last executing test programs: 17.562800714s ago: executing program 3 (id=1662): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff2000/0x8000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x421}, 0x20}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x4c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x5, r3}], {}, [{0x8, 0xe, r7}, {0x8, 0x4, r8}], {0x10, 0x1}}, 0x3c, 0x2) 16.131852685s ago: executing program 3 (id=1666): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x891a, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/146, 0xfffffdf4}], 0x1, 0x0, 0x0) 10.269083954s ago: executing program 2 (id=1680): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905840dfc"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) socket$inet(0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) quotactl$Q_QUOTAON(0x0, 0x0, 0xee01, 0x0) 10.036767076s ago: executing program 1 (id=1681): ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) ftruncate(0xffffffffffffffff, 0x5) geteuid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) syz_usb_connect(0x0, 0x90, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000bc4b850821046e040d960102030109027e00010200000009040000080202ff000af782d0f964240195050202010209240600000100000009050000000000000009050100000000004a1011626e42090218c8810ab9e2b9781a090500000000000000090504000000000f00090500100000000700090500102000070000022109050000000000000009050400"], 0x0) clock_settime(0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff6075c5d0d2ff"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300", @ANYRES64=r5, @ANYRES64=r1], 0x1e4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81, 0x6, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x6}]}, 0x10) 8.151359816s ago: executing program 2 (id=1684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x81, 0x0, 0x0, 0x2671}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={'xxhash64\x00'}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000091c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) io_pgetevents(r4, 0x7, 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140), &(0x7f0000000280)={&(0x7f0000000240)={[0xa]}, 0x8}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400000187a00f000905029054"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x2f, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x19) readv(r7, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xffffffff) keyctl$get_security(0x11, r9, &(0x7f0000000400)=""/122, 0x7a) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r10, 0xc014563b, &(0x7f0000000080)={0x1}) 7.858456098s ago: executing program 0 (id=1686): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x8}}, 0x24, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r2, &(0x7f0000000000), 0x2000) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x1}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000001c0)={0x6, 'veth1_macvtap\x00', {0x2}, 0x4ca5}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000004540)=@delchain={0x20d8, 0x65, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0xe, 0x10}, {0x4, 0x4}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_basic={{0xa}, {0x2080, 0x2, [@TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0xf0d2, 0x0, 0x7}, "ed7426f0f184ac1a5f8fb3bff511ca60340d71443ec1ad45b002e2b3b6d3f4cd1b0d5c30336c1fbfbe1d88746e1f1e47a7b84f7d62818e48c3fe3b76f20ad69be9ec20e61bacbd808f3928ee95db9a0c1fb8eebf721130ba0decbb157ea708ae37c3d88d6400d679936729ea9e3d22b7ff05d95565d223563224c7bcc927512ae11154e3778d50167179733dcecf85c12a6f8ef91a75ac846e506318281f865ece2330f761b3d684b9902e132631b20fc87b621932a61619a0eaaf5a"}}]}]}, @TCA_BASIC_ACT={0x1f88, 0x3, [@m_police={0x1df0, 0x9, 0x0, 0x0, {{0xb}, {0x1ce8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x289, 0x80000, 0xffff, 0xffffff45, 0xb34, 0x2, 0xa2a, 0x6, 0xbd3, 0x0, 0x0, 0x7, 0x10001, 0x8, 0x1ff, 0x80, 0x2, 0x2, 0xe40, 0x6, 0x10001, 0x7cc, 0xb, 0x7, 0x7, 0x10, 0x7fffffff, 0xffff, 0x3, 0x5, 0x3, 0x3, 0x80000000, 0x10, 0x6, 0x17ebfc87, 0x9, 0x7, 0x5, 0x9, 0x2, 0x1f7, 0x2, 0x1, 0x7, 0x10, 0x3, 0x2, 0xf9ad, 0x0, 0x2, 0x16f, 0x5e0, 0x4, 0x9, 0x5, 0x6, 0x0, 0x2, 0x5f6, 0x9, 0x7, 0x7, 0xffff, 0x3, 0x81, 0x2, 0x6, 0x1, 0x6, 0xdd5, 0x5, 0x6e4, 0x5, 0x4, 0x7fff, 0x3, 0x5, 0x2135, 0x4, 0x5, 0x9, 0x0, 0x1, 0x1, 0x4, 0x7, 0x6, 0x4, 0x6, 0x9, 0x9, 0xffff4e34, 0x0, 0x0, 0x401, 0xfffffffa, 0x4, 0x9, 0x40, 0x7, 0x7f, 0x9, 0x1, 0x4, 0x6, 0xd80, 0xf4, 0x4, 0x5, 0x81, 0x5, 0x10001, 0x3c, 0x4, 0x1ff, 0x4, 0xb00, 0x7, 0x7ff, 0x7, 0x1000, 0x1, 0x4, 0x5, 0x81, 0x5, 0x8, 0x2, 0x8000, 0x8, 0xd2f3, 0x1, 0xc9, 0x694, 0x8001, 0xf, 0x6, 0x9, 0x1, 0x2, 0x9513, 0xffff, 0xfff, 0x8, 0x83, 0x800, 0x2, 0x5, 0x6549, 0x6, 0xc, 0x6, 0x7, 0xffff, 0x1000, 0x7, 0x5, 0x0, 0x4, 0x4, 0x10, 0x8, 0x7, 0x0, 0x2bfe, 0x3, 0x7, 0x4, 0xff, 0xfffffff8, 0x6, 0x80000000, 0x8, 0x400, 0x12d, 0x9, 0xf09, 0x9, 0x3, 0x401, 0x3, 0x7ff, 0x10, 0x8001, 0x5ca, 0x5, 0x9, 0x0, 0xfffffff7, 0x300, 0x8, 0x8, 0x7, 0x4, 0x80, 0x6, 0x0, 0x35, 0xfffffffe, 0x14, 0x4, 0x2, 0xffff, 0x3da, 0xa2f, 0x1, 0x216, 0x1, 0x337c, 0x1, 0x2, 0x9, 0xfff, 0x3, 0x0, 0x80, 0x4, 0x6d54, 0x0, 0x9, 0x7, 0xfffffff7, 0x6, 0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0x9, 0x1, 0x5, 0x80000001, 0x8, 0x0, 0x2, 0x7ff, 0x8, 0x4, 0x100, 0x1, 0x6, 0x1, 0x6, 0x39ed65b0, 0x3, 0x1, 0x81, 0x2, 0x100, 0xfff, 0x9, 0xfffff6ac]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x7ff, 0xffffffff, 0x5, 0x1, 0xffffffff, 0x5, 0xe29f, 0x401, 0x2, 0x5, 0x0, 0x5, 0x80000000, 0x5, 0x0, 0x0, 0xf9, 0x6, 0x6, 0x0, 0x9, 0x5bc8, 0xd, 0xbe6, 0x0, 0x81, 0x3, 0x0, 0x6, 0xbc05, 0x3, 0x8, 0x1, 0xb54, 0x7, 0x8000, 0x8, 0x101, 0xc45, 0x10000, 0x1, 0xe, 0x401, 0x9, 0x4a7, 0x200, 0x9, 0xc0a, 0x2, 0xda, 0x7, 0x200, 0x101, 0x40, 0x200, 0xff, 0x1, 0x9, 0x1000, 0x40, 0x4, 0x5, 0x2cd, 0x3, 0xd1, 0x8, 0x8, 0x8815, 0x86e6, 0x5, 0xa8, 0x6, 0x0, 0x7, 0x80000001, 0xfb, 0x2, 0x6, 0xc2, 0xa, 0x8de, 0xfd3f, 0x3, 0x1, 0xd51f, 0xd, 0xc, 0xf46, 0x1, 0x6, 0x9, 0xff, 0xe, 0x4, 0x80, 0x3, 0x8, 0x4, 0x25b8, 0xf9, 0x8000, 0x3, 0x4fc, 0x3ff, 0x8, 0x1, 0x3, 0x401, 0x2, 0xfffffffc, 0x30b7da0c, 0x4, 0x4, 0x7fffffff, 0x2, 0x8fad, 0x4, 0x4, 0x7, 0x100, 0x4, 0x4, 0xfffffffb, 0x4, 0xe, 0x6, 0x8001, 0x2, 0x4b, 0x6, 0xffffff91, 0x9, 0x4, 0x1, 0x7fff, 0x9, 0x4, 0x2, 0x8, 0xae9, 0x40, 0x10000, 0x17a, 0x8, 0x2, 0xa97, 0x5af1, 0x10001, 0xe, 0x1, 0x8, 0x8, 0xbbc, 0x6, 0x40, 0x5, 0x3fb, 0x0, 0xa52b, 0x4, 0x7f, 0x9, 0xe1, 0x10000, 0xfa7, 0x2, 0x8000, 0x8, 0x8, 0xff, 0xfff, 0x10, 0xf, 0x1ff, 0x7ff, 0x7fffffff, 0x8000, 0x0, 0x6, 0x4, 0x8, 0x4, 0x5c0, 0xebd, 0x4, 0x0, 0x49dc, 0x28c, 0x75b, 0x9, 0x9, 0x6, 0x3, 0x3, 0x0, 0x7, 0xfffffff4, 0xc, 0x6, 0x2, 0x4, 0xc, 0x400, 0xf, 0xb24, 0x53d, 0x3, 0x6, 0xfffffff3, 0x80, 0xf, 0x5, 0xfffffffb, 0x2, 0x7fffffff, 0x4, 0x0, 0xb8, 0x9, 0x0, 0x4, 0x8001, 0x9, 0x4a, 0x101, 0x80000003, 0x3, 0x2, 0xf2f, 0x1, 0x2, 0xda5, 0x9, 0x1, 0x8, 0x4, 0x759, 0x101, 0x5, 0x4, 0xfffff000, 0x3, 0x335, 0x1c9, 0xed, 0x3ff, 0x3, 0x3, 0x0, 0x7fff, 0x2, 0xfff, 0x3, 0xfa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8000, 0x78cfdff3, 0x4, 0xee, 0x5, 0x7, 0x7, 0x4617, 0xb, 0x8, 0x81, 0x9, 0x75e, 0x1, 0x68, 0xfffffff9, 0x4, 0x2e1, 0x3, 0x58, 0xff, 0x7fff, 0x8, 0xfffffffe, 0x7, 0x694, 0x5, 0x401, 0x3626, 0x7, 0x7, 0x8000, 0x7, 0x7, 0x6, 0x3, 0x8, 0x6, 0x9, 0x7, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0xb, 0x0, 0x9, 0x3, 0xee9, 0x6, 0x5, 0x8001, 0x2, 0x9, 0x7, 0x3, 0x3, 0x1, 0xfffffd18, 0x8, 0x8, 0x4, 0xcd8, 0x1c0, 0x81, 0xff, 0xe45, 0x84, 0x4, 0x3, 0x7fffffff, 0x0, 0x80, 0x1, 0x7, 0x200, 0x8, 0x1, 0x6, 0x2, 0x66, 0x9, 0x52a, 0xdd6, 0x200, 0x6, 0x0, 0x81, 0x5, 0x3ff, 0x2, 0x1, 0x1000, 0x400, 0x9, 0x7, 0xfffffffa, 0x9, 0x8000, 0x7, 0x3, 0x7, 0x4, 0x1000, 0x3, 0xc3, 0x5, 0x5, 0x8, 0x200, 0xe, 0x4, 0x6, 0x0, 0x5, 0x54f4, 0x4, 0x3, 0x5, 0xfffffffc, 0x0, 0x6, 0x1, 0xba, 0x8000, 0xf42, 0x5, 0x1, 0x4, 0xffffffff, 0x6, 0x3, 0x3, 0x0, 0x5, 0x7, 0x0, 0x10001, 0x9, 0x8, 0x1, 0x0, 0x1, 0x3, 0xf2, 0x9, 0x7, 0x0, 0x200, 0x2, 0x1, 0x7, 0x8, 0x3ff, 0x1, 0x6, 0xffffffff, 0x223, 0xb5220000, 0x0, 0xfce7, 0x38000000, 0x3, 0x6, 0xff9, 0x9, 0x92e0, 0x4, 0x3, 0x7, 0x7, 0x6, 0x10000, 0xd07, 0x1, 0x0, 0x5, 0x4, 0x4, 0x81, 0x8, 0x5, 0x6, 0xfffffffa, 0x7f, 0x10001, 0x6, 0x80000001, 0x3, 0x3, 0x7, 0x3, 0xfffffe01, 0x2, 0x9, 0x1ed, 0x9, 0xffffffff, 0x7, 0xfff, 0x1, 0x5, 0xe124, 0x3, 0xffff7fff, 0x8, 0x6, 0x3, 0x2, 0xbb, 0xc5, 0x1, 0x7, 0x7, 0x8001, 0x80000001, 0x401, 0x7, 0x100, 0x7, 0x40, 0xb9, 0x80000001, 0xb, 0x0, 0x4bf, 0x10000, 0xb4e, 0x395714d9, 0x5, 0x7, 0x3ff, 0xe40c, 0x6, 0x4, 0xfffffff8, 0x0, 0x4, 0x800, 0x8, 0x9, 0xc964, 0x8, 0x1, 0x0, 0x3, 0x9, 0x3, 0x90, 0xff, 0x9, 0x4, 0x10]}, @TCA_POLICE_RATE64={0xfffffffffffffe1d, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x85c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x68c, 0xf, 0x0, 0xc3a, 0x2, 0x8, 0x6, 0x8, 0x4, 0xc, 0x3ff, 0x4, 0xd1, 0x4, 0x2, 0xf, 0x8, 0x9, 0x8, 0x1, 0x6, 0x7f, 0x96a, 0x5, 0x5, 0x1, 0x5, 0x4, 0x4b, 0x32, 0x9, 0x3ff, 0x2b63, 0xf, 0x6, 0x1, 0x9, 0x0, 0x5, 0x5, 0x8000, 0x800000, 0x3, 0x9, 0x3, 0x9, 0x1, 0x26dc, 0x4, 0x3, 0x4, 0x8, 0x2, 0x4, 0x8, 0x2, 0x82e7, 0x8, 0x7f, 0x4, 0x9, 0x100, 0xfffffffe, 0x4a9, 0x0, 0xff, 0x5, 0x2, 0x9, 0x7, 0x7, 0x6, 0x5dfc, 0x1, 0x3, 0x4, 0xc, 0x9, 0x3, 0x2, 0x5, 0x0, 0x8, 0x7, 0x8, 0x1, 0x5, 0x1000, 0x0, 0x7, 0x3, 0x0, 0xffff7eee, 0xc, 0x5, 0x9, 0x100, 0xffffffff, 0x3, 0x3, 0x800, 0x5, 0xffee, 0xfffffffa, 0x800, 0xffffff4d, 0x6, 0xafda, 0x2, 0xffffffff, 0x1ff, 0x73b430df, 0x800, 0x8, 0x7, 0x9, 0x800, 0x4, 0x100, 0x800, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x4, 0x8, 0x9, 0xd, 0x0, 0x8, 0xb247, 0x3, 0x401, 0x5, 0x7, 0xffff, 0x1a20, 0x0, 0x1, 0x8, 0x7, 0x80000000, 0x10001, 0x1, 0x5, 0x1ff, 0x8, 0x5, 0x1, 0x40, 0xdc, 0x3, 0x9, 0x5, 0x9, 0x5, 0x6555, 0x8, 0x6, 0x7ff, 0x276, 0x8, 0x4, 0x0, 0x8, 0x2, 0x7f, 0x5, 0x7, 0x8, 0x328, 0xb52, 0x2, 0x7, 0xfffffffc, 0x1, 0x2, 0x80000001, 0x9, 0x7, 0x6, 0x7, 0x1, 0x24, 0x2, 0x4, 0xb66, 0x9, 0x7b6, 0x1, 0x1ff, 0x9, 0x7, 0x4, 0x80000000, 0x18, 0x3970, 0x7, 0x1, 0xfffffff8, 0x1, 0x2, 0x9, 0x6, 0x45, 0x1, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x6, 0x8001, 0x200, 0x232, 0xe, 0x575e, 0x6, 0x101, 0x3, 0x4, 0x8fa, 0x6, 0x7, 0x1, 0x80, 0xdb, 0x7, 0x8, 0x101, 0xe, 0x5, 0xf, 0x4, 0x1, 0xffff, 0x4b7, 0xb, 0xd, 0xfffffc00, 0xd, 0x4090, 0x2, 0x6, 0x7b1bd925, 0x7, 0x7853, 0x8, 0x10000, 0x2, 0x43, 0x1, 0x3, 0x6a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x8, 0x6, 0x2, {0x8, 0x3, 0x8, 0x5, 0x7, 0xa3c1}, {0x0, 0x0, 0xff80, 0xc7f, 0x2, 0x7}, 0x80, 0x5d85, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x7, 0x0, 0x9, 0x9, 0xc, 0x5, 0xc4, 0x8, 0x2, 0x0, 0x7f, 0x8001, 0x99, 0x101, 0x80000001, 0x6, 0x3ff, 0x43b, 0x2, 0x0, 0x5, 0x9, 0x0, 0x9, 0x7f, 0x2, 0x9, 0xcb, 0x8, 0x2, 0x1, 0x7, 0x3, 0x4, 0x80000000, 0x1, 0x7700, 0x3, 0x80000000, 0x4, 0x2, 0x6, 0x16c8, 0x2, 0xc, 0x7, 0x4, 0x10000, 0x0, 0xd, 0x2c18, 0x9, 0x9, 0x7, 0xfffffffe, 0x5, 0x3, 0xd, 0x2, 0x1, 0x7, 0x8000, 0x2, 0x7f, 0x3, 0x4, 0x6, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x1000, 0x2, 0x3, 0x8, 0x2, 0xffffff31, 0x8, 0x3, 0x3284, 0x0, 0xfffffbff, 0x1, 0x80000000, 0x7, 0x2, 0x8c, 0x6, 0x7fff, 0xe, 0x5, 0x6, 0x0, 0xbd, 0xfffffff7, 0x8, 0x2, 0x8, 0x6, 0x1, 0x3, 0x2, 0x401, 0x10, 0x10000, 0x4, 0x7fff, 0x80000000, 0x8, 0x3, 0x7, 0x3, 0x3, 0xc, 0x70b2, 0x2, 0x7, 0xc, 0x5, 0x4, 0x3, 0x2, 0x0, 0x8, 0x8, 0x0, 0xfffffff5, 0x0, 0x8, 0x7fffffff, 0x5, 0x0, 0xd4, 0xffff, 0x2, 0x4, 0x5, 0x8, 0x4, 0x5a, 0x8, 0x3, 0xb6, 0x7, 0x10, 0x2, 0x1, 0x200, 0x3, 0x0, 0x6, 0x6, 0x8001, 0x4, 0x65, 0x4, 0x3, 0x5, 0xe, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xa863, 0x9, 0x2, 0x5, 0x2, 0xc, 0x75be, 0xff, 0xfffffff7, 0xb, 0x3, 0xbb09, 0x78b, 0x6, 0x4, 0x7, 0x2, 0x3, 0xc, 0xff, 0x7, 0x2, 0xbd4, 0x7, 0x5, 0x1, 0x0, 0x5, 0x92, 0x0, 0xfffff59d, 0x3, 0x7, 0x400, 0x4, 0x200, 0x1000, 0x5a, 0x0, 0x7, 0x6, 0x2, 0x7, 0x2, 0x3, 0x9, 0x5, 0x3, 0x6, 0x3ff, 0x3, 0x7f, 0x200, 0x9, 0x359d1282, 0x1000, 0x3, 0xfffffff1, 0x2, 0x800, 0x400, 0xea, 0x2, 0x81, 0x9, 0x8, 0x401, 0xd, 0x8, 0x1, 0x5, 0x3, 0x6, 0x0, 0x4, 0x2, 0x401, 0x0, 0x1, 0x29, 0x3ff, 0xf0, 0xffffffff, 0xfffffe00, 0x2, 0x9, 0x6d, 0x63c6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x511, 0x0, 0x3ff, 0x3, 0x4, {0x27, 0x0, 0x6, 0xfffd, 0x2, 0x5}, {0x4, 0x2, 0xf5, 0x10, 0x40, 0xffffffff}, 0xfff, 0x2, 0x38}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6eb8, 0x2, 0x40, 0x1, 0x8, 0x2, 0x8000, 0x6, 0x7f, 0xc, 0x0, 0x6, 0x1820000, 0x100, 0xffffffff, 0x9, 0x10, 0x6, 0x10001, 0x6, 0xa3b, 0x2, 0x1000, 0x6, 0x8000, 0x40, 0x1, 0x5, 0x5, 0x2, 0x0, 0x1, 0x8001, 0x2a9, 0x9, 0x5, 0x4, 0xfffff2b9, 0x7fffffff, 0x1, 0x8, 0x2, 0x800, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x80, 0x401, 0x800, 0x7, 0xfffffd33, 0x4, 0x8, 0x4, 0x2, 0x6, 0x50b, 0x9, 0x7, 0x8, 0x800, 0x0, 0x8, 0x6, 0x0, 0x8, 0x1, 0x1370, 0x97, 0x4, 0x1, 0x8, 0x3, 0xe, 0x80000000, 0x8, 0x0, 0x3, 0x2, 0x8, 0xfffffffd, 0x31, 0xb, 0x8, 0x66ad9bf, 0x9, 0x0, 0x8, 0x932, 0x9, 0x2, 0xd23, 0xd178, 0x3, 0x2, 0x658, 0x8, 0x3, 0x501, 0x2, 0x4, 0x4, 0x91e7, 0x3, 0x4, 0x7, 0x8, 0x4, 0x5, 0x4, 0x8, 0x0, 0x400, 0x6, 0x4, 0x2, 0x6, 0x9, 0x0, 0x0, 0x1, 0xfff, 0x200, 0x8000, 0x6, 0x4, 0x4800, 0x6, 0x5, 0x800, 0x5, 0x7, 0x1ff, 0x1000, 0xc63, 0x9, 0x3, 0x7, 0x1, 0x0, 0xffffff4c, 0xff, 0xa, 0x9, 0x2, 0x4, 0x6, 0x3ff, 0x2, 0xbf, 0x5, 0x2, 0x9, 0x7, 0x5, 0x3, 0x8, 0x800, 0x400, 0x2, 0x1, 0xff, 0x5, 0xff, 0x3, 0x100, 0x10000, 0x0, 0x1ac, 0x6, 0x2, 0x1, 0x101, 0x64a3411f, 0x8001, 0xf9b, 0xf80d, 0xcc36, 0x6, 0x6, 0x7, 0xff000000, 0x6, 0x2, 0x4, 0xfffff37e, 0x4, 0x5, 0x8, 0xa, 0x5, 0x4, 0x0, 0x35f, 0x9, 0x4, 0x4, 0x4, 0xe, 0x5, 0xd, 0x7, 0xacf0, 0x9, 0x1, 0x3, 0xc6000, 0x7, 0x65, 0x32e, 0x6, 0x9, 0x9, 0x9, 0xc45, 0x832, 0x0, 0xfffffff9, 0x6, 0x1000, 0x80, 0x4, 0x61, 0x50000000, 0x3, 0xfff, 0xa, 0xd, 0x0, 0x88d, 0xd0, 0x1, 0x7, 0x7ff, 0x10001, 0x5, 0x8, 0x3, 0x9, 0x280000, 0x122becaa, 0xb, 0x5, 0x5, 0x101, 0xfffffffc, 0x10, 0x7ff, 0x2, 0x9, 0x9, 0x0, 0xffff7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x4000, 0x80000001, 0xa7, 0xdd8, 0x1, 0x1, 0x12, 0x8001, 0x7fff, 0xaa64, 0x8b, 0x3, 0x2, 0x81b, 0x4, 0x7fffffff, 0x1800, 0x81, 0x7f, 0x7fa9, 0x9, 0x2, 0xe8e, 0x1, 0x6, 0x2, 0x0, 0x7, 0x5, 0xfffffff7, 0x9, 0x95, 0x6, 0x99c, 0x7fffffff, 0x0, 0x9, 0x9, 0x5, 0x3, 0x1, 0x7, 0xfffffff7, 0x0, 0x6, 0x1, 0x3, 0x7, 0xc, 0x7, 0x9, 0x80000001, 0x80, 0x4, 0x10000, 0x0, 0x5, 0x2005, 0x8, 0x4, 0xa, 0x9, 0x7, 0x10, 0x9fb, 0x1, 0x80000000, 0x5, 0x10001, 0x4, 0x6, 0x5, 0x6, 0x5, 0x1, 0x3000000, 0x6, 0x80, 0x5, 0xfffffffb, 0x4, 0x0, 0x7, 0x4, 0xa32, 0x1000, 0x9, 0x7, 0x8, 0x7, 0x6, 0x7, 0x4ca, 0xb5bd2000, 0x1, 0x8077, 0x7ff, 0x0, 0x6, 0xee, 0x4, 0x8, 0x2, 0x0, 0xb0, 0x400, 0x5, 0x6, 0xe1, 0xfffffffb, 0x8, 0x6, 0x0, 0x4, 0x78, 0x4, 0xc, 0x2, 0x8, 0x0, 0x1, 0xe0e1, 0xffff0000, 0x6, 0xfff, 0xd7, 0x4, 0xa5, 0x6, 0x8, 0x6a, 0x0, 0x9, 0xed, 0x6, 0xdbc3, 0x7, 0xc, 0x4, 0x0, 0xfffffffb, 0x4, 0x5, 0x1000, 0x9, 0x9069, 0x7, 0x1, 0xb3, 0x1, 0x4, 0x7, 0x2, 0x6, 0x0, 0x7, 0x81, 0xa000000, 0x5, 0x8, 0x80000001, 0x80, 0x0, 0xfffffffd, 0x1, 0x4, 0x3, 0x4, 0x5, 0x7, 0x7, 0x3, 0xd183, 0xc, 0x9, 0x10, 0x7ff, 0xbc78, 0x2, 0x40, 0x3f8, 0x10000, 0xffff, 0x4, 0x7, 0xae0, 0x4, 0x9, 0x401, 0x8, 0x5, 0x9, 0x8000, 0x3, 0x3aca, 0x5, 0x25c, 0x800, 0x99, 0x80000001, 0x81, 0x9, 0x8, 0x1, 0x81, 0x6, 0x2, 0x2, 0x8, 0x10000, 0x9, 0x2, 0x80000000, 0x1, 0x7932, 0x9, 0x7, 0x6, 0x101, 0xfffffffa, 0xaaa, 0x7, 0x3, 0xa, 0x7, 0x7, 0x9, 0xc3a, 0x4, 0x4, 0xffffffff, 0x7, 0x2, 0xfffffff9, 0x5, 0x0, 0xfffffff8, 0x1, 0x7, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x9, 0x8, 0x1000, 0x7fff, 0x5, 0x0, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0xe0, 0x6, "bd52ef2dff7a7a26024612fb3d3dd905ed03232de820bd58d028287a153f23efc6b874f70cf8ff97802ee5d02e8c789d7231ef93713e7ea8d18f4640d34c40e1a94629120bef7a82ae309e0c862211ca2309db0d8be9d7c8ad7ef531c032942c103f0a3301f26272872934240c4cdccfb60c21785c2551055faad21f5c301499ce8c6050e8b37ce8481fbea63c181272831876a24319bfb538f27635ac96c0c21ec544e61f597775ab9357192acb3d32224e31c8512af0ec887305c3ea1377dc5471c16dd519827c76b0b66956ddda22b09a5ef0ec2cc0597cdfc49a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x194, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xa}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0xf}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xd4adc62}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x28000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xca, 0x6, "5f89097d8b7398bd35466b5cac6873e94a4dae9bb1d9d7583e9881c56e842f3a7bffd53ac0dffdf51df8fead7fcbfcea7b10f1d58cd02a95f80bddfa965696cbe0129e410ed1eabd9b3d10e68344ecc3b2ebf9da65285c4718fa3f63346b892695deb97dd915e13d39afc9343de309c86a439aa1a281f357761977625b9234e60b80727111bd8379db43ac46e0c50365230917447866e8114b3e53e8b1b97209c8b522791ea29319a47c0c9e8609bd54fe88518377a0b9bd33d7979eb6ce56b84cad5122995e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x20d8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000201020000008463d03446dcc019da00000000000000ac000400038004000280bde786793783226167af"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c1c3a8d4f9da0400cb8449aa38a66c000000000000004000", @ANYRES32, @ANYBLOB="04002a00"], 0x20}}, 0x0) fchdir(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001c000180150001"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000280)={@mcast1, 0x4d}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 7.624508426s ago: executing program 0 (id=1687): socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) pipe2(0x0, 0x4080) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = io_uring_setup(0x3055, &(0x7f00000001c0)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x7, {0x7, 0x0, "78df705a90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="be", 0x1}], 0x1}, 0x20048000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.929434785s ago: executing program 1 (id=1688): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2604c8d5, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000640)=""/178, 0xb2}], 0x2}, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 6.898267179s ago: executing program 4 (id=1689): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)=0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0xbb, 0x6b43, 0xba, 0x5, 0x0, 0x7f, 0x81, 0x3, 0x0, 0x3, 0x8, 0x5}, {0x7fff, 0x7, 0x4, 0x8d, 0x6, 0x68, 0x1, 0x3, 0x3, 0x3, 0x1d, 0x8, 0x10000}, {0x1, 0x40, 0xfa, 0x10, 0x0, 0x1, 0xc7, 0x5, 0x6, 0x40, 0x8, 0x6, 0x7}], 0x5}) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}}, 0x40) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000001340)={0x4, 0xb, 0x0, 0x39, 0x14, "ae74d649c7d55949ce4cee019eb8e37944a179"}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4001) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000014c0)=0xfffffeff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x24000, &(0x7f0000001740)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}]}}) sendmmsg$unix(r1, &(0x7f0000001800), 0x0, 0x14) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000001840)=0xe2) lseek(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80800}, 0x40080) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001980)=0x6ef3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000019c0)=""/147) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000001a80)=0xf15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r7) sendmsg$nl_route(r1, &(0x7f0000001f40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x96dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 6.775923879s ago: executing program 4 (id=1690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000240)={0xbc, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x56c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000006c0)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042fc0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da2cad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e106e1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22e1328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87b3383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e5", 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="fe", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003040)=[{{&(0x7f00000084c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x2, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e010000062406"], 0x0) 6.651846302s ago: executing program 1 (id=1691): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x800, 0x2020}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 5.575169762s ago: executing program 1 (id=1692): openat$kvm(0xffffffffffffff9c, 0x0, 0x5c30c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x2, 'ipvlan0\x00'}) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x10, r1, 0xe125a000) openat$nullb(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0xd}, 0x1c) socket$inet(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003b20"], 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000100000000eeffffff06000008000b0000000000000000008660ffe609e77717b90b5f4d6ef66d5e5bd44d07aae561bc986fb5ac02559eef2ba2fa51bc57b0d09dbad0879107e46695aee7b4bc45587f50b72d3f3a1f086880280408c5dcd00000000000"], 0x24}}, 0x200040d5) 4.664634341s ago: executing program 1 (id=1693): socket$packet(0x11, 0xa, 0x300) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$FUSE(r2, &(0x7f0000020b40)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/158, 0x9e}], 0x1, 0x100, 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000c57000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000000)="8907040400", 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfcbff, 0x80000}, 0xc) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.487763839s ago: executing program 0 (id=1694): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905840dfc"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) socket$inet(0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) quotactl$Q_QUOTAON(0x0, 0x0, 0xee01, 0x0) 4.329530106s ago: executing program 2 (id=1695): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="ea7f798f901c20c8f522268d444d74209ac5eba46ed8e9897506cd4bb4c4a1383ec03adad3f0ff42935491788a9f7652e161a6e5c6243b62755df62cb4cc198e91907480ac09d0756f4264d6ca41922fc0917d9f8d80b580ba43adaea0ef4e9f4ffbc583e1c1a70dad9bb73984c84185d832b448ede6846fe833da835b81fa96df63f455c4a7dbb1ff5744fb758ff324a5249374d83bc7877aafdd7e09581804f3475e973a7abff941ee2904645d5d43b72dda9a37709f8d9aa5257640ff8ac918abaa76690ecd6611b895e1df20a5501d33a43651351fbdfc244567", 0xdc}], 0x1) 4.136947535s ago: executing program 2 (id=1696): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=@framed={{}, [@printk={@llu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x5c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000280)={0x0, 0x52424752, 0x0, @stepwise}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = syz_io_uring_setup(0x24fb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x34c, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6eba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64aa5b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8000, @empty, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x7, 0x2, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}}) io_uring_enter(r9, 0x5b43, 0x0, 0x0, 0x0, 0x0) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) clock_gettime(0x2, &(0x7f00000002c0)) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r13, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x40000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x10}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 3.998727042s ago: executing program 3 (id=1667): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) syz_usb_control_io(r2, &(0x7f0000001380)={0x2c, &(0x7f00000010c0)={0x40, 0xf, 0x86, {0x86, 0xe, "bcfaf6f3b3e6f215eb1df12ce14ed239623916328fa81d87929699eec7e9ec1f91ff476640400594a9011ccb893cbc9370e78f4f8ce2afbb3776087ef9996974d9b09e5f1715e56d9a442db2e06d400f5a71408b7dc241a45edd305ad9f09674281fd2657684e12d8b2104887037dbb67eb1c57d43c8586190e19a0ebeab3f87f489f777"}}, &(0x7f0000001180)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "305fb2556d382d2624f85c987cd0037ad07944b54dd2755385f9cda8567ee0f7cce1517a0945ca9c953817c63d3681064c97ef481730f848edf3b5bfa015211d7eb389d328894a6d1958e7be5271b75912d56f7a9bb40e6d27627bcdafb9c76e5103970354ca56cf0939d738873a5b101f83f41306f9204baec34dd51c86edbd623fe4d1577c3b0fa563c234507fb300b48355fb8e1186bada1cf7535f78c09fbf88b55e81d8c28ee3d7e61a83d6d73300da33e7afce2230aaa848c0506e8dc822c78e6a38d6c21fc3ed6248af7d2ce3b69c80"}}, &(0x7f00000012c0)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x4, [@ss_cap={0x0, 0x10, 0x3, 0x0, 0xd, 0xb7, 0x0, 0xe}, @ss_cap={0x0, 0x10, 0x3, 0x2, 0xb, 0x6, 0x6, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "540177e8de4a843163209383a10c0109"}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x8, 0x3, 0x4, "c3cedcab", "ea29c770"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0xfe, 0x9, 0x5, 0x3, 0x2}}}, &(0x7f0000001880)={0x84, &(0x7f00000013c0)={0x40, 0x15, 0xf4, "b8d9273ada0c6543c04c8ebd91aa961c08e227530888512ec9a62d86ba1e099334a1a98596c00528f604f0a77f86855f188fec5cca4a447decf66848c93d376d67bae332e489baa9a2e880bbfbd621a11bdea1bb93b508d881d47dee1378d9e36ac7fa84f5d0b280e00c3eed672193bc15b7a0483bc5684ad5e27ecef305a25024a98a1b63d0c5053e44e8cc39cbecb503b525dcef7528305179836125047af0bdeec0f5535abc026953c30e0bc8db27873e629916d1bad7b154ec6e493b7a3603e0a2db98cffeb2bfdbac38ec6a08d0ec8d3a4d6f0abac21e72c7e27662b12d1c0724ef72d7f845a720efe4eab293a1bb179c29"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xd0}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x0, 0x7}}, &(0x7f0000001580)={0x20, 0x0, 0x8, {0xa0, 0x20, [0x7700]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001640)={0x40, 0xb, 0x2, "8792"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000001540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001740)={0x40, 0x19, 0x2, "c488"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000017c0)={0x40, 0x1c, 0xfffffffffffffc4d, 0x3}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001840)={0x40, 0x21, 0x2c, 0xa}}) syz_usb_control_io$uac1(r2, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0x3) ftruncate(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x2, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000001080)=0xe) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff2c1001c0"]) r12 = dup(r6) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r13, 0xae9a) 3.847569754s ago: executing program 2 (id=1697): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xfffffff4, 0x80, 0x4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xff}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000200)=[0x0], 0x1, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 3.74447277s ago: executing program 1 (id=1698): ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) ftruncate(0xffffffffffffffff, 0x5) geteuid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) syz_usb_connect(0x0, 0x90, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000bc4b850821046e040d960102030109027e00010200000009040000080202ff000af782d0f964240195050202010209240600000100000009050000000000000009050100000000004a1011626e42090218c8810ab9e2b9781a090500000000000000090504000000000f00090500100000000700090500102000070000022109050000000000000009050400"], 0x0) clock_settime(0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff6075c5d0d2ff"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300", @ANYRES64=r5, @ANYRES64=r1], 0x1e4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81, 0x6, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x6}]}, 0x10) 3.594693133s ago: executing program 2 (id=1699): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x1}}, 0x120) io_setup(0x7, &(0x7f0000006540)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00f6ffffff000000b402000014000000b7030000000000008500000083f00000b70900000000000055090100000000009500000000000000bf91000000000000b780b86fa07b4d296b00000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) io_pgetevents(r1, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') read$FUSE(r4, &(0x7f0000006480)={0x2020}, 0x2020) preadv(r4, &(0x7f0000001680)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x6, 0x0) read$FUSE(r4, &(0x7f00000016c0)={0x2020}, 0x2020) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) getegid() getgroups(0x1, &(0x7f0000000180)=[0xee00]) r5 = getegid() r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, r7, r5) fstat(r0, &(0x7f0000000380)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) chown(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0) 3.571214005s ago: executing program 4 (id=1700): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2604c8d5, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000640)=""/178, 0xb2}], 0x2}, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 3.214384145s ago: executing program 4 (id=1702): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x1c62e}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3, 0x0, 0x0, 0x10}}], 0x4000000000001ee, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x76}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a638", 0x5c}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x240480d9}, 0x800) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vcsu(&(0x7f0000000000), 0xa15, 0x480802) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080005400000e156080002400000000a08000140000000000900010073797a30"], 0xc8}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000002, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.285439054s ago: executing program 4 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="5100330080040000080211000000080211"], 0x70}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000002000), 0x0, 0x20041) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') pread64(r5, &(0x7f0000001480)=""/171, 0xab, 0x7) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x4805, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="0800050009"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1.427727465s ago: executing program 3 (id=1704): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xf, 0x0, 0xf, 0x102, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, 0xc}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x10, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000080)={r2}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180), 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$setsig(0x4203, 0x0, 0x1, &(0x7f00000004c0)={0x1c, 0x10001, 0xffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x2000000) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, ';'}, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0x2, &(0x7f0000000140)={0x3, 0x0, 0x7}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0x5, r0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000100)=0x5) 1.225538684s ago: executing program 0 (id=1705): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="ea7f798f901c20c8f522268d444d74209ac5eba46ed8e9897506cd4bb4c4a1383ec03adad3f0ff42935491788a9f7652e161a6e5c6243b62755df62cb4cc198e91907480ac09d0756f4264d6ca41922fc0917d9f8d80b580ba43adaea0ef4e9f4ffbc583e1c1a70dad9bb73984c84185d832b448ede6846fe833da835b81fa96df63f455c4a7dbb1ff5744fb758ff324a5249374d83bc7877aafdd7e09581804f3475e973a7abff941ee2904645d5d43b72dda9a37709f8d9aa5257640ff8ac918abaa76690ecd6611b895e1df20a5501d33a43651351fbdfc244567", 0xdc}], 0x1) 1.067927168s ago: executing program 0 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4018aee3, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a000040"]) 773.751948ms ago: executing program 4 (id=1707): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x6600, 0x0, @empty}, 0x1c) 282.07593ms ago: executing program 0 (id=1709): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000056020000000000000100000000000000340000000000000001000000000000005601000000020000ff07000000000000bb030000000000000400000000000000b0010000000000000100000000000000ea0900000000000008000000000000009700004000000000030000000000000021000000000000000400000000000000b00b0000000000000100000000000000"]) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) 128.029065ms ago: executing program 3 (id=1711): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2604c8d5, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000640)=""/178, 0xb2}], 0x2}, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 0s ago: executing program 3 (id=1712): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x1c62e}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3, 0x0, 0x0, 0x10}}], 0x4000000000001ee, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x76}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea", 0x64}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x240480d9}, 0x800) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vcsu(&(0x7f0000000000), 0xa15, 0x480802) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080005400000e156080002400000000a08000140000000000900010073797a30"], 0xc8}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000002, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.1.1351'. [ 517.712219][ T5154] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 517.790315][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.827512][ T5154] usb 5-1: Product: syz [ 517.838351][ T5154] usb 5-1: Manufacturer: syz [ 517.851195][ T5154] usb 5-1: SerialNumber: syz [ 517.943129][ T5154] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.074035][ T5096] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.178851][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 518.239534][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 518.249554][T12127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1355'. [ 518.715693][T11722] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 518.865978][ T5152] usb 5-1: USB disconnect, device number 43 [ 518.947621][ T5154] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 519.112586][T11722] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.124212][ T5154] usb 4-1: device descriptor read/64, error -71 [ 519.153723][ T5096] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 519.164673][T11722] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.187850][ T5096] ath9k_htc: Failed to initialize the device [ 519.205348][T11722] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.228673][ T5152] usb 5-1: ath9k_htc: USB layer deinitialized [ 519.236605][T11722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.283851][T12127] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 519.427551][ T5154] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 519.506401][T12139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 519.597545][ T5154] usb 4-1: device descriptor read/64, error -71 [ 519.728749][ T5154] usb usb4-port1: attempt power cycle [ 520.148917][ T5154] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 520.187600][T11722] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 520.198633][ T5154] usb 4-1: device descriptor read/8, error -71 [ 520.371899][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 520.399963][T11722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.418713][T11722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.445020][T11722] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.476980][T11722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.516535][T11722] usb 2-1: SerialNumber: syz [ 520.734998][T11722] usb 2-1: 0:2 : does not exist [ 520.776923][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.987734][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.024162][ T5191] usb 3-1: USB disconnect, device number 55 [ 521.266467][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.552480][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.930519][ T62] bridge_slave_1: left allmulticast mode [ 521.939618][ T5152] usb 2-1: USB disconnect, device number 58 [ 521.954756][ T62] bridge_slave_1: left promiscuous mode [ 521.978169][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.001142][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.016850][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.031962][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.042815][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.053122][ T5095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.062242][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.179974][ T62] bridge_slave_0: left allmulticast mode [ 522.232631][ T62] bridge_slave_0: left promiscuous mode [ 522.255850][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.690842][ T5191] IPVS: starting estimator thread 0... [ 522.733700][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 522.817585][T12179] IPVS: using max 18 ests per chain, 43200 per kthread [ 523.140724][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.179660][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.193479][ T62] bond0 (unregistering): Released all slaves [ 523.723951][T12194] fuse: Invalid rootmode [ 523.926941][ T62] hsr_slave_0: left promiscuous mode [ 523.944362][ T62] hsr_slave_1: left promiscuous mode [ 523.953441][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.966018][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.981798][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.992485][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.036861][ T62] veth1_macvtap: left promiscuous mode [ 524.046372][ T62] veth0_macvtap: left promiscuous mode [ 524.052454][ T62] veth1_vlan: left promiscuous mode [ 524.068477][ T62] veth0_vlan: left promiscuous mode [ 524.087797][ T5097] Bluetooth: hci4: command tx timeout [ 524.140012][ T5212] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 524.356130][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.370915][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.381251][ T5212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.394465][ T5212] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.403708][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.414799][ T5212] usb 2-1: config 0 descriptor?? [ 524.817095][ T62] team0 (unregistering): Port device team_slave_1 removed [ 524.838156][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 524.896124][ T62] team0 (unregistering): Port device team_slave_0 removed [ 525.862158][ T5212] usbhid 2-1:0.0: can't add hid device: -71 [ 525.882393][ T5212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 525.894001][ T5212] usb 2-1: USB disconnect, device number 59 [ 525.994908][T12164] chnl_net:caif_netlink_parms(): no params data found [ 526.167718][ T5097] Bluetooth: hci4: command tx timeout [ 526.477749][T12164] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.484967][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.505377][ T62] IPVS: stop unused estimator thread 0... [ 526.521771][T12164] bridge_slave_0: entered allmulticast mode [ 526.545216][T12164] bridge_slave_0: entered promiscuous mode [ 526.574955][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.597946][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.620115][T12164] bridge_slave_1: entered allmulticast mode [ 526.649214][T12164] bridge_slave_1: entered promiscuous mode [ 526.820831][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.901811][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.130203][T12243] binder: 12237:12243 ioctl 89f0 20000bc0 returned -22 [ 527.150877][T12238] netlink: 'syz.0.1387': attribute type 4 has an invalid length. [ 527.165567][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.178154][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.187318][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.199492][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.216946][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 527.254790][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 527.284545][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.335536][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.416553][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 527.434502][T12164] team0: Port device team_slave_0 added [ 527.462939][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 527.472353][T12164] team0: Port device team_slave_1 added [ 527.472388][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.491285][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.501036][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 527.518062][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.628910][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.684573][T12251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.735412][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.756031][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.808777][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.886418][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.908327][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.915386][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.941548][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.983829][T12258] netlink: 'syz.1.1391': attribute type 21 has an invalid length. [ 527.991939][T12258] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.055045][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.192378][T12164] hsr_slave_0: entered promiscuous mode [ 528.199960][T12164] hsr_slave_1: entered promiscuous mode [ 528.206863][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.215780][T12164] Cannot create hsr debugfs directory [ 528.257695][ T5097] Bluetooth: hci4: command tx timeout [ 529.021660][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.284414][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.368176][ T5097] Bluetooth: hci0: command tx timeout [ 529.516634][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.609227][ T5097] Bluetooth: hci3: command tx timeout [ 529.615210][T12247] chnl_net:caif_netlink_parms(): no params data found [ 529.670184][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.686533][T12253] chnl_net:caif_netlink_parms(): no params data found [ 529.988895][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.996290][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.008136][T12247] bridge_slave_0: entered allmulticast mode [ 530.016143][T12247] bridge_slave_0: entered promiscuous mode [ 530.069322][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.076658][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.093852][T12247] bridge_slave_1: entered allmulticast mode [ 530.102447][T12247] bridge_slave_1: entered promiscuous mode [ 530.139108][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.152588][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.160638][T12253] bridge_slave_0: entered allmulticast mode [ 530.169958][T12253] bridge_slave_0: entered promiscuous mode [ 530.179228][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.186595][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.194346][T12253] bridge_slave_1: entered allmulticast mode [ 530.202212][T12253] bridge_slave_1: entered promiscuous mode [ 530.231511][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.282762][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.327832][ T5097] Bluetooth: hci4: command tx timeout [ 530.428877][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.456178][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.487227][T12247] team0: Port device team_slave_0 added [ 530.501626][ T62] bridge_slave_1: left allmulticast mode [ 530.507830][ T62] bridge_slave_1: left promiscuous mode [ 530.513653][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.523790][ T62] bridge_slave_0: left allmulticast mode [ 530.530084][ T62] bridge_slave_0: left promiscuous mode [ 530.535850][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.547779][ T62] bridge_slave_1: left allmulticast mode [ 530.553506][ T62] bridge_slave_1: left promiscuous mode [ 530.560838][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.571520][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 530.583533][ T62] bridge_slave_0: left allmulticast mode [ 530.590930][ T62] bridge_slave_0: left promiscuous mode [ 530.596699][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.464122][ T5097] Bluetooth: hci0: command tx timeout [ 531.477003][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.495561][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.517139][ T62] bond0 (unregistering): Released all slaves [ 531.698147][ T5097] Bluetooth: hci3: command tx timeout [ 531.718585][T12304] binder: 12302:12304 ioctl 89f0 20000bc0 returned -22 [ 531.733561][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.748761][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.761738][ T62] bond0 (unregistering): Released all slaves [ 531.825491][T12253] team0: Port device team_slave_0 added [ 531.888288][T12247] team0: Port device team_slave_1 added [ 532.069157][T12303] netlink: 'syz.0.1396': attribute type 4 has an invalid length. [ 532.091767][T12253] team0: Port device team_slave_1 added [ 532.116633][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'. [ 532.128949][T12164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.168235][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.176703][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.203458][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.209691][T12310] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 532.312415][T12164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.338852][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.346519][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.378880][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.521304][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.529215][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.563602][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.609451][T12164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.655545][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.665100][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.693044][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.716711][T12164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.791062][T12247] hsr_slave_0: entered promiscuous mode [ 532.800122][T12247] hsr_slave_1: entered promiscuous mode [ 532.807814][T12247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.816441][T12247] Cannot create hsr debugfs directory [ 532.837607][ T5150] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 533.027863][ T5150] usb 2-1: Using ep0 maxpacket: 32 [ 533.043747][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.083601][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.111374][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 533.136225][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.151625][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 533.176326][ T5150] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 533.190326][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.192795][T12253] hsr_slave_0: entered promiscuous mode [ 533.203063][ T5150] usb 2-1: config 0 descriptor?? [ 533.226310][T12253] hsr_slave_1: entered promiscuous mode [ 533.239712][T12253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.258159][T12253] Cannot create hsr debugfs directory [ 533.527798][ T5097] Bluetooth: hci0: command tx timeout [ 533.556744][ T62] hsr_slave_0: left promiscuous mode [ 533.566818][ T62] hsr_slave_1: left promiscuous mode [ 533.580463][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.595594][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.607180][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.615498][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.638285][ T62] hsr_slave_0: left promiscuous mode [ 533.641642][ T5150] ntrig 0003:1B96:000A.000C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 533.655125][ T62] hsr_slave_1: left promiscuous mode [ 533.663511][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.672466][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.681055][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.691963][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.777723][ T62] veth1_macvtap: left promiscuous mode [ 533.781386][ T5097] Bluetooth: hci3: command tx timeout [ 533.784383][ T62] veth0_macvtap: left promiscuous mode [ 533.805954][ T62] veth1_vlan: left promiscuous mode [ 533.811954][ T62] veth0_vlan: left promiscuous mode [ 533.819760][ T62] veth1_macvtap: left promiscuous mode [ 533.825444][ T62] veth0_macvtap: left promiscuous mode [ 533.832980][ T62] veth1_vlan: left promiscuous mode [ 533.838525][ T62] veth0_vlan: left promiscuous mode [ 535.024591][ T62] team0 (unregistering): Port device team_slave_1 removed [ 535.098024][ T62] team0 (unregistering): Port device team_slave_0 removed [ 535.469911][ T5150] usb 2-1: USB disconnect, device number 60 [ 535.607531][ T5097] Bluetooth: hci0: command tx timeout [ 535.849321][ T5097] Bluetooth: hci3: command tx timeout [ 536.046540][T12331] delete_channel: no stack [ 536.941322][ T62] team0 (unregistering): Port device team_slave_1 removed [ 536.991090][ T62] team0 (unregistering): Port device team_slave_0 removed [ 538.259138][ T5191] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 538.275990][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.366934][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.413792][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.421053][T11722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.472760][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.480047][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.496049][ T5191] usb 2-1: Using ep0 maxpacket: 16 [ 538.506823][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 538.538815][ T5191] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.574700][ T5191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.616771][ T5191] usb 2-1: Product: syz [ 538.633835][ T5191] usb 2-1: Manufacturer: syz [ 538.680188][ T5191] usb 2-1: SerialNumber: syz [ 538.701054][ T5191] usb 2-1: config 0 descriptor?? [ 538.722812][ T5191] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 538.743319][ T5191] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 538.924033][ T62] IPVS: stop unused estimator thread 0... [ 538.994782][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.141534][ T5191] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 539.244126][ T5191] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 539.264261][ T5191] em28xx 2-1:0.0: board has no eeprom [ 539.273823][ T2869] bridge_slave_1: left allmulticast mode [ 539.282715][ T2869] bridge_slave_1: left promiscuous mode [ 539.292404][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.303753][ T2869] bridge_slave_0: left allmulticast mode [ 539.311370][ T2869] bridge_slave_0: left promiscuous mode [ 539.317896][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.357554][ T5191] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 539.365674][ T5191] em28xx 2-1:0.0: dvb set to isoc mode. [ 539.385155][T11722] em28xx 2-1:0.0: Binding DVB extension [ 539.402619][ T5191] usb 2-1: USB disconnect, device number 61 [ 539.417965][ T5191] em28xx 2-1:0.0: Disconnecting em28xx [ 539.511303][T11722] em28xx 2-1:0.0: Registering input extension [ 539.537312][ T5191] em28xx 2-1:0.0: Closing input extension [ 539.572002][ T5191] em28xx 2-1:0.0: Freeing device [ 540.090835][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.102819][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.114510][ T2869] bond0 (unregistering): Released all slaves [ 540.131327][ T2869] bond1 (unregistering): Released all slaves [ 540.239483][T12164] veth0_vlan: entered promiscuous mode [ 540.271896][T12164] veth1_vlan: entered promiscuous mode [ 540.460943][T12247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.477656][T11722] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 540.525296][T12164] veth0_macvtap: entered promiscuous mode [ 540.542134][T12247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.555751][T12247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.584220][T12247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 540.605857][ T2869] hsr_slave_0: left promiscuous mode [ 540.613017][ T2869] hsr_slave_1: left promiscuous mode [ 540.619880][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.627329][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.635822][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.645013][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.667601][T11722] usb 2-1: Using ep0 maxpacket: 8 [ 540.672854][ T2869] veth1_macvtap: left promiscuous mode [ 540.678628][ T2869] veth0_macvtap: left promiscuous mode [ 540.679388][T11722] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 540.684342][ T2869] veth1_vlan: left promiscuous mode [ 540.699458][ T2869] veth0_vlan: left promiscuous mode [ 540.706237][T11722] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 540.725836][T11722] usb 2-1: config 135 has no interface number 0 [ 540.734169][T11722] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.752516][T11722] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 540.764153][T11722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.772705][T11722] usb 2-1: Product: syz [ 540.777251][T11722] usb 2-1: Manufacturer: syz [ 540.783046][T11722] usb 2-1: SerialNumber: syz [ 541.632031][ T2869] team0 (unregistering): Port device team_slave_1 removed [ 541.710792][ T2869] team0 (unregistering): Port device team_slave_0 removed [ 542.680251][T12164] veth1_macvtap: entered promiscuous mode [ 542.907044][ T5191] usb 2-1: USB disconnect, device number 62 [ 542.925578][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.988456][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.008481][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.034415][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.048719][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.101166][T12253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.189861][T12253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.285939][T12253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.338024][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.377200][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.419892][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.454405][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.586797][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.702475][T12253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.783224][T12164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.804081][T12164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.844727][T12164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.870974][T12164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.512204][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.579070][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.596469][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.699366][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.707314][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.730237][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.820498][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.827816][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.846935][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.854147][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.897700][ T5191] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 544.916436][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.077982][ T5191] usb 2-1: Using ep0 maxpacket: 16 [ 545.094295][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 545.160313][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.171619][ T5191] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 545.195717][ T5191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.230273][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.237546][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.256439][ T5191] usb 2-1: Product: syz [ 545.263038][ T5191] usb 2-1: Manufacturer: syz [ 545.275129][ T5191] usb 2-1: SerialNumber: syz [ 545.290686][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.298019][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.322591][ T5191] usb 2-1: config 0 descriptor?? [ 545.350082][ T5191] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 545.398720][ T5191] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 545.511836][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.662755][T12440] netlink: 'syz.4.1413': attribute type 21 has an invalid length. [ 545.808487][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.921194][T12247] veth0_vlan: entered promiscuous mode [ 546.037902][T12247] veth1_vlan: entered promiscuous mode [ 546.068663][ T5191] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 546.210361][ T5191] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 546.245561][T12253] veth0_vlan: entered promiscuous mode [ 546.280450][ T5191] em28xx 2-1:0.0: board has no eeprom [ 546.353089][T12253] veth1_vlan: entered promiscuous mode [ 546.381984][ T5191] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.398406][T12247] veth0_macvtap: entered promiscuous mode [ 546.404391][ T5191] em28xx 2-1:0.0: dvb set to isoc mode. [ 546.421073][ T25] em28xx 2-1:0.0: Binding DVB extension [ 546.434944][T12247] veth1_macvtap: entered promiscuous mode [ 546.463304][ T5191] usb 2-1: USB disconnect, device number 63 [ 546.482137][ T5191] em28xx 2-1:0.0: Disconnecting em28xx [ 546.584502][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.612006][ T25] em28xx 2-1:0.0: Registering input extension [ 546.633918][ T5191] em28xx 2-1:0.0: Closing input extension [ 546.648430][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.674404][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.708836][ T5191] em28xx 2-1:0.0: Freeing device [ 546.728026][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.765881][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.789036][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.816311][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.901797][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.925961][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.944790][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.961806][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.983659][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.004910][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.033400][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.114854][T12470] fuse: Unknown parameter './file0' [ 547.187830][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 547.198949][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 547.245788][T12253] veth0_macvtap: entered promiscuous mode [ 547.296132][T12247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.320183][T12247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.339037][T12247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.355870][T12247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.395112][T12253] veth1_macvtap: entered promiscuous mode [ 547.588348][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.666325][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.695741][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.726559][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.751635][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.773980][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.792906][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.816388][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.865666][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.952022][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.979817][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.017067][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.052881][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.064510][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.093323][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.112356][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.137286][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.162941][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.235288][T12253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.261554][T12253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.288141][T12253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.303432][T12500] delete_channel: no stack [ 548.309937][T12253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.430647][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.454612][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.695022][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.733542][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.028092][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.077805][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.223948][T12518] netlink: 'syz.2.1422': attribute type 4 has an invalid length. [ 549.292394][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.307499][ T5191] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 549.320196][T12523] binder: 12514:12523 ioctl 89f0 20000bc0 returned -22 [ 549.333659][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.363601][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 549.550508][ T5191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.585311][ T5191] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.638914][ T5191] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.650700][ T5191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.672392][ T5191] usb 2-1: Product: syz [ 549.688508][ T5191] usb 2-1: Manufacturer: syz [ 549.706071][ T5191] usb 2-1: SerialNumber: syz [ 549.754051][ T5191] usb 2-1: selecting invalid altsetting 1 [ 549.778117][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 549.854722][T12532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1384'. [ 549.884402][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1384'. [ 550.240378][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 550.269853][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 550.293116][ T5096] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 550.517104][ T5096] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.550678][ T5096] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.572986][ T5096] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.611665][ T5096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.680776][T12532] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 550.877734][ T5155] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 551.130130][ T5155] usb 3-1: Using ep0 maxpacket: 8 [ 551.217860][ T5155] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 551.245881][ T5155] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 551.284804][ T5155] usb 3-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 551.408045][ T5155] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.0d [ 551.441016][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.476975][ T5155] usb 3-1: Product: syz [ 551.489673][ T5155] usb 3-1: Manufacturer: syz [ 551.529100][ T5155] usb 3-1: SerialNumber: syz [ 551.568751][ T5155] rndis_host 3-1:2.0: skipping garbage [ 551.619096][ T5191] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 551.645325][ T5191] usb 2-1: selecting invalid altsetting 1 [ 551.645936][ T5155] rndis_host 3-1:2.0: invalid descriptor buffer length [ 551.669027][ T5191] cdc_ncm 2-1:1.0: bind() failure [ 551.697116][ T5155] usb 3-1: bad CDC descriptors [ 551.715947][ T5191] usb 2-1: USB disconnect, device number 64 [ 551.737782][ T5155] cdc_acm 3-1:2.0: skipping garbage [ 551.753028][ T5155] cdc_acm 3-1:2.0: invalid descriptor buffer length [ 551.832406][ T5097] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 552.627059][T12578] delete_channel: no stack [ 552.691998][T11722] usb 4-1: USB disconnect, device number 75 [ 552.951917][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.305507][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.380017][T12599] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 553.444987][T12599] binder: 12598:12599 ioctl 89f0 20000bc0 returned -22 [ 553.577072][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.595471][T11722] usb 3-1: USB disconnect, device number 56 [ 553.664165][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 553.767025][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.999584][ T5097] Bluetooth: Unexpected continuation frame (len 264) [ 554.159946][ T62] bridge_slave_1: left allmulticast mode [ 554.179122][ T62] bridge_slave_1: left promiscuous mode [ 554.193714][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.208197][ T62] bridge_slave_0: left allmulticast mode [ 554.221026][ T62] bridge_slave_0: left promiscuous mode [ 554.237761][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.605981][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.627863][ T8] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 554.635587][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.645642][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.658238][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.679908][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 554.688422][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.905885][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 554.931684][T12633] FAULT_INJECTION: forcing a failure. [ 554.931684][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 554.942949][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 554.960531][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 554.962885][T12633] CPU: 1 PID: 12633 Comm: syz.3.1448 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 554.969783][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.979751][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 554.979773][T12633] Call Trace: [ 554.979785][T12633] [ 554.979797][T12633] dump_stack_lvl+0x241/0x360 [ 554.979841][T12633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.991925][ T8] usb 3-1: config 0 descriptor?? [ 554.997863][T12633] ? __pfx__printk+0x10/0x10 [ 554.997907][T12633] ? ref_tracker_alloc+0x332/0x490 [ 555.029040][T12633] should_fail_ex+0x3b0/0x4e0 [ 555.033765][T12633] ? skb_clone+0x20c/0x390 [ 555.038221][T12633] should_failslab+0x9/0x20 [ 555.042772][T12633] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 555.048186][T12633] skb_clone+0x20c/0x390 [ 555.052464][T12633] __netlink_deliver_tap+0x3cc/0x7c0 [ 555.057814][T12633] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.063047][T12633] netlink_deliver_tap+0x19d/0x1b0 [ 555.068195][T12633] netlink_unicast+0x7b8/0x980 [ 555.073005][T12633] ? __pfx_netlink_unicast+0x10/0x10 [ 555.078320][T12633] ? __virt_addr_valid+0x183/0x520 [ 555.083470][T12633] ? __check_object_size+0x49c/0x900 [ 555.088818][T12633] ? bpf_lsm_netlink_send+0x9/0x10 [ 555.093993][T12633] netlink_sendmsg+0x8db/0xcb0 [ 555.098804][T12633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.104206][T12633] ? __import_iovec+0x536/0x820 [ 555.109076][T12633] ? aa_sock_msg_perm+0x91/0x160 [ 555.114047][T12633] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.119404][T12633] ? security_socket_sendmsg+0x87/0xb0 [ 555.125005][T12633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.130326][T12633] __sock_sendmsg+0x221/0x270 [ 555.135219][T12633] ____sys_sendmsg+0x525/0x7d0 [ 555.140130][T12633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.145479][T12633] __sys_sendmmsg+0x3b2/0x740 [ 555.150227][T12633] ? __pfx___sys_sendmmsg+0x10/0x10 [ 555.155530][T12633] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 555.161572][T12633] ? ksys_write+0x23e/0x2c0 [ 555.166118][T12633] ? __pfx_lock_release+0x10/0x10 [ 555.171197][T12633] ? vfs_write+0x7c4/0xc90 [ 555.175644][T12633] ? __mutex_unlock_slowpath+0x21d/0x750 [ 555.181324][T12633] ? __pfx_vfs_write+0x10/0x10 [ 555.186209][T12633] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 555.192242][T12633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.198620][T12633] ? do_syscall_64+0x100/0x230 [ 555.203494][T12633] __x64_sys_sendmmsg+0xa0/0xb0 [ 555.208395][T12633] do_syscall_64+0xf3/0x230 [ 555.212972][T12633] ? clear_bhb_loop+0x35/0x90 [ 555.217693][T12633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.223634][T12633] RIP: 0033:0x7f711ab75bd9 [ 555.228091][T12633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.247727][T12633] RSP: 002b:00007f711b88c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 555.256167][T12633] RAX: ffffffffffffffda RBX: 00007f711ad03f60 RCX: 00007f711ab75bd9 [ 555.264170][T12633] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 555.272172][T12633] RBP: 00007f711b88c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 555.280170][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.288191][T12633] R13: 000000000000000b R14: 00007f711ad03f60 R15: 00007f711ae2fa68 [ 555.296305][T12633] [ 555.414624][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.426144][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.464078][ T5154] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 555.475942][ T8] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 555.485326][ T8] hid-generic 0003:0158:0100.000D: unexpected long global item [ 555.493908][ T8] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 555.760519][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.775116][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.790070][ T62] bond0 (unregistering): Released all slaves [ 555.817219][ T8] usb 3-1: USB disconnect, device number 57 [ 555.846432][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1447'. [ 555.890242][T12630] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 556.292953][ T5154] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.326899][T12648] delete_channel: no stack [ 556.437584][T12651] delete_channel: no stack [ 556.455025][ T5154] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 556.484362][ T5154] usb 5-1: can't read configurations, error -71 [ 556.722431][ T62] hsr_slave_0: left promiscuous mode [ 556.728017][ T5095] Bluetooth: hci1: command tx timeout [ 556.777742][ T62] hsr_slave_1: left promiscuous mode [ 556.798198][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.815894][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.939947][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.959878][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.070746][ T62] veth1_macvtap: left promiscuous mode [ 557.103489][ T62] veth0_macvtap: left promiscuous mode [ 557.126553][ T62] veth1_vlan: left promiscuous mode [ 557.146832][ T62] veth0_vlan: left promiscuous mode [ 557.818193][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 557.835894][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 557.844880][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 557.856345][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 557.864613][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 557.872413][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.209297][ T5191] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 558.417581][ T5191] usb 3-1: Using ep0 maxpacket: 8 [ 558.429007][ T5191] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 558.443493][ T5191] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 558.454256][ T5191] usb 3-1: config 135 has no interface number 0 [ 558.466639][ T5191] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.486491][ T5191] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 558.496252][ T5191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.504735][ T5191] usb 3-1: Product: syz [ 558.506127][ T62] team0 (unregistering): Port device team_slave_1 removed [ 558.509504][ T5191] usb 3-1: Manufacturer: syz [ 558.522094][ T5191] usb 3-1: SerialNumber: syz [ 558.590989][ T62] team0 (unregistering): Port device team_slave_0 removed [ 558.807611][ T5095] Bluetooth: hci1: command tx timeout [ 559.469953][T12684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1456'. [ 559.682796][T12626] chnl_net:caif_netlink_parms(): no params data found [ 559.707550][ T5191] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 559.928033][ T5095] Bluetooth: hci4: command tx timeout [ 559.937213][ T5191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.960669][ T5191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.981371][ T5191] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 559.993519][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.002352][ T5191] usb 2-1: SerialNumber: syz [ 560.121178][T12626] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.139625][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.147152][T12626] bridge_slave_0: entered allmulticast mode [ 560.163898][T12626] bridge_slave_0: entered promiscuous mode [ 560.199376][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.219992][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.237247][T12626] bridge_slave_1: entered allmulticast mode [ 560.255242][ T5191] usb 2-1: 0:2 : does not exist [ 560.262953][T12626] bridge_slave_1: entered promiscuous mode [ 560.367017][ T8] usb 3-1: USB disconnect, device number 58 [ 560.484018][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.598477][T12626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.613044][T12626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.626237][T12682] chnl_net:caif_netlink_parms(): no params data found [ 560.871160][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.893795][ T5095] Bluetooth: hci1: command tx timeout [ 560.948668][T12626] team0: Port device team_slave_0 added [ 560.958541][T12626] team0: Port device team_slave_1 added [ 561.113898][T12626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.125830][T12735] delete_channel: no stack [ 561.133819][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.163998][T12626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.206181][ T5191] usb 2-1: USB disconnect, device number 65 [ 561.276744][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.375330][T12626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.383690][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.458936][T12626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.484574][ T6544] udevd[6544]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.616986][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.007486][ T5095] Bluetooth: hci4: command tx timeout [ 562.030832][T12626] hsr_slave_0: entered promiscuous mode [ 562.070501][T12626] hsr_slave_1: entered promiscuous mode [ 562.199446][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.220425][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.261654][T12682] bridge_slave_0: entered allmulticast mode [ 562.283077][T12682] bridge_slave_0: entered promiscuous mode [ 562.346820][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.355055][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.374072][T12682] bridge_slave_1: entered allmulticast mode [ 562.391836][T12682] bridge_slave_1: entered promiscuous mode [ 562.687793][T11722] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 562.793716][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.833700][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.906215][T11722] usb 4-1: Using ep0 maxpacket: 16 [ 562.960431][T11722] usb 4-1: config 1 interface 0 has no altsetting 0 [ 562.967759][ T5095] Bluetooth: hci1: command tx timeout [ 562.981228][T11722] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 562.992103][T11722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.000355][T11722] usb 4-1: Product: syz [ 563.004770][T11722] usb 4-1: Manufacturer: syz [ 563.023703][T11722] usb 4-1: SerialNumber: syz [ 563.112944][T12682] team0: Port device team_slave_0 added [ 563.161960][ T62] bridge_slave_1: left allmulticast mode [ 563.184580][ T62] bridge_slave_1: left promiscuous mode [ 563.195829][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.221962][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.231383][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.270450][ T62] bridge_slave_0: left allmulticast mode [ 563.276205][ T62] bridge_slave_0: left promiscuous mode [ 563.313699][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.087770][ T5095] Bluetooth: hci4: command tx timeout [ 564.537218][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.573066][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.590372][ T62] bond0 (unregistering): Released all slaves [ 564.640250][T12682] team0: Port device team_slave_1 added [ 564.810266][T11722] usbhid 4-1:1.0: can't add hid device: -71 [ 564.816356][T11722] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 564.872869][T11722] usb 4-1: USB disconnect, device number 76 [ 565.062872][T12802] delete_channel: no stack [ 565.096842][T12801] delete_channel: no stack [ 565.112220][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.133058][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.168736][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.201789][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.213820][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.247824][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.554072][T12806] FAULT_INJECTION: forcing a failure. [ 565.554072][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.574740][T12806] CPU: 1 PID: 12806 Comm: syz.3.1477 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 565.584963][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 565.595029][T12806] Call Trace: [ 565.598316][T12806] [ 565.601279][T12806] dump_stack_lvl+0x241/0x360 [ 565.605997][T12806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.611220][T12806] ? __pfx__printk+0x10/0x10 [ 565.615848][T12806] ? __pfx_lock_release+0x10/0x10 [ 565.620995][T12806] should_fail_ex+0x3b0/0x4e0 [ 565.625705][T12806] _copy_from_iter+0x1f6/0x1960 [ 565.630615][T12806] ? __virt_addr_valid+0x183/0x520 [ 565.635970][T12806] ? __pfx_lock_release+0x10/0x10 [ 565.641146][T12806] ? __alloc_skb+0x28f/0x440 [ 565.645794][T12806] ? __pfx__copy_from_iter+0x10/0x10 [ 565.651256][T12806] ? __virt_addr_valid+0x183/0x520 [ 565.656431][T12806] ? __virt_addr_valid+0x183/0x520 [ 565.661610][T12806] ? __virt_addr_valid+0x44e/0x520 [ 565.666806][T12806] ? __check_object_size+0x49c/0x900 [ 565.672127][T12806] netlink_sendmsg+0x743/0xcb0 [ 565.676933][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.682271][T12806] ? __import_iovec+0x536/0x820 [ 565.687182][T12806] ? aa_sock_msg_perm+0x91/0x160 [ 565.692189][T12806] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 565.697529][T12806] ? security_socket_sendmsg+0x87/0xb0 [ 565.703052][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.708389][T12806] __sock_sendmsg+0x221/0x270 [ 565.713177][T12806] ____sys_sendmsg+0x525/0x7d0 [ 565.718009][T12806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.723371][T12806] __sys_sendmsg+0x2b0/0x3a0 [ 565.728088][T12806] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.733257][T12806] ? vfs_write+0x7c4/0xc90 [ 565.737773][T12806] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.744156][T12806] ? do_syscall_64+0x100/0x230 [ 565.748988][T12806] ? do_syscall_64+0xb6/0x230 [ 565.753726][T12806] do_syscall_64+0xf3/0x230 [ 565.758285][T12806] ? clear_bhb_loop+0x35/0x90 [ 565.763010][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.768967][T12806] RIP: 0033:0x7f711ab75bd9 [ 565.773432][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.793090][T12806] RSP: 002b:00007f711b88c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.801602][T12806] RAX: ffffffffffffffda RBX: 00007f711ad03f60 RCX: 00007f711ab75bd9 [ 565.809626][T12806] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000003 [ 565.817649][T12806] RBP: 00007f711b88c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 565.825666][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.833693][T12806] R13: 000000000000000b R14: 00007f711ad03f60 R15: 00007f711ae2fa68 [ 565.841740][T12806] [ 566.156182][ T62] hsr_slave_0: left promiscuous mode [ 566.171306][ T5095] Bluetooth: hci4: command tx timeout [ 566.177954][ T62] hsr_slave_1: left promiscuous mode [ 566.184244][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.223637][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.242665][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.267501][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.345921][ T62] veth1_macvtap: left promiscuous mode [ 566.352835][ T62] veth0_macvtap: left promiscuous mode [ 566.365961][ T62] veth1_vlan: left promiscuous mode [ 566.376151][ T62] veth0_vlan: left promiscuous mode [ 567.426476][ T8938] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 567.629412][ T8938] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 567.647825][ T8938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.660537][ T8938] usb 4-1: config 0 descriptor?? [ 567.684260][ T62] team0 (unregistering): Port device team_slave_1 removed [ 567.711939][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 567.759043][ T62] team0 (unregistering): Port device team_slave_0 removed [ 567.916858][ T8938] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 567.949251][ T8938] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 567.958744][ T8938] [drm:udl_init] *ERROR* Selecting channel failed [ 567.982275][ T8938] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 567.993006][ T8938] [drm] Initialized udl on minor 2 [ 568.005710][ T8938] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 568.032635][ T8938] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 568.082301][ T5150] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 568.096741][ T8938] usb 4-1: USB disconnect, device number 77 [ 568.105247][ T5150] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 568.113596][ T5150] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 568.754810][T12682] hsr_slave_0: entered promiscuous mode [ 568.764009][T12682] hsr_slave_1: entered promiscuous mode [ 568.771265][T12682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.779113][T12682] Cannot create hsr debugfs directory [ 568.924463][T12845] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1486'. [ 568.954554][T12843] warning: `syz.2.1485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 569.279198][ T5096] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 569.395345][T12856] delete_channel: no stack [ 569.487067][ T5096] usb 3-1: Using ep0 maxpacket: 16 [ 569.500743][ T5096] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 569.522203][T12626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.545324][ T5096] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 569.566208][ T5096] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 569.593053][T12626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.604461][T12626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 569.622136][ T5096] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 569.623852][T12626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 569.653695][ T5096] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 569.680582][ T5096] usb 3-1: config 1 interface 0 has no altsetting 0 [ 569.695480][ T5096] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 569.709691][ T5096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.743874][ T5096] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 569.964568][ T5096] scsi host1: usb-storage 3-1:1.0 [ 570.226775][ T5096] usb 3-1: USB disconnect, device number 59 [ 570.289689][T12626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.413114][T12626] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.453693][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.460978][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.559571][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.566772][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.790657][T12682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 570.814798][T12682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 570.849311][T12682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 570.878815][T12682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.960072][T12626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.273979][T12626] veth0_vlan: entered promiscuous mode [ 571.319348][ T8938] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 571.370448][T12626] veth1_vlan: entered promiscuous mode [ 571.441563][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.516741][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.528487][ T8938] usb 4-1: Using ep0 maxpacket: 8 [ 571.561017][T12626] veth0_macvtap: entered promiscuous mode [ 571.561604][ T8938] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 571.578470][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.585721][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.615363][ T8938] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 571.623811][T12626] veth1_macvtap: entered promiscuous mode [ 571.629479][ T8938] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 571.666093][ T8938] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.0d [ 571.666401][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.680126][ T8938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.682455][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.699654][ T8938] usb 4-1: Product: syz [ 571.704053][ T8938] usb 4-1: Manufacturer: syz [ 571.714181][ T8938] usb 4-1: SerialNumber: syz [ 571.746042][ T8938] rndis_host 4-1:2.0: skipping garbage [ 571.755912][ T8938] rndis_host 4-1:2.0: invalid descriptor buffer length [ 571.770617][ T8938] usb 4-1: bad CDC descriptors [ 571.776149][ T8938] cdc_acm 4-1:2.0: skipping garbage [ 571.789005][ T8938] cdc_acm 4-1:2.0: invalid descriptor buffer length [ 571.894872][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.912361][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.926178][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.945642][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.955889][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.972744][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.989886][T12626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.005270][T12682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.076831][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.122637][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.133784][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.146410][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.174085][T12626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.200627][T12626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.222309][T12626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.285823][T12626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.316735][T12626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.327930][T12626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.347220][T12626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.461380][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.614771][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.643280][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.746579][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.770065][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.781642][T12682] veth0_vlan: entered promiscuous mode [ 572.825682][T12682] veth1_vlan: entered promiscuous mode [ 572.919644][T12923] hsr0: entered promiscuous mode [ 572.945330][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 572.979149][T12923] hsr_slave_0: left promiscuous mode [ 573.006358][T12923] hsr_slave_1: left promiscuous mode [ 573.095659][T12923] hsr0 (unregistering): left promiscuous mode [ 573.120430][T12682] veth0_macvtap: entered promiscuous mode [ 573.172289][T12682] veth1_macvtap: entered promiscuous mode [ 573.231552][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.257590][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.278906][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.318334][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.340748][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.357885][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.375662][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.386933][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.406935][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.459282][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 573.459302][ T29] audit: type=1326 audit(1720079029.384:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b575bd9 code=0x7ffc0000 [ 573.491778][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.510584][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.526439][ T29] audit: type=1326 audit(1720079029.424:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b575bd9 code=0x7ffc0000 [ 573.526498][ T29] audit: type=1326 audit(1720079029.424:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f898b5779f7 code=0x7ffc0000 [ 573.526550][ T29] audit: type=1326 audit(1720079029.424:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f898b57796c code=0x7ffc0000 [ 573.526600][ T29] audit: type=1326 audit(1720079029.424:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f898b5778a4 code=0x7ffc0000 [ 573.526649][ T29] audit: type=1326 audit(1720079029.424:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f898b5778a4 code=0x7ffc0000 [ 573.526699][ T29] audit: type=1326 audit(1720079029.424:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f898b57490a code=0x7ffc0000 [ 573.526748][ T29] audit: type=1326 audit(1720079029.424:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b575bd9 code=0x7ffc0000 [ 573.526799][ T29] audit: type=1326 audit(1720079029.434:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f898b575bd9 code=0x7ffc0000 [ 573.526849][ T29] audit: type=1326 audit(1720079029.434:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b575bd9 code=0x7ffc0000 [ 573.527093][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.527114][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.527128][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.532724][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.532754][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.532775][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.534912][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.584502][T12682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.584546][T12682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.584619][T12682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.584675][T12682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.881302][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.881333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.986566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.986596][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.203077][ T4628] usb 4-1: USB disconnect, device number 78 [ 574.594220][T12963] FAULT_INJECTION: forcing a failure. [ 574.594220][T12963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.594281][T12963] CPU: 1 PID: 12963 Comm: syz.4.1452 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 574.594309][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 574.594325][T12963] Call Trace: [ 574.594335][T12963] [ 574.594345][T12963] dump_stack_lvl+0x241/0x360 [ 574.594386][T12963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.594411][T12963] ? __pfx__printk+0x10/0x10 [ 574.594436][T12963] ? __pfx_lock_release+0x10/0x10 [ 574.594460][T12963] should_fail_ex+0x3b0/0x4e0 [ 574.594488][T12963] _copy_from_user+0x2f/0xe0 [ 574.594507][T12963] copy_msghdr_from_user+0xae/0x680 [ 574.594533][T12963] ? _parse_integer_limit+0x1b5/0x200 [ 574.594557][T12963] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 574.594595][T12963] __sys_sendmmsg+0x374/0x740 [ 574.594622][T12963] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.594670][T12963] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 574.594692][T12963] ? ksys_write+0x23e/0x2c0 [ 574.594712][T12963] ? __pfx_lock_release+0x10/0x10 [ 574.594734][T12963] ? vfs_write+0x7c4/0xc90 [ 574.594757][T12963] ? __mutex_unlock_slowpath+0x21d/0x750 [ 574.594778][T12963] ? __pfx_vfs_write+0x10/0x10 [ 574.594819][T12963] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.594840][T12963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.594859][T12963] ? do_syscall_64+0x100/0x230 [ 574.594885][T12963] __x64_sys_sendmmsg+0xa0/0xb0 [ 574.594908][T12963] do_syscall_64+0xf3/0x230 [ 574.594931][T12963] ? clear_bhb_loop+0x35/0x90 [ 574.594948][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.594972][T12963] RIP: 0033:0x7f89c7775bd9 [ 574.594988][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.595002][T12963] RSP: 002b:00007f89c8593048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.595021][T12963] RAX: ffffffffffffffda RBX: 00007f89c7904110 RCX: 00007f89c7775bd9 [ 574.595035][T12963] RDX: 0400000000000026 RSI: 0000000020001cc0 RDI: 0000000000000006 [ 574.595047][T12963] RBP: 00007f89c85930a0 R08: 0000000000000000 R09: 0000000000000000 [ 574.595058][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.595068][T12963] R13: 000000000000006e R14: 00007f89c7904110 R15: 00007f89c7a2fa68 [ 574.595098][T12963] [ 575.256332][T12939] tty tty4: ldisc open failed (-12), clearing slot 3 [ 575.289112][T12947] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 575.320565][T12949] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 575.340534][T12955] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 575.649193][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 575.702534][T12982] 8021q: VLANs not supported on lo [ 575.888167][T12990] netlink: 'syz.4.1509': attribute type 10 has an invalid length. [ 575.906356][T12990] netem: change failed [ 576.227579][ T5154] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 576.236903][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 576.430824][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.454845][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.514857][ T5154] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 576.535090][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.564453][ T5154] usb 5-1: config 0 descriptor?? [ 576.608705][T13015] random: crng reseeded on system resumption [ 576.982798][ T5154] itetech 0003:06CB:73F5.000E: unknown main item tag 0x0 [ 577.028354][ T5154] itetech 0003:06CB:73F5.000E: unknown main item tag 0x0 [ 577.073609][ T5154] itetech 0003:06CB:73F5.000E: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0 [ 578.222752][T13053] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1521'. [ 578.771664][ T5154] usb 5-1: USB disconnect, device number 46 [ 582.647677][ T5095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 582.657730][ T5095] Bluetooth: hci3: Injecting HCI hardware error event [ 582.666735][ T5095] Bluetooth: hci3: hardware error 0x00 [ 583.499092][ T5150] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 583.571800][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.707585][ T5150] usb 2-1: Using ep0 maxpacket: 8 [ 583.715021][ T5150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.744572][ T5150] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.795924][ T5150] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 583.827626][ T5150] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 583.835715][ T5150] usb 2-1: Product: syz [ 583.867691][ T5150] usb 2-1: Manufacturer: syz [ 583.878945][ T5150] usb 2-1: SerialNumber: syz [ 583.891305][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.918507][ T5150] usb 2-1: config 0 descriptor?? [ 584.080747][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.189317][ T5212] usb 2-1: USB disconnect, device number 66 [ 584.341218][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.488713][ T5097] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 584.499178][ T5097] Bluetooth: hci0: Injecting HCI hardware error event [ 584.509027][ T5097] Bluetooth: hci0: hardware error 0x00 [ 584.595586][T13177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.615050][T13177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.624557][T13177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.658328][T13177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.667736][T13177] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 584.675554][T13177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.727526][ T5095] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 584.878033][ T1107] bridge_slave_1: left allmulticast mode [ 584.907554][ T1107] bridge_slave_1: left promiscuous mode [ 584.913402][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.031643][ T1107] bridge_slave_0: left allmulticast mode [ 585.053886][ T1107] bridge_slave_0: left promiscuous mode [ 585.076154][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.188672][T13177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.202902][T13177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.212669][T13177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.222497][T13177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.230799][T13177] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.238856][T13177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 586.658828][ T5097] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 586.676253][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.695716][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.711188][ T1107] bond0 (unregistering): Released all slaves [ 586.729380][ T5097] Bluetooth: hci1: command tx timeout [ 587.287856][ T5097] Bluetooth: hci4: command tx timeout [ 587.601900][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 587.601922][ T29] audit: type=1326 audit(1720079043.524:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.657544][ T29] audit: type=1326 audit(1720079043.524:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.683577][ T29] audit: type=1326 audit(1720079043.534:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.706893][ T29] audit: type=1326 audit(1720079043.534:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.729914][ T1107] hsr_slave_0: left promiscuous mode [ 587.768990][ T29] audit: type=1326 audit(1720079043.534:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.816370][ T1107] hsr_slave_1: left promiscuous mode [ 587.817520][ T29] audit: type=1326 audit(1720079043.534:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.875953][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.883900][ T29] audit: type=1326 audit(1720079043.554:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 587.903046][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.948514][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.956005][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.974618][ T29] audit: type=1326 audit(1720079043.554:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 588.047045][ T29] audit: type=1326 audit(1720079043.554:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 588.077287][ T1107] veth1_macvtap: left promiscuous mode [ 588.128489][ T1107] veth0_macvtap: left promiscuous mode [ 588.134229][ T1107] veth1_vlan: left promiscuous mode [ 588.147457][ T29] audit: type=1326 audit(1720079043.554:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd6d75bd9 code=0x7ffc0000 [ 588.170423][ T1107] veth0_vlan: left promiscuous mode [ 588.810551][ T5097] Bluetooth: hci1: command tx timeout [ 589.204815][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 589.274745][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 589.373904][ T5097] Bluetooth: hci4: command tx timeout [ 590.491850][T13179] chnl_net:caif_netlink_parms(): no params data found [ 590.814892][T13190] chnl_net:caif_netlink_parms(): no params data found [ 590.895567][ T5097] Bluetooth: hci1: command tx timeout [ 591.136823][T13179] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.157114][T13179] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.165107][T13179] bridge_slave_0: entered allmulticast mode [ 591.173050][T13179] bridge_slave_0: entered promiscuous mode [ 591.183258][T13179] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.190662][T13179] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.199091][T13179] bridge_slave_1: entered allmulticast mode [ 591.206771][T13179] bridge_slave_1: entered promiscuous mode [ 591.447833][ T5097] Bluetooth: hci4: command tx timeout [ 591.467104][T13179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.529751][T13179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.680280][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.968814][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.997194][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.010976][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.029491][T13190] bridge_slave_0: entered allmulticast mode [ 592.039985][T13326] input: syz1 as /devices/virtual/input/input29 [ 592.054402][T13190] bridge_slave_0: entered promiscuous mode [ 592.095716][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.119348][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.126686][T13190] bridge_slave_1: entered allmulticast mode [ 592.161106][T13190] bridge_slave_1: entered promiscuous mode [ 592.286424][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.433955][T13190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.459117][T13179] team0: Port device team_slave_0 added [ 592.477222][T13179] team0: Port device team_slave_1 added [ 592.551137][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.644824][T13190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.965425][T13190] team0: Port device team_slave_0 added [ 592.967659][ T5097] Bluetooth: hci1: command tx timeout [ 592.980782][T13179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.999538][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.046359][T13179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.063384][T13179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.070632][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.148088][T13179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.173007][T13190] team0: Port device team_slave_1 added [ 593.457200][T13190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.494172][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.528266][ T5097] Bluetooth: hci4: command tx timeout [ 593.582038][T13190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.736738][T13190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.767698][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.812045][T13190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.834508][T13179] hsr_slave_0: entered promiscuous mode [ 593.858352][T13179] hsr_slave_1: entered promiscuous mode [ 594.175425][ T1107] bridge_slave_1: left allmulticast mode [ 594.198543][ T1107] bridge_slave_1: left promiscuous mode [ 594.211038][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.222523][ T1107] bridge_slave_0: left allmulticast mode [ 594.230995][ T1107] bridge_slave_0: left promiscuous mode [ 594.237189][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.457568][ T8] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 594.679477][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 594.689715][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.708948][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.732927][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.746688][ T8] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 594.756192][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.782483][ T8] usb 3-1: config 0 descriptor?? [ 594.861321][T13417] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1644'. [ 595.124584][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.145119][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.168892][ T1107] bond0 (unregistering): Released all slaves [ 595.245958][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 595.255795][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 595.264651][T13190] hsr_slave_0: entered promiscuous mode [ 595.279342][T13190] hsr_slave_1: entered promiscuous mode [ 595.307697][ T8] usb 3-1: USB disconnect, device number 60 [ 595.344425][T13190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.355551][T13190] Cannot create hsr debugfs directory [ 595.998696][ T1107] hsr_slave_0: left promiscuous mode [ 596.012981][ T1107] hsr_slave_1: left promiscuous mode [ 596.067927][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.102255][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.138672][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.158450][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.240001][ T1107] veth1_macvtap: left promiscuous mode [ 596.266690][ T1107] veth0_macvtap: left promiscuous mode [ 596.276216][ T1107] veth1_vlan: left promiscuous mode [ 596.292584][ T1107] veth0_vlan: left promiscuous mode [ 596.460106][T11722] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 596.627963][ T5191] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 596.657539][T11722] usb 4-1: Using ep0 maxpacket: 32 [ 596.667548][T11722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 596.687489][T11722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 596.718234][T11722] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 596.733418][T11722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.756296][T11722] usb 4-1: config 0 descriptor?? [ 596.767746][ T8] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 596.774240][T13432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.789543][T11722] hub 4-1:0.0: USB hub found [ 596.827552][ T5191] usb 3-1: Using ep0 maxpacket: 32 [ 596.848193][ T5191] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 596.866416][ T5191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.892807][ T5191] usb 3-1: config 0 descriptor?? [ 596.913188][ T5191] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 597.000620][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.011929][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 597.014585][T11722] hub 4-1:0.0: 2 ports detected [ 597.034148][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.049699][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.058285][ T8] usb 2-1: Product: syz [ 597.062496][ T8] usb 2-1: Manufacturer: syz [ 597.067156][ T8] usb 2-1: SerialNumber: syz [ 597.123072][ T5212] usb 3-1: USB disconnect, device number 61 [ 597.303631][T13445] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 597.492785][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 597.578750][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 597.733992][ T8] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 597.745477][ T8] cdc_ncm 2-1:1.0: bind() failure [ 597.771791][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 597.779436][ T8] cdc_ncm 2-1:1.1: bind() failure [ 598.380962][T11722] usb 4-1: reset high-speed USB device number 79 using dummy_hcd [ 599.269849][T11722] hub 4-1:0.0: set hub depth failed [ 599.275549][ T5191] usb 4-1: USB disconnect, device number 79 [ 599.491125][ T5150] usb 2-1: USB disconnect, device number 67 [ 599.795187][T13179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 599.830049][T13179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.935136][T13179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.979561][T13179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 600.119259][ T5150] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 600.339559][ T5150] usb 2-1: Using ep0 maxpacket: 8 [ 600.375953][ T5150] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 600.395219][ T5150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.437295][ T5150] usb 2-1: config 0 has no interface number 0 [ 600.444060][ T5150] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 600.472809][ T5150] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 600.514041][ T5150] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.596737][ T5150] usb 2-1: config 0 interface 52 has no altsetting 0 [ 600.616917][ T5150] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 600.659304][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.704151][ T5150] usb 2-1: config 0 descriptor?? [ 600.809870][T13179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.853078][T13190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.904545][T13190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.949097][T13190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.991042][T13190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.014670][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.034554][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.062658][T13179] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.132728][ T5150] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input30 [ 601.149267][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.157031][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.230910][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.238737][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.781473][T13179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.824212][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.943331][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.950243][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c379000: rx timeout, send abort [ 601.962926][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802c379000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 602.056711][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.064150][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.139400][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.146722][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.277060][T13179] veth0_vlan: entered promiscuous mode [ 602.353986][T13190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.405254][T13179] veth1_vlan: entered promiscuous mode [ 602.432622][ T8] usb 2-1: USB disconnect, device number 68 [ 602.634549][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.704535][T13179] veth0_macvtap: entered promiscuous mode [ 602.765509][ T5150] hid-generic 0000:0001:0000.000F: unknown main item tag 0x0 [ 602.784216][ T5150] hid-generic 0000:0001:0000.000F: unknown main item tag 0x0 [ 602.798014][T13179] veth1_macvtap: entered promiscuous mode [ 602.905536][ T5150] hid-generic 0000:0001:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 603.038548][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.087690][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.120207][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.134539][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.149534][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.176849][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.226500][T13179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.313274][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.342965][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.373037][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.408892][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.447742][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.472511][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.520316][T13179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.585745][T13179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.608020][T13179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.642780][T13179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.677746][T13179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.699852][T13190] veth0_vlan: entered promiscuous mode [ 603.754386][T13190] veth1_vlan: entered promiscuous mode [ 604.028474][T13190] veth0_macvtap: entered promiscuous mode [ 604.151516][T13190] veth1_macvtap: entered promiscuous mode [ 604.281418][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.337138][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.368053][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.394358][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.419491][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.453490][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.486673][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.518749][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.552942][T13190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.582988][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.601236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.636773][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.681992][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.704063][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.757468][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.777839][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.806184][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.847733][T13190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.884149][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.911230][T13190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.082316][T13190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.113659][T13190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.140575][T13190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.170753][T13190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.277171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.298903][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.567804][ T3079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.707864][ T5155] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 605.928311][ T5155] usb 3-1: Using ep0 maxpacket: 8 [ 605.941311][ T5155] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 605.954612][ T3079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.957469][ T5155] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 605.985359][ T5155] usb 3-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 606.017606][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 606.031358][ T5155] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.0d [ 606.062409][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.077772][ T5155] usb 3-1: Product: syz [ 606.091318][ T5155] usb 3-1: Manufacturer: syz [ 606.096098][ T5155] usb 3-1: SerialNumber: syz [ 606.131165][ T5155] rndis_host 3-1:2.0: skipping garbage [ 606.148784][ T5155] rndis_host 3-1:2.0: invalid descriptor buffer length [ 606.157338][ T5155] usb 3-1: bad CDC descriptors [ 606.164618][ T5155] cdc_acm 3-1:2.0: skipping garbage [ 606.202466][ T5155] cdc_acm 3-1:2.0: invalid descriptor buffer length [ 606.247684][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 606.261997][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.287725][ T8] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 606.292105][ T3079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.313276][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.324941][ T8] usb 2-1: config 0 descriptor?? [ 606.425646][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.488084][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.610063][ T3079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.621514][ T8] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 606.762693][ T6544] udevd[6544]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.776161][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.814367][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.108847][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 607.126828][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.139178][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.160353][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.185703][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 607.205208][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.295460][ T3079] bridge_slave_1: left allmulticast mode [ 607.329258][ T3079] bridge_slave_1: left promiscuous mode [ 607.342509][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.356694][ T3079] bridge_slave_0: left allmulticast mode [ 607.366200][ T3079] bridge_slave_0: left promiscuous mode [ 607.382697][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.385528][T13573] netlink: 'syz.4.1572': attribute type 9 has an invalid length. [ 607.427025][T13573] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 608.356201][ T8] usb 3-1: USB disconnect, device number 62 [ 608.676495][ T5150] usb 2-1: USB disconnect, device number 69 [ 608.775863][ T5155] hid-generic 0000:0001:0000.0010: unknown main item tag 0x0 [ 608.847279][ T5155] hid-generic 0000:0001:0000.0010: unknown main item tag 0x0 [ 608.869009][ T8] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 608.918874][ T5155] hid-generic 0000:0001:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 608.927659][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.038522][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.058056][ T8] usb 3-1: device descriptor read/64, error -71 [ 609.069364][ T3079] bond0 (unregistering): Released all slaves [ 609.292104][T13177] Bluetooth: hci3: command tx timeout [ 609.412997][ T8] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 609.597760][ T8] usb 3-1: device descriptor read/64, error -71 [ 609.741318][ T8] usb usb3-port1: attempt power cycle [ 610.053117][ T3079] hsr_slave_0: left promiscuous mode [ 610.086613][ T3079] hsr_slave_1: left promiscuous mode [ 610.142628][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.174179][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.200682][ T8] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 610.219445][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.255042][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.267504][ T8] usb 3-1: device descriptor read/8, error -71 [ 610.366947][ T3079] veth1_macvtap: left promiscuous mode [ 610.420880][ T3079] veth0_macvtap: left promiscuous mode [ 610.443962][ T3079] veth1_vlan: left promiscuous mode [ 610.462672][ T3079] veth0_vlan: left promiscuous mode [ 610.560646][ T8] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 610.628440][ T8] usb 3-1: device descriptor read/8, error -71 [ 610.783468][ T8] usb usb3-port1: unable to enumerate USB device [ 611.374427][T13177] Bluetooth: hci3: command tx timeout [ 611.677663][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f475000: rx timeout, send abort [ 611.688562][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f475000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 611.809427][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 611.883426][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 611.952597][ T5155] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 612.113848][ T8] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 612.164052][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 612.171831][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 612.186977][ T5155] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.205384][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.214841][ T5155] usb 3-1: Product: syz [ 612.219645][ T5155] usb 3-1: Manufacturer: syz [ 612.224527][ T5155] usb 3-1: SerialNumber: syz [ 612.233569][ T5155] usb 3-1: config 0 descriptor?? [ 612.262928][ T5155] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 612.282803][ T5155] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 612.336497][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 612.348969][ T8] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 612.358842][ T8] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 612.376836][ T8] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 612.393911][ T8] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.0d [ 612.403517][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.412116][ T8] usb 2-1: Product: syz [ 612.416697][ T8] usb 2-1: Manufacturer: syz [ 612.421675][ T8] usb 2-1: SerialNumber: syz [ 612.435955][ T8] rndis_host 2-1:2.0: skipping garbage [ 612.450596][ T8] rndis_host 2-1:2.0: invalid descriptor buffer length [ 612.458139][ T8] usb 2-1: bad CDC descriptors [ 612.463994][ T8] cdc_acm 2-1:2.0: skipping garbage [ 612.469466][ T8] cdc_acm 2-1:2.0: invalid descriptor buffer length [ 612.734096][ T5155] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 612.847398][ T5155] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 612.855574][ T5155] em28xx 3-1:0.0: board has no eeprom [ 612.929174][ T5155] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 612.978033][ T5155] em28xx 3-1:0.0: dvb set to isoc mode. [ 613.004840][ T8] em28xx 3-1:0.0: Binding DVB extension [ 613.034070][ T5155] usb 3-1: USB disconnect, device number 67 [ 613.054478][ T5155] em28xx 3-1:0.0: Disconnecting em28xx [ 613.313612][ T8] em28xx 3-1:0.0: Registering input extension [ 613.334104][ T5155] em28xx 3-1:0.0: Closing input extension [ 613.447664][T13177] Bluetooth: hci3: command tx timeout [ 613.471894][ T5155] em28xx 3-1:0.0: Freeing device [ 613.685678][T13572] chnl_net:caif_netlink_parms(): no params data found [ 613.728563][T11722] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 613.960900][T11722] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 613.981634][T11722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.003677][T11722] usb 5-1: config 0 descriptor?? [ 614.054535][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 614.054763][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.130504][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.151984][T13572] bridge_slave_0: entered allmulticast mode [ 614.163519][T13572] bridge_slave_0: entered promiscuous mode [ 614.204380][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.225288][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.255121][T13572] bridge_slave_1: entered allmulticast mode [ 614.271293][T11722] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 614.287008][T11722] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 614.297077][T13572] bridge_slave_1: entered promiscuous mode [ 614.316585][T11722] [drm:udl_init] *ERROR* Selecting channel failed [ 614.384183][T11722] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 614.414240][T11722] [drm] Initialized udl on minor 2 [ 614.434914][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.445542][T11722] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 614.457025][T11722] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 614.469298][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.487042][ T5191] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 614.496047][T11722] usb 5-1: USB disconnect, device number 47 [ 614.505664][ T5191] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 614.601151][T13572] team0: Port device team_slave_0 added [ 614.622423][T13572] team0: Port device team_slave_1 added [ 614.683775][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.697468][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.727950][ T5155] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 614.729674][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.751266][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.758678][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.791564][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.853754][ T5191] usb 2-1: USB disconnect, device number 70 [ 614.944992][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64 [ 614.966135][ T5155] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 614.996608][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.020292][ T5155] usb 3-1: config 0 descriptor?? [ 615.038309][T13572] hsr_slave_0: entered promiscuous mode [ 615.071159][T13572] hsr_slave_1: entered promiscuous mode [ 615.101806][T13572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.135425][T13572] Cannot create hsr debugfs directory [ 615.527494][T13177] Bluetooth: hci3: command tx timeout [ 615.780293][T11722] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 615.988683][T11722] usb 5-1: Using ep0 maxpacket: 8 [ 616.027783][T11722] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 616.036329][T11722] usb 5-1: config 135 has an invalid descriptor of length 132, skipping remainder of the config [ 616.083578][T11722] usb 5-1: config 135 has no interface number 0 [ 616.097872][ T5155] ath6kl: Failed to submit usb control message: -110 [ 616.105049][ T5155] ath6kl: unable to send the bmi data to the device: -110 [ 616.105863][T11722] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.125444][ T5155] ath6kl: Unable to send get target info: -110 [ 616.165842][ T5155] ath6kl: Failed to init ath6kl core: -110 [ 616.188549][T11722] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 616.199536][ T5155] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 616.208727][T11722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.229772][T11722] usb 5-1: Product: syz [ 616.244644][T11722] usb 5-1: Manufacturer: syz [ 616.264729][T13572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 616.281110][T11722] usb 5-1: SerialNumber: syz [ 616.312494][T13572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 616.323129][T11722] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 616.352555][T13572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 616.364703][T11722] usb 5-1: No valid video chain found. [ 616.373307][T13572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.389280][T13177] Bluetooth: hci2: unexpected event for opcode 0x203b [ 616.572545][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.609713][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.626666][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.634059][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.654119][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.662220][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.768760][T13572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.834106][T13572] veth0_vlan: entered promiscuous mode [ 616.854203][T13572] veth1_vlan: entered promiscuous mode [ 616.903890][T13572] veth0_macvtap: entered promiscuous mode [ 616.915434][T13572] veth1_macvtap: entered promiscuous mode [ 616.945697][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.960970][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.975920][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.989289][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.001412][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.014892][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.026912][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.038546][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.052821][T13572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.072845][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.086458][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.098081][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.109269][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.119930][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.131293][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.142510][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.155155][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.172172][T13572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.197638][T13572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.206494][T13572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.216925][T13572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.242063][T13572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.371727][ T5150] usb 3-1: USB disconnect, device number 68 [ 617.546879][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.589618][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.676180][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.687218][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.735939][T13736] tipc: Started in network mode [ 617.744961][T13736] tipc: Node identity 7f000001, cluster identity 4711 [ 617.754956][T13736] tipc: Enabled bearer , priority 10 [ 617.835234][T13736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.843644][T13736] IPv6: NLM_F_CREATE should be set when creating new route [ 618.109669][T11722] usb 5-1: USB disconnect, device number 48 [ 618.127495][ T5212] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 618.243050][ T3079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.348526][ T5150] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 618.380819][ T5212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.398812][ T5212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.422717][ T5212] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.437731][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.457887][ T5212] usb 4-1: SerialNumber: syz [ 618.489771][ T3079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.579825][ T5150] usb 2-1: Using ep0 maxpacket: 8 [ 618.608479][ T5150] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 618.636287][ T5150] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 618.647197][ T5150] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 618.704438][ T5212] usb 4-1: 0:2 : does not exist [ 618.712120][ T5150] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.0d [ 618.722563][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.725322][ T3079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.732632][ T5150] usb 2-1: Product: syz [ 618.747085][ T5150] usb 2-1: Manufacturer: syz [ 618.760423][ T5150] usb 2-1: SerialNumber: syz [ 618.790552][ T5150] rndis_host 2-1:2.0: skipping garbage [ 618.796174][ T5150] rndis_host 2-1:2.0: invalid descriptor buffer length [ 618.804305][ T5150] usb 2-1: bad CDC descriptors [ 618.810848][ T5150] cdc_acm 2-1:2.0: skipping garbage [ 618.816299][ T5150] cdc_acm 2-1:2.0: invalid descriptor buffer length [ 618.872479][ T4628] tipc: Node number set to 2130706433 [ 618.993034][ T3079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.201492][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.214556][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.233603][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.246802][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.262996][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 619.271001][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.715752][ T3079] bridge_slave_1: left allmulticast mode [ 619.729487][ T3079] bridge_slave_1: left promiscuous mode [ 619.742561][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.765110][ T5212] usb 4-1: USB disconnect, device number 80 [ 619.782774][ T3079] bridge_slave_0: left allmulticast mode [ 619.792297][ T3079] bridge_slave_0: left promiscuous mode [ 619.799139][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.066968][ T6544] udevd[6544]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.407808][T13177] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 620.419308][T13177] Bluetooth: hci2: Injecting HCI hardware error event [ 620.434223][ T5097] Bluetooth: hci2: hardware error 0x00 [ 620.567770][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.589006][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.636909][ T3079] bond0 (unregistering): Released all slaves [ 620.894623][ T3079] tipc: Disabling bearer [ 620.907161][ T3079] tipc: Left network mode [ 621.185493][ T5212] usb 2-1: USB disconnect, device number 71 [ 621.367896][T13177] Bluetooth: hci0: command tx timeout [ 621.980954][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.007661][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.066779][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.097714][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.192852][ T3079] veth1_macvtap: left promiscuous mode [ 622.217689][ T3079] veth0_macvtap: left promiscuous mode [ 622.235972][ T3079] veth1_vlan: left promiscuous mode [ 622.277981][ T3079] veth0_vlan: left promiscuous mode [ 622.281222][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.298424][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.309744][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.339298][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.350586][ T5095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 622.373737][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.488030][ T5097] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 622.512333][ T5097] [ 622.514774][ T5097] ============================================ [ 622.520964][ T5097] WARNING: possible recursive locking detected [ 622.527155][ T5097] 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 Not tainted [ 622.534303][ T5097] -------------------------------------------- [ 622.540495][ T5097] kworker/u9:3/5097 is trying to acquire lock: [ 622.546690][ T5097] ffff88802dc5b148 ((wq_completion)hci2){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 622.556597][ T5097] [ 622.556597][ T5097] but task is already holding lock: [ 622.564000][ T5097] ffff88802dc5b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 622.574636][ T5097] [ 622.574636][ T5097] other info that might help us debug this: [ 622.583865][ T5097] Possible unsafe locking scenario: [ 622.583865][ T5097] [ 622.587717][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 622.591579][ T5097] CPU0 [ 622.591589][ T5097] ---- [ 622.591594][ T5097] lock((wq_completion)hci2); [ 622.591616][ T5097] lock((wq_completion)hci2 [ 622.599681][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 622.602562][ T5097] ); [ 622.602574][ T5097] [ 622.602574][ T5097] *** DEADLOCK *** [ 622.602574][ T5097] [ 622.606417][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.611067][ T5097] May be due to missing lock nesting notation [ 622.611067][ T5097] [ 622.611082][ T5097] 2 locks held by kworker/u9:3/5097: [ 622.611098][ T5097] #0: ffff88802dc5b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 622.611162][ T5097] #1: ffffc90003807d00 [ 622.617247][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.623183][ T5097] ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 622.623243][ T5097] [ 622.623243][ T5097] stack backtrace: [ 622.623253][ T5097] CPU: 1 PID: 5097 Comm: kworker/u9:3 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 622.623279][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 622.623294][ T5097] Workqueue: hci2 hci_error_reset [ 622.623327][ T5097] Call Trace: [ 622.623338][ T5097] [ 622.623349][ T5097] dump_stack_lvl+0x241/0x360 [ 622.623389][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.623427][ T5097] ? print_deadlock_bug+0x479/0x620 [ 622.623459][ T5097] validate_chain+0x15d3/0x5900 [ 622.635530][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 622.641644][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 622.641693][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 622.650758][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.655517][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 622.776964][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 622.782502][ T5097] ? mark_lock+0x9a/0x350 [ 622.787334][ T5097] ? mark_lock+0x9a/0x350 [ 622.792065][ T5097] __lock_acquire+0x1346/0x1fd0 [ 622.797315][ T5097] lock_acquire+0x1ed/0x550 [ 622.801937][ T5097] ? __flush_workqueue+0x1b0/0x1710 [ 622.807416][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 622.812953][ T5097] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 622.819011][ T5097] ? __init_swait_queue_head+0xae/0x150 [ 622.824634][ T5097] ? __flush_workqueue+0x1b0/0x1710 [ 622.829990][ T5097] __flush_workqueue+0x1c9/0x1710 [ 622.835224][ T5097] ? __flush_workqueue+0x1b0/0x1710 [ 622.840507][ T5097] ? rcu_is_watching+0x15/0xb0 [ 622.845715][ T5097] ? trace_contention_end+0x3c/0x120 [ 622.851336][ T5097] ? __pfx___flush_workqueue+0x10/0x10 [ 622.857012][ T5097] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.863058][ T5097] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.869214][ T5097] drain_workqueue+0xc9/0x3a0 [ 622.873963][ T5097] destroy_workqueue+0xba/0xc40 [ 622.879062][ T5097] ? destroy_workqueue+0x86f/0xc40 [ 622.884381][ T5097] hci_release_dev+0x169/0x16b0 [ 622.889857][ T5097] ? devres_release_all+0x1eb/0x250 [ 622.895362][ T5097] ? __pfx_hci_release_dev+0x10/0x10 [ 622.900970][ T5097] ? rcu_is_watching+0x15/0xb0 [ 622.905868][ T5097] ? device_release+0x66/0x1c0 [ 622.910775][ T5097] bt_host_release+0x83/0x90 [ 622.915501][ T5097] ? __pfx_bt_host_release+0x10/0x10 [ 622.921018][ T5097] device_release+0x99/0x1c0 [ 622.925897][ T5097] kobject_put+0x22f/0x480 [ 622.930564][ T5097] ? process_scheduled_works+0x945/0x1830 [ 622.936410][ T5097] process_scheduled_works+0xa2c/0x1830 [ 622.942197][ T5097] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.948876][ T5097] ? assign_work+0x364/0x3d0 [ 622.953993][ T5097] worker_thread+0x86d/0xd50 [ 622.959167][ T5097] ? __kthread_parkme+0x169/0x1d0 [ 622.964415][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 622.969931][ T5097] kthread+0x2f0/0x390 [ 622.974152][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 622.980356][ T5097] ? __pfx_kthread+0x10/0x10 [ 622.985128][ T5097] ret_from_fork+0x4b/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 622.989678][ T5097] ? __pfx_kthread+0x10/0x10 [ 622.994416][ T5097] ret_from_fork_asm+0x1a/0x30 [ 622.999447][ T5097] [ 623.458970][ T5095] Bluetooth: hci0: command tx timeout [ 623.817938][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 623.873405][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 624.499961][ T5095] Bluetooth: hci4: command tx timeout [ 624.654476][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.670438][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.727749][ T5095] Bluetooth: hci5: command tx timeout [ 625.421519][ T3079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.528401][ T3079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.618679][ T3079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.730157][ T3079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.856744][ T3079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.927260][ T3079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.988999][ T3079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.047728][ T3079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.206856][ T3079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.268687][ T3079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.328380][ T3079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.386919][ T3079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.515593][ T3079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.586284][ T3079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.636663][ T3079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.690464][ T3079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.822993][ T3079] bridge_slave_1: left allmulticast mode [ 626.830858][ T3079] bridge_slave_1: left promiscuous mode [ 626.836934][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.847980][ T3079] bridge_slave_0: left allmulticast mode [ 626.853801][ T3079] bridge_slave_0: left promiscuous mode [ 626.860520][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.874849][ T3079] bridge_slave_1: left allmulticast mode [ 626.882268][ T3079] bridge_slave_1: left promiscuous mode [ 626.888597][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.900747][ T3079] bridge_slave_0: left allmulticast mode [ 626.906489][ T3079] bridge_slave_0: left promiscuous mode [ 626.913281][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.926068][ T3079] bridge_slave_1: left allmulticast mode [ 626.932073][ T3079] bridge_slave_1: left promiscuous mode [ 626.938559][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.951593][ T3079] bridge_slave_0: left allmulticast mode [ 626.957319][ T3079] bridge_slave_0: left promiscuous mode [ 626.963888][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.979071][ T3079] bridge_slave_1: left allmulticast mode [ 626.984992][ T3079] bridge_slave_1: left promiscuous mode [ 626.991145][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.000501][ T3079] bridge_slave_0: left allmulticast mode [ 627.006229][ T3079] bridge_slave_0: left promiscuous mode [ 627.014635][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.746617][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.759580][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.769975][ T3079] bond0 (unregistering): Released all slaves [ 627.790766][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.808133][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.824063][ T3079] bond0 (unregistering): Released all slaves [ 627.838567][ T3079] bond0 (unregistering): Released all slaves [ 627.857241][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.874176][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.884848][ T3079] bond0 (unregistering): Released all slaves [ 627.905885][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.919242][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.934174][ T3079] bond0 (unregistering): Released all slaves [ 628.945657][ T3079] hsr_slave_0: left promiscuous mode [ 628.951852][ T3079] hsr_slave_1: left promiscuous mode [ 628.960623][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.970912][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.981217][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.989749][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.003538][ T3079] hsr_slave_0: left promiscuous mode [ 629.009821][ T3079] hsr_slave_1: left promiscuous mode [ 629.016193][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.027974][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.045239][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.052887][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.066958][ T3079] hsr_slave_0: left promiscuous mode [ 629.073497][ T3079] hsr_slave_1: left promiscuous mode [ 629.082693][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.090536][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.101347][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.109893][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.122299][ T3079] hsr_slave_0: left promiscuous mode [ 629.137591][ T3079] hsr_slave_1: left promiscuous mode [ 629.144116][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.152719][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.161360][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.169228][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.185161][ T3079] veth1_macvtap: left promiscuous mode [ 629.191025][ T3079] veth0_macvtap: left promiscuous mode [ 629.196798][ T3079] veth1_vlan: left promiscuous mode [ 629.202880][ T3079] veth0_vlan: left promiscuous mode [ 629.209525][ T3079] veth1_macvtap: left promiscuous mode [ 629.215122][ T3079] veth0_macvtap: left promiscuous mode [ 629.221750][ T3079] veth1_vlan: left promiscuous mode [ 629.227139][ T3079] veth0_vlan: left promiscuous mode [ 629.234374][ T3079] veth1_macvtap: left promiscuous mode [ 629.241452][ T3079] veth0_macvtap: left promiscuous mode [ 629.247181][ T3079] veth1_vlan: left promiscuous mode [ 629.253281][ T3079] veth0_vlan: left promiscuous mode [ 629.260114][ T3079] veth1_macvtap: left promiscuous mode [ 629.265698][ T3079] veth0_macvtap: left promiscuous mode [ 629.271529][ T3079] veth1_vlan: left promiscuous mode [ 629.276850][ T3079] veth0_vlan: left promiscuous mode [ 629.680713][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 629.698357][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 629.983693][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 630.020020][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 630.317269][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 630.353930][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 630.638144][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 630.673679][ T3079] team0 (unregistering): Port device team_slave_0 removed