last executing test programs: 6m45.216904062s ago: executing program 1 (id=74): syz_open_dev$sndctrl(&(0x7f0000000040), 0xdad, 0x2000) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xdad, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x3, 0x5, 0x5, 0xf4a6, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) 6m45.132597378s ago: executing program 1 (id=75): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x47, @loopback, @private0, 0x1, 0x0, 0x3}}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x8000000000000000, 0x0) close(r2) socket$caif_stream(0x25, 0x1, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e000200"], 0x30}}, 0x4090) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766648e6f3d4bc37b243c18c3946991e9eef268cd6a197c06dab3d3e58124956809f469420b2b9096227ed8a89c076f0e0770e8b2480c2ccf03", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 6m44.146102174s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc000100789be1642f8430c460e8692a8f8c45aaf3118316539052ba181a60f03707ec8179fd143ed6c4db73977b77f68686d2ec94b25435ecec60f6ac23db96833cbf99779e33db32e62fe3a078933d3c1122022952988b9550db169ecb6e39fd8720a05d3eeb5d40a7ab91f9b5565dc2b48c9ac61eefd9d0aab86e58ea1940d2240a851dbeabcf0b6cefba164663ad87cbcdb6aa1468529d1206b1fa3aa39118b45ab882df7fb2c6e9c25a706f99002cc42ee9b894b4bbfe66ce8fa1038566ae3407d5c80e28dc3911476785933d1ef923697a44a9cd4271d539e2ecc14d37a5e2074116425f0766b49a6febf9f1b8405ee9de1363b262f1be283921020180380002800900020073797a300000000008000340000000000900020073797a300000000008000180000000000900020073797a30000000003c0002800900020073797a320000000008000180000000000800018000000000080003400000000008000180000000000900020073797a3100000000380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a320000000024000280d3fd0180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a258bc430008000340000000010c0004400000000000000001941001802c0001001943281e8af5fa4de43a18b194246a7a86da4a16357db4bc3d3edaccb333b121e8636c2e1c00e4e13c0002800900020073797a310000000008000340000000040900020073797a3100000000080003"], 0x17d4}}, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x3, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) r2 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x171b7, 0x4, 0xc20, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x68, 0x0, 0x5, 0x0, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x1a, 0x2, [{0x5, 0x10, "89a75c88175de862fc42125c0484"}, {0x1, 0x4, "0edb"}]}, @rr={0x7, 0x17, 0x87, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @loopback]}, @generic={0x44, 0x7, "4828ffb9d5"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) connect$packet(r2, &(0x7f0000000500)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) preadv2(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000001780)=""/4090, 0xffa}, {&(0x7f0000003580)=""/4092, 0xffc}], 0x4, 0x0, 0x400000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000140)=0x0) sched_setaffinity(r10, 0x8, &(0x7f00000002c0)=0x5) ioctl$UI_SET_SNDBIT(r9, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r9, 0x5501) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r9, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r11, 0x4b30, 0x8000000000000001) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x50009405, &(0x7f0000000180)) r12 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000400)="0360557baf40c97db001f49ac3f329baffb1ebb505191d4d2a563728cf7d7531d6402654381b7a35c271259cc861e35273f081e235c737e40c3099b10cd7494c1b4f5936a30fe4826dc8e6da4a21685a0f591bbc285e172bbbf0d34913d2a8cdc62ea7147c550d5a5ee0b9779e1b5211e741cb", 0x73, 0xffffffffffffffff) keyctl$revoke(0x3, r12) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="12dc024bd196cdff33b87f89000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aaf8000000200002000a00000000000000ff010000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 6m43.756870844s ago: executing program 1 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r1) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x70, 0x8, [{{0x9, 0x4, 0x0, 0x1c, 0x1, 0x7, 0x1, 0x2, 0x9d, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x300, 0xf5, 0x6, 0xb, 0x40, 0x4}, 0x101, &(0x7f0000000b40)={0x5, 0xf, 0x101, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xa8, 0x1, 0x6, 0x9}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x2, "129065f533da18c6021d7353c09d8c918dbebb40ac48018af3abe5874f08e57c7228c3773279af9c3e828610570c0d2134ead79a7b600c457c5b03be9add81a1a63c236f2fe9cc92f07883588f36b494e81aa48dd2070ebe9f2a4e4faa5ce2b10831def0641323d74331897b13c5ad06de1517e3ccbd22da85a40c44cdb74ef68df9381972251ac228d42bd6aa1f89fc1ffca24ad7b5feb69dec77bddd9ac93972153581ab76fb4b393183d1dccd9c8aae0c4cb84c34c33b1513f0bdbb0d02a0c79aa7e7fc45502f8945e999f74b12627f21656e39bfd0d73da1515600bb0b1fb149a81be037ce0cac8051"}]}, 0x4, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x44d}}, {0xec, &(0x7f0000000d00)=@string={0xec, 0x3, "98b8b5e0f4dda1678b4dfa69afedb54fd240ed41b1501149ec4cf86af6d8c598f05be2754c6b471b327fe48db7b67abd31f6d4c7a364334301547acd7f04d223ea0a7f9164b96000f90f77b901cfee550b9f6e7403d57743d7bca04f80b1b2e72b89b0ee5a541673987dc57bd639985c263f42eb79a3399789d4b8dea6a54ad2a7514e89109c2602bc1fb656ef6fb5befd9eb8475b2fb698c3f5369b1589cc74d0868ce2826b732a19c98e0283f013b66ef926b281e48c21d964e752a464adaf125bba626f6a758bc006d41bf99888ae51d239b629ca7b0aacc74b177c3aaedb43ff95809d72cecede0e"}}, {0x88, &(0x7f0000000e00)=@string={0x88, 0x3, "430df4761bc04fd29490135bd74b548b1815f3406f35af1a09a22325878600d86635e1c99fa9b97d34b674fb6de53052feef9b30c7cebeadf8674c6d039a6f57cdb322351904db9c153fd7c5b5738719c18ba0acc8194daccc8e91da08f127cc40cd891f5db70fb5f10282a7974027a840cad2f4fb1e321566dd390b97b81683ce263bec263d"}}]}) syz_usb_control_io$printer(r3, &(0x7f00000010c0)={0x14, &(0x7f0000000f40)={0x20, 0xd, 0x6b, {0x6b, 0x8, "cbfd0ebb4d687ae527d0e2ff5d5cab4486fd9d3880c29b6ccab97d977b3ae9016bd908f2de022e060250cc5fbc40766a8618b7ecd09dc0221a62061956096389156b123d780a2ae795362b262068684e7f8c6e8cc3f7f67f3c94f31f8987acb7c3b3241eed66d9a50f"}}, &(0x7f0000000fc0)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "7cbc6e7019b5c4e72ccb82bbcad110e4fac1e7c912bfd1d2968ebd9ce7cf0d0cbf5e26555a6f5a4bc215ec56f39cd6a2498118db9e7141be14b998e788937cda303ecf5ed5862cd471acf81e0a22f124248de5be5ab8fd84803499122cd57ba4c4bb3cbbee1f18a0625e98d8853eff5195b01d7c507c10472edcf8130bbf35ac6e435e532931758e91db1bbf811d6173a8c704455198d27d7c81871674b83deb8d9b30cd518989cd6c4d0912db6190c2160b457f0d15f181918ac1d659eb0c7e0f61454396a8425fb3e0ed2ed97d4e17958ddd1e967c67a7d6597e41a14805d0ac9c219e3fca1c1fb074ba3d8779b031048e503cac24e3"}}}, &(0x7f00000012c0)={0x34, &(0x7f0000001100)={0x0, 0x13, 0x4, "a95aba03"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000011c0)={0x20, 0x0, 0x3d, {0x3b, "d83f82f1b4f18491c986e2c12ef9127637443dcff7a2327d7635e9e65b2e8b54e34ac43d292c52ff6cc58cc4a3ea88bdf9c395dce71e14194cff0c"}}, &(0x7f0000001240)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001280)={0x20, 0x0, 0x1, 0x6}}) process_vm_writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000380)=""/195, 0xc3}], 0x3, &(0x7f0000000600)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000006c0)=""/205, 0xcd}, {&(0x7f00000007c0)=""/131, 0x83}], 0x4, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x118, 0x16, 0xa, 0x92044723eca64ea7, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m42.032974281s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000000900010073797a30ab92713b0900020073797a30000000001c0003800800014000000000080002400000400000140048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30e5ffffff1b000380180003801400010067656e65766530000000000000000000140000001000010000000000000000000000000a6590f8b412a059ed2299b47c3934020000007f7b3141826860c9e2496960bd166a"], 0xd8}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x105800, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='fsi_master_acf_poll_response_busy\x00', r4}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) 6m41.049564164s ago: executing program 1 (id=99): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec", 0x41, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000002700)=""/4096, 0x1000}, 0x5}], 0x1, 0x100, &(0x7f00000010c0)={0x77359400}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x2000e863) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 6m25.101235421s ago: executing program 32 (id=99): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec", 0x41, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000002700)=""/4096, 0x1000}, 0x5}], 0x1, 0x100, &(0x7f00000010c0)={0x77359400}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x2000e863) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 6m10.161071354s ago: executing program 3 (id=228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000800010070636900110002"], 0x38}, 0x1, 0x2}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) 6m10.072215973s ago: executing program 3 (id=230): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) clock_settime(0x6, &(0x7f0000000080)={0x0, 0x3938700}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000018c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x2}, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8) unshare(0x20000400) syz_io_uring_setup(0x3c63, &(0x7f0000000240)={0x0, 0x7b46, 0x27}, 0x0, 0x0) 6m8.994323876s ago: executing program 3 (id=232): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002c0001000000000000000000040000802b001a80"], 0x40}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x25, 0x800000003, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x41, 0x1, {0x4, [0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x3], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/97, 0x61}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x12, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x2, 0x1, 0x18, 0xffffffffffffffff}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setsig(0x4203, r9, 0x0, &(0x7f0000000280)={0x80, 0x2, 0x4}) r10 = memfd_create(&(0x7f0000000580)='erspan0\x00', 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffff1b}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100e9ff86fdff9f", @ANYRES32=r10, @ANYBLOB="0000000000000100000000000000000100000000"]) 6m8.5961968s ago: executing program 3 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x48000, &(0x7f0000000440)={'trans=virtio,', {[{@ignoreqv}], [{@obj_role={'obj_role', 0x3d, '.-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'autofs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@appraise_type}, {@seclabel}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m8.400220384s ago: executing program 3 (id=237): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r1 = syz_usb_connect$uac1(0x5, 0xad, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r0], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r1, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x98, 0x1b0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, "13"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x0, 0x0, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x8, 0x5, [0x6, 0x0, 0x8]}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x80, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xb4, 0x1c, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x1}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x5, 0x3, 0x10, 0x2}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e1e041999523a0df235d5e2db3de4c2b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x80, 0x7e, 0x42, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0xae, &(0x7f00000002c0)=@string={0xae, 0x3, "54b84b2554c8a13f1b5cb555d26ee6a6445c21367bc31580126658991b55ae09879bbbba0da88c66724bf6f0863df958ce2d9712452603ead43b25bfcce14e062abbcbcbcdeb4c328e7e1fc0c310635d8cf8346495e9939d9365fc98b80f60afe514cc5e05c65302877683c3298d3e1136982c6df7eaef3eec61bce545f7bea1456431e07603057ebdba8756b7dba45af7db979ca598d674a341d4451a34ee2532ef8c6c186d370b9d8cde17"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x0, 0x23, 0xa6, {0xa6, 0x22, "8665ca44bc2ecbaee396d84a2edc5ad426f57173131291e27cce34d91662bbcc127f27efd1ed2b05a103d338f70374401c5213b251e4ed67db80c1ccd9d64edeca3410b124989bbc05326b773290c4c876f60620d49bbcd53b4387354609ad51e7a29a9eea852f5936870087838f9107c33a0a5c685b9f9b38dfaa71e08bc8040e131ee4121ad47c07b8f67d22c8e8a49c34a3d39507eca3809d170083a20f612676a447"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000600)={0x40, 0x9, 0x7f, "1bfb2327a47f6646266df33726f0156e3a5a397c3ff00d1d9657fe17eaf9c332a7b9e4ada7e5f8ba5409a95597aca452bf942239deb93eb65229caf40d35f3415ab8d920a05683a711eaca62f59e42088e6ebe308b005b1ec15b05462836805c92e66adcf525507d77b7f40e9ca69f0258a88f7a8e123e5bdd2706bdc8910b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x57}}) 6m7.993372258s ago: executing program 3 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x7, &(0x7f0000001640)={0x0, 0x35, 0x1}, &(0x7f0000001680)=0x0) timer_settime(r2, 0x0, &(0x7f0000001700)={{}, {0x77359400}}, &(0x7f0000001740)) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000200)={0x0, 0x7, "e6ae2b404b58f92ba959689f433c99f7dc3dc285c226f7e3f1c5f6b23949a98f", 0x2, 0x7c, 0x2, 0xc, 0x9, 0x1, 0x0, 0x5, [0x2961, 0x3, 0x2, 0x72]}) 6m7.480649272s ago: executing program 33 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x7, &(0x7f0000001640)={0x0, 0x35, 0x1}, &(0x7f0000001680)=0x0) timer_settime(r2, 0x0, &(0x7f0000001700)={{}, {0x77359400}}, &(0x7f0000001740)) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000200)={0x0, 0x7, "e6ae2b404b58f92ba959689f433c99f7dc3dc285c226f7e3f1c5f6b23949a98f", 0x2, 0x7c, 0x2, 0xc, 0x9, 0x1, 0x0, 0x5, [0x2961, 0x3, 0x2, 0x72]}) 1m34.547850965s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 1m11.329627655s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 48.856421835s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 32.079435261s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 24.671852511s ago: executing program 0 (id=1590): sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x49, 0x2, 0x0, "bc3e099e0066055ac9086a00090089ee8e00"}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030307030300f3030303036303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "57f82c16e430deb253f1158a9b88d5f2ffb0740d"}, 0x15, 0x4) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) 24.458827456s ago: executing program 0 (id=1591): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380), 0xa04000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) 24.185195552s ago: executing program 0 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002100)=""/4107, 0x100b) 24.067061959s ago: executing program 0 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x2, 0x0, 0xca, 0x0, 0x0, {0x1}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 23.897141977s ago: executing program 0 (id=1596): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000480)={0x80000000, 0x0, "0af17006bbbc9c0b51cf6ebf75f0b9c9170f7f4770c5743e8c877a86046a76d3", 0x4, 0x1, 0x8, 0x8000, 0xe, 0x9, 0x8ae, 0x0, [0x1, 0x2321739a, 0x8001, 0xc2]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) io_uring_setup(0x73c8, &(0x7f0000000180)={0x0, 0x590f, 0x400, 0x2, 0x2cb}) 23.733575484s ago: executing program 0 (id=1597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x398037b3d3988ec5, 0x0, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x1) 17.043414187s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 7.5148704s ago: executing program 34 (id=1597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x398037b3d3988ec5, 0x0, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x1) 6.354778725s ago: executing program 5 (id=1642): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xd, 0x4, 0x8, 0xb, 0x8, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r1, 0x7, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 6.209088285s ago: executing program 5 (id=1643): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 6.012829672s ago: executing program 5 (id=1646): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x2, 0x5) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) shutdown(r1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32, @ANYBLOB="b00002803c000100240001"], 0xcc}, 0x1, 0xf000}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'geneve1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="2d60010000000000140012800b0001006d61637365630000", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32=r5], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x5, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x80, 0x100, 0x7}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @empty}, &(0x7f0000000240)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x2, 0x7ff, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x68, 0x0, 0x6, 0x2b, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "36464d5691276f1f622f6fc970a0439e"}]}, @rr={0x7, 0xb, 0xd0, [@empty, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x6, [@empty, @empty, @remote, @multicast2, @private=0xa010102, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r14, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5e}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x0, 0x2]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r15, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x160, 0x24, 0xf0b, 0x20000, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1a, 0x7, 0x8, 0x1, 0x2, 0x1000, 0x8, 0x2}}, {0x8, 0x2, [0xb, 0x5]}}, {{0x1c, 0x1, {0xe, 0x2, 0x3fec, 0xffffcea4, 0x1, 0x1000, 0xd, 0x7}}, {0x12, 0x2, [0xf, 0x800, 0x0, 0x3, 0x6, 0x4, 0x7f]}}, {{0x1c, 0x1, {0xfd, 0x2, 0xc755, 0x6, 0x0, 0x2, 0x9, 0x8}}, {0x14, 0x2, [0x3, 0x3, 0xff18, 0x6, 0x642f, 0xfff8, 0x40, 0xb]}}, {{0x1c, 0x1, {0x7, 0x7, 0x8, 0x8, 0x2, 0x1, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0x7, 0xe, 0x2, 0x99b2, 0x1, 0xa, 0x2, 0xca]}}, {{0x1c, 0x1, {0x7, 0x9, 0x1f12, 0x5c9, 0x0, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x3]}}, {{0x1c, 0x1, {0x8, 0x3, 0x7, 0xffff, 0x2, 0x7465, 0x7, 0x4}}, {0xc, 0x2, [0x1, 0x2, 0x3, 0x6]}}, {{0x1c, 0x1, {0x9, 0x8, 0x8, 0x0, 0x3, 0x1, 0x4, 0x8}}, {0x14, 0x2, [0xffff, 0x0, 0x5, 0x9, 0x3, 0x5, 0x7, 0x8e]}}]}]}, 0x160}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2c4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x5, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4845}, 0x4010) 5.8852809s ago: executing program 4 (id=1648): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x22, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 5.68529265s ago: executing program 4 (id=1650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000011) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xa, r1, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x8001, 0x80000001, {0xffffffffffffffff}, {}, 0x6, 0x8}) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa320c00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x811, 0x70bd2b, 0x25dfdbfd, {0x8, 0x0, 0x4, r3, 0x7, 0x30, 0xc, 0x0, 0x0, 0x28fc, 0x4}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = syz_open_dev$vivid(&(0x7f0000000280), 0x2, 0x2) writev(r4, &(0x7f0000000380)=[{&(0x7f00000002c0)="220f83704ada0e1c6a161bc5c73c523d5bd1467c9102f8fc19ad7acfc3e7b1070933f3da991d2d47bd43e5760ce9bee2d3355b038b49339f719addfa56f06039aae437e45b7a3baf850c87f68306905f076052d614ac49d2b3f6a67c4bb0778607667d4590de6dcce23712764173ddc11224d183d76991a74eef17ff22acf14467ef681c76", 0x85}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000440)=@multiplanar_overlay={0x3, 0x1, 0x4, 0x2000, 0x7, {0x77359400}, {0x4, 0xc, 0x0, 0x1, 0xd, 0x1, "53ac595f"}, 0xffffc000, 0x3, {&(0x7f00000003c0)=[{0x0, 0xda08, {0x1ff}, 0x80000001}, {0xe000, 0x6, {0x8}, 0x4}]}, 0x0, 0x0, r2}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000680)={0x24, &(0x7f00000004c0)={0x40, 0xa, 0xca, {0xca, 0x2, "79e3279a4436a44e7a0b9b8b9c00953e088388ec7ae4ac1b094fa0e64173e49b0ece6907ac9476fa387a3d4b41f3a49022b251381c6c309f737b1b3a6a6031897d76e26547f36bf2f22aa6d470aafa84360c947b0e2f4564a826a52e7e92f8f8a3e2ac451b54606ae4749ee838e6d38416419631a6291cc0727d42c2d2c52d3f18db01ef69aed6d7c522f75332c9f9c0a3a731a93db5ec916aa9363a20a0e3db15fd5b89e14e6fadbb05fb2b6914033c4f3e2010766d4d421ebf7eee7fcff3d95d29ff2aed23ff7b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "8067d1cb"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x516, 0x8, 0x1, {0x22, 0xda2}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x40, 0x14, 0x79, "fed31d79457bd304c1ce4e036a11aa0a7788a1b4e09cf2aa0b8f10b26ae522b651643ce87b6354cf680be6a51823fd1ab5055b96a318015de145b1a341f6be22c14edd6272f6e7ac3ba7b5643ee515f934c05091c3275b194aa26da6a178372ecaf3b18ae33e6ce65222db8e365c1d4babca436f7eaa492a8a"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000007c0)={0x20, 0x1, 0x1e, "ad67c06d59c2f5721f8480ca6a0ce02ccf58c994a9a00890c1304ce16670"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xaa}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000008c0)={0x7, 0x18, '\x00', 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000900)={0x10002010}) r8 = msgget$private(0x0, 0x210) msgrcv(r8, &(0x7f0000000940)={0x0, ""/11}, 0x13, 0x3, 0x1000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1ac, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0xcc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000c00)='rpcgss_svc_authenticate\x00', r2, 0x0, 0x8001}, 0x18) r9 = syz_usb_connect(0x5, 0xec2, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x60, 0xef, 0xb6, 0x20, 0x1e2d, 0x60, 0xe98f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb0, 0x3, 0x2, 0x40, 0x80, 0x4b, [{{0x9, 0x4, 0x1f, 0x6, 0x7, 0x74, 0x77, 0x73, 0xbe, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0x2a}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0x7, 0x79, "5f3d340e1c"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x6, 0x3, [0x8, 0x5, 0xa], 0x80}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x3, "96e840707b"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x6, 0x2, [@generic={0x97, 0xb, "dfb4d4f92dda90d01ea6b3d0b29b055cc92abe33dd302177195157227e9757d6eb033b0fa7cec91472e9c1bac894075e7ea0e6f0c0e7074aa8cc1ca1a2f4f07721cf6070ecada4aceedcebd8c537299572a03490f797af033ba3655a3653b9c77aaa4664a5b7c461edebd316845d9a5d3bac2085f3879f892396b380b5775b5de1fbf9eab766c9ae7199915c2c71fc65204e2d2ace"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc0, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0xf, 0x9, [@generic={0xca, 0x30, "38f70f43a92e225226f198e9cbd117af7363bbf82f6aba6945b31fb8bfeb1e1f7a44b03a5fc3a7bf31bf0281a4a5f13dc811d8db9718c31529bda861fe708fbbf1100ca44fed61058416d223c1606842e0e41d593b048332d3f22707de1e248981a61177616cdd59770c528309f29f219a97113acaa3b1c2757f4bba544daf57b04b696237fb2807b65f3f55303ed930c7c9d5a60a694b4e9f9cb7ac9973a5abcdbb81c17c06ddd37b4e5f2b816d480fd1e381fdea3c7ebdec99d790110132f8d2a1381ecfd15149"}]}}, {{0x9, 0x5, 0x8, 0x17, 0x10, 0xf3, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x1df, 0x2, 0x2, 0x0, [@generic={0xf9, 0x1, "9f3f52f23dfbff2bdc041e0f4e684c59cbee6aec1bca13cda2c952ab239a5beb5a113000109bf0771908e9379d58d0aeba958d12b4f31abb3d5aa18aeac77a2d2b6d6e20b3ccb067262462ab03bab0067478949a40ba6151f40de4cbc8aca31905ded594323f346aa020c63c35a408acf6c0e946ee0bf06e05bedf6bfeb47bd3eae6c001fe61776bdc3045374d6c184d794f105c359e0348eba4d2af5457cfe48e509aaafb72c094da92ddbe35f1393bc508865671e964a5cc4d57bc9851e3eec1c8accba975a746bdfc66a5dbe1a114dfeda4a96856896e2fe8cc768b7233e7414499556878becc1a2082ac0833578c5022b74b415bd2"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3a7, 0x3, 0x27, 0xd, [@generic={0x32, 0x10, "39e26615ab6790aafe920694b2c29bda68517a7e3dee08f59a114487e642c31c78c5146c6d8ca58dda4c792bd802ea30"}]}}]}}, {{0x9, 0x4, 0xeb, 0x2, 0xe, 0x8c, 0x6d, 0x4b, 0x7, [@generic={0x2d, 0xa, "fe9be99e74c0d05fa06dfd6ede53002a34958da7a81b9f318417cc6ffd9466ed9dd47ab0d7965d9e8e471f"}], [{{0x9, 0x5, 0x4, 0x9, 0x20, 0xf7, 0x9, 0x9, [@generic={0x81, 0xf, "6d0cdcee2a3c72501248f9189caa83f4ab1bf8e4b26ffb30222cb1a42841c3154d28503e5f882260f37b6fc029f5d32ec5a0488d69fb5bc002822b55f0f88c19de7bfa2c8c7ff274b1767005ba02455c7af9cd498e574732e35ec9d83493cfe946cbd7951ca09f898063f67c544fad5785d40ba33442e22225f0b99834743d"}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x6a, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0xe0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @generic={0x46, 0x1, "1c4c92fa9b6a0286a16a85e1d7fbf809a249f725c313dffecc497b732be8bec86fb14c40fee6d8f2542b28fd9d7cc3baa0eb236e58c785b45b79a19b732ceb48eddfb845"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x5, 0x0, 0x6, [@generic={0xbf, 0x8, "19bc9cb66708577e06c25b3496860b0982c6d95c32e52cd3b6c4dd62e13579223bae2fa98c19765f73256ff95c12d10373408a1d3e192e974d218ed487cac4fc4ce4cd0e7a72a556b8ac689a6f7347a705da90470e325e2076f18b436d36f676e3be2419a917eabb82ce841240520ccef13185027a0436b1198d7de53e2b81b7d92d7e982ab17db0405a93dae5f5fc1d3f447e4c4ffc92e5fb827a362cb31e0ef157660ef30c017b823e88b91fa028444effcc4287cb0712fbd6409bb9"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x258, 0x6c, 0x77, 0x4, [@generic={0x5b, 0x10, "a7d091aef9852e7aee76506e23940efecb28fcfd20e5fd9800a8baaf600a4d66020d4e99116485c2c52183be3b33f3787733f247ca3fc21afef3372e75292f92bfe5312455a7125b11e320a01c88c3752bb404a06a666a6df6"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x9, 0xb, 0x8, [@generic={0x58, 0x6, "016e4845dbcccdb92d0665a222fd0b29dbd51effbd21e5823db6ffd5af9551b382eeee57792025149858b8a9cb434b2d3ed917fc20673c4c904ac7eb98a75c967823f78ed4487866f038ba6a102e6837ca04619fdd67"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x7, 0x5, [@generic={0x67, 0x23, "1fdc288811557285f47e381d376e753236740dcb15a4702808a3c608b2f4faad46e340ba2e364c368e283f62b145f11603b9a7d4f1d58ebbf72b0b07ddab7d696e322aa9bd0720f43108418d306c694a8ec4d14ff1fa10a15c616a00ad2d4bdd0c195440c3"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x3, 0x0, [@generic={0xbb, 0x87fdbcc58ef623cd, "aa608f909a0a025758b9d371c9c7a28e268da13f8877dd29ee5b8eb5d02a9e6ee2d9375548c35575cd4d1cac2a477cb46fe1fa90204c78ef12b158058faf1faf016f46e7f001b7a235c15ed09cd4b989d9e199f3282e3fedd6f64b2f633b21ea5ce6d0f5b6df4f1ec2545b4d43f795a7bf29bd6a9a12fe62f8529391fc9f8493c137f0ed3f07c7f67b0276125412642b285553dc3e8d07790e5dd328db35669a684d99ccef9c4af5b1f15b4eb6ea07bbcff8f7d30aa4698c66"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x9, 0x9f, 0x5, [@generic={0xf8, 0x7, "fa4cee1af69ef56213ba5c8e562a721c618f5c098589ed5fe278da23d2a320735456b825d9516c5cd786b9cdef6501c6c8dc84e438ac66143b7959effa8c3dcd432a2e0ca5f2e5d4ff324a56b80aafc5b09bd50a7002f61628d576b99ec9e413b2d78a201a4ed725e5f6b14de936ab509405efda8ad535007d4b78556fb8b9bd0eda50e23904fa0da703fcb1d186392d1337bceef5730034a0000b5a22f28ce75a4117acc21333237690ab4c3ac8e3d0c0001007e95f6e04430c4d3efeecbac0c2a1794b6b12d580dfff958d92eb64ced13352fb6bcd030b76193f57c71f64b12dea9678ed711a41e9cb478cbd54dac655ebf0196bb9"}, @generic={0xff, 0x24, "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"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x0, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x58, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xac, 0xfffe}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xff, 0xa, 0x7, [@generic={0x3d, 0x22, "4dbfb7e0323608cf364ba168071440b7ce5ade8a0a79bcbfcb3feb2e1bb38c71d78a35a5b8dc55fd07a86011a3f9764bff86b259d35375ec86d05f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0x18, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x5}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x20, 0x0, 0xf, 0x9, [@generic={0x52, 0xb, "d779b67907302ec81d8a588e2324bbbb5958514324fb96a82d713be35328a492b4e35040f927ab7d6390626ee5db94e0c6c7f78b67ce25b4fc546564f3f795c57bccd35c7e7855e9910fbe033a595c77"}, @generic={0xca, 0x7, "5cd21577726981b14d4ec7530e8db18c47cddc6a3bb030af1e10243ee60febb8bf762de79dc8454825c728256d5c99dbef43367abe4d74b68b07cb949323171fd7e5e9cd3666446de864b8f60f26f96ed97088fd5c2f7fb8c60003cc5bd0ac7f135de8abc03588cc98e4d45c21dd683fb770741fe8338576426865aa724972a1ce291cd80d77372a90514605e4193a79c4f283f452b0851057629134fc95710820282d78487e914e0243fefff4a798b65a97f02ab0802c001692657cd9d998b0177a517c690e79eb"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0xac, 0x3, 0x7, [@generic={0x40, 0x24, "1e54ba2761350a32634278e95cea4befcfc0dd6e05f8287dc543ae4c2b5cc1953eeb5e79d0522beab2abf5beee8f8975700ebbd8c867512b81d34ce048cb"}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0xe, 0x4, 0xfa, 0x40, 0x2, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x3, 0x2, "5eea59f3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x5c, "73b639"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xa, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x8, 0xff, "e96b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x1, "ae67", ']x'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe, 0x1, 0xff, 0x7, "156af0", "0374"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0xb, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6f0}]}}, {{0x9, 0x5, 0x5, 0xfa91f31ebec1c3e1, 0x20, 0x1, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x428, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x12, 0xfff7}]}}, {{0x9, 0x5, 0x1b, 0x10, 0x38, 0xa, 0x3, 0x7, [@generic={0xf0, 0xe, "5443c9d31c8316a73c09aa7c610da79953b3e19df53bb5e6d44b42ccccea188636e2760b3992428f2ee269d9d4b4fa003e25f5781b1cde3af8315a0536924c9cb0e37eb23789632656985f50d2c0640283cc21ac3c3db22ace689cb2663697cf8063c96366f1b03214dbb7723ebe7ca3304e211e11b251ab9b1c8fdce9d24b666b0cffa61e1bb989396a82513aeae1988985a0742b9ee1dc121882e4f1ea169ac897d2a3e38180b1fc2d0052fc50449819a4cb2fa4bdc064bf503aff558e9b338f36a8de6052c28ce09b9f0216245c73389c405ac388787edd1f5045b807680296c2fbbd78fcf2c375f297b38d84"}, @generic={0xa9, 0x3, "87e094a953dc998df6ac286b9a5535d0f235070f56074e97d9b8a12d12cc4af0edf0bf7eafc45426952a173f7c58eb60fc73872826b8792cd73d379794a64da4c8fc799a80f8b75546f2e7d429069d55a99be5e5cf0ced734eab9027de24609f0dfc5cb3113873f4d2af7f764f13ee8143d44fc2271094c2db28ff86b8416b7b5ba119f95dbae72fa53f07746da88b438a5ad8270aa3973780ece51d4fe1718e17baf85e8dc28a"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x208, 0x4, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe8, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0xe, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x6, 0x1, [@generic={0xc7, 0x23, "9417124a37946afaacc6a1ee55fb887dd827eb047ab7158f9fecd03689e76e0f4ab6797d2df35d7ca3ef5afafaa877474a05072f72451a8d26626013454fa3681720928ef3faad48110b7692f1d4ad0a8a8483d3326ee130e465fced88c56a7d838c322d4135e4d331d063cf876bd5b46d5358af5f83ee3fdae87664244141ce2437c4fb7be099a4a398002a8c13ab6ed3c7c609c9e34a6ffefa487db56638854bb092b980bb8ea106f0ce79c175321f0a702f4e05416206be7d5637a88e4dbbce3b7daed9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xd5, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x10, 0x45, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x63, 0x51fb}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x2f, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x21}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5c, 0x1, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0xfff7}]}}, {{0x9, 0x5, 0xb, 0x8, 0x1ff, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x81}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x8, 0x4, 0x5, [@generic={0x4c, 0x10, "718b08d649aa0c51666346e5fe93493dcd82bb3d2e32bd98d8facef4c6aaf761539bb59bbe3cc317debfde81fb5154a18bdc761405c8f9243d85f90724b9ac5091df2e028a7edf721a7d"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0xff, 0x3}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x3, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}]}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0x3, 0xc, 0x1, 0xff}, 0x18, &(0x7f0000001bc0)={0x5, 0xf, 0x18, 0x1, [@generic={0x13, 0x10, 0x2, "fc193081a0584293b9c3804c956932fe"}]}, 0x8, [{0xf1, &(0x7f0000001c00)=@string={0xf1, 0x3, "e782c6d04f085e252d4869ee4814cb4db2867789630353f726c695ae2692c99919fd9e660860fe9d0af8976429616d59595a85f3cbd3486a30784fc6387d820fe21f8ae22df96421399162d5314de63eea29f97b0942d667fae38ec777f2a8265b8f9165f265dcc8623be95cbac53aef83849bd124f74d37c887e162d05f470e5b72c39e0514c95db24e008f4ef882e69895c610748c8de6d571b28287e0dfd96323240efedc7dfb7d72a12707776d379cd7b3ec971ed5882bdfa4a640277e76ebce267adadc7bcebbb0efc6f1c6fa7324ee9493161ba60039b1ca6541c3a05b2f2f201e3aefb27ca30ac40df79aca"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x440a}}, {0x74, &(0x7f0000001d80)=@string={0x74, 0x3, "8c9872a951322617363b82e7216e79660aa67b98370fb4e7b80650fe6fe1e849bf7a2614ff6b946d7a547ba8d593768ed80367151d240a6536bf18339612cd9c4c0449b48ed255aca7bbbed96d59c4c36ca390a49365231104216b28211bfa494858df68b9bdc151518ff34ffe20d6149044"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$hid(r9, &(0x7f0000002140)={0x24, &(0x7f0000001f80)={0x0, 0x21, 0xf1, {0xf1, 0x7, "a1d20521c92dbf6ecff3d33a3a21a287899256dff9af387b8f049885b3b4043c0067fbdbef8c1fd8290f635005ea28be064854bbcbf7f86728169660e5bce037b7c2050034e11646b019a4a4cc5c586b306c7ed77793456561271d35263ebd55eb64044be09092db12570c38b5191a460669af35fa4bf658e7ed87291ec8a646a6d737ed1daddbc551fe6e97593b09f557d063c5c6f2544f1a9b03c21c1c73e8148e2183f32803ef6eb401193d8f1f3e2b6ee81613922bfe1eec5c8b484895d5f93d24f0d84c402a8f198a126a63b42c702a4fb4920f640e15950b65e04321c5a448b6bae4ac4668dd295d3be43608"}}, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000020c0)={0x0, 0x22, 0x12, {[@global=@item_012={0x1, 0x1, 0x2, "d5"}, @global=@item_012={0x2, 0x1, 0x9, "0710"}, @main=@item_4={0x3, 0x0, 0x9, "9f5f0d55"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, '('}, @main=@item_4={0x3, 0x0, 0xa, "4b47e513"}]}}, &(0x7f0000002100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x837, 0x5, 0x1, {0x22, 0xf6a}}}}, &(0x7f0000002380)={0x2c, &(0x7f0000002180)={0x20, 0x11, 0x31, "6adcd1e4f91641f08af91b26453b8b4159343c99d2e7e176ec08980a484af4e4eba2b0391b8e948fd9a18c1ed65dd9564f"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002240)={0x20, 0x1, 0xe0, "5d2ced52249b570a15902c3318ef76ca33e33a56639a91312b47011f9eba9126073ab28ae89671970a9e7d05b8969096aebe6f5fcc117b25455f51b24bd10bb2c1211f4b6d33c129bf957a5824893baa0bd074b09b191ff18c4d5b3a1e6c453f7b5fee9c3f3d8499509239b517b259adacfb1360c6ac94a5c45208eb06fd43789b76b4b0f87924eb2cb27de8a765347798bbf4067c7451408a5a43d4b76f62fb302834876f19a19d7ed810eee6a9e152523a0a6470478b33713d795e8c7ea03c2fd082d763c706363f80c131ff029cd0ec5b0c635a764ff63a9fc274ab2bdec1"}, &(0x7f0000002340)={0x20, 0x3, 0x1, 0x41}}) munmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000) read$FUSE(r2, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004400)={0x50, 0xfffffffffffffff5, r10, {0x7, 0x29, 0x8, 0x220040, 0x4, 0xac, 0x4, 0x3, 0x0, 0x0, 0x40, 0x4}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000004480), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x1c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '&\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000004) pipe(&(0x7f00000045c0)) syz_open_procfs(r11, &(0x7f0000004600)='net/llc/socket\x00') 5.480945555s ago: executing program 2 (id=1651): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, &(0x7f0000000080)=0x10) (async) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, &(0x7f0000000080)=0x10) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8, 0x121000) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x10000, 0x0, {}, {}, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x10000, 0x0, {0x0}, {}, 0x0, 0x3}) sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0xd131) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000001c0)={{0x4, 0xfb}, 'port1\x00', 0x0, 0x1, 0x71, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x4}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x4, 0x2}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x4, 0x2}, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000400)) accept(r5, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) (async) r7 = accept(r5, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f00000015c0)={0x28, 0x0, r9, 0x1000, &(0x7f00000005c0)=""/4096}) sendmsg$nl_netfilter(r7, &(0x7f0000002880)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002840)={&(0x7f0000001640)={0x11d8, 0x7, 0xa, 0x101, 0x70bd2c, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@generic="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", @typed={0xdf, 0x114, 0x0, 0x0, @binary="8e9108a5ec521de56b0c6351a2b09a3d0b39b45c5a857127094e717c5595a626ce233b41948e480907bb0e1c737562a15dc7d690f6a65c027bf52f520c7bf1fbe2565f147c3c5d110bf307609bf0217335e767cddbef5c51d6f6ec9b48bfc1331d1a96b6461f21a546c4fe97d276c1e328ceb818a48a70ed2bb0a47ffda86ffa2f210569e627d18e3026f43c210280567637fd6308dff224630df930d3d04a9ce07b0f721f86ea7e8200f0f925052373cfa037c7e0a158159325fdf3b9a46b098c5a21e15bbf8c958c923e4594e30fe09e0f1cad9317698173eeaf"}, @typed={0xe4, 0x1b, 0x0, 0x0, @binary="eb1619985f1433213cc849eb1ab601417cb95525ffa719583ac25430fed3bcc37f5cfdc241c40819ff90cf3f78a79cd9d2f33a598fa81421e381a4f679b276970b205a88562744c9292edd802d483ac9af583f02cce5708eacc120124f53a43ed397ec74e1aea741c1e43d681d3caa731be5947fab01f8e6d19c2e97b3493d47058ef7179085558cbfb62f3c83e198ca57be4d7891bd29d266f600581521ebf74615cb9f3b6491ab9df9c5bfbde0c3e9a7a6873448053360928e4fa6a71821678ec12314470c980b9bfd558c8385d2d89c893dfda426b32bbad290110209540d"}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) r10 = syz_usb_connect(0x6, 0x23f, &(0x7f00000028c0)={{0x12, 0x1, 0x310, 0x77, 0xca, 0x6a, 0xff, 0x421, 0x2e3, 0x7b18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22d, 0x2, 0x1, 0x8f, 0x0, 0x7, [{{0x9, 0x4, 0x7f, 0x2, 0x2, 0x2, 0x2, 0xff, 0x40, [@generic={0x19, 0xa, "7505dc96b7e0183bdca338c64f62f53dd6afd9ddb471d2"}], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0xe, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7fff}, @generic={0xa9, 0x22, "90cd534478458b9da6e7ca34b01aef8500625c9d5c5b91161a495390bc9a1dbbf1bf1a3623d0c8d4cb494397a8a77eec9b2d6e7dacf77e0e0e02d681e44864262fc1e21d7631ca4ad1706f00ffe1cdf56c435f5d01fe2dbaf98d8dff47d40965ebbe024a94b2b767216c3255792290c6f03649c3b66a0840389248b1f228112f95bd933a01fa2f044a035f263e886c307850f393518c3f2c9962a6ae19b5e5137bbc37aa075c2a"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x7, 0x7, 0xf, [@generic={0x39, 0x24, "3cb86be78c2b3f29f166da1e302a288e80261d90ec08a88346ebf3d2b6cda5a3fa0e58893f3fb6ecb002eb621b01ff1825d6d1d91e2ee7"}]}}]}}, {{0x9, 0x4, 0xd1, 0x5, 0x1, 0x29, 0xd, 0x57, 0x3, [@generic={0x61, 0x23, "00958b7e31c1836eecb0ffcfeab136c8716b425f7cd6fc8354607a3cf0b1ddc243aa9f65bd375c0530f534c6139cf9ee116a9ef1e5e5f11ea158c995a18fbde792bc0aa05b6343b77223ea25000e582c3bac65b403e484c2077576a00fc8f4"}], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x8d, 0x21, "895d9a3a309e7f5b3148895ade605e9b58852a8722f877895cdf65f8156b9f6dba87152121ff370764c20686b0c4114770cbf8f5fa7e23b5d4f8024a0b3bd8d4e73980f76cd6836f2180b8120e12b3fbb9cc075e38e0825b0f62de107746a28ca355d74e988ca4ecfe310a166ddfabc11a4015e41d0f955aad5074f027b680a4d03847d1d284089ba5fce7"}]}}]}}]}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x100, 0x7, 0x0, 0xae, 0x10, 0x3}, 0x61, &(0x7f0000002b40)={0x5, 0xf, 0x61, 0x1, [@generic={0x5c, 0x10, 0xa, "32e7e8dd9972a57b9aa55c25f0dfadb0895088d19e7710d4403e995aa9db49a7e303c414dada4aef825493c385f833e8140ee9b0abc711b5d7bee94b1bbe6cbc2ef3641f9d8b5d1d9195cbb7aadfb439390293c7518910eb4f"}]}, 0x2, [{0xf6, &(0x7f0000002bc0)=@string={0xf6, 0x3, "ed11754213259cadb2eaf289cc4dfcb3a3818bcb4b4dc577df50a9326eae1d117c972e82a603690758d0751c7a02236f234462997aa7ad0c9fb2e7798627a20f5c3986c0886ea51b504400cbedc933da7b074e8698cf9e3d1d6e648e706aec32fd15bd5abd40c48900c76ce251d3037c900bf450fb4231b1a8503b5daf98e6ee6a0c9d2ae381426fa239c5038cff72cc8626ed5012d424b6a51b118009b8e32d71a06f080e0b39f2c714a246ae8228287acd2c281caef0366c948d05434e0ad5d0cb51e1191d732d35f766fd4939b60c1f011a06ede915e933762a2eba48c66a7df6ef898489bf73bb78545613d9a49a445b26fd"}}, {0xb8, &(0x7f0000002cc0)=@string={0xb8, 0x3, "41b9159056e8823df2d3f7c0cf9b6825cb6eb7b40d75e6bb27f1a8cf2360e28ce732735024067e9a33ffb2d455a52c25d67aa92f5df5d1168905f40de89f18d5a6c58afd319c2322a72aa925a00058721ee623b3727b222033120d7fc3d279e0f4242c3a4ce5350a5eea28cf3fabdeb0f118283196cfa3ccb459252038cdb70b2b8d6bc1baa06b90207d0a255a11b0105d6a6b7c7393b5f583c4baed9fd4a9f8ef4709fd4a5dd2f6d421cce938834cef202534f22dfc"}}]}) syz_usb_control_io(r10, &(0x7f0000003000)={0x2c, &(0x7f0000002dc0)={0x20, 0x10, 0x101, {0x101, 0x10, "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"}}, &(0x7f0000002f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000002f40)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd1, "8d5de7b1e1af32626f96fe60774f9d64"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xe7, 0x0, 0xa66}]}}, &(0x7f0000002f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0xc8, 0x6, "a0e1a1c0", "fb405d3d"}}, &(0x7f0000002fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0x4, 0x2, 0x3, 0x1, 0x2}}}, &(0x7f0000003480)={0x84, &(0x7f0000003040)={0x40, 0x0, 0x64, "13f899f9b5792d1c1e6b2f07c9b03f371a6dab53a1fbd8561655d71522c476969ee901da78778186ec675e3e37d2ff06e3ccd93ebd0b194a2af938a9caa98cb1ca6a2558f0c46b3d777cd5669fdb81e800b7b97ea8b685257b3c36e6f8566ec635d7243c"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003140)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000003180)={0x20, 0x0, 0x8, {0x4, 0x154, [0xf000]}}, &(0x7f00000031c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000003200)={0x40, 0x9, 0x1, 0xb7}, &(0x7f0000003240)={0x40, 0xb, 0x2, "f1e2"}, &(0x7f0000003280)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000032c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000003300)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000003340)={0x40, 0x19, 0x2, 'D:'}, &(0x7f0000003380)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000033c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000003400)={0x40, 0x1e, 0x1, 0x95}, &(0x7f0000003440)={0x40, 0x21, 0x1, 0xdd}}) connect$can_bcm(r8, &(0x7f0000003540)={0x1d, r6}, 0x10) chdir(&(0x7f0000003580)='./file0\x00') ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f00000035c0)={0x1, 0xffffffff, 0x6}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f0000003600)={@any, 0x2}) syz_open_dev$usbfs(&(0x7f0000003640), 0x400, 0x268400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003700)={r8, 0x58, &(0x7f0000003680)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003740)={r11, 0x6, 0x10}, 0xc) syz_usb_connect(0x4, 0x66e, &(0x7f0000003780)={{0x12, 0x1, 0x300, 0x7a, 0x19, 0x98, 0x8, 0x18ec, 0x3288, 0xfe1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65c, 0x3, 0x4, 0x6, 0x40, 0x10, [{{0x9, 0x4, 0x77, 0x10, 0x8, 0xe, 0x1, 0x0, 0x7, [@generic={0x4d, 0xa, "da1a25b2593a3c0fd8d9791b5934f9744552ba373fbd4dc075fe4493ee31f96d88c8cb416c91b97fade908812a67a8923b448cd0c9fdb20fd57cbd1f7397ae7ed7c36b0e3bc65ce129dad3"}], [{{0x9, 0x5, 0x4, 0x4, 0x200, 0x94, 0x7, 0xd, [@generic={0x99, 0x7, "e678008580ae3f36aabea86436388795d898de3a6901e3717ee0fc8bd16a6bb03ae293ebbf6666eeccb25e3fd819d642f8f0dfb494fb5f2f029f62b98b43af523df9b45a162e8d301977a947c8bf45a0b6f67f7b755029c28c2083144e4d2511c305338da6fa94a04c857a18207e8360780960bc6fbdbfb903f6f779f7b140cd0d72d735a51d2b390622d2eaf5558cf28e762612d69b81"}, @generic={0x53, 0xd, "43c1d5f847341e23f328f15d81ed59805c453b28655fa9fa21f984d1eca1646d29b08b15d10e49d2a295786ea22f0d323ccdb0f8d6a800e337d1e9a4b6aa2ec28e486499bd8728e2c471224408422f728f"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x5c, 0x7, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x15e}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x62d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xb1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x763}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3e7, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x5, 0x3, 0x7, [@generic={0xd0, 0x3, "7ac199aa017f88e1d9d9824d649b0547bc4f98a7d855e24d91c55374e783a1a99660a2fe1ea61bb94d95e9aacfc4c895201dd6b497eeac363ef1daabaaaf1430faa3d36462a4420ade27b5ef5c093ddf6f57854ef0701d8ee4b24bb79f65c50b7dc66e72a2273ceaa356229a48f6a74fb4fa43336842f36b5fff5b16a727acc0c8bd0e37680c71acddd3cc3e0f2e0485ea215380bc15c2d123bdfabafc300faa16115084397b6baaea415b20ed60446ca9826e7035e63497c4c4cbf6ed9e5b45ef1c8f8c2b7e702ab1005e6e291d"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x6, 0x4, 0x6, [@generic={0x6b, 0xf, "a7b0398ebed77a94fd836372c04b0ae8f4bec668858833efec9d35158b6bc883509ea5faa0cdd46a7e3766cb10c38baddce23e1298dbffb59a8ea409154ae0cad5c7b954caef7b270912cef12ee6f729273e1a3ecf3969da4d9bab1a8a36c0802279cc4668dcd14672"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xf0, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xfffb}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x1, 0x0, 0x9, [@generic={0x8d, 0x3b, "c343bc6006d947e0e31d09968bed2f595a911016cbe40cea1b4ecab531a7f59a76c750e976f6c0c7177bf1fc28781469d22754bc17b496258286815f3167fcfea5544753853b27a13ff7ce657ea8c9d40e7d0a9f503eeefc75bc5325d1dd378614106b05d6c55dbc81e5ea05fb3e4b9570c33a0b5546cc80071b5a109b5b6bf830d7c1ac7a452e55cf9519"}, @generic={0xa9, 0xa, "7747e865b3204b995fc81da59c9c3577fa66ac1ae3b98d101b2817bce2b9aed65ea986b0a07d1403c0b5eddcb2c1e4b68a3bed9368360e5575e82886886f0a5d0f57ef13eb8e7c8aebc3e207be3737d3688f9d0d5a0763fc82c0fdea3202c2b4d12564bffb22b5a7d8c4d6378794fa80a5d70562ce6d39ceea3a7df713038051f4c8124bf3bdb7ea48a6b9f1b5437ce491d2e1a6dd0dd94885b162b79fb18818d423f1626ab258"}]}}]}}, {{0x9, 0x4, 0x6d, 0xe, 0x5, 0x6f, 0xb0, 0x80, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0x7f, 0x4}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x8, 'rA\t'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xc2, 0x4, 0x8, 0xb9, "441c52e3ea"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x3, 0x6, "5d96256508e291"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf9, 0x2, 0xf, 0x2, "29e0aba8a8a902"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0xd6, 0x7}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x5, 0x9}}, {{0x9, 0x5, 0x0, 0x9, 0x3ff, 0x12, 0x9, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x40, 0x7, 0x0, [@generic={0x6e, 0x3, "0a8786ab22e9adc6e48f705bd6e22abdf57bcf203ca6741d3b3f26af7bcdccd0f29be8218f7c77ace51fa9b96e6a818189c71a9a6669ad7af55d5085cabf8358a4e9b3fd4ac5825c4e7511c269294dd9a86aafea3f2ff13218c8a03dade9885adae092eae01dd53422e29a5c"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x0, 0x5, 0x8d}}]}}, {{0x9, 0x4, 0xd5, 0xd, 0x3, 0x2a, 0xce, 0xc9, 0x5d, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x4, 0x0, 0xf6, "f94f"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x1, 0x9, "69fbbdce8b"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x6, "aaaf8ef9"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x1, 0x1}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x9a, "9c1c"}]}, @generic={0x27, 0x8, "fb49196f352d2f8370a32301f6b26eda17987780cc58f33d029c1cb05f586796a9dea4a2fd"}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x7, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x4, 0x9}, @generic={0xb5, 0x6, "c1e4a8206429b846d0705a3f1bf8bc49020cee9b22c1950815bec9436cc9f7b50135c6dee84721fcf6b3343a6a265b9138707adcfa4d2fd58bed864ce8de101bc8d1615e584b9ffcd5ce841405a6b97d35007416b77e5808188c1d9dbbc1a9f7c15f97f0fc6030fa6608e345ce0165cf746410b85f1cfab400cb724cc32d493e4d5445cd1167b67b05d7136854beb6a35b146cb0d4b704a7181a50bb7e746695be99825b641cb6031eed759612c533ad8b738a"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xf7, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x3, 0x3, 0xc}}]}}]}}]}}, &(0x7f0000003f00)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x401, 0x8, 0x0, 0xf9, 0xff}, 0x24, &(0x7f0000003e40)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x0, 0x81, 0x94, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "dab1af0eba4861eb5fa65dc66125800e"}]}, 0x2, [{0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x100c}}, {0x3a, &(0x7f0000003ec0)=@string={0x3a, 0x3, "3427e7c27a844b794d003f290fb6d60045c1d048d8f74c5cbd74c2a6962f157ecf30741100adef986010631673119d52e6c547255ab1fe4c"}}]}) 5.201756192s ago: executing program 6 (id=1229): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30) 4.03764779s ago: executing program 5 (id=1652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000000007000000001400010000000000000000000000ff"], 0x30}}, 0x20008000) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x88, &(0x7f0000000240)=ANY=[@ANYRESOCT]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="360f07b9800000c00f3235002000000f3066ba4300eca6f2ad3e360f01ca660f005f0f2e653ef20f51fec4e2cd9d19650f79bb0aff3f01", 0x37}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00008cc000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000280)="652ef30f01da0f070f3066b9d80900000f32d1d7baf80c66b8981d228b66efbafc0cec2e0f20e0440f20c066350f000000440f22c0663e260fbe040f01c5", 0x3e}], 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8000, 0x3ff, 0x5}, &(0x7f0000000040)=0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000100)={0x0, 0x10000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x1}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x11, r10, 0x48077000) syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 4.037284807s ago: executing program 2 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x6000) 2.988466187s ago: executing program 2 (id=1654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(r0, r1) (async) r2 = dup2(r0, r1) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) (async) open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) (async) r9 = dup(0xffffffffffffffff) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2.344392382s ago: executing program 4 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[]) 1.511276949s ago: executing program 2 (id=1656): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000140)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open(0x0, 0x0, 0x185) close(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000008100), 0x4) 1.51087674s ago: executing program 4 (id=1657): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r5], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r5], 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x5a34}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x4, 0x0, 0x4, 0x4, 0x3b, @private2, @private0, 0x8000, 0x20, 0x8001, 0xb}}) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0xe, 0x5, 0x88, 0x0, 0x5, 0x0, 0xfc, 0x1, 0xb5, 0x5, 0x2, 0x5, 0x0, 0x89, 0x2, 0x0, 0x4, 0x6, 0xa, '\x00', 0x2, 0x8000000000000000}) 511.439068ms ago: executing program 4 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xb, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 386.769914ms ago: executing program 5 (id=1659): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x700, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 284.625156ms ago: executing program 4 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x100) socket$kcm(0x11, 0xa, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) socket$pppoe(0x18, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000600000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 277.695365ms ago: executing program 7 (id=1639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee01}, {@in=@local, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}}, 0xf8}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = io_uring_setup(0x30d3, &(0x7f00000002c0)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @loopback}, 'wg1\x00'}) 153.056378ms ago: executing program 2 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r2, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0xa) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0x98f903, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x24, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @local}, {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) 150.821979ms ago: executing program 5 (id=1662): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, 0x8) r1 = syz_io_uring_complete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='dlm_lock_end\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) write$smackfs_cipsonum(r1, &(0x7f00000000c0)=0x69, 0x14) r2 = syz_usb_connect$uac1(0x6, 0xd8, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x1, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x6, "c190bbaf"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x1, 0x1, "ed51724b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x2, 0x6, 0xfa, "8a3e"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "8a62db", "d3918f"}, @as_header={0x7, 0x24, 0x1, 0x70, 0x58, 0x321e0e3cf0e43926}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x3, "cbc92b3c353234a0"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x4, 0x5, 0x3, "a9f7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x81, 0x2, {0x7, 0x25, 0x1, 0x0, 0x80, 0x406d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x3, 0x1, 0x7f, "", "a155"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x59, 0x4, 0xc7, 0x7, "c1bc73a539ab"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0x6a, 0x3}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x5, 0xc4, 0x5, 0xff, 0xfb}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x3, [@generic={0x83, 0x10, 0xa, "d978c9f2096d15909b7cda9589d08f9ca370d8a67bb322af3aaf1d83f44dbc9c811ec32e078ee48982e5c5f8037cfada8b4ecbe1118eaec638db907e294f3ad1bc8b8d6f08bc5c318bc8ae8e588e3724299e15b5fea75abccefc22e3cd10f383bdc0841f4961ca24fb6144ecd8740874c5928461f7574b3d57a18e7e1b77442b"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x5, 0x1e00, 0x55, [0x4769f963fea7f922]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf, 0x3e}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}, {0xcb, &(0x7f0000000340)=@string={0xcb, 0x3, "4e516edbd2c0566eadad39ff59b773496bed17690070407ad9c54920cd4989bdefb20b80b49e9d8c90ed9be95f8fb876bff98e67a4c61d18dbefe45382c2eb0516a1164aeb7ce31af5e37831f8e2e660a0e35abe456a9513a16672d95bf39327a2d9fda17fe616bac7cdd536ccb7d8fb8a155ad8ae30e2757c2df28852cc447b8f3667a94aeda801c66c4b8c088c2a51b9c85f1efe7022951a455304edbf1325c1aa5924836fe48b3a19dab69cc9e723298c10447b3f3d06f978f69d5899e7d43f8ebdc0972a8ceb53"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0xb2, &(0x7f0000000480)=@string={0xb2, 0x3, "89d7c6f0d50d6b8c672f3fe4813e163ea2defa129a4370abf8371a15eba0f5937a626db4fe03ea31ff07be6bf789c951c295ca187c7c99d3593d9d31e528b0a04f0a1bb8deff498a71b10890609b19e710e30d1f39562755ca8fd02b1201998cad83870155e0af46f3e858c9c4696f5c6121114e228cd9c3904430e1c7d214bc849632afff18bfc779e12d641108cf58a6f21521b77390e308473dc9aeb3fb0207747644d289d2a35e86c7d20def6466"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc01}}, {0xa1, &(0x7f00000005c0)=@string={0xa1, 0x3, "f297a4998688e93a1b7604ca82ba698c1400be11f5dbdcd47c5bb7969951d5d7a51e1e3b589dcf0459666841edba17d360c9bfebbf71fa19527472220b70ce4f45f1c4c7e49d3f0078e9d33b1a40c2a7e60951b9849cc41a9f53688397f414e6fc9bc90fbd263dbbebbbd8d670c03ff54487691543f0c3a5087b83fe7beac1a80dd222ba0bfab54b9e69684e76e45d6551b284c9d067a6514c3af4fda7b705"}}, {0x86, &(0x7f0000000680)=@string={0x86, 0x3, "9d217e9b66b42227b30e3e33a0fc4dab5adcefde533ac1f7837bd6646ddc9d711e0b09b885987e3335aee77cdb04e05c3817187eec2b98512871cfc8e76ceee601935e2d92042c7bb933b0a1a50006316d72323317fc87cb9c56092c2d7cf1266152aaa5fb9ad08b3ee55b721e0d8d8812b881cb217b16e82441ffd32127a22584ce36d0"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x804}}]}) write$smackfs_cipsonum(r1, &(0x7f0000000840)=0x7, 0x14) mq_open(&(0x7f0000000880)='dlm_lock_end\x00', 0x1, 0x28, &(0x7f00000008c0)={0x0, 0x7, 0x6, 0x9ae}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x111000, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000c80)={&(0x7f0000000940), 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x284, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_USERDATA={0x9e, 0xd, 0x1, 0x0, "3908616e352c418791345ccfd59031bc3214e659e303cb5caf734819b6b57ca0c21c4789a1a155fa50968bdbf79dbe314bc1d53d6b2f8558190bf2654655b77ea7e3d6fdf19793e3dfa6c388ca877d8c336a1082b3d506a6440d575eedfdbd172d1546e13329a755e6e1b3661a8be0c1f03af9b72a3e7b9f7e0025e3efd5dd61a3a0fa6af1a5cd0da647d93262f8858c1eb87de7f2e842de15b5"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x80000080}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xccf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9d}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}]}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, @NFTA_SET_EXPRESSIONS={0xf4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xecc1}]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x284}, 0x1, 0x0, 0x0, 0x20040040}, 0x24810) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000e00)) write$binfmt_elf64(r1, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x9, 0x8, 0x3e, 0x8, 0x2, 0x3, 0x401, 0x1bb, 0x40, 0x39, 0x25, 0x7, 0x38, 0x1, 0x200, 0x9, 0x1}, [{0x5, 0x200, 0x2, 0x8000, 0x1, 0x8a, 0x7}], "d4ddb771d8604eb5e68c37dc8a87864b9ebb15d4b8e69ad2e8e3eac82f9085b5349454655e4e941e25416809436d823b513433ce1b97f5bbdeeac309b8edf3fff126fc8835", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8bd) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001700)={0x1, 0x0, [{0xac9, 0x0, 0x5}]}) r7 = openat$cgroup_ro(r3, &(0x7f0000001740)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001780)) write$smackfs_cipsonum(r3, &(0x7f00000017c0)=0x407e7f2b, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0}, &(0x7f0000001880)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000018c0)={0x6, 0x6, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7}) sendmsg$nl_generic(r1, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x3e, 0x400, 0x70bd29, 0x25dfdbfe, {0x10}, [@nested={0x10, 0x10d, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x140}]}, @typed={0x8, 0x14, 0x0, 0x0, @uid=r9}, @generic="85894a3a2171fae355468c46a5e9345282ac122e48d9c79ec23fc422f2", @generic="f402fa5782505dd50207d00ee8950c766a0be61ecca1ce8781de1379e558560cdc42e2bb7e3e6556496feb053e8c355b9574b50c3782d6178bf706e4471668441a9596f4acb48b709c7aa24d4068665c37b421a95bfb5ca1228ee195752b31c95f708bf086c658", @typed={0x4, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001a40)={0x7, 0x0, [{0xb0e, 0x0, 0x1}, {0x222, 0x0, 0x5}, {0x8a6, 0x0, 0x3}, {0xb56, 0x0, 0x5}, {0xa80, 0x0, 0xb}, {0x40000215, 0x0, 0x1}, {0x5c9, 0x0, 0x8}]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x7c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x24040800) syz_usb_ep_write(r2, 0x4, 0x2c, &(0x7f0000001cc0)="52c4ca07fc7ae2e47c749d21c82c72591ea481acf11e18bc3d0a214885e95a36adfbee0c2032a0269d65d083") 45.448186ms ago: executing program 2 (id=1663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x6000) 0s ago: executing program 7 (id=1664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r3 = socket(0x28, 0xf, 0x3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x90a, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x8880) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x180, 0x6c, 0x0, r6}, {0xfffffffffffff40e, 0x7, 0x4, 0x3e1d, 0x6, 0x200, 0x4, 0xffffffffffffffff}, {0xe7f, 0x5, 0x2, 0x5}, 0x40bc24df, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xff}, 0xa, @in=@loopback, 0x3503, 0x0, 0x2, 0x8, 0x4, 0x4, 0x5}}, 0xe8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x22, "339e57fb875debf93eac4a4b997f474604f214e2271f6a14e9c6f32cfcbf781a2a30"}, &(0x7f0000000600)=0x2a) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000640)={r7, 0x6}, 0x8) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@mcast2, 0x4e21, 0x0, 0x4e20, 0x1, 0xa, 0xe0, 0xa0, 0x11, r5, r6}, {0xf9eb, 0x9, 0x0, 0x5, 0x8, 0x8, 0x81, 0xfffffffffffffff9}, {0x1000, 0x7, 0x6, 0xb}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3504, 0x4, 0x0, 0x7a, 0x3ff, 0xffffffc0, 0x1}}, 0xe8) mount$tmpfs(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x18006, &(0x7f0000000800)={[{@huge_within_size}, {@usrquota}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x67, 0x33, 0x65]}}, {@huge_always}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '802.15.4 MAC\x00'}}, {@uid_eq={'uid', 0x3d, r6}}, {@uid_eq={'uid', 0x3d, r6}}, {@appraise}, {@context={'context', 0x3d, 'user_u'}}]}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000ac0)=0xe8) setresuid(r6, r6, r8) (async) read(r3, &(0x7f0000000b00)=""/189, 0xbd) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), r0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r9, 0x8, 0x70bd25, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, 'huge=within_size'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\'-('}]}, 0x50}, 0x1, 0x0, 0x0, 0x6}, 0x20000804) r13 = syz_open_dev$sndctrl(&(0x7f0000000e40), 0x8000, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r13, 0x40405514, &(0x7f0000000e80)={0x9, 0x4, 0x8, 0x0, 'syz1\x00', 0x368f}) (async) r14 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000ec0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x7f, 0x79, 0x1846, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x40, 0x4c, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0xba, {0x9, 0x21, 0x3ff, 0xf2, 0x1, {0x22, 0xaff}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xa, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x9, 0x81, 0xc, 0x40, 0xf}, 0x23, &(0x7f0000000f40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x0, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "87d49fb25b403ecff889356b206d9b8c"}]}, 0xa, [{0xfd, &(0x7f0000000f80)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x440a}}, {0xe9, &(0x7f00000010c0)=@string={0xe9, 0x3, "66d8bd1094f6d0a82a4b2df82a62956a6dccd9971422abf94b51c7d3fa043e214285f752c5f7e05fb0d57c62ab7e650948e2c84107fae74dc893bfe996fdccca61f39c531484b14be29fe84dc0ac89ebab88df1803f727a77f805939aa919cc4a89f21c791dec278763c575677eb398b217038345a3bc4379fd6af93a0ecd62d50fe7ba4dda8b4cf8078c3283aff4098d4acbedb7c9b3ffb4561bffa96375d7e613eacede719809e59ee339dfc4ae1dee952b2dfb4f878a9595d9deeeeb7720b7027f1c01f812523da2315169592e7b56f13246c401ebd4b4339dfede5175cc05e0921a62636b9"}}, {0xc2, &(0x7f00000011c0)=@string={0xc2, 0x3, "b789e2223cfedaca71f2ed39080b517cd8dea9f5706237da7a713758eb502c85914d3bb56f831b0dfe7bd0f2d053600fa6aeb2b8012683aa5aba2dfb58e595817ae704418815007edc89a8a16eafca451f98c46b3fcb41a50f66b881bcec7bef002765f55600cc130aeea15ab257f64788f13356ec6b9e614eb9db853d0cadd1ede8e9a3ee10b060c9d356564837c8110411c095b5e8cdcb9329390eaad555c3cfe08856f86842c6340a312837bfef78aa8291eee996d3d922568cdff9b0599d"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc9, &(0x7f0000001400)=@string={0xc9, 0x3, "39741a3d0b9f3e21225ac4190f48a89dbe1f78c3d46d98ac7973b7d4435091807e2429d0480e4091aec67b09242926b72c6d6ad0931328096175996da89f37ad951f1b46ed3a5a42dfd0225b618020e5f348a6f0d6a13eaf96cc7971a555432523c8c4fa091c1aa4f0ffff99d537867a31e5a6e27df0299cc70b0427dbb8d6167007efbed7b5bc44bcfcb0dafcbd83a6ffdd93675ea6d35b2ebedca700bf4985fe85ee72eb869dc3b84435767165d4d18ed380cbf1260ae574070225c1b4b6071db42bbd8377c9"}}]}) syz_usb_control_io$hid(r14, &(0x7f0000001780)={0x24, &(0x7f00000015c0)={0x0, 0x11, 0xcd, {0xcd, 0x23, "0496dbb9bb7d0bd6a73c38560c7d9a7176ebdc197d335f7a0993484390761da418271f51153a8d1b247ee207aa992ee26196ca1b4442170ce908ba2ae2cd8f209effa2c1c31829158248b2c214066c59384e3370834cd7e13e1fc007a58da2cf5bb46223a5c780a6600b661b74f1125b14544e662049910a320e0afd6046cb69d19142dc86a3fb09095e3c82bd57aec3bb38ba8f62a0865f02b5aa1265dc78ad12a525d08e38ef25449c30c59f2c2876917df71414c0e167ecdfcd67cc261f7b9676211255a9d4d3846ee0"}}, &(0x7f00000016c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000001700)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x9, "a387c346"}, @global=@item_4={0x3, 0x1, 0x5, "4d68cf33"}, @local=@item_012={0x1, 0x2, 0x9, 'e'}, @local=@item_012={0x2, 0x2, 0x8, "3ec1"}, @local=@item_012={0x2, 0x2, 0x1, "bec2"}]}}, &(0x7f0000001740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff3, 0xa, 0x1, {0x22, 0x592}}}}, &(0x7f0000001980)={0x2c, &(0x7f00000017c0)={0x20, 0x10, 0xc0, "e2fb76a85d72552c2990a29c6082fcaef5c00429ee176ccfb9e84380da36d2e6d309d4e9fad7188e2dcb44b1fe9c3f325aa5bf4f7cfc317ff012717cab83025ecd06253a8394a8117c7d7428e61a74ccf3d458de568305246f19aa3b8168262eeaa08a8524621a81cc32a91b6ad0227a8f7c0b21e31eab89d3fdb853f68b3f291bc94ff645645d8f153043eea88e9d10ff25974bc255008332cc08c20e06ef9ef1d8a2333b9c1c7a754582e1c4ac23f0ad63adbb19b365aa0835b93e4778c345"}, &(0x7f00000018c0)={0x0, 0xa, 0x1}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001940)={0x20, 0x3, 0x1}}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x8c, r15, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xfff6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe70}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x401}, 0x8000) kernel console output (not intermixed with test programs): [ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.197148][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.211022][ T5946] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 428.220703][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.240882][ T5946] usb 3-1: config 0 descriptor?? [ 428.348684][ T6608] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.476010][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.497670][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.579247][T10594] tmpfs: Cannot disable swap on remount [ 428.719893][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.720237][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 428.735561][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.745510][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.745602][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.763984][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.768780][ T5946] usb 3-1: USB disconnect, device number 51 [ 428.778237][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.787618][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.818249][T10600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.849838][T10600] overlay: filesystem on ./bus not supported as upperdir [ 428.969885][T10602] nbd: must specify a device to reconfigure [ 429.007340][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 429.089258][T10597] chnl_net:caif_netlink_parms(): no params data found [ 429.157118][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 429.172077][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 429.191611][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.201795][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.216346][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.226168][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.243504][ T9] usb 5-1: Product: syz [ 429.248015][ T9] usb 5-1: Manufacturer: syz [ 429.252726][ T9] usb 5-1: SerialNumber: syz [ 429.268843][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.297531][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.304822][T10597] bridge_slave_0: entered allmulticast mode [ 429.328406][T10597] bridge_slave_0: entered promiscuous mode [ 429.354079][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.377794][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.402304][T10597] bridge_slave_1: entered allmulticast mode [ 429.422371][T10597] bridge_slave_1: entered promiscuous mode [ 429.459826][T10616] ptrace attach of ""[10617] was attempted by "./syz-executor exec"[10616] [ 429.526747][T10614] FAULT_INJECTION: forcing a failure. [ 429.526747][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.540043][T10614] CPU: 0 UID: 0 PID: 10614 Comm: syz.0.1279 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 429.550878][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.560961][T10614] Call Trace: [ 429.564348][T10614] [ 429.566844][T10616] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1280'. [ 429.567276][T10614] dump_stack_lvl+0x241/0x360 [ 429.567311][T10614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.567332][T10614] ? __pfx__printk+0x10/0x10 [ 429.567356][T10614] ? __pfx_lock_release+0x10/0x10 [ 429.567384][T10614] should_fail_ex+0x3b0/0x4e0 [ 429.567415][T10614] _copy_from_iter+0x1e9/0x1c20 [ 429.567436][T10614] ? __virt_addr_valid+0x183/0x530 [ 429.610517][T10614] ? __alloc_skb+0x28f/0x440 [ 429.615115][T10614] ? __pfx__copy_from_iter+0x10/0x10 [ 429.620409][T10614] ? __virt_addr_valid+0x183/0x530 [ 429.625518][T10614] ? __virt_addr_valid+0x183/0x530 [ 429.630655][T10614] ? __virt_addr_valid+0x45f/0x530 [ 429.635763][T10614] ? __phys_addr_symbol+0x2f/0x70 [ 429.640802][T10614] ? __check_object_size+0x47a/0x730 [ 429.646093][T10614] netlink_sendmsg+0x73d/0xcb0 [ 429.650869][T10614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.656159][T10614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.661437][T10614] __sock_sendmsg+0x221/0x270 [ 429.666124][T10614] ____sys_sendmsg+0x52a/0x7e0 [ 429.670915][T10614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.676212][T10614] ? __fget_files+0x2a/0x410 [ 429.680817][T10614] ? __fget_files+0x2a/0x410 [ 429.685442][T10614] __sys_sendmsg+0x269/0x350 [ 429.690045][T10614] ? __pfx_lock_release+0x10/0x10 [ 429.695075][T10614] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.700195][T10614] ? __pfx_vfs_write+0x10/0x10 [ 429.704978][T10614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.711303][T10614] ? do_syscall_64+0x100/0x230 [ 429.716074][T10614] ? do_syscall_64+0xb6/0x230 [ 429.720752][T10614] do_syscall_64+0xf3/0x230 [ 429.725263][T10614] ? clear_bhb_loop+0x35/0x90 [ 429.729938][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.735850][T10614] RIP: 0033:0x7fc3a8985d29 [ 429.740271][T10614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.759966][T10614] RSP: 002b:00007fc3a97c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.768384][T10614] RAX: ffffffffffffffda RBX: 00007fc3a8b75fa0 RCX: 00007fc3a8985d29 [ 429.776356][T10614] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000009 [ 429.784325][T10614] RBP: 00007fc3a97c0090 R08: 0000000000000000 R09: 0000000000000000 [ 429.792300][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.800373][T10614] R13: 0000000000000000 R14: 00007fc3a8b75fa0 R15: 00007ffd260fb798 [ 429.808374][T10614] [ 429.813397][ T9] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 429.874277][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.892002][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.986461][T10597] team0: Port device team_slave_0 added [ 430.000519][T10597] team0: Port device team_slave_1 added [ 430.051449][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.058574][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.084999][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.099961][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.107109][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.133262][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.185699][T10627] overlayfs: conflicting lowerdir path [ 430.223560][T10597] hsr_slave_0: entered promiscuous mode [ 430.231650][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.245576][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.245787][T10597] hsr_slave_1: entered promiscuous mode [ 430.265982][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.275022][T10597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.284100][T10597] Cannot create hsr debugfs directory [ 430.291476][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.324691][ T6608] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.620774][T10632] nbd: nbd2 already in use [ 430.632324][ T6608] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.725446][ T6608] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.736777][ T9] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 430.760962][ T9] usb 5-1: USB disconnect, device number 46 [ 430.865400][ T6608] bridge_slave_1: left allmulticast mode [ 430.871318][ T5132] Bluetooth: hci2: command tx timeout [ 430.877561][ T6608] bridge_slave_1: left promiscuous mode [ 430.883273][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.892361][ T6608] bridge_slave_0: left allmulticast mode [ 430.898470][ T6608] bridge_slave_0: left promiscuous mode [ 430.904230][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.927604][ T46] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 430.987135][ T25] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 431.077468][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 431.091491][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.105686][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.119172][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.129170][ T46] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.139583][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.156369][ T46] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.253323][ T46] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.261704][ T46] usb 6-1: Manufacturer: syz [ 431.267522][ T25] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 431.278118][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 431.289798][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64 [ 431.300965][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.316831][ T46] usb 6-1: config 0 descriptor?? [ 431.322895][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.332164][ T25] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.340314][ T25] usb 3-1: Manufacturer: syz [ 431.350199][ T25] usb 3-1: config 0 descriptor?? [ 431.356254][T10637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.366827][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 431.603676][ T9] usb 3-1: USB disconnect, device number 52 [ 431.689270][T10646] FAULT_INJECTION: forcing a failure. [ 431.689270][T10646] name failslab, interval 1, probability 0, space 0, times 0 [ 431.702682][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.0.1291 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 431.713478][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.723563][T10646] Call Trace: [ 431.726860][T10646] [ 431.729805][T10646] dump_stack_lvl+0x241/0x360 [ 431.734511][T10646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.739726][T10646] ? __pfx__printk+0x10/0x10 [ 431.744331][T10646] ? __kmalloc_cache_noprof+0x48/0x390 [ 431.749789][T10646] ? __pfx___might_resched+0x10/0x10 [ 431.755075][T10646] should_fail_ex+0x3b0/0x4e0 [ 431.759771][T10646] should_failslab+0xac/0x100 [ 431.764481][T10646] __kmalloc_cache_noprof+0x70/0x390 [ 431.769797][T10646] ? ip_set_create+0x330/0x18b0 [ 431.774643][T10646] ip_set_create+0x330/0x18b0 [ 431.779336][T10646] ? rcu_is_watching+0x15/0xb0 [ 431.784152][T10646] ? __pfx_ip_set_create+0x10/0x10 [ 431.789338][T10646] ? nfnetlink_rcv_msg+0x225/0x1180 [ 431.794574][T10646] nfnetlink_rcv_msg+0xbec/0x1180 [ 431.799637][T10646] ? nfnetlink_rcv_msg+0x225/0x1180 [ 431.804887][T10646] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 431.810410][T10646] netlink_rcv_skb+0x1e3/0x430 [ 431.815191][T10646] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 431.820657][T10646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.825974][T10646] ? cap_capable+0x1b4/0x250 [ 431.830741][T10646] ? safesetid_security_capable+0xb2/0x1d0 [ 431.836567][T10646] ? bpf_lsm_capable+0x9/0x10 [ 431.841249][T10646] ? security_capable+0x7e/0x2d0 [ 431.846196][T10646] nfnetlink_rcv+0x297/0x2ab0 [ 431.850873][T10646] ? __pfx_validate_chain+0x10/0x10 [ 431.856079][T10646] ? mark_lock+0x9a/0x360 [ 431.860414][T10646] ? __pfx_validate_chain+0x10/0x10 [ 431.865616][T10646] ? __lock_acquire+0x1397/0x2100 [ 431.870647][T10646] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 431.875771][T10646] ? mark_lock+0x9a/0x360 [ 431.880102][T10646] ? __lock_acquire+0x1397/0x2100 [ 431.885147][T10646] ? __pfx_lock_release+0x10/0x10 [ 431.890168][T10646] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.895367][T10646] ? __pfx_lock_release+0x10/0x10 [ 431.900400][T10646] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.905596][T10646] netlink_unicast+0x7f6/0x990 [ 431.910372][T10646] ? __pfx_netlink_unicast+0x10/0x10 [ 431.915666][T10646] ? __virt_addr_valid+0x45f/0x530 [ 431.920782][T10646] ? __phys_addr_symbol+0x2f/0x70 [ 431.925803][T10646] ? __check_object_size+0x47a/0x730 [ 431.931101][T10646] netlink_sendmsg+0x8e4/0xcb0 [ 431.935877][T10646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.941170][T10646] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 431.947594][T10646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.952877][T10646] __sock_sendmsg+0x221/0x270 [ 431.957562][T10646] ____sys_sendmsg+0x52a/0x7e0 [ 431.962423][T10646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.967797][T10646] ? __fget_files+0x2a/0x410 [ 431.972396][T10646] ? __fget_files+0x2a/0x410 [ 431.976993][T10646] __sys_sendmsg+0x269/0x350 [ 431.981593][T10646] ? __pfx_lock_release+0x10/0x10 [ 431.986620][T10646] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.991739][T10646] ? __pfx_vfs_write+0x10/0x10 [ 431.996531][T10646] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.002862][T10646] ? do_syscall_64+0x100/0x230 [ 432.007633][T10646] ? do_syscall_64+0xb6/0x230 [ 432.012313][T10646] do_syscall_64+0xf3/0x230 [ 432.016819][T10646] ? clear_bhb_loop+0x35/0x90 [ 432.021518][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.027415][T10646] RIP: 0033:0x7fc3a8985d29 [ 432.031829][T10646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.051441][T10646] RSP: 002b:00007fc3a97c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.059862][T10646] RAX: ffffffffffffffda RBX: 00007fc3a8b75fa0 RCX: 00007fc3a8985d29 [ 432.067832][T10646] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000009 [ 432.075802][T10646] RBP: 00007fc3a97c0090 R08: 0000000000000000 R09: 0000000000000000 [ 432.083767][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.091742][T10646] R13: 0000000000000000 R14: 00007fc3a8b75fa0 R15: 00007ffd260fb798 [ 432.099726][T10646] [ 432.187214][ T46] rc_core: IR keymap rc-hauppauge not found [ 432.193178][ T46] Registered IR keymap rc-empty [ 432.209560][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.247941][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.278495][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 432.316042][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 432.334734][T10658] sctp: [Deprecated]: syz.0.1294 (pid 10658) Use of int in maxseg socket option. [ 432.334734][T10658] Use struct sctp_assoc_value instead [ 432.389151][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.425283][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.467207][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.471025][ T6608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.492845][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.517243][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.537312][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.558746][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.571664][ T6608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.589096][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.616991][ T6608] bond0 (unregistering): Released all slaves [ 432.617253][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.647980][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.679731][ T46] mceusb 6-1:0.0: Registered 땩项ᮐㄻꥷ뚻꺙ಛ㐅ょ뤆᥹ᐖ쒐ゴᗴ䚘꼹⁞Φ with mce emulator interface version 1 [ 432.728384][ T46] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.868759][T10670] tipc: Enabling of bearer rejected, failed to enable media [ 432.947421][ T5132] Bluetooth: hci2: command tx timeout [ 433.097919][ T29] audit: type=1800 audit(1735151610.389:259): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1298" name="file1" dev="overlay" ino=1480 res=0 errno=0 [ 434.297866][T10685] syz.2.1300[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.297968][T10685] syz.2.1300[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.309577][T10685] syz.2.1300[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.556561][T10685] futex_wake_op: syz.2.1300 tries to shift op by -1; fix this program [ 435.947140][ T5132] Bluetooth: hci2: command tx timeout [ 436.080758][ T5946] usb 6-1: USB disconnect, device number 42 acpid: input device has been disconnected, fd 3 [ 436.162341][ T6608] hsr_slave_0: left promiscuous mode [ 436.180784][ T6608] hsr_slave_1: left promiscuous mode [ 436.221827][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.233801][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.245620][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.271526][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.441570][T10693] FAULT_INJECTION: forcing a failure. [ 436.441570][T10693] name failslab, interval 1, probability 0, space 0, times 0 [ 436.454755][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.4.1304 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 436.465557][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.475731][T10693] Call Trace: [ 436.479040][T10693] [ 436.481996][T10693] dump_stack_lvl+0x241/0x360 [ 436.486702][T10693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.491932][T10693] ? __pfx__printk+0x10/0x10 [ 436.496570][T10693] should_fail_ex+0x3b0/0x4e0 [ 436.501289][T10693] should_failslab+0xac/0x100 [ 436.506011][T10693] ? skb_clone+0x20c/0x390 [ 436.510455][T10693] kmem_cache_alloc_noprof+0x70/0x380 [ 436.515846][T10693] skb_clone+0x20c/0x390 [ 436.520110][T10693] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 436.525330][T10693] dev_queue_xmit_nit+0x249/0xca0 [ 436.530368][T10693] ? dev_queue_xmit_nit+0x2b/0xca0 [ 436.535506][T10693] ? validate_xmit_skb+0x9b8/0xff0 [ 436.540653][T10693] dev_hard_start_xmit+0x15f/0x7d0 [ 436.545784][T10693] ? __pfx_validate_xmit_skb+0x10/0x10 [ 436.551266][T10693] __dev_queue_xmit+0x1b73/0x3f50 [ 436.556296][T10693] ? kasan_save_track+0x51/0x80 [ 436.561154][T10693] ? ____sys_sendmsg+0x52a/0x7e0 [ 436.566095][T10693] ? __dev_queue_xmit+0x2f4/0x3f50 [ 436.571215][T10693] ? __pfx___dev_queue_xmit+0x10/0x10 [ 436.576612][T10693] ? __copy_skb_header+0x437/0x5b0 [ 436.581732][T10693] ? __asan_memcpy+0x40/0x70 [ 436.586330][T10693] ? __copy_skb_header+0x437/0x5b0 [ 436.591444][T10693] ? __skb_clone+0x454/0x6c0 [ 436.596037][T10693] ? skb_clone+0x240/0x390 [ 436.600457][T10693] __netlink_deliver_tap+0x56b/0x7f0 [ 436.605753][T10693] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.610953][T10693] netlink_deliver_tap+0x19d/0x1b0 [ 436.616070][T10693] netlink_unicast+0x7c4/0x990 [ 436.620843][T10693] ? __pfx_netlink_unicast+0x10/0x10 [ 436.626132][T10693] ? __virt_addr_valid+0x45f/0x530 [ 436.631249][T10693] ? __phys_addr_symbol+0x2f/0x70 [ 436.636271][T10693] ? __check_object_size+0x47a/0x730 [ 436.641565][T10693] netlink_sendmsg+0x8e4/0xcb0 [ 436.646345][T10693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.651646][T10693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.656934][T10693] __sock_sendmsg+0x221/0x270 [ 436.661634][T10693] ____sys_sendmsg+0x52a/0x7e0 [ 436.666403][T10693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.671687][T10693] ? __fget_files+0x2a/0x410 [ 436.676275][T10693] ? __fget_files+0x2a/0x410 [ 436.680868][T10693] __sys_sendmsg+0x269/0x350 [ 436.685453][T10693] ? __pfx_lock_release+0x10/0x10 [ 436.690486][T10693] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.695605][T10693] ? __pfx_vfs_write+0x10/0x10 [ 436.700479][T10693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.706814][T10693] ? do_syscall_64+0x100/0x230 [ 436.711607][T10693] ? do_syscall_64+0xb6/0x230 [ 436.716333][T10693] do_syscall_64+0xf3/0x230 [ 436.720853][T10693] ? clear_bhb_loop+0x35/0x90 [ 436.725541][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.731445][T10693] RIP: 0033:0x7fc542385d29 [ 436.735863][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.755475][T10693] RSP: 002b:00007fc5431f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.763899][T10693] RAX: ffffffffffffffda RBX: 00007fc542575fa0 RCX: 00007fc542385d29 [ 436.771899][T10693] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000009 [ 436.779871][T10693] RBP: 00007fc5431f4090 R08: 0000000000000000 R09: 0000000000000000 [ 436.787841][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.795815][T10693] R13: 0000000000000000 R14: 00007fc542575fa0 R15: 00007ffe364e6d18 [ 436.803797][T10693] [ 436.813390][ T6608] veth1_macvtap: left promiscuous mode [ 436.837089][ T6608] veth0_macvtap: left promiscuous mode [ 436.842739][ T6608] veth1_vlan: left promiscuous mode [ 436.931599][ T6608] veth0_vlan: left promiscuous mode [ 437.161893][ T5132] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 437.339062][T10713] netlink: 'syz.0.1302': attribute type 11 has an invalid length. [ 437.763340][T10719] program syz.0.1302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.987183][ T5132] Bluetooth: hci2: command tx timeout [ 438.616732][ T6608] team0 (unregistering): Port device team_slave_1 removed [ 438.765007][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.784443][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.802063][ T6608] team0 (unregistering): Port device team_slave_0 removed [ 439.015305][ T972] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 439.247244][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 439.701446][ T972] usb 3-1: device descriptor read/all, error -71 [ 439.745648][T10735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 439.748206][T10597] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.797718][T10735] overlay: filesystem on ./bus not supported as upperdir [ 439.809929][T10597] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.842886][T10597] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.957316][T10597] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.084827][T10745] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 440.115740][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.241671][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.293127][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.300400][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.397797][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404349][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.414797][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.422003][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.243308][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.171999][T10790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 442.209174][T10597] veth0_vlan: entered promiscuous mode [ 442.219620][T10790] overlay: filesystem on ./bus not supported as upperdir [ 442.243322][T10597] veth1_vlan: entered promiscuous mode [ 442.299127][T10597] veth0_macvtap: entered promiscuous mode [ 442.331735][T10597] veth1_macvtap: entered promiscuous mode [ 442.361401][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.406990][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.430564][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.462536][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.491458][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.537045][ T972] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 442.708616][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.828979][ T972] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 442.837185][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.838816][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.923197][ T972] usb 3-1: config 0 has no interface number 0 [ 442.954280][ T972] usb 3-1: config 0 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 443.008032][T10597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.079642][T10597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.157511][ T972] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 443.174236][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.197013][ T972] usb 3-1: Product: syz [ 443.201820][ T972] usb 3-1: Manufacturer: syz [ 443.221570][ T972] usb 3-1: SerialNumber: syz [ 443.237116][T10597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.246143][T10597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.273323][ T972] usb 3-1: config 0 descriptor?? [ 444.056206][T10820] netlink: 'syz.5.1338': attribute type 2 has an invalid length. [ 444.064452][T10820] netlink: 'syz.5.1338': attribute type 1 has an invalid length. [ 444.078549][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1338'. [ 444.118740][T10819] netlink: 'syz.5.1338': attribute type 2 has an invalid length. [ 444.136242][ T972] usb 3-1: USB disconnect, device number 55 [ 444.178332][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.193347][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.200909][T10819] netlink: 'syz.5.1338': attribute type 1 has an invalid length. [ 444.234872][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.236571][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1338'. [ 444.243622][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.948311][ T29] audit: type=1326 audit(1735151622.229:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 444.972489][ T29] audit: type=1326 audit(1735151622.229:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 444.994267][ T29] audit: type=1326 audit(1735151622.229:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.022581][ T29] audit: type=1326 audit(1735151622.229:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.045196][ T29] audit: type=1326 audit(1735151622.229:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.092701][ T29] audit: type=1326 audit(1735151622.229:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.121689][ T29] audit: type=1326 audit(1735151622.319:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.146015][ T29] audit: type=1326 audit(1735151622.319:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.168136][ T29] audit: type=1326 audit(1735151622.319:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10841 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc3a89b85e5 code=0x7ffc0000 [ 445.191094][ T29] audit: type=1326 audit(1735151622.349:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc3a8985d29 code=0x7ffc0000 [ 445.327825][T10848] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.358799][T10848] overlay: filesystem on ./bus not supported as upperdir [ 445.398846][T10852] "syz.2.1345" (10852) uses obsolete ecb(arc4) skcipher [ 445.547363][ T5947] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 445.707095][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 445.716712][ T5947] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 445.731061][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.744130][ T5947] usb 5-1: Product: syz [ 445.751539][ T5947] usb 5-1: Manufacturer: syz [ 445.756430][ T5947] usb 5-1: SerialNumber: syz [ 445.769694][ T5947] usb 5-1: config 0 descriptor?? [ 445.783832][ T5947] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 445.994672][ T5947] gspca_sonixj: reg_r err -32 [ 446.000646][ T5947] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 446.035614][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1346'. [ 446.044872][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1346'. [ 446.054136][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 446.321343][ T6607] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.451372][ T6607] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.534788][ T6607] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.649314][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.662200][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.673095][ T6607] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.687875][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.696032][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.703858][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 446.711425][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.858803][ T5947] usb 5-1: USB disconnect, device number 47 [ 446.925281][ T6607] bridge_slave_1: left allmulticast mode [ 446.931286][ T6607] bridge_slave_1: left promiscuous mode [ 446.937201][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.954718][ T6607] bridge_slave_0: left allmulticast mode [ 446.967041][ T6607] bridge_slave_0: left promiscuous mode [ 446.975285][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.766315][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 448.776152][ T6607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.787739][ T5132] Bluetooth: hci2: command tx timeout [ 448.795771][ T6607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.808551][ T6607] bond0 (unregistering): Released all slaves [ 449.241644][T10909] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 450.010899][T10870] chnl_net:caif_netlink_parms(): no params data found [ 450.338314][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.391110][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.948692][ T54] Bluetooth: hci2: command tx timeout [ 451.165898][T10870] bridge_slave_0: entered allmulticast mode [ 451.237944][T10870] bridge_slave_0: entered promiscuous mode [ 451.286128][ T6607] hsr_slave_0: left promiscuous mode [ 451.333648][ T6607] hsr_slave_1: left promiscuous mode [ 451.349939][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.357712][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.373076][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.381439][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.414897][ T6607] veth1_macvtap: left promiscuous mode [ 451.426219][ T6607] veth0_macvtap: left promiscuous mode [ 451.434504][ T6607] veth1_vlan: left promiscuous mode [ 451.446307][ T6607] veth0_vlan: left promiscuous mode [ 451.567129][ T5947] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 451.745646][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 451.761411][ T5947] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 451.776292][ T5947] usb 3-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 451.804508][ T5947] usb 3-1: config 0 has no interface number 0 [ 451.810767][ T5947] usb 3-1: config 0 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.826023][ T5947] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=ff.24 [ 451.838401][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.846436][ T5947] usb 3-1: Product: syz [ 451.878216][ T5947] usb 3-1: Manufacturer: syz [ 451.882870][ T5947] usb 3-1: SerialNumber: syz [ 451.899725][ T5947] usb 3-1: config 0 descriptor?? [ 452.128997][ T5947] usb 3-1: unknown interface protocol 0x88, assuming v1 [ 452.137725][ T5947] usb 3-1: 230:2 : does not exist [ 452.282596][T10941] overlay: ./bus is not a directory [ 452.409300][ T5947] usb 3-1: USB disconnect, device number 56 [ 452.707105][ T5132] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 452.951956][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 452.983651][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 453.028513][ T5132] Bluetooth: hci2: command tx timeout [ 453.050123][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 453.730235][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.737992][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.745900][T10870] bridge_slave_1: entered allmulticast mode [ 453.754340][T10870] bridge_slave_1: entered promiscuous mode [ 453.763894][T10947] netlink: 'syz.0.1367': attribute type 11 has an invalid length. [ 453.842660][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.868278][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.998581][T10870] team0: Port device team_slave_0 added [ 454.042117][T10870] team0: Port device team_slave_1 added [ 454.114838][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.122515][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.153348][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.172424][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.180404][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.210327][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.249591][T10870] hsr_slave_0: entered promiscuous mode [ 454.256042][T10870] hsr_slave_1: entered promiscuous mode [ 454.270034][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.277762][T10870] Cannot create hsr debugfs directory [ 454.720177][T10870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 454.737324][T10870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 454.754650][T10968] tmpfs: Bad value for 'mpol' [ 454.756244][T10870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 454.777458][T10870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.833326][T10966] input: syz1 as /devices/virtual/input/input30 [ 455.008474][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.025635][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.107271][ T5132] Bluetooth: hci2: command tx timeout [ 455.134234][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.141470][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.205463][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.212666][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.694889][T10970] IPv6: Can't replace route, no match found [ 455.924500][T10980] syz.5.1374: attempt to access beyond end of device [ 455.924500][T10980] nbd5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 456.331192][T10983] kvm: kvm [10982]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 456.361458][T10983] kvm: kvm [10982]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 456.397324][T10983] kvm: kvm [10982]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 456.920790][T10995] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1378'. [ 456.930388][T10995] netlink: 'syz.2.1378': attribute type 9 has an invalid length. [ 456.940889][T10995] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1378'. [ 456.950136][T10995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1378'. [ 459.410962][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.249520][T11030] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1386'. [ 460.668338][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1390'. [ 460.932776][T11048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1391'. [ 460.962934][T10870] veth0_vlan: entered promiscuous mode [ 461.028382][T10870] veth1_vlan: entered promiscuous mode [ 461.116583][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1390'. [ 461.116616][T11044] nbd: device at index 64 is going down [ 461.133967][T10870] veth0_macvtap: entered promiscuous mode [ 461.158168][T10870] veth1_macvtap: entered promiscuous mode [ 461.194019][T11047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1391'. [ 461.221846][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.221871][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.222935][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.230418][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.230443][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.230457][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.230471][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.237878][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.240429][T10870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.240466][T10870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.240495][T10870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.240523][T10870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.538796][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.567953][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.605429][ T6608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.613785][ T972] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 461.637618][ T6608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.808512][ T972] usb 6-1: not running at top speed; connect to a high speed hub [ 461.820570][ T972] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 461.839990][ T972] usb 6-1: config 1 has no interface number 1 [ 461.846170][ T972] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.881971][ T972] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.901329][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.927014][ T972] usb 6-1: Product: syz [ 461.941828][ T972] usb 6-1: Manufacturer: syz [ 461.946483][ T972] usb 6-1: SerialNumber: syz [ 462.055565][ T6447] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.217829][ T972] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 462.219813][ T6447] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.253905][ T972] usb 6-1: USB disconnect, device number 43 [ 462.384041][ T6447] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.484628][ T6447] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.598286][ T6447] bridge_slave_1: left allmulticast mode [ 462.604105][ T6447] bridge_slave_1: left promiscuous mode [ 462.609979][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.619272][ T6447] bridge_slave_0: left allmulticast mode [ 462.625272][ T6447] bridge_slave_0: left promiscuous mode [ 462.642918][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.102808][T11074] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 463.116200][T11074] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1397'. [ 463.167136][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 463.841533][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 463.853220][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.861659][ T9] usb 6-1: Product: syz [ 463.866092][ T9] usb 6-1: Manufacturer: syz [ 463.871025][ T9] usb 6-1: SerialNumber: syz [ 463.881472][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 463.882011][T10931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.921654][T10931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.931313][T10931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.939517][T10931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.945012][ T972] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 463.949434][T10931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 463.964939][T10931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.419257][ T6447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.429533][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'. [ 464.456616][ T6447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.506178][ T6447] bond0 (unregistering): Released all slaves [ 464.658424][T11067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.665692][T11067] IPv6: NLM_F_CREATE should be set when creating new route [ 464.673024][T11067] IPv6: NLM_F_CREATE should be set when creating new route [ 464.828915][T11067] random: crng reseeded on system resumption [ 465.027238][ T972] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 465.034716][ T972] ath9k_htc: Failed to initialize the device [ 465.111706][ T972] usb 6-1: ath9k_htc: USB layer deinitialized [ 465.179489][T11084] veth1_to_bond: entered promiscuous mode [ 465.209728][T11084] veth1_to_bond: left promiscuous mode [ 466.070825][T10931] Bluetooth: hci2: command tx timeout [ 466.158803][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 466.158820][ T29] audit: type=1326 audit(1735151643.459:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11105 comm="syz.2.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x0 [ 466.323538][ T5946] usb 6-1: USB disconnect, device number 44 [ 466.561218][T11080] chnl_net:caif_netlink_parms(): no params data found [ 466.654489][ T6447] hsr_slave_0: left promiscuous mode [ 466.663598][ T6447] hsr_slave_1: left promiscuous mode [ 466.675814][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.685936][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.701480][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.709567][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.772456][ T6447] veth1_macvtap: left promiscuous mode [ 466.783892][ T6447] veth0_macvtap: left promiscuous mode [ 466.793594][ T6447] veth1_vlan: left promiscuous mode [ 466.804206][ T6447] veth0_vlan: left promiscuous mode [ 467.051481][T11125] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1407'. [ 467.584184][ T6447] team0 (unregistering): Port device team_slave_1 removed [ 467.644116][ T6447] team0 (unregistering): Port device team_slave_0 removed [ 468.151907][T10931] Bluetooth: hci2: command tx timeout [ 468.225273][T11100] sit0: entered promiscuous mode [ 468.235729][T11100] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 468.244404][T11100] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1403'. [ 468.378415][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.440058][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.487421][T11080] bridge_slave_0: entered allmulticast mode [ 468.495198][T11080] bridge_slave_0: entered promiscuous mode [ 468.981516][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.027877][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.069513][T11080] bridge_slave_1: entered allmulticast mode [ 469.091606][T11080] bridge_slave_1: entered promiscuous mode [ 469.350700][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.453865][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.646397][T11080] team0: Port device team_slave_0 added [ 469.677508][T11080] team0: Port device team_slave_1 added [ 471.165531][T10931] Bluetooth: hci2: command tx timeout [ 472.010546][T11162] vlan2: entered promiscuous mode [ 472.015643][T11162] vlan2: entered allmulticast mode [ 472.090999][T11162] macvlan0: entered allmulticast mode [ 472.097683][T11162] veth1_vlan: entered allmulticast mode [ 472.123938][T11162] macvlan0: entered promiscuous mode [ 472.153038][T11162] team0: Port device vlan2 added [ 472.529316][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.206381][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.213006][ T5132] Bluetooth: hci2: command tx timeout [ 473.232426][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.234387][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.179415][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.297933][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.500581][T11080] hsr_slave_0: entered promiscuous mode [ 474.526118][T11080] hsr_slave_1: entered promiscuous mode [ 474.617251][T11080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.635765][T11080] Cannot create hsr debugfs directory [ 476.748998][T11231] gre1: entered promiscuous mode [ 476.776376][T11231] gre1: entered allmulticast mode [ 476.781785][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 477.167866][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 477.193732][ T25] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 477.205875][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.222748][ T25] usb 3-1: Product: syz [ 477.227513][ T25] usb 3-1: Manufacturer: syz [ 477.232822][ T25] usb 3-1: SerialNumber: syz [ 477.250785][ T25] usb 3-1: config 0 descriptor?? [ 477.281193][ T25] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 477.376871][T11080] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.390513][T11080] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.405454][T11080] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.420335][T11080] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.537364][ T25] usb 3-1: USB disconnect, device number 57 [ 477.575536][T11080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.651195][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.725630][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.732924][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.794759][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.801984][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.974135][ T5946] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 477.978375][T11080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.146414][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 478.169211][ T5946] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 478.204080][ T5946] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 478.250899][ T5946] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.276635][ T5946] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.303844][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.331528][ T5946] usb 6-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 478.387590][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.494037][T11262] vivid-000: disconnect [ 478.581692][ T5946] usb 6-1: 0:2 : does not exist [ 478.603255][ T5946] usb 6-1: USB disconnect, device number 45 [ 478.717979][T11080] veth0_vlan: entered promiscuous mode [ 478.758293][T11080] veth1_vlan: entered promiscuous mode [ 478.816697][T11080] veth0_macvtap: entered promiscuous mode [ 478.840915][T11080] veth1_macvtap: entered promiscuous mode [ 478.875887][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.895624][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.907553][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.916632][T11268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1441'. [ 478.962108][T11268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1441'. [ 478.980581][T11268] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1441'. [ 479.020634][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.048985][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.079535][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.141156][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.198210][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.234797][T11080] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.251597][T11080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.275815][T11080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.298498][T11080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.161482][ T4935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.526067][T11290] syz.2.1445: attempt to access beyond end of device [ 481.526067][T11290] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 481.547285][ T4935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.569914][ T4935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.577964][ T4935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.946237][T11318] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1454'. [ 482.971676][T11318] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1454'. [ 483.167307][ T5947] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 483.329210][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 483.352902][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.500883][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.514590][ T5947] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 483.524121][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.534744][ T5947] usb 5-1: config 0 descriptor?? [ 483.567867][ T5947] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 485.416199][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.207757][T10931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.221377][T10931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.222834][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.240520][T10931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.258106][T10931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.272265][T10931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 486.281127][T10931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.293675][T11352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1464'. [ 486.396783][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.135250][ T46] usb 5-1: USB disconnect, device number 48 [ 487.178640][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.237121][ T5893] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 487.263570][T11369] wg1: entered promiscuous mode [ 487.291156][T11369] wg1: entered allmulticast mode [ 487.421440][ T5893] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 487.513027][ T5893] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.749958][T10931] Bluetooth: hci2: command tx timeout [ 488.761606][ T5893] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 489.166442][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.205263][T11381] random: crng reseeded on system resumption [ 489.264897][ T5893] usb 3-1: config 0 descriptor?? [ 489.295466][T11345] chnl_net:caif_netlink_parms(): no params data found [ 489.354531][ T11] bridge_slave_1: left allmulticast mode [ 489.847571][ T11] bridge_slave_1: left promiscuous mode [ 489.853422][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.160047][ T5893] usb 3-1: USB disconnect, device number 58 [ 490.357424][ T11] bridge_slave_0: left allmulticast mode [ 490.363092][ T11] bridge_slave_0: left promiscuous mode [ 490.368917][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.823438][ T5132] Bluetooth: hci2: command tx timeout [ 492.277286][T11399] Cannot find del_set index 3 as target [ 492.596515][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 492.756990][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 492.777097][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.803485][ T25] usb 5-1: config 1 has no interface number 1 [ 492.810542][ T25] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 492.831733][ T5893] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 492.842080][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.884001][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.903721][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.922880][ T25] usb 5-1: Product: syz [ 492.927279][ T25] usb 5-1: Manufacturer: syz [ 492.946500][ T25] usb 5-1: SerialNumber: syz [ 492.962877][ T5132] Bluetooth: hci2: command tx timeout [ 493.026150][ T5893] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 493.070991][ T5893] usb 6-1: config 1 has no interface number 1 [ 493.077302][ T5893] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 493.120083][ T5893] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 493.168815][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.194595][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.218402][ T5893] usb 6-1: Product: syz [ 493.228722][ T5893] usb 6-1: Manufacturer: syz [ 493.234947][ T5893] usb 6-1: SerialNumber: syz [ 493.269645][T11406] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 493.459489][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.487092][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.520589][ T11] bond0 (unregistering): Released all slaves [ 494.464555][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.503982][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.544651][T11345] bridge_slave_0: entered allmulticast mode [ 494.579984][T11345] bridge_slave_0: entered promiscuous mode [ 494.663791][T11420] netlink: 'syz.5.1479': attribute type 12 has an invalid length. [ 494.689121][T11420] netlink: 'syz.5.1479': attribute type 29 has an invalid length. [ 494.705965][ T25] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 494.739826][T11420] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1479'. [ 494.757918][ T25] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 494.785697][ T25] usb 5-1: 2:1 : invalid channels 0 [ 494.794711][T11420] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1479'. [ 494.853771][ T5893] usb 6-1: found format II with max.bitrate = 1389, frame size=0 [ 494.908869][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.917961][ T25] usb 5-1: USB disconnect, device number 49 [ 494.939915][ T5893] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 494.968254][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.015670][T11345] bridge_slave_1: entered allmulticast mode [ 495.082885][T11345] bridge_slave_1: entered promiscuous mode [ 495.109338][ T5893] usb 6-1: USB disconnect, device number 46 [ 495.187620][ T5132] Bluetooth: hci2: command tx timeout [ 495.238729][ T5947] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 495.433777][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 495.485678][ T5947] usb 3-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.533608][ T5947] usb 3-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.565237][ T11] hsr_slave_0: left promiscuous mode [ 495.604864][ T11] hsr_slave_1: left promiscuous mode [ 495.624322][ T5947] usb 3-1: config 1 interface 0 has no altsetting 0 [ 495.654186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.675151][ T5947] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 495.703590][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.732640][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.763228][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.784180][ T5947] usb 3-1: Product: ꇷ빻リ䪝稵나ʍ擐杸ẗ澇溹‶ᠼ䟔▕찮켂껗冾슙་揆ꡄ㠈飞캀짬嘒酪뭸ꇶ쮃闔溺쮲䨳䵗㍖Ⅺ嘇ⳡ‣왃宱࣠콻ᮡ㚀ऍꬋⴊḝۓ薘厴臖힂陓詎깒촰쬝奿⋊⏙⨞竨䴪婉賧ꄘ䰞ꦱ듂⚠੝䙙嗩슶嫻錺쳼軜⿀将蓷亓ূᴯ㛾蟏텂㍧⩹쾬葥鋨⏡菡ꇫ慌粹艭怢씮 [ 495.836490][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.896916][ T5947] usb 3-1: Manufacturer: င [ 495.915052][ T5947] usb 3-1: SerialNumber: ᰙꆖ⿯誊蟅淊䬣竪쐆轌ડ랁昄⹞貹훕紷屈 [ 495.919877][ T11] veth1_macvtap: left promiscuous mode [ 495.970649][ T11] veth0_macvtap: left promiscuous mode [ 495.982853][ T11] veth1_vlan: left promiscuous mode [ 495.994183][ T11] veth0_vlan: left promiscuous mode [ 496.014091][T11437] usb usb8: usbfs: process 11437 (syz.5.1483) did not claim interface 0 before use [ 496.080157][T11436] usb usb8: usbfs: process 11436 (syz.5.1483) did not claim interface 0 before use [ 496.175365][ T5947] usbhid 3-1:1.0: can't add hid device: -71 [ 496.202100][ T5947] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 496.237567][ T5947] usb 3-1: USB disconnect, device number 59 [ 497.417970][ T972] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 497.628405][ T972] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 497.639618][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.821612][ T972] usb 5-1: config 0 descriptor?? [ 497.955874][ T972] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 498.261316][ T972] gspca_cpia1: usb_control_msg 03, error -32 [ 498.434384][ T11] team0 (unregistering): Port device team_slave_1 removed [ 498.543695][ T11] team0 (unregistering): Port device team_slave_0 removed [ 499.033353][ T972] gspca_cpia1: usb_control_msg 02, error -71 [ 499.040821][ T972] gspca_cpia1: usb_control_msg 05, error -71 [ 499.047893][ T972] gspca_cpia1: usb_control_msg 04, error -71 [ 499.054398][ T972] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 499.063944][ T972] usb 5-1: USB disconnect, device number 50 [ 499.214376][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.230953][T11457] tipc: Started in network mode [ 499.241919][T11457] tipc: Node identity 7, cluster identity 4711 [ 499.248203][T11457] tipc: Node number set to 7 [ 499.258607][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.520539][T11472] openvswitch: netlink: Message has 1 unknown bytes. [ 500.121809][T11345] team0: Port device team_slave_0 added [ 500.188653][T11345] team0: Port device team_slave_1 added [ 501.060398][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.120566][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.179159][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.235250][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.259400][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.833303][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.324380][T11345] hsr_slave_0: entered promiscuous mode [ 502.346161][T11345] hsr_slave_1: entered promiscuous mode [ 502.364101][T11345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.389271][T11345] Cannot create hsr debugfs directory [ 502.535811][T11499] program syz.2.1498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.542558][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.552326][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.998722][ T25] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 503.340877][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 503.356776][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.369708][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.646721][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 503.704152][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.840357][T11345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 503.905211][ T25] usb 3-1: config 0 descriptor?? [ 503.910939][T11345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.931884][T11345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.946671][T11345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.095313][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.177238][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.263850][T11345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.274371][T11345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.369930][T11524] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 504.369930][T11524] program syz.4.1507 not setting count and/or reply_len properly [ 504.437914][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.445284][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.466908][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.474121][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.524536][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1507'. [ 504.623147][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 504.640777][ T25] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x2 [ 504.650312][ T25] konepure 0003:1E7D:2DB4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 504.729260][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.852918][ T972] usb 3-1: USB disconnect, device number 60 [ 505.095501][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 505.265222][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 505.335533][T11345] veth0_vlan: entered promiscuous mode [ 505.377918][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.472126][ T25] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 505.579886][T11345] veth1_vlan: entered promiscuous mode [ 505.584189][ T25] usb 5-1: config 11 has no interface number 0 [ 505.597018][ T25] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 505.604346][T11345] veth0_macvtap: entered promiscuous mode [ 505.626197][T11345] veth1_macvtap: entered promiscuous mode [ 505.626217][ T25] usb 5-1: config 11 interface 244 altsetting 5 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 505.646975][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.659419][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.671819][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.684487][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.697002][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.713609][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.732202][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.754714][ T25] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.765193][ T25] usb 5-1: config 11 interface 244 has no altsetting 0 [ 505.776849][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.785007][ T25] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 505.795396][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.803757][ T25] usb 5-1: Product: syz [ 505.807944][ T25] usb 5-1: Manufacturer: 皶ᳺ횶쟷ⷙ⫋臍䥱靖䕵ݵ걣裀꯿촱궭ꔻ麋퍵癗琔㼣冊屧씋쁋⏆ឭ❻쾘篩폨茕吪ꈭ⏃ꀟ훹夥ﶂ渘慳ᯝ䓾럂⪠픔ᐡ㱁뱛쒪䴼ヨ韕坜₏ﺥ谖劜캰㤺钌瞫宍腜 [ 505.833248][T11345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.833288][T11345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.833316][T11345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.833343][T11345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.851008][ T25] usb 5-1: SerialNumber: syz [ 505.936903][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.952774][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.986960][ T4935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.000003][ T4935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.109654][ T972] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 506.182753][ T25] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 506.202465][ T25] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 506.281091][ T25] peak_usb 5-1:11.244: probe with driver peak_usb failed with error -71 [ 506.302117][ T25] usb 5-1: USB disconnect, device number 51 [ 506.337110][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.346094][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.444441][ T972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.454964][ T972] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 506.469240][ T972] usb 3-1: can't read configurations, error -71 [ 506.744387][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 507.007942][T11572] dlm: no locking on control device [ 507.083656][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 507.103703][ T25] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 507.242876][ T25] usb 6-1: device descriptor read/64, error -71 [ 507.278380][T11584] program syz.0.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.523385][T11582] infiniband syz0: set active [ 507.598980][ T25] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 507.830767][ T25] usb 6-1: device descriptor read/64, error -71 [ 507.870567][ T4935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.980630][ T25] usb usb6-port1: attempt power cycle [ 508.343877][ T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 508.366167][ T25] usb 6-1: device descriptor read/8, error -71 [ 508.522538][ T4935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.626824][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 508.669914][ T25] usb 6-1: device descriptor read/8, error -71 [ 508.762821][T11597] netlink: 110 bytes leftover after parsing attributes in process `syz.0.1520'. [ 508.775319][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 508.816889][ T25] usb usb6-port1: unable to enumerate USB device [ 508.848658][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 508.955183][T11598] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 509.318947][ T4935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.461752][T10931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.473822][T10931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.482855][T10931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.492695][T10931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.500248][T10931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 509.508688][T10931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.592542][ T4935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.874014][T10931] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 511.352592][T11612] usb usb8: check_ctrlrecip: process 11612 (syz.0.1526) requesting ep 01 but needs 81 [ 511.364913][T11608] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.376186][T11608] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 511.465080][T11618] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1527'. [ 511.644508][ T4935] bridge_slave_1: left allmulticast mode [ 511.653799][ T4935] bridge_slave_1: left promiscuous mode [ 511.668741][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.702839][ T4935] bridge_slave_0: left allmulticast mode [ 511.721964][ T4935] bridge_slave_0: left promiscuous mode [ 511.727792][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.787656][T10931] Bluetooth: hci2: command tx timeout [ 512.556087][T11635] program syz.5.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.930311][ T5867] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 512.990620][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.004877][ T972] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 513.013262][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.024944][ T4935] bond0 (unregistering): Released all slaves [ 513.074884][ T5867] usb 6-1: device descriptor read/64, error -71 [ 513.147096][T11600] chnl_net:caif_netlink_parms(): no params data found [ 513.186916][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 513.211879][ T972] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 513.229778][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.249694][ T972] usb 3-1: Product: syz [ 513.259585][ T972] usb 3-1: Manufacturer: syz [ 513.270392][ T972] usb 3-1: SerialNumber: syz [ 513.295855][ T972] usb 3-1: config 0 descriptor?? [ 513.317436][ T972] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 513.357857][ T5867] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 513.507442][ T5867] usb 6-1: device descriptor read/64, error -71 [ 513.526864][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.558966][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.577569][T11600] bridge_slave_0: entered allmulticast mode [ 513.625189][ T5867] usb usb6-port1: attempt power cycle [ 513.685166][T11600] bridge_slave_0: entered promiscuous mode [ 513.705199][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.726474][T11600] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.742738][T11600] bridge_slave_1: entered allmulticast mode [ 513.751087][T11600] bridge_slave_1: entered promiscuous mode [ 513.807329][ T4935] hsr_slave_0: left promiscuous mode [ 513.815436][ T4935] hsr_slave_1: left promiscuous mode [ 513.821775][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.838907][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.846960][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.860126][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.937224][ T4935] veth1_macvtap: left promiscuous mode [ 513.942842][ T4935] veth0_macvtap: left promiscuous mode [ 513.965790][ T4935] veth1_vlan: left promiscuous mode [ 513.971415][ T4935] veth0_vlan: left promiscuous mode [ 513.988492][ T5867] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 514.001428][T10931] Bluetooth: hci2: command tx timeout [ 514.012297][ T5867] usb 6-1: device descriptor read/8, error -71 [ 514.277136][ T5867] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 514.309916][ T5867] usb 6-1: device descriptor read/8, error -71 [ 514.360115][ T972] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 514.456577][ T5867] usb usb6-port1: unable to enumerate USB device [ 515.210232][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 515.298750][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 515.733242][ T9] usb 3-1: USB disconnect, device number 64 [ 515.873415][ T29] audit: type=1400 audit(1735151691.587:285): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11662 comm="syz.4.1540" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 516.021492][T11668] program syz.5.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.281973][T10931] Bluetooth: hci2: command tx timeout [ 516.705837][T11600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.035347][T11660] netlink: 'syz.0.1539': attribute type 1 has an invalid length. [ 517.101266][T11600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.246041][T11689] netlink: 'syz.0.1549': attribute type 13 has an invalid length. [ 517.274712][T11600] team0: Port device team_slave_0 added [ 517.287031][ T29] audit: type=1326 audit(1735151692.906:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.319591][ T29] audit: type=1326 audit(1735151692.906:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.343806][T11689] gretap0: refused to change device tx_queue_len [ 517.350099][ T29] audit: type=1326 audit(1735151692.906:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.350872][T11689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 517.372723][ T29] audit: type=1326 audit(1735151692.906:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.418046][T11600] team0: Port device team_slave_1 added [ 517.457561][ T29] audit: type=1326 audit(1735151692.906:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.462981][ T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 517.479800][ T29] audit: type=1326 audit(1735151692.906:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.518622][ T29] audit: type=1326 audit(1735151692.906:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.522232][ T5946] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 517.547970][ T29] audit: type=1326 audit(1735151692.906:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.578613][ T29] audit: type=1326 audit(1735151692.934:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe17c185d29 code=0x7ffc0000 [ 517.615421][T11600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.622436][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.651611][T11600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.666056][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 517.693472][T11600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.697386][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 517.705663][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.717826][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.736259][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 517.750331][T11600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.758547][ T46] usb 5-1: Product: syz [ 517.767708][ T5946] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 517.778042][ T46] usb 5-1: Manufacturer: syz [ 517.778864][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.783066][ T46] usb 5-1: SerialNumber: syz [ 517.791357][ T5946] usb 6-1: Product: syz [ 517.815918][ T5946] usb 6-1: Manufacturer: syz [ 517.840246][ T5946] usb 6-1: SerialNumber: syz [ 517.840502][ T46] usb 5-1: config 0 descriptor?? [ 517.879192][ T5946] usb 6-1: config 0 descriptor?? [ 517.901667][ T46] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 517.904872][ T5946] gspca_main: se401-2.14.0 probing 047d:5003 [ 517.994362][T11600] hsr_slave_0: entered promiscuous mode [ 518.003467][T11600] hsr_slave_1: entered promiscuous mode [ 518.012643][T11600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.021125][T11600] Cannot create hsr debugfs directory [ 518.168047][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.179473][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.449183][T10931] Bluetooth: hci2: command tx timeout [ 518.489692][T11701] program syz.2.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.555361][ T5946] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 518.572716][ T5946] usb 6-1: USB disconnect, device number 55 [ 518.855741][T11600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.951302][T11600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 519.032076][T11600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 519.136328][ T46] gspca_sonixj: reg_w err -71 [ 519.141408][ T46] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 519.268489][ T46] usb 5-1: USB disconnect, device number 52 [ 519.460584][T11600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.610199][T11600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.647219][T11600] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.671594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.678799][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.715890][T11402] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.723072][T11402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.791075][T11600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.805596][T11600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.885146][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1559'. [ 521.417102][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.806617][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 522.654125][T11747] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 522.957786][ T5867] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 522.981076][T11600] veth0_vlan: entered promiscuous mode [ 523.012482][T11600] veth1_vlan: entered promiscuous mode [ 523.053181][T11600] veth0_macvtap: entered promiscuous mode [ 523.066592][T11600] veth1_macvtap: entered promiscuous mode [ 523.092524][T11600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.239059][T11600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.330180][T11600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.552571][T11600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.689302][T11600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.819081][T11600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.847949][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.859908][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.869854][ T5867] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 523.878980][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.888285][T11600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.899483][ T5867] usb 3-1: config 0 descriptor?? [ 523.915335][T11600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.938211][T11600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.947159][T11600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.956232][T11600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.965385][T11600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.057115][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.072208][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.096368][ T6607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.110873][ T6607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.437942][ T4935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.525609][ T4935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.556756][ T5867] usb 3-1: language id specifier not provided by device, defaulting to English [ 524.626765][ T4935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.705951][ T4935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.941987][ T4935] bridge_slave_1: left allmulticast mode [ 524.948438][ T4935] bridge_slave_1: left promiscuous mode [ 524.954225][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.963233][ T4935] bridge_slave_0: left allmulticast mode [ 524.969764][ T4935] bridge_slave_0: left promiscuous mode [ 524.975563][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.986679][ T5867] letsketch 0003:6161:4D15.0016: Device info: с [ 525.241976][ T5867] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 525.251251][ T5867] letsketch 0003:6161:4D15.0016: probe with driver letsketch failed with error -71 [ 525.264791][ T5867] usb 3-1: USB disconnect, device number 65 [ 525.703472][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.732610][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.745117][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.754763][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.765607][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.776317][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.059203][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.945977][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.971262][ T4935] bond0 (unregistering): Released all slaves [ 527.443571][T11781] chnl_net:caif_netlink_parms(): no params data found [ 528.019527][ T5132] Bluetooth: hci2: command tx timeout [ 528.569728][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.581894][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.589475][T11781] bridge_slave_0: entered allmulticast mode [ 528.603747][T11781] bridge_slave_0: entered promiscuous mode [ 528.688378][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.717624][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.754547][T11781] bridge_slave_1: entered allmulticast mode [ 528.812481][T11781] bridge_slave_1: entered promiscuous mode [ 529.718275][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.759316][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.023572][ T4935] hsr_slave_0: left promiscuous mode [ 530.083045][ T4935] hsr_slave_1: left promiscuous mode [ 530.144854][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.163321][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.196410][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.216696][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.334500][ T5132] Bluetooth: hci2: command tx timeout [ 530.391325][ T4935] veth1_macvtap: left promiscuous mode [ 530.439865][ T4935] veth0_macvtap: left promiscuous mode [ 530.466828][ T4935] veth1_vlan: left promiscuous mode [ 530.491074][ T4935] veth0_vlan: left promiscuous mode [ 531.670779][ T5946] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 531.863309][ T5946] usb 6-1: Using ep0 maxpacket: 16 [ 531.873076][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.885572][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 531.907711][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 531.934947][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 531.960255][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.033172][ T5946] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 532.057064][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.065134][ T5946] usb 6-1: Product: syz [ 532.084579][ T5946] usb 6-1: Manufacturer: syz [ 532.085672][T11867] fuse: Bad value for 'user_id' [ 532.094491][ T5946] usb 6-1: SerialNumber: syz [ 532.094512][T11867] fuse: Bad value for 'user_id' [ 532.108459][ T5946] usb 6-1: config 0 descriptor?? [ 532.319950][T11874] overlayfs: failed to resolve './file0': -2 [ 532.433534][ T5946] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 532.463450][ T5946] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 532.497402][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 532.567336][ T5132] Bluetooth: hci2: command tx timeout [ 532.581431][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 532.687857][ T5869] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 532.889720][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 532.897173][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.908707][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.919988][ T5869] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 532.929386][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.940214][ T5869] usb 3-1: config 0 descriptor?? [ 533.314348][T11781] team0: Port device team_slave_0 added [ 533.338455][T11855] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1587'. [ 533.355476][T11781] team0: Port device team_slave_1 added [ 533.388085][ T5869] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x2 [ 533.408691][ T5869] konepure 0003:1E7D:2DB4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 533.449393][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.456673][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.483490][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.541979][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.548979][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.577223][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.695062][T11781] hsr_slave_0: entered promiscuous mode [ 533.716760][T11781] hsr_slave_1: entered promiscuous mode [ 533.732736][T11781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.741875][T11781] Cannot create hsr debugfs directory [ 533.809875][ T5867] usb 3-1: USB disconnect, device number 66 [ 534.230060][T11781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.242069][T11781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.251964][T11781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.262776][T11781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.364323][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.422616][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.456375][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.463606][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.485297][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.492516][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.563600][T11781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.601209][ T5946] usb 6-1: USB disconnect, device number 56 [ 534.821054][ T5132] Bluetooth: hci2: command tx timeout [ 534.845757][ T972] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 534.890332][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.704358][ T972] usb 3-1: config 0 has an invalid interface number: 100 but max is 0 [ 535.712627][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.722931][ T972] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 535.731900][ T972] usb 3-1: config 0 has no interface number 1 [ 535.738377][ T972] usb 3-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 535.786302][ T972] usb 3-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 535.820379][ T972] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 535.835868][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.845315][ T972] usb 3-1: Product: syz [ 535.849499][ T972] usb 3-1: Manufacturer: syz [ 535.854419][ T972] usb 3-1: SerialNumber: syz [ 535.860977][ T972] usb 3-1: config 0 descriptor?? [ 535.870741][ T972] port100 3-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 535.882738][ T972] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 536.093923][T11894] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 536.110812][ T25] usb 3-1: USB disconnect, device number 67 [ 536.146307][T11781] veth0_vlan: entered promiscuous mode [ 536.174583][T11781] veth1_vlan: entered promiscuous mode [ 536.222071][T11781] veth0_macvtap: entered promiscuous mode [ 536.248364][T11781] veth1_macvtap: entered promiscuous mode [ 536.266801][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.287230][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.308403][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.330024][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.341263][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.359654][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.374104][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.394455][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.419570][T11781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.436432][T11781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.446131][T11781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.455464][T11781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.552347][T11921] overlayfs: failed to resolve './file0': -2 [ 536.577622][ T6606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.599280][ T6606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.627153][T11402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.636389][T11402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.861201][T11934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1609'. [ 536.871326][ T972] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 536.986501][T11934] hsr0: entered promiscuous mode [ 536.992665][T11934] macsec1: entered promiscuous mode [ 537.075679][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.091929][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.108196][ T972] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.142464][ T972] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.154653][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.167872][ T972] usb 6-1: config 0 descriptor?? [ 537.539964][ T5867] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 537.608411][ T972] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x2 [ 537.621120][ T972] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 537.637410][ T972] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 537.703198][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.713636][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 537.722813][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 537.734715][ T5867] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 537.744057][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.755852][T11944] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 537.763847][ T5867] hub 3-1:1.0: bad descriptor, ignoring hub [ 537.769922][ T5867] hub 3-1:1.0: probe with driver hub failed with error -5 [ 537.777968][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 537.783204][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 537.792717][ T5867] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 537.798820][ T5867] cdc_wdm 3-1:1.0: Unknown control protocol [ 538.302136][T11958] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1614'. [ 538.693583][ T5867] usb 3-1: USB disconnect, device number 68 [ 539.143862][ T5867] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 539.239742][ T5947] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 539.316978][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 539.323695][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 539.333201][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.343865][ T5867] usb 3-1: config 0 descriptor?? [ 539.419143][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.440497][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.562739][ T4935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.811015][ T5867] video4linux radio48: keene_cmd_set failed (-71) [ 539.823168][ T5867] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 539.832866][ T5867] usb 3-1: USB disconnect, device number 69 [ 540.209194][ T25] usb 6-1: USB disconnect, device number 57 [ 540.293716][ T4935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.363240][ T4935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.421298][ T4935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.579826][ T4935] bridge_slave_1: left allmulticast mode [ 540.585653][ T4935] bridge_slave_1: left promiscuous mode [ 540.594802][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.620782][ T4935] bridge_slave_0: left allmulticast mode [ 540.630809][ T4935] bridge_slave_0: left promiscuous mode [ 540.648533][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.313586][T10931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.332339][T10931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.341627][T10931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.348742][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.376035][T10931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.385492][ T5947] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 542.398898][ T5947] usb 5-1: can't read configurations, error -71 [ 542.421399][T11983] 9pnet_fd: Insufficient options for proto=fd [ 542.422215][T10931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 542.440189][T10931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.428067][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.505949][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.531368][ T4935] bond0 (unregistering): Released all slaves [ 543.546513][T11976] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.774688][T10931] Bluetooth: hci2: command tx timeout [ 544.831029][ T5869] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 545.008799][ T4935] hsr_slave_0: left promiscuous mode [ 545.016055][ T4935] hsr_slave_1: left promiscuous mode [ 545.022779][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.030550][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.040715][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.051224][ T5869] usb 6-1: device descriptor read/64, error -71 [ 545.062080][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.096894][ T4935] veth1_macvtap: left promiscuous mode [ 545.103140][ T4935] veth0_macvtap: left promiscuous mode [ 545.108939][ T4935] veth1_vlan: left promiscuous mode [ 545.114335][ T4935] veth0_vlan: left promiscuous mode [ 545.323139][ T5869] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 545.476386][ T5869] usb 6-1: device descriptor read/64, error -71 [ 545.612640][ T5869] usb usb6-port1: attempt power cycle [ 545.952978][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 545.977440][ T5869] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 545.997533][ T5869] usb 6-1: device descriptor read/8, error -71 [ 546.031295][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 546.076209][ T25] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 546.228589][ T25] usb 5-1: device descriptor read/64, error -71 [ 546.269788][ T5869] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 546.306902][ T5869] usb 6-1: device descriptor read/8, error -71 [ 546.432609][ T5869] usb usb6-port1: unable to enumerate USB device [ 546.491280][ T25] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 546.637662][ T25] usb 5-1: device descriptor read/64, error -71 [ 546.655760][T11978] chnl_net:caif_netlink_parms(): no params data found [ 546.738433][T10931] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 546.747697][T10931] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 546.755594][ T25] usb usb5-port1: attempt power cycle [ 546.786571][T12020] bridge0: port 1(erspan0) entered disabled state [ 546.802669][T12020] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1632'. [ 546.895245][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.902359][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.929935][T11978] bridge_slave_0: entered allmulticast mode [ 546.936548][T11978] bridge_slave_0: entered promiscuous mode [ 546.952540][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.960595][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.967872][T11978] bridge_slave_1: entered allmulticast mode [ 546.987512][T11978] bridge_slave_1: entered promiscuous mode [ 546.997745][T12028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1633'. [ 547.018489][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.022759][T10931] Bluetooth: hci2: command tx timeout [ 547.030171][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.069491][T11978] team0: Port device team_slave_0 added [ 547.080736][T11978] team0: Port device team_slave_1 added [ 547.115661][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.123013][ T25] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 547.137615][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.177845][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.189263][ T25] usb 5-1: device descriptor read/8, error -71 [ 547.199391][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.207147][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.218714][T12035] binder: 12034:12035 ioctl 8010aa02 20000000 returned -22 [ 547.233398][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.280838][T11978] hsr_slave_0: entered promiscuous mode [ 547.287128][T11978] hsr_slave_1: entered promiscuous mode [ 547.294536][T11978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.302266][T11978] Cannot create hsr debugfs directory [ 547.451306][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 547.472116][ T25] usb 5-1: device descriptor read/8, error -71 [ 547.590410][ T25] usb usb5-port1: unable to enumerate USB device [ 547.651391][T11978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.660488][T11978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.670302][T11978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.679294][T11978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.700783][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.708012][T11978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.715343][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.717443][ T5869] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 547.722485][T11978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.800935][T11402] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.810178][T11402] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.829162][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 547.829180][ T29] audit: type=1326 audit(1735151721.492:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.5.1637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996f85d29 code=0x0 [ 547.856670][ T29] audit: type=1326 audit(1735151721.492:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12038 comm="syz.5.1637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996f85d29 code=0x0 [ 547.893676][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.909887][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 547.912889][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.925175][ T5869] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 547.935104][T11402] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.942259][T11402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.947417][ T5869] usb 3-1: config 0 has no interface number 0 [ 547.960565][T11402] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.962184][ T5869] usb 3-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=fb.cc [ 547.967746][T11402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.991103][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.005976][ T5869] usb 3-1: Product: syz [ 548.010187][ T5869] usb 3-1: Manufacturer: syz [ 548.014802][ T5869] usb 3-1: SerialNumber: syz [ 548.024992][ T5869] usb 3-1: config 0 descriptor?? [ 548.141498][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.270520][ T5867] usb 3-1: USB disconnect, device number 70 [ 548.314581][T11978] veth0_vlan: entered promiscuous mode [ 548.326279][T11978] veth1_vlan: entered promiscuous mode [ 548.350993][T11978] veth0_macvtap: entered promiscuous mode [ 548.361592][T11978] veth1_macvtap: entered promiscuous mode [ 548.375382][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.390272][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.402725][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.418781][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.429587][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.441377][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.452191][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.464070][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.479883][T11978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.488922][T11978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.498551][T11978] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.507469][T11978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.579303][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.592896][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.616713][ T6606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.625340][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.626089][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.644701][T12081] bond1: entered promiscuous mode [ 550.651060][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.660679][T12081] bond1: entered allmulticast mode [ 550.665956][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.679173][T12081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.686449][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.709622][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.718482][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.729060][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1646'. [ 551.025400][T12081] bond1 (unregistering): Released all slaves [ 551.213583][ T5867] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 551.238928][T12084] chnl_net:caif_netlink_parms(): no params data found [ 551.335466][ T4935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.393891][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 551.403644][ T5867] usb 5-1: config 2 has an invalid interface number: 31 but max is 2 [ 551.423726][ T5867] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 551.436650][ T5867] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 551.446209][ T5867] usb 5-1: config 2 has no interface number 0 [ 551.455599][ T5867] usb 5-1: config 2 interface 31 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 551.469356][ T5867] usb 5-1: config 2 interface 31 has no altsetting 0 [ 551.479593][ T5867] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0060, bcdDevice=e9.8f [ 551.489025][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.497332][ T5867] usb 5-1: Product: 䐊 [ 551.501566][ T5867] usb 5-1: Manufacturer: ࠧ [ 551.506424][ T5867] usb 5-1: SerialNumber: 颌ꥲ㉑ᜦ㬶渡晹ꘊ须༷ڸ﹐䧨窿ᐦ毿涔呺꡻鏕蹶Ϙᕧ␝攊뼶㌘ኖ鳍ь둉튎걕뮧奭쏄ꍬ꒐斓ᄣ℄⡫ᬡ䧺塈棟붹凁轑俳⃾ᓖ䒐 [ 551.530659][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.544756][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.552242][T12084] bridge_slave_0: entered allmulticast mode [ 551.566805][T12084] bridge_slave_0: entered promiscuous mode [ 551.574909][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.589870][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.597107][T12084] bridge_slave_1: entered allmulticast mode [ 551.604744][T12084] bridge_slave_1: entered promiscuous mode [ 551.644596][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.656806][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.692779][T12084] team0: Port device team_slave_0 added [ 551.705027][T12084] team0: Port device team_slave_1 added [ 551.744046][T12084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.751545][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.778014][T12084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.806400][T12084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.813754][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.839642][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.846013][T12084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.883465][T12084] hsr_slave_0: entered promiscuous mode [ 551.890348][T12084] hsr_slave_1: entered promiscuous mode [ 551.896465][T12084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.904287][T12084] Cannot create hsr debugfs directory [ 552.034115][T12084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.045960][T12084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.055426][T12084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 552.072882][T12084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 552.145832][T12084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.171315][T12084] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.184125][T11402] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.191260][T11402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.206570][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.213709][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.394847][T12084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.502671][T12118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.795832][ T972] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 552.807508][T12084] veth0_vlan: entered promiscuous mode [ 552.840119][T12084] veth1_vlan: entered promiscuous mode [ 552.884638][T12084] veth0_macvtap: entered promiscuous mode [ 552.893807][T12084] veth1_macvtap: entered promiscuous mode [ 552.910968][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.921675][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.931854][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.942660][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.956191][T12084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.966084][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.976713][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.986646][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.997211][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.007226][ T5132] Bluetooth: hci1: command tx timeout [ 553.012900][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.023400][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.034379][T12084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.046019][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.057454][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.078241][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.080411][T12084] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.108136][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.115075][T12084] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.133741][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 553.133741][T12084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.148689][T12084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.159889][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.167521][ T972] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.177843][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.199979][ T972] usb 6-1: Product: syz [ 553.223843][ T972] usb 6-1: Manufacturer: syz [ 553.228503][ T972] usb 6-1: SerialNumber: syz [ 553.258507][ T4935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.271604][ T972] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.289200][ T5869] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.390161][ T4935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.550367][ T4935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.707308][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.736418][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.802870][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1652'. [ 553.833723][ T4935] bridge_slave_1: left allmulticast mode [ 553.839439][ T4935] bridge_slave_1: left promiscuous mode [ 553.859536][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.884618][ T4935] bridge_slave_0: left allmulticast mode [ 553.895631][T12118] random: crng reseeded on system resumption [ 553.902203][ T4935] bridge_slave_0: left promiscuous mode [ 553.913803][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.223833][ T5867] option 5-1:2.31: GSM modem (1-port) converter detected [ 554.233265][ T5867] usb 5-1: USB disconnect, device number 59 [ 554.240291][ T5867] option 5-1:2.31: device disconnected [ 554.891595][ T5869] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 554.898770][ T5869] ath9k_htc: Failed to initialize the device [ 555.000460][ T5869] usb 6-1: ath9k_htc: USB layer deinitialized [ 555.223828][T10931] Bluetooth: hci1: command tx timeout [ 555.296107][ T5869] usb 6-1: USB disconnect, device number 62 [ 555.401231][T10931] Bluetooth: hci2: command tx timeout [ 555.826872][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.838879][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.849170][ T4935] bond0 (unregistering): Released all slaves [ 555.864180][ T6607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.872637][ T6607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.058210][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 556.067994][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 556.077068][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 556.086549][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 556.460363][T12152] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 556.472999][T12152] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 556.481428][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.4.1660 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 556.492293][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 556.502366][T12152] RIP: 0010:put_page+0x23/0x260 [ 556.507260][T12152] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 28 11 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 af ed 7d f8 48 8b 1b 48 89 de 48 83 [ 556.526898][T12152] RSP: 0018:ffffc900044bf9a8 EFLAGS: 00010202 [ 556.532988][T12152] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802dcf5a00 [ 556.540980][T12152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.548973][T12152] RBP: dffffc0000000000 R08: ffffffff8984f5dd R09: 1ffff1100f744bec [ 556.556959][T12152] R10: dffffc0000000000 R11: ffffed100f744bed R12: 0000000000000001 [ 556.564946][T12152] R13: ffff88807ba25f42 R14: 0000000000000000 R15: 0000000000000000 [ 556.572958][T12152] FS: 00005555898ec500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 556.581909][T12152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.588513][T12152] CR2: 00007ff3a9b03b47 CR3: 000000003421a000 CR4: 00000000003526f0 [ 556.596513][T12152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.604502][T12152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.612464][T12152] Call Trace: [ 556.615738][T12152] [ 556.618654][T12152] ? __die_body+0x5f/0xb0 [ 556.622983][T12152] ? die_addr+0xb0/0xe0 [ 556.627156][T12152] ? exc_general_protection+0x3dd/0x5d0 [ 556.632704][T12152] ? asm_exc_general_protection+0x26/0x30 [ 556.638411][T12152] ? skb_release_data+0x46d/0x8a0 [ 556.643421][T12152] ? put_page+0x23/0x260 [ 556.647652][T12152] ? put_page+0x18/0x260 [ 556.651874][T12152] skb_release_data+0x483/0x8a0 [ 556.656713][T12152] sk_skb_reason_drop+0x1c9/0x380 [ 556.661749][T12152] skb_queue_purge_reason+0x3c5/0x500 [ 556.667171][T12152] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 556.673079][T12152] ? packet_release+0xa17/0xcd0 [ 556.677920][T12152] ? packet_release+0xa7f/0xcd0 [ 556.682764][T12152] packet_release+0xb15/0xcd0 [ 556.687427][T12152] ? __pfx_packet_release+0x10/0x10 [ 556.692612][T12152] ? down_write+0x18c/0x220 [ 556.697111][T12152] ? __pfx_down_write+0x10/0x10 [ 556.701953][T12152] sock_close+0xbc/0x240 [ 556.706189][T12152] ? __pfx_sock_close+0x10/0x10 [ 556.711023][T12152] __fput+0x23c/0xa50 [ 556.715007][T12152] task_work_run+0x24f/0x310 [ 556.719583][T12152] ? _raw_spin_unlock+0x28/0x50 [ 556.724414][T12152] ? __pfx_task_work_run+0x10/0x10 [ 556.729509][T12152] ? syscall_exit_to_user_mode+0xa3/0x340 [ 556.735219][T12152] syscall_exit_to_user_mode+0x13f/0x340 [ 556.740837][T12152] do_syscall_64+0x100/0x230 [ 556.745409][T12152] ? clear_bhb_loop+0x35/0x90 [ 556.750064][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.755945][T12152] RIP: 0033:0x7fc542385d29 [ 556.760342][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.780031][T12152] RSP: 002b:00007ffe364e6e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 556.788451][T12152] RAX: 0000000000000000 RBX: 00007fc542577ba0 RCX: 00007fc542385d29 [ 556.796415][T12152] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.804376][T12152] RBP: 00007fc542577ba0 R08: 000000000000a444 R09: 00007ffe364e716f [ 556.812331][T12152] R10: 00000000005f43f4 R11: 0000000000000246 R12: 0000000000086fa6 [ 556.820308][T12152] R13: 00007ffe364e6f80 R14: 0000000000000032 R15: ffffffffffffffff [ 556.828292][T12152] [ 556.831298][T12152] Modules linked in: [ 556.836101][T12152] ---[ end trace 0000000000000000 ]--- [ 556.904527][T12152] RIP: 0010:put_page+0x23/0x260 [ 556.909436][T12152] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 28 11 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 af ed 7d f8 48 8b 1b 48 89 de 48 83 [ 556.978828][T12152] RSP: 0018:ffffc900044bf9a8 EFLAGS: 00010202 [ 556.984958][T12152] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802dcf5a00 [ 557.006304][T12152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.014389][T12152] RBP: dffffc0000000000 R08: ffffffff8984f5dd R09: 1ffff1100f744bec [ 557.053050][T10449] vivid-000: reconnect [ 557.065228][T12152] R10: dffffc0000000000 R11: ffffed100f744bed R12: 0000000000000001 [ 557.085065][T12152] R13: ffff88807ba25f42 R14: 0000000000000000 R15: 0000000000000000 [ 557.110620][T12152] FS: 00005555898ec500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 557.122689][ T4935] hsr_slave_0: left promiscuous mode [ 557.158889][T12152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.165520][T12152] CR2: 00007ff3a9a5f440 CR3: 000000003421a000 CR4: 00000000003526f0 [ 557.190632][ T4935] hsr_slave_1: left promiscuous mode [ 557.199790][T12152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.207809][T12152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.229044][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.236716][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.243915][T12152] Kernel panic - not syncing: Fatal exception [ 557.250240][T12152] Kernel Offset: disabled [ 557.254554][T12152] Rebooting in 86400 seconds..