last executing test programs: 10.607269426s ago: executing program 4 (id=165): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x246) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 9.338674063s ago: executing program 1 (id=168): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000006c0)="2ce45717a37e3284cff71a465692541b688bbbb6f253df100e9cf80580b2b56401eb1b0f1c27479d1bcd20b70cfaafa02213e074a88e615fb9e387bbfeb4ea08febe4fdf969055477018f955aaa39190be2764a287ad81aeb7512394ed91c19a0fff5dafd393ef75e8a61ebaa3816b028ae307e916309de6aac9143f111ccf0e2c808f697386c03ed8988531ce53d2f4f840dc1a69d30b9b0848edd64b82cbfa44c7e8669b198921d90f8e6034b327dd98fe8842dc3a23aa3bd61d7df8f3973a6c8bc4e1a5192aa216c5e36b33d8f277bb511aea2b5bb105a998dffd22473812a2696bfd8c34", 0xe6}], 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000000805000000000000000000000000000900010073797a30000240000000000500030006000000"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x80000000000008, &(0x7f0000000180)='{', 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000680)=""/23, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 7.186151839s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) fanotify_init(0x20, 0x80000) r4 = open$dir(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000002a, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="a1a5983b34258a561513574b1fe3396dba76fdbb7b52b381e62e8255ab2514745d0657ac66588f63c881e035de4769961a30cf3a5e578a8f597f22aa883efde327c7d1efee7713a95b85ee809641d151f319"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) 6.906778145s ago: executing program 4 (id=174): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xb, 0x4}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="f4", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000280), r2, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffde7, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04f3fa419d5281014f52d2164a3755e94d00000100000000"], 0xe) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000500)=""/45, 0x2d) getdents64(r7, 0x0, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 6.536426597s ago: executing program 2 (id=177): r0 = io_uring_setup(0x5e13, &(0x7f00000022c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000002340)=[0x2000000, 0x10001], 0x2) 6.478839216s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000efca579f602fcd58e17e03c5ba4f5113ac65ec3ce84ac355934d6e3cf0f84ddf012706e56ce5f69c8a3ba3bc5a50c3ae4344584cf4649a16765bf946c79d0c463fc5ed67384fb9873294bf707414e8e21c6b9f5aaa140d44ad61b2b375625240e238ad3da89002", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') 5.439667541s ago: executing program 2 (id=179): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x3, 0x3, 0x7, 0x6, 0x2, 0x4, 0x4, {0x0, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0xfffffe69, "ad"}}, 0x1a) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000c2b52ecfb3f8c5ab2ebcaa4f7e1770ec561280833bdfb41ec9271f8158fdd23ba0389743060f21acf44647d2b325198644406c8ef09ce95697015a51524daf6ad2c05ddca05c1db1218275e5b06ad1cc097cc739f7277be9b1da0d6e08841aa66e6a5b258e586d17f2cfd72cb002b5d880f9d58f84051148523a13c439445490087044e6204119255c40c23cd5c356e1c94bc90c69315fd6a07a89e2baa94e6e2eaec9d72eda0b374340ab70c1e908890a42570fc416ab9", @ANYRES16=r7, @ANYBLOB="010000000000000000001900000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008000a0006ab7a00080006001300000008001100ff03000000000000060bccb9b1f564bf43741e29201c605f134a1ca571360a0ec947b334db2f4c5c1b90a48a1192f1619eabce451a093fb3d66efeed766d7a9dbca0877b6a8729658fab090d8afcf79fe1a1d6733df2841900"/120], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x1, 0x80ce, 0xfffe, 0xfff, {{0x23, 0x4, 0x3, 0x15, 0x8c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x4, [{@local, 0x1}, {@remote, 0x8001}, {@empty, 0x7f}, {@local, 0x4}, {@loopback}]}, @end, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x8}, @private=0xa010101, @local, @broadcast, @loopback, @multicast1, @private=0xa010101]}, @generic={0x86, 0x12, "50e05afec07b746e478b37360700f248"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xef, 0x9, 0x184d, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x40, 0x10, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000680)) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000003c0)={@empty, @broadcast}, &(0x7f0000000400)=0xc) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300290afcffffff0000000007000000", @ANYRES32=r9, @ANYBLOB="00d13f08000005004945418a665a18211a523dbbfa7e232e45649f69706f5d647bcfb6a19da37f26f265d782c00cc37426cd9db5db6cdc017284178edd8a26c26123d7fa15cff0f808"], 0x2c}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'tunl0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000001e40)={r12, 0x3, 0x6}, 0x10) 5.367845386s ago: executing program 4 (id=180): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.479745547s ago: executing program 4 (id=183): syz_usb_connect(0x0, 0x38, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x24, 0xbc, 0x3a, 0x40, 0x403, 0xff00, 0x5c04, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x84, 0xd7, 0x1a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}, {}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="ba80e6a9dc3287f1c9ca9c5540a0247937f1aad1e8fabba71a832a67ba497c7958932d30c6fb9dd7294c09", 0x2b}, {&(0x7f0000000040)="52cd8b129b49a611aa3bc06f77a1a3cf45a47090ffdebd49d9ede63e1463a5da0d3d35848f6579990f48986f31667edade21", 0x32}, {&(0x7f0000000080)}, {&(0x7f0000000180)="bebc61e20f5e246a540af052ba0355132c4fc516b7670b7c51e1ff7cb1634026c9b3735e1af9bf30bf9b7e8cdca6afdc1ae870046f4b936c4ca0e18e86cdfe28b752eb12ebb0fa9d289f93811ad82283172553103650c7d5c765fa4b4ab23a6933d4220de9251c9e72058f10f0e8d3d7941a2f3748d2777277b112e5da6475b14aab83dcd6c6ec6129964093845f4282b56c03f2464d2e5a86154311018f90e76914f095c30b3b64ae177329f1bbf1cb26a961bdd8c926c917bb1697f9588d03f228a4982b64e2b9baf5a63ef2da0dfb34504fb61622d399ad840eb59d4994e33adf0639590ee2d81f622762bcc210e4074ce6bf6ae4ad34a46e", 0xfa}, {&(0x7f0000000280)="bbf22fe0438a88f16c7f9dd337716556a05b07cfa2ddafad8c84b648a6536526d5ccd89a41fcc664c885ad5c5cff9e5d5d538f4a9a2e0bbbd2fffdb9baacbd18abe006526f73530f099f7d", 0x4b}], 0x5) 4.42713234s ago: executing program 1 (id=184): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x246) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 4.290270753s ago: executing program 2 (id=185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)='\b\x00\x00\x00', 0x4}], 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.185391189s ago: executing program 0 (id=187): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 3.152022144s ago: executing program 2 (id=188): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xb, 0x4}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="f4", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000280), r2, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffde7, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04f3fa419d5281014f52d2164a3755e94d00000100000000"], 0xe) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000500)=""/45, 0x2d) getdents64(r7, 0x0, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 3.094747049s ago: executing program 0 (id=189): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f77"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "7d7c463361f6a11cf6e5600f11c68f16539afb331bf63eafc7d3db6c273b843c92f868b7cc99fa92b898e4549d93a274a6a8221cfc2df04da760a707a57f2adeb124ab580975ab10518f9bd924533d504e2e0ec6102ec2eb8edd51e1a830a1028233bc005b9f4d13d28de3ce256afec2ff9236b1e39e3abe273604600768506123efa4b0b307444e2006626c1d3eb5135703f45052bc0001000000000000188c8512800999ad9b6593e218ecbe90ebeac4a55ec153bfddc40ed83e41f33748255a9e5b5ce9eb2d9b57fff72265af29b0df2834f3ce69dbefc2e13b86d7c512f2681270188b4bc990559ecd6731c4f49221b19637ebd2a29fc7bdad307dc31612572d1d418761927a3db07111d852a7236397c65cd77992ad68ae5a935ccc452e00f844b7e8496448f98b0b25eef918790ad22c40c1e04c8eb13c726a820000000000000000000000000000e637b17224c491e98d9ced41ebba4469fe727d8b4db8fb7c00ba25a4fd567373563584222edd922f31d1cd9e588bbc6c984cb09f0066c6a9ca5139a3d926ec1157b52f107132b4f5f1c2cb6bf3939fe42c70bb8f70d3eb86632b968606e0dc5c08fa47a48be36984c90b60071bfd600170c90ab999b9fa20aaa3c86312fdfb2abaa9d0f30c262088891ea4e0310836cf6ea1b3b5ae7c71be2aa70748ca234c44405490a741b6adcbe47d33b768bc5db83e4456fc085192da9728a81ba420b4b0c12a513463fcc5d70c80a9fa36b9acb7032d4171085f2cc6650500a9bd0814ae8552596850e2a107ca0e4b275c19f283b94533f468648ea39b"}, 0x248) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 2.931422828s ago: executing program 3 (id=190): r0 = io_uring_setup(0x5e13, &(0x7f00000022c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000002340)=[0x2000000, 0x10001], 0x2) 2.746040681s ago: executing program 2 (id=191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x2, 0x8, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x200}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000070000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b50a0200000000007b9af8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b6090300080000004608f0ff76000000180100002020752500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85ae3414fa3a3882e041316331cd78af7a02891030ef00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x6ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010000160011040000000000000000fc020000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cf278b6e4fe182fc7f51051bf00"/184], 0x100}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) socket$kcm(0x10, 0x3, 0x10) 2.377700818s ago: executing program 1 (id=192): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x224) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.23740433s ago: executing program 3 (id=193): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.62293319s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) fanotify_init(0x20, 0x80000) r4 = open$dir(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000002a, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="a1a5983b34258a561513574b1fe3396dba76fdbb7b52b381e62e8255ab2514745d0657ac66588f63c881e035de4769961a30cf3a5e578a8f597f22aa883efde327c7d1efee7713a95b85ee809641d151f319"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) 1.609852068s ago: executing program 0 (id=195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x3, 0x3, 0x7, 0x6, 0x2, 0x4, 0x4, {0x0, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0xfffffe69, "ad"}}, 0x1a) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000c2b52ecfb3f8c5ab2ebcaa4f7e1770ec561280833bdfb41ec9271f8158fdd23ba0389743060f21acf44647d2b325198644406c8ef09ce95697015a51524daf6ad2c05ddca05c1db1218275e5b06ad1cc097cc739f7277be9b1da0d6e08841aa66e6a5b258e586d17f2cfd72cb002b5d880f9d58f84051148523a13c439445490087044e6204119255c40c23cd5c356e1c94bc90c69315fd6a07a89e2baa94e6e2eaec9d72eda0b374340ab70c1e908890a42570fc416ab9", @ANYRES16=r7, @ANYBLOB="010000000000000000001900000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008000a0006ab7a00080006001300000008001100ff03000000000000060bccb9b1f564bf43741e29201c605f134a1ca571360a0ec947b334db2f4c5c1b90a48a1192f1619eabce451a093fb3d66efeed766d7a9dbca0877b6a8729658fab090d8afcf79fe1a1d6733df2841900"/120], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x1, 0x80ce, 0xfffe, 0xfff, {{0x23, 0x4, 0x3, 0x15, 0x8c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x4, [{@local, 0x1}, {@remote, 0x8001}, {@empty, 0x7f}, {@local, 0x4}, {@loopback}]}, @end, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x8}, @private=0xa010101, @local, @broadcast, @loopback, @multicast1, @private=0xa010101]}, @generic={0x86, 0x12, "50e05afec07b746e478b37360700f248"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xef, 0x9, 0x184d, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x40, 0x10, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000680)) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000003c0)={@empty, @broadcast}, &(0x7f0000000400)=0xc) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300290afcffffff0000000007000000", @ANYRES32=r9, @ANYBLOB="00d13f08000005004945418a665a18211a523dbbfa7e232e45649f69706f5d647bcfb6a19da37f26f265d782c00cc37426cd9db5db6cdc017284178edd8a26c26123d7fa15cff0f808"], 0x2c}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local}, &(0x7f0000000480)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000001e40)={r12, 0x3, 0x6}, 0x10) 1.363111959s ago: executing program 4 (id=196): iopl(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) setregid(0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af25, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14070000", @ANYRES16=r4, @ANYBLOB="000826bd7000000000000a000000"], 0xffffffffffffff73}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0405fdffc80000"], 0x7) syz_80211_inject_frame(0x0, 0x0, 0x60) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0xfffffffc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000080)=0x10) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) io_uring_setup(0x10002edd, &(0x7f00000002c0)={0x0, 0x0, 0x8}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.283267039s ago: executing program 3 (id=197): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xfffffd67}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/219, 0xffffff4e}], 0x23a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x4000804) socket$packet(0x11, 0x3, 0x300) 748.101519ms ago: executing program 1 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}]}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)='\b\x00\x00\x00', 0x4}], 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 610.893026ms ago: executing program 1 (id=199): socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x76}, @alu={0x4, 0x1, 0x9, 0x8, 0x0, 0x18, 0x1}], &(0x7f0000000600)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 533.188143ms ago: executing program 3 (id=200): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 417.126611ms ago: executing program 0 (id=201): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xb, 0x4}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="f4", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000280), r2, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffde7, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04f3fa419d5281014f52d2164a3755e94d00000100000000"], 0xe) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000500)=""/45, 0x2d) getdents64(r7, 0x0, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 325.345012ms ago: executing program 3 (id=202): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'security.', '-\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb1ff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x4c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) recvfrom$inet_nvme(r0, &(0x7f0000000680)=""/235, 0xeb, 0x40000000, &(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x3, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 136.803532ms ago: executing program 0 (id=203): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000038c0)=@newtfilter={0x1bf8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x1bcc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xfff1}}, @TCA_FW_ACT={0x130, 0x4, [@m_sample={0x48, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x64, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="813cb47ffa56"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x1e, 0x6, "993bb44e4d511c824a40ec8aa8e76b1dfe2bb09f40f5166a1aa0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_mpls={0x80, 0x1, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46d44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22f0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f7f3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_ACT={0x350, 0x4, [@m_tunnel_key={0x108, 0x0, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}]}, {0x5a, 0x6, "4359fdbdc724c7ef9c78f291b75dd48767c1b286911fee91d2bf36cca64693b3eb7c693dc3cb35d68ff5d2ca2d4caba0f70baa34869f9347a3a7115bf454a72d4b3105238a4aaa8d8bc1ba73e8b22f2e7bcbc23e49fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xb4, 0x9, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf61}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x7, 0x1, 0xfffffff8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xef1, 0x0, 0x5, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x20000000, 0x5, 0x80000000}, 0x3}}]}, {0x21, 0x6, "85941ce8d36e34079bf6bfc773ffd6fa99d9cb27844a6cc7263730f006"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x64, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}]}, {0x20, 0x6, "43114e76aa766b6c5e455b0323326f0e46c5989e1621f65189bd416a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x12c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x0, 0x4, 0x1}, 0x2}}]}, {0xde, 0x6, "03ce70fb338199cfff8e9fa8c51b52ee359541cf6048432759cc3a6b5659d90c070f229834c6c572e50029950bc5aeef589ec3b46c0afe480edb6628d2091cdc5b6c9a6e384050305deb0276cd202224e6e3002a1a1dc195e041661ca00604a0a46223e595d8edb5b0e095097712d31f5d6e2db28abb2f533a997d4c0ec5aa19a192ccc432ff9ef539f7db05aaf781549c974cf7d15f46d3ddeebbd658f11dbcd260c00573a6342955f958f152235fd094de03b9ebbd35f57d505b1d810c6bc9e2567b005cdb2cdc78cd6e91c1a9fd7f9f1121552cab5aa664fc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0x4}, @TCA_FW_ACT={0x15e0, 0x4, [@m_ct={0x180, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fcdb0aa89963f9676c5713f5b5fee05c"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x2, 0x8}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x39}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xbf1, 0xfffffff6, 0x6, 0x511, 0x7}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xe0, 0x6, "de353e191fbf4149b5c777702cd2b0b25bd24b1d4c9879b0e54285997f1f22b90e441861f0e2d5a476530076c446b12a35ae00b5591912c87f5f3ff005f1847f7e2383d961ea5bd32e168fd11c6d8a25cce72b07f95dd81a2bae9baf801e7d9a5b49fae34ecd2795d9ef4b53be2fd464d02f22c78d520ac6195a90bf026130a985da0fac6ca2d6e1e7b5f330115847a517d1a44a98ca42166b821e0380dbe03b3bffbdf215cf03b049ae9d238f86780d94352e86df4b2e309ff9e1209e4d85ce256b1257e1aad6d028dc14b27d84ea1bd8078ec1de1058c94d4bcd9e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x138, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0x0, 0x0, 0x800}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x10000005, 0x5, 0x1000, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x9, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x0, 0x0, 0x259d}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfe, 0x0, 0x10000000}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xec, 0x2, 0x10000000}, 0x4, r2}}]}, {0x4a, 0x6, "050aa4291291d47d510bb60aaf0c24253002b361efe0b7eaa1560032b7369d9fa82221aabf1d356fddfef5a5499510892e9f2735930927d2ce99205d4f8391a488e09b533239"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x5}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x6, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x8001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x71, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x7, 0x80000}, 0xc6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x7, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1ac, 0x3, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x20000000, 0x5, 0x2}}}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6b}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0x3, 0x2}}}]}, {0x100, 0x6, "46ec4a6153f4abef9a0c48d6bfb82757fcc6f41d8e8d392794920afe06c6ee8b2a7bae859890edc38932a9dc87563df84b01610b36bb4a25dca8b33eef3393073c1372d1840b0bc643dd2aec1968d8a87c6e4ff97c7a91cc3227a4e9996f34b9273d7876a2ffa226ec2b9562a07b7ac4ae0f097d7b47f7fe1581e877065fe565ab9eedcb781e5a97cd3f956776354167205b89728abddd47e658c9c4aa4bd2c74ceb8b88fdbe574b676a422c16cb45c959c36ba1960a1e6fd9eddc8eaf303214943893b7d1e0b82f2fbe1273f75dbd82adaf63ab773abf1b6fe408f3418d6d0d8b2bf0bd3ae53e86d71a0536a500bdea41f2de4a136225399185550f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x64, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x1f, 0x6, "e3ed391d16eb1c97c12d3b085f6df4d7c83efaa0b00ae7c25c0e49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9}}, @TCA_FW_ACT={0x130, 0x4, [@m_tunnel_key={0x12c, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe000000, 0x1, 0x0, 0x0, 0x2}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0x90, 0x6, "afd95464e95d47e5a69cc41b034acd1d48cf7d976f7eae17ade112f38a4236345171808d6e1862d54cf2721170806a6fee00cbc275e2e9410be243e3ea8798c0194f9295b9fb7f366303357debb6d82aa26bb5ca968165529c76fe0551ea4771999e6ff302f3b975e480f244e373ace5bf6701db2994bcc4f20e03331f4e62b703a289df8b1c9bfe4bae83d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd}}]}}]}, 0x1bf8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 61.81732ms ago: executing program 3 (id=204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x2, 0x8, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x200}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000070000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b50a0200000000007b9af8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b6090300080000004608f0ff76000000180100002020752500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85ae3414fa3a3882e041316331cd78af7a02891030ef00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x6ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010000160011040000000000000000fc020000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cf278b6e4fe182fc7f51051bf00"/184], 0x100}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=205): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f77"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x248) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 69.087382][ T5081] cgroup: Unknown subsys name 'net' [ 69.201274][ T5081] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.925716][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.774306][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.780959][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.398159][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.407440][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.416273][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.426213][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.442189][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.446984][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.449927][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.458704][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.464595][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.471746][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.478920][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.486052][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.494279][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.500323][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.508764][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.531314][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.532714][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.540162][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.546329][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.553913][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.559826][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.567059][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.580926][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.584056][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.589446][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.595871][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.602422][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.609407][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.616908][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.631648][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.161905][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 74.286707][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 74.517134][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 74.540582][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 74.587139][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 74.599634][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.607666][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.616164][ T5094] bridge_slave_0: entered allmulticast mode [ 74.623640][ T5094] bridge_slave_0: entered promiscuous mode [ 74.633696][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.641182][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.648375][ T5094] bridge_slave_1: entered allmulticast mode [ 74.656130][ T5094] bridge_slave_1: entered promiscuous mode [ 74.663884][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.671318][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.678513][ T5095] bridge_slave_0: entered allmulticast mode [ 74.685886][ T5095] bridge_slave_0: entered promiscuous mode [ 74.695235][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.702510][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.709768][ T5095] bridge_slave_1: entered allmulticast mode [ 74.717453][ T5095] bridge_slave_1: entered promiscuous mode [ 74.870235][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.886832][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.915934][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.940343][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.033359][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.040956][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.048250][ T5096] bridge_slave_0: entered allmulticast mode [ 75.056291][ T5096] bridge_slave_0: entered promiscuous mode [ 75.087166][ T5094] team0: Port device team_slave_0 added [ 75.096928][ T5094] team0: Port device team_slave_1 added [ 75.106703][ T5095] team0: Port device team_slave_0 added [ 75.113768][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.121822][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.129058][ T5096] bridge_slave_1: entered allmulticast mode [ 75.136439][ T5096] bridge_slave_1: entered promiscuous mode [ 75.155245][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.162630][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.169833][ T5093] bridge_slave_0: entered allmulticast mode [ 75.181447][ T5093] bridge_slave_0: entered promiscuous mode [ 75.228425][ T5095] team0: Port device team_slave_1 added [ 75.268905][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.277054][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.284512][ T5093] bridge_slave_1: entered allmulticast mode [ 75.292184][ T5093] bridge_slave_1: entered promiscuous mode [ 75.312972][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.320044][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.346799][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.375251][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.382410][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.409083][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.423712][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.438087][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.460144][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.467477][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.475241][ T5098] bridge_slave_0: entered allmulticast mode [ 75.483451][ T5098] bridge_slave_0: entered promiscuous mode [ 75.491958][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.498931][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.525293][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.537462][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.544694][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.570674][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.611860][ T5110] Bluetooth: hci2: command tx timeout [ 75.630877][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.638039][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.645885][ T5098] bridge_slave_1: entered allmulticast mode [ 75.653968][ T5098] bridge_slave_1: entered promiscuous mode [ 75.690942][ T5110] Bluetooth: hci0: command tx timeout [ 75.693353][ T4488] Bluetooth: hci4: command tx timeout [ 75.696708][ T5110] Bluetooth: hci3: command tx timeout [ 75.702824][ T5106] Bluetooth: hci1: command tx timeout [ 75.718959][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.733315][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.759456][ T5096] team0: Port device team_slave_0 added [ 75.768850][ T5096] team0: Port device team_slave_1 added [ 75.777651][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.843333][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.884318][ T5094] hsr_slave_0: entered promiscuous mode [ 75.895002][ T5094] hsr_slave_1: entered promiscuous mode [ 75.906319][ T5098] team0: Port device team_slave_0 added [ 75.918892][ T5098] team0: Port device team_slave_1 added [ 75.937374][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.944838][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.971210][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.021556][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.028540][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.055081][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.070046][ T5093] team0: Port device team_slave_0 added [ 76.081570][ T5095] hsr_slave_0: entered promiscuous mode [ 76.088322][ T5095] hsr_slave_1: entered promiscuous mode [ 76.096308][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.104431][ T5095] Cannot create hsr debugfs directory [ 76.145210][ T5093] team0: Port device team_slave_1 added [ 76.173831][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.184057][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.210728][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.224607][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.232513][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.259985][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.343527][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.351023][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.377107][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.395145][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.402191][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.428748][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.518583][ T5096] hsr_slave_0: entered promiscuous mode [ 76.526416][ T5096] hsr_slave_1: entered promiscuous mode [ 76.533762][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.542066][ T5096] Cannot create hsr debugfs directory [ 76.627586][ T5093] hsr_slave_0: entered promiscuous mode [ 76.634746][ T5093] hsr_slave_1: entered promiscuous mode [ 76.641609][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.649194][ T5093] Cannot create hsr debugfs directory [ 76.666997][ T5098] hsr_slave_0: entered promiscuous mode [ 76.673793][ T5098] hsr_slave_1: entered promiscuous mode [ 76.679909][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.687566][ T5098] Cannot create hsr debugfs directory [ 77.170780][ T5094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.183140][ T5094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.195993][ T5094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.206922][ T5094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.264392][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.294134][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.305932][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.317575][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.377569][ T5096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.418608][ T5096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.429915][ T5096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.441292][ T5096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.602283][ T5093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.616680][ T5093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.627352][ T5093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.653875][ T5093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.702053][ T5106] Bluetooth: hci2: command tx timeout [ 77.744982][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.770968][ T5106] Bluetooth: hci4: command tx timeout [ 77.771200][ T5115] Bluetooth: hci1: command tx timeout [ 77.776513][ T4488] Bluetooth: hci3: command tx timeout [ 77.782009][ T5115] Bluetooth: hci0: command tx timeout [ 77.863967][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.878395][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.907564][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.916223][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.930335][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.979351][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.990509][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.998074][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.044390][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.051621][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.076349][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.147480][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.183782][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.200049][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.234795][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.242030][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.254031][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.261277][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.286470][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.305514][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.312743][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.348455][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.355660][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.450142][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.533690][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.540904][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.578203][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.585466][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.656914][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.696705][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.828567][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.866073][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.873500][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.900592][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.907800][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.979108][ T5095] veth0_vlan: entered promiscuous mode [ 79.037248][ T5095] veth1_vlan: entered promiscuous mode [ 79.113503][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.242067][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.267329][ T5095] veth0_macvtap: entered promiscuous mode [ 79.279406][ T5095] veth1_macvtap: entered promiscuous mode [ 79.327228][ T5094] veth0_vlan: entered promiscuous mode [ 79.358212][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.384263][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.422628][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.442876][ T5094] veth1_vlan: entered promiscuous mode [ 79.471069][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.480153][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.509717][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.519564][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.621337][ T5094] veth0_macvtap: entered promiscuous mode [ 79.700829][ T5094] veth1_macvtap: entered promiscuous mode [ 79.729181][ T5096] veth0_vlan: entered promiscuous mode [ 79.743216][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.771828][ T5115] Bluetooth: hci2: command tx timeout [ 79.798840][ T5096] veth1_vlan: entered promiscuous mode [ 79.820247][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.831906][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.846765][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.851028][ T5115] Bluetooth: hci0: command tx timeout [ 79.859613][ T5115] Bluetooth: hci3: command tx timeout [ 79.860458][ T4488] Bluetooth: hci4: command tx timeout [ 79.865510][ T5115] Bluetooth: hci1: command tx timeout [ 79.933613][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.946813][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.977252][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.988083][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.000300][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.028110][ T2814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.036736][ T2814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.065405][ T5094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.074617][ T5094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.085728][ T5094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.096982][ T5094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.135768][ T5096] veth0_macvtap: entered promiscuous mode [ 80.252489][ T5093] veth0_vlan: entered promiscuous mode [ 80.320723][ T5096] veth1_macvtap: entered promiscuous mode [ 80.354420][ T5098] veth0_vlan: entered promiscuous mode [ 80.378785][ T5093] veth1_vlan: entered promiscuous mode [ 80.428436][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.439293][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.449768][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.460869][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.474507][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.498527][ T5182] Zero length message leads to an empty skb [ 80.509964][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.530149][ T5098] veth1_vlan: entered promiscuous mode [ 80.540124][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.564535][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.589067][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.599652][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.616079][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.641165][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.698925][ T2424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.717651][ T2424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.732448][ T5096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.744500][ T5096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840654][ T5096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.849936][ T5096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.456649][ T5093] veth0_macvtap: entered promiscuous mode [ 81.525341][ T5093] veth1_macvtap: entered promiscuous mode [ 81.571111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.584643][ T5098] veth0_macvtap: entered promiscuous mode [ 81.851208][ T5115] Bluetooth: hci2: command tx timeout [ 81.931812][ T5115] Bluetooth: hci4: command tx timeout [ 81.931964][ T4488] Bluetooth: hci1: command tx timeout [ 81.937386][ T5115] Bluetooth: hci3: command tx timeout [ 81.943419][ T5110] Bluetooth: hci0: command tx timeout [ 82.186826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.277240][ T5098] veth1_macvtap: entered promiscuous mode [ 82.318665][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.351745][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.363027][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.375395][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.386275][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.399349][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.414999][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.479719][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.501348][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.520577][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.561775][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.591421][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.610914][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.626000][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.641356][ T5197] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xe [ 82.646838][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.698388][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.770177][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.800722][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.835373][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.857699][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.873832][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.888762][ T5203] FAULT_INJECTION: forcing a failure. [ 82.888762][ T5203] name failslab, interval 1, probability 0, space 0, times 1 [ 82.900469][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.910288][ T5203] CPU: 0 PID: 5203 Comm: syz.2.9 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 82.920782][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 82.930872][ T5203] Call Trace: [ 82.932717][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.934162][ T5203] [ 82.944768][ T5203] dump_stack_lvl+0x241/0x360 [ 82.949507][ T5203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.954754][ T5203] ? __pfx__printk+0x10/0x10 [ 82.959412][ T5203] ? __pfx___might_resched+0x10/0x10 [ 82.964749][ T5203] should_fail_ex+0x3b0/0x4e0 [ 82.969453][ T5203] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 82.975216][ T5203] should_failslab+0x9/0x20 [ 82.979774][ T5203] __kmalloc_noprof+0xd8/0x400 [ 82.984663][ T5203] ? kfree+0x4e/0x360 [ 82.988778][ T5203] tomoyo_realpath_from_path+0xcf/0x5e0 [ 82.994378][ T5203] tomoyo_path_number_perm+0x23a/0x880 [ 82.999882][ T5203] ? tomoyo_path_number_perm+0x208/0x880 [ 83.005559][ T5203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.011631][ T5203] ? __fget_files+0x29/0x470 [ 83.012827][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.016258][ T5203] ? __fget_files+0x3f6/0x470 [ 83.027289][ T2424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.028714][ T5203] ? __fget_files+0x29/0x470 [ 83.039704][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.041111][ T5203] security_file_ioctl+0x75/0xb0 [ 83.041175][ T5203] __se_sys_ioctl+0x47/0x170 [ 83.050306][ T2424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.053361][ T5203] do_syscall_64+0xf3/0x230 [ 83.053392][ T5203] ? clear_bhb_loop+0x35/0x90 [ 83.074665][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.080868][ T5203] RIP: 0033:0x7ffaac175b59 [ 83.085325][ T5203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.104973][ T5203] RSP: 002b:00007ffaabbff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.113442][ T5203] RAX: ffffffffffffffda RBX: 00007ffaac305f60 RCX: 00007ffaac175b59 [ 83.121460][ T5203] RDX: 0000000000000000 RSI: 0000000080045505 RDI: 0000000000000003 [ 83.129471][ T5203] RBP: 00007ffaabbff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.137474][ T5203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.145488][ T5203] R13: 000000000000000b R14: 00007ffaac305f60 R15: 00007ffebf51b0f8 [ 83.153539][ T5203] [ 83.172520][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.206003][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.239469][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.242399][ T5203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 83.262976][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.273233][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.316109][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.339965][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.356070][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.394100][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.419438][ T5093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444146][ T29] audit: type=1326 audit(1721625466.276:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.3.10" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8af6d75b59 code=0x0 [ 83.470506][ T5093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.479452][ T5093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.514957][ T5093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.554162][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.574135][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.592675][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603446][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.905232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.620492][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.628370][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.711358][ T4488] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 84.751156][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.771691][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.783476][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.847947][ T2424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.857056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.904015][ T2424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.923745][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.933525][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.036304][ T8] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.110982][ T8] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.128016][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.140289][ T8] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 85.150274][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.165528][ T5228] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 85.198909][ T5228] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 85.245192][ T8] usb 3-1: config 0 descriptor?? [ 85.438469][ T5231] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.518548][ T5231] bond_slave_0: entered promiscuous mode [ 85.524679][ T5231] bond_slave_1: entered promiscuous mode [ 85.608018][ T5230] bond_slave_0: left promiscuous mode [ 85.613887][ T5230] bond_slave_1: left promiscuous mode [ 85.873627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.008770][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 86.279851][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.502780][ T8] usb 3-1: USB disconnect, device number 2 [ 86.587650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.651187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.660046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.668910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.677552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.441193][ T5260] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.190754][ T5155] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.451205][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 88.463233][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 88.483233][ T5276] FAULT_INJECTION: forcing a failure. [ 88.483233][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 88.494712][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 88.516667][ T5276] CPU: 1 PID: 5276 Comm: syz.3.21 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 88.526274][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 88.533742][ T5155] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.536342][ T5276] Call Trace: [ 88.536383][ T5276] [ 88.536394][ T5276] dump_stack_lvl+0x241/0x360 [ 88.536429][ T5276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.536454][ T5276] ? __pfx__printk+0x10/0x10 [ 88.536493][ T5276] ? __pfx___might_resched+0x10/0x10 [ 88.536532][ T5276] should_fail_ex+0x3b0/0x4e0 [ 88.536574][ T5276] should_failslab+0x9/0x20 [ 88.536596][ T5276] __kmalloc_node_noprof+0xdf/0x440 [ 88.536620][ T5276] ? __kvmalloc_node_noprof+0x72/0x190 [ 88.536654][ T5276] __kvmalloc_node_noprof+0x72/0x190 [ 88.536682][ T5276] proc_sys_call_handler+0x3dc/0x8b0 [ 88.536725][ T5276] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 88.536776][ T5276] vfs_write+0xa72/0xc90 [ 88.536812][ T5276] ? __pfx_proc_sys_write+0x10/0x10 [ 88.536848][ T5276] ? __pfx_vfs_write+0x10/0x10 [ 88.536901][ T5276] ksys_write+0x1a0/0x2c0 [ 88.563867][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.566676][ T5276] ? __pfx_ksys_write+0x10/0x10 [ 88.639660][ T5276] ? do_syscall_64+0x100/0x230 [ 88.644474][ T5276] ? do_syscall_64+0xb6/0x230 [ 88.649210][ T5276] do_syscall_64+0xf3/0x230 [ 88.653758][ T5276] ? clear_bhb_loop+0x35/0x90 [ 88.658486][ T5276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.664430][ T5276] RIP: 0033:0x7f8af6d75b59 [ 88.668880][ T5276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.688364][ T5155] usb 1-1: config 0 descriptor?? [ 88.688499][ T5276] RSP: 002b:00007f8af7a72048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.702172][ T5276] RAX: ffffffffffffffda RBX: 00007f8af6f06038 RCX: 00007f8af6d75b59 [ 88.708016][ T5155] hub 1-1:0.0: USB hub found [ 88.710161][ T5276] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000006 [ 88.710182][ T5276] RBP: 00007f8af7a720a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.710198][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.739113][ T5276] R13: 000000000000006e R14: 00007f8af6f06038 R15: 00007ffe0883e148 [ 88.747151][ T5276] [ 88.916838][ T5155] hub 1-1:0.0: 1 port detected [ 89.107631][ T4488] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 89.117661][ T5155] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 89.145849][ T5155] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 89.228982][ T5155] usbhid 1-1:0.0: can't add hid device: -71 [ 89.251421][ T5155] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.332663][ T5155] usb 1-1: USB disconnect, device number 2 [ 89.575267][ T5298] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 89.605778][ T5298] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 89.680664][ T5150] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.807201][ T4488] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 89.958634][ T5150] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 89.977875][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.985971][ T5150] usb 5-1: Product: syz [ 89.990137][ T5150] usb 5-1: Manufacturer: syz [ 89.997926][ T5311] bond_slave_0: entered promiscuous mode [ 90.003786][ T5311] bond_slave_1: entered promiscuous mode [ 90.014515][ T5150] usb 5-1: SerialNumber: syz [ 90.022538][ T5150] usb 5-1: config 0 descriptor?? [ 90.042780][ T4488] Bluetooth: hci5: urb ffff888028f4bd00 submission failed (2) [ 90.488515][ T5302] bond_slave_0: left promiscuous mode [ 90.494143][ T5302] bond_slave_1: left promiscuous mode [ 90.864569][ T4488] Bluetooth: hci2: command tx timeout [ 91.130568][ T4488] Bluetooth: hci1: command tx timeout [ 91.592822][ T5327] FAULT_INJECTION: forcing a failure. [ 91.592822][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 91.701608][ T5327] CPU: 1 PID: 5327 Comm: syz.3.31 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 91.711216][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 91.721316][ T5327] Call Trace: [ 91.724623][ T5327] [ 91.726895][ T5188] usb 5-1: USB disconnect, device number 2 [ 91.727566][ T5327] dump_stack_lvl+0x241/0x360 [ 91.738277][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.743609][ T5327] ? __pfx__printk+0x10/0x10 [ 91.748255][ T5327] ? __pfx___might_resched+0x10/0x10 [ 91.753590][ T5327] should_fail_ex+0x3b0/0x4e0 [ 91.758316][ T5327] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 91.764081][ T5327] should_failslab+0x9/0x20 [ 91.768624][ T5327] __kmalloc_noprof+0xd8/0x400 [ 91.773427][ T5327] ? kfree+0x4e/0x360 [ 91.777448][ T5327] tomoyo_realpath_from_path+0xcf/0x5e0 [ 91.783143][ T5327] tomoyo_path_number_perm+0x23a/0x880 [ 91.788656][ T5327] ? tomoyo_path_number_perm+0x208/0x880 [ 91.794352][ T5327] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.800527][ T5327] ? __fget_files+0x29/0x470 [ 91.805201][ T5327] ? __fget_files+0x3f6/0x470 [ 91.810023][ T5327] ? __fget_files+0x29/0x470 [ 91.814686][ T5327] security_file_ioctl+0x75/0xb0 [ 91.819687][ T5327] __se_sys_ioctl+0x47/0x170 [ 91.824314][ T5327] do_syscall_64+0xf3/0x230 [ 91.828824][ T5327] ? clear_bhb_loop+0x35/0x90 [ 91.833536][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.839481][ T5327] RIP: 0033:0x7f8af6d75b59 [ 91.844034][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.863865][ T5327] RSP: 002b:00007f8af7a93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.872334][ T5327] RAX: ffffffffffffffda RBX: 00007f8af6f05f60 RCX: 00007f8af6d75b59 [ 91.880360][ T5327] RDX: 0000000000000000 RSI: 000000000000ae04 RDI: 0000000000000003 [ 91.888387][ T5327] RBP: 00007f8af7a930a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.896406][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.904435][ T5327] R13: 000000000000000b R14: 00007f8af6f05f60 R15: 00007ffe0883e148 [ 91.912474][ T5327] [ 91.943862][ T5327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.170682][ T5151] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.357565][ T2532] cfg80211: failed to load regulatory.db [ 92.452076][ T4488] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 92.652743][ T5339] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 92.681899][ T5151] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.781489][ T5151] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.820768][ T5339] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 93.090856][ T5188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.176767][ T5151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.186244][ T5151] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 93.197184][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.208155][ T5151] usb 3-1: config 0 descriptor?? [ 93.371325][ T5188] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 93.414792][ T5188] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 93.471982][ T5188] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 93.507785][ T5188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.645339][ T5350] FAULT_INJECTION: forcing a failure. [ 93.645339][ T5350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.730511][ T5350] CPU: 1 PID: 5350 Comm: syz.4.37 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 93.740128][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.750225][ T5350] Call Trace: [ 93.753539][ T5350] [ 93.756516][ T5350] dump_stack_lvl+0x241/0x360 [ 93.761338][ T5350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.766590][ T5350] ? __pfx__printk+0x10/0x10 [ 93.771236][ T5350] ? __pfx_lock_release+0x10/0x10 [ 93.776333][ T5350] should_fail_ex+0x3b0/0x4e0 [ 93.781094][ T5350] _copy_from_user+0x2f/0xe0 [ 93.785736][ T5350] copy_msghdr_from_user+0xae/0x680 [ 93.790979][ T5350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.796931][ T5350] do_recvmmsg+0x40f/0xae0 [ 93.801485][ T5350] ? __pfx_lock_release+0x10/0x10 [ 93.806571][ T5350] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.811576][ T5350] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 93.817515][ T5350] ? ksys_write+0x23e/0x2c0 [ 93.822064][ T5350] ? __pfx_lock_release+0x10/0x10 [ 93.827121][ T5350] ? vfs_write+0x7c4/0xc90 [ 93.831658][ T5350] ? __mutex_unlock_slowpath+0x21d/0x750 [ 93.837323][ T5350] ? __fget_files+0x3f6/0x470 [ 93.842121][ T5350] __x64_sys_recvmmsg+0x199/0x250 [ 93.847168][ T5350] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.852741][ T5350] ? do_syscall_64+0x100/0x230 [ 93.857530][ T5350] ? do_syscall_64+0xb6/0x230 [ 93.862271][ T5350] do_syscall_64+0xf3/0x230 [ 93.866791][ T5350] ? clear_bhb_loop+0x35/0x90 [ 93.871492][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.877584][ T5350] RIP: 0033:0x7ffa40375b59 [ 93.882024][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.901657][ T5350] RSP: 002b:00007ffa41134048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.910152][ T5350] RAX: ffffffffffffffda RBX: 00007ffa40506038 RCX: 00007ffa40375b59 [ 93.918156][ T5350] RDX: 00000000000005df RSI: 0000000020000b40 RDI: 0000000000000005 [ 93.926149][ T5350] RBP: 00007ffa411340a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.934286][ T5350] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 93.942270][ T5350] R13: 000000000000006e R14: 00007ffa40506038 R15: 00007fff6d117368 [ 93.950275][ T5350] [ 94.038178][ T5338] usb usb9: usbfs: process 5338 (syz.0.34) did not claim interface 0 before use [ 94.085804][ T5338] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 94.097986][ C0] hrtimer: interrupt took 171178 ns [ 94.141465][ T5188] usb 1-1: string descriptor 0 read error: -71 [ 94.188961][ T5151] usbhid 3-1:0.0: can't add hid device: -71 [ 94.196575][ T5151] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.216159][ T5188] usb 1-1: USB disconnect, device number 3 [ 94.235255][ T5151] usb 3-1: USB disconnect, device number 3 [ 94.490662][ T4488] Bluetooth: hci1: command tx timeout [ 95.786114][ T5365] bond_slave_0: entered promiscuous mode [ 95.792175][ T5365] bond_slave_1: entered promiscuous mode [ 95.829357][ T5366] capability: warning: `syz.0.39' uses deprecated v2 capabilities in a way that may be insecure [ 96.026011][ T4488] Bluetooth: hci3: unexpected event 0x09 length: 17 > 3 [ 96.254763][ T5372] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 96.276445][ T5372] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 96.412951][ T5357] bond_slave_0: left promiscuous mode [ 96.418574][ T5357] bond_slave_1: left promiscuous mode [ 97.514295][ T4488] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 98.091727][ T4488] Bluetooth: hci3: command tx timeout [ 98.864419][ T4488] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 100.873921][ T5405] sched: RT throttling activated [ 101.162832][ T5412] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 101.171724][ T5412] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 101.348936][ T5416] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 101.374076][ T5416] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 101.408617][ T5416] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 103.477720][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 103.684950][ T4488] Bluetooth: hci3: unexpected event 0x09 length: 17 > 3 [ 103.846779][ T5446] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 103.876225][ T5446] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 104.143770][ T5456] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 104.160607][ T5456] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 104.198169][ T5456] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 104.302094][ T5461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.333118][ T5461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.595751][ T2532] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.862553][ T2532] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 105.450724][ T4488] Bluetooth: hci3: command tx timeout [ 105.494428][ T2532] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 105.509837][ T2532] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.546215][ T5468] netlink: 116 bytes leftover after parsing attributes in process `syz.1.70'. [ 105.576418][ T2532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.870514][ T5155] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.140334][ T5459] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 106.252446][ T5155] usb 2-1: Using ep0 maxpacket: 16 [ 106.287418][ T5155] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 106.312185][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.334768][ T5155] usb 2-1: Product: syz [ 106.339224][ T4488] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 106.353973][ T5155] usb 2-1: Manufacturer: syz [ 106.358724][ T5155] usb 2-1: SerialNumber: syz [ 106.369885][ T5155] r8152-cfgselector 2-1: Unknown version 0x0000 [ 106.376545][ T5155] r8152-cfgselector 2-1: config 0 descriptor?? [ 106.601444][ T5468] netlink: 'syz.1.70': attribute type 25 has an invalid length. [ 106.805320][ T5468] netlink: 'syz.1.70': attribute type 7 has an invalid length. [ 106.828555][ T5155] r8152-cfgselector 2-1: Unknown version 0x0000 [ 106.864838][ T5155] r8152-cfgselector 2-1: bad CDC descriptors [ 106.898602][ T5155] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 108.410650][ T4488] Bluetooth: hci3: command tx timeout [ 108.600874][ T2532] usb 4-1: USB disconnect, device number 2 [ 108.655559][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 108.717878][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 108.727816][ T5488] Bluetooth: MGMT ver 1.23 [ 108.741592][ T5488] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 109.949295][ T4488] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 110.103391][ T5507] bond_slave_0: entered promiscuous mode [ 110.116201][ T5507] bond_slave_1: entered promiscuous mode [ 110.127619][ T5505] bond_slave_0: left promiscuous mode [ 110.133171][ T5505] bond_slave_1: left promiscuous mode [ 110.151089][ T5517] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 110.159945][ T5517] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 110.321901][ T5150] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.440528][ T5149] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.482565][ T5526] bond_slave_0: entered promiscuous mode [ 110.488405][ T5526] bond_slave_1: entered promiscuous mode [ 110.515449][ T5150] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 110.531934][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.548753][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.564194][ T5150] usb 3-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 110.575849][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.589220][ T5150] usb 3-1: config 0 descriptor?? [ 110.605598][ T5150] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 110.618054][ T5150] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 110.645040][ T5149] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 110.667392][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.677641][ T5149] usb 5-1: Product: syz [ 110.686242][ T5149] usb 5-1: Manufacturer: syz [ 110.695982][ T5149] usb 5-1: SerialNumber: syz [ 110.706444][ T5149] usb 5-1: config 0 descriptor?? [ 110.741203][ T4488] Bluetooth: hci5: urb ffff888028fcfb00 submission failed (2) [ 110.857451][ T2532] usb 3-1: USB disconnect, device number 4 [ 110.879393][ T2532] ftdi_sio 3-1:0.0: device disconnected [ 110.892177][ T4488] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.901805][ T4488] Bluetooth: hci0: Injecting HCI hardware error event [ 110.910318][ T4488] Bluetooth: hci0: hardware error 0x00 [ 111.153896][ T5520] bond_slave_0: left promiscuous mode [ 111.159490][ T5520] bond_slave_1: left promiscuous mode [ 111.803688][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 111.828715][ T5551] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 112.030604][ T5110] Bluetooth: hci1: command tx timeout [ 113.270471][ T4488] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.396768][ T2532] usb 5-1: USB disconnect, device number 3 [ 113.933696][ T5580] bond_slave_0: entered promiscuous mode [ 113.939499][ T5580] bond_slave_1: entered promiscuous mode [ 114.138137][ T4488] Bluetooth: hci1: command tx timeout [ 114.424345][ T5569] bond_slave_0: left promiscuous mode [ 114.430004][ T5569] bond_slave_1: left promiscuous mode [ 114.603144][ T4488] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 114.838555][ T5599] fuse: Bad value for 'fd' [ 114.880715][ T5150] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.916873][ T5602] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 114.935679][ T5602] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 115.254189][ T5150] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 115.266560][ T5150] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.282578][ T5150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.301666][ T5150] usb 4-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 115.311523][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.770522][ T5150] usb 4-1: config 0 descriptor?? [ 116.111724][ T5150] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 116.162119][ T5150] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 116.200569][ T5150] usb 4-1: USB disconnect, device number 3 [ 116.218295][ T5150] ftdi_sio 4-1:0.0: device disconnected [ 116.532120][ T5188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.651562][ T4488] Bluetooth: hci4: command tx timeout [ 116.902255][ T5110] Bluetooth: hci2: command tx timeout [ 117.385292][ T5188] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.427881][ T5188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.476858][ T5188] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.532144][ T5188] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.555095][ T5188] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.582284][ T5188] usb 2-1: Manufacturer: syz [ 117.626718][ T5188] usb 2-1: config 0 descriptor?? [ 117.652046][ T5188] igorplugusb 2-1:0.0: incorrect number of endpoints [ 118.177365][ T5150] usb 2-1: USB disconnect, device number 3 [ 119.331885][ T5645] fuse: Bad value for 'fd' [ 119.574399][ T5110] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 120.493765][ T5654] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 120.546959][ T5654] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 120.782641][ T5150] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.128889][ T5150] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 121.170090][ T5150] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.264453][ T5150] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.335341][ T5110] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 121.404638][ T5150] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 121.477032][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.537305][ T5150] usb 5-1: config 0 descriptor?? [ 121.564812][ T5150] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 121.587627][ T5150] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 121.614594][ T5110] Bluetooth: hci2: command tx timeout [ 121.657658][ T5682] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 121.683123][ T5682] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 121.852614][ T5150] usb 5-1: USB disconnect, device number 4 [ 121.892091][ T5150] ftdi_sio 5-1:0.0: device disconnected [ 123.370467][ T5110] Bluetooth: hci4: command tx timeout [ 123.620828][ T5150] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.789787][ T5702] fuse: Bad value for 'fd' [ 123.848453][ T5150] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 123.879952][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.900508][ T5150] usb 3-1: Product: syz [ 123.907064][ T5150] usb 3-1: Manufacturer: syz [ 123.917818][ T5150] usb 3-1: SerialNumber: syz [ 123.947139][ T5150] usb 3-1: config 0 descriptor?? [ 123.995103][ T5110] Bluetooth: hci5: urb ffff888028fb6100 submission failed (2) [ 124.373580][ T5719] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 124.385872][ T5719] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 125.492510][ T5150] usb 3-1: USB disconnect, device number 5 [ 125.664814][ T5732] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.820822][ T5110] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 126.686275][ T5110] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 126.702330][ T5110] Bluetooth: hci3: Injecting HCI hardware error event [ 126.710918][ T5110] Bluetooth: hci3: hardware error 0x00 [ 127.369790][ T5743] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 127.393334][ T5743] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 127.850550][ T4488] Bluetooth: hci2: command tx timeout [ 128.334324][ T5760] bond_slave_0: entered promiscuous mode [ 128.340081][ T5760] bond_slave_1: entered promiscuous mode [ 128.348215][ T5758] bond_slave_0: left promiscuous mode [ 128.353772][ T5758] bond_slave_1: left promiscuous mode [ 128.660590][ T4488] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 128.669999][ T4488] Bluetooth: hci2: Injecting HCI hardware error event [ 128.679152][ T5106] Bluetooth: hci2: hardware error 0x00 [ 129.300723][ T5110] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 129.722924][ T5786] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 129.731679][ T5786] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 130.621034][ T5188] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.999662][ T5106] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 131.096953][ T5817] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 131.116849][ T5817] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 131.189342][ T5188] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 131.213496][ T5188] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.230336][ T5188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.485441][ T5188] usb 4-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 131.510338][ T5188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.563331][ T5188] usb 4-1: config 0 descriptor?? [ 131.580880][ T5188] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 131.611147][ T5188] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 131.631728][ T5821] bond_slave_0: entered promiscuous mode [ 131.637445][ T5821] bond_slave_1: entered promiscuous mode [ 131.664130][ T5820] bond_slave_0: left promiscuous mode [ 131.669617][ T5820] bond_slave_1: left promiscuous mode [ 131.883406][ T5150] usb 4-1: USB disconnect, device number 4 [ 131.926915][ T5150] ftdi_sio 4-1:0.0: device disconnected [ 133.618909][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.650508][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.401038][ T5106] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 135.667351][ T5862] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 135.690126][ T5862] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 136.029656][ T5875] bond_slave_0: entered promiscuous mode [ 136.035537][ T5875] bond_slave_1: entered promiscuous mode [ 136.410608][ T5106] Bluetooth: hci4: command tx timeout [ 136.576025][ T5863] bond_slave_0: left promiscuous mode [ 136.581606][ T5863] bond_slave_1: left promiscuous mode [ 136.962126][ T5883] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 136.972965][ T5883] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 137.970956][ T5188] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.067395][ T5106] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 138.219136][ T5188] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 138.276275][ T5188] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.329941][ T5188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.590165][ T5188] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 138.622723][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.652126][ T5188] usb 5-1: config 0 descriptor?? [ 138.669004][ T5188] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 138.680893][ T5188] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 138.788747][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 138.984880][ T5149] usb 5-1: USB disconnect, device number 5 [ 139.026184][ T5149] ftdi_sio 5-1:0.0: device disconnected [ 139.032558][ T5914] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 139.048777][ T5914] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 139.474743][ C0] eth0: bad gso: type: 1, size: 1408 [ 139.985040][ T5934] bond_slave_0: entered promiscuous mode [ 139.990837][ T5934] bond_slave_1: entered promiscuous mode [ 140.091016][ T5106] Bluetooth: hci4: command tx timeout [ 140.550706][ T5149] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.572654][ T5921] bond_slave_0: left promiscuous mode [ 140.578229][ T5921] bond_slave_1: left promiscuous mode [ 140.776816][ T5149] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 140.799479][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.823214][ T5149] usb 5-1: Product: syz [ 140.837550][ T5149] usb 5-1: Manufacturer: syz [ 140.869321][ T5149] usb 5-1: SerialNumber: syz [ 140.897081][ T5149] usb 5-1: config 0 descriptor?? [ 140.961496][ T5106] Bluetooth: hci5: urb ffff8880278b1700 submission failed (2) [ 141.167815][ T5106] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 141.197974][ T2532] usb 5-1: USB disconnect, device number 6 [ 141.282328][ T5926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.338273][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 141.353789][ C0] ------------[ cut here ]------------ [ 141.359602][ C0] WARNING: CPU: 0 PID: 5961 at net/sched/sch_cake.c:2094 cake_dequeue+0x2af1/0x4690 [ 141.369088][ C0] Modules linked in: [ 141.373073][ C0] CPU: 0 PID: 5961 Comm: syz.0.205 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 141.382821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 141.392998][ C0] RIP: 0010:cake_dequeue+0x2af1/0x4690 [ 141.398505][ C0] Code: 74 08 4c 89 f7 e8 af d7 6b f8 4d 89 26 eb 05 e8 75 e1 08 f8 45 31 f6 4c 8b a4 24 08 01 00 00 e9 d4 de ff ff e8 60 e1 08 f8 90 <0f> 0b 90 48 8b 94 24 f0 00 00 00 48 89 d0 48 c1 e8 03 42 0f b6 04 [ 141.418219][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00010246 [ 141.424379][ C0] RAX: ffffffff898a6160 RBX: 000000000000ffff RCX: ffff888020bb1e00 [ 141.432417][ C0] RDX: 0000000080000101 RSI: 000000000000ffff RDI: 0000000000000400 [ 141.440476][ C0] RBP: ffffc90000007c28 R08: ffffffff898a5f7c R09: ffffffff898a69e5 [ 141.448475][ C0] R10: 0000000000000003 R11: ffff888020bb1e00 R12: ffff888062900010 [ 141.456482][ C0] R13: dffffc0000000000 R14: 000000000000ffff R15: ffff888062900000 [ 141.464502][ C0] FS: 00007f04d09016c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 141.473482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.480102][ C0] CR2: 0000000020043000 CR3: 0000000021f4c000 CR4: 00000000003506f0 [ 141.488108][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.496122][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.504124][ C0] Call Trace: [ 141.507406][ C0] [ 141.510250][ C0] ? __warn+0x163/0x4e0 [ 141.514437][ C0] ? cake_dequeue+0x2af1/0x4690 [ 141.519297][ C0] ? report_bug+0x2b3/0x500 [ 141.523829][ C0] ? cake_dequeue+0x2af1/0x4690 [ 141.528686][ C0] ? handle_bug+0x3e/0x70 [ 141.533053][ C0] ? exc_invalid_op+0x1a/0x50 [ 141.537825][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 141.542885][ C0] ? cake_dequeue+0x3375/0x4690 [ 141.547745][ C0] ? cake_dequeue+0x290c/0x4690 [ 141.552664][ C0] ? cake_dequeue+0x2af0/0x4690 [ 141.557523][ C0] ? cake_dequeue+0x2af1/0x4690 [ 141.562423][ C0] ? mark_lock+0x9a/0x350 [ 141.566781][ C0] ? __pfx_cake_dequeue+0x10/0x10 [ 141.571839][ C0] __qdisc_run+0x272/0x2170 [ 141.576447][ C0] qdisc_run+0xda/0x270 [ 141.580842][ C0] net_tx_action+0x89c/0xa50 [ 141.585462][ C0] ? net_tx_action+0x708/0xa50 [ 141.590236][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 141.595393][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.601776][ C0] handle_softirqs+0x2c4/0x970 [ 141.606548][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 141.611342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 141.616638][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 141.621881][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 141.626488][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 141.631718][ C0] irq_exit_rcu+0x9/0x30 [ 141.635965][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 141.641630][ C0] [ 141.644560][ C0] [ 141.647491][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.653501][ C0] RIP: 0010:iowrite16+0x37/0x90 [ 141.658360][ C0] Code: 9c e5 fc 48 81 fb 00 00 04 00 72 0a e8 52 9c e5 fc 66 89 2b eb 59 48 81 fb 01 00 01 00 72 0d e8 3f 9c e5 fc 89 e8 89 da 66 ef 43 8b 2d 11 1a f6 09 31 ff 89 ee e8 68 a0 e5 fc 85 ed 74 2b e8 [ 141.678084][ C0] RSP: 0018:ffffc90013caf928 EFLAGS: 00000287 [ 141.684192][ C0] RAX: 0000000000000000 RBX: 000000000001c0b0 RCX: 0000000000040000 [ 141.692190][ C0] RDX: 000000000001c0b0 RSI: 00000000000110dd RDI: 00000000000110de [ 141.700246][ C0] RBP: 0000000000000000 R08: ffffffff851d9580 R09: ffff88801f848998 [ 141.708273][ C0] R10: dffffc0000000000 R11: ffffffff851eec90 R12: dffffc0000000000 [ 141.716386][ C0] R13: 0000000000009dad R14: dffffc0000000000 R15: ffff88801fa35000 [ 141.724418][ C0] ? __pfx_vp_notify+0x10/0x10 [ 141.729201][ C0] ? virtqueue_kick+0x370/0x5c0 [ 141.734095][ C0] ? iowrite16+0x31/0x90 [ 141.738350][ C0] vp_notify+0x57/0x80 [ 141.742548][ C0] virtqueue_kick+0x39b/0x5c0 [ 141.747236][ C0] copy_data+0x237/0x370 [ 141.751558][ C0] ? __pfx_copy_data+0x10/0x10 [ 141.756344][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 141.761405][ C0] virtio_read+0xcb/0x200 [ 141.765745][ C0] ? __pfx_virtio_read+0x10/0x10 [ 141.770732][ C0] rng_dev_read+0x248/0x6d0 [ 141.775256][ C0] ? mark_lock+0x9a/0x350 [ 141.779799][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 141.784907][ C0] ? security_file_permission+0x7f/0xa0 [ 141.790711][ C0] ? rw_verify_area+0x52a/0x6b0 [ 141.795579][ C0] vfs_readv+0x6c2/0xa90 [ 141.799843][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 141.804916][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 141.809703][ C0] ? __fget_files+0x29/0x470 [ 141.814344][ C0] __x64_sys_preadv+0x1c7/0x2d0 [ 141.819211][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 141.824616][ C0] ? do_syscall_64+0x100/0x230 [ 141.829393][ C0] ? do_syscall_64+0xb6/0x230 [ 141.834109][ C0] do_syscall_64+0xf3/0x230 [ 141.838651][ C0] ? clear_bhb_loop+0x35/0x90 [ 141.843359][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.849275][ C0] RIP: 0033:0x7f04cfb75b59 [ 141.853839][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.873489][ C0] RSP: 002b:00007f04d0901048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 141.881966][ C0] RAX: ffffffffffffffda RBX: 00007f04cfd05f60 RCX: 00007f04cfb75b59 [ 141.889967][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 141.897997][ C0] RBP: 00007f04cfbe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 141.906063][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.914081][ C0] R13: 000000000000000b R14: 00007f04cfd05f60 R15: 00007ffc46bc8a98 [ 141.922098][ C0] [ 141.925129][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.932412][ C0] CPU: 0 PID: 5961 Comm: syz.0.205 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 141.942039][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 141.952092][ C0] Call Trace: [ 141.955459][ C0] [ 141.958304][ C0] dump_stack_lvl+0x241/0x360 [ 141.962992][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.968191][ C0] ? __pfx__printk+0x10/0x10 [ 141.972798][ C0] ? vscnprintf+0x5d/0x90 [ 141.977131][ C0] panic+0x349/0x860 [ 141.981041][ C0] ? __warn+0x172/0x4e0 [ 141.985198][ C0] ? __pfx_panic+0x10/0x10 [ 141.989666][ C0] __warn+0x346/0x4e0 [ 141.993684][ C0] ? cake_dequeue+0x2af1/0x4690 [ 141.998607][ C0] report_bug+0x2b3/0x500 [ 142.002953][ C0] ? cake_dequeue+0x2af1/0x4690 [ 142.007821][ C0] handle_bug+0x3e/0x70 [ 142.011980][ C0] exc_invalid_op+0x1a/0x50 [ 142.016572][ C0] asm_exc_invalid_op+0x1a/0x20 [ 142.021432][ C0] RIP: 0010:cake_dequeue+0x2af1/0x4690 [ 142.026926][ C0] Code: 74 08 4c 89 f7 e8 af d7 6b f8 4d 89 26 eb 05 e8 75 e1 08 f8 45 31 f6 4c 8b a4 24 08 01 00 00 e9 d4 de ff ff e8 60 e1 08 f8 90 <0f> 0b 90 48 8b 94 24 f0 00 00 00 48 89 d0 48 c1 e8 03 42 0f b6 04 [ 142.046723][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00010246 [ 142.052797][ C0] RAX: ffffffff898a6160 RBX: 000000000000ffff RCX: ffff888020bb1e00 [ 142.060772][ C0] RDX: 0000000080000101 RSI: 000000000000ffff RDI: 0000000000000400 [ 142.068741][ C0] RBP: ffffc90000007c28 R08: ffffffff898a5f7c R09: ffffffff898a69e5 [ 142.076801][ C0] R10: 0000000000000003 R11: ffff888020bb1e00 R12: ffff888062900010 [ 142.084772][ C0] R13: dffffc0000000000 R14: 000000000000ffff R15: ffff888062900000 [ 142.092760][ C0] ? cake_dequeue+0x3375/0x4690 [ 142.097625][ C0] ? cake_dequeue+0x290c/0x4690 [ 142.102479][ C0] ? cake_dequeue+0x2af0/0x4690 [ 142.107371][ C0] ? mark_lock+0x9a/0x350 [ 142.112008][ C0] ? __pfx_cake_dequeue+0x10/0x10 [ 142.117040][ C0] __qdisc_run+0x272/0x2170 [ 142.121556][ C0] qdisc_run+0xda/0x270 [ 142.125716][ C0] net_tx_action+0x89c/0xa50 [ 142.130301][ C0] ? net_tx_action+0x708/0xa50 [ 142.135064][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 142.140175][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.146776][ C0] handle_softirqs+0x2c4/0x970 [ 142.151549][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 142.156316][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 142.161608][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 142.166812][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 142.171420][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 142.176668][ C0] irq_exit_rcu+0x9/0x30 [ 142.180924][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 142.186739][ C0] [ 142.189668][ C0] [ 142.192734][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.198814][ C0] RIP: 0010:iowrite16+0x37/0x90 [ 142.203939][ C0] Code: 9c e5 fc 48 81 fb 00 00 04 00 72 0a e8 52 9c e5 fc 66 89 2b eb 59 48 81 fb 01 00 01 00 72 0d e8 3f 9c e5 fc 89 e8 89 da 66 ef 43 8b 2d 11 1a f6 09 31 ff 89 ee e8 68 a0 e5 fc 85 ed 74 2b e8 [ 142.223636][ C0] RSP: 0018:ffffc90013caf928 EFLAGS: 00000287 [ 142.229703][ C0] RAX: 0000000000000000 RBX: 000000000001c0b0 RCX: 0000000000040000 [ 142.237784][ C0] RDX: 000000000001c0b0 RSI: 00000000000110dd RDI: 00000000000110de [ 142.245754][ C0] RBP: 0000000000000000 R08: ffffffff851d9580 R09: ffff88801f848998 [ 142.253727][ C0] R10: dffffc0000000000 R11: ffffffff851eec90 R12: dffffc0000000000 [ 142.261700][ C0] R13: 0000000000009dad R14: dffffc0000000000 R15: ffff88801fa35000 [ 142.269674][ C0] ? __pfx_vp_notify+0x10/0x10 [ 142.274466][ C0] ? virtqueue_kick+0x370/0x5c0 [ 142.279326][ C0] ? iowrite16+0x31/0x90 [ 142.283606][ C0] vp_notify+0x57/0x80 [ 142.287687][ C0] virtqueue_kick+0x39b/0x5c0 [ 142.292372][ C0] copy_data+0x237/0x370 [ 142.296642][ C0] ? __pfx_copy_data+0x10/0x10 [ 142.301523][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 142.306561][ C0] virtio_read+0xcb/0x200 [ 142.310901][ C0] ? __pfx_virtio_read+0x10/0x10 [ 142.315840][ C0] rng_dev_read+0x248/0x6d0 [ 142.320447][ C0] ? mark_lock+0x9a/0x350 [ 142.324795][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 142.329856][ C0] ? security_file_permission+0x7f/0xa0 [ 142.335412][ C0] ? rw_verify_area+0x52a/0x6b0 [ 142.340287][ C0] vfs_readv+0x6c2/0xa90 [ 142.344541][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 142.349571][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 142.354344][ C0] ? __fget_files+0x29/0x470 [ 142.358951][ C0] __x64_sys_preadv+0x1c7/0x2d0 [ 142.363810][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 142.369187][ C0] ? do_syscall_64+0x100/0x230 [ 142.373956][ C0] ? do_syscall_64+0xb6/0x230 [ 142.378634][ C0] do_syscall_64+0xf3/0x230 [ 142.383139][ C0] ? clear_bhb_loop+0x35/0x90 [ 142.387819][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.393715][ C0] RIP: 0033:0x7f04cfb75b59 [ 142.398232][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.417897][ C0] RSP: 002b:00007f04d0901048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 142.426337][ C0] RAX: ffffffffffffffda RBX: 00007f04cfd05f60 RCX: 00007f04cfb75b59 [ 142.434318][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 142.442287][ C0] RBP: 00007f04cfbe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 142.450253][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.458220][ C0] R13: 000000000000000b R14: 00007f04cfd05f60 R15: 00007ffc46bc8a98 [ 142.466204][ C0] [ 142.469491][ C0] Kernel Offset: disabled [ 142.473914][ C0] Rebooting in 86400 seconds..