last executing test programs: 10.253405879s ago: executing program 3 (id=90): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x25, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) syz_io_uring_setup(0x1868, &(0x7f00000000c0)={0x0, 0x62d3, 0x40, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400b060a70000000000001090224000100000006090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40df590000005700a7ea2963fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59cc000800002e7b3504ff87cbfd10f3c080b73385a7015d3a32edb2ea00000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x110, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0xc0189436, 0x0) sysfs$1(0x1, &(0x7f0000000040)='cgroup2\x00') setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x0, @loopback, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "25a016a3ac62aa19ff89834ebc9426a89392951beed3f10ac9708169"}, 0x27) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x78) dup3(0xffffffffffffffff, r3, 0x80000) r5 = memfd_create(&(0x7f0000001040)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x00\x00\x00X\xe8\x19\xe7\xc9AHq\xe4\x16\x00\x00\x00\x00\x002\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d\xbe\x00\x00\x00\x00\x00\x00\x00%K\x1d\xfd\x17\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x16W\xe6\x83\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\x9f\"\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xccJ\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc8\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xcf\xaf\x94i\xf1s\xf7\xb8Jr\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\x9a\xb1\xf5X\xbe\xc8\xcb\x12\xf4\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x81 /\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\xd0?|\xdb\x84g\xb5\xd76\xe7\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1b\x8f\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x7f\x00\x00\x00\x00\x00\x00\x00\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\x84\x8b\x05\xcfd\xe5\xaf\xba\x9d\x8d79\x7f\xc9wB\xd5\x06\xc3>\x05\x81\x8f\xf2;\xf4\xb9Y:\x06\x7f\x14\xc6\xe4\x94\xde\xb8<6', 0x5) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.528718905s ago: executing program 4 (id=86): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$GETZCNT(0x0, 0x0, 0x10, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) 7.457654474s ago: executing program 3 (id=87): socket(0x1e, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r2, 0x9, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x18}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[], 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) open$dir(&(0x7f0000000200)='./file0/../file0/file0/file0\x00', 0x80000, 0x1d3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9b000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r7) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 6.979911639s ago: executing program 0 (id=88): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x98}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000033a80)=""/102370, 0xffffffb1}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000040)=""/22, 0x19}, {&(0x7f0000001a40)=""/4089, 0x1000}], 0x4, 0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000003c0)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x5d95]}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.500389518s ago: executing program 4 (id=89): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) io_uring_setup(0x2000497a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x881, 0x0) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf57848a8380c981450720e4580725018076ffff09050d10000407"], 0x0) 6.331824602s ago: executing program 0 (id=92): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x55, 0x1b, 0x89, 0x20, 0x22b8, 0x6027, 0xc280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000012c0)=ANY=[], 0xffdd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x20000007, 0x26d}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x80800) fallocate(r7, 0x54, 0x5, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r8 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0xec4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) 5.0648199s ago: executing program 2 (id=93): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r1, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(r3) 4.477515937s ago: executing program 4 (id=94): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) getdents64(r0, 0xffffffffffffffff, 0x43) 4.170129403s ago: executing program 4 (id=96): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl(r3, 0xfffff000, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000000010902"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x94}}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 4.093946157s ago: executing program 1 (id=97): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r1, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(0xffffffffffffffff) 4.004959362s ago: executing program 2 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x0) 3.786145292s ago: executing program 0 (id=99): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0xffffd000) r4 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r4, &(0x7f0000000080), 0x6) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_io_uring_submit(0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r1, 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) r5 = socket(0x2b, 0x800, 0x200) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000800) open(0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x2000, 0x0, 0x4000, 0x0, 0x0, {}, {}, {0x0, 0xffff0001}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xa}) 3.308488297s ago: executing program 2 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x0) 3.130519439s ago: executing program 1 (id=101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x34000}], 0x1}}], 0x1, 0x0) 3.067916692s ago: executing program 2 (id=102): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/5, 0xffffffffffffff27}], 0x27, 0xa}) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4a}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r8, 0x0, &(0x7f0000f31000/0x12000)=nil, 0x12000, 0x9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0xffffffffffffff0c, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x293528}) r10 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000801}, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 3.050333389s ago: executing program 3 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) sendmsg$sock(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="61d32e4b3921a5fdddbb54f77d80b708bca1865f7c92f8c84970823064afa1bf77e92867ef202a22b23df4857df8ab888677cae7362f5e850694865327b2d97765c04bfbc694480bd044ae486f03cb426b2a8cb36fe1c3990150f679c1181e10eb79ef8b3f7fc515b3edca896f0b8d66181e70fca5f6fe48ace0f3a0851de8a65d56c5171a0e4cf3eb8d729d2eeafc745a5ed7631c6805421b64a29285f798e993fefac3d0ea1b5c96135dd7854caeee668bd9135d899e340e1340db126699dd43f6b1f86e20a65dc50b7264748ab8a463f05cb3dee4659fe7de1de6039555415a8eadb4328aeeaf8c1a186b77bf1167", 0xf0}, {0x0}, {&(0x7f0000000300)="988dd8887344aecca7d2fb50b1bdb60d448d4ef286f691f2da6664e9f3ddf61721de002ad15686995f5297ab69d816105a30d2c7ab8a7fbb3573e0ebcf6bcac13b370ef4434eda36462033e1936201d29dc540eb51776d4b9c126fa7871ad654afbd4242c6b193", 0x67}, {&(0x7f0000000380)="cb11e0095059f0cfc18ddacfec7fe03f43ecbddee912c527f763685ea94f993162c455f9bf342a557424644f99d16b40e2106f68a266aa32f5dea54fb69a4dc8d43864f48eb16aa48effbad30c27bd86f8b296c1f878a6e7a49e3a1057ca6091089531a029c50e9b464105f3befdd30c8c9287fcd92b694031", 0x79}, {&(0x7f0000000400)="91aad743a9cc9db619027f5be9fdf928f4fec30c22259453fc2b0e77b124f9a85d68bb2636024d25de6f793a1fd40806f9413e452360c624f225f08e1a0f203941499343aea0191b11d0420ff58adb4fc694f6880722722df66ab76be56a76813ec5a53ace3e3b0a756b6d023860df8df1bcbe6c097f2aed2272ec3a80e21fc532eda6f268710a396bfdc3c6b1587764ca9a756525539757d43890202d47936f563fa79318ba527e29e4d85a700333ac0cf1bf9cfca4307f8572a30c180e25b4451392835ff3fbe8582ea52af70a92921a400958563a5183658a5761a3d6ab9bc7adad", 0xe3}, {&(0x7f0000000500)="0fec860f93b534988ac782f4f84a8d7df090788ce276a0885d69965182caa4752585f79dfc535b8e091140683024f1983328902d5f08fa1e0c0d68cf102aa6ff698a04f5992e1d0fea051bc1dc46dfdb663d82924d5ea0bfbce624e045d39a65ba54d2a7577a7dc99c3a52adc053541613e82d67b7824aa4dd962f6f17fd04f151fc4f1bea3c9058030359c738eae89be50e05c51d2ab846a46cdce442b5fd", 0x9f}], 0x6, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}, 0x24040005) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x40000000000008, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0xc) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x336b, &(0x7f0000000440)={0x0, 0x2, 0x800, 0x2, 0xff, 0x0, r3}) r4 = socket(0x2b, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES8], 0x1c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff}, 0x20) close_range(r3, r1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.647716277s ago: executing program 1 (id=104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x90) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x4, 0x0, 0x0, "4415264a88b82c522013fb235902af2556c6b6"}) 2.515866863s ago: executing program 1 (id=105): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) io_uring_setup(0x2000497a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x881, 0x0) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf57848a8380c981450720e4580725018076ffff09050d10000407"], 0x0) 2.096026183s ago: executing program 2 (id=106): socket$kcm(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0x40806685, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000002180)=""/226) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.990596258s ago: executing program 0 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r5}], 0x1, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r7, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r8}], 0x1, 0x0, 0x0, 0x0) dup2(r7, r8) fcntl$setown(r8, 0x8, r2) tkill(r2, 0x13) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000001100)={&(0x7f0000000100)=[{0x7, 0x4200, 0x0, 0x0}], 0x1}) r10 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="89000000120081ae08060cdc0303e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7ffffffffffffffff01080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fffc1bcf012460a69bd63b658657747c8bc6811f121a7523d5578895f516261c187e6750d7c2c11c36b814b70c0f0bf9eae3273e3f3ba36222aeda88858fc6af46e9643046b07ae15704b7f105f61d8b1f58f082fef6b66c2d1fb344f1716ace4", 0xe4}], 0x1}, 0x4048000) capget(&(0x7f0000000580)={0x20071026}, 0x0) 1.955329701s ago: executing program 3 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 1.711514895s ago: executing program 3 (id=109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r1, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(r3) 1.583174063s ago: executing program 0 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x0) 1.061602232s ago: executing program 1 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r1, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(0xffffffffffffffff) 816.077332ms ago: executing program 4 (id=112): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000002200)=""/4096, 0x1000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendto$inet(r5, &(0x7f0000000380)="3536f9d9c214579050016828511ad73f783581433f573a268c5e540dc306057b3be8af7ef70bff984033317bfd51a43fdef6e1986cf3cea713465411af25012eaa6518127f741215c333c6dd34af17290387dd3ca37fe779c790a444cc2d8577ead3d09c7dd2f4c97ce797b661e9e6f99b7acae5bd48d7173bac0f4b80290cfd36acbff7f2dfe95bbe7e22baaa6193e6a169492ca25422280483b96a57fd18f43328536ad5a76d1195af0d563293a273c567b04578a11b9591227933f6feede897a9678d2ad7ec44c52c74b99b3e09b8de5746286087185230885a44c48046", 0xdf, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0xfff, 0xd26d, 0x1, 'queue1\x00', 0x8}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000480)={0xfffffffa, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r8}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c82, r7) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f00000101c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b0, &(0x7f0000000080)={0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) 695.752407ms ago: executing program 3 (id=113): listen(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) socket(0x200000000000011, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32=r2, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5acd, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd, 0xc}, 0x0, &(0x7f00000001c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xf) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f00000000c0)={0xd, 0xe1d}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) 438.917699ms ago: executing program 0 (id=114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x35, 0x0, 0x0, 0xfffffffc}]}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) syz_open_dev$vim2m(0x0, 0x0, 0x2) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(0x0, 0x5, 0x2) process_madvise(r3, &(0x7f0000000880), 0x0, 0x13, 0x0) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x280000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r8, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0x208e24b) 344.1065ms ago: executing program 4 (id=115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x90) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x4, 0x0, 0x0, "4415264a88b82c522013fb235902af2556c6b6"}) 769.54µs ago: executing program 1 (id=117): syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="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", 0x5f9}], 0x1}}], 0x1, 0x40440c1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r3, &(0x7f0000002440)=""/181, 0xb5) getdents64(r3, 0xffffffffffffffff, 0x43) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f78100000000000000bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 2 (id=118): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000002200)=""/4096, 0x1000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendto$inet(r6, &(0x7f0000000380)="3536f9d9c214579050016828511ad73f783581433f573a268c5e540dc306057b3be8af7ef70bff984033317bfd51a43fdef6e1986cf3cea713465411af25012eaa6518127f741215c333c6dd34af17290387dd3ca37fe779c790a444cc2d8577ead3d09c7dd2f4c97ce797b661e9e6f99b7acae5bd48d7173bac0f4b80290cfd36acbff7f2dfe95bbe7e22baaa6193e6a169492ca25422280483b96a57fd18f43328536ad5a76d1195af0d563293a273c567b04578a11b9591227933f6feede897a9678d2ad7ec44c52c74b99b3e09b8de5746286087185230885a44c48046", 0xdf, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0xfff, 0xd26d, 0x1, 'queue1\x00', 0x8}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000480)={0xfffffffa, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000004c0)={r9}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000101c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b0, &(0x7f0000000080)={0x0}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 48.915762][ T5221] cgroup: Unknown subsys name 'net' [ 49.067282][ T5221] cgroup: Unknown subsys name 'cpuset' [ 49.075369][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.305512][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.377865][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.386365][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.387504][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.394291][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.407957][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.408497][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.422362][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.424271][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.436658][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.445981][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.454362][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.455446][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.462397][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.478124][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.487076][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.496410][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.503774][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.511546][ T4626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.511690][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.524195][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.534045][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.535719][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.548682][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.549211][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.562988][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.565693][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.570922][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.577827][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.592690][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.593062][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.015214][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 53.076422][ T5251] chnl_net:caif_netlink_parms(): no params data found [ 53.102964][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 53.141898][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 53.190450][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 53.296794][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.304847][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.312263][ T5249] bridge_slave_0: entered allmulticast mode [ 53.319135][ T5249] bridge_slave_0: entered promiscuous mode [ 53.335148][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.342257][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.349682][ T5251] bridge_slave_0: entered allmulticast mode [ 53.356459][ T5251] bridge_slave_0: entered promiscuous mode [ 53.393299][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.400626][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.408012][ T5249] bridge_slave_1: entered allmulticast mode [ 53.415215][ T5249] bridge_slave_1: entered promiscuous mode [ 53.426549][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.433689][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.441421][ T5251] bridge_slave_1: entered allmulticast mode [ 53.448271][ T5251] bridge_slave_1: entered promiscuous mode [ 53.462893][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.472037][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.480568][ T5250] bridge_slave_0: entered allmulticast mode [ 53.487773][ T5250] bridge_slave_0: entered promiscuous mode [ 53.496577][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.503700][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.510994][ T5252] bridge_slave_0: entered allmulticast mode [ 53.517986][ T5252] bridge_slave_0: entered promiscuous mode [ 53.542360][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.549774][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.557152][ T5250] bridge_slave_1: entered allmulticast mode [ 53.563696][ T5250] bridge_slave_1: entered promiscuous mode [ 53.577415][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.585015][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.592142][ T5252] bridge_slave_1: entered allmulticast mode [ 53.599275][ T5252] bridge_slave_1: entered promiscuous mode [ 53.626683][ T5251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.638550][ T5251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.657907][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.675184][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.692825][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.700107][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.707485][ T5248] bridge_slave_0: entered allmulticast mode [ 53.714568][ T5248] bridge_slave_0: entered promiscuous mode [ 53.729846][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.754440][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.763790][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.771130][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.778432][ T5248] bridge_slave_1: entered allmulticast mode [ 53.785307][ T5248] bridge_slave_1: entered promiscuous mode [ 53.808532][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.820402][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.853597][ T5251] team0: Port device team_slave_0 added [ 53.862681][ T5251] team0: Port device team_slave_1 added [ 53.871230][ T5250] team0: Port device team_slave_0 added [ 53.879548][ T5250] team0: Port device team_slave_1 added [ 53.893556][ T5249] team0: Port device team_slave_0 added [ 53.903688][ T5249] team0: Port device team_slave_1 added [ 53.946956][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.973438][ T5252] team0: Port device team_slave_0 added [ 53.990858][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.001383][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.008417][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.034700][ T5251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.048142][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.056052][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.082176][ T5251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.094639][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.101611][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.127784][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.141191][ T5252] team0: Port device team_slave_1 added [ 54.160013][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.167144][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.193157][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.205821][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.212790][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.240188][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.263281][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.270316][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.296461][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.324888][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.331866][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.357839][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.380867][ T5248] team0: Port device team_slave_0 added [ 54.394324][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.401296][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.428298][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.442593][ T5248] team0: Port device team_slave_1 added [ 54.508468][ T5251] hsr_slave_0: entered promiscuous mode [ 54.516294][ T5251] hsr_slave_1: entered promiscuous mode [ 54.525895][ T5249] hsr_slave_0: entered promiscuous mode [ 54.532518][ T5249] hsr_slave_1: entered promiscuous mode [ 54.539345][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.545272][ T4626] Bluetooth: hci1: command tx timeout [ 54.547628][ T5249] Cannot create hsr debugfs directory [ 54.577800][ T5250] hsr_slave_0: entered promiscuous mode [ 54.584410][ T5250] hsr_slave_1: entered promiscuous mode [ 54.590736][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.598347][ T5250] Cannot create hsr debugfs directory [ 54.614531][ T4626] Bluetooth: hci2: command tx timeout [ 54.627018][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.637201][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.663665][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.694057][ T5242] Bluetooth: hci0: command tx timeout [ 54.694102][ T5243] Bluetooth: hci3: command tx timeout [ 54.705261][ T4626] Bluetooth: hci4: command tx timeout [ 54.716185][ T5252] hsr_slave_0: entered promiscuous mode [ 54.722377][ T5252] hsr_slave_1: entered promiscuous mode [ 54.730729][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.738436][ T5252] Cannot create hsr debugfs directory [ 54.746309][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.753281][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.779414][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.930496][ T5248] hsr_slave_0: entered promiscuous mode [ 54.936950][ T5248] hsr_slave_1: entered promiscuous mode [ 54.942917][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.950608][ T5248] Cannot create hsr debugfs directory [ 55.130220][ T5251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.141432][ T5251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.167016][ T5251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.197749][ T5251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.216940][ T5249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.229601][ T5249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.240515][ T5249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.264371][ T5249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.315431][ T5252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.335353][ T5252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.346068][ T5252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.388592][ T5252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.407014][ T5250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.418847][ T5250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.428462][ T5250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.438689][ T5250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.557496][ T5248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.588657][ T5248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.600113][ T5248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.613414][ T5248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.628395][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.655454][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.699228][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.723275][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.749424][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.756997][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.767671][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.774806][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.790600][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.798232][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.842455][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.849625][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.886219][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.912343][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.950039][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.974748][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.002611][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.009789][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.020405][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.027531][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.045843][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.082196][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.089353][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.107089][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.128192][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.139572][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.146732][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.192589][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.256661][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.285544][ T5251] veth0_vlan: entered promiscuous mode [ 56.311331][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.318445][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.331706][ T5251] veth1_vlan: entered promiscuous mode [ 56.348870][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.356064][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.371737][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.410255][ T5249] veth0_vlan: entered promiscuous mode [ 56.440916][ T5249] veth1_vlan: entered promiscuous mode [ 56.460052][ T5251] veth0_macvtap: entered promiscuous mode [ 56.477747][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.505862][ T5251] veth1_macvtap: entered promiscuous mode [ 56.530503][ T5252] veth0_vlan: entered promiscuous mode [ 56.561615][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.580352][ T5252] veth1_vlan: entered promiscuous mode [ 56.597444][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.614107][ T4626] Bluetooth: hci1: command tx timeout [ 56.616827][ T5249] veth0_macvtap: entered promiscuous mode [ 56.654361][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.669465][ T5251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.678715][ T5251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.688976][ T5251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.698090][ T5251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.707159][ T4626] Bluetooth: hci2: command tx timeout [ 56.717997][ T5249] veth1_macvtap: entered promiscuous mode [ 56.727689][ T5252] veth0_macvtap: entered promiscuous mode [ 56.752160][ T5250] veth0_vlan: entered promiscuous mode [ 56.769431][ T5252] veth1_macvtap: entered promiscuous mode [ 56.774876][ T4626] Bluetooth: hci0: command tx timeout [ 56.776971][ T5243] Bluetooth: hci4: command tx timeout [ 56.780677][ T5242] Bluetooth: hci3: command tx timeout [ 56.808630][ T5250] veth1_vlan: entered promiscuous mode [ 56.836513][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.851500][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.864695][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.886451][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.897238][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.907799][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.919313][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.931116][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.942379][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.954702][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965922][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.991538][ T5248] veth0_vlan: entered promiscuous mode [ 56.999649][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.010503][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.021611][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.032146][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.043464][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.056607][ T5252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.065449][ T5252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.074508][ T5252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.083217][ T5252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.111652][ T5249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.121190][ T5249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.130064][ T5249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.138966][ T5249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.161236][ T5250] veth0_macvtap: entered promiscuous mode [ 57.171683][ T5250] veth1_macvtap: entered promiscuous mode [ 57.187007][ T5248] veth1_vlan: entered promiscuous mode [ 57.196561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.208658][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.257761][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.268467][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.278701][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.289463][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.299325][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.310105][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.321700][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.361990][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.374734][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.385195][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.396041][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.406122][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.417376][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.429018][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.465679][ T5250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.474619][ T5250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.483322][ T5250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.493040][ T5250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.509753][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.518819][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.524532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.541757][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.578664][ T5248] veth0_macvtap: entered promiscuous mode [ 57.608401][ T5248] veth1_macvtap: entered promiscuous mode [ 57.640865][ T5251] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.641941][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.678951][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.687295][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.694712][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.726652][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.742434][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.752406][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.762978][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.772888][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.783432][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.793432][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.804005][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.816107][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.843260][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.863558][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.874981][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.885797][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.896648][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.907513][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.917704][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.928871][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.950282][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.057092][ T3122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.065384][ T3122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.084263][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.092096][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.115937][ T5248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.126440][ T5248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.135448][ T5248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.144405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.152599][ T5248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.304893][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.325144][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.381907][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.469583][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.477291][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.513361][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.522323][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.664493][ T25] usb 3-1: config 108 has an invalid interface number: 85 but max is 0 [ 58.694539][ T4626] Bluetooth: hci1: command tx timeout [ 58.705004][ T5286] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.756658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.774801][ T25] usb 3-1: config 108 has no interface number 0 [ 58.794122][ T4626] Bluetooth: hci2: command tx timeout [ 58.809704][ T25] usb 3-1: config 108 interface 85 has no altsetting 0 [ 58.857425][ T4626] Bluetooth: hci0: command tx timeout [ 58.864473][ T4626] Bluetooth: hci4: command tx timeout [ 58.870433][ T4626] Bluetooth: hci3: command tx timeout [ 58.876370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 58.952311][ T25] usb 3-1: string descriptor 0 read error: -22 [ 58.970360][ T25] usb 3-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 58.985973][ T5286] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 58.995253][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.011623][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.020168][ T5286] usb 4-1: Product: syz [ 59.026048][ T5286] usb 4-1: Manufacturer: syz [ 59.030671][ T5286] usb 4-1: SerialNumber: syz [ 59.047571][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.054446][ T5286] usb 4-1: config 0 descriptor?? [ 59.063164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.076604][ T25] option 3-1:108.85: GSM modem (1-port) converter detected [ 59.090471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.109552][ T5286] ch341 4-1:0.0: ch341-uart converter detected [ 59.116719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.142151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 59.214698][ T5299] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 59.284742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.294237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 59.303472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 59.339075][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.390058][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.452100][ T5299] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 59.461491][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.475885][ T5299] usb 2-1: Product: syz [ 59.480165][ T5299] usb 2-1: Manufacturer: syz [ 59.488983][ T5299] usb 2-1: SerialNumber: syz [ 59.529160][ T5299] usb 2-1: config 0 descriptor?? [ 59.688611][ T9] usb 1-1: config 0 has no interfaces? [ 59.847473][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 59.856991][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.865139][ T9] usb 1-1: Product: syz [ 59.869345][ T9] usb 1-1: Manufacturer: syz [ 59.874019][ T9] usb 1-1: SerialNumber: syz [ 59.895641][ T9] usb 1-1: config 0 descriptor?? [ 59.976540][ T5305] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 60.215000][ T5286] usb 4-1: failed to receive control message: -110 [ 60.221897][ T5286] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 60.284202][ T5299] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 60.374342][ T5298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.675424][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.746761][ T5298] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 60.777682][ T5242] Bluetooth: hci1: command tx timeout [ 60.854041][ T5242] Bluetooth: hci2: command tx timeout [ 60.879015][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.934302][ T5242] Bluetooth: hci3: command tx timeout [ 60.939779][ T5242] Bluetooth: hci4: command tx timeout [ 60.945256][ T5242] Bluetooth: hci0: command tx timeout [ 61.049049][ T5298] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 61.059031][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.067215][ T5298] usb 5-1: Product: syz [ 61.071402][ T5298] usb 5-1: Manufacturer: syz [ 61.076120][ T5298] usb 5-1: SerialNumber: syz [ 61.206496][ T5298] usb 5-1: config 0 descriptor?? [ 61.216671][ T5298] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 61.324145][ T5241] usb 3-1: USB disconnect, device number 2 [ 61.332103][ T5241] option 3-1:108.85: device disconnected [ 61.686114][ T5299] usb 2-1: USB disconnect, device number 2 [ 62.030980][ T5299] usb 4-1: USB disconnect, device number 2 [ 62.043549][ T5299] ch341 4-1:0.0: device disconnected [ 62.562807][ T5298] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.588516][ T5241] usb 1-1: USB disconnect, device number 2 [ 62.949484][ T5298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.961493][ T5298] usb 2-1: config 0 has no interfaces? [ 62.973786][ T5298] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 63.038585][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.092607][ T5298] usb 2-1: Product: syz [ 63.134096][ T5241] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.168654][ T5298] usb 2-1: Manufacturer: syz [ 63.168697][ T5298] usb 2-1: SerialNumber: syz [ 63.204386][ T5298] usb 2-1: config 0 descriptor?? [ 63.296621][ T5241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.304111][ T938] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.357467][ T5349] Zero length message leads to an empty skb [ 63.368930][ T5241] usb 1-1: config 0 has no interfaces? [ 63.383740][ T5241] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 63.394226][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.402301][ T5241] usb 1-1: Product: syz [ 63.435923][ T5241] usb 1-1: Manufacturer: syz [ 63.461990][ T5241] usb 1-1: SerialNumber: syz [ 63.509755][ T938] usb 3-1: config index 0 descriptor too short (expected 65535, got 36) [ 63.521311][ T5241] usb 1-1: config 0 descriptor?? [ 63.565805][ T938] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 63.622137][ T938] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 63.646908][ T938] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 63.690654][ T938] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 63.713400][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.739679][ T938] usb 3-1: SerialNumber: syz [ 63.856437][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.895276][ T938] usb 5-1: USB disconnect, device number 2 [ 63.903284][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.944271][ T29] audit: type=1400 audit(1729656266.599:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5337 comm="syz.0.10" [ 63.993695][ T5299] usb 1-1: USB disconnect, device number 3 [ 64.370721][ T5356] syzkaller0: entered promiscuous mode [ 64.377644][ T5356] syzkaller0: entered allmulticast mode [ 64.739897][ T5360] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.937661][ T5299] usb 2-1: USB disconnect, device number 3 [ 66.224683][ T9] usb 3-1: USB disconnect, device number 3 [ 66.351310][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 66.636778][ T5241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.840012][ T5241] usb 1-1: Using ep0 maxpacket: 8 [ 66.872976][ T5241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.924014][ T5241] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.016932][ T5241] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 67.067375][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.140229][ T5241] usb 1-1: Product: syz [ 67.156880][ T5241] usb 1-1: Manufacturer: syz [ 67.165982][ T5241] usb 1-1: SerialNumber: syz [ 67.181913][ T5241] usb 1-1: config 0 descriptor?? [ 67.200555][ T5241] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 67.207673][ T5241] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 67.224291][ T5241] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 67.865460][ T5241] usb 1-1: USB disconnect, device number 4 [ 69.824987][ T938] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.853111][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.884120][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.021476][ T938] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 70.033223][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.058050][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 70.067583][ T938] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 70.089874][ T5299] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 70.133460][ T938] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 70.144790][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.181583][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.181946][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.203236][ T5299] usb 5-1: Product: syz [ 70.203304][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.234422][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.262281][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.268915][ T5299] usb 5-1: Manufacturer: syz [ 70.286167][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.301618][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.309677][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.378930][ T5299] usb 5-1: SerialNumber: syz [ 70.414552][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.455084][ T5299] usb 5-1: config 0 descriptor?? [ 70.739428][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 70.760530][ T5299] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.198471][ T5423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.432147][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 71.450123][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.464270][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.471500][ T5412] bridge_slave_0: entered allmulticast mode [ 71.479087][ T5412] bridge_slave_0: entered promiscuous mode [ 71.494463][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.502056][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.517391][ T5412] bridge_slave_1: entered allmulticast mode [ 71.529272][ T5412] bridge_slave_1: entered promiscuous mode [ 71.588201][ T4626] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.597294][ T4626] Bluetooth: hci2: Injecting HCI hardware error event [ 71.605432][ T5242] Bluetooth: hci2: hardware error 0x00 [ 71.606105][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.618141][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.374226][ T4626] Bluetooth: hci0: command tx timeout [ 72.758537][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.771779][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.780258][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.790742][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.806589][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.816191][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.207095][ T938] usb 3-1: USB disconnect, device number 4 [ 73.532363][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.575426][ T12] bridge_slave_1: left allmulticast mode [ 73.581273][ T12] bridge_slave_1: left promiscuous mode [ 73.601682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.630066][ T12] bridge_slave_0: left allmulticast mode [ 73.636267][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 73.647584][ T12] bridge_slave_0: left promiscuous mode [ 73.653405][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.739011][ T5242] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 73.794303][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 73.806425][ T9] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 73.836075][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 73.853928][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.871277][ T9] usb 3-1: Product: syz [ 73.877794][ T9] usb 3-1: Manufacturer: syz [ 73.882477][ T9] usb 3-1: SerialNumber: syz [ 73.976831][ T5299] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 74.004284][ T5299] usb 5-1: USB disconnect, device number 3 [ 74.014030][ T938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.230021][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.239532][ T29] audit: type=1804 audit(1729656276.889:3): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.32" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 74.260047][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 74.277822][ T938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 74.279312][ T29] audit: type=1804 audit(1729656276.929:4): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.32" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 74.287652][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.317523][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.329379][ T938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.344264][ T938] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 74.354800][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.364140][ T12] bond0 (unregistering): Released all slaves [ 74.370557][ T29] audit: type=1804 audit(1729656276.929:5): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.32" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 74.371354][ T938] usb 1-1: Product: syz [ 74.405105][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.414541][ T938] usb 1-1: Manufacturer: syz [ 74.425487][ T938] usb 1-1: SerialNumber: syz [ 74.443594][ T938] usb 1-1: config 0 descriptor?? [ 74.462278][ T5242] Bluetooth: hci0: command tx timeout [ 74.469808][ T938] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 74.483843][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 74.505822][ T5298] usb 3-1: USB disconnect, device number 5 [ 74.519960][ T938] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 74.531366][ T938] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 74.611304][ T5412] team0: Port device team_slave_0 added [ 74.735830][ T5412] team0: Port device team_slave_1 added [ 74.854044][ T5242] Bluetooth: hci4: command tx timeout [ 74.921076][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.941609][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.968454][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.026275][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.033267][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.156205][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.305567][ T12] hsr_slave_0: left promiscuous mode [ 75.333455][ T12] hsr_slave_1: left promiscuous mode [ 75.366487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.389416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.565076][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.615923][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.765061][ T12] veth1_macvtap: left promiscuous mode [ 75.772518][ T12] veth0_macvtap: left promiscuous mode [ 75.782555][ T12] veth1_vlan: left promiscuous mode [ 75.792842][ T12] veth0_vlan: left promiscuous mode [ 75.832169][ T29] audit: type=1326 audit(1729656278.489:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2018b7dff9 code=0x0 [ 76.157795][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.166889][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.175916][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.190401][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.199911][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.204197][ T5241] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.222069][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.466372][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 76.489680][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 76.534118][ T5241] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.547489][ T5242] Bluetooth: hci0: command tx timeout [ 76.573678][ T5241] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.584123][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.600631][ T5241] usb 5-1: config 0 descriptor?? [ 76.623187][ T5466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.705316][ T1175] cfg80211: failed to load regulatory.db [ 76.735226][ T8] usb 1-1: USB disconnect, device number 5 [ 76.809811][ T5470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.837601][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.934093][ T5242] Bluetooth: hci4: command tx timeout [ 76.955889][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.121238][ T5241] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 77.130693][ T5241] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 77.143514][ T5241] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 77.199545][ T5241] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 77.806549][ T5412] hsr_slave_0: entered promiscuous mode [ 77.827991][ T5412] hsr_slave_1: entered promiscuous mode [ 77.851715][ T5412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.864839][ T5412] Cannot create hsr debugfs directory [ 77.898344][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 78.294391][ T5242] Bluetooth: hci3: command tx timeout [ 78.310725][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.319205][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.327316][ T5428] bridge_slave_0: entered allmulticast mode [ 78.339952][ T5428] bridge_slave_0: entered promiscuous mode [ 78.403401][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.418524][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.439572][ T5428] bridge_slave_1: entered allmulticast mode [ 78.464123][ T5428] bridge_slave_1: entered promiscuous mode [ 78.571718][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.614144][ T5242] Bluetooth: hci0: command tx timeout [ 78.624223][ T938] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 78.659521][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.952423][ T5428] team0: Port device team_slave_0 added [ 78.966761][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 79.014180][ T5242] Bluetooth: hci4: command tx timeout [ 79.066592][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.120870][ T5428] team0: Port device team_slave_1 added [ 79.302105][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.381503][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.389319][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.416730][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.465349][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.494723][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.504679][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.533428][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.582823][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.592144][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.601585][ T5468] bridge_slave_0: entered allmulticast mode [ 79.610565][ T5468] bridge_slave_0: entered promiscuous mode [ 79.627313][ T5299] usb 5-1: USB disconnect, device number 4 [ 79.689919][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.711967][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737886][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.759987][ T5468] bridge_slave_1: entered allmulticast mode [ 79.779913][ T5468] bridge_slave_1: entered promiscuous mode [ 79.864541][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.906138][ T5428] hsr_slave_0: entered promiscuous mode [ 79.916440][ T5428] hsr_slave_1: entered promiscuous mode [ 79.929486][ T5428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.939485][ T5428] Cannot create hsr debugfs directory [ 79.950254][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.000155][ T5505] input: syz0 as /devices/virtual/input/input5 [ 80.100059][ T5468] team0: Port device team_slave_0 added [ 80.125629][ T5468] team0: Port device team_slave_1 added [ 80.342604][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.354552][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.374022][ T5242] Bluetooth: hci3: command tx timeout [ 80.390140][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.552306][ T5412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.586704][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.593753][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.632497][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.678996][ T5412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.825136][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.904647][ T5412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.946647][ T5412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.977327][ T5468] hsr_slave_0: entered promiscuous mode [ 80.986994][ T5299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.000114][ T5468] hsr_slave_1: entered promiscuous mode [ 81.017963][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.026438][ T5468] Cannot create hsr debugfs directory [ 81.054790][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.066557][ T5514] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 81.106225][ T5242] Bluetooth: hci4: command tx timeout [ 81.163612][ T5299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.189278][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.204959][ T5299] usb 1-1: config 0 has no interfaces? [ 81.219266][ T5299] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 81.230520][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.260601][ T5299] usb 1-1: Product: syz [ 81.268816][ T5299] usb 1-1: Manufacturer: syz [ 81.273794][ T5299] usb 1-1: SerialNumber: syz [ 81.293562][ T5299] usb 1-1: config 0 descriptor?? [ 81.347469][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.602163][ T12] bridge_slave_1: left allmulticast mode [ 81.618097][ T12] bridge_slave_1: left promiscuous mode [ 81.635134][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.648656][ T12] bridge_slave_0: left allmulticast mode [ 81.663287][ T12] bridge_slave_0: left promiscuous mode [ 81.676636][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.713124][ T12] bridge_slave_1: left allmulticast mode [ 81.729766][ T12] bridge_slave_1: left promiscuous mode [ 81.762962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.815620][ T12] bridge_slave_0: left allmulticast mode [ 81.821362][ T12] bridge_slave_0: left promiscuous mode [ 81.845780][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.467751][ T5242] Bluetooth: hci3: command tx timeout [ 83.744087][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.798105][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.856610][ T12] bond0 (unregistering): Released all slaves [ 84.054791][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.108726][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.119049][ T1175] usb 1-1: USB disconnect, device number 6 [ 84.120557][ T12] bond0 (unregistering): Released all slaves [ 84.209058][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.448791][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.538298][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.545469][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.554251][ T5242] Bluetooth: hci3: command tx timeout [ 84.750479][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757610][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.786960][ T5241] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.989842][ T5241] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 85.013666][ T5241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.054084][ T5241] usb 5-1: Product: syz [ 85.058342][ T5241] usb 5-1: Manufacturer: syz [ 85.083975][ T5241] usb 5-1: SerialNumber: syz [ 85.119847][ T5241] usb 5-1: config 0 descriptor?? [ 85.210178][ T5241] mvusb_mdio 5-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 85.220478][ T5428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.287530][ T12] hsr_slave_0: left promiscuous mode [ 85.294854][ T12] hsr_slave_1: left promiscuous mode [ 85.301510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.309828][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.319822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.328446][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.339590][ T12] hsr_slave_0: left promiscuous mode [ 85.353701][ T12] hsr_slave_1: left promiscuous mode [ 85.360722][ T5241] usb 5-1: USB disconnect, device number 5 [ 85.374881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.394093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.410705][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.420857][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.497202][ T12] veth1_macvtap: left promiscuous mode [ 85.504346][ T12] veth0_macvtap: left promiscuous mode [ 85.512986][ T12] veth1_vlan: left promiscuous mode [ 85.518990][ T12] veth0_vlan: left promiscuous mode [ 85.525647][ T12] veth1_macvtap: left promiscuous mode [ 85.531216][ T12] veth0_macvtap: left promiscuous mode [ 85.537231][ T12] veth1_vlan: left promiscuous mode [ 85.542502][ T12] veth0_vlan: left promiscuous mode [ 86.040538][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.125443][ T12] team0 (unregistering): Port device team_slave_0 removed [ 86.958102][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.992899][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.316802][ T5428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.336112][ T5428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.348491][ T5584] ip6gretap1: entered promiscuous mode [ 87.364196][ T5584] ip6gretap1: entered allmulticast mode [ 87.411577][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.425825][ T5428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.615061][ T5412] veth0_vlan: entered promiscuous mode [ 87.860348][ T5412] veth1_vlan: entered promiscuous mode [ 88.133719][ T5412] veth0_macvtap: entered promiscuous mode [ 88.204882][ T5412] veth1_macvtap: entered promiscuous mode [ 88.237879][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.262855][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.291013][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.306115][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.322422][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.340468][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.400599][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.412915][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.427306][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.448298][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.464092][ T5298] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.478897][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.494143][ T5468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.528529][ T5428] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.559288][ T5412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.580325][ T5412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.590121][ T5412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.602484][ T5412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617496][ T5468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.627245][ T5298] usb 1-1: Using ep0 maxpacket: 8 [ 88.638831][ T5298] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 88.649421][ T5298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.674197][ T5298] usb 1-1: config 0 has no interface number 0 [ 88.677272][ T5468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.680310][ T5298] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.680341][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.712710][ T5468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.719652][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.731086][ T5298] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.747289][ T5298] usb 1-1: config 0 interface 52 has no altsetting 0 [ 88.754402][ T5298] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 88.755496][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.764268][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.770586][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.787609][ T5298] usb 1-1: config 0 descriptor?? [ 88.822782][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 88.841713][ T5619] macsec1: entered allmulticast mode [ 88.847677][ T5619] veth1_macvtap: entered allmulticast mode [ 88.876381][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 88.906434][ T5620] veth1_macvtap (unregistering): left allmulticast mode [ 88.989747][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.996992][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.138614][ T5298] usb 1-1: Can not set alternate setting to 1, error: -71 [ 89.162161][ T5298] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 89.199432][ T5298] usb 1-1: USB disconnect, device number 7 [ 89.263095][ T5428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.285542][ T5428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.361165][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.384255][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.442295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.463153][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.472379][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.540348][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.660514][ T5632] nftables ruleset with unbound chain [ 89.683420][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.698125][ T5428] veth0_vlan: entered promiscuous mode [ 89.712946][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.720154][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.787320][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.794469][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.842865][ T5428] veth1_vlan: entered promiscuous mode [ 89.916946][ T5428] veth0_macvtap: entered promiscuous mode [ 89.955728][ T5428] veth1_macvtap: entered promiscuous mode [ 90.001265][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.051285][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.072597][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.098504][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.132682][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.193065][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.273306][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.319217][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.334465][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.341901][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.369451][ T5299] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 90.401590][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.417358][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.428747][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.439513][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.450738][ T5428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.463666][ T5428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.488925][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.549297][ T5468] veth0_vlan: entered promiscuous mode [ 90.580746][ T5428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.590789][ T5428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610509][ T5428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622875][ T5428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.701783][ T5468] veth1_vlan: entered promiscuous mode [ 90.861288][ T5660] netlink: 60 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.910198][ T5660] unsupported nlmsg_type 40 [ 90.929087][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.064046][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.194688][ T5468] veth0_macvtap: entered promiscuous mode [ 91.265504][ T5468] veth1_macvtap: entered promiscuous mode [ 91.288051][ T5669] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 91.309895][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.329247][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.344598][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.370348][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.415792][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.442369][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.481689][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.503788][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.514549][ T5674] process 'syz.4.57' launched './file0' with NULL argv: empty string added [ 91.523215][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.535400][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.551481][ T3122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.566138][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.577572][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.582078][ T3122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.587451][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.587501][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.587518][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.587532][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.587546][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.587560][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.588797][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.673020][ T5468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681954][ T5468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690818][ T5468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.699736][ T5468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.916240][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.926277][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.937984][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.960903][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.214654][ T5298] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.345349][ T29] audit: type=1326 audit(1729656294.979:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.1.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5803b7dff9 code=0x0 [ 92.387521][ T5298] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.429991][ T5298] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.455550][ T5298] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.472582][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.490178][ T5683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.531664][ T5298] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.258329][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.491058][ T8] usb 5-1: config 0 has no interfaces? [ 93.502477][ T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 93.512814][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.546915][ T8] usb 5-1: Product: syz [ 93.557598][ T8] usb 5-1: Manufacturer: syz [ 93.573592][ T8] usb 5-1: SerialNumber: syz [ 93.601363][ T8] usb 5-1: config 0 descriptor?? [ 94.484591][ T2926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.677395][ T2926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.880456][ T2926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.883095][ T8] usb 4-1: USB disconnect, device number 3 [ 95.069304][ T2926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.402958][ T2926] bridge_slave_1: left allmulticast mode [ 95.402988][ T2926] bridge_slave_1: left promiscuous mode [ 95.403108][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.406125][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.425811][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.436858][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.500288][ T2926] bridge_slave_0: left allmulticast mode [ 95.500309][ T2926] bridge_slave_0: left promiscuous mode [ 95.500514][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.506027][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.509219][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.510980][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.272402][ T9] usb 5-1: USB disconnect, device number 6 [ 96.577648][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.591293][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.615671][ T2926] bond0 (unregistering): Released all slaves [ 96.674109][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.863963][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 96.881452][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.901210][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.917529][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.931064][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.940367][ T8] usb 3-1: Product: syz [ 96.945047][ T8] usb 3-1: Manufacturer: syz [ 96.949979][ T8] usb 3-1: SerialNumber: syz [ 96.966665][ T8] usb 3-1: config 0 descriptor?? [ 96.978327][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.988079][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 97.234137][ T5283] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.264071][ T5299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.316468][ T2926] hsr_slave_0: left promiscuous mode [ 97.331410][ T2926] hsr_slave_1: left promiscuous mode [ 97.361968][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.388256][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.417955][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.428766][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.454987][ T5299] usb 5-1: Using ep0 maxpacket: 16 [ 97.463625][ T5283] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 97.484093][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.496658][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.507484][ T2926] veth1_macvtap: left promiscuous mode [ 97.516384][ T2926] veth0_macvtap: left promiscuous mode [ 97.531626][ T5299] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 97.546368][ T5283] usb 4-1: config 0 descriptor?? [ 97.555909][ T2926] veth1_vlan: left promiscuous mode [ 97.569898][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.583627][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.590641][ T5243] Bluetooth: hci0: command tx timeout [ 97.599767][ T2926] veth0_vlan: left promiscuous mode [ 97.617884][ T5299] usb 5-1: Product: syz [ 97.620418][ T8] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 97.637323][ T5299] usb 5-1: Manufacturer: syz [ 97.671549][ T5299] usb 5-1: SerialNumber: syz [ 97.721355][ T5299] usb 5-1: config 0 descriptor?? [ 98.166600][ T5299] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 98.191696][ T5299] usb 5-1: No valid video chain found. [ 98.557770][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.574391][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.694365][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 98.715070][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 98.911271][ T5761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.996708][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 99.048551][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 99.664263][ T5243] Bluetooth: hci0: command tx timeout [ 99.679492][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 99.707280][ T5760] netlink: 'syz.0.72': attribute type 49 has an invalid length. [ 99.733553][ T5729] chnl_net:caif_netlink_parms(): no params data found [ 99.753243][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 99.764993][ T5283] asix 4-1:0.0: probe with driver asix failed with error -71 [ 99.798628][ T5283] usb 4-1: USB disconnect, device number 4 [ 99.840812][ T5298] usb 3-1: USB disconnect, device number 6 [ 99.859720][ T5298] em28xx 3-1:0.0: Disconnecting em28xx [ 99.880434][ T5298] em28xx 3-1:0.0: Freeing device [ 100.091798][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.159486][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.200905][ T5729] bridge_slave_0: entered allmulticast mode [ 100.261871][ T5729] bridge_slave_0: entered promiscuous mode [ 100.301917][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.338033][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.368558][ T5729] bridge_slave_1: entered allmulticast mode [ 100.376917][ T5729] bridge_slave_1: entered promiscuous mode [ 100.523285][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.571164][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.700222][ T5729] team0: Port device team_slave_0 added [ 100.755773][ T5729] team0: Port device team_slave_1 added [ 100.804785][ T8] usb 5-1: USB disconnect, device number 7 [ 100.947609][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.962136][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.022220][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.061338][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.084083][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.136338][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.184269][ T1175] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.292453][ T5729] hsr_slave_0: entered promiscuous mode [ 101.306655][ T5729] hsr_slave_1: entered promiscuous mode [ 101.365983][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.428942][ T1175] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.471585][ T1175] usb 3-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 101.474107][ T5283] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.530617][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.591030][ T1175] usb 3-1: config 0 descriptor?? [ 101.619133][ T1175] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 101.676857][ T5283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.695065][ T1175] dvb-usb: bulk message failed: -90 (3/0) [ 101.729456][ T5283] usb 1-1: config 0 has no interfaces? [ 101.744080][ T5243] Bluetooth: hci0: command tx timeout [ 101.753477][ T5283] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 101.803825][ T1175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.819603][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.877661][ T5283] usb 1-1: Product: syz [ 101.881870][ T5283] usb 1-1: Manufacturer: syz [ 101.908770][ T5283] usb 1-1: SerialNumber: syz [ 101.916527][ T1175] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 101.941541][ T5283] usb 1-1: config 0 descriptor?? [ 101.976692][ T1175] usb 3-1: media controller created [ 102.015701][ T1175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.103232][ T5806] block device autoloading is deprecated and will be removed. [ 102.180596][ T1175] dvb-usb: bulk message failed: -90 (6/0) [ 102.255380][ T1175] dvb-usb: bulk message failed: -90 (6/0) [ 102.270374][ T1175] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 102.308321][ T1175] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 102.328399][ T1175] dvb-usb: schedule remote query interval to 150 msecs. [ 102.344284][ T1175] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 102.461318][ T5792] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 102.505875][ T1175] dvb-usb: bulk message failed: -90 (1/0) [ 102.511800][ T1175] dvb-usb: error while querying for an remote control event. [ 102.683983][ T1175] dvb-usb: bulk message failed: -90 (1/0) [ 102.690978][ T1175] dvb-usb: error while querying for an remote control event. [ 102.868050][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.989090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.022775][ T9] dvb-usb: bulk message failed: -90 (1/0) [ 103.034295][ T9] dvb-usb: error while querying for an remote control event. [ 103.084051][ T5283] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.161021][ T5286] usb 3-1: USB disconnect, device number 7 [ 103.182406][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.194078][ T8] dvb-usb: bulk message failed: -19 (1/0) [ 103.200324][ T8] dvb-usb: error while querying for an remote control event. [ 103.295788][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.320397][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.364319][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.374195][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.435060][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.453498][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.497412][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.504899][ T5286] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 103.522702][ T5283] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 103.569523][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.581588][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.588740][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.615285][ T5283] usb 4-1: config 0 descriptor?? [ 103.814505][ T5243] Bluetooth: hci0: command tx timeout [ 103.829719][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.836902][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.891186][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.038467][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.141000][ T5729] veth0_vlan: entered promiscuous mode [ 104.169907][ T5729] veth1_vlan: entered promiscuous mode [ 104.175622][ T1175] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.225452][ T5729] veth0_macvtap: entered promiscuous mode [ 104.233474][ T5729] veth1_macvtap: entered promiscuous mode [ 104.286931][ T5283] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 104.354773][ T5824] delete_channel: no stack [ 104.401380][ T1175] usb 3-1: config 0 has no interfaces? [ 104.422698][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.502181][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.531728][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.570672][ T5286] usb 4-1: USB disconnect, device number 5 [ 104.591143][ T1175] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.631756][ T1175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.650282][ T1175] usb 3-1: Product: syz [ 104.656824][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.664187][ T1175] usb 3-1: Manufacturer: syz [ 104.682032][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.692631][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.703973][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.713940][ T1175] usb 3-1: SerialNumber: syz [ 104.714532][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.736086][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.745769][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.756494][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.766593][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.781742][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.791949][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.812534][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.836364][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.838842][ T1175] usb 3-1: config 0 descriptor?? [ 104.847094][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.866268][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.882778][ T5729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.891595][ T5729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.900411][ T5729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.909215][ T5729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.941508][ T29] audit: type=1326 audit(1729656307.589:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2018b7dff9 code=0x0 [ 105.134169][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.142389][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.149662][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.160854][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.322123][ T5286] usb 1-1: USB disconnect, device number 8 [ 105.520931][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 105.880206][ T5882] loop2: detected capacity change from 0 to 7 [ 105.950705][ T5882] Dev loop2: unable to read RDB block 7 [ 106.002268][ T5882] loop2: unable to read partition table [ 106.008976][ T5882] loop2: partition table beyond EOD, truncated [ 106.015674][ T5882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.279164][ T5894] use of bytesused == 0 is deprecated and will be removed in the future, [ 106.312954][ T5894] use the actual size instead. [ 107.064376][ T5298] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.144161][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.225066][ T5298] usb 5-1: Using ep0 maxpacket: 32 [ 107.238281][ T5298] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.255685][ T5298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.300402][ T5298] usb 5-1: config 0 has no interface number 0 [ 107.330888][ T5298] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 107.387772][ T5298] usb 5-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 107.441846][ T5298] usb 5-1: config 0 interface 8 has no altsetting 0 [ 107.458141][ T5298] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 107.467726][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.524049][ T5298] usb 5-1: Product: syz [ 107.551197][ T5298] usb 5-1: Manufacturer: syz [ 107.564382][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 107.572987][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 107.583079][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.593756][ T9] usb 1-1: Product: syz [ 107.599405][ T9] usb 1-1: Manufacturer: syz [ 107.606142][ T9] usb 1-1: SerialNumber: syz [ 107.613539][ T9] usb 1-1: config 0 descriptor?? [ 107.621781][ T9] cdc_ether 1-1:0.0: More than one union descriptor, skipping ... [ 107.664217][ T5298] usb 5-1: SerialNumber: syz [ 107.687706][ T9] usb 1-1: bad CDC descriptors [ 107.693469][ T5298] usb 5-1: config 0 descriptor?? [ 107.734781][ T9] usb 1-1: unsupported MDLM descriptors [ 107.885261][ T5286] usb 3-1: USB disconnect, device number 8 [ 107.927413][ T5298] ath6kl: Failed to submit usb control message: -71 [ 107.927525][ T5298] ath6kl: unable to send the bmi data to the device: -71 [ 107.927543][ T5298] ath6kl: Unable to send get target info: -71 [ 107.929250][ T5298] ath6kl: Failed to init ath6kl core: -71 [ 107.970002][ T5298] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 108.000024][ T5298] usb 5-1: USB disconnect, device number 8 [ 108.526609][ T5286] usb 1-1: USB disconnect, device number 9 [ 109.148847][ T5945] netlink: 44 bytes leftover after parsing attributes in process `syz.2.98'. [ 109.429533][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 109.476695][ T5945] netlink: 44 bytes leftover after parsing attributes in process `syz.2.98'. [ 109.786693][ T5286] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.018677][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 110.034354][ T5286] usb 5-1: config 0 has no interfaces? [ 110.039854][ T5286] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 110.060839][ T29] audit: type=1326 audit(1729656312.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.2.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ab7dff9 code=0x0 [ 110.097962][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.148921][ T5286] usb 5-1: config 0 descriptor?? [ 110.824770][ T5236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.997474][ T5955] delete_channel: no stack [ 111.047008][ T5236] usb 2-1: Using ep0 maxpacket: 32 [ 111.059040][ T5236] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.133706][ T5236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.156094][ T5236] usb 2-1: config 0 has no interface number 0 [ 111.156141][ T5236] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 111.156171][ T5236] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 111.156199][ T5236] usb 2-1: config 0 interface 8 has no altsetting 0 [ 111.158327][ T5236] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 111.158355][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.158374][ T5236] usb 2-1: Product: syz [ 111.158390][ T5236] usb 2-1: Manufacturer: syz [ 111.159012][ T5236] usb 2-1: SerialNumber: syz [ 111.161269][ T5236] usb 2-1: config 0 descriptor?? [ 111.370898][ T5236] ath6kl: Failed to submit usb control message: -71 [ 111.395119][ T5236] ath6kl: unable to send the bmi data to the device: -71 [ 111.447807][ T5236] ath6kl: Unable to send get target info: -71 [ 111.533955][ T5236] ath6kl: Failed to init ath6kl core: -71 [ 111.584211][ T5236] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 111.687219][ T5236] usb 2-1: USB disconnect, device number 4 [ 111.747023][ T5991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.110'. [ 111.756619][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 111.766051][ T5991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.110'. [ 112.112509][ T8] usb 5-1: USB disconnect, device number 9 [ 112.865132][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.965355][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.060559][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.074441][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.084750][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.092380][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.100543][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.241537][ T5242] Bluetooth: hci1: command tx timeout [ 118.382397][ T5242] Bluetooth: hci1: command tx timeout [ 120.568491][ T5242] Bluetooth: hci1: command tx timeout [ 128.991445][ C1] sched: DL replenish lagged too much [ 133.482301][ T5242] Bluetooth: hci1: command tx timeout [ 136.275259][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.291781][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.543887][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 272.550908][ C0] rcu: (detected by 0, t=10502 jiffies, g=15837, q=1385054 ncpus=2) [ 272.558981][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 8724 (4294964354-4294955630), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 272.572305][ C0] rcu: rcu_preempt kthread starved for 8725 jiffies! g15837 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 272.583434][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.593416][ C0] rcu: RCU grace-period kthread stack dump: [ 272.599326][ C0] task:rcu_preempt state:R running task stack:25856 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 272.611149][ C0] Call Trace: [ 272.614456][ C0] [ 272.617408][ C0] __schedule+0x18af/0x4bd0 [ 272.621985][ C0] ? __pfx___schedule+0x10/0x10 [ 272.626875][ C0] ? __pfx_lock_release+0x10/0x10 [ 272.631934][ C0] ? __asan_memset+0x23/0x50 [ 272.636657][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 272.642503][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.648880][ C0] ? schedule+0x90/0x320 [ 272.653161][ C0] schedule+0x14b/0x320 [ 272.657355][ C0] schedule_timeout+0x1be/0x310 [ 272.662238][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 272.667633][ C0] ? __pfx_process_timeout+0x10/0x10 [ 272.672947][ C0] ? prepare_to_swait_event+0x330/0x350 [ 272.678532][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 272.683401][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 272.688638][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 272.694809][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 272.700087][ C0] ? finish_swait+0xd4/0x1e0 [ 272.704684][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 272.709301][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.714513][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.720401][ C0] ? __kthread_parkme+0x169/0x1d0 [ 272.725432][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.730650][ C0] kthread+0x2f0/0x390 [ 272.734737][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.739954][ C0] ? __pfx_kthread+0x10/0x10 [ 272.744566][ C0] ret_from_fork+0x4b/0x80 [ 272.749019][ C0] ? __pfx_kthread+0x10/0x10 [ 272.753739][ C0] ret_from_fork_asm+0x1a/0x30 [ 272.758549][ C0] [ 272.761591][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 272.767930][ C0] Sending NMI from CPU 0 to CPUs 1: [ 272.773175][ C1] NMI backtrace for cpu 1 [ 272.773195][ C1] CPU: 1 UID: 0 PID: 34 Comm: kcompactd1 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 272.773214][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.773227][ C1] RIP: 0010:unwind_next_frame+0xb49/0x22d0 [ 272.773250][ C1] Code: 3e 03 00 00 83 fe 02 0f 85 98 04 00 00 48 89 6c 24 48 4c 89 7c 24 28 49 8d 6d 08 48 89 e8 48 c1 e8 03 48 89 84 24 88 00 00 00 <42> 80 3c 20 00 74 08 48 89 ef e8 c8 3b bd 00 48 89 6c 24 60 48 89 [ 272.773267][ C1] RSP: 0018:ffffc90000a17b10 EFLAGS: 00000a06 [ 272.773283][ C1] RAX: 1ffff92000142f7d RBX: 1ffffffff2252098 RCX: ffffffff9086f3d4 [ 272.773297][ C1] RDX: ffffffff912904c2 RSI: 0000000000000002 RDI: 0000000000000001 [ 272.773308][ C1] RBP: ffffc90000a17be8 R08: 0000000000000003 R09: ffffc90000a17cd0 [ 272.773319][ C1] R10: ffffc90000a17c30 R11: ffffffff818090c0 R12: dffffc0000000000 [ 272.773332][ C1] R13: ffffc90000a17be0 R14: ffffc90000a17c18 R15: ffffffff912904c6 [ 272.773345][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 272.773358][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.773370][ C1] CR2: 00007f5379bf03ae CR3: 000000007ffc2000 CR4: 00000000003526f0 [ 272.773385][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.773395][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.773405][ C1] Call Trace: [ 272.773411][ C1] [ 272.773419][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 272.773440][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.773466][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 272.773485][ C1] ? nmi_handle+0x2a/0x5a0 [ 272.773509][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 272.773530][ C1] ? nmi_handle+0x14f/0x5a0 [ 272.773546][ C1] ? nmi_handle+0x2a/0x5a0 [ 272.773564][ C1] ? unwind_next_frame+0xb49/0x22d0 [ 272.773578][ C1] ? default_do_nmi+0x63/0x160 [ 272.773600][ C1] ? exc_nmi+0x123/0x1f0 [ 272.773620][ C1] ? end_repeat_nmi+0xf/0x53 [ 272.773638][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.773661][ C1] ? unwind_next_frame+0xb49/0x22d0 [ 272.773676][ C1] ? unwind_next_frame+0xb49/0x22d0 [ 272.773693][ C1] ? unwind_next_frame+0xb49/0x22d0 [ 272.773708][ C1] [ 272.773714][ C1] [ 272.773724][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 272.773749][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.773769][ C1] arch_stack_walk+0x11c/0x150 [ 272.773789][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 272.773814][ C1] stack_trace_save+0x118/0x1d0 [ 272.773843][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 272.773864][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.773888][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.773913][ C1] kasan_save_track+0x3f/0x80 [ 272.773929][ C1] ? kasan_save_track+0x3f/0x80 [ 272.773944][ C1] ? kasan_save_free_info+0x40/0x50 [ 272.773965][ C1] ? __kasan_slab_free+0x59/0x70 [ 272.773981][ C1] ? kfree+0x1a0/0x440 [ 272.773999][ C1] ? skb_release_data+0x6a0/0x8a0 [ 272.774016][ C1] ? consume_skb+0x9f/0xf0 [ 272.774031][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 272.774054][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 272.774077][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 272.774091][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 272.774132][ C1] kasan_save_free_info+0x40/0x50 [ 272.774154][ C1] __kasan_slab_free+0x59/0x70 [ 272.774170][ C1] ? skb_release_data+0x6a0/0x8a0 [ 272.774187][ C1] kfree+0x1a0/0x440 [ 272.774205][ C1] ? skb_release_data+0x6a0/0x8a0 [ 272.774224][ C1] skb_release_data+0x6a0/0x8a0 [ 272.774247][ C1] consume_skb+0x9f/0xf0 [ 272.774262][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 272.774288][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 272.774313][ C1] ? nf_ip_checksum+0x13a/0x500 [ 272.774331][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 272.774357][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 272.774380][ C1] ? validate_chain+0x11e/0x5920 [ 272.774399][ C1] ? __pfx_validate_chain+0x10/0x10 [ 272.774421][ C1] nft_do_chain+0x4ad/0x1da0 [ 272.774436][ C1] ? __lock_acquire+0x1384/0x2050 [ 272.774464][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 272.774479][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 272.774511][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 272.774531][ C1] nft_do_chain_inet+0x418/0x6b0 [ 272.774555][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 272.774578][ C1] ? ipt_do_table+0x312/0x1860 [ 272.774609][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 272.774631][ C1] nf_hook_slow+0xc3/0x220 [ 272.774653][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 272.774672][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 272.774691][ C1] NF_HOOK+0x29e/0x450 [ 272.774710][ C1] ? NF_HOOK+0x9a/0x450 [ 272.774727][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 272.774746][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 272.774768][ C1] ? ip_rcv_finish+0x406/0x560 [ 272.774787][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 272.774805][ C1] NF_HOOK+0x3a4/0x450 [ 272.774823][ C1] ? __lock_acquire+0x1384/0x2050 [ 272.774851][ C1] ? NF_HOOK+0x9a/0x450 [ 272.774869][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 272.774886][ C1] ? ip_rcv_core+0x801/0xd10 [ 272.774905][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 272.774926][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 272.774945][ C1] __netif_receive_skb+0x2bf/0x650 [ 272.774967][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.774989][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 272.775009][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.775032][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.775055][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 272.775083][ C1] process_backlog+0x662/0x15b0 [ 272.775107][ C1] ? process_backlog+0x33b/0x15b0 [ 272.775131][ C1] ? __pfx_process_backlog+0x10/0x10 [ 272.775152][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.775176][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.775201][ C1] __napi_poll+0xcb/0x490 [ 272.775222][ C1] net_rx_action+0x89b/0x1240 [ 272.775252][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 272.775282][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.775310][ C1] handle_softirqs+0x2c5/0x980 [ 272.775333][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 272.775355][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 272.775377][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 272.775394][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 272.775414][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 272.775439][ C1] irq_exit_rcu+0x9/0x30 [ 272.775458][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 272.775481][ C1] [ 272.775487][ C1] [ 272.775493][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.775509][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 272.775527][ C1] Code: c9 50 e8 e9 00 0c 00 48 83 c4 08 4c 89 f7 e8 4d 39 00 00 e9 de 04 00 00 4c 89 f7 e8 80 df 6b 0a e8 eb 59 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 272.775540][ C1] RSP: 0018:ffffc90000aa77e8 EFLAGS: 00000282 [ 272.775554][ C1] RAX: 36fa67a1f605ea00 RBX: ffff8880202a9e00 RCX: ffffffff9a3d0903 [ 272.775566][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acb40 RDI: ffffffff8c6102a0 [ 272.775579][ C1] RBP: ffffc90000aa7830 R08: ffffffff901cfeef R09: 1ffffffff2039fdd [ 272.775591][ C1] R10: dffffc0000000000 R11: fffffbfff2039fde R12: 1ffff110170e7f14 [ 272.775603][ C1] R13: dffffc0000000000 R14: ffff8880b863ea80 R15: ffff8880b873f8a0 [ 272.775623][ C1] ? finish_task_switch+0x1e5/0x870 [ 272.775642][ C1] __schedule+0x18b7/0x4bd0 [ 272.775675][ C1] ? __pfx___schedule+0x10/0x10 [ 272.775699][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.775721][ C1] ? __asan_memset+0x23/0x50 [ 272.775746][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 272.775769][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.775794][ C1] ? schedule+0x90/0x320 [ 272.775815][ C1] schedule+0x14b/0x320 [ 272.775843][ C1] schedule_timeout+0x1be/0x310 [ 272.775863][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 272.775885][ C1] ? __pfx_process_timeout+0x10/0x10 [ 272.775908][ C1] ? prepare_to_wait_event+0x3bd/0x400 [ 272.775927][ C1] kcompactd+0x85a/0x1530 [ 272.775952][ C1] ? __pfx_kcompactd+0x10/0x10 [ 272.775972][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.775996][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.776022][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 272.776045][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 272.776060][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.776083][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 272.776108][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 272.776133][ C1] ? __kthread_parkme+0x169/0x1d0 [ 272.776157][ C1] ? __pfx_kcompactd+0x10/0x10 [ 272.776173][ C1] kthread+0x2f0/0x390 [ 272.776188][ C1] ? __pfx_kcompactd+0x10/0x10 [ 272.776203][ C1] ? __pfx_kthread+0x10/0x10 [ 272.776218][ C1] ret_from_fork+0x4b/0x80 [ 272.776241][ C1] ? __pfx_kthread+0x10/0x10 [ 272.776256][ C1] ret_from_fork_asm+0x1a/0x30 [ 272.776284][ C1] [ 275.664330][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.670706][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.679319][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.685968][ T1270] ieee802154 phy1 wpan1: encryption failed: -22