46] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 313.159171][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.232874][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.257292][ T46] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.285496][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.303996][ T7835] ebt_limit: overflow, try lower: 570423552/2483027968 [ 313.345556][ T46] usb 5-1: config 0 descriptor?? [ 314.105488][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 314.151820][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 314.204240][ T46] usb 5-1: USB disconnect, device number 33 [ 314.251498][ T7852] FAULT_INJECTION: forcing a failure. [ 314.251498][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.278280][ T7852] CPU: 1 UID: 0 PID: 7852 Comm: syz.2.463 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 314.288911][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 314.298990][ T7852] Call Trace: [ 314.302285][ T7852] [ 314.305229][ T7852] dump_stack_lvl+0x241/0x360 [ 314.309928][ T7852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.315142][ T7852] ? __pfx__printk+0x10/0x10 [ 314.319742][ T7852] ? __pfx_lock_release+0x10/0x10 [ 314.324866][ T7852] ? __lock_acquire+0x137a/0x2040 [ 314.329924][ T7852] should_fail_ex+0x3b0/0x4e0 [ 314.334610][ T7852] _copy_from_user+0x2f/0xe0 [ 314.339213][ T7852] kstrtouint_from_user+0xc6/0x190 [ 314.344330][ T7852] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 314.350056][ T7852] ? __pfx_lock_acquire+0x10/0x10 [ 314.355105][ T7852] proc_fail_nth_write+0xaa/0x2d0 [ 314.360140][ T7852] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 314.366045][ T7852] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 314.371710][ T7852] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 314.377363][ T7852] vfs_write+0x2a2/0xc90 [ 314.381629][ T7852] ? __pfx_vfs_write+0x10/0x10 [ 314.386403][ T7852] ? __fget_files+0x29/0x470 [ 314.391008][ T7852] ? __fget_files+0x3f6/0x470 [ 314.395705][ T7852] ksys_write+0x1a0/0x2c0 [ 314.400046][ T7852] ? __pfx_ksys_write+0x10/0x10 [ 314.404906][ T7852] ? do_syscall_64+0x100/0x230 [ 314.409681][ T7852] ? do_syscall_64+0xb6/0x230 [ 314.414367][ T7852] do_syscall_64+0xf3/0x230 [ 314.418884][ T7852] ? clear_bhb_loop+0x35/0x90 [ 314.423577][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.429488][ T7852] RIP: 0033:0x7fcd42f7c9df [ 314.433910][ T7852] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 314.453523][ T7852] RSP: 002b:00007fcd43da3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 314.461947][ T7852] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd42f7c9df [ 314.469926][ T7852] RDX: 0000000000000001 RSI: 00007fcd43da30a0 RDI: 0000000000000005 [ 314.477907][ T7852] RBP: 00007fcd43da3090 R08: 0000000000000000 R09: 0000000000000000 [ 314.485968][ T7852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 314.493945][ T7852] R13: 0000000000000000 R14: 00007fcd43135f80 R15: 00007fcd4325fa28 [ 314.501937][ T7852] [ 314.776969][ T5227] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 314.840522][ T7859] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 314.966828][ T5227] usb 2-1: Using ep0 maxpacket: 32 [ 314.977170][ T46] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 314.999082][ T5227] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 315.016812][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.033197][ T5227] usb 2-1: Product: syz [ 315.046939][ T5227] usb 2-1: Manufacturer: syz [ 315.064788][ T5227] usb 2-1: SerialNumber: syz [ 315.093969][ T5227] usb 2-1: config 0 descriptor?? [ 315.110889][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 315.155448][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 315.210505][ T46] usb 5-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 315.227399][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.235596][ T46] usb 5-1: Product: syz [ 315.245382][ T46] usb 5-1: Manufacturer: syz [ 315.251562][ T46] usb 5-1: SerialNumber: syz [ 315.268973][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 315.291147][ T46] usb 5-1: config 0 descriptor?? [ 315.308978][ T46] usb 5-1: Found UVC 0.00 device syz (0408:4030) [ 315.339925][ T46] usb 5-1: No valid video chain found. [ 315.350976][ T7850] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 315.421343][ T46] usb 2-1: USB disconnect, device number 48 [ 315.521184][ T940] usb 5-1: USB disconnect, device number 34 [ 315.908136][ T5227] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.150995][ T5227] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 316.172321][ T5227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.218199][ T5227] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.304495][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.336359][ T5227] usb 4-1: SerialNumber: syz [ 316.374687][ T7872] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 316.578024][ T7872] batman_adv: batadv0: Adding interface: team0 [ 316.584225][ T7872] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.670123][ T7872] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 316.704512][ T5227] usb 4-1: 0:2 : does not exist [ 316.758029][ T5227] usb 4-1: unit 255 not found! [ 316.764944][ T7876] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 316.791367][ T5227] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 316.826909][ T7876] netlink: 2 bytes leftover after parsing attributes in process `syz.1.472'. [ 316.838817][ T46] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 316.863940][ T7876] team0: entered promiscuous mode [ 316.881017][ T5227] usb 4-1: USB disconnect, device number 19 [ 316.900314][ T7876] team_slave_0: entered promiscuous mode [ 316.941331][ T7876] team_slave_1: entered promiscuous mode [ 316.974602][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.028135][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.035085][ T7876] batman_adv: batadv0: Interface activated: team0 [ 317.107252][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 317.130605][ T7876] batman_adv: batadv0: Interface deactivated: team0 [ 317.133533][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.172885][ T7876] batman_adv: batadv0: Removing interface: team0 [ 317.251281][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 317.277695][ T7876] bridge0: port 3(team0) entered blocking state [ 317.289470][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 317.307877][ T46] usb 2-1: SerialNumber: syz [ 317.342184][ T7876] bridge0: port 3(team0) entered disabled state [ 317.363240][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.372228][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.388315][ T7876] team0: entered allmulticast mode [ 317.393560][ T46] usb 2-1: config 0 descriptor?? [ 317.402922][ T7876] team_slave_0: entered allmulticast mode [ 317.414961][ T7876] team_slave_1: entered allmulticast mode [ 317.443688][ T7876] bridge0: port 3(team0) entered blocking state [ 317.450090][ T7876] bridge0: port 3(team0) entered forwarding state [ 317.502339][ T46] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 317.542161][ T46] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 317.577561][ T46] usb 2-1: Failed to create links for entity 255 [ 317.600625][ T46] usb 2-1: Failed to register entities (-22). [ 317.755444][ T46] usb 2-1: USB disconnect, device number 49 [ 317.910567][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 318.531737][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.587266][ T5281] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 318.620200][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.787513][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 318.830371][ T5281] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 318.902419][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.933903][ T5281] usb 3-1: config 0 descriptor?? [ 318.982087][ T5281] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 320.271097][ T7923] netlink: 104 bytes leftover after parsing attributes in process `syz.4.490'. [ 320.767053][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.906767][ T5281] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 320.967115][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 320.977745][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.990138][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.030668][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 321.083045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.124495][ T9] usb 4-1: config 0 descriptor?? [ 321.211006][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.272745][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.493274][ T8] usb 3-1: USB disconnect, device number 29 [ 321.671185][ T9] logitech 0003:046D:CA03.000D: item fetching failed at offset 0/5 [ 321.749127][ T9] logitech 0003:046D:CA03.000D: parse failed [ 321.809742][ T7949] usb usb7: usbfs: process 7949 (syz.2.498) did not claim interface 0 before use [ 321.838248][ T9] logitech 0003:046D:CA03.000D: probe with driver logitech failed with error -22 [ 321.856560][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.958074][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.085887][ T7930] netlink: 188 bytes leftover after parsing attributes in process `syz.3.494'. [ 322.210704][ T7956] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.246892][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 322.266323][ T7930] netlink: 3 bytes leftover after parsing attributes in process `syz.3.494'. [ 322.278712][ T7930] 0X: renamed from caif0 [ 322.321063][ T5227] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 322.476440][ T7930] 0X: entered allmulticast mode [ 322.499339][ T7930] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 322.500376][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.546834][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 322.555867][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.565841][ T5227] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 322.581295][ T5227] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 322.594465][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 19, changing to 7 [ 322.623199][ T5227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 322.646478][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.686336][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.696538][ T5227] usb 5-1: Product: syz [ 322.711744][ T5227] usb 5-1: Manufacturer: syz [ 322.737541][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 322.743292][ T5227] usb 5-1: SerialNumber: syz [ 322.772365][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.805392][ T5227] usb 5-1: config 0 descriptor?? [ 322.835291][ T5227] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 322.851955][ T9] usb 2-1: config 0 descriptor?? [ 322.865430][ T5227] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 323.170513][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.186330][ T7967] random: crng reseeded on system resumption [ 323.205595][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.669381][ T5281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.722144][ T5281] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 323.754944][ T5281] usb 1-1: can't read configurations, error -71 [ 323.938182][ T58] usb 4-1: USB disconnect, device number 20 [ 324.162923][ T5227] usb 2-1: USB disconnect, device number 50 [ 324.171972][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.267465][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.547240][ T58] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 324.848382][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.891925][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.162903][ T7988] bridge0: port 3(team0) entered disabled state [ 325.169665][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.177647][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.568828][ T5277] usb 5-1: USB disconnect, device number 35 [ 325.588343][ T940] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 325.801810][ T7995] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 325.816721][ T940] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 325.855201][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.899299][ T940] usb 3-1: config 0 descriptor?? [ 325.942656][ T940] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 326.138205][ T8003] netlink: 'syz.4.515': attribute type 10 has an invalid length. [ 326.280274][ T8003] batman_adv: batadv0: Adding interface: team0 [ 326.305600][ T8003] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.335501][ T8003] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 326.374713][ T8007] netlink: 'syz.4.515': attribute type 10 has an invalid length. [ 326.405743][ T29] audit: type=1326 audit(1726449575.582:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 326.455715][ T8007] netlink: 2 bytes leftover after parsing attributes in process `syz.4.515'. [ 326.519672][ T8007] team0: entered promiscuous mode [ 326.530824][ T8007] team_slave_0: entered promiscuous mode [ 326.537682][ T29] audit: type=1326 audit(1726449575.582:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 326.579641][ T8007] team_slave_1: entered promiscuous mode [ 326.609498][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.617761][ T8007] batman_adv: batadv0: Interface activated: team0 [ 326.625342][ T8007] batman_adv: batadv0: Interface deactivated: team0 [ 326.633970][ T8007] batman_adv: batadv0: Removing interface: team0 [ 326.650564][ T5281] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 326.672674][ T8007] bridge0: port 3(team0) entered blocking state [ 326.681217][ T8007] bridge0: port 3(team0) entered disabled state [ 326.691315][ T8007] team0: entered allmulticast mode [ 326.700115][ T8007] team_slave_0: entered allmulticast mode [ 326.705920][ T8007] team_slave_1: entered allmulticast mode [ 326.738566][ T8007] bridge0: port 3(team0) entered blocking state [ 326.745040][ T8007] bridge0: port 3(team0) entered forwarding state [ 326.756294][ T940] gp8psk: usb in 146 operation failed. [ 326.766307][ T29] audit: type=1326 audit(1726449575.612:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 326.771714][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 326.798124][ T940] gp8psk: failed to get FW version [ 326.819467][ T940] gp8psk: usb in 149 operation failed. [ 326.827512][ T940] gp8psk: failed to get FPGA version [ 326.854409][ T29] audit: type=1326 audit(1726449575.612:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 326.877565][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 326.883503][ T940] gp8psk: usb out operation failed. [ 326.923323][ T940] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.942966][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.983073][ T940] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 326.998679][ T5281] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 327.043042][ T29] audit: type=1326 audit(1726449575.612:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.043286][ T940] usb 3-1: USB disconnect, device number 30 [ 327.098252][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 327.125795][ T5281] usb 5-1: SerialNumber: syz [ 327.179664][ T5281] usb 5-1: config 0 descriptor?? [ 327.185872][ T29] audit: type=1326 audit(1726449575.612:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.250068][ T5281] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 327.277979][ T5281] usb 5-1: No valid video chain found. [ 327.312172][ T29] audit: type=1326 audit(1726449575.612:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.455742][ T29] audit: type=1326 audit(1726449575.612:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.566534][ T29] audit: type=1326 audit(1726449575.612:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.673706][ T29] audit: type=1326 audit(1726449575.612:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x7ffc0000 [ 327.703225][ T8017] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 327.792606][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 327.802582][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.833853][ T8017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.872372][ T58] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 327.904788][ T58] usb 4-1: can't read configurations, error -71 [ 327.990144][ T8019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.012959][ T8019] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 328.054249][ T8019] bond1: (slave vti0): Error -95 calling set_mac_address [ 328.953500][ T5299] usb 5-1: USB disconnect, device number 36 [ 328.997061][ T5281] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 329.176755][ T5281] usb 2-1: device descriptor read/64, error -71 [ 329.456818][ T5281] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 329.677352][ T5281] usb 2-1: device descriptor read/64, error -71 [ 329.849139][ T5281] usb usb2-port1: attempt power cycle [ 330.299260][ T5281] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 330.367502][ T5281] usb 2-1: device descriptor read/8, error -71 [ 330.686756][ T5281] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 330.756745][ T5281] usb 2-1: device descriptor read/8, error -71 [ 330.891348][ T5281] usb usb2-port1: unable to enumerate USB device [ 331.127456][ T940] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 331.307022][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 331.339309][ T940] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 331.357086][ T940] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 331.378130][ T940] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 331.423491][ T940] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 331.471256][ T940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.529721][ T940] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 331.558787][ T940] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 331.596199][ T940] usb 5-1: Product: syz [ 331.621121][ T940] usb 5-1: Manufacturer: syz [ 331.625753][ T940] usb 5-1: SerialNumber: syz [ 331.644018][ T940] usb 5-1: config 0 descriptor?? [ 331.695836][ T940] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 331.780827][ T940] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.904945][ T940] usb 5-1: USB disconnect, device number 37 [ 331.905002][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 331.988777][ T940] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 332.287179][ T5281] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 332.549125][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.603762][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.100579][ T5281] usb 2-1: unable to get BOS descriptor or descriptor too short [ 335.125446][ T5281] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 335.147476][ T5281] usb 2-1: can't read configurations, error -71 [ 335.464328][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.498469][ T8090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.524625][ T8091] fuse: Unknown parameter 'dont_appraise' [ 336.417289][ T5227] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 336.614711][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.631819][ T5227] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.663265][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.733970][ T5227] usb 5-1: config 0 descriptor?? [ 336.768727][ T5227] cp210x 5-1:0.0: cp210x converter detected [ 336.971655][ T8098] ptrace attach of "./syz-executor exec"[7279] was attempted by "./syz-executor exec"[8098] [ 337.110398][ T8104] binder_alloc: 8103: binder_install_single_page failed to insert page at offset 0 with -14 [ 337.252760][ T5227] usb 5-1: cp210x converter now attached to ttyUSB0 [ 337.780093][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 337.780112][ T29] audit: type=1326 audit(1726449586.962:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd0837def9 code=0x0 [ 338.477316][ T5231] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 338.486612][ T5231] Bluetooth: hci6: Injecting HCI hardware error event [ 338.495969][ T4622] Bluetooth: hci6: hardware error 0x00 [ 338.762445][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.776523][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.787173][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.796332][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.799657][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.810118][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.033748][ T46] usb 5-1: USB disconnect, device number 38 [ 339.044241][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 339.044606][ T46] cp210x 5-1:0.0: device disconnected [ 339.166891][ T5277] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 339.222683][ T1013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.357166][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 339.415487][ T5277] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 339.428061][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 339.471316][ T5277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 339.502607][ T1013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.514897][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.539976][ T5277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 339.588765][ T8144] netlink: 118872 bytes leftover after parsing attributes in process `syz.3.557'. [ 339.606788][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 339.652226][ T5277] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 339.696411][ T1013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.708203][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.725279][ T5277] usb 2-1: Product: syz [ 339.736186][ T5277] usb 2-1: Manufacturer: syz [ 339.763810][ T5277] usb 2-1: SerialNumber: syz [ 339.836929][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 339.838049][ T5277] usb 2-1: config 0 descriptor?? [ 339.846448][ T46] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 339.858659][ T46] usb 5-1: config 0 has no interface number 0 [ 339.871616][ T46] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 339.881578][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.890188][ T46] usb 5-1: Product: syz [ 339.895204][ T46] usb 5-1: Manufacturer: syz [ 339.900208][ T46] usb 5-1: SerialNumber: syz [ 339.911632][ T8134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.913921][ T46] usb 5-1: config 0 descriptor?? [ 339.931668][ T46] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 340.022303][ T1013] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 340.033635][ T1013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.108357][ T5277] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 340.125090][ T5277] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 340.262395][ T8] usb 5-1: USB disconnect, device number 39 [ 340.299100][ T8] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 340.447318][ T5277] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 340.564258][ T5277] usb 2-1: USB disconnect, device number 57 [ 340.637357][ T4622] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 340.649593][ T1013] bridge_slave_1: left allmulticast mode [ 340.673213][ T1013] bridge_slave_1: left promiscuous mode [ 340.698025][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.745259][ T1013] bridge_slave_0: left allmulticast mode [ 340.764815][ T1013] bridge_slave_0: left promiscuous mode [ 340.780120][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.877330][ T4622] Bluetooth: hci4: command tx timeout [ 341.357620][ T4622] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 341.368241][ T4622] Bluetooth: hci2: Injecting HCI hardware error event [ 341.378713][ T5236] Bluetooth: hci2: hardware error 0x00 [ 341.734199][ T29] audit: type=1326 audit(1726449590.912:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.3.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76d737def9 code=0x0 [ 342.569097][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.590637][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.610280][ T1013] bond0 (unregistering): Released all slaves [ 342.640963][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 342.673793][ T8155] bridge0: port 3(netdevsim0) entered blocking state [ 342.702001][ T8155] bridge0: port 3(netdevsim0) entered disabled state [ 342.713895][ T8155] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 342.743653][ T8155] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 342.763540][ T8155] bridge0: port 3(netdevsim0) entered blocking state [ 342.771317][ T8155] bridge0: port 3(netdevsim0) entered forwarding state [ 342.839274][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 342.866901][ T8175] netlink: 'syz.3.564': attribute type 16 has an invalid length. [ 342.917616][ T1013] tipc: Left network mode [ 342.960264][ T4622] Bluetooth: hci4: command tx timeout [ 343.144120][ T8182] dvmrp0: entered allmulticast mode [ 343.240481][ T8190] FAULT_INJECTION: forcing a failure. [ 343.240481][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 343.289913][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.4.567 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 343.300575][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 343.303943][ T8184] dvmrp1: entered allmulticast mode [ 343.310650][ T8190] Call Trace: [ 343.310700][ T8190] [ 343.310712][ T8190] dump_stack_lvl+0x241/0x360 [ 343.310748][ T8190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.310774][ T8190] ? __pfx__printk+0x10/0x10 [ 343.310804][ T8190] ? ref_tracker_alloc+0x332/0x490 [ 343.310836][ T8190] should_fail_ex+0x3b0/0x4e0 [ 343.310864][ T8190] ? skb_clone+0x20c/0x390 [ 343.351009][ T8190] should_failslab+0xac/0x100 [ 343.355744][ T8190] ? skb_clone+0x20c/0x390 [ 343.360293][ T8190] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 343.365725][ T8190] skb_clone+0x20c/0x390 [ 343.370015][ T8190] __netlink_deliver_tap+0x3cc/0x7c0 [ 343.375353][ T8190] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.380595][ T8190] netlink_deliver_tap+0x19d/0x1b0 [ 343.385856][ T8190] netlink_sendskb+0x68/0x140 [ 343.390679][ T8190] netlink_unicast+0x39d/0x990 [ 343.395579][ T8190] ? __asan_memcpy+0x40/0x70 [ 343.400225][ T8190] ? __pfx_netlink_unicast+0x10/0x10 [ 343.405662][ T8190] netlink_rcv_skb+0x262/0x430 [ 343.410563][ T8190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.415647][ T8190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.421075][ T8190] ? __netlink_deliver_tap+0x77e/0x7c0 [ 343.426575][ T8190] genl_rcv+0x28/0x40 [ 343.430585][ T8190] netlink_unicast+0x7f6/0x990 [ 343.435412][ T8190] ? __pfx_netlink_unicast+0x10/0x10 [ 343.440747][ T8190] ? __virt_addr_valid+0x183/0x530 [ 343.445897][ T8190] ? __check_object_size+0x49c/0x900 [ 343.452773][ T8190] ? bpf_lsm_netlink_send+0x9/0x10 [ 343.452826][ T8190] netlink_sendmsg+0x8e4/0xcb0 [ 343.452864][ T8190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.452890][ T8190] ? __import_iovec+0x536/0x820 [ 343.452917][ T8190] ? aa_sock_msg_perm+0x91/0x160 [ 343.452953][ T8190] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 343.453000][ T8190] ? security_socket_sendmsg+0x87/0xb0 [ 343.453035][ T8190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.453057][ T8190] __sock_sendmsg+0x221/0x270 [ 343.453097][ T8190] ____sys_sendmsg+0x525/0x7d0 [ 343.453139][ T8190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.453188][ T8190] __sys_sendmsg+0x2b0/0x3a0 [ 343.453223][ T8190] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.453251][ T8190] ? vfs_write+0x7c4/0xc90 [ 343.453327][ T8190] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.453363][ T8190] ? do_syscall_64+0x100/0x230 [ 343.453392][ T8190] ? do_syscall_64+0xb6/0x230 [ 343.453421][ T8190] do_syscall_64+0xf3/0x230 [ 343.453447][ T8190] ? clear_bhb_loop+0x35/0x90 [ 343.453481][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.453511][ T8190] RIP: 0033:0x7f95f217def9 [ 343.453533][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.453553][ T8190] RSP: 002b:00007f95f2fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.453580][ T8190] RAX: ffffffffffffffda RBX: 00007f95f2335f80 RCX: 00007f95f217def9 [ 343.453598][ T8190] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 343.453614][ T8190] RBP: 00007f95f2fee090 R08: 0000000000000000 R09: 0000000000000000 [ 343.453630][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.453646][ T8190] R13: 0000000000000000 R14: 00007f95f2335f80 R15: 00007f95f245fa28 [ 343.453694][ T8190] [ 343.483928][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 343.503718][ T8] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 343.741998][ T8] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 343.757101][ T46] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 343.778779][ T8] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 343.778855][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.778880][ T8] usb 2-1: Product: syz [ 343.778982][ T8] usb 2-1: Manufacturer: syz [ 343.779005][ T8] usb 2-1: SerialNumber: syz [ 343.781974][ T8] usb 2-1: config 0 descriptor?? [ 343.940143][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.949978][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.950185][ T8133] bridge_slave_0: entered allmulticast mode [ 343.953620][ T8133] bridge_slave_0: entered promiscuous mode [ 344.004600][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.004740][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.005007][ T8133] bridge_slave_1: entered allmulticast mode [ 344.009489][ T8133] bridge_slave_1: entered promiscuous mode [ 344.071313][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.075577][ T46] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 344.075622][ T46] usb 4-1: can't read configurations, error -71 [ 344.401111][ T5227] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 344.544746][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.554035][ T5227] usb 5-1: device descriptor read/64, error -71 [ 344.795163][ T1013] team0: left promiscuous mode [ 344.815996][ T1013] team_slave_0: left promiscuous mode [ 344.840527][ T1013] team_slave_1: left promiscuous mode [ 344.907271][ T5227] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 345.028822][ T1013] hsr_slave_0: left promiscuous mode [ 345.037351][ T5236] Bluetooth: hci4: command tx timeout [ 345.117441][ T1013] hsr_slave_1: left promiscuous mode [ 345.128334][ T5227] usb 5-1: device descriptor read/64, error -71 [ 345.198629][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.246854][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.290073][ T5227] usb usb5-port1: attempt power cycle [ 345.304064][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.396199][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.593169][ T1013] veth1_macvtap: left promiscuous mode [ 345.610536][ T1013] veth0_macvtap: left promiscuous mode [ 345.626600][ T1013] veth1_vlan: left promiscuous mode [ 345.636542][ T1013] veth0_vlan: left promiscuous mode [ 345.671470][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 345.703322][ T8] asix 2-1:0.0: probe with driver asix failed with error -71 [ 345.735180][ T8] usb 2-1: USB disconnect, device number 58 [ 345.746844][ T5227] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 345.818608][ T5227] usb 5-1: device descriptor read/8, error -71 [ 346.113443][ T5227] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 346.153700][ T5227] usb 5-1: device descriptor read/8, error -71 [ 346.288927][ T5227] usb usb5-port1: unable to enumerate USB device [ 346.585897][ T8222] libceph: resolve '0.0' (ret=-3): failed [ 347.117121][ T5236] Bluetooth: hci4: command tx timeout [ 347.158515][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 347.295655][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 348.439560][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.523980][ T8182] dvmrp0: left allmulticast mode [ 348.588220][ T8182] dvmrp1: left allmulticast mode [ 348.728636][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 348.775615][ T8235] bridge0: port 3(netdevsim0) entered disabled state [ 348.868134][ T8235] netlink: 108 bytes leftover after parsing attributes in process `syz.0.578'. [ 349.126408][ T8133] team0: Port device team_slave_0 added [ 349.290355][ T8133] team0: Port device team_slave_1 added [ 349.336966][ T5281] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 349.452727][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.470466][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.546955][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.616811][ T5283] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 349.625400][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 349.638715][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.645702][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.701251][ T5281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 349.736899][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 349.762449][ T5281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 349.829507][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.885673][ T5281] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 349.915541][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.917034][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 349.939069][ T5281] usb 5-1: Product: syz [ 349.961280][ T5281] usb 5-1: Manufacturer: syz [ 349.985286][ T5281] usb 5-1: SerialNumber: syz [ 350.003601][ T5283] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.047008][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.067567][ T5281] usb 5-1: config 0 descriptor?? [ 350.086481][ T5281] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 350.123079][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.309452][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.331718][ T5283] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.367323][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.388662][ T8133] hsr_slave_0: entered promiscuous mode [ 350.393031][ T5283] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.428379][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.448265][ T8133] hsr_slave_1: entered promiscuous mode [ 350.498534][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.576752][ T8133] Cannot create hsr debugfs directory [ 350.868011][ T5283] usb 4-1: GET_CAPABILITIES returned 0 [ 350.906477][ T5283] usbtmc 4-1:16.0: can't read capabilities [ 351.002698][ T8271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 351.308088][ T8] usb 4-1: USB disconnect, device number 25 [ 352.607373][ T8297] FAULT_INJECTION: forcing a failure. [ 352.607373][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 352.627669][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.3.592 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 352.638315][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.648410][ T8297] Call Trace: [ 352.651724][ T8297] [ 352.654687][ T8297] dump_stack_lvl+0x241/0x360 [ 352.659419][ T8297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.664660][ T8297] ? __pfx__printk+0x10/0x10 [ 352.669294][ T8297] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 352.674795][ T8297] ? __pfx___might_resched+0x10/0x10 [ 352.680137][ T8297] should_fail_ex+0x3b0/0x4e0 [ 352.684861][ T8297] should_failslab+0xac/0x100 [ 352.689590][ T8297] ? snd_seq_port_connect+0x6a/0x490 [ 352.694912][ T8297] __kmalloc_cache_noprof+0x6c/0x2c0 [ 352.700250][ T8297] snd_seq_port_connect+0x6a/0x490 [ 352.705403][ T8297] ? do_raw_read_unlock+0x3c/0x80 [ 352.710469][ T8297] ? _raw_read_unlock+0x28/0x50 [ 352.715379][ T8297] snd_seq_ioctl_subscribe_port+0x31e/0x780 [ 352.721356][ T8297] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 352.727851][ T8297] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.734242][ T8297] snd_seq_oss_midi_open+0x423/0x9d0 [ 352.739580][ T8297] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 352.745455][ T8297] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.751489][ T8297] snd_seq_oss_synth_reset+0x3d0/0x9f0 [ 352.757010][ T8297] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 352.763051][ T8297] snd_seq_oss_reset+0x5b/0x240 [ 352.767963][ T8297] snd_seq_oss_ioctl+0x6d8/0x1250 [ 352.773124][ T8297] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 352.778626][ T8297] ? __mutex_trylock_common+0x183/0x2e0 [ 352.784211][ T8297] ? __pfx___might_resched+0x10/0x10 [ 352.789550][ T8297] ? __pfx___mutex_trylock_common+0x10/0x10 [ 352.795500][ T8297] ? rcu_is_watching+0x15/0xb0 [ 352.800361][ T8297] ? trace_contention_end+0x3c/0x120 [ 352.805694][ T8297] ? __mutex_lock+0x2ef/0xd70 [ 352.810425][ T8297] ? odev_ioctl+0x88/0xf0 [ 352.814794][ T8297] ? __pfx___mutex_lock+0x10/0x10 [ 352.819963][ T8297] ? __fget_files+0x3f6/0x470 [ 352.824683][ T8297] ? __fget_files+0x29/0x470 [ 352.829329][ T8297] odev_ioctl+0xb8/0xf0 [ 352.833523][ T8297] ? __pfx_odev_ioctl+0x10/0x10 [ 352.838409][ T8297] __se_sys_ioctl+0xfc/0x170 [ 352.843040][ T8297] do_syscall_64+0xf3/0x230 [ 352.847583][ T8297] ? clear_bhb_loop+0x35/0x90 [ 352.852317][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.858255][ T8297] RIP: 0033:0x7f76d737def9 [ 352.862710][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.882363][ T8297] RSP: 002b:00007f76d80d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.890829][ T8297] RAX: ffffffffffffffda RBX: 00007f76d7536130 RCX: 00007f76d737def9 [ 352.898843][ T8297] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000009 [ 352.906943][ T8297] RBP: 00007f76d80d9090 R08: 0000000000000000 R09: 0000000000000000 [ 352.915036][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.923045][ T8297] R13: 0000000000000001 R14: 00007f76d7536130 R15: 00007f76d765fa28 [ 352.931114][ T8297] [ 353.021382][ T8301] loop0: detected capacity change from 0 to 1 [ 353.061976][ T8301] Dev loop0: unable to read RDB block 1 [ 353.072620][ T5281] scsi host1: usb-storage 5-1:0.0 [ 353.136899][ T8301] loop0: unable to read partition table [ 353.140006][ T5281] usb 5-1: USB disconnect, device number 44 [ 353.159636][ T8133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.184074][ T8301] loop0: partition table beyond EOD, truncated [ 353.222451][ T8133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.229460][ T8301] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 353.229460][ T8301] ) failed (rc=-5) [ 353.361236][ T8133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.445179][ T8133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.805803][ T29] audit: type=1326 audit(1726449602.982:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.0.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x0 [ 354.040009][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.057007][ T46] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 354.132640][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.189267][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.196587][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.252751][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.260085][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.276476][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.295852][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.307079][ T5299] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 354.355483][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 354.376387][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.412415][ T46] usb 2-1: config 0 descriptor?? [ 354.522311][ T5299] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 354.561239][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.591044][ T5299] usb 5-1: Product: syz [ 354.623594][ T5299] usb 5-1: Manufacturer: syz [ 354.633677][ T5299] usb 5-1: SerialNumber: syz [ 354.660997][ T5299] usb 5-1: config 0 descriptor?? [ 354.723372][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.894559][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 354.918461][ T5299] hso 5-1:0.0: Failed to find INT IN ep [ 354.937848][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 354.946106][ T5299] usb-storage 5-1:0.0: USB Mass Storage device detected [ 354.982990][ T46] usb 2-1: USB disconnect, device number 59 [ 355.018262][ T8341] tipc: Invalid UDP bearer configuration [ 355.018325][ T8341] tipc: Enabling of bearer rejected, failed to enable media [ 355.056308][ T8133] veth0_vlan: entered promiscuous mode [ 355.115214][ T8133] veth1_vlan: entered promiscuous mode [ 355.153386][ T8133] veth0_macvtap: entered promiscuous mode [ 355.179056][ T5299] usb 5-1: USB disconnect, device number 45 [ 355.223433][ T8133] veth1_macvtap: entered promiscuous mode [ 355.358113][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.416749][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.453683][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.513413][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.536856][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.596880][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.634593][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.663499][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.706531][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.747935][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.771254][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.840558][ T8351] bond0: entered promiscuous mode [ 355.845789][ T8351] bond_slave_0: entered promiscuous mode [ 355.884670][ T8351] bond_slave_1: entered promiscuous mode [ 355.968630][ T8365] xt_bpf: check failed: parse error [ 355.976924][ T5281] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 355.978710][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.056862][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.100500][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.131619][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.163480][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.194386][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.196738][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 356.244983][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.262782][ T5281] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 356.293076][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.316955][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.333731][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.379373][ T5281] usb 2-1: config 0 descriptor?? [ 356.406743][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.438820][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.449058][ T5281] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 356.553086][ T8133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.591141][ T8133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.610530][ T8133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.637449][ T8133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.803185][ T29] audit: type=1326 audit(1726449605.982:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.0.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x0 [ 357.118665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.153707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.245984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.307835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.412387][ T5281] gspca_nw80x: reg_w err -71 [ 357.427671][ T5281] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 357.492612][ T5281] usb 2-1: USB disconnect, device number 60 [ 358.017235][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 358.246772][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 358.258580][ T8] usb 3-1: config 0 has no interfaces? [ 358.283667][ T8] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 358.320622][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.366917][ T8] usb 3-1: Product: syz [ 358.386778][ T8] usb 3-1: Manufacturer: syz [ 358.405863][ T8] usb 3-1: SerialNumber: syz [ 358.444489][ T8] usb 3-1: config 0 descriptor?? [ 358.493572][ T940] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 358.540058][ T8412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.781847][ T940] usb 2-1: config 252 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.887455][ T940] usb 2-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 358.904258][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.083600][ T8426] netlink: 108044 bytes leftover after parsing attributes in process `syz.3.622'. [ 359.114165][ T8426] openvswitch: netlink: Message has 5 unknown bytes. [ 359.396863][ T8] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 359.651920][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.698147][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.023134][ T5281] usb 3-1: USB disconnect, device number 31 [ 361.333062][ T940] usb 2-1: string descriptor 0 read error: -71 [ 361.374723][ T940] usbhid 2-1:252.0: couldn't find an input interrupt endpoint [ 361.444906][ T940] usb 2-1: USB disconnect, device number 61 [ 361.528853][ T29] audit: type=1326 audit(1726449610.712:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.1.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd0837def9 code=0x0 [ 362.268696][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.287404][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 362.287453][ T8] usb 1-1: can't read configurations, error -71 [ 362.616855][ T29] audit: type=1326 audit(1726449611.792:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.2.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c62d7def9 code=0x0 [ 362.638615][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.872928][ T8458] team0: Port device team_slave_1 removed [ 362.942934][ T8456] team_slave_0: entered promiscuous mode [ 363.015893][ T8456] team0: Port device team_slave_0 removed [ 363.886844][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 364.160252][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.189491][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.246944][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.286699][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.310976][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.348033][ T5300] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 364.372146][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.466435][ T8] usb 5-1: Product: syz [ 364.483710][ T8] usb 5-1: Manufacturer: syz [ 364.527659][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 364.550261][ T5300] usb 1-1: Using ep0 maxpacket: 16 [ 364.557394][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 364.586820][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 364.597130][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.620128][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 364.642453][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.678207][ T5300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.766827][ T5300] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.816054][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.852708][ T5300] usb 1-1: config 0 descriptor?? [ 365.380995][ T5300] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input15 [ 365.493869][ T5300] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 365.574989][ T5300] usb 1-1: USB disconnect, device number 31 [ 365.816783][ T8] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 366.157524][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.246193][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.391709][ T940] usb 5-1: USB disconnect, device number 46 [ 366.974943][ T29] audit: type=1326 audit(1726449616.152:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.4.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x0 [ 367.030887][ T6339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.454735][ T6339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.789745][ T6339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.068228][ T6339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.189104][ T29] audit: type=1326 audit(1726449617.362:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7fc00000 [ 368.358528][ T29] audit: type=1326 audit(1726449617.372:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95f217def9 code=0x7fc00000 [ 368.624275][ T6339] bridge_slave_1: left allmulticast mode [ 368.694664][ T6339] bridge_slave_1: left promiscuous mode [ 368.705884][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.728264][ T940] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 368.850954][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.860434][ T29] audit: type=1326 audit(1726449618.022:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7fc00000 [ 368.899016][ T6339] bridge_slave_0: left allmulticast mode [ 368.904724][ T6339] bridge_slave_0: left promiscuous mode [ 368.940357][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 368.975655][ T8] usb 2-1: can't read configurations, error -71 [ 369.002345][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.134861][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.156432][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.175315][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.184762][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.196516][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 369.210478][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.236895][ T46] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 369.471624][ T46] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.521063][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.565901][ T46] usb 1-1: config 0 descriptor?? [ 369.583882][ T46] cp210x 1-1:0.0: cp210x converter detected [ 369.589970][ T940] usb 3-1: device descriptor read/64, error -71 [ 369.788740][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.864995][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.877353][ T940] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 370.102879][ T940] usb 3-1: Using ep0 maxpacket: 32 [ 370.115149][ T940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 370.142876][ T940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 370.170251][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.190872][ T940] usb 3-1: Product: syz [ 370.195280][ T5236] Bluetooth: hci1: unexpected event for opcode 0x043d [ 370.206838][ T940] usb 3-1: Manufacturer: syz [ 370.226784][ T940] usb 3-1: SerialNumber: syz [ 370.251187][ T8536] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 370.338508][ T8528] trusted_key: syz.0.654 sent an empty control message without MSG_MORE. [ 370.492902][ T940] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 370.507143][ T46] usb 1-1: cp210x converter now attached to ttyUSB0 [ 370.774959][ C0] usblp0: nonzero write bulk status received: -71 [ 370.855019][ T5281] usb 3-1: USB disconnect, device number 33 [ 370.875252][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.894018][ T5281] usblp0: removed [ 370.914543][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.938327][ T6339] bond0 (unregistering): Released all slaves [ 371.278600][ T4622] Bluetooth: hci5: command tx timeout [ 371.567813][ T29] audit: type=1326 audit(1726449620.752:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.4.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x0 [ 372.086574][ T4622] Bluetooth: hci4: unexpected cc 0x2007 length: 100 > 2 [ 372.099386][ T8568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.937048][ T46] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 372.958044][ T6339] hsr_slave_0: left promiscuous mode [ 373.041686][ T4622] Bluetooth: hci0: link tx timeout [ 373.047250][ T4622] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 373.081654][ T6339] hsr_slave_1: left promiscuous mode [ 373.125169][ T29] audit: type=1326 audit(1726449622.292:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.150057][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.176935][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.229040][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.258059][ T29] audit: type=1326 audit(1726449622.292:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.270736][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.330250][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.358106][ T5231] Bluetooth: hci5: command tx timeout [ 373.370448][ T29] audit: type=1326 audit(1726449622.292:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.407858][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.535048][ T29] audit: type=1326 audit(1726449622.292:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.660202][ T29] audit: type=1326 audit(1726449622.292:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.773084][ T6339] veth1_macvtap: left promiscuous mode [ 373.797813][ T6339] veth0_macvtap: left promiscuous mode [ 373.820145][ T29] audit: type=1326 audit(1726449622.292:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 373.867884][ T6339] veth1_vlan: left promiscuous mode [ 373.893674][ T6339] veth0_vlan: left promiscuous mode [ 373.944440][ T29] audit: type=1326 audit(1726449622.292:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95f2174ea7 code=0x7ffc0000 [ 374.176896][ T5231] Bluetooth: hci4: command 0x0406 tx timeout [ 374.238772][ T29] audit: type=1326 audit(1726449622.292:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95f2119869 code=0x7ffc0000 [ 374.429612][ T29] audit: type=1326 audit(1726449622.292:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 374.685091][ T29] audit: type=1326 audit(1726449622.292:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x7ffc0000 [ 375.118332][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 375.436862][ T4622] Bluetooth: hci5: command tx timeout [ 376.156992][ T4622] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 376.166976][ T4622] Bluetooth: hci4: Injecting HCI hardware error event [ 376.175506][ T5236] Bluetooth: hci4: hardware error 0x00 [ 377.220018][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 377.409401][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 377.516991][ T4622] Bluetooth: hci5: command tx timeout [ 378.246429][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.256867][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 378.289771][ T46] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 378.297557][ T46] usb 3-1: chopping to 0 config(s) [ 378.302824][ T46] usb 3-1: can't read configurations, error -32 [ 378.466890][ T46] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 378.659478][ T46] usb 3-1: device descriptor read/64, error -32 [ 378.800293][ T46] usb usb3-port1: attempt power cycle [ 378.802884][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.813234][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.218637][ T46] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 379.277027][ T46] usb 3-1: device descriptor read/8, error -32 [ 379.417456][ T5227] usb 1-1: USB disconnect, device number 32 [ 379.432248][ T5227] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 379.568951][ T46] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 379.607182][ T46] usb 3-1: device descriptor read/8, error -32 [ 379.638457][ T5227] cp210x 1-1:0.0: device disconnected [ 379.735082][ T46] usb usb3-port1: unable to enumerate USB device [ 380.380088][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 380.380107][ T29] audit: type=1326 audit(1726449629.552:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.4.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f217def9 code=0x0 [ 380.664834][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 381.682958][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.753975][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.803595][ T8539] bridge_slave_0: entered allmulticast mode [ 381.889559][ T8539] bridge_slave_0: entered promiscuous mode [ 381.935987][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.985062][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.053357][ T8539] bridge_slave_1: entered allmulticast mode [ 382.101861][ T8539] bridge_slave_1: entered promiscuous mode [ 382.648446][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.795362][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.980726][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.032531][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.162344][ T8539] team0: Port device team_slave_0 added [ 383.187519][ T8539] team0: Port device team_slave_1 added [ 383.226746][ T5227] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 383.384013][ T5227] usb 2-1: device descriptor read/64, error -71 [ 383.493253][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.506992][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.569477][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.625943][ T8674] ɶƣ0GC: entered promiscuous mode [ 383.654887][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.682000][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.724736][ T5227] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 383.763726][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.896951][ T5227] usb 2-1: device descriptor read/64, error -71 [ 384.018375][ T5227] usb usb2-port1: attempt power cycle [ 384.088744][ T8539] hsr_slave_0: entered promiscuous mode [ 384.159765][ T8539] hsr_slave_1: entered promiscuous mode [ 384.206774][ T8539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.214401][ T8539] Cannot create hsr debugfs directory [ 384.372738][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.687'. [ 384.392259][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.687'. [ 384.426831][ T5227] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 384.433710][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.687'. [ 384.457007][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.687'. [ 384.484420][ T5227] usb 2-1: device descriptor read/8, error -71 [ 384.596960][ T46] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 384.806816][ T5227] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 384.837169][ T46] usb 3-1: config 252 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.877255][ T46] usb 3-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 384.895546][ T5227] usb 2-1: device descriptor read/8, error -71 [ 384.919331][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.027133][ T5227] usb usb2-port1: unable to enumerate USB device [ 386.092209][ T8718] FAULT_INJECTION: forcing a failure. [ 386.092209][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 386.162006][ T8718] CPU: 1 UID: 0 PID: 8718 Comm: syz.1.693 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 386.172689][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 386.182753][ T8718] Call Trace: [ 386.186056][ T8718] [ 386.188991][ T8718] dump_stack_lvl+0x241/0x360 [ 386.193702][ T8718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.198905][ T8718] ? __pfx__printk+0x10/0x10 [ 386.203500][ T8718] ? __kmalloc_noprof+0xb0/0x400 [ 386.208441][ T8718] ? __pfx___might_resched+0x10/0x10 [ 386.213741][ T8718] should_fail_ex+0x3b0/0x4e0 [ 386.218437][ T8718] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 386.224694][ T8718] should_failslab+0xac/0x100 [ 386.229423][ T8718] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 386.235679][ T8718] __kmalloc_noprof+0xd8/0x400 [ 386.240562][ T8718] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 386.246667][ T8718] ? __pfx___mutex_lock+0x10/0x10 [ 386.251719][ T8718] genl_start+0x182/0x6d0 [ 386.256063][ T8718] __netlink_dump_start+0x45c/0x790 [ 386.261290][ T8718] genl_rcv_msg+0x88c/0xec0 [ 386.265808][ T8718] ? mark_lock+0x9a/0x350 [ 386.270675][ T8718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.275725][ T8718] ? __pfx_genl_start+0x10/0x10 [ 386.280768][ T8718] ? __pfx_genl_dumpit+0x10/0x10 [ 386.285732][ T8718] ? __pfx_genl_done+0x10/0x10 [ 386.290535][ T8718] ? __pfx_lock_acquire+0x10/0x10 [ 386.295711][ T8718] ? __pfx_smcd_nl_get_lgr+0x10/0x10 [ 386.301013][ T8718] ? __pfx___might_resched+0x10/0x10 [ 386.306326][ T8718] netlink_rcv_skb+0x1e3/0x430 [ 386.311104][ T8718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.316139][ T8718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.321438][ T8718] ? __netlink_deliver_tap+0x77e/0x7c0 [ 386.326910][ T8718] genl_rcv+0x28/0x40 [ 386.330894][ T8718] netlink_unicast+0x7f6/0x990 [ 386.335708][ T8718] ? __pfx_netlink_unicast+0x10/0x10 [ 386.341007][ T8718] ? __virt_addr_valid+0x183/0x530 [ 386.346126][ T8718] ? __check_object_size+0x49c/0x900 [ 386.351423][ T8718] ? bpf_lsm_netlink_send+0x9/0x10 [ 386.356636][ T8718] netlink_sendmsg+0x8e4/0xcb0 [ 386.361432][ T8718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.366727][ T8718] ? __import_iovec+0x536/0x820 [ 386.371585][ T8718] ? aa_sock_msg_perm+0x91/0x160 [ 386.376525][ T8718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 386.381818][ T8718] ? security_socket_sendmsg+0x87/0xb0 [ 386.387312][ T8718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.392616][ T8718] __sock_sendmsg+0x221/0x270 [ 386.397305][ T8718] ____sys_sendmsg+0x525/0x7d0 [ 386.402084][ T8718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.407429][ T8718] __sys_sendmsg+0x2b0/0x3a0 [ 386.412071][ T8718] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.417194][ T8718] ? __hrtimer_run_queues+0xcdc/0xd50 [ 386.422612][ T8718] ? __pfx_sched_clock_cpu+0x10/0x10 [ 386.427927][ T8718] ? hrtimer_interrupt+0x76f/0x990 [ 386.433045][ T8718] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.439403][ T8718] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.445736][ T8718] ? __irq_exit_rcu+0x100/0x1c0 [ 386.450771][ T8718] ? do_syscall_64+0xb6/0x230 [ 386.455458][ T8718] do_syscall_64+0xf3/0x230 [ 386.459992][ T8718] ? clear_bhb_loop+0x35/0x90 [ 386.464675][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.470592][ T8718] RIP: 0033:0x7fcd0837def9 [ 386.475009][ T8718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.494615][ T8718] RSP: 002b:00007fcd09173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.503041][ T8718] RAX: ffffffffffffffda RBX: 00007fcd08535f80 RCX: 00007fcd0837def9 [ 386.511106][ T8718] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 386.519103][ T8718] RBP: 00007fcd09173090 R08: 0000000000000000 R09: 0000000000000000 [ 386.527076][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.535048][ T8718] R13: 0000000000000000 R14: 00007fcd08535f80 R15: 00007fcd0865fa28 [ 386.543031][ T8718] [ 386.950998][ T46] usb 3-1: string descriptor 0 read error: -71 [ 386.983532][ T46] usbhid 3-1:252.0: couldn't find an input interrupt endpoint [ 387.044451][ T8539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.051923][ T46] usb 3-1: USB disconnect, device number 38 [ 387.122310][ T8539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.208023][ T8539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.244492][ T8539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.725950][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.111897][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.198853][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.206085][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.362492][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.369667][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.706792][ T5277] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 388.931853][ T5277] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 388.963202][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.993418][ T5277] usb 5-1: Product: syz [ 389.014402][ T5277] usb 5-1: Manufacturer: syz [ 389.040050][ T5277] usb 5-1: SerialNumber: syz [ 389.158052][ T5277] usb 5-1: config 0 descriptor?? [ 389.301192][ T5277] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 389.722528][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.741569][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 389.924590][ T8750] usb usb8: usbfs: process 8750 (syz.4.701) did not claim interface 0 before use [ 389.977697][ T8773] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 389.986399][ T8773] bridge0: port 3(team0) entered blocking state [ 389.986580][ T8773] bridge0: port 3(team0) entered listening state [ 389.987163][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.987345][ T8773] bridge0: port 2(bridge_slave_1) entered listening state [ 389.987612][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.987780][ T8773] bridge0: port 1(bridge_slave_0) entered listening state [ 390.077216][ T5277] gspca_sunplus: reg_w_riv err -110 [ 390.077332][ T5277] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 390.213442][ T8773] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 390.497844][ T5300] usb 5-1: USB disconnect, device number 47 [ 390.669986][ T8785] xt_hashlimit: overflow, try lower: 3/0 [ 390.821943][ T8539] veth0_vlan: entered promiscuous mode [ 390.912315][ T8539] veth1_vlan: entered promiscuous mode [ 391.006790][ T5300] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 391.068839][ T8539] veth0_macvtap: entered promiscuous mode [ 391.116413][ T8539] veth1_macvtap: entered promiscuous mode [ 391.212348][ T5300] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 391.239738][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.277278][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 391.316896][ T46] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 391.348852][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.370652][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 391.410017][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.423012][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 391.448818][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.467684][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.486801][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.508209][ T5300] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 391.522455][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.538356][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 391.559768][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.571245][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 391.580811][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 391.608952][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.618043][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.628668][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 391.645988][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.666789][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.682952][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.693367][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.717963][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.737348][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.751084][ T5300] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 391.791209][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 391.808269][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.826187][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 391.841967][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.864404][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.883834][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 391.896517][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.906932][ T5281] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 391.909277][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.936061][ T46] usb 2-1: Product: syz [ 391.948691][ T5300] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.962324][ T46] usb 2-1: Manufacturer: syz [ 391.980418][ T46] usb 2-1: SerialNumber: syz [ 391.985199][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003563][ T5300] usb 1-1: string descriptor 0 read error: -22 [ 392.024743][ T5300] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 392.044309][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.064723][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.094600][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.138995][ T5300] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 392.158562][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.209635][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.226774][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 392.249203][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.291602][ T46] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 392.309332][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.336860][ T46] cdc_ncm 2-1:1.0: bind() failure [ 392.348533][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.349881][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.370889][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.393784][ T5227] usb 1-1: USB disconnect, device number 33 [ 392.409309][ T46] usb 2-1: USB disconnect, device number 68 [ 392.451096][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.539764][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 392.580911][ T8539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.646734][ T8539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.654089][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.705729][ T8539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.736271][ T5281] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 392.774058][ T8539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.776783][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.861316][ T5281] usb 5-1: config 0 descriptor?? [ 392.907999][ T5281] hso 5-1:0.0: Can't find BULK IN endpoint [ 393.352984][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.416500][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.642336][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.685119][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.697682][ T46] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 394.002164][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.035613][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.066242][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 394.100417][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 394.154654][ T46] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 394.167239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.196858][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.218869][ T46] usb 2-1: Product: syz [ 394.261545][ T46] usb 2-1: Manufacturer: syz [ 394.285838][ T46] usb 2-1: SerialNumber: syz [ 394.303781][ T46] usb 2-1: config 0 descriptor?? [ 394.348435][ T46] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 394.407293][ T8] usb 5-1: USB disconnect, device number 48 [ 394.433184][ T46] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 394.526850][ T46] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 394.599988][ T46] usb 2-1: USB disconnect, device number 69 [ 394.663192][ T46] garmin_gps 2-1:0.0: device disconnected [ 394.748080][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 396.133020][ T8862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.718'. [ 396.522595][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.720'. [ 397.361560][ T8869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.422046][ T8869] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 397.709671][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.229129][ T8869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.279692][ T8869] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 398.338704][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.490475][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.612877][ T8869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.634976][ T8869] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 398.726119][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.528631][ T52] bridge_slave_1: left allmulticast mode [ 399.579996][ T52] bridge_slave_1: left promiscuous mode [ 399.617378][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.741243][ T52] bridge_slave_0: left allmulticast mode [ 399.779979][ T52] bridge_slave_0: left promiscuous mode [ 399.807390][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.113008][ T46] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 400.349665][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 400.411278][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.465098][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 400.512915][ T4622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.524646][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.533359][ T4622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.554059][ T46] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 400.564347][ T4622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.571936][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.580354][ T4622] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 400.588467][ T4622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.606023][ T46] usb 3-1: config 0 descriptor?? [ 400.611989][ T8913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 400.639892][ T46] gspca_main: spca561-2.14.0 probing abcd:cdee [ 401.164621][ T46] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 401.186145][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.220781][ T46] usb 3-1: MIDIStreaming interface descriptor not found [ 402.247079][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.320375][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.369644][ T52] bond0 (unregistering): Released all slaves [ 402.448451][ T8910] warning: `syz.2.728' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 402.628178][ T58] usb 3-1: USB disconnect, device number 39 [ 403.396763][ T52] hsr_slave_0: left promiscuous mode [ 403.448352][ T8939] netlink: 4668 bytes leftover after parsing attributes in process `syz.0.734'. [ 403.496967][ T8939] netlink: 4668 bytes leftover after parsing attributes in process `syz.0.734'. [ 403.607058][ T52] hsr_slave_1: left promiscuous mode [ 403.707176][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.714648][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.808475][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.815897][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.007616][ T52] veth1_macvtap: left promiscuous mode [ 404.013448][ T52] veth0_macvtap: left promiscuous mode [ 404.097145][ T52] veth1_vlan: left promiscuous mode [ 404.102805][ T52] veth0_vlan: left promiscuous mode [ 405.038640][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 405.046886][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 405.054207][ C1] bridge0: port 3(team0) entered learning state [ 405.536322][ T8970] fuse: Bad value for 'fd' [ 407.182231][ T52] team0 (unregistering): Port device team_slave_1 removed [ 407.405561][ T52] team0 (unregistering): Port device team_slave_0 removed [ 410.748667][ T6951] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 410.919426][ T9002] FAULT_INJECTION: forcing a failure. [ 410.919426][ T9002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.968923][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.0.742 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 410.979571][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 410.989646][ T9002] Call Trace: [ 410.993101][ T9002] [ 410.996059][ T9002] dump_stack_lvl+0x241/0x360 [ 411.000746][ T9002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.005948][ T9002] ? __pfx__printk+0x10/0x10 [ 411.010537][ T9002] ? __pfx_lock_release+0x10/0x10 [ 411.015579][ T9002] should_fail_ex+0x3b0/0x4e0 [ 411.020256][ T9002] _copy_from_user+0x2f/0xe0 [ 411.024846][ T9002] copy_msghdr_from_user+0xae/0x680 [ 411.030056][ T9002] ? __pfx___might_resched+0x10/0x10 [ 411.035366][ T9002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 411.041186][ T9002] ? __might_fault+0xaa/0x120 [ 411.045872][ T9002] __sys_sendmmsg+0x374/0x740 [ 411.050557][ T9002] ? __pfx___sys_sendmmsg+0x10/0x10 [ 411.055780][ T9002] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 411.061690][ T9002] ? ksys_write+0x23e/0x2c0 [ 411.066191][ T9002] ? __pfx_lock_release+0x10/0x10 [ 411.071224][ T9002] ? vfs_write+0x7c4/0xc90 [ 411.075643][ T9002] ? __mutex_unlock_slowpath+0x21d/0x750 [ 411.081283][ T9002] ? __pfx_vfs_write+0x10/0x10 [ 411.086070][ T9002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.092085][ T9002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.098416][ T9002] ? do_syscall_64+0x100/0x230 [ 411.103189][ T9002] __x64_sys_sendmmsg+0xa0/0xb0 [ 411.108054][ T9002] do_syscall_64+0xf3/0x230 [ 411.112558][ T9002] ? clear_bhb_loop+0x35/0x90 [ 411.117256][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.123150][ T9002] RIP: 0033:0x7fd3eff7def9 [ 411.127568][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.147264][ T9002] RSP: 002b:00007fd3efdd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.155680][ T9002] RAX: ffffffffffffffda RBX: 00007fd3f0136058 RCX: 00007fd3eff7def9 [ 411.163740][ T9002] RDX: 040000000000039e RSI: 0000000020001700 RDI: 0000000000000007 [ 411.171707][ T9002] RBP: 00007fd3efdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.179679][ T9002] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002 [ 411.187646][ T9002] R13: 0000000000000000 R14: 00007fd3f0136058 R15: 00007fd3f025fa28 [ 411.195627][ T9002] [ 412.619893][ T6339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.931913][ T6339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.246562][ T6339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.615159][ T6339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.874148][ T9021] FAULT_INJECTION: forcing a failure. [ 413.874148][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.907671][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.0.747 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 413.918331][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 413.928434][ T9021] Call Trace: [ 413.931711][ T9021] [ 413.934656][ T9021] dump_stack_lvl+0x241/0x360 [ 413.939343][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.944538][ T9021] ? __pfx__printk+0x10/0x10 [ 413.949126][ T9021] ? __pfx_lock_release+0x10/0x10 [ 413.954151][ T9021] ? __fget_files+0x29/0x470 [ 413.958749][ T9021] should_fail_ex+0x3b0/0x4e0 [ 413.963427][ T9021] _copy_to_user+0x2f/0xb0 [ 413.967847][ T9021] __x64_sys_fstatfs+0x12a/0x1a0 [ 413.972789][ T9021] ? __pfx___x64_sys_fstatfs+0x10/0x10 [ 413.978269][ T9021] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 413.984514][ T9021] ? syscall_user_dispatch+0x4e/0x90 [ 413.989799][ T9021] do_syscall_64+0xf3/0x230 [ 413.994315][ T9021] ? clear_bhb_loop+0x35/0x90 [ 413.998995][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.004886][ T9021] RIP: 0033:0x7fd3eff7def9 [ 414.009296][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.028923][ T9021] RSP: 002b:00007fd3efdd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 414.037430][ T9021] RAX: ffffffffffffffda RBX: 00007fd3f0136058 RCX: 00007fd3eff7def9 [ 414.045407][ T9021] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 414.053372][ T9021] RBP: 00007fd3efdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 414.061339][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.069305][ T9021] R13: 0000000000000000 R14: 00007fd3f0136058 R15: 00007fd3f025fa28 [ 414.077284][ T9021] [ 414.257197][ T6339] team0: left allmulticast mode [ 414.262120][ T6339] team_slave_0: left allmulticast mode [ 414.317032][ T6339] team_slave_1: left allmulticast mode [ 414.322789][ T6339] bridge0: port 3(team0) entered disabled state [ 414.468677][ T6339] bridge_slave_1: left allmulticast mode [ 414.502799][ T6339] bridge_slave_1: left promiscuous mode [ 414.550326][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.650616][ T6339] bridge_slave_0: left allmulticast mode [ 414.676906][ T6339] bridge_slave_0: left promiscuous mode [ 414.722659][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.305879][ T6339] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 416.637690][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.799733][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.870300][ T6339] bond0 (unregistering): Released all slaves [ 417.981830][ T6339] hsr_slave_0: left promiscuous mode [ 418.011852][ T6339] hsr_slave_1: left promiscuous mode [ 418.023804][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.072398][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.098035][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.107902][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.179475][ T6339] veth1_macvtap: left promiscuous mode [ 418.191981][ T6339] veth0_macvtap: left promiscuous mode [ 418.204598][ T6339] veth1_vlan: left promiscuous mode [ 418.247464][ T6339] veth0_vlan: left promiscuous mode [ 418.972598][ T9092] FAULT_INJECTION: forcing a failure. [ 418.972598][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.018341][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.0.758 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 419.028984][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 419.039057][ T9092] Call Trace: [ 419.042363][ T9092] [ 419.045314][ T9092] dump_stack_lvl+0x241/0x360 [ 419.050019][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.055228][ T9092] ? __pfx__printk+0x10/0x10 [ 419.059858][ T9092] ? __pfx_lock_release+0x10/0x10 [ 419.064929][ T9092] should_fail_ex+0x3b0/0x4e0 [ 419.069610][ T9092] _copy_from_user+0x2f/0xe0 [ 419.074215][ T9092] copy_msghdr_from_user+0xae/0x680 [ 419.079427][ T9092] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 419.085253][ T9092] __sys_sendmsg+0x23d/0x3a0 [ 419.089851][ T9092] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.094964][ T9092] ? vfs_write+0x7c4/0xc90 [ 419.099410][ T9092] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.105764][ T9092] ? do_syscall_64+0x100/0x230 [ 419.110559][ T9092] ? do_syscall_64+0xb6/0x230 [ 419.115263][ T9092] do_syscall_64+0xf3/0x230 [ 419.119831][ T9092] ? clear_bhb_loop+0x35/0x90 [ 419.124525][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.130448][ T9092] RIP: 0033:0x7fd3eff7def9 [ 419.134878][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.154504][ T9092] RSP: 002b:00007fd3efdf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.162943][ T9092] RAX: ffffffffffffffda RBX: 00007fd3f0135f80 RCX: 00007fd3eff7def9 [ 419.170927][ T9092] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 419.178921][ T9092] RBP: 00007fd3efdf8090 R08: 0000000000000000 R09: 0000000000000000 [ 419.186901][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.194872][ T9092] R13: 0000000000000000 R14: 00007fd3f0135f80 R15: 00007fd3f025fa28 [ 419.203039][ T9092] [ 420.913926][ T9105] FAULT_INJECTION: forcing a failure. [ 420.913926][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 420.943467][ T6339] team_slave_1 (unregistering): left promiscuous mode [ 420.970257][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 421.001253][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.0.763 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 421.011916][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 421.021998][ T9105] Call Trace: [ 421.025285][ T9105] [ 421.028218][ T9105] dump_stack_lvl+0x241/0x360 [ 421.032926][ T9105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.038131][ T9105] ? __pfx__printk+0x10/0x10 [ 421.042752][ T9105] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 421.048218][ T9105] ? __pfx___might_resched+0x10/0x10 [ 421.053537][ T9105] should_fail_ex+0x3b0/0x4e0 [ 421.058243][ T9105] should_failslab+0xac/0x100 [ 421.062958][ T9105] ? nfnetlink_rcv+0x1265/0x2ad0 [ 421.067902][ T9105] __kmalloc_cache_noprof+0x6c/0x2c0 [ 421.073984][ T9105] nfnetlink_rcv+0x1265/0x2ad0 [ 421.078800][ T9105] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.083952][ T9105] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.089252][ T9105] ? skb_clone+0x240/0x390 [ 421.093676][ T9105] ? __pfx_lock_release+0x10/0x10 [ 421.098725][ T9105] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.104013][ T9105] netlink_unicast+0x7f6/0x990 [ 421.108840][ T9105] ? __pfx_netlink_unicast+0x10/0x10 [ 421.114146][ T9105] ? __virt_addr_valid+0x183/0x530 [ 421.119389][ T9105] ? __check_object_size+0x49c/0x900 [ 421.124749][ T9105] ? bpf_lsm_netlink_send+0x9/0x10 [ 421.129885][ T9105] netlink_sendmsg+0x8e4/0xcb0 [ 421.134669][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.139962][ T9105] ? __import_iovec+0x536/0x820 [ 421.144833][ T9105] ? aa_sock_msg_perm+0x91/0x160 [ 421.149781][ T9105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 421.155210][ T9105] ? security_socket_sendmsg+0x87/0xb0 [ 421.160682][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.166057][ T9105] __sock_sendmsg+0x221/0x270 [ 421.170751][ T9105] ____sys_sendmsg+0x525/0x7d0 [ 421.175529][ T9105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.180918][ T9105] __sys_sendmsg+0x2b0/0x3a0 [ 421.185517][ T9105] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.190676][ T9105] ? vfs_write+0x7c4/0xc90 [ 421.195128][ T9105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.201465][ T9105] ? do_syscall_64+0x100/0x230 [ 421.206235][ T9105] ? do_syscall_64+0xb6/0x230 [ 421.210917][ T9105] do_syscall_64+0xf3/0x230 [ 421.215419][ T9105] ? clear_bhb_loop+0x35/0x90 [ 421.220101][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.225993][ T9105] RIP: 0033:0x7fd3eff7def9 [ 421.230405][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.250013][ T9105] RSP: 002b:00007fd3efdf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.258430][ T9105] RAX: ffffffffffffffda RBX: 00007fd3f0135f80 RCX: 00007fd3eff7def9 [ 421.266431][ T9105] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 421.274414][ T9105] RBP: 00007fd3efdf8090 R08: 0000000000000000 R09: 0000000000000000 [ 421.282428][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.290416][ T9105] R13: 0000000000000000 R14: 00007fd3f0135f80 R15: 00007fd3f025fa28 [ 421.298506][ T9105] [ 421.583499][ T6339] team_slave_0 (unregistering): left promiscuous mode [ 421.625489][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 423.731101][ T9099] vlan2: entered promiscuous mode [ 423.736209][ T9099] vlan2: entered allmulticast mode [ 430.103825][ T9215] netlink: 596 bytes leftover after parsing attributes in process `syz.2.774'. [ 430.333040][ T9218] bridge0: port 3(team0) entered disabled state [ 430.339830][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.347429][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.413399][ T9218] team0: Device bridge0 is already an upper device of the team interface [ 433.812035][ T29] audit: type=1326 audit(1726449682.992:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3eff7def9 code=0x0 [ 437.237137][ T9308] netlink: 'syz.2.780': attribute type 2 has an invalid length. [ 437.277373][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'. [ 439.517400][ T9334] ======================================================= [ 439.517400][ T9334] WARNING: The mand mount option has been deprecated and [ 439.517400][ T9334] and is ignored by this kernel. Remove the mand [ 439.517400][ T9334] option from the mount to silence this warning. [ 439.517400][ T9334] ======================================================= [ 439.674810][ T29] audit: type=1804 audit(1726449688.852:195): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.781" name="/" dev="pidfs" ino=9638 res=1 errno=0 [ 440.244055][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256817][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=3 req=726 state=1 status=67 (errno 9: Bad file descriptor) [ 445.853547][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.138567][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.250958][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.396569][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.638526][ T52] bridge_slave_1: left allmulticast mode [ 446.644238][ T52] bridge_slave_1: left promiscuous mode [ 446.678228][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.689566][ T52] bridge_slave_0: left allmulticast mode [ 446.695271][ T52] bridge_slave_0: left promiscuous mode [ 446.737672][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.790112][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.843298][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.898116][ T52] bond0 (unregistering): Released all slaves [ 448.390820][ T52] hsr_slave_0: left promiscuous mode [ 448.407643][ T52] hsr_slave_1: left promiscuous mode [ 448.436981][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.444461][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.479756][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.501207][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.577985][ T52] veth1_macvtap: left promiscuous mode [ 448.583591][ T52] veth0_macvtap: left promiscuous mode [ 448.606889][ T52] veth1_vlan: left promiscuous mode [ 448.616724][ T52] veth0_vlan: left promiscuous mode [ 449.961119][ T52] team0 (unregistering): Port device team_slave_1 removed [ 450.068064][ T52] team0 (unregistering): Port device team_slave_0 removed [ 452.281486][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.460617][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.611219][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.752675][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 452.776935][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 452.787777][ T52] bridge0: port 3(netdevsim0) entered disabled state [ 452.850810][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.207328][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.333522][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.472719][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.589200][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.939099][ T52] bridge_slave_1: left allmulticast mode [ 453.944801][ T52] bridge_slave_1: left promiscuous mode [ 453.960102][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.979210][ T52] bridge_slave_0: left allmulticast mode [ 453.986711][ T52] bridge_slave_0: left promiscuous mode [ 453.992419][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.018571][ T52] team0: left allmulticast mode [ 454.023555][ T52] team_slave_0: left allmulticast mode [ 454.029596][ T52] team_slave_1: left allmulticast mode [ 454.035205][ T52] bridge0: port 3(team0) entered disabled state [ 454.048747][ T52] bridge_slave_1: left allmulticast mode [ 454.056684][ T52] bridge_slave_1: left promiscuous mode [ 454.073505][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.098596][ T52] bridge_slave_0: left allmulticast mode [ 454.106743][ T52] bridge_slave_0: left promiscuous mode [ 454.117419][ T52] bridge0: port 1(bridge_slave_0) entered disabled state