[ OK ] Found device /dev/ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty3. [ OK ] Started System Logging Service. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. 2020/09/08 03:26:05 fuzzer started 2020/09/08 03:26:06 dialing manager at 10.128.0.26:46153 2020/09/08 03:26:07 syscalls: 3166 2020/09/08 03:26:07 code coverage: enabled 2020/09/08 03:26:07 comparison tracing: enabled 2020/09/08 03:26:07 extra coverage: enabled 2020/09/08 03:26:07 setuid sandbox: enabled 2020/09/08 03:26:07 namespace sandbox: enabled 2020/09/08 03:26:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/08 03:26:07 fault injection: enabled 2020/09/08 03:26:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/08 03:26:07 net packet injection: enabled 2020/09/08 03:26:07 net device setup: enabled 2020/09/08 03:26:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/08 03:26:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/08 03:26:07 USB emulation: enabled 2020/09/08 03:26:07 hci packet injection: enabled 03:30:59 executing program 0: syzkaller login: [ 434.512355][ T8507] IPVS: ftp: loaded support on port[0] = 21 [ 434.853199][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 435.009310][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.016746][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.026083][ T8507] device bridge_slave_0 entered promiscuous mode [ 435.039067][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.046461][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.055893][ T8507] device bridge_slave_1 entered promiscuous mode [ 435.099898][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.115581][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.157834][ T8507] team0: Port device team_slave_0 added [ 435.171301][ T8507] team0: Port device team_slave_1 added [ 435.210636][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.217796][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.244056][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.260167][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.267260][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.293349][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.351580][ T8507] device hsr_slave_0 entered promiscuous mode [ 435.361145][ T8507] device hsr_slave_1 entered promiscuous mode [ 435.614220][ T8507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.641103][ T8507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.667753][ T8507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.694412][ T8507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.981410][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.021309][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.030670][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.055291][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.078398][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.089281][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.098664][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.105978][ T4606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.150856][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.159961][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 436.169779][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.179049][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.186370][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.196482][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 436.223269][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.248893][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.259011][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.300127][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.309985][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.320343][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.330580][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.340181][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.377219][ T28] Bluetooth: hci0: command 0x0409 tx timeout [ 436.383483][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.395526][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.417056][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.467738][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.475321][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.503869][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.559479][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.569714][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.625038][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.634796][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.653503][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.664157][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.682213][ T8507] device veth0_vlan entered promiscuous mode [ 436.723460][ T8507] device veth1_vlan entered promiscuous mode [ 436.789422][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 436.798931][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 436.808163][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.817918][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.840036][ T8507] device veth0_macvtap entered promiscuous mode [ 436.860472][ T8507] device veth1_macvtap entered promiscuous mode [ 436.870855][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.880411][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.931855][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.941321][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.951216][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.976335][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.984540][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.995111][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:31:03 executing program 0: 03:31:04 executing program 0: 03:31:04 executing program 0: 03:31:04 executing program 0: 03:31:04 executing program 0: 03:31:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x0, @pix_mp={0xfffffffc, 0x0, 0x30314742, 0x0, 0x0, [{0x0, 0x20000000}, {}, {0xfffffffa}, {0x0, 0x3}, {0x0, 0x5}], 0x0, 0x0, 0x6, 0x1}}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102002700) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1, 0x5, 0x8, 0x6}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x3, 0x4, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x4200) write$binfmt_misc(r2, &(0x7f0000002580)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000000007000000f64017db9820000000000000d403ffff633b27e59aa146174dd106736d173f0fc7ec6e26560000000049d2e172baf9459c5c953948c6a600000000000000c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2896e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a1355b0988bc118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e731cd10c81fe6c1c3c0000000000000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f000030a391871d0e69995183fa7a32d66d87d8065bc5ad6c29cdba9988fbf90f446ce0707bd24321054766daa52982324f8220fca82eb8c07a463e4f72f28298d60803ab4758fe99ade5a0414cc245e56840bd1a723616ede8aac3cb06786c44e3435f3b95aeea0b69069c0f0632a67b9da48620f323950ebdb1ce916bd92e45dc8d7d892de6a9544aff42f3af53fd47ea8bb3c5347f75e4fdab903786fae71df776ad628ed1f6384b8efb9042997aa7d462a1db535722b231c397c0d07344d8b4c129a0cf"], 0x1c6) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/112, 0x70}], 0x2, &(0x7f0000000340)=""/47, 0x2f}, 0xf57}, {{&(0x7f0000000580)=@rc={0x1f, @none}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000940)=""/174, 0xae}], 0x3, &(0x7f0000000a00)=""/217, 0xd9}, 0x7f}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/110, 0x6e}], 0x1, &(0x7f0000000bc0)=""/153, 0x99}, 0xb3d}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/66, 0x42}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/83, 0x53}], 0x3, &(0x7f0000000e40)=""/215, 0xd7}, 0x9}], 0x4, 0x10002, &(0x7f0000001080)={r4, r5+60000000}) sendfile(r1, r0, 0x0, 0x800000080004103) [ 438.456696][ T28] Bluetooth: hci0: command 0x041b tx timeout 03:31:05 executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e010191230000000109021b0001ecffffff0804000001ab255100090582001000000000"], 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) [ 439.156307][ T8721] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 439.516170][ T8721] usb 1-1: config 236 has an invalid interface descriptor of length 8, skipping [ 439.525517][ T8721] usb 1-1: config 236 has an invalid descriptor of length 0, skipping remainder of the config [ 439.536170][ T8721] usb 1-1: config 236 has 0 interfaces, different from the descriptor's value: 1 [ 439.545335][ T8721] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=23.91 [ 439.554690][ T8721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.578592][ T8721] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 439.587540][ T8721] usb 1-1: no configuration chosen from 1 choice [ 440.538430][ T3227] Bluetooth: hci0: command 0x040f tx timeout 03:31:07 executing program 1: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0x4, 0x80e}}, 0x30) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x6, "4e76bec597d3666913f1d88a8780a57a699dab49ff782adef8412c8e1326f02c"}) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x40, 0x73e, 0x3, {{0x9, 0x4, 0x3, 0x3b, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101, {[@end, @generic={0x88, 0xd, "e449e528ea2ea46dcc3c5d"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netpci0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x24000000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@getstat={0xe0, 0x15, 0x100, 0x70bd2c, 0x25dfdbfe, {{'drbg_nopr_ctr_aes192\x00'}, [], [], 0x2400, 0x6400}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x48085}, 0x8000) r4 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0x5, 0x400) timerfd_gettime(r4, &(0x7f0000000700)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740)={0x1, 0xffff}, 0x8) ioctl$RTC_UIE_OFF(r4, 0x7004) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x149, 0x20, 0xfffffffffffffc01, 0xc1e}, &(0x7f00000007c0)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000800)={r5, 0x4, 0x3, [0xe64a, 0x59, 0x7]}, &(0x7f0000000840)=0xe) r6 = fcntl$dupfd(r4, 0x406, r1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="464cd0354d19"}]}, 0x34}, 0x1, 0x0, 0x0, 0xdf20899e8a06f7f3}, 0x80d0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000009c0)=""/21) getpeername(r6, &(0x7f0000000a00)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000a80)=0x80) 03:31:08 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000040)="c28d635c7494949406283289aed4", 0xe) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r0, @ANYRES32=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) [ 441.837019][ T4606] usb 1-1: USB disconnect, device number 2 03:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) exit_group(0xb2be) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x11}}}, 0x30}}, 0x0) 03:31:08 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x7ffffffff000) ptrace$setopts(0x4200, 0x0, 0x1ff, 0x20) [ 442.541331][ T8765] binder: 8764:8765 ioctl c0046209 7ffffffff000 returned -22 [ 442.567512][ T8768] binder: 8764:8768 ioctl c0046209 7ffffffff000 returned -22 03:31:09 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) r2 = dup(0xffffffffffffffff) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x63) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) dup(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) [ 442.617547][ T12] Bluetooth: hci0: command 0x0419 tx timeout [ 442.861016][ C1] hrtimer: interrupt took 49167 ns [ 443.000626][ T8777] IPVS: ftp: loaded support on port[0] = 21 [ 443.664223][ T8777] chnl_net:caif_netlink_parms(): no params data found [ 443.779134][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.786461][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.795895][ T8777] device bridge_slave_0 entered promiscuous mode [ 443.808690][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.816063][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.825544][ T8777] device bridge_slave_1 entered promiscuous mode [ 443.872900][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.889503][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.935211][ T8777] team0: Port device team_slave_0 added [ 443.948274][ T8777] team0: Port device team_slave_1 added 03:31:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbfe, {0x1c, 0x34, 0x10, 0xfe, 0x0, 0x1, 0x0, 0x5, 0x1000}}, 0x1c}}, 0x0) [ 443.988804][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.996029][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.022176][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.038481][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.045983][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.072124][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.132224][ T8777] device hsr_slave_0 entered promiscuous mode [ 444.142600][ T8777] device hsr_slave_1 entered promiscuous mode [ 444.153224][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.161002][ T8777] Cannot create hsr debugfs directory 03:31:10 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000200)=0xff, 0x4) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="e5a321b72aac225b3a7e06de22670655a0314ced58076576a6553a673526ce2a39d0c36ff6419b8e25ba3afd77b54948306a64c27db0d4c927dbb33ae28e3f3be4bacd09572104a75e480d55663a77b32286c308f05ef5bb51eb69936c7fede3a3401c5f6d2d0677cad851fc983c03318b8082d69959ffe6488022293a1bab8c3926a8b706ebe9e4586e842b58742922be5392c87500b829f02674d29888c4d7730ea9678a9298486d959bd737007376a05eecb965d892c7089802d21b2fe66476e8a9ce90274217ff316dad27513852cca27ead4bf21e93106ed5d56fe3d31960088821ccbbd2"], 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000900)={{r4}, 0x0, 0xdfdef77da5137817, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x5, {0x3, 0x81, 0x40, 0x7, 0x8}, [0x5, 0x4, 0x8, 0x9]}}, @subvolid}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4c7], 0x0, 0x100400}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') [ 444.518642][ T8995] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 444.542598][ T8777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.587656][ T8777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.655835][ T8777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.713889][ T8777] netdevsim netdevsim1 netdevsim3: renamed from eth3 03:31:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x2, @local}]}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x60}}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) [ 444.855723][ T12] Bluetooth: hci1: command 0x0409 tx timeout [ 444.968769][ T9009] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 445.020860][ T9009] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:31:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@ethernet={0x306, @multicast}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-m\t\x00ory '], 0x8) fcntl$getownex(r4, 0x10, &(0x7f0000000380)) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000400)={0x200, 0x1, 0x1, 0x8, &(0x7f0000000340)=[{}]}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x208002, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1cc50d6be6", @ANYRES16=0x0, @ANYBLOB="04012cbd7000fcdbdf25070000000c000180060001000a00000018000380140006000000000000000000000000000000000008000400020000001400018008000800590100000800050003000000", @ANYRES64, @ANYRESHEX, @ANYRES16=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736671004c0002000000000000000000000000000000000000000000000000000000000000000000000000000000f8ff7f0000000000000000000000000000000000000000000000000000000000000009426c3c5145801c48224b9c8dbda01461e64714e8ee68eaedeae12283e46bafab7454b1754d9417178381c073cdc01988f843b9e705c3ca88f1"], 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$netlink(r9, &(0x7f0000000080)=@unspec, 0xc) fanotify_mark(r5, 0x14, 0x48000030, r9, &(0x7f0000000300)='./file0\x00') [ 445.384300][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.440502][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.449575][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.476861][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.499402][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.509395][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.518576][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.525870][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.580723][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.590250][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.599998][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.609216][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.616467][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.625480][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.636071][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:31:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fe104b67ec0001000000009f", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="c30b6ec40000000008000a00", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="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"], 0x40}}, 0x0) [ 445.790028][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.800777][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.810980][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.821248][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.831381][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.840860][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.870683][ T8777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.884350][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.898133][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.907817][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.917624][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.051226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.059047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.072704][ T9021] device vlan0 entered promiscuous mode [ 446.109733][ T9021] device team_slave_1 entered promiscuous mode [ 446.118321][ T9021] device team_slave_1 left promiscuous mode [ 446.159155][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.226974][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.237261][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 03:31:12 executing program 0: r0 = gettid() tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/120) ptrace$cont(0x20, r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x0) [ 446.298432][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.309087][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.355792][ T8777] device veth0_vlan entered promiscuous mode [ 446.363849][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.373265][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.423595][ T8777] device veth1_vlan entered promiscuous mode 03:31:13 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x9, 0xfff, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@rr={0x7, 0xf, 0x13, [@local, @private=0xa010102, @broadcast]}, @generic={0x83, 0x11, "eac691ecd4413b1bd8d3a672d1ed57"}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x10000, 0x802, 0x9, 0x682, 0xffffffffffffffff, 0x5, [], r0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/148}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x800) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000180)) [ 446.562507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.572053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.581382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.591050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.636910][ T8777] device veth0_macvtap entered promiscuous mode [ 446.695101][ T8777] device veth1_macvtap entered promiscuous mode [ 446.797349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.807278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.848338][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.859001][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.872772][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.898812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.908912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.937984][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 446.952250][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.964312][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.977758][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.994350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.004309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:31:14 executing program 1: r0 = socket(0x10, 0x8000000000000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) sendmsg$nl_route(r3, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001600000203bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) uselib(&(0x7f0000001fc0)='./file0\x00') sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001000000080001"], 0x44}}, 0x0) recvmmsg(r5, &(0x7f0000001c40)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000240)=""/22, 0x16}], 0x5, &(0x7f0000000580)=""/104, 0x68}, 0xfffffff9}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)}], 0x1}, 0x4}, {{&(0x7f0000000700)=@phonet, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/53, 0x35}, {&(0x7f0000001800)=""/28, 0x1c}, {&(0x7f0000001840)=""/111, 0x6f}, {&(0x7f00000018c0)=""/251, 0xfb}, {&(0x7f00000019c0)=""/103, 0x67}, {&(0x7f0000001a40)=""/26, 0x1a}, {&(0x7f0000001a80)}], 0x9, &(0x7f0000001b80)=""/168, 0xa8}, 0x71ae603b}], 0x3, 0x10100, 0x0) pidfd_send_signal(r3, 0x37, &(0x7f0000001f40)={0x2c, 0x8, 0x7}, 0x0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001e00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000002000)=ANY=[@ANYBLOB="f000f6441f12c138e8e234b7c1407f7a76125f0098d5d50301aaa5a1e317411dbaa13eb3a5f4539339a335e6b22f5d52c26f7e9a9a85f32ca838ff1d33074c967706441307e69f8a1e564c0b74ab3530eb58fc6f0af478842bed335e629fd11a3d30e3158351cce66d6008a133b5b55963113b3021f131a8247e539ba40bd39db566b6718a79f6a3eb8949", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf2510000000300001800600020089000000080005000000000014000300ac1414aa000000000000000000000000080009000a000000240001800c00070017000000200000000c0007002000000005000000060002001d0000000800040046000000340001800a0006006c626c637200000014000300e00000020000000000000000000000000800090044000000070006006c630000080005000000000038000280080007000002000006000f000300000006000f00ff7f0000080007009e00000014000100fc0200000000000000000000000000010c0003800800030000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x14}, 0x4010) r7 = syz_open_dev$sndpcmp(&(0x7f0000001d00)='/dev/snd/pcmC#D#p\x00', 0xff, 0x1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000001d40)) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 03:31:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x50000, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x140, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x200}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x844}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) r3 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$netlink(r6, &(0x7f0000000080)=@unspec, 0xc) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x453, 0x400, 0x70bd25, 0x25dfdbfb, "6a6fa68b0fdf43a64fd01415c2a4c4eb40c7bd99f2e412cccf7360c07dead72c117ca050e78a44d06047caea49bc3d6294f8864072c6b3d4d5ad46ec03f16b32a1e8b518cddb6d81e5a0fb7ea0a645ecbb26223949e149bb222a42b44da4fa4aa0d41b633d49d20ea3e71878fa9ec88ba1fc6980c5a0b735de0980ad2e771d1db60cff9f", ["", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 03:31:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1ece3140000000e10009022400010000000009040000010301010009210000004c80eae95f79f8f27709a90122"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x1, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfc, 0x81, 0x80}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x15, 0x4, 0x20, 0x8}, 0x8e, &(0x7f0000000100)={0x5, 0xf, 0x8e, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x2, 0x8700, 0x7, [0xff6000, 0x3f00, 0xc000, 0x140, 0xc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x8e, 0x4, 0x81, 0xf0f, 0x4, [0xf, 0xcf, 0x0, 0xffff3f]}, @generic={0x4d, 0x10, 0x3, "a11e51b91717f7fc754059a1ea77d4cda96fe2e04dba13677afd910b527b29694152ae8ac6dc03603deeb34a8dfca5b2ffe9383aad7d62b63923f18754c8b3716f5c7569c635e5f3f77d"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xa8, &(0x7f0000000300)=@string={0xa8, 0x3, "a005b81ab187b366c49210abcaec680347e5e084a789f967e04770fe015b71cf6c6203d16d0c64d9e948781adcd20af9d1a701a5d7967b99774841dc578485bed08cface7bf87ab4135b31a9a1c509f99b818344ec2e538336687190292470086c87a38f4baa1e69ab6c7388116fc56109baa492dd8d71ffb72253466f1f8b2d3522129d6eb0b9047d574540ca3a12a709909d43b2a3a054a9af9a2d75330afc7fe473a3faa4"}}, {0x60, &(0x7f0000000240)=@string={0x60, 0x3, "1e18af0ddf584a7bfbd98a7ecbb10a8f01a6f123b02da71ea59296d55973008117f4afbf69cfa53300081e9f40a2d34f83a0f7b9355f8186576b1826aff1a1e9056631858c97089f5314a12d54e2b34a29c85b63e153392d16f65505b188"}}, {0xe8, &(0x7f00000003c0)=@string={0xe8, 0x3, "eb6fe98412d1f479c128c4db3ad95382b76ecc02dc60e4318f8473a28339d29e56d35714a02d06d4d4087e60f919b6d9e6dfd4488204db0996f3628235467caff5398434857e1aef79875a4f7f9203c5c848894e14f77aaf4bb0b46ead330f147e053dca95ef7739bc3ad04aa8f5ab7ffd9c0267c750c4b9c756ac9bf39759673c445256571e143057e2943f43f27ce8691246ad814ef790941d0a13b685549c55d77de4ec6974bf55e284d31059a630e6b9e0030f91713a79157dfa0f2ec7336f10e4c19521301ff610e8a7cb1c75ff89a4eee6dd2dc04b3c8f284537babbf029b0a5415138"}}, {0xc2, &(0x7f00000004c0)=@string={0xc2, 0x3, "391eb3d8b7f0bbbc12f64171665a446cdab0c06921fd4d582806d686d835536b9cf6b32669d53eea12ee5324a2048804c83c77c806cd446b71b4dc4a1c6c3d02d558bc5cc425aa9b0b860f8a7b3d9b3d6353f09632121159ff4ad94770f652e3c4d98bc646cc963e3d4f3706ce563d1a6bfb4a7f6bc80f2d6ad2bc8174172cf8246dae8f80e3eb68409b03fbdc12a583486484c7b679cf43030d9ee73f523f9fee784b1bdf250dd04c25d3178fe46a3ec5e8e5b785e10493c9f16e7d4b14cb85"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0xb, {0xb, 0x0, "0596ec1ee23a750900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:31:14 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='\x00\x00\x00\x00'], 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) [ 448.246553][ T9035] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 448.485559][ T9035] usb 1-1: Using ep0 maxpacket: 32 03:31:15 executing program 1: r0 = syz_usb_connect(0x0, 0xe7, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd0, 0x5a, 0x48, 0x40, 0x1b75, 0x8187, 0xe2c1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x7, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x6f, 0x0, 0x4, 0x7f, 0xc0, 0xb3, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0xe8, 0x8b, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x84, 0xf5, 0xc}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x0, 0xff, 0x51, [@generic={0x9f, 0xe, "eee8a509a5a827bee72df966844115d0794678cbc8dab1a84f70c50efc2672674fb383aea15a59a7c49241094ede341c86fdadf2bd5972b7cbeba1a29e9639509351294cebb0c9eaea713adc867ad397e7cc9dab69bcf21a2e75a5f84be9c1b4b6a62b47c05eb48fc178c49c97634636bb38633fff6a54b3a1b04ffb2c4bf9fd4c8874bab27cd262acca72c5c2f376cc32951b26541276dfc936310f66"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x8, 0x72, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 448.530559][ T9035] usb 1-1: no configurations [ 448.536233][ T9035] usb 1-1: can't read configurations, error -22 [ 448.697328][ T9035] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 448.926797][ T8720] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 448.959130][ T9035] usb 1-1: Using ep0 maxpacket: 32 [ 449.006835][ T9035] usb 1-1: no configurations [ 449.011527][ T9035] usb 1-1: can't read configurations, error -22 [ 449.016417][ T4606] Bluetooth: hci1: command 0x040f tx timeout [ 449.035982][ T9035] usb usb1-port1: attempt power cycle [ 449.315945][ T8720] usb 2-1: config 7 has an invalid interface number: 111 but max is 0 [ 449.324199][ T8720] usb 2-1: config 7 has no interface number 0 [ 449.330668][ T8720] usb 2-1: config 7 interface 111 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 449.341138][ T8720] usb 2-1: config 7 interface 111 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 449.352252][ T8720] usb 2-1: New USB device found, idVendor=1b75, idProduct=8187, bcdDevice=e2.c1 [ 449.361555][ T8720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.421083][ T9060] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 449.775679][ T9035] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 449.867949][ T9035] usb 1-1: Using ep0 maxpacket: 32 [ 449.908106][ T9035] usb 1-1: no configurations [ 449.912950][ T9035] usb 1-1: can't read configurations, error -22 [ 450.075307][ T9035] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 450.176108][ T9035] usb 1-1: Using ep0 maxpacket: 32 [ 450.227859][ T9035] usb 1-1: no configurations [ 450.232608][ T9035] usb 1-1: can't read configurations, error -22 [ 450.259106][ T9035] usb usb1-port1: unable to enumerate USB device 03:31:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) io_uring_enter(0xffffffffffffffff, 0x69b7, 0x37cc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$netlink(r4, &(0x7f0000000080)=@unspec, 0xc) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="b000000024000b0f0000000000000000fbff1100", @ANYRES64, @ANYRES16=r1], 0xb0}}, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000000c0)) [ 451.097570][ T12] Bluetooth: hci1: command 0x0419 tx timeout 03:31:17 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'os2.', '/\x00'}, &(0x7f0000000100)='.#%}&]{$]\x00', 0xa, 0x3) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f05003fffffffda0602000009fee80501dd6c06040d000600fe7f", 0x22}], 0x1) socket$l2tp(0x2, 0x2, 0x73) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 451.439915][ T9078] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 03:31:18 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0xfffb}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x81]) r2 = geteuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x3}, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfff}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x2000, &(0x7f0000002c40)={&(0x7f00000020c0)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x1f, 0x10000, 0x841002, 0x40, 0x6, 0x400, 0x7}}, &(0x7f0000002140)={0x18, 0x0, 0x1, {0x9}}, &(0x7f0000002180)={0x18, 0x0, 0x5, {0x6}}, &(0x7f00000021c0)={0x18, 0x0, 0x6, {0x1bd6}}, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, 0x7, {0x80000001}}, &(0x7f0000002240)={0x28, 0x0, 0x3, {{0x2}}}, &(0x7f0000002280)={0x60, 0x0, 0x7fffffff, {{0x400, 0x5bad, 0x3, 0x5, 0x5a9a, 0x7, 0x901, 0xaa8d}}}, &(0x7f0000002300)={0x18, 0x0, 0x8000, {0xffffffff}}, &(0x7f0000002340)={0x13, 0x0, 0x2, {']$\x00'}}, &(0x7f0000002380)={0x20, 0xfffffffffffffffe, 0xe7, {0x0, 0x4}}, &(0x7f00000023c0)={0x78, 0x0, 0xfffffffffffffff7, {0x3f, 0x7, 0x0, {0x0, 0xfffffffffffffffb, 0x3ff, 0x1, 0x1ff, 0x2, 0x1, 0x9, 0x80000000, 0x4000, 0x566fdd66, 0xee01, 0x0, 0x9, 0x3}}}, &(0x7f0000002440)={0x90, 0xffffffffffffffda, 0x3, {0x6, 0x9, 0x5, 0xfffffffffffffff9, 0x1, 0xffffffff, {0x0, 0x6, 0x7, 0xfff, 0x8, 0x7, 0x3, 0x5d, 0x3, 0x8000, 0x7, 0x0, 0x0, 0xfe0000, 0x5}}}, &(0x7f0000002500)={0x30, 0x0, 0x68dde061, [{0x6, 0x9, 0x5, 0x9a9, '!&),}'}]}, &(0x7f0000002640)={0x500, 0x0, 0x97, [{{0x5, 0x1, 0x80000001, 0x1, 0xffffff01, 0x9, {0x2, 0x1, 0x0, 0x40, 0x0, 0x9, 0xfffffffd, 0x1f, 0xcd, 0x2000, 0x9, 0xee00, 0x0, 0x1, 0x22ff3bf9}}, {0x5, 0x5de1, 0x0, 0x8000}}, {{0x6, 0x2, 0x5, 0x1, 0x8, 0xffffffff, {0x3, 0x40, 0x6, 0x1, 0x1716, 0x0, 0x7, 0xfff, 0xc8, 0xc000, 0x9, 0x0, 0xee01, 0x2, 0x9}}, {0x3, 0x8}}, {{0x2, 0x3, 0xff, 0x400, 0x200, 0x80, {0x2, 0x8, 0xfffffffffffff001, 0x8, 0x8, 0xd3, 0x80000000, 0x1, 0x1f, 0x1000, 0x8, 0x0, 0x0, 0x5e27b5cd, 0x8}}, {0x0, 0x57, 0x0, 0x2}}, {{0x1, 0x3, 0x8, 0x40, 0x9, 0xffffff28, {0x0, 0x40, 0x3, 0xa714, 0x100000001, 0x1, 0x0, 0x4, 0x9, 0xc000, 0xb8, 0x0, 0x0, 0x8, 0x7}}, {0x5, 0x9, 0xa, 0xee04, '%[/%-*!/*^'}}, {{0x4, 0x0, 0xdf7, 0x301, 0x0, 0x4, {0x0, 0x7, 0x200, 0x4, 0x9, 0x4258, 0x3, 0x5, 0x431a09b6, 0x2000, 0xc72a, 0xffffffffffffffff, 0x0, 0xffffffff, 0x1000}}, {0x1, 0x7, 0x1, 0x5, ','}}, {{0x2, 0x3, 0xbfe3, 0x6, 0x566, 0x7, {0x1, 0x51, 0x1ff80000000, 0x49, 0x0, 0x4, 0x7fffffff, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x3ec}}, {0x6, 0x20000000000, 0x2, 0x9641, '\\+'}}, {{0x1, 0x0, 0x6, 0x7, 0xcfef, 0x0, {0x2, 0xa0a, 0x5, 0x2, 0x2, 0x5, 0x9, 0x6e75, 0x5e, 0xa000, 0x2, 0x0, 0x0, 0x0, 0xff}}, {0xd6, 0x2, 0x5, 0x8001, '\'[-/\\'}}, {{0x1, 0x0, 0x1, 0x0, 0x8001, 0x8, {0x4, 0x4, 0xfffffffffffffff8, 0x7fffffff, 0x9, 0x3ff, 0xa02, 0xffff9cdc, 0x401, 0xc000, 0x81, 0x0, 0xee01, 0x10001, 0x8}}, {0x1, 0x61b, 0x2, 0x9, '\'\x00'}}]}, &(0x7f0000002b40)={0xa0, 0x0, 0xa6a1, {{0x0, 0x2, 0x3f, 0x5, 0x7, 0x9a, {0x0, 0x1ff, 0x8, 0x401, 0x101, 0x4e, 0xa154, 0xfea, 0x8002, 0x8000, 0x100, r2, 0xee01, 0x81, 0xc1}}, {0x0, 0x2}}}, &(0x7f0000002c00)={0x20, 0x0, 0x3, {0x281, 0x0, 0xa06, 0x9}}}) ptrace$cont(0x20, r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x21) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES64=r3], 0x0) 03:31:18 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf0608203250c60b62f0000000110902120001000000000904572100cabd88009d3d1c452e50f4ed81d9854e5892971628c71d0fef09df2460eec0128249a1e3345498d8e538b6044878fa76db5193770b6b72b8"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d490b000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x40, {0x40, 0x22, "9a51526a608cf9f9d908a9db11ff142f0284a305ad4e956da427b54638168bf56da3ea2298bf229e46952d9013d569e599aa614e71564d86f5c56c526f20"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f0000000140)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xa, 0x9666}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3f, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x60, 0x1, 0x1000}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0xc96b633e379f66de, 0x0, 0x0, "828d5549", "4f49dce0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x8e, 0x0, 0x84, 0x1, 0x8}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0017b5000000244ec662d84096390900000000661ebc3bd0adea35eb58f6739997e2f8e39bc4e4b1fc92e046734f35f529c51670b7b97b1636d20d545611304cfc711c7fa05fb23af0b3f19af539284381c69a332846078aa66fbfc3bd40fe6beea359f99573210aefdc781a0c57db3237dce62103beb6b82193562e26fcae8b0b4b35d589e1c8e613ae30f3b92d810fd5255741c3ed14d7720296d3a307720d75863877b9d76779a13605b474338d96ae7acadc1ada8d162fe108"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x200, 0x8, [0xff0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9599"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000500)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "aced"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0xab}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x6}}) 03:31:18 executing program 1: syz_usb_connect(0x5, 0x418, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @private=0xa010100}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x4c014) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffff7, 0x109000) [ 452.655247][ T28] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 452.905463][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 452.949050][ T28] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 453.036598][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.045550][ T28] usb 1-1: config 0 has no interface number 0 [ 453.051792][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.136133][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.144525][ T28] usb 1-1: config 0 has no interface number 0 [ 453.151298][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.236228][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.244654][ T28] usb 1-1: config 0 has no interface number 0 [ 453.251261][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.336149][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.344490][ T28] usb 1-1: config 0 has no interface number 0 [ 453.351033][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.435983][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.436094][ T28] usb 1-1: config 0 has no interface number 0 [ 453.450693][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.536104][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.544564][ T28] usb 1-1: config 0 has no interface number 0 [ 453.551140][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.636191][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.644645][ T28] usb 1-1: config 0 has no interface number 0 [ 453.651242][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.741319][ T28] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 453.750031][ T28] usb 1-1: config 0 has no interface number 0 [ 453.756486][ T28] usb 1-1: config 0 interface 87 has no altsetting 0 [ 453.763300][ T28] usb 1-1: New USB device found, idVendor=5032, idProduct=0bc6, bcdDevice=f0.62 [ 453.772620][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.827401][ T28] usb 1-1: config 0 descriptor?? [ 453.893133][ T28] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in cold state, will try to load a firmware [ 453.945618][ T28] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 453.955420][ T28] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 453.971156][ T28] dvb_usb_dibusb_mc: probe of 1-1:0.87 failed with error -2 [ 454.092002][ T9087] udc-core: couldn't find an available UDC or it's busy [ 454.099373][ T9087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.140409][ T4606] usb 1-1: USB disconnect, device number 7 03:31:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x284a83, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/56) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/59) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000000c0)=""/250) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0xffffff00) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x8, 0x188e]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101240, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000002c0)=0x1, 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0xf193, 0x40000) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x6) r4 = openat2(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x349100, 0x0, 0xe}, 0x18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r5 = accept4(r0, &(0x7f0000000440)=@rc={0x1f, @fixed}, &(0x7f00000004c0)=0x80, 0x800) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000500)={0x18, 0x0, {0x2, @dev={[], 0x34}, 'veth0_to_bridge\x00'}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x1f, 0x9ba8, 0x21, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x7800, 0x10, 0x4, 0x8}}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000600)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000640)={0x5, 0xffff}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000680)={0x0, 0x8}) rt_sigprocmask(0x1, &(0x7f00000006c0)={[0x7]}, 0x0, 0x8) [ 454.915168][ T4606] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 455.155193][ T4606] usb 1-1: Using ep0 maxpacket: 32 [ 455.196360][ T8720] rtl8187: Invalid hwaddr! Using randomly generated MAC address [ 455.196815][ T4606] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 455.286977][ T4606] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 455.295400][ T4606] usb 1-1: config 0 has no interface number 0 [ 455.301619][ T4606] usb 1-1: config 0 interface 87 has no altsetting 0 [ 455.386178][ T4606] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 455.394523][ T4606] usb 1-1: config 0 has no interface number 0 [ 455.401036][ T4606] usb 1-1: config 0 interface 87 has no altsetting 0 [ 455.545223][ T4606] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 455.552943][ T4606] usb 1-1: can't read configurations, error -71 03:31:22 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 03:31:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$netlink(r2, &(0x7f0000000080)=@unspec, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000540)={0x0, 0x7, 0x0, [0x7, 0x7, 0xfffffffffffffffd, 0x20, 0x80], [0xffff, 0x10000, 0xffff, 0x0, 0x8, 0x80000001, 0x7, 0xfffffffffffff2cd, 0x4, 0xffffffffffff7fff, 0x1, 0x6f, 0x936, 0x80000001, 0x3, 0x80, 0x5, 0x8, 0x2, 0x101, 0x7, 0x7f, 0x20, 0x8, 0xbf, 0x80000000, 0x8, 0x4, 0x3f, 0xc2f, 0x7f, 0x8, 0x5b1, 0x8e, 0x4484, 0x4, 0x8, 0x81, 0x9, 0xb543, 0xffffffffffffffe1, 0x8, 0x3, 0x5, 0x67eccc9f, 0x3, 0x8, 0xffffffff, 0x9, 0x5, 0x6, 0x3, 0x3, 0x20, 0xfff, 0x4a3d, 0x5, 0x8, 0x691, 0x7, 0x8000, 0x5, 0x8001, 0x8, 0x4, 0x0, 0x401, 0x6, 0x4f7, 0xff, 0x5, 0x9, 0x64d8, 0x6, 0x3f, 0x2, 0xfffffffffffffffa, 0x6, 0x4, 0xfffffffffffffffa, 0x593, 0x3, 0x5, 0x7f, 0x7, 0x4, 0x400, 0x8, 0x5, 0x4, 0x9, 0xe320, 0xfffffffeffffffff, 0x2e, 0x1f, 0x4, 0x1fe0, 0x100000000, 0x0, 0x7, 0x800, 0x5, 0x2, 0x9, 0x800, 0x40, 0x4, 0x7, 0x2, 0x76f, 0xffffffffffff7fff, 0x8, 0x80000001, 0x8, 0x257e, 0x8, 0x4, 0x3, 0x2b]}) connect$netlink(r5, &(0x7f0000000080)=@unspec, 0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x5, 0x1c, @dev={0xfe, 0x80, [], 0x35}, @remote, 0x8000, 0xa0, 0x3f, 0xa70}}) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fdatasync(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xff9, &(0x7f000062b000)=""/4089, 0x40f00, 0x0, [], r6, 0x5, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x78) 03:31:22 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000000, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x99c8) sendmsg$inet(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001680)="8ddc83a59e0c5745db35da5bde6187132bdfd32ba722f6ba9f7ea131b094021d7b81349432ef95ad1793a3b2cf9f792dd627b66f1fbc3b3db82a740960d1b0976ebd49006d7e84", 0x47}, {&(0x7f0000001700)="502cac1c8cf4ebef5b71d9a9c3f3cb20054052574790ebbf30b84aea0ca7c1622616b018154354beda84e03b55f426719bc0bbfb1587a5ae2c87536b1bdc5a3269eb918d0349c697690c1feb89d512a397ad465e3294e47a84a3b347c58722224b96e48dc74cf391c1b508912f65dce3546aaea13464feacc37e944474c61c8345d98bf7e0e39f94ff", 0x89}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10000, 0x80901) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r1, r3}) [ 455.910368][ T9123] IPVS: ftp: loaded support on port[0] = 21 03:31:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000100)) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) fcntl$getown(r2, 0x9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x8b, "77b13dd98d33a1363b5396b515bc4d9d8570a6e79bb85caa1dd4e9cd8cc6acd3390d332af80e150225743a733c31e4f9207ce163427bd5c4f911a33e9ad17653d455fffbdb69d29145886d515922feb4f6e9411889ccc6314758ab00eafe5158c03cde42d0406ff978ad6d28a896295c75c50b230844f03192c2873cb2fd61429ba0bf5ef86f7d7411cec6"}, &(0x7f0000000080)=0x93) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r3, 0x5, 0x44, "eaf3a56c264f634fe1c66b70ea63d885014489d1dbb25b542f26d3e189cbe359cd997c2a882921b4342c0b1696534b8cffcddfcca140ac156b0877b876e88ef0975d1e78"}, 0x4c) 03:31:22 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x6, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082404009e7d780108030109023f000101000000090400000342ba0100052406000005240000000d240f012a83fa21720000000000000000090424130009058202f700000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 456.460123][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 456.578193][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.585580][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.595359][ T9123] device bridge_slave_0 entered promiscuous mode [ 456.609434][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.616952][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.626643][ T9123] device bridge_slave_1 entered promiscuous mode [ 456.634504][ T9265] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 03:31:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) r4 = dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00', {0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc306], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x6, 0x0, 0x5, 0x3, 0x0, 0x4ef, 0x2240, 0xc61649a1aa756a9b, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2e700, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8080, 0xfff, 0x1, 0x6, 0x2, 0x3, 0x401}, r6, 0x7, r4, 0x0) [ 457.293484][ T9265] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 457.340599][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.383667][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:31:23 executing program 1: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x8, 0xfffffffffffffff8, 0x1, 0x7f, 0x86f, 0x2, 0x2, 0x6, 0x3, 0x0, 0x100, 0x8000, 0x800, 0x1, 0x400, 0x7], 0x4, 0x244011}) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x158, 0x0, 0x148, 0x0, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x35, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00', 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) [ 457.530695][ T9290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 457.536052][ T9123] team0: Port device team_slave_0 added [ 457.552693][ T9290] IPv4: Oversized IP packet from 127.0.0.1 [ 457.561555][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 457.610948][ T9300] input: syz1 as /devices/virtual/input/input5 [ 457.738071][ T9123] team0: Port device team_slave_1 added [ 457.815359][ T9035] Bluetooth: hci2: command 0x0409 tx timeout 03:31:24 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2c, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x4, 0x8, 0x4}, 0xc) [ 457.904188][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.911483][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.937798][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 03:31:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x801) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xdc53) r3 = syz_io_uring_complete(0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000380)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4801}, 0x8841) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'memory'}]}, 0x8) read(r6, &(0x7f0000000200)=""/27, 0x1b) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x2}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) [ 458.160082][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.167966][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.194075][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.393881][ T9123] device hsr_slave_0 entered promiscuous mode 03:31:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1e8, 0x20f, 0x200, 0x1e8, 0x0, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x13}, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv6=@ipv4={[], [], @multicast1}, [0xff000000, 0xff, 0xff, 0xff000000], @ipv6=@empty, [0x0, 0xffffff00, 0xffffffff, 0xff000000], @ipv6=@private2={0xfc, 0x2, [], 0x2}, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 0x3, 0xb, 0x14, 0x4e20, 0x4a23, 0x4e22, 0x4e20, 0x2001, 0x200c}, 0x0, 0x80}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0x0, 0x0, 0x3}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x7, 0x1000, 0xfff, 'netbios-ns\x00', 'syz0\x00', {0xc8}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) [ 458.482738][ T9123] device hsr_slave_1 entered promiscuous mode [ 458.511311][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.519125][ T9123] Cannot create hsr debugfs directory 03:31:25 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x1a0400) clone(0x80000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x741000, 0x0}) [ 458.693797][ T9353] Cannot find del_set index 0 as target [ 458.960740][ T9373] binder: 9368:9373 ioctl c0306201 20000140 returned -14 [ 459.087060][ T9123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.143670][ T9123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.206548][ T9123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.258093][ T9123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.773169][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.826962][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.836049][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.894356][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.902504][ T9035] Bluetooth: hci2: command 0x041b tx timeout [ 459.930301][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.940311][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.950430][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.957789][ T9035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.971224][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.988421][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.997769][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.007080][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.014219][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.069431][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.080505][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.091297][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.101648][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.116364][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.146377][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.156990][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.187053][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.196349][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.227312][ T9123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.240373][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.254312][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.263885][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.322041][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.331438][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.371739][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.442230][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.452408][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.513130][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.522536][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.542018][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.551206][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.570128][ T9123] device veth0_vlan entered promiscuous mode [ 460.616948][ T9123] device veth1_vlan entered promiscuous mode [ 460.703057][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.713150][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.741930][ T9123] device veth0_macvtap entered promiscuous mode [ 460.769565][ T9123] device veth1_macvtap entered promiscuous mode [ 460.829220][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.840268][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.850306][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.860824][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.874591][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.883509][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.893476][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.902770][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.912638][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.943102][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.953979][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.965549][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.976170][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.989697][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.997988][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.007820][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:31:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES32=r0, @ANYBLOB="b5219e774600000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000400ac1414bb08000600ac1414aa08000600a9fe15bb08000700ac1414aa080007000000000008000700ac1e010108000a000100080008000300ab00000018000e"], 0x90}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0x10001, &(0x7f0000000340)) r2 = semget$private(0x0, 0x3, 0x2) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/163) set_mempolicy(0x4000, &(0x7f0000000140)=0x101, 0x2) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2004c884}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x200080, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f0000000300)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x581c00) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:28 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x33) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x13, 0x2}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x272b, 0x4c002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 03:31:28 executing program 0: r0 = socket$inet6(0x10, 0x6, 0x8001) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000140)) recvfrom$inet6(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x8000, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x600, 0x0, 0x0) [ 461.616157][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 461.624134][ T9415] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 461.632551][ T9415] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 461.641027][ T9415] netlink: 'syz-executor.1': attribute type 14 has an invalid length. 03:31:28 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x8814) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 03:31:28 executing program 0: syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b17cd040c6050f9006650000000109023600010000000009040000040378ff000905030000000000000905040000000000000905020b000000000009050e0000800000008b6374850af5a3dd9066b3d4a611dd461b2bab9ea456509103417841e677a17fc26ca8cef6c4fe054f6c9eb60d00000000d88d0000000000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x103, 0x29, 0x2, {0x5, [{{0x0, 0x3, 0x1}, 0x5, 0xff, 0x7, './file0'}, {{0xcf, 0x1, 0x8}, 0x561, 0x2, 0x7, './file0'}, {{0x10, 0x0, 0x9}, 0x1a, 0x0, 0x7, './file0'}, {{0x1, 0x1}, 0x3, 0x4, 0x7, './file0'}, {{0x4, 0x3, 0x8000}, 0x4, 0x8, 0x7, './file0'}, {{0x20, 0x4, 0x4}, 0x6, 0xf4, 0x7, './file0'}, {{0x40, 0x4, 0x5}, 0x1e43, 0x9, 0x7, './file0'}, {{0x4, 0x2, 0x6}, 0x8, 0x40, 0x7, './file0'}]}}, 0x103) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x3f0, r6, &(0x7f0000000380)="776a49af7a212a1457fd0dc3a5167341b6b5bf8ec1ab9253abe626daa09db1f6faba328a174d6bcb605d3995de91379e8c8b87dec7fbde86802b7faea98b4d1f9a22acd415a784edd5fd8ee40f2443265aca82d91e9b3dc83a283ec2", 0x5c, 0x7, 0x0, 0x2}, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$netlink(r5, &(0x7f0000000080)=@unspec, 0xc) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) accept$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000180)=0xfffffffffffffe8e) r7 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000480)={0x2, 0xc, 0x2, "d9e7c9be4ca70533ea1163f84d243f2045a1b0ae303d0cd60997833d061afa46", 0x3031334d}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000300)=""/85, 0x100}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000004c0)) [ 461.976324][ T28] Bluetooth: hci2: command 0x040f tx timeout [ 462.304740][ T28] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 462.678699][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 462.688759][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 462.699310][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 462.711465][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.721357][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 462.731187][ T28] usb 1-1: New USB device found, idVendor=05c6, idProduct=900f, bcdDevice=65.06 [ 462.740387][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.111548][ T28] usb 1-1: config 0 descriptor?? [ 463.188262][ T28] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 463.395715][ T8762] usb 1-1: USB disconnect, device number 10 [ 464.034181][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 464.056017][ T28] Bluetooth: hci2: command 0x0419 tx timeout [ 464.215736][ T8762] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 464.632121][ T8762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.642014][ T8762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 464.651979][ T8762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 464.663016][ T8762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 464.672855][ T8762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 464.682697][ T8762] usb 1-1: New USB device found, idVendor=05c6, idProduct=900f, bcdDevice=65.06 [ 464.691856][ T8762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.720097][ T8601] tipc: TX() has been purged, node left! 03:31:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="ce", 0x1, r2) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', '\x00\x00E', 0x20, 0x8}, 0x2a, r3) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 465.249099][ T8762] usb 1-1: config 0 descriptor?? 03:31:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x16, 0xd785ab268586148d, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @str=']nodev{\x00'}]}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) [ 465.307283][ T8762] usb 1-1: can't set config #0, error -71 [ 465.341659][ T8762] usb 1-1: USB disconnect, device number 11 [ 465.415389][ T9753] encrypted_key: master key parameter 'user:' is invalid [ 465.442244][ T9753] encrypted_key: master key parameter 'user:' is invalid 03:31:32 executing program 1: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22de2c9fc4c83108206624ca7a4f9d38e1696f388922880f42e67dabb06565a16eb68ca2227b28aa5a52d868c0757da79288e04d1cda00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba812666db4ce4948932585fc97ed370ddb2a3acadc69287b2e940ebea68d162949f0e102da9edd02e3913d84945b63c470000000000003de33a904c00000000000000000083b4d4e203"], 0xbc) sendfile(r0, r0, &(0x7f0000001000), 0xe000000000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40481, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0}, 0x68) [ 465.467705][ T9754] encrypted_key: master key parameter 'user:' is invalid [ 465.635987][ T9758] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 465.698616][ T9760] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 03:31:32 executing program 2: rt_sigaction(0x3e, &(0x7f00000000c0)={&(0x7f0000000040)="c4c1345c2a3683ac377012ea000000000864a2d67945d9e4400f4f8254000000c4039d487ee50d3e760636660ff62f360f1a6311f2dbe0", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r3, 0x0, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x80200) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd4, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xdd70efec98cdbc2d}, 0x2000c010) 03:31:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f00000003c0)) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000885}, 0x20048885) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xc, 0x3}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = accept(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000480)=0x80) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) [ 466.219755][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.313092][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:31:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x81, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'memory'}]}, 0x8) ppoll(&(0x7f0000000480)=[{r0, 0x4000}, {r2, 0x4}], 0x2, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x18]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x20400) r3 = add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, "f4751b6d46f92d1b7360ca23ff817ba4d004de2466c317d5476a42b163403006528af4f75c0bacc37026523b579a09841f3df961061c25f8d677e1867218171320a7a8b66ad374a931eee58eb24c719558449cbf0761d7ab107e2a0f86cb90421448487347919a7b8c492a38c7a542b2d74e6a297b0a74d0"}, 0x80, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r3, 0xec, 0x79}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'blake2s-256-generic\x00'}}, &(0x7f0000000240)="637e04e98e5f3dd5e42d92f78f2f83920f76e7e1f67990f986b99687b7344be918e25538f841b6e1076d15b9210ae268414db49bee82332d59e374f6b860351fe90ecfbbb768c40daf4adc70426ca0c838a719962cf601e79330ed4195543327cfec23106f4f5665b6909c65f2ba913eec48f4660c9dfd679ed0d29d5bcf2052e87777a001e796d92a155165bce619095eef7d14f7a68d726c09d97c92524feb5a8170852be0684c42b7a4103c6c93af710d50445c653672f620d77bdbc4c0d01ba9cd008b7b6ba5ba83af2ce87e6222ec596e9aaee51ac3ef0565aadc1535e08a55b20db5b4986d333eefd2", &(0x7f0000000340)="f50d246e79f336d63b55de4f4da2e1f1b41970e719707817cd94989a7452b87be2b37ba7c79684725262fd7b6815aca53f80ffd070b6421aa63ef82f881cadbdc7da0ce4339aa907170ccc7dd9ada75a2067b02cca2b4c9d92874e257c5225d39e701b90799f211ab57871b75db204260959fd97e674ad4d59") r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f03000000450001070000001419002b000a00010005000000006e0000000000000000010400", 0x39}], 0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x8000, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000580)={0x93bb75169cf5d885}) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000400)={0xfffffffc, 0x3}) 03:31:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x800, 0x9, 0x0, "b53ad73ce2d928b852e55748efcb158617d3a76e6161f0d15c0e90bc16d054fe", 0x3432564e}) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x100000000, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x2a, 0x24, 0x7, 0x2, 0x1, 0x3, 0x3, 0xe2, 0xffffffffffffffff}}) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x1c886) r3 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 466.750783][ T9783] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 466.759226][ T9783] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 03:31:33 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$P9_RREMOVE(r2, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) io_setup(0x2, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$netlink(r9, &(0x7f0000000080)=@unspec, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000180)) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 466.840650][ T9785] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 466.849018][ T9785] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 03:31:33 executing program 2: syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) 03:31:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r1, &(0x7f0000000040)=0x1479, r1, &(0x7f0000000100)=0x7, 0x9, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 03:31:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x600101, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) [ 467.362872][ T8601] tipc: TX() has been purged, node left! 03:31:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000000)="c5ac7fd8d9d05b607cadece5de5b07f4d97dddc9ce04d36131802f826cfe746f5413e44d55b807", 0x27) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x80, '\a\x00@'}, "ccbfc12abc282c27820fd9118600820e000600110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbdc1e5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) 03:31:34 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016"], 0x3}}, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) timer_create(0xb, 0x0, &(0x7f0000000200)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:31:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x48}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xcf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x2, 0x60, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x32, 0x1d, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x5b, 0x7574ee68ff1c06ce}, [@mbim={0xc, 0x24, 0x1b, 0x9d, 0x8, 0xf3, 0x1f, 0x5, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfa, 0x40, 0x3, 0x20, 0x0, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x3f, 0x5, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x0, 0x4, [0x40]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1b, 0x40, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x3, 0x37}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x6, 0xfe, 0x20, 0x8}, 0x15e, &(0x7f0000000180)={0x5, 0xf, 0x15e, 0x4, [@generic={0x22, 0x10, 0xb, "8a722e5fa30f1640554e00b3af41873b64e15c2751b06d1c23c59356d55c41"}, @generic={0xae, 0x10, 0x0, "1739976fb4dc2f273092f2a891cc003eaa0589117cbe6d01a3028ef153201863712b4c4ec16805bfd3e07fd92c2370f165f71ccc479c12305355efb38e4c19655bfeac749772784d6fd35e3daccde822d9a7456dcf220269ee905d002dcf567fdd66dd1924ea5b79192aeceb3dee3c0fe92e1bbc3d525f58fc37bf0781e26a230c33050dbe7d2b1676e5a98fe00e96cef4a6f4c423612132f7cf57874b2cde9afaeee715e7200fb20cf93f"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ab0b30e205b5b1ef8940bcd7a31e100b"}, @generic={0x75, 0x10, 0xb, "fabd6e794a96d977c096836c67256184f3889f532ec8e64f5ad46bfe8c783fbfd0069cbff7333ce954705ec803fdd16b1c3981211993e3067216b296462c19f03e2682f9897d10d9e6f566de5fce1397735aa96c693acc1390e9944930c0e889076cb5437a67739372b701b74ab227ba9ca3"}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xa5, &(0x7f0000000300)=@string={0xa5, 0x3, "7cf4f72fcab6559138758024b3d311aef8d29dc5cbf232f3c4d1492ebe7a2a33c70518034a2346c66cfdf8048c92da1764ccca1ddb65dce0d54cf9438dab7b246d5e56bf80aa64034f2b381706e59ddad82e38f4623a1773e3ca36ed94ccbe724ad56f8a67db0f7acc79ac0d05b7dcd5e4f69c6ce17f83084a7c2915610ff4980841d338ad935857816e3dd808056681de2edfb84d2a0f7b24dcfc40ab1d211adb7cce"}}]}) [ 468.400474][ T9821] netlink: 'syz-executor.2': attribute type 22 has an invalid length. 03:31:35 executing program 1: set_mempolicy(0x1, 0x0, 0x20000000000000) socket$inet(0x2, 0x80001, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 468.788117][ T4606] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 468.885362][ T9840] IPVS: ftp: loaded support on port[0] = 21 03:31:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x0, 0x9, 0x0, 0x8, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$netlink(r7, &(0x7f0000000080)=@unspec, 0xc) ioctl$DRM_IOCTL_ADD_MAP(r7, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x40, 0xc0c81a4fcb0c1c78, 0x12}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9800000000010904000000000000000000000000840001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018021000300ff02000000000000000000000000000114000400fe800000000000000001ffffff0000bb0c000280050001000000000008000740000000001c001080080003400000000008000140000000000800024000000000dbaa210087f15ff690df193c0789e9a2f428219255da6abda89598ef4a206265732261f03e8362377c6a550e7490bdefec867cec6f44afa992efbf94bef07bd87a099aaa56bb1e6606bbdf3bb784ad156389c4f598bd3cce91a69a838653874e1bfc6bde99f52e019bd3a873cda9e611bd5633eac0e4aae8efefdb2b2935605d6c6ec6b46b7d28e71e1c6d5ff77b0e260fdef089018d06bab2bc86f63da53505857a22d8cbdc55d5c72583cbfea9c51d4c6c6d66e2f918eb4f3ad51a0bd781b9b8e6d9ac1aad"], 0x98}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0xff, 0x95, 0xe6}, {0xffff, 0xf9, 0x1, 0x9}, {0x40, 0x5, 0x0, 0x200}, {0x14, 0x9, 0xae, 0x2}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) [ 469.085651][ T4606] usb 1-1: device descriptor read/64, error 18 [ 469.180464][ T9862] IPVS: ftp: loaded support on port[0] = 21 [ 469.336453][ T9870] IPVS: ftp: loaded support on port[0] = 21 03:31:36 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="04011200c212b9089406010088fb000000010902240001050000000904db000261ae460009050f1f00fefffbff0905830b", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 469.455554][ T9882] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 469.463787][ T9882] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 469.478951][ T4606] usb 1-1: device descriptor read/64, error 18 [ 469.754756][ T4606] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 469.881597][ T9871] IPVS: ftp: loaded support on port[0] = 21 [ 469.965937][ T9882] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 469.974327][ T9882] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 470.056908][ T4606] usb 1-1: device descriptor read/64, error 18 03:31:36 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x108, 0x2}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf25030000000500060040000000050014002000000008000a00000000000c001600020000000000000005000d000000000014001f0000000000000000000000ffff7f00000106001c000700000008fd27c11898d3b342a3540ae347a92d000a000400000006000e000700000063197a49b7922a908877b80367f2c69bc9b23797eb93e175fe0b6bc3bedd1094a3a1789f0a5f8155085cb44692c73e1f8c2d6d544e8673dc5a83641f5dbf572b082231be4a96d8d292bbe5c7a8cf4dbd37d30b02bc47c76b8b56c711842fc855"], 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x40040) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000700)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, r6, 0x917}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="3401000010000507ea351e785400090000000000", @ANYRES32, @ANYBLOB="0000000004000000080112000c0001006d6163766c616e00f80002004c0005000a00040000000000000000000a00ebffd11bf5466bca000018000400ea7f2f85340b00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb20000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb000008000100100000000a000400aaaaaaaaaaaa00000a0004"], 0x134}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4000800) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x205, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000003c0)=[@iv={0x68, 0x117, 0x2, 0x4f, "b5d07e96deb03b85ae3cbfe182463c9149e6ec05be7ac6b60dbc7c0d6df0328dd676aab63baeaaf6f3404ce1db9564f86e3da189b798e06f661f14cdf9adc39e6b407f8c93ee66c6165aab161f2d4e"}, @assoc={0x18, 0x117, 0x4, 0x3f}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x889}, @op={0x18, 0x117, 0x3, 0x1}], 0xe0, 0x2404c894}], 0x1, 0x0) 03:31:36 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB='\b@\x00N']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x9eaa, 0x1c, [{0xd}, {0x7, 0x1}, {0xd, 0x1}, {0x2}, {0xd, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0xe}, {0x4}, {0x5, 0x1}, {0xb}, {0x4, 0x1}, {}, {0x8}, {0x0, 0x1}, {0x6}, {0xd}, {0x6, 0x1}, {0x7}, {0xf}, {0x3}, {0x4, 0x1}, {0x4}, {0xf}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x7}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1e8, &(0x7f0000000140)={[{0x9, 0x4e00, "4e0841796b2189f899"}, {0x6c, 0x4e00, "2db00265283273d3dccd110c48c9cba6da5291759804dd3048d36994458c03a26fd6cda86a541122768630dd0cb20662c93907fa5bed8d4a757a19f4d1e0728da60016b1e0bc97188dc6f99cd532cb8f0aa66ed7d509e17b8b3f48034a8541633299f4b9ef289a44b1f248fa"}, {0xffffff85, 0x4e00, "cdc69898536829e103ea6fbae26b3567e7c1bb6d87f713b207e98acc223a6b96764f86bd000200006478bed527d7f7a0432bb410c45885380acedb735af4bdcacd999e3d70bb1b88664d09daff789d6b1132188a5c6141bd8f486e76d4495291d212b56d58ecb952d8f6d1e1e6be725f24f0e4a2db03b112ee938115a721748df741d07793cb77c6039f889c63b30613634e0bdf7939b046f6b5021a4f46a22fd290cf64c8783fac0dd0ddb11733e6a4a30ddd235bf7f23f6f9b4a4df4001765aaffcf82b1bd070f"}, {0x96, 0x4e00, "c696a6f9274d6388a13db7040d1fe4c93b5cadfe54912b525a01cbef25f787cb211d9dbf46ce1a1f27c02a6d2e4b96d9ed3317a895656511fa8750cb5b495c843c1fe8f71957bead9def2191f27e392e534a65046cbc5946b74b4da1331b3bf18b7ff543ccc171e00d2e524deae33bc6dd32f789c73623a563307b1967f9c9c8bec8fad7e02c0f7d42302c304fda79e12584e49a22f3"}]}) [ 470.444603][ T4606] usb 1-1: device descriptor read/64, error 18 03:31:37 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffff65}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xc0) [ 470.567521][ T4606] usb usb1-port1: attempt power cycle [ 470.697692][ T8601] tipc: TX() has been purged, node left! [ 470.710277][ T8601] tipc: TX() has been purged, node left! [ 470.804957][ T8762] usb 3-1: new high-speed USB device number 2 using dummy_hcd 03:31:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000110580400000100000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x8) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x123280) r3 = dup3(r1, r2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) [ 471.299778][ T4606] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 471.375692][ T8762] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.385043][ T8762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.393195][ T8762] usb 3-1: Product: syz [ 471.396937][ T4606] usb 1-1: Invalid ep0 maxpacket: 207 [ 471.397700][ T8762] usb 3-1: Manufacturer: syz [ 471.407576][ T8762] usb 3-1: SerialNumber: syz [ 471.517773][ T8762] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 471.585795][ T4606] usb 1-1: new full-speed USB device number 15 using dummy_hcd 03:31:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) gettid() ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x0, 0x0, 0x5, {0x5, 0x0, "d94428"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 471.737950][ T4606] usb 1-1: device descriptor read/8, error -71 [ 471.954326][ T4606] usb 1-1: device descriptor read/8, error -71 [ 472.075772][ T4606] usb usb1-port1: unable to enumerate USB device [ 472.324972][ T28] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 472.436033][ T4606] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 472.794580][ T4606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.805839][ T4606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.815988][ T4606] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 472.825211][ T4606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.906772][ T4606] usb 1-1: config 0 descriptor?? [ 472.950766][ T9035] usb 3-1: USB disconnect, device number 2 [ 473.244452][ T4606] usbhid 1-1:0.0: can't add hid device: -71 [ 473.250795][ T4606] usbhid: probe of 1-1:0.0 failed with error -71 [ 473.354933][ T4606] usb 1-1: USB disconnect, device number 16 [ 473.414839][ T28] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 473.422071][ T28] ath9k_htc: Failed to initialize the device [ 473.429789][ T9035] usb 3-1: ath9k_htc: USB layer deinitialized 03:31:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x1000, 0x1, 0xb5a4b02c0ed10ebb, 0x3, 0x7f, 0x1}, &(0x7f0000000200)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$netlink(r4, &(0x7f0000000080)=@unspec, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x44000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x4, 0x42, 0x7, 0x4, 0x0, 0x0, 0x31604, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1000, 0x9}, 0x2830, 0x7, 0x1, 0x6, 0x9, 0x5, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000002000000611018f8fff600004e5000000000000095000000000000008269b96ab598e3a854a4e46f547685a2b693656015fb6961bbce620a245186b53df13d67089b9fc3ed4a4ba1f8090de4ec09f7c3577b0ee21f8cc384972d4bc93106df600c3aeda466a0d63b3cc6afb8c9ab0f4e6037eaf086bbfb896c2b347d0b102ce4d3dc6d1c7f15184e4d0d01960c60e629d3c54e"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 473.898152][ T9035] usb 3-1: new high-speed USB device number 3 using dummy_hcd 03:31:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$netlink(r2, &(0x7f0000000080)=@unspec, 0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0xc000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xffff, 0x2, 'syz1\x00'}, 0x0, 0x10000000, 0x9, r3, 0x3, 0x4, 'syz0\x00', &(0x7f0000000040)=['*-.\'-$%\'\x00', '\xbb-\x00', '}%\x00'], 0xf, [], [0x100, 0x6, 0x8, 0x4]}) 03:31:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x244000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) dup3(r0, r0, 0x0) 03:31:40 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x9001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$netlink(r4, &(0x7f0000000080)=@unspec, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$netlink(r7, &(0x7f0000000080)=@unspec, 0xc) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000000c0)={0x0, r7}) listen(r0, 0x3) r8 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r8, 0x3) [ 474.395016][ T9035] usb 3-1: device descriptor read/all, error -71 03:31:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007fd97f405e04c607565600000001090212000100000100000002060000b9bc03425172c0689deda4202f5c58e3f453cd5a3d8084f0ceccba4e04fdd0b29d19c1ece2fb33323c83717ea903525643eb85cfdf39c9efcb30a7a3a44c7251e08ade1273ab8f493592afa903afb2ed5c516b2aea223caa8b403fc860018fd8e0571996f055230c04157fdbacd6b179fbcf9f6d2248e0eadfb6323fc704a37d9538dee6a37a835496686935d3bf184c"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000040)={0x0, 0x0, 0x4, "04a2045f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @private}}}, 0x0, 0x0, 0x48, 0x0, "e0738940121de7c8aef3080b76a34c59c80b828fa37d885b8064000000000000bbc314e043701b6bd9b16393f65b2f28feb77db1a52a1b1d5d38a5cdcc244ba2b77c39e9c7450200"}, 0xd8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000480)=""/249, 0xf9, &(0x7f0000000000)=""/106, 0x2}}, 0x48) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x88000023) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500003c0000000000069078000000000000000000004e22", @ANYRESHEX=r3, @ANYRES32, @ANYBLOB="a00000009078000013122bfc608db527f6b191e7d1fb2fec5c0d000053388befc893efaf70938ffbb0a86a229f0ff0af21a0cf727405c85485d98cfc1fca27fc09614d422358ab33f1111d6b37e997481053a762c5195d20cbdb8bd4a41736b529fb7331d1d50066c629787d75eda960534a79d554356039cab01d6a7cfba851eea96145b848da83ba221aebe6cd8ca0149c878218c0898dc2920e82fb859eab0a8f719897ebf7f7e426"], 0x0) r4 = dup(r1) read$char_usb(r4, &(0x7f0000000380)=""/206, 0xce) 03:31:41 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x51d483, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x9, @raw_data="41af4886b22358856aac1788f2bd4fc925888488a40adefb86b59d78bc69df2bcefdc652e0d08148fcda64c1f69216c1ee48e6b4e37a43e736173a85c98c550f6a91f8857e6985fedb6d996c0230962126a765ad9cd9692327679b371e6bbc496362df6f2a3ade0e2c1cd980e82eaa0f53e5a465fbf3f4fe904bb1dfd2b8b4332be7a956801bc273d59c811d1a122987e02fde0bdffada97364269fe007856c44d61d8ec4fd53431eef94ecd05bcf9b95c431c45c0bf7d212896b2d47d28636925251430127c4121"}) 03:31:41 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="005fea00000084ce08757134ce066b61e8074dd9a4cfc2348d4e4d5145e1664bbece40f5a335d081c93d7bf26abc74302ca1a690043a0b6607"], 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 03:31:41 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x709, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4044040) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x10161) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001400)={0x2, [0x401, 0x94]}, 0x8) r2 = syz_open_dev$dmmidi(&(0x7f0000001440)='/dev/dmmidi#\x00', 0xffffffff, 0x300) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000001480), 0x4) fsetxattr(r2, &(0x7f00000014c0)=@known='security.apparmor\x00', &(0x7f0000001500)='/dev/dmmidi#\x00', 0xd, 0x3) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001580)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x38}}, 0x0) clone3(&(0x7f00000018c0)={0x300100, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700), {0x15}, &(0x7f0000001740)=""/120, 0x78, &(0x7f00000017c0)=""/133, &(0x7f0000001880)=[0x0], 0x1}, 0x58) r4 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000001940)={0x2, 0x0, 0x1, 0x401, 0x0, {0x8, 0x1}, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xadc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048880}, 0x4000000) fgetxattr(r4, &(0x7f0000001ac0)=@random={'osx.', '\x00'}, &(0x7f0000001b00)=""/4096, 0x1000) r5 = fsmount(r4, 0x0, 0x80) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffc7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8d}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002c40)='/dev/sequencer\x00', 0x40381, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/md0\x00', 0x4200, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000002cc0)=0x4000, 0x4) [ 475.796305][ T9035] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 476.045064][ T9035] usb 3-1: Using ep0 maxpacket: 16 [ 476.097666][ T8720] ieee80211 phy3: hwaddr a6:8f:8f:7f:29:30, RTL8187vB (default) V1 + rtl8225, rfkill mask 2 [ 476.176326][ T9035] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 476.184970][ T9035] usb 3-1: config 0 has no interface number 0 [ 476.191217][ T9035] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 476.201467][ T9035] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 476.210747][ T9035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:31:42 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3c}, 0x2007, 0x0, 0x10000, 0x0, 0x3fc, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400400, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000100)="0e850a74e393a6b3e5414908c1d1fb8bac7e60ecc6749f2a25e5f35104025152350dea21ef5302ce25d28f5c7b95a839510afa011d1a0110709db044dadfa1aedc965f0ab0b821d5b7a36df87a2fe31aeac2f99d88ce206f60686fcf4a09dd3cb720f540617808b2fadbab86aa02623c5e4b9d36e565437a9f6e383afb43b33699c5462c1c42f277deb5aed53f8a56c8f6ca1fe255bc484de788dabda0ab4991215e41bf3c72b17c1280029b64891878df1580c7842ded2c452fcc3a5aed694493ade1c09b36cc54c716", 0xca) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet(0x2, 0x80001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000003c0)={0x21, 0x401, 0x0, 'queue1\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000480)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{&(0x7f00000004c0)=@abs={0xc2c79f14671a429f, 0x0, 0x4e24}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000540)="9aaf5128a30d6174b379da9042d09b47931b51dd792615906cc127bcca1416c7fc9378de2503649be40fbff13c39eeade5fd857e443ba1cc5e0358401cdd88c3fb5f3b65230a514306a24ac40871c868b317117628477bd04a508f3b33993bac6cf0a0878531a4c85cbb6b3a1f5889c04d6d3fcf723d0e349897c5b4e3f23128ff5cf50c39bf77296d2bed80cb9c856f001de8925c3036b2080b52d090c67d96a27493a42aa68ba18dd160a8cb2ca2c717e4f35ad383f32d5e9c2d680ecf15bdaca6b008ac642e55c75b8a458447b6", 0xcf}, {&(0x7f0000000640)="ef4ccf2ea3f972448c12bf0e9991cfa4229426a6fc9ea7999760418b0c61c899c007e201ba89f89aa1902f98a9a1d8da6ae5f82ce6a4c7e7a30502a8170cf486617e7729a91df17d87f7c40158cb63628ad2ab7416e5724a68a6d165bc2e779d1944326ceb81664571e2fffb", 0x6c}, {&(0x7f00000006c0)="0272132e87028d7047019c6dc710728d06aceae9775e40974cb24bd290efabb85755084036cd86442ee435ee18da84b52ec29c1232af04b523300a64443d7d1151709121a74bf85588eac88309c4c0857af29e458aca712a8b45ef903b3936b4dbfc8a4138c696bdb8c374a547", 0x6d}, {&(0x7f0000000740)="1da477be1468843f169f81172c94119762edd0968aa3e86dc015361a08aac14357a912450aafcb8cacc0cebf23b6eecb40afa38369f3e9268e867e899ec348670f2e785d1d701c80fd56dfad2814e61e69450a99035ffc48350d520c4118ab3d3d64825dd741666b4c14903247d7e3474f74cbc20ad78add8db4544b8c17988f406b7b2e1c273460764eafb49fa9", 0x8e}, {&(0x7f0000000800)="554b24c99dd7a054b03366a0f835f37a3001caf4fde503c8ece8a2c196aa21de2e50f84aec11ba72dcf41c6dd883c60a35ce2f56c73a476ceaae4a05e0d7182d0de89f77cd941474146c4353f2227a97d0b4ccc273a9fbaec807a50cccbf20c0e015a897cdd013754f4e6058a4ed4dc55124d2bc0810e74cf3f60ee0f3d6db2ea529a863ddc540aa50bfd9a0ece27fd731600ea5be3b803375f9294c31a91e3963e2d2bc341df67a2c8c6a4592b70bb4d30cd3b91bfbf4795e1644073466bdfbb3581ee8befeeee1a5210c4ff02bcb12c4188d8c30be99769d1b2121fec552ed4610e68c2d08c1f69199d8e8d81d4f369c43f966044ace6a9f7462e51de73cb1d591212bbbcecdf8d78f3bc1017234fe9c384ddf52967242e4dfcb1041d10f5d5f282eb098c5cda7ceee91b9ce8b31835da67aa167dd8f4269a0f674393be551dde043453b3a85b012bc1306335774327240558af833da865714670c326025ecabfe3ccf50e3f1fc4a36ceb67e5ac6cdabc98d07d8651cc6c122de50035d44a2ce925a9f424d3ecb81e20fe865a9049ecab75c586892e870b5b504171dfe33f0685307599e13c36bfbf803ee0cb72310d7a96d9d2e5fa83b69bdc8a47b4692083e1444994fd9b4b8ed045eaef2c2846172726d876dfd148e62bc4ea061888db9e25ba231759e7fafadb824cbe3411cfbff8b1a9657bab582c451bc8fd6a35dffda1faced4f2ad954e82912262e85f66b2a32ae91483ccc24d785b84fa81fdb7908353baddb9bcb7f94f120e4bb7e0e73e0bd006f160411e2380036689d16daa64e20b1512c456a4496b52c0d0cc87c50cc0bfd6a7a9bb1d360c65cbda172ebca7e9609f26299888bb9beb4604125da56ee75f23ab454acdde5edf86561a039f51da314791993d8f9badd90b6d3ca687971fde822d98ab9297acbe7efc07ed61286692f2aec7c06fdddf908f73a989504a535157b0399c18c72a104cfae2d78032680413b6d42d5f88aca166d92c90ce32c11d14daa3625a7affce45184cdf0298b1ad64a4daea8654d3c5d3a83e15fbf19f100606df5d2f4a8d7045675017b80ded2474fb34e35e20e2f974f46e258310badd9c8e944a3386b2d30468ceb80aac4481b6c90361d7145e4d5a97b7332a09296c26c6c7512699bb6131fa90e6b5583c7492e78d8fba37b11e80e86ec4c76e94787b59cfaaf0ab8f89b4af4497a51e2ed37b839489388639b885d2fd6718702cb755c89d5db6d6a85cef63151833a7e1c258bff82fb7acc77a6c7f09224979b97457c57a8d54199b052caf2b91b455ab443245c5e3bcce58ed21b4634b14952dbf4285dc6035e1145053a585f854002e204665ff4960bc34157832a74fa23cdb3871aa18a08961a681a1acad66bda7587b0149ae902a78abee44afb896cbbe1e7723edc351f5e1a52537b38b7d1c812204b9e743161ceecabc5110d9811522a4b6f76af5b8a9e9fd6d41296d8eb97464f4728a19dfd913cc9db2208104df21c31d0896aa4c4802e93853631092c15fb34c8370beb24bf21bf82f660c60a6be09e5da0e92e5ac0f537a0bfb2e4eb27959635d7e0754f9833ca1fc9cfebb4a484907f7ff4056c6b0d1beb307d0b507abd3e7951f75555705e8b6a8a7540c563f77f8c3c901164337b02e044ddca3872b84ce971c1c1ed6cf6c6be5f926e09e851571fbdc00d329b93424b738d32ff2fe05cce57c1e652bd1cc6a5475f33b573b5f51cb9ba0bd27cf8bba6b823636917c7e12ca0ad7983c273aa1fede43250ddd75ea98a9f54137c7371aea4c9d29bf22410115fbbe333fc57224a8d14cebb77fd289c4e3835bed46ff17b743e859c37d26b87dcb884531469b54366dba2bb17a8189df25fc745ac8d211b5ff0f939d80df27c1d37130a12bc8cce081790c94506fc95352ddde0cd962615f7f7db46e83d28ee11ef1e1069ef8c86e6a20a15f6d56e5f1e1b84aebac56310abb5509578ed9ffd0fb51277b250e2c467a3afabe2107fabe5c609bef02771aa1398e195482b40ae04148bb4df45641166302a4022ba3f01856b71cba5659111b3a80dc0ecd588105805539595371b9f7a4afeba02fb56b8582d9c53bc42eabdd798e36d348fdb801b3bb6869ff39f82974b48fa05af0c5d844983ba1d73c67512a60078ab921b8205e8da20f90a458cf5d97a1beece19386f26be4145415d5da2ed990fbe59018efb43cf418115c674a5e938a969eb5a862867c01a6e7d83cf0e3d477d319e582c38db626ecf6b726c16e85cb41bc07f31595357712465100807bfe959db66519a09668eaccc795c372290092e7034ad9e9d6c79bdaf3fc49f1cbe8da15c461c9700bb1815ea84a08619bc0342b1aabe2968b47a92a645d519f570cfc4a617d8b7b7d0eac9e0afa9680bdaa34d76e788e197326f4ba917e523c44a1c51d6b9ef16e1fbbb09ff6f845be19e5db2447c5508055e71bfa3b1224b1c859a78784175a7b0ad820db248ac7433175d4765b31c18112c9fea01a1d3e35f6184bab251997e1f4536f0b1e331250880b0e8c903b1d842121b75b33b56b91a28d9aafb4a9d71f956787b5e0ce7a4bdd5a20dc5b375ba4806164b3a3dbc7f98095350704b18fb33a1ea838e199c71b4418e25559047e2cc8ceedee140191735e8844fd92bd1dfec3c8654c947af9e1cd57b60560302a0d33f24621bbef4d076a82c4101dcbc895621c08d2665832a7bbf7aa54974e40ef7c800c5a30ca0007613f6db50a426db617bbe8c4f3214dd31863915caa2ac0ee495b0b75f06c5a160e7208b8b9ed59ad1b643d83b369dcbc6ce60122645180d3265a975cf628030113133d5a0e47a65bd17d6230f86758aeecc317d89f7ed5a6eb96c733423f3c00d15ada672a662212d9ce17f2f65b33a1489a2a775f2531ee99011dc5542f5e4cd15419dbe52130ade96a8b0accedbd10318e3dca65102f69e96a935be48cabe3da042d79da03490f5fe8db53fd9bf53cbe00358007da99c45b75c07f6548eaf18b4b939b770124dcba6ade7e927cd0ff1b004721ef3644105aa7ecc9526a4518bb5e439b95791fde3a280a678e2329ab9ae51962d5b62e4f0163b2e0aaa349268c23dac44a2a11cea5936cf301678b6e9d3c7119bcfd67f2fb8ece3f15f3a1b9d1bdf157c1c3db67473417d31bc3de832691690c0383c73064a73f218ffd5ba8a5470bd5943dd19c94b7b94fa6fe99aec1473e57f5e0de21938aa7c69e5a06bfabe90d79462afa42b58834c23de8bff9ab062238efb87f9539ce88b961489778430db79606408351aa49a114cd99ed6832ac88519145a19684f564c61cf19f8579e915b1d1bf9b3a321a35c7d6abdfdd59be7a78bb9b845bd95e88e5712bd1fb54f9bb6a999fbc8e27ca70deb27799630c99d833c68485560e61c602340e0e737cb5affbdbc645d977d26dcd87ccb61262ec3a9ed2f12da04f9eebae33462cba30cffc2e145579686db99ca47a71ce9d3f6e7923c8c856da8d93818104a2dae9f6d22a13d6dafc2bcb60cb52aa1fd57f1187b36187fbc11f599d65c3c258db4905eab176d7cc29394c7d899589c2a507a05f9ba323d52d4e1c9101fa19a705fade3f0c38aa63a6e5ed8c4f9ae7ec3d1f234d45b7a41709439dc10e352e880ece7ba3cedc1649559af977523c134e05046e54301be78723b9bc41a6973cd09b007b600686a947917313e7366d3d75908c4881b1a530a75676c1094d87f712bca128242594deddae6e29e1518f40a4dd2a957f610a9fcb8e559f458fc50e00c47ab71665cd5507226ec0897c92ffe11e4001aa70151c0b203f441b2e425a23b09016905604a21bf08d991ae2d94a3882daba765ff3f8be19c4de2e2901ed657359e8d2f9e024fd9511455c12240de591f5ea4e04094a1aeb46d3b82a2dccff2880dd552358eaa7d9fb4753f4e3e6ec04762e2f5d873cf61b3aad0f6e3448d2e9213b7b13e5cd35a3c2e189941351951593275f58b9360266a274abbb659e99960ecd2495077b8f7e4077a59419f90d0b256fd4bfc25fed79ca322898e2397ef6aa4b6a29c449b923b86165915d95d67f6c47b9b80c778769250dbbadd4b734354c6555faf7c02afa1c0f05cb7b60b70c57a75a6d154d5e62e82ca2aab2c7e81d20284d05774b131d28af405a4d6eeb78f7274f780702f6adb764255f89848f668829175c51c4a735524989d304fe2a010a5e910911903677d9ec220054052c23d7d465e0e983b54c318f5efceb8986c87fe3b106c074ba5393730b6e46320c591eab9a39dfcf9ff463294185a1fa73019b7d07f3f64a0858199a2302383a139645462a4d71dca65e78e449b3d8b60760289fa49eecae24103166731aa8b63c8f0c6551632f94322e3203300e65856408a79680862d034c9ed7eded795672c4461110114b879e8916c637bbce22a4ee769709e71d4da976f74059636faaf49bd14d9b43f252602e7d46a14d4695b0e4535899bb0daf1ed96e87dd1d3af9f36f85780b6626735e92e96c5f8eeebdf0ccfc8b745868ed0e6eccc97a55e7972df9fbf4673dd6214e9479b1aeaa828d0f251baf09dacc9cf92b1e065b9711da27aacb293e7425e7ef3e9491cb3da15108d246c947456070b5020adb771f23fafc5e018f86597e6bd79729142cff9e5e27404c5ab92baf55daefdf488e4783dfd5ab13282bc30c96124a95e1348cfc4c60ccee50bb961e462ff67b3c971d4b914e2961490b8994c3ea3335659d78a7188e5832794a796abd3a7f7901ea2d5dcb54adf4d60cc9e960d4dd47d63be2c16042873a74306da8887db9b3c3d595f016f59e1fa2021dccea834d39e8d9fd76b1400a3f089ce40d3864d6c0e1f26cb2e52f56f3107d3eb2893e8d29e63d613724070e94e55ccb388660d85d2b94f861182ce77747e5ae2cb2a622272e3f0ba37d6d9d6633be1f3a4da8b7c9776d5c7f49b1347170f504d28cb7f3372d0c27027291340272839b8973465216c13465e0694925f27f165cbcbb93d23aaa2bd16c82e6654528cf0e608162854e8d497c7922ed9dc87572157d63fd004218c2515c81f9d6b561b934e49cdc8a24720334d0f1789494c2c6ac8f91fb6c380a8b93f8c5280699550a025a097e4dd6b860fbbed924e776de0384493a5d3ee292436fdf584e563961de00b033792ce6d2093e1b0b73e8cc709e7ddf853edc22980d897ea62e55b6af56a10a7b0ea37ea05be4963cfdcf16a45a0013916a8308c41200c23849280e99a0f36bc5c5cd6507c3b6c7a9f85d1fa4f6a842d70f779e94e7531b0606a38e712f02fbd629ad6270919ea698193eeaf187b071aa7c160e7ac4b3e2203e048d0b2c02a3e166268b043a372105e216bc0dd8ba1ee8163fbe66401323e13635a176d77f49bb2a60aba4f003688a8cd269ac56952fbf15dc36fd37dbf97847f93cd2503ea2769f1b06adbfd43b743cc50fe3d5ef1cc3cb611befbfa495e9d3bf6dec08272d34a3f647af19af8ee51329862fae787e31a0a751f3a80f59e61971423009b2ea241a2c7760e9d73fa4f3518e6534da96c28e0f1e2b5ef58a8bc862498816bcc40f7baa08c9a5492abccf8faeb238fb64f4ae34090c18f30d24952038611db4cd5e10e384e2f17fdc16e64e0e0b539a6430930da390fa95171a3122d14002af20c080c33b643ad77a00a41655809efbed7f2363863c6e085fe6a2483787e594f8d6713cf800d78799118731250a39ee9bd27e801cc875615b281476fc08d911407fb0635b535ea13b50d8bd7d97150431efe", 0x1000}, {&(0x7f0000001800)="aa09370c627e31617cb90e2c866ef539449a715baacc97a31d732bb6a69c63812d4c256cca84f37838f6f625325e2224045901ddf0fc62e7438c4e2b116dea073808632755a6852553e1ef9d0b6ff34ab7021223773e1e6b4457726e7346c4539c23659398ba8c3479a1967634ca27111503ff6f3206d250024965ebf6ba3a4845dae1e42c368d4a8c48304e33284fc7a07d7cc220c0c0e4bf566ef1a8cf385d842c0c82a7d2fbfdc0c13cddd6d89efbccf15a09b02fda37fcdd2245facb35b48fda97d98665ab5ac31a966ec22a203e220f4454db5c8fc8188092663697a011a01a9bfe24985dad60d95a451afd", 0xee}], 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="34000000000000000100000001000000d3e4cbe9a4240167a0bbb3e5d25160dbe98b5c247554a86cbf5a81e59b6942ec40b535930564dbcd2c336b1711500f3fecb8262d076235f7fd1aec9898bc050c3ec5c704a9912b366b891b0e1e6910a816feb43c38b795", @ANYRES32=r6, @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000008000000000000000010010000100004f65e5777687afbb178f75d1b8bae20a34bb2b33f30382e16e664117810e0e3f992b576eb70db0c6f1263c06a7753f228dfe7e1d6576e4de17f6ce46ed3875bb87ac43223edd286444f2f254a399f116a845785b8f59325662859c2d13f8", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="281200000000000009000000010000001bcaa4ba1d6a683db73d141a87f72ee028c7aacfd5253194181a9c1c98e3190c6942d7d1290d415d76b0be21d3c72b54e183962c4c818724de9e8b59ca3c238096667aac775065e088050f9ab018c28b43a5aa70449e2cce8a336c2f31cd7fbc285d704717276bea57cab47115883b58af1eaa0ecdf4cf7d84d91260", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r2], 0x150, 0x8000}], 0x1, 0x40800) r7 = dup3(r1, r1, 0x80000) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080), 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @ipv4={[], [], @loopback}, 0x40}}, 0x0, 0x9}, 0x90) [ 476.416921][ T9035] usb 3-1: config 0 descriptor?? [ 476.694321][ T9035] gtco 3-1:0.219: Collection level already at zero [ 476.703269][ T9035] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input6 [ 476.917144][ T9035] usb 3-1: USB disconnect, device number 5 [ 476.955623][T10037] syz-executor.0 (10037) used greatest stack depth: 3592 bytes left [ 476.996770][ T9035] gtco 3-1:0.219: gtco driver disconnected 03:31:43 executing program 0: clone(0x201100, 0x0, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x3f, 0xd2, 0xdf, 0x4}, {0x7ff, 0x40, 0x6, 0x7}]}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$netlink(r1, &(0x7f0000000080)=@unspec, 0xc) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x14) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$netlink(r4, &(0x7f0000000080)=@unspec, 0xc) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x170, 0x170, 0x198, 0x170, 0x3, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xffffffff, 'nr0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x2, 0x4, 0x41}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x43}, 'bond_slave_0\x00', {0x8000}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfb, 0x20, 0x5, 0x2, 'syz1\x00', {0x9}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 03:31:44 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000100)="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", 0x5b1}], 0x1}}, {{&(0x7f0000002240)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002280)="c8fdda9468e7bfb24a53ad7ea39b11cc99ae84ba0d2060e25cb84e9161d91c4faa42358ddcc60b0f1ca50bb93d7fbea521187c80e9d9865204a5aaae7b8d03a1b496cd90843742597c16b667d2ad4d900501a9ee05d0f613ee0606f7b5e041fa1925e53d8206939c9af80305c53ed38ee2fc8253c324417d188a42ae6d24f430bea5d29361931f831460214762480417877edc50a2131236bae45a2c3e2f4a2c0a4da956dd50b67050059b064867a0bad9f866a02c7b9b99e7dd3a5707482ded037a709f0b86e85c259590f0a6dfa9fa14b636198835b6e7001c26bafc7b02eb776be20cf7e78b609c0f0f71d0c92160d1837821", 0xf4}, {&(0x7f0000002800)="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", 0x495}], 0x2, &(0x7f0000003800)=[@dstopts_2292={{0x11, 0x29, 0x4, {0x0, 0x4, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @ra, @enc_lim, @pad1, @enc_lim, @enc_lim]}}}], 0x40}}], 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1}) 03:31:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = accept4(r0, &(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0x80, 0x80800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"66e5e33fa35254c357d8d39fdbab2d6f", 0x0, 0x0, {0x100000000, 0x80000001}, {0x6, 0xfffff000}, 0x3, [0x4, 0xfffffffffffff843, 0x6b0, 0x0, 0x6, 0x2, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x7, 0x800, 0x6, 0x100, 0x100000000, 0x39]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000005c0)={{r4}, r5, 0x8, @inherit={0x68, &(0x7f0000000540)={0x1, 0x4, 0x3, 0x4, {0x10, 0x240000000, 0x8, 0x101, 0x100000000}, [0x1, 0x1, 0xa7ab, 0x1]}}, @devid}) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @random="cb5421447ae1"}]}, 0x2c}}, 0x0) [ 477.714583][ T9035] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 477.853126][T10070] IPVS: ftp: loaded support on port[0] = 21 [ 477.964357][ T9035] usb 3-1: Using ep0 maxpacket: 16 03:31:44 executing program 1: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100, 0x100) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000300)=""/196) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x5e, 0x0) [ 478.098410][ T9035] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 478.106830][ T9035] usb 3-1: config 0 has no interface number 0 [ 478.113042][ T9035] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 478.123329][ T9035] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 478.132560][ T9035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.157330][ T8720] rtl8187: Customer ID is 0x00 [ 478.158177][T10095] mmap: syz-executor.1 (10095) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 478.227020][ T8720] rtl8187: wireless switch is off [ 478.247895][ T8720] usb 2-1: USB disconnect, device number 2 [ 478.316840][ T9035] usb 3-1: config 0 descriptor?? 03:31:44 executing program 0: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'dh\x00', 0x0, 0x10001, 0x78}, {@multicast2, 0x4e24, 0x1, 0x8, 0x0, 0xff}}, 0x44) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="4500000033000535a4abd32b8018007a032482c137153e371000018001465530a4b68e25d1000000000000000000000000000000000010ca2d827fbd25805086def67b38e9", 0x45}], 0x1}, 0x0) 03:31:45 executing program 1: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100, 0x100) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000300)=""/196) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x5e, 0x0) 03:31:45 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x6800, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}}, &(0x7f00000001c0)=0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) [ 478.596674][T10169] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.611303][T10171] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.615757][ T9035] usb 3-1: can't set config #0, error -71 [ 478.652519][ T9035] usb 3-1: USB disconnect, device number 6 03:31:45 executing program 1: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100, 0x100) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000300)=""/196) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x5e, 0x0) 03:31:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d30bc95c0dd9", 'netpci0\x00'}}) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000001c0)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x150}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001600)=""/188, 0xbc}], 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000100)='\f', 0x334, 0x0, 0x0, 0x0) [ 478.892060][T10070] chnl_net:caif_netlink_parms(): no params data found 03:31:45 executing program 1: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100, 0x100) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000300)=""/196) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x5e, 0x0) [ 479.252850][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.260378][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.269881][T10070] device bridge_slave_0 entered promiscuous mode [ 479.282710][ T9035] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 479.368539][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.376355][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.385948][T10070] device bridge_slave_1 entered promiscuous mode [ 479.537045][ T9035] usb 3-1: Using ep0 maxpacket: 8 [ 479.569587][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.593528][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.654999][T10070] team0: Port device team_slave_0 added [ 479.667431][ T9035] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 479.676427][ T9035] usb 3-1: config 0 has no interface number 0 [ 479.682706][ T9035] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 479.693972][ T9035] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 479.704115][ T9035] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 479.714112][ T9035] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 479.723293][ T9035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.744152][ T9405] Bluetooth: hci3: command 0x0409 tx timeout [ 479.757940][T10070] team0: Port device team_slave_1 added [ 479.839389][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.846588][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.872681][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.890942][ T9035] usb 3-1: config 0 descriptor?? [ 479.903532][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.910732][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.936924][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.952282][T10214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 479.961623][T10214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 480.042723][T10070] device hsr_slave_0 entered promiscuous mode [ 480.118182][T10070] device hsr_slave_1 entered promiscuous mode [ 480.129945][T10070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.138019][T10070] Cannot create hsr debugfs directory [ 480.400305][ T4606] usb 3-1: USB disconnect, device number 7 [ 480.560992][T10070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.607464][T10070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.666706][T10070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.704331][T10070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.175839][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.184319][ T9959] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 481.216853][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.226105][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.249357][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.277968][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.288613][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.297890][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.305218][ T9035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.363324][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.372908][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.382870][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.392285][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.399617][ T9035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.408632][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.419627][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.423908][ T9959] usb 3-1: Using ep0 maxpacket: 8 [ 481.487655][T10070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.499502][T10070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.525597][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.535927][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.545105][ T9959] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 481.546367][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 481.553234][ T9959] usb 3-1: config 0 has no interface number 0 [ 481.563182][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.567483][ T9959] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 481.577086][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.586617][ T9959] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 481.595821][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.604510][ T9959] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 481.614454][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.622242][ T9959] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 481.631252][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.639110][ T9959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.776418][T10070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.940880][T10070] device veth0_vlan entered promiscuous mode [ 481.952257][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.962303][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.971174][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.978929][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.986631][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.996393][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.006147][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.015569][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.085182][ T8720] Bluetooth: hci3: command 0x041b tx timeout [ 482.088002][ T9959] usb 3-1: config 0 descriptor?? [ 482.093051][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.105680][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.120314][T10070] device veth1_vlan entered promiscuous mode [ 482.144861][ T9959] usb 3-1: can't set config #0, error -71 [ 482.167398][ T9959] usb 3-1: USB disconnect, device number 8 [ 482.297777][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.307895][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.335089][T10070] device veth0_macvtap entered promiscuous mode [ 482.382378][T10070] device veth1_macvtap entered promiscuous mode [ 482.459725][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.470670][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.481153][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.491815][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.501836][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.512366][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.526305][T10070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.538591][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.548009][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.557309][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.567072][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.603069][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.617068][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.627142][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.637661][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.647646][T10070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.658206][T10070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.671945][T10070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.692442][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.704061][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:31:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x40, 0x0) preadv(r0, &(0x7f00000017c0), 0x0, 0x7fffffff, 0x0) 03:31:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000001c0)={{r4}, 0x0, 0x6, @unused=[0x6c, 0x0, 0x8, 0x1], @devid}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3005}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 03:31:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = dup(r0) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000140)="608437b4bc5fe15b01a53a1f7b6df91f57a201d2521dc05acfbaaebacb78b95adfa81835103d7c243555849956728809ed9c5e2dcc02b0240f4c2a1d5c59ab5dea914a18986bd33e03", 0x49) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='//)$\\\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0xae80, 0x0) 03:31:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0xfffffffffffffffd, 0x3) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) [ 484.155929][ T9405] Bluetooth: hci3: command 0x040f tx timeout 03:31:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x83) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r1, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [0x400000f3, 0x0, 0x3, 0x2, 0x48, 0x0, 0x3]}) dup2(r5, r4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2d, 'memory'}]}, 0x8) r8 = openat$cgroup_int(r5, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={[], 0x11}, 0x6e}, 0xa) fcntl$dupfd(r7, 0x0, r8) 03:31:51 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000340)={0x7f3, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x22}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$netlink(r7, &(0x7f0000000080)=@unspec, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x4, 0x8, 0x1, 0x6, 0x2889}, 0x14) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000300)=0x1ff) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6df518401b5f9ce829a7b3a7b98464716a00b600140021f358ef4151f2f3480d02", @ANYRES32=r3, @ANYBLOB="080008009c0000e513000200ff20b902a07e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 03:31:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x947f8ccf05933c15, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xec4, 0xe, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xeb0, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "bbc3c9"}, @NFTA_DATA_VALUE={0x41, 0x1, "66b0508e3abd9dc191eb9fb945856bf0d931be6cd27de10b7745301e29cbb50ba3b33c6b03a198b4d957c09605070f0b5e733e14d72e89a8638b3ec02d"}]}]}, {0xc00, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "ed736429dada5affbfa1f31409dd490bec5d00882749e2ef55b44e474379bb2d3d4f3bcc5cf4113540b2bd163e26f166bf1193b33dd33280a1e50a83f44596ad4f6229acede79c6b77a9b7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "b01ea990d116a12f9b5450aa9f6352bfb319948bd56738e5a9b4cc2b478f14a97f7b5f3e7e3c207358701238cb86c88b2960c15c3bd55c65b034a5ef18cdec3ad59b5a04a94804d1c4511d859bc18d0d43b651d490a114a3ddd82a188a73d26628ca10f376ded7fa1e28f7fa6826a591dbc543dc5f03b10488b1a817df6df417a6e2ed0b2d552bf9d532d6e3abc5d84ce46209a44512e0f2031cc34f5dd685a30690abaeb9f11d517b892e4c2665ab3641be23052e4ba74af0c49103305b662b1a9994803c666ad8dd87c2cb9ec3b742f0597a70b4494348ffe97f49f460b2c684484f550b36cc2d536fe2a63fed67c7b9d462ec08"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xba, 0x1, "ce8d7932d01a5c7ee3431a599fd7de8b397a798bfb5207a502eeb1e7fa4cc8664f5c87aa8bd069a0525559880935422fc4a1c3f62f14b8c0b6f663e475520243660e55f2dcb5062aaafd96d5612ccffe76fed4caf64f3a8e68fd33a1eee788203ec26312f504adfde19ccccb958e0777f723e559e8c0b7fcd1699745bf9d6e419887333ce55948345a544660e6cb80bd79692013da4067d0e92c2d08b25ab72bd9bd86e4026dc72c5ddc4ab4b797242182fed6ae3d71"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "2cefe658837049032bed5315b1bdba1b5f967f464c3baf3e1411a739af03bbd430624a6792e8c4c8a789ec9e87ba428ca6ece0336150880d041411a652ee0671a8b28fce9bb57f64cfba0be09b2abe8ee97376ca9acde739531446589a580a492b9d1e646e5a1c71283146c2ad6610f0d293bd5c11017bb19c1783ef8bc73348c14a29109909ebf65b03c4a4aad604ddf27a030a77c3600b0402d183af2541e42b75de320a09bde0fcb94049cc38616bcac5e3548f6bf709d601f0a7537470f3a78c3fce24ed5f2357af5c6c6a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "a8d87b80d05840c2f858fda882274f53a93944159af771689722f3ba2142a17a9f2bfc182e0fdee391601a9d1f6227"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xce}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "8a3b7a1bcc887ece349fdcada8f7e0b4d4fc06bfb7c3b4a47a5d7475874e2a0620e64c7e1208645f26ee19c756991d2625765053bb97a0c05887d2c31aa9aaced342b5917375f701f9"}, @NFTA_SET_ELEM_KEY_END={0x2a0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "538a7de025f9023dc8746f323fdaa8acd900d474297933c00a222f1ae5d4e39944e62ec1d501ec48b4fbb9eea939c3d865d780a3756d4076b018eadbcc4d14fbf6095f6dc46347bec464c7c23b8038b8005174e24d8c9cbf80b0f0f0dac33fdf4edb1c84b6b85b2ac816a63190f5167fdddc943fe65812c0df1fb5ab84f45584ad825cbef5e2b06e6c1c9f7cbd738e3046f963dcc1c25f0248d206ca9079ad9428281c927efce2fbc657bc4b54d43003df0982c7577cc693e0dcd9"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "58803853f42634a7519386996905e9d1aded41bb7c0c5bac8c9fb99e93f2e635197488e02cde01c5eac14cc68536e94cdd2d879d57c46af97cb2530619b4a3527cb32a2f5c2c019c91608a514570afa31eec53b99903c4a494bb6b0c4a8d5b4a66f9341973feefd0651fc169ff0b4b1e954d89e7c2f7cad914001614fa82839222c2d0bc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x35, 0x1, "e90c693eba84e8daf835912fe84bf4de584de019b44912036dba159ef7022e97f972cbd3009df32f3f6ff7e47a8f5c335c"}, @NFTA_DATA_VALUE={0x97, 0x1, "741e02ab71743652fecda3f7a128406fa36b51038160ce721fee1ac5fcc37a6a9d856b713db760f9282c2c09a4210d7dc62445c9fa38a9aabad2598fbf6f4284135c708040fcca650428cc6eb0778ee6741301d80b890801ea7aacf397f535c14fd3aef1c8339084f9b3be75a57940f3acd4db58d25f4f57b39602cc5284be569e7009c0c37f9d51e73c98ad14925fc7e24602"}]}, @NFTA_SET_ELEM_KEY={0x3c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x862c602f92b76b62}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "17484f4ff188325d83923189dd78e7ece06d0cbabd7985d400208bf6754d8f7a7922aa026343a39de1b14df30d2888640bdd8f7d559100fcdcc12b060f9b9679e6fe335ae59593281a90f3498e976bc0260ed26bd195650437c150d1af1ca82d023b0aad84e6a3ead5a6e309ea45e69b12f16a88ebbcd33b7214cd9f6bfd703e1a5e038d1f75f7faab10207477fe1ddd62263a5bcc69e43a705e28e2718703a1d367c131287e855ae7fffb5a06342e4170d49051471857045c9db20e45e4"}, @NFTA_DATA_VALUE={0x67, 0x1, "75ee382ef9cb72de0a2e27e8aced6658bf1efe391d03a36427018613dc7effb735fff016e9b0b041330f18ef8d250429a6fd584223dddba5b0e91a0e4a89f9d3ad4a64e5266507bc95afbff9575f2996a5be8e50314da8c71cbefc82a46585d5942195"}, @NFTA_DATA_VALUE={0x73, 0x1, "b6282cb971401b238174265aa5783d9bafd0ba4e1847ce38d979dbf511535aee5b9075d233de4c0f2ea89696d4a6924090c602b999daa56c6e889544a7b9354c3f78db89c193c3a4ee7a1808d852547e2098e569b6e90cb02c2c76a6c3174eff396f8f2c342400519ae0957f17825d"}, @NFTA_DATA_VALUE={0x92, 0x1, "30de7ddae6aa5fb528221a1b31bd732df781a06b0299b657803c57d09a326a3d4240c8d6fecc175e75bd984de57026b183e459aab08802a7bd3a119ab3209b6a620bd10012ab0ef85b76c377583aaade4b523cf3558e87f27174c1d161ff2c26d318bc05c43a8825d733cf1188b128948bea1c0bde11969b6f2b975fc65fd7c85c4fca05c791dd817a27ca9d78b8"}, @NFTA_DATA_VALUE={0xd0, 0x1, "e161c75b4d1e5d33c3bd7fea5ff21d7ad0bfa6d0248d9b62a359dc8735989cd6ff0d5542924885d11aa7bd2183d0d5418c2c28c75e830b287da66fc653971ff14289b5cf9e2e82dbbaf2fd33c4f606488b5bc956cc5f7d0685a3c2f8343f9db1280937d1ca27e996b3568d5f8f0996e4c3fa26736010f597981e54dbfa0174e2de1e6caf86d83fc34834f87edb7b674456d83f99616a813e6cac24d5c52efd9b1170e0e4fee0bb088b00cf2a3fa35a51a55b99221c35382f771547d5c62f75b63a820a36dacdfdc6192ca26b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "789d812e752251e2831406ef75bcf39c82"}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "178c1d1a8a2cb9837a0b85896cac9e383f7a59cfcc05a1a1bb"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10a23181}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "23d5630ee1765a2a12b834f833fe1a2b97b734f32a903e3ae6"}, @NFTA_DATA_VALUE={0x11, 0x1, "2f7580a477b443095b609a3832"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "21804df9cc69fdc5e43ec65a51ab89de3d809a428b140ddfe3ddaf49f31b80744ddcf0f7a919818c5b338205925eff6d6abc82ec5e538f744e77b59cd00bb4b0451974b545e7006799826ec077efc11251c0e3889787bea4a13a6436822d56f5703ff3f85918bbc05ec140a08ab49a16baabded18e41a868885fc3306c62483a14b725d030cab2a79e5bf2a163431824e260add3b18a9d22c9a60c3d81e0c46ba2202d5011ca1f6108180bc6a058b2862df2645367aed2ab9c06b98247c7f63d26b57df16be610bde5ce974d7f2783334a89ff1f1d94cd812517c3fcc1750135"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6000000}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x1984, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1970, 0x4, 0x0, 0x1, [{0xf0, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x80}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}]}, {0x33c, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x304, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xefc37facce0607cb}, @NFTA_CMP_DATA={0x1bc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x33, 0x1, "0cc79e6de8e81a09f13bb0deaca623f4c007c8b4f5d6aaafb0d10aacaf41d772e46f5f082ec1fdc43656d57a1afbca"}, @NFTA_DATA_VALUE={0xd0, 0x1, "1a23ab661a899dc571f036b20fa1284e9b24c0b9177ae8ceb0a33725457a15aa084ad50221aa1ea7b38e78b27100a844d5d49365554b4c72e2484ed423f8352ec4457650fe7bc8f75d899bf6498ee5e16324dae2c1d86c09c04fd9d302ad9e3fa81a6b05adf5b0b1b3e07a3ea6d30ac20444fd4a93633979afb46046406c91f8477fbb9602fba7674340b969fa18cf4442f96c927c3229af40ed92811111bf7d5d9baccbfda5459740f4fef40b138b947c7673794adb1ef6bd1418ec57eaa3b47123583844d4d85611166192"}, @NFTA_DATA_VALUE={0xae, 0x1, "24950d2dbf55c583f9f9686516950ed094d53bfaba7765d88771cb3cde08ea0d57494dc783ed93f4c7ba3844a4030ac39d843bd4032feff0c8f49748db1e6e6b0922c6b7591880fd135d6bb380e6f7f2273e3dce38dc3ee35165ec8971ebfeb586d1ef2ca4b3f61aefc1be5fd17628eaaa1be6a3dc190d86d5f8e39e67d0fceedf66aa39d9ab4e2dba8dd6a40e8a2dd05f64d3e66e8eb48a60d1e41a58e8a7407f9237f656afb517dac6"}]}, @NFTA_CMP_DATA={0x13c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "9850e319584d9d2ab47b50062bdabdc8b62fff80c6043fd2a99dc3ab21187da9f63b0dce60b48657b252b1e293c01faf65f992dcedef0a4a25c4a50cfa8d7bedb1696d248758b9fb7306296eaca38d863e7bfef2456bffbbaddbd5c66a8c"}, @NFTA_DATA_VALUE={0x7d, 0x1, "18f15e3e3da2b576d99d88479a7d1a106d8e4428f87e733d74514c0f5c9dfb7cd056840ef7e062b5a69d35c3b00adafcd99b680100e363ef1b7bdf0033a3592da07e4896ad6557dc9bdbe58b68ff5f20c78e9273ed2000f160bed7e46d0fa0694d6a82f4a755faef47ff4b9c85e0c92ffef3aaafee8a77dfbc"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}]}, {0x14c, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @val={0x4}}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xc15b963a}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0xd5}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8}]}}]}, {0x4c, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}]}}]}, {0x13a8, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x134c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_MASK={0x124c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "ab122a58146b9c89ea875d9d94671d878769e7a7f8a46e8cbde7d009586d34a43209f391d484afd126419f0b65a8de7740c97ad1ce5f7fc34e7e232f528ade251918e6eb803a1de3c1f79926a5dd7e3dae067b717b112bcda9c695fc248e10503a2add747eaa44cf39d42dadd74111ef82cdb4c84a352988f4f3e52e3c80b764322a38570b994827d7b734d4d613be6712673a2b2e7a0e3cde194ab6ae85b2725bf103006422480dd9b4691d18a1dd575546de16140329"}, @NFTA_DATA_VALUE={0xfc, 0x1, "a6fa33f78453fbe76ce180e2d262c424dcc65e58c04bd42183e47fcc5fe8d0f9efb6596c6055591b0c78b48ec1878f6cd0f1d0a82b4972e2f4c7f21fa64d5f2f2f6408b4e56d2d54b7b893f6187d9b61c1ca4f7a74ac92d1ede6a88bb758264f7c5a2234f43e995de435035b178431902d72e8c6317174c296ccc49c89a311fac69ade421af9ad5ebdf0f4bfb137dfd9c5cbf194c4517cc19f98c777a2af20cb14738ae6175c6a692e318b5618a1e81f5c32d51bd280eee6da7f395fe79cda0f7e2a575b5cbbb29367e772e8743c951088fe674a1cc70f84d3df61c0cbb9b82573427c4dd67ef47a6047ef46723f78a638304adbe24ead54"}, @NFTA_DATA_VALUE={0x80, 0x1, "0ac5b9b92818773c1a5055f9d17a2dfcda435de57abc5f057564538f7a82ccf8cf379229cc6505ad24a507c4f48b554322bb78eb345e343ca182fab2ec53fc1baf89d3003254eba890cd741d391ae00f5ae863ec389aaa359ce66165eee819b327b3a114de400fe7e4bdf5e67932377b65fbcfc502ad391364fcf664"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_XOR={0xec, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "6661545d39663a37e22e8f5785be6453a384e2ff8ec446d2b7afb22c55446e6a36547b6fbeca802acc22c87389e299a8e3a1d60e58bff6ecbea95f17cab1edb8e54c501190f9fbc0d3a8524f4a235ab5722048e990517b5b6d4650593bee77e5e285734cdc220a9df30801953dac46eeb291e049bd276572a37239781e30d579211dc564870adb060a429b28a94e0977811ed2ddeffe1c3660f382d5e4551f4c71ee8f"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3ff}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, [""]}}]}]}]}], {0x14}}, 0x2990}, 0x1, 0x0, 0x0, 0x40059}, 0x810) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000140)={0x7, 'lo\x00', {0x10000}, 0x1000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @private}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 03:31:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x1d}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20000084) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) 03:31:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$netlink(r6, &(0x7f0000000080)=@unspec, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x8, 0x10, r1, 0x82000000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x4500) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x6, 0xfffffffd, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 03:31:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0xd9, {0xd9, 0x1, "97af95d889db81fcc1533a44a27298ddd9806397df9c300e987160e015ab60f95dadc4dd519d99fa6aa0b777baae45a2db5a983e1762ae0d4281a29ba81eafdae991a7f8c0a9db853240cf469f12f34903a8b8997212269ddde9652967153150d4bbb2e0e0f8e7860925cae5facffded326ea5b671477358e80a19dd173022e39c71695458d0ef3f848093930df4d7de57d777e6ca99623f2f940b30e9986779e766bbc288d5ecf95ec403a9f5865e3f36bf60593971d5cd2a9792abd48bdab6e4248d55869f2d1b63fee4f4ee8abfb47743e3a2cbef19"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000400)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x4, 0x6, 0x1, "f0262d83", "96f45fd0"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x49, 0x8, 0x3f, 0x3}}}, &(0x7f0000000900)={0x84, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/407], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe0, 0x8}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "ca85"}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="d86eab76d9f8"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "dc1f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1f}}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/autofs\x00', 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000340)={[0x6]}, 0x8) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000c80)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40051) syz_open_dev$video(&(0x7f0000000dc0)='/dev/video#\x00', 0x5, 0x8481) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000a40)=0x3, 0x4) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x14, @string={0x14, 0x3, "95217306c788690000f68cdb2de9f2243909"}}, 0x0, 0x0, 0x0}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x329400, 0x0) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f00000003c0)) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x672, 0x10}, 0xc) 03:31:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800d0001006d6163736563000014000280055c12fa2803b604c0000a00000000000a000500140000000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000000)=0x7) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f0000000100)) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}, @IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x5c}}, 0x0) [ 485.757262][T10437] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 485.773977][ C1] ===================================================== [ 485.780953][ C1] BUG: KMSAN: uninit-value in geneve_xmit+0x300c/0x3200 [ 485.787920][ C1] CPU: 1 PID: 4873 Comm: systemd-udevd Not tainted 5.8.0-rc5-syzkaller #0 [ 485.796409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.806453][ C1] Call Trace: [ 485.809733][ C1] [ 485.812579][ C1] dump_stack+0x21c/0x280 [ 485.816909][ C1] kmsan_report+0xf7/0x1e0 [ 485.821318][ C1] __msan_warning+0x58/0xa0 [ 485.825813][ C1] geneve_xmit+0x300c/0x3200 [ 485.830400][ C1] ? kmsan_report+0x1c0/0x1e0 [ 485.835074][ C1] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 485.841141][ C1] ? geneve_stop+0x400/0x400 [ 485.845723][ C1] xmit_one+0x3cf/0x750 [ 485.849961][ C1] ? kmsan_get_metadata+0x116/0x180 [ 485.855152][ C1] __dev_queue_xmit+0x3aad/0x4470 [ 485.860166][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 485.865456][ C1] dev_queue_xmit+0x4b/0x60 [ 485.869954][ C1] ip6_finish_output2+0x23f1/0x2a70 [ 485.875157][ C1] ? kmsan_get_metadata+0x116/0x180 [ 485.880348][ C1] __ip6_finish_output+0x9c0/0xa90 [ 485.885479][ C1] ip6_finish_output+0x14b/0x4b0 [ 485.890410][ C1] ip6_output+0x68d/0x7f0 [ 485.894736][ C1] ? ip6_output+0x7f0/0x7f0 [ 485.899226][ C1] ? ac6_seq_show+0x200/0x200 [ 485.903892][ C1] mld_sendpack+0xf6c/0x1470 [ 485.908642][ C1] ? mld_send_report+0x510/0x510 [ 485.913565][ C1] mld_ifc_timer_expire+0x13b8/0x1b50 [ 485.918920][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 485.925082][ C1] ? rb_insert_color+0xb0/0x1180 [ 485.930014][ C1] ? kmsan_get_metadata+0x116/0x180 [ 485.935203][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 485.940485][ C1] call_timer_fn+0x226/0x550 [ 485.945090][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.950889][ C1] expire_timers+0x4fc/0x780 [ 485.955486][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 485.960759][ C1] __run_timers+0xaf4/0xd30 [ 485.965259][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 485.971399][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 485.976580][ C1] ? kmsan_get_metadata+0x116/0x180 [ 485.981763][ C1] run_timer_softirq+0x2d/0x50 [ 485.986515][ C1] ? migrate_timer_list+0x780/0x780 [ 485.991786][ C1] __do_softirq+0x2ea/0x7f5 [ 485.996286][ C1] asm_call_on_stack+0xf/0x20 [ 486.000940][ C1] [ 486.003876][ C1] do_softirq_own_stack+0x7c/0xa0 [ 486.008901][ C1] __irq_exit_rcu+0x226/0x270 [ 486.013564][ C1] irq_exit_rcu+0xe/0x10 [ 486.017793][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 486.023696][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 486.029665][ C1] RIP: 0010:kmsan_slab_free+0x8c/0xb0 [ 486.035036][ C1] Code: 00 00 b9 03 00 00 00 e8 12 ea ff ff be ff ff ff ff 65 0f c1 35 95 57 cc 7d ff ce 75 1a e8 8c ff 14 ff 4c 89 7d e0 ff 75 e0 9d <48> 83 c4 10 5b 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 [ 486.054718][ C1] RSP: 0018:ffff888115977a00 EFLAGS: 00000246 [ 486.060768][ C1] RAX: 1e65707845f0fe00 RBX: ffff88821e44d180 RCX: 0000000000000401 [ 486.068723][ C1] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffff88810b2b0000 [ 486.076691][ C1] RBP: ffff888115977a28 R08: ffffea000000000f R09: ffff88812fffa000 [ 486.084649][ C1] R10: 000000000000000a R11: ffffffff912007f5 R12: 0000000000000000 [ 486.092615][ C1] R13: 0000000000000000 R14: ffff88810b2b0000 R15: 0000000000000246 [ 486.100668][ C1] ? __do_softirq+0x7f5/0x7f5 [ 486.105370][ C1] kmem_cache_free+0x2f8/0x2c80 [ 486.110209][ C1] ? filename_lookup+0xbe3/0xc40 [ 486.115220][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 486.121016][ C1] ? terminate_walk+0x5f3/0x6c0 [ 486.125871][ C1] filename_lookup+0xbe3/0xc40 [ 486.130632][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.136768][ C1] ? getname_flags+0x752/0xc40 [ 486.141527][ C1] user_path_at_empty+0x123/0x140 [ 486.146558][ C1] do_readlinkat+0x182/0x600 [ 486.151228][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.157286][ C1] __se_sys_readlink+0x99/0xc0 [ 486.162037][ C1] __x64_sys_readlink+0x4a/0x70 [ 486.166876][ C1] do_syscall_64+0xad/0x160 [ 486.171367][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.177242][ C1] RIP: 0033:0x7f45878fa087 [ 486.181635][ C1] Code: Bad RIP value. [ 486.185682][ C1] RSP: 002b:00007ffc3f71f528 EFLAGS: 00000297 ORIG_RAX: 0000000000000059 [ 486.194089][ C1] RAX: ffffffffffffffda RBX: 00007ffc3f71f5f0 RCX: 00007f45878fa087 [ 486.202047][ C1] RDX: 0000000000000200 RSI: 00007ffc3f71f6d0 RDI: 00007ffc3f71f5a0 [ 486.210005][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000012 [ 486.217961][ C1] R10: 0000000000000064 R11: 0000000000000297 R12: 00007ffc3f71f6d0 [ 486.225920][ C1] R13: 0000556a7d959010 R14: 0000556a7d9590e0 R15: 00007ffc3f71f5a0 [ 486.233887][ C1] [ 486.236196][ C1] Uninit was stored to memory at: [ 486.241208][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 486.246911][ C1] __msan_chain_origin+0x50/0x90 [ 486.251832][ C1] geneve_changelink+0xdb2/0x10f0 [ 486.256835][ C1] rtnl_newlink+0x3384/0x3ed0 [ 486.261494][ C1] rtnetlink_rcv_msg+0x142b/0x18c0 [ 486.266590][ C1] netlink_rcv_skb+0x6d7/0x7e0 [ 486.271339][ C1] rtnetlink_rcv+0x50/0x60 [ 486.275741][ C1] netlink_unicast+0x11c8/0x1490 [ 486.280663][ C1] netlink_sendmsg+0x173a/0x1840 [ 486.285586][ C1] ____sys_sendmsg+0xc82/0x1240 [ 486.290417][ C1] __sys_sendmsg+0x6d1/0x840 [ 486.294988][ C1] __se_sys_sendmsg+0x97/0xb0 [ 486.299663][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 486.304413][ C1] do_syscall_64+0xad/0x160 [ 486.308903][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.314770][ C1] [ 486.317090][ C1] Local variable ----df@geneve_changelink created at: [ 486.323829][ C1] geneve_changelink+0x101/0x10f0 [ 486.328873][ C1] geneve_changelink+0x101/0x10f0 [ 486.333877][ C1] ===================================================== [ 486.340888][ C1] Disabling lock debugging due to kernel taint [ 486.347020][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 486.353593][ C1] CPU: 1 PID: 4873 Comm: systemd-udevd Tainted: G B 5.8.0-rc5-syzkaller #0 [ 486.363457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.373488][ C1] Call Trace: [ 486.376752][ C1] [ 486.379596][ C1] dump_stack+0x21c/0x280 [ 486.383919][ C1] panic+0x4d7/0xef7 [ 486.387808][ C1] ? add_taint+0x17c/0x210 [ 486.392207][ C1] kmsan_report+0x1df/0x1e0 [ 486.396697][ C1] __msan_warning+0x58/0xa0 [ 486.401186][ C1] geneve_xmit+0x300c/0x3200 [ 486.405763][ C1] ? kmsan_report+0x1c0/0x1e0 [ 486.410434][ C1] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 486.416510][ C1] ? geneve_stop+0x400/0x400 [ 486.421081][ C1] xmit_one+0x3cf/0x750 [ 486.425218][ C1] ? kmsan_get_metadata+0x116/0x180 [ 486.430399][ C1] __dev_queue_xmit+0x3aad/0x4470 [ 486.435408][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 486.440717][ C1] dev_queue_xmit+0x4b/0x60 [ 486.445211][ C1] ip6_finish_output2+0x23f1/0x2a70 [ 486.450413][ C1] ? kmsan_get_metadata+0x116/0x180 [ 486.455598][ C1] __ip6_finish_output+0x9c0/0xa90 [ 486.460706][ C1] ip6_finish_output+0x14b/0x4b0 [ 486.465640][ C1] ip6_output+0x68d/0x7f0 [ 486.469978][ C1] ? ip6_output+0x7f0/0x7f0 [ 486.474470][ C1] ? ac6_seq_show+0x200/0x200 [ 486.479138][ C1] mld_sendpack+0xf6c/0x1470 [ 486.483729][ C1] ? mld_send_report+0x510/0x510 [ 486.488671][ C1] mld_ifc_timer_expire+0x13b8/0x1b50 [ 486.494032][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.500085][ C1] ? rb_insert_color+0xb0/0x1180 [ 486.505011][ C1] ? kmsan_get_metadata+0x116/0x180 [ 486.510207][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 486.515476][ C1] call_timer_fn+0x226/0x550 [ 486.520056][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 486.525847][ C1] expire_timers+0x4fc/0x780 [ 486.530428][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 486.535698][ C1] __run_timers+0xaf4/0xd30 [ 486.540199][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 486.546339][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 486.551521][ C1] ? kmsan_get_metadata+0x116/0x180 [ 486.556724][ C1] run_timer_softirq+0x2d/0x50 [ 486.561487][ C1] ? migrate_timer_list+0x780/0x780 [ 486.566667][ C1] __do_softirq+0x2ea/0x7f5 [ 486.571165][ C1] asm_call_on_stack+0xf/0x20 [ 486.575817][ C1] [ 486.578743][ C1] do_softirq_own_stack+0x7c/0xa0 [ 486.583762][ C1] __irq_exit_rcu+0x226/0x270 [ 486.588455][ C1] irq_exit_rcu+0xe/0x10 [ 486.592680][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 486.598480][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 486.604449][ C1] RIP: 0010:kmsan_slab_free+0x8c/0xb0 [ 486.609807][ C1] Code: 00 00 b9 03 00 00 00 e8 12 ea ff ff be ff ff ff ff 65 0f c1 35 95 57 cc 7d ff ce 75 1a e8 8c ff 14 ff 4c 89 7d e0 ff 75 e0 9d <48> 83 c4 10 5b 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 [ 486.629616][ C1] RSP: 0018:ffff888115977a00 EFLAGS: 00000246 [ 486.635678][ C1] RAX: 1e65707845f0fe00 RBX: ffff88821e44d180 RCX: 0000000000000401 [ 486.643644][ C1] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffff88810b2b0000 [ 486.651617][ C1] RBP: ffff888115977a28 R08: ffffea000000000f R09: ffff88812fffa000 [ 486.659683][ C1] R10: 000000000000000a R11: ffffffff912007f5 R12: 0000000000000000 [ 486.667636][ C1] R13: 0000000000000000 R14: ffff88810b2b0000 R15: 0000000000000246 [ 486.675602][ C1] ? __do_softirq+0x7f5/0x7f5 [ 486.680274][ C1] kmem_cache_free+0x2f8/0x2c80 [ 486.685115][ C1] ? filename_lookup+0xbe3/0xc40 [ 486.690036][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 486.695833][ C1] ? terminate_walk+0x5f3/0x6c0 [ 486.700690][ C1] filename_lookup+0xbe3/0xc40 [ 486.705457][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.711509][ C1] ? getname_flags+0x752/0xc40 [ 486.716280][ C1] user_path_at_empty+0x123/0x140 [ 486.721300][ C1] do_readlinkat+0x182/0x600 [ 486.725880][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.731944][ C1] __se_sys_readlink+0x99/0xc0 [ 486.736697][ C1] __x64_sys_readlink+0x4a/0x70 [ 486.741545][ C1] do_syscall_64+0xad/0x160 [ 486.746040][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.751915][ C1] RIP: 0033:0x7f45878fa087 [ 486.756309][ C1] Code: Bad RIP value. [ 486.760355][ C1] RSP: 002b:00007ffc3f71f528 EFLAGS: 00000297 ORIG_RAX: 0000000000000059 [ 486.768748][ C1] RAX: ffffffffffffffda RBX: 00007ffc3f71f5f0 RCX: 00007f45878fa087 [ 486.776707][ C1] RDX: 0000000000000200 RSI: 00007ffc3f71f6d0 RDI: 00007ffc3f71f5a0 [ 486.784663][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000012 [ 486.792618][ C1] R10: 0000000000000064 R11: 0000000000000297 R12: 00007ffc3f71f6d0 [ 486.800573][ C1] R13: 0000556a7d959010 R14: 0000556a7d9590e0 R15: 00007ffc3f71f5a0 [ 486.809740][ C1] Kernel Offset: disabled [ 486.814109][ C1] Rebooting in 86400 seconds..