last executing test programs: 16.613530555s ago: executing program 2 (id=5470): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x9, 0xc, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x99, 0x3, 0x5, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x80000000}, {@local, 0x80000001}, {@multicast2, 0x100}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0xf, [{@multicast1, 0x4}, {@broadcast, 0x512}, {@broadcast, 0x1}]}, @rr={0x7, 0xb, 0x2f, [@broadcast, @multicast1]}, @lsrr={0x83, 0xb, 0x90, [@local, @multicast2]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @ra={0x94, 0x4}, @generic={0x95, 0x2}, @rr={0x7, 0x1b, 0x0, [@local, @rand_addr=0x64010101, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) poll(&(0x7f0000001040)=[{r2, 0x92}], 0x1, 0xfffffff9) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b7d214045058b80ad31000700010902120001000000000904000000cb33bb00"], 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x65, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b70700000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000005000000b7000000000000009500000006", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13.463881664s ago: executing program 2 (id=5485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500000000000000000000064000100000602020202020201020b9672060403030303037107000000ff000000"], 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x143001, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, 0x0, 0x1100) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000002000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="b6e10672891e34581db6ecdd5f3481290483925eaf9b6634e2959654bb6208056dc5af70821ccedafbb50bef5d8f2fab2aae6399f8e5c7102a34465bc8a82c77c18f3c641e612e96cf7406be39d898485f8961774b5dfc72a9e2c6ee680c99e5e8bb72b21cc66b54eb70c71cce35ae0eb6725692d3daffe36698fefd99097b2bc24c1eed199b94f87f7231b4109bb32d199789b804b3a04d531628d4142f173349f4c8c79d566295e4419e5e140000", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000500)) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x640401, 0x0) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x0, r10}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c40)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @random="e3b017c45a9a", @broadcast, {0x1, 0x8}}, @random="0f107bda9ed9b2201b4f1040884c2740009302a3f6f958ed7089b5f6aeb42606d1317fe6105330fb7fc0ac2f057781d2ef21a8783d2b888262ff324e0933686e05b332d128b866ca1d5ece945a601467de48d15c4ff1813ed78727533ce3118939d07305acf384198744e964a84287b92027e03dffe12dece06709ee0fd6b29b1d548543647039955f91a76c4b8fb180c7558ecae2bd14997af503eb99273d7337e5be34d57ab1ab189c5ec1f4bea692b57ecd3e75b78320026dd2d13df7dff6828f48f83310371d962cd734bfddf1dbd6856dc140742e2f4d252e6ad3f50953454e8ae886fa542fcddbfe2124eda185e5455bdb7aba9803c1e600c5c9a6bc3164f190881dd145948cc70ec25a55619fbf8952fabf5bb575b7ede812d3402c05b65bdb95ffa09554674988e6369450c3bcce7dedc2c7a7c1cc807d9ae17d0eeb6a0fbd9d6a4905c6975ed1be1fdb0da465c86c91a3cbf4d4c5ccd22f2665147c255856f8bdb914b5e8eeedc919cea5515265041475d5bd9b91344cefe793b69d09b3617e7161e567b065a73f9d102ab64f171b8185397cd71f2adc48922f569d2f9bacde2025da1e068d15dac4fafe7179a46316c43b063b908fe7e8c2c6bfa05a42a330f91f669bed848572240d28b1a636c87c4e880512d301e5d78097e63b9473742bfab962fd575c79b522e7aea3dd4f95bd495e97564e79137e18eff43f83ad02557a73454240f03752f7fc586cc2b4ee936734b7b4b819c92324ecc74b3353a3c42fcaffa31fb4a9ca9ff89a597fcbf32318432d44c4a45d0aa110e7f27a2272ed1f5875d7e45cdc079df82409ff3f18fa0bfd22b1443c3b0373e3001db4e0a20a6b56ec1023d60c5a7c4ea6150f27fb4cf115a7843e9de59b7e40d47782d24b1468a5d03d5c3d6352676965a6bfb12b9ea9fae44767e2b4b072057e2f6982e9443aec049935edbe37a9a69735e600f8fcd0a164b1a62ee052bed6833841ecaa100a49548d7f79f38f2a4980e0c73a7fa311270c4602f6729549d6a846052c792cec871d64a37a6d31663118ae91223d57e80e53dcf25b4713dc5f5be5889b836a37fb0ab0f3ac3a073cbf82a9be50ec780cfd9447b012c27549d6f3dbfc0aac21a49e514de08f4d890115c79ed1a114e4385dfa4dc84d1f7dbfa84be0a709b4791d6c72fa20c3c681f84396cd38d6fdeca8b85b36bee421a6ad5a2a89fa8fc735cb5092ae7953ff9658d582bfa606db626620cba3fd0ce8e09ba9535c70eabdfaec866a0ecdc7841c2fce04904500c00edc10679cbdd9d845cf7655d0b67c4f96e8afc07ba638a0d38b80a9e4f8d6148c102ec1c965081de59dbe23bc8d3cf8b5b5e4574da093f8fa216327d69d46011fe5c7e5e5c2cc69db23e1e78a9328b9f105f68fbcaca9350fa5738df85d21aeff66695e3d8f7fc3ff61bdcf47493d005d7cc32d5a6908350c0ddbd1d589ecb248a63d369a3fdb95fdcefc5fdcec6181e697739881cb3585e68272879912c487fba9aab1254ec666cd20e8515c1145cd0f9d9a5b52a9410342646d4c282f3cc7fed8b5c3c1743341df71ec821a7b3a2b7860edfa9b27f53619a206c6ec3de8232f6983044ac8437623832021b5124aca0a2c66c3ea58a7d688d83602d328630ed53e1acb2fb22ad1262d16c17fb3b7eddf6651e74bf99ae1763df47f540fce765a940b6005b7e13c14b78b9e5dc59ae17fe2fc3fe59f72629a3343d333e48889eacb5c6995eb862e763bf5daaaa9e95a69c5b5044123261ed0458887a63bbec762ece93ef69e6059a81524a2f77a4765e8eb6a02942b4db76da6f8f2b5484139d1ffe074d3894a5bf3e2901312c133fcbc92facbb514336abf474edc27176c05920ea3ba9a783ecbcebd2bb98dc58bf17482c70e54a0bcf8ccff3996e27e4f9cb61df1774dadf154dfa1c053d5c4b3a7fff9e265b76eaf3b7e9ef396416a68b33876f435aaaee96b80ef95e2c2f7ea0ac7cdbbd0e5d915cc77394bbef356272e036827b38c38782496302416aadddcdd2c42b115ebf279acc969c3e4f955b1a49698c288a52f1b408ed0677d79e4d60442aa26bad958b67895ea394a4564a1fd479fae9f3df18852fe4387a0441da1837570356b365c70a25d453f8620aa69f8377a2c51c21bfb6bee469a583d228b54b011ac64e42f3f34e529be089acd8ed37517ac34689c4832542bcab580f241f7efb5572e156681447c570967b158c353e18477e08d827d0e8da12ed8704fd05d0a899e5f6644ae4d71424a2317ae748b57dde1049ed364bc5989ce80df1f7fad19794a4ce156e3fd61bb7295dcc177fc4e3d2f7da59203ad097bfed082a2eb4e4aab0f7501e034cfedf3772ff4877fe5b471"}, 0x6ad) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r11, @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12], 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000063aa87ff00000000b5090000000000007b8af0ff00000000bfa100000000000407010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.759428757s ago: executing program 2 (id=5488): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x8800, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000500000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff00200000000000000000000000000000000000e67f332babc2df70020000000000000000000000000000000000000000feffffff0000"]}, 0xe0) 12.635939562s ago: executing program 2 (id=5489): syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x64, 0x63, 0x34, 0x34, 0x30, 0x63, 0x3, 0x63, 0x35, 0x39, 0x62, 0x63, 0x37, 0x62, 0x35, 0x33]}, &(0x7f0000000180)={0x0, "798d381c0ed67e4685f161cadc203af3675470fa6351a937dc22e3f3f441e4cded3d49a7fa3418ccde725f3550135b6b8cdfecc49eac28befae728f33e7cfd4c", 0x2f}, 0x48, 0xfffffffffffffffe) r2 = socket(0x2, 0x80805, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x8800}], 0x1, &(0x7f0000000140), 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="69347a8b3313680f55704032be3f487d35425adcd69f7d5492143c87b748a37f1b82373c73add3672426394d70f2a7642eed3e5031e3ccb082bdc999a443081737aab06fbd744ddb584f05fd0109be8300026eb8b5757fe1399da9d1b2a18e9d0d15a31fb3fab1f07cd0a481d550e931749a40d260e53b65b0ef81d5c3e71992dd064f84de599b7931c50759d8cdd77dc00bf06db22d4760f12fdf01482e4e84aa8e93d5a0c357ee2918321e27a7ec21090edc5346f72e617f5761fe657e017410714fd200384460909818e5940dc75e11824ccafc4c1e3f953f041ef89b7a1a9bf9454c6a4b005156a4403d69918e44161d22c416b033fcaaf3d06463763d0c77128b0b2e980a414b00f5ed3aeac4895c6a1bc6fbe4ee88c064460291a24c242f770746262bb4ad3d04c745f9e02240b0b3d80f6c52c523c35fdb16b12eefdc51fbabbb70731598b901ba96306655bb36022e7b48bcb9ec24b1d6cd675bbe29cc2ce0a45a8f401f72f0990eb772ba25736c4940664a0b6a2c7ddbc26407f4ced7ac150d0304b5b7b44d128b0a3e34c1d042f03949db029d50d28b49cd7116c314afe07a891f6f828ec03a78b4f01d4344651d9969e2014ab4d7acef0abc6e93537d22629bbd0a1d58c9fe0713d2951ef573bfebcc96e0f2ee6830eea57a1cdf91ea6ee35b344d49b1bf26e138d13afa45afd02b6774d578b4cf75d3d9937b2d6801a877a5a9f4764821a18a293c019558b69e44ba5c3d81bd8acfe6965347335a448b65ce21f86511e65f322080d229e7a64bbd61f757d9ea94a5d458670353390d62acbf19b6b423f08500ed74691434b0dfc5f2c9bd9155d4644abffb49bff0b18d628eb0cb0e5d64e3940dafd9f46c2608b643d7e3d234ae7750565bf2d5a7aaa8bcee3ab1309065cb4bb40b6c23bc16fd46f1d0b537747ee7b6ce13566c6b80b2aeae97b65bec56d08c538cf516c5836895f00901a81f3792ec1a428d2b58e884d0931bd27d1a5858823ff4ede22e94508247d722bb0dda9fc2ee2c64732545f89d45670f12b7f5c208bb7df7dceb82572011a3943e7890c06f0f8756e489d98471efbf62ff90e6ed9d7bc5b4853b4555ee6fd30b73ceaa2007082bb11207a7889e7dfebdcd19d56f64f45eb159b6a60e88b1ed618da5160557cd9a9b6d232cf2b6086148ae7e2bd20f66e7ac1a715cd2785df21660a7f455e9772a81e027c0bb0d5efd0b09924ac19e348485a62a0b7789467d398c72a36774375ad3086b746c2ee2f88520d7fcf47031789ca28980ba150eb35d758f6c7b7c7aa3e8bd1e67d26dba07686e392f14171c24cf8d6e9afbfa6b6784da0cc22437e811b5c142a627c32530287399b9454a5fd5670197a128eb1b9f85fefbf61abc8a34c3c58f43a25387fd8ed7091f65a90123ee35b5167f4279480460e5433e8f7ad2410c8cccfce040802522ffb309745f2dca9b49a773ee53f00917d63dd6f859ea5908035da7f0ab7af1643dcdb134d99d4aa785c69355345df0ab3649c315de103e4343248a6abcff36124cccf73e290895e01cf4585a2bdedafc7df3feaba2e114151c19d3772151695f82487e7e2678bfd996c50576699b7ec993613058f17cb7dfebb57046aa3fe34b73d2d587f50984bbafb731ce263ad16fb57dd14dd835ccd6b0eb2c792fc5678166156c69f1e4b81c6dfd2cc5377798bd439d7ad41366e3bf3efbfc8aab3775e13eef5731e7c10622e74b5d6b9a09035d2210099ca651aa0eab3f5e1725cdcf1563c742cfc8f6587fdc8d8993233c350355f0d534bd578f5ab567c52dd92fa3f1b6b5cf911b70e9078ff561ece94129455a929f23b6ed582383ce78060a266e246f2fc016ed47cd879c53e0efc8ce35fe3edc8f9f613e116fec7e64d9bd436fa8a0f8527f93d5ed29c59a449b0d503dafa30d3c07c580ed1fbaa16548198ddd6be36a917a7157674f5a7108434b2cc53809a35086aad78bc6811f6382742669989e03c525b7a3d56d85f93d22330ccc89617829a3219077a7e8a16d3a306ee8509b878c373584503e328264896c45250f75bbfee39372c4dfdd290a8ac242802b07053bae58980d0dcbb6854307e4c3e885a6648e8bbbca7296547a4064202ada5916813b1442f4348e66556ccb82425f81df43bc72b0b476e7affa449a8caa6e336a08f2588de5fdf4b16230955d0aafb4daedb8a3d1312cadb7b8871d12b4c3fe9fdcfff91eeef0c4acb993a68f256a1a8aec4a4ab00c5dcb3ea667ec56a53f1ea48691c34f73c7866bc0dd21c2a455ebdf88cd52d5e27af6c27b841c33733d63ad829b34901b37c62d90b93922a4b4a8b963ea64ca5f6aad0262b3bd3c910205bad72924f47e118d147597df65d29fe16219a435f5e719921063f9216a1e195559b653acb670949c40fc98190a6b65439a332f19499a6c5706fa85dbd5a5a858f43a245c534b5ba4e29f7426410b148c385e2d2b1077f8c23bfc2f82ea3036ba5b2d599810767929c822a07a3590df572a645a70e118a520bbdf84313204a974ee4834a12acd2274147431bb3349ee0bad3e1b583b4c24f9f13b0d670b3f499f0b0cd479aaf319770a225390206fd6d3083c8251a32c9a3023c3de6175a588315c59b541a22fe9ea55d2caa4215afb2ff4d844e852a9292e4b999a0dc5b35a0abb71a43d3bdc716f58af65c64678cecf03d139888db39f053e339adfa74614e368cf50323252fcbd8ef12a82f33bd0df955a386836646b8ff1ed33db4f0e729834e2ac7a231fadb4d6ab704a5f1ac22791607cd399d52b3501891626f7754ed0d514a4868099f4de604945b2a00eae4ba87ae4fce81acd7b0764149b8fd9aa18525d15d1017efdf1005e2f3c4f7392afe4fe4fe910b75e1b9703520f62862b67e46299dec01f4b2884444cca5742796473d2dca76509aa4b7f9f37743c5f51f3475c97b4654918da7e3543f22bf3c4ef039a9890441c8a6df24a8773bafbc9ed554350c545d8bb00858f8e61a4d527687419cb65f5191698e4996d574e908e6538e630d1ce4f9eda917c2ef817746835f87315766f678a2928dfcc787a09776eac02ca57777d784bbfd2da2a0411619ed0b31a003e8f1e3b64f5de8127325a7465261d88dcfdead750cf0ff57fa4f952210234815c9d156f2f5bc8a4be9c7d6fa92d950cefd09c58c6bbc239cbab1e0833bf796fe6eb47f64113078143a3136923d29fd97bf9a8e1f19f44796d2ebb0d31f7930bb81a100d55f97f995b69c9eb6537ab055aa4539f172f1c5d7ac8c9c59a137be3782c7751220a20226f009a6d9f972e30f3c1ae8debf3c5788051ec8a517587a72c5d0b54d6aeb82e2261ae1f1d5d33a806bd45528f93c5bd049952f451afb432ddebf976e009c1c1654d4a15b1a9baf633178e2a0d1655a1a03d9b3ba3543f6c1ef24890159ee4393761147442ccedbf6988de954c7b6fede751dd80aa2e536e8411ae9b0f9d334fcf8d43bdf785f4bd302879730d2f99ffdc23624e4da90f7032052c3570eadcd4a9daafb5c4c53f6f5ece0d6d1f94210f1c8c6c8041e2b622c08ed6da8c609a6980df8f86d784f1abc2e3a9d5e86b96fabd1482a9c45b3ad53de68999cf247a9487e0c7eff0dd71b72a65cee6b9c644deb31d905b4ce20b44db86da55282d5614d2c9989fda3f9afc7c6d0bd79b67bdc0301e4c42e88393164ac03db5f1ff8e55512b693ee8664688252a4f0cb206ea08a2b510921e6c47436065d8dc56e2a227432f013656eb8e745229137ebb2cd41904dfb1bde78e501f00de630dca448b9200f230e3983a08a4b536ccc7c559910f2cfb51180eda5d31dcf3f6d1dfd3ef29e8b13e32c4fbf399474012332b9effd725f6f6b7d6c3ebead747c05d0c7b86e88f6a889a357e7bddbfd0dfbdb29ee2f4491110a728d93bafd7e8f7364cec0d9b1894fa18820b3a2da039da95ac668a9f7be17e5f3af284303ae01e0ecbc6edbe2d1788e8cfe2e317d227bdd968df19f9388132e8f1255fcd5540d5fe42826a027a318d3a88e2effb1578dea010ea6621c0f0d1cc5e53ae81e7c4644ceba3e9016443876f15885c0f10f2a12e543579fb840c399a357c71ffa33538a40531a045716ca176cac972a2e7b405f00c723f1def0cf59c4ad1ce07a1c97b3589db4e43199e4d505516be44e1ae6b4e018fbc0be3ec7c81581fe23502c18aa3757e87b471db1b6e75428363ef21468564a590f3c33ba590e1782dd18440b6f23ded6065246f0ca86190b91e026572ce74621c27252ba62cee74ea99cf0860f55c96d71a565d8552741699a537b57d43b1bcd9f4edf514a446d67abe3f4ed4ea33e0b65a2dbe9e76e52eafb559b3542b3d64c6c9e19066d592de52151cfe5d2dc445b3c3d4e836f6ae3195bd9c63aef5936391868ee7b1ce1c3f05af8aeb526a01ab54e6014f77a95050fe716491994db8819ea715e6ec4bca505d9af5998c7152cfca01db4bfc2a78a7339c64721cf16a490f546302c7ed58d60e4e28c20a2e1e638712e688accfdbe5ce4b74aca1179d469c7e6165e136d4e92d09041e645d4e90e40d374d2b64e79ea8075f52cd3ca95f862a69826e39dbbc85e3c9c7fe9c6806ccd323c471fc7c6fec7ffa98bf721f11066445d62df436b2b0bafd65733c12fff41c19550e3e67f719a0d09ccf264eeda50416a775942dd14775992d865d17a1e5c2a62c28d89f3a6fc1fe5282008932b7db5123767439d01987fc191160a6c44d56346a2a9b540dbb11e6fbbc0fcca739fcd4e48f5fd0eae06ca69499fbe1a0ffaa1b89ff34da566da5e86481ffd08c4bd0c87fafb19bd5813951829f6413a540cbbe9dcfbc2dae6730c1b372f5506cc902830e33ed4fd87589dc3a705e74d54c8a85f03c50cf47d123c606631a1985844703b7540a228a66b60fd9f88cba874700c2e8d4f6be31f83dfba64cb993c78b681a70e860e1599d4c3d97f6d36e4aa4f8960af838034d5e6d97cfb80b0fa723bce01861bcce4b768d4976ce494e6d551f039227830af4f6916868b474cbce0bd70896d7675d492c1c625a3f45a4d6a116df3116ebd6b0353797e0b3ea02a794a8fd4cbd0951cd0bf402b545bfede998dc4b5dccd805f3ef1bec6ee886c3c3ec7382da96190f3ea78b1a47f118a5a3c18f5a5a370476698f182223d84ab7ba95ec9f2f2d460b5415adf4bd4fb4df87e7788f66f594e04b8bdaeda5aeddc9da6f215b2473619a7fc4832f1fe0363a042f9debb905e21fe49611ec8b2f04c2055bda7137bf598fd4f75b0f197164c66e6c85967a61a55b21fbcb47a926b10e582e5ce7af349f461ccbeed788179f885dc967b4169b610814f502be5a89611d7d9e07fa5df7510f119c862fa1fdd66e96ba09448ce83ca19c96eb3aea8d6b8febecb685e4c8fc6c38fdfab0ccc50204b0dc432434fbbf0506518b6e3097e9a42b010a994d6bf1a85c93fefe957d1bf1cf7ab86d6e4839793d4d068cc12864d1f34eddb37951028ab5adec8060aafa85b7df06c99018fe1129df7727ea6d40054ba8d737d0ef64d5bede2946a981efec9c7d3b19c808cd807a1613ff77bdd8e79762389c05db2f64f9d387f4ff0655a21730a48b86c0c76e5691ab7feb2eaddd740004827a19d5cc00503ca5858611a4c1af7664716c9ab0fc7ae0c0901842f1123e3405462cfd7bdd5a4d4ee60d39574e24edfab66b624ead4d8da1497d680b515f4c76e804ea397d9dd23d2fb9fd36690824f837aec799e035628d92bc165bf3debdc199970bc70852a5c4327748f3d7ebaf9f5adb872e6576f9a1fd8558ca9019f6b40c95dc18a3528f22640305334923971491866e3f06c92bceb7a18cc3158b5bd1cf2b1684efcb967d5b0a76d22613526fdbfc5bf78147165435d576c8918ee89ca0f876473d4541d2672f1217a76188084dbbc6140bf57509f994849680457a88d6d1599b8c6f18c94437abc27f73ae9568dee0225314c0f6dc85c9188e8ab27e22a0d00615e2abf27004d4519f045b5fb97f8f3e5b1873607dd03dcb3aae4fa692b777efc5aa6f9d1045f7c9d88bcd9afada0d4806b748f2fcc4d714c77080126e1806e213317cac8280b86c3bef4b067bca23cfcf8f8a5d6d337b039244795cb8913e9c903c457bfef78384c8797438223ff22cc2d3994feae486a12134d35ed4f921a3f9534d81b99c0db594f8ce0c4f6d9df10ea511e9abc62183d2511ef50ce39580db8df8cccb8d0f237d1fd0e7b90bccb21bdb05810ac79a61bedc983638d76994f57cf8e21a38da27a4d4b31c985ffd7d99c9b3726950d43d18b1fad6743f6422a80af40b861585531139b3e9d00f4a97e893fcdaf1a8089e115c2727e66b6896d03f9520a0d60b80f89454439720b1f9e68d0a9660b10a1ff9763b2b4f1e554e1d855e1ce16dbcda4976c717af5f38f205d9a9e65be92c8e2b1027d376293f061b8eac47f95166ef446bfb06d236865d73beb068db2f5e2c6d4071c520509623200c340fe37ed83db309a8eac852423a1771fcd69340e995c3fc7ebb6420bad0870f21805c243bd4c50e2f89ca3648cff087f497ff21a85f15e06eb61139a71a8ee0e341a3a9fc8a8bf64a56a3d47d76b63e1a8b89e2e902013ae0697ec5d3d405c19f38f853ba714d6e7cf312bf05ce0aef1df56772036a419b88c0b17477a1cf28ec18756f841d61afc68c5ce27f6bebd3d8abac13d99adf6c0b8214e7943a627f1057e4677a2eb263cc02234263eadee694cbf5179f9c0fe131f43b0d68ef3e275f71c573c8b181827f89e715336043938e57b066043d20c3fe9ee908fbc5611da3ed1d07acab02d9a690b1564c931bdc8489ccc26af479f7e91ea7a23c9c401fb1216caf80fe30c89f2a45b08ff23c936cb2e0214a12ec03b03aa2404108e5870f0c1b8b09c120909779967268c188cf021e453438024545209da1d1185b006d337718b78ee44e60e7ea80340876a9193e50741eac8fcf055202e7e1700eb2fbb919830c66b17b767203a971f195a89e108a1c7ff4dba620cc50ed3463ff215870d692752897630fa7d72e4e668647e11298de97f3576f7fa4d270f2625af8e4a0a338bc3656b9af54c48ee199af1568001b1e7fc9390b4b9a05da8cd65866d7c9ae03cf3f4371c3fdc953398a01b9f29ac9c299b1e0637c58f4c84b37db6a379e156d36b91576d3accead349fe3585df7949626a5bd082a018cfc1aed1dd3b1fc255fd8436289cd3a803e589c22294ab511d276cf7a746bf4ee489afeac779aaf4e209cfb9389b31a5f9adb3247e28e6d6bf5481a35d248640da3d679844f3417fb70ab237d6d404cf3d3282e8c1ab1d50fa677e3fb24bf26073a16582882de2822ce4d5c5f9877ef1b55291c887fafd24d596ca129adfa31d723644179a5ca1f6daf5754baead5aa97873503538616ef70f73bd43e78d2c5b911d569f4672a22b541db217e4db9d547a7ed68199913702a8522bf38919a19d28a61b69f70b5a0f96ed8f116a7883eacc4df5ae14783cc3021073a80defa84af3ecbda5a2aa50a103846b712902909b5d648b623af42e24b2846d098828256c1b5426e026368b5dcfc10555821d52c24cf5f04cc04687cf23cff745344bac2768ea648da4a89bb7b859b2851fcf4f5dc047bfa413f06f260b424d91b568752046795a09464857c8b72a2f41d0f78d91564ef699460d4bde3bedaa09d74575ef39610c56fabcbd342be277513c4c4ea6bb7ca0994bbef9108431960486248b1925b9732010f8ebceed9632ec2ba4473c8498c25ca49a8e864a1e85a99ff0b724c689f9104c1ba8d08278620239f5fbc45ed1a4c130ea57a97d4ed6af083a0bcbd2918fb1b15532df336ecd33bae049ec2447bf75e3d8040bd7862b4973774d92be128df7c39b8595fa64a9e9e8f86d2b2fea452213b3d3de9a72b9d269234fc79a739a3af0850e61b085f9d8a47d647e5a24ff1846a6384d35bc54a61a3bcda06b1a5b76aa3cd1780c27b42e616428316af19a801cde5527d14367b8bcd55e8be273c576578de1b5f966d3950ef0356ff380779f8f25b1912b1185ffc471005d530510d3d465df91dbb023d296baed89d4c3233efb961dda5b98ea2ea7fb8b23306b576802f6b3db2a53eace9fc7da74b6d8dde148f7df9b136f498000a1e52169ec21175fe60a45810c565c7d94cfe4674972cacb697c9347f0a8144e2c567f75c4642cff236c849e5314d036873bb12e745a07acae7a1865fd8168135e0dbc22686f49d285dedef15cc1c9e6de10c6061e47c65932928519b7b891771543fe4886899b94b5ef27fc4c8aaebe0687ca36710523cc3787a6c3dc7982e2561a9d14758ee62390b5df2ab4ddcf2e9e2699fe60c87ffee70fe3987fdfc21e19bf1c1e28a73d2a7d7f58bc4cc480bb5d70abf06de5f07a85b2a44a66706bcd246c40c42a70adc61a7381623077081d27435d434341d12a5c34f361c305681e42d246644950d7e7875dc6241e1df9edf7594b7af01f7b68621cbf2d67f5a03704e810fe10e2242990b086b532a12a879e334b60607577249bc446332b162da1f384094573a06d87889d9885bf41e4509cc311ec165dbfebf843f0b624579af4c190517a91946b00986d57aea8d9bd1c6a8a8254e4c503e4510c28fd86f651ca9e02d7500f3e93d2020324fd7bb9e28772d9a2dfed57ba75fc6f5c76d2fb92d8c9d25a5bc632b678ff06bb15810034633c323ed4c3eb62ce379c9d6555fe51467c20d4ac7c589c1b847d0a583269b8ba8b34df06634abaf0fe5c09cb662f3da40b151b2f9a98d68578e7632a443f14e92192b675b342b7540e57a94dc6d68143eac7ae67aec9fc1dfbc4312b15f176dc36843d480ec97da63caf3f199bc6cacf4c733bcf306666f94a281615f10d04a07c64eba175a06149eb21eba83b32759b87eb9640813449dd042d9006570dbce89f7d68cc68b29c039552f9316fdde9efebcff37d438e60b6afc36e44a0f2f762df46573a4882dd62d02380b6f838ea6f018bf46e860c14f9ee969d3543d373f69a826a20d2c9f9fd4e955b15a590080edde25f77440a56edd2710daf8ba3321a047af0deb5cddf64f3077cb896f9238270e854a7441dbdf8ad069dea372fe52f573236f2f432b1cebe0996b200c3e0ce0e897d658ffedf70e02648565614ed342bc55b8c24ce550e0d2fbb3fa3c7216af3cea72bf4a9665809ed726e1b96052f6a74b61f201ec8d31def5cb0fae81f808b52a265ef3bf3eb15855b7bde1c82283fe87399a520e0ecbbfe628c866cca390ccd29061223768bbd7c941c1f335f9cdee52ee992625ea611f78f631bbf2bffbae5e1a22d309a13516b87074f59cbd139373ae38cbee6c2d35ef0c63a5129fc5ae044681c7cbc6e2366d8c36812b078924cec54e40d30b0be24c9c84b7185678a93c7edc13041728ae71b0a6789f0a4d1ffde75d503f64f21d32732072697f3ba65f5926320de77c24ab6158254058e1d034d496c57f21f04d60414e098fa83223e8236218814b3d1d307127be35b53a7b1695abd4a64dbe04cad1b51e8eda716862111beeb375414c8354c4fd83a5dad32937b1767779de49742d85c6cdc71504f213267bc2a4d5018379f2aa392aac55a5905a0aa3cf2372f40c1ab0bc09d4d5b080e328ba659d41f28a6bbab45fbdbc332ec58c97784d366ba5af2a0773a548d4ccdb38e705a7a4322a554828b6273f82de07b9ae6d6c2808512de1a29085465066b59f3b830fae974e1c34ef1a6613691ca188db697900f1f1405ddbe4854389d7d893dda34de5e3b20c5f85a14d4f36030906d43e6d574187ae84179ec64d56d120435ba96128017d824fe99774a11a04e154093ae9b5301ae4e6cb3171a0171d3458141e0a5920b57f8549f85059c5f55001b7563492ce8acb283f229460728ad651428474cedfc28ce9402f2220754d6ef9e403a5b8170dc35636aab45f1d9e798c56014a4828179f8419c23a387321575298ae856f6da48630b71a12442cfe8f4801b1d288f8596d6884ffc5298d73ccc8799b3798f4ecc6ddd1649ba72ff3795bf11716255c4d5e0f7cfe1bf1a9c7cec7c518e49d7041d8d741306b5165e0d2c7f85fc6c2e0c633f503268f0d80eab9c3ae0643f5d75fb5e9d780e639a4ca3ed9f097414342b3e57556a8d2d73122fdfe7d3ec3c6db146dff1f814fac6a58d713a7095526c7b67d4a422a3139fc8f9c0fb088df5034652295efae4578e89ccbac1beb715741669b0fed55554065655d0763200157f5a46c97dcc1a18dd7a2095419df04a64375036b328c419147d0da16b634a1a742ff35f6697cd6817a9c807ce061275019703204ae177be834b463f9ae464eaa8a76202e2c4be6235bd639d99ed5cbb5e09562bbe6f19528d9d8d33695c0b69c5aad78fc43f567283ba961803dbae8bbedb8ea4a82ab37c5dfe069f0d5d0618b52e2142bd691020d05d042916c9b1a681762eb1201ed8611e1c0eb75961cd2bbcefa76effed7fb408d631374294b473580421a6948943c19686957d5523dcdace8f1ddede9fbf1a6a40d5be40425e3f5f1315c96b546c1d18a7112858114315d77f4971fdbc87182a0b12fd893bf37769f519911af56c2af948a24a61695ec624881c376f37398df173ef93aabb005e4090204f2392a11d790e1a8dd938637462df1f91a09f9da9863681435bf175ca324c44f1e8ddd1df0855bf189b6ca16586bfd57fd351fb89205680c7717b8a06f5f09fc69267ca4ab19abd8f12fd2679a3facbda1de7a5108b3b02915ba0a8e955fe696b92b6516dd76aaa34683e372ffc8b00e20f4360a5563596dc0f21f1989a3f2662dee11c9752f5c22db3ff10a880c9d92a32d1332b2107109ec2769a4ca153c63fbefc40188b45a2c8d0f61e43b224720ebcde43c6c0ce1c549ed696329fa470159eb05ed9a6e72d420fde9c25336c9089ec7219827b25c390ae547d61123abea9b456bd5f16c5975ddded6b50ed6543a7191958f677ad263143d57d82e152ef7191fc54bca01143d77796e77e1f87701237488d67b3068f450e6e8acfefcaa3c3c453b33d6280077c4be9e689109465a3eccd356058d50070c74272157be070d45528b5f1ef862706f9818109513cca1d82bc80a7b4e2200f1d13479aa0f4317f02e200c99d88ec6df4a5cb1d19494dc003502e7907af62684a7ab348c70fab5bd38701f3f09c7521b0640caa300c4219378d435254b6935c0b00aa6eb1d6f597994c23c0c8be3a79facdd05fe788e38a6f157ec3d3215db6a47f71cd1f40c91a39605a91b4c76d29a1a4ef4b60b0e72d8ebed13f26ab10341bc1751d9b522dc098c4d327ae79dd2cf26b702a40c9a9be87340ac635580ce9f29250c3650f0be8305ceaff8d0d1a8b6520a03c020f21be115106cefd75cf8429c5d636813550eb66a355a60ed42ed7665184624f394ca1804b6bdd38857d80a84f51508e2a3570a948f82ea8fb1f71ea1618a6ad9827e01b8ea6a775cf19d1b209efd1a9718beda033d9f9a5df7009478087aa69c095d20ea08b97001ecc486f7a700d596e4b369", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x6, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0}) 12.519942523s ago: executing program 2 (id=5490): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xff00}, {}, {0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x16, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.283660391s ago: executing program 2 (id=5492): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 9.861801863s ago: executing program 3 (id=5500): mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) (async) r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x88) syz_open_dev$evdev(&(0x7f0000000140), 0x9e, 0x2000) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x9e, 0x2000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r8, 0x0, 0x1, 0x4}}, 0x20) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) syz_open_dev$video4linux(&(0x7f0000000400), 0x16b8, 0x800) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0x16b8, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x24000000) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20010800}, 0x20000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20010800}, 0x20000000) r12 = userfaultfd(0x80000) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000000)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f00000002c0)={'#! ', '', [], 0xa, "856e4703c9baaee225cda7c7eae96441dc747fd4d57037805c4ef264dc062f037ae9b9de0a8aa00343c8204cc19cbb74c2713611015b9900c707d74af640c0"}, 0x43) (async) write$binfmt_script(r13, &(0x7f00000002c0)={'#! ', '', [], 0xa, "856e4703c9baaee225cda7c7eae96441dc747fd4d57037805c4ef264dc062f037ae9b9de0a8aa00343c8204cc19cbb74c2713611015b9900c707d74af640c0"}, 0x43) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) ioctl$UFFDIO_CONTINUE(r12, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000000000/0x2000)=nil, 0x2000}}) (async) ioctl$UFFDIO_CONTINUE(r12, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000000000/0x2000)=nil, 0x2000}}) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000080)={0x8000000000000001, 0x5}) 9.41167077s ago: executing program 3 (id=5502): syz_usb_connect(0x0, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xca, 0x93, 0x1e, 0x40, 0x2c7c, 0x191, 0xcd0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) r0 = syz_clone(0x69a0000, &(0x7f0000000040)="c6b46257ae939801aa35ab85ef9085f13a4d440c580e06eeda7feb2841f53160c007f6765d5ed2f386937a22b2fca3374ec8d3e4c324c32cc8b0ff8b761031e52fe943e0f6753ab617be9427f9f1e4208e88", 0x52, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="dc44bcbdb490e0d99de478e8233b2c35bdd8c5b1281cbc970b842d27d4340a86c7d62a8c070e2b1d9c296a020c33aed9f593a8acf1a419089185c312081876f7a93e746de0e74905f9bf74a00f713bc54681f6d95e2017dc84eecd31aaffb2f1b627d12a9330bf04166f1ee4b95c574178ccff3fc21e6e41") capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) setns(r2, 0x8000000) r3 = syz_usb_connect(0x1, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32=r2], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x2e, "41156dc219d29d522809727f797c9fc941336ad7c6657b1eb8a3291094377d2d538aa5381f4ebebeb81018a4bc86"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x2, 0x70bd28, 0x25dfdbfc, {0x6b, 0x0, 0x1, r0, 0x9, 0xaa1, 0x1eee, 0x4, 0x0, 0x5, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000800}, 0x8000) 9.324048893s ago: executing program 0 (id=5503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400080ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 9.177782335s ago: executing program 0 (id=5504): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="53049b0e2f51791b2e3ab0b08c20b42b8061cfd778e09168b2b81445b72a025dc7", 0x0, 0x0, 0x0, 0xfffffffd}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000dabeffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 8.859927828s ago: executing program 0 (id=5506): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2000010001006]}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x68}}, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) getpgrp(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x60840, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="bc963e76ebc00bc0e2e92ff7c7dec255b8c66be4d54e8933e69a976b96e945724d6efb96dc3e8f8a2f75094ce9f61df63d553bf837c91b40533567056dc4", 0x0, 0x0, 0x0}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003c9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.839631945s ago: executing program 0 (id=5510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000100)={{{0xc, 0x1}}, 0x0, 0x4fd, 0x0}) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000080)) 7.814721266s ago: executing program 3 (id=5511): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf0000000000000000000000000000000081ffffffffffffff000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) 7.695422944s ago: executing program 0 (id=5512): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11, 0x1, &(0x7f0000000040)=""/68, 0x44}, &(0x7f0000000100)=0x40) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x0) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x1, &(0x7f0000000240)={&(0x7f0000000180)=""/158, 0x9e}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000002c0)={0x7}) r2 = userfaultfd(0x801) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xf, 0xc9}}}, 0x5) r3 = syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x920084, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '},::'}}]}}, 0x0, 0x0, &(0x7f0000000500)="f89e2dc85850b687aff4a2ddb6b4971c69e52e07ae65b50bc546bb57586bb97832f8f7b3342ed4a91ae1542b0c6e349cf7edd9c900a472cbb29ad6b4cf41a890a4990deb46c47c866935") r4 = openat(r3, &(0x7f0000000580)='./file0\x00', 0x121080, 0x91) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_conf_rsp={{0x5, 0x2e, 0x40}, {0x10, 0x0, 0x5, [@l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0x1ff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xd, 0x7, 0xcffd, 0x4}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0x2, 0x7fff, 0x5, 0x8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x9}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x7f, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x1ff}}, @l2cap_move_chan_cfm={{0x10, 0xe8, 0x4}, {0x5, 0x400}}, @l2cap_conn_req={{0x2, 0xd, 0x4}, {0x3, 0x2e99}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x2, 0xd56e}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x10}}]}}, 0x85) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file1\x00'}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast1, @local}, &(0x7f0000000800)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@delpolicy={0x13c, 0x14, 0x0, 0x70bd28, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0xa0, 0xa0, 0x5e, r5, r6}, 0x6e6bbf, 0x1}, [@sa={0xe0, 0x6, {{@in=@broadcast, @in=@broadcast, 0x4e22, 0x90, 0x4e23, 0x1, 0x2, 0xa0, 0xa0, 0x33, 0x0, r8}, {@in=@loopback, 0x4d3, 0x33}, @in=@remote, {0x9, 0xd0, 0x3, 0x2, 0x7fffffff, 0x1, 0x3f0000}, {0x2, 0x6, 0x4, 0x100}, {0x7, 0x5cc2, 0x2}, 0x70bd2b, 0x0, 0xa, 0x4, 0x9, 0x20}}, @offload={0xc, 0x1c, {r9, 0x1}}]}, 0x13c}}, 0x4008000) syz_emit_vhci(&(0x7f0000000a00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x87}, "466de5d19849b66ff128785bfc873abf7df02db4a378fda9004f8b9f72eee1fa2d5a370abd4d702b7e1e7c87b4fe7b4b0824b40ef81f55cfc9752b215496d8198a7887bd4c17074c96f4dbb83de26fb74c764189a5b6e8c33f7f44970c768d982dd59aa8006de74495170f212f72922410f373f0cdd59c7faa117f19bea3a78b4d1eb743b2484a"}, 0x8b) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r7, 0x3b64) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000b00)={0x800, 0x8, [0x2, 0x7ff, 0x8000, 0x7], &(0x7f0000000ac0)=[0x0]}) syz_emit_vhci(&(0x7f0000000b40)=@HCI_VENDOR_PKT, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000bc0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b80)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000c00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @mcast2, 0x2}, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff81}, r10, 0x10}}, 0x48) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r11, 0x4068aea3, &(0x7f0000000c80)={0x80, 0x0, 0x9}) 7.627929354s ago: executing program 3 (id=5513): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.627501683s ago: executing program 0 (id=5514): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x0, 0x8, 0x4}) syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x60ec) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xc0185502, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0xa, &(0x7f00000003c0)=[{0x8, 0x8, 0x7, 0x1}, {0x8, 0x0, 0x9, 0xfdc3}, {0x1, 0x80, 0xff, 0x100}, {0x1, 0x8, 0xe0, 0x1b0}, {0x4, 0x6, 0x2, 0x9}, {0x6, 0x9, 0x1, 0x20009}, {0xa000, 0x3, 0x2, 0x6}, {0xf2f9, 0xc, 0x8, 0x4}, {0x8, 0xf5, 0xb, 0xfffffff9}, {0x9, 0x5, 0xc, 0x1001}]}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) recvmmsg(r6, &(0x7f0000009b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000097c0)=[{&(0x7f0000008600)=""/4096, 0x1000}], 0x1}}], 0x5, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r8}}, 0x48) (async) close_range(r4, 0xffffffffffffffff, 0x0) 6.689903961s ago: executing program 3 (id=5516): r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket(0x1e, 0x5, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x4, 0x200000) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x129}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02010000008000"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) 5.850889559s ago: executing program 1 (id=5518): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x3b8, 0x200, 0x110, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @empty, 0x0, 0x110}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x110}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x404) 5.757609943s ago: executing program 1 (id=5519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}]}}}}}}}, 0x0) 5.708055591s ago: executing program 3 (id=5520): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x3b8, 0x200, 0x0, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @empty}}}, {{@uncond, 0xbc, 0xec, 0x30000}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x110}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x404) 4.147161867s ago: executing program 1 (id=5522): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 4.146004305s ago: executing program 4 (id=5523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x9}}, [0xff, 0x4, 0x4, 0x3, 0x10001, 0x1000, 0x8000, 0x7, 0x8, 0x5, 0x1, 0x9, 0x545c5f24, 0x0, 0x2]}, &(0x7f0000000000)=0xfc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x0, 0x9}, 0x8) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r5 = open_tree(r4, &(0x7f00000000c0)='.\x00', 0x0) fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) fcntl$setstatus(r6, 0x4, 0x400) 3.802801979s ago: executing program 4 (id=5524): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf00000000000000000000000000000000f7ffffffffffffff000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) 3.471982457s ago: executing program 4 (id=5525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000440)={0xce, 0x0, 0xd}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='pimreg\x00', 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0xd9c4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x11000018}, 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0e00010021a340ac278cdaf2a7052dbcdd7020008b4960aa3ba43cbc6ee98da8eba292b672c98565abd5805c032e09a69d1f95fecc20365366f0523bb5ac090548b2eb3f1af924f2fd67977e8b141e3e587fb1c334215b9906cf340bdce5fa8070849bcf6c00a2a6bd10fffdd1ca6dd014e3f0bfbc07c1927e3c1edc9588f060a7137cec13f336221abbb071f31544402255841512c437ad44c4abf6b06b82cd2be0267d18fdd100"], 0x14}}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0xfffffffffffffdec) r6 = socket$inet6(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @empty}, 0x1c) listen(r5, 0x100000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_udp_int(r7, 0x6b, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000000300)={0x6, 'veth0_macvtap\x00', {0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x17ec, &(0x7f00000003c0)={0x0, 0x4, 0x80}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) socket$packet(0x11, 0xa, 0x300) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000481100fc010000000000000000000000000000ff02000000000000000000000000000100000e22004890780300000000000000ebebbea59cbc54a5cf79050aa689c7c0a4feeec8a95f84b656261dcf421246c7fa0f68f32aea17b14d6285984901f27cfcfc7d9f632ca88e"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 3.038245486s ago: executing program 1 (id=5526): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x3, 0x2, "1512a8891980d9c902fdd32ed22023be0f6d8b9703e53627e48e9e2ab4b64fd4859d476ccd3045ad9900", 0x2b}, 0x80, 0x0}, 0x8080) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) socket(0x2, 0x3, 0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000800037356e1e500"/25], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x10000000181540, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xfffffffffffffffe}) read$char_usb(r3, &(0x7f0000000500)=""/6, 0x6) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r6 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000700)={0x2, 0x2, 0x5, 0x4}) fcntl$getflags(r6, 0x408) ftruncate(r3, 0x3c9c) clock_gettime(0x1, &(0x7f0000000480)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000851}, 0x20008000) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000380)={0x77359400}, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f0000003ac0)=0x8000000, 0x4) select(0x40, &(0x7f00000003c0)={0x40000090000001, 0x6, 0x99b, 0x3fffffffffff, 0x9, 0x4, 0x0, 0x100000000}, 0x0, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x1, 0x200, 0x20009, 0x81}, &(0x7f00000004c0)={r7, r8/1000+30000}) 934.500896ms ago: executing program 4 (id=5527): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="53049b0e2f51791b2e3ab0b08c20b42b8061cfd778e09168b2b81445b72a025dc779c7", 0x0, 0x0, 0x0, 0xfffffffd}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 864.090523ms ago: executing program 1 (id=5528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000074000000000000fe95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 637.296778ms ago: executing program 1 (id=5529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x84, 0x3e, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4, 0xc6}, @nested={0x6b, 0x1, 0x0, 0x1, [@generic="1e7d617797c9a53451a6f47949e15e12e56692066406484eb83da29a7385d11b17bb1ff43c0d3ce2af281692564f1a04486cbf885bbce4abe4576b92abf4d775658fe4a0710c4a5b42aa1271b746ed015e1ed8aa6c3fb02587b7a151931267e7ed4461e80fc03b"]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x5}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x3d, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e20, 0x29, 0x0, @gue={{0x1, 0x0, 0x2, 0x40, 0x138746bfe2af03f5, @void}, "17b6eae0fc34ffc935a8a108a5c817fe71c21b18e43ba79994d9036268"}}}}}, 0x4b) 425.819837ms ago: executing program 4 (id=5530): shmat(0x0, &(0x7f00007fd000/0x800000)=nil, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0x78}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891c, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x4008af04, &(0x7f0000002000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) memfd_create(0x0, 0x4) (async, rerun: 32) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) openat$mice(0xffffffffffffff9c, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) 0s ago: executing program 4 (id=5531): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) io_setup(0xeb0, &(0x7f0000000140)=0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_setup(0x0, &(0x7f0000000340)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080008400000d56708000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000001000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002700)='net/tcp\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 1405.315198][T26140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1405.326592][T26140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1405.339291][T26140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1405.359184][T26140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1405.370761][T26140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1405.874888][ T2682] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.904639][ T5323] imon:send_packet: packet tx failed (-71) [ 1405.955341][ T5323] imon 3-1:0.0: panel buttons/knobs setup failed [ 1406.363207][ T5323] rc_core: IR keymap rc-imon-pad not found [ 1406.369807][ T5323] Registered IR keymap rc-empty [ 1406.370089][T26140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1406.375772][ T5323] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1406.397162][ T5323] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1406.403326][T26140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1406.408992][ T5323] imon:send_packet: packet tx failed (-71) [ 1406.426750][T26140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1406.443227][ T5323] imon 3-1:0.0: remote input dev register failed [ 1406.451737][ T5323] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1406.555402][ T5323] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1406.570693][ T5323] imon:imon_probe: failed to initialize context! [ 1406.578379][ T5323] imon 3-1:0.0: unable to register, err -19 [ 1406.594399][ T5323] usb 3-1: USB disconnect, device number 81 [ 1406.624746][T26140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1406.645098][T26140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1406.658927][T26140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1406.877291][T28069] chnl_net:caif_netlink_parms(): no params data found [ 1406.986556][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5385'. [ 1407.004157][T28083] vlan3: entered promiscuous mode [ 1407.009919][T28083] vlan3: entered allmulticast mode [ 1407.060182][ T2682] bridge_slave_1: left allmulticast mode [ 1407.069182][ T2682] bridge_slave_1: left promiscuous mode [ 1407.087196][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.125426][ T2682] bridge_slave_0: left allmulticast mode [ 1407.133219][ T2682] bridge_slave_0: left promiscuous mode [ 1407.141877][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.517828][ T5230] Bluetooth: hci0: command tx timeout [ 1407.712064][ T25] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1407.892045][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1407.903765][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.923584][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.939500][T28057] coredump: 18(syz.0.5375): written to core: VMAs: 31, size 97292288; core: 59973310 bytes, pos 97296384 [ 1407.961200][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1407.971488][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.006705][ T25] usb 3-1: config 0 descriptor?? [ 1408.403448][ T2682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.420396][ T2682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.440413][ T2682] bond0 (unregistering): Released all slaves [ 1408.458714][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1408.468817][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1408.504414][ T25] usb 3-1: USB disconnect, device number 82 [ 1408.676134][T28097] bridge0: port 3(syz_tun) entered blocking state [ 1408.686598][T28097] bridge0: port 3(syz_tun) entered disabled state [ 1408.695791][T28097] syz_tun: entered allmulticast mode [ 1408.708033][T28097] syz_tun: entered promiscuous mode [ 1408.715453][T28097] bridge0: port 3(syz_tun) entered blocking state [ 1408.723467][T28097] bridge0: port 3(syz_tun) entered forwarding state [ 1408.776680][T28099] IPVS: length: 8 != 6818872 [ 1408.799787][ T5230] Bluetooth: hci3: command tx timeout [ 1408.914330][T28099] vlan2: entered promiscuous mode [ 1408.936397][T28099] vlan2: entered allmulticast mode [ 1408.953476][T28099] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1408.978676][T28099] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1408.997435][T28099] team0: Port device vlan2 added [ 1409.064271][T28069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.082978][T28069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.096471][T28069] bridge_slave_0: entered allmulticast mode [ 1409.123278][T28069] bridge_slave_0: entered promiscuous mode [ 1409.260907][T28069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.316218][T28069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.352330][T28069] bridge_slave_1: entered allmulticast mode [ 1409.363742][T28069] bridge_slave_1: entered promiscuous mode [ 1409.593729][ T5230] Bluetooth: hci0: command tx timeout [ 1409.603586][T28123] program syz.3.5392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.739858][ T2682] hsr_slave_0: left promiscuous mode [ 1409.754093][ T2682] hsr_slave_1: left promiscuous mode [ 1409.770864][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.794499][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.817423][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.838858][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.872589][ T2682] veth1_macvtap: left promiscuous mode [ 1409.878733][ T2682] veth0_macvtap: left promiscuous mode [ 1409.886137][ T2682] veth1_vlan: left promiscuous mode [ 1409.892292][ T2682] veth0_vlan: left promiscuous mode [ 1409.932044][ T5282] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1410.122305][ T5282] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1410.156584][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.172419][ T5282] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1410.184025][ T5282] usb 4-1: config 1 has no interface number 1 [ 1410.193451][ T5282] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1410.214185][ T5282] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1410.224319][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.236333][ T5282] usb 4-1: Product: syz [ 1410.241029][ T5282] usb 4-1: Manufacturer: syz [ 1410.248420][ T5282] usb 4-1: SerialNumber: syz [ 1410.541704][ T5282] usb 4-1: USB disconnect, device number 78 [ 1410.599032][T27847] udevd[27847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1410.891149][ T5230] Bluetooth: hci3: command tx timeout [ 1410.951577][ T2682] team0 (unregistering): Port device team_slave_1 removed [ 1411.027355][ T2682] team0 (unregistering): Port device team_slave_0 removed [ 1411.159031][T28128] loop9: detected capacity change from 0 to 7 [ 1411.171099][T28128] Dev loop9: unable to read RDB block 7 [ 1411.177841][T28128] loop9: unable to read partition table [ 1411.184303][T28128] loop9: partition table beyond EOD, truncated [ 1411.192386][T28128] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1411.192386][T28128] ) failed (rc=-5) [ 1411.408490][T28132] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1411.446314][T28132] kvm: pic: single mode not supported [ 1411.446403][T28132] kvm: pic: non byte read [ 1411.461053][T28132] kvm: pic: level sensitive irq not supported [ 1411.461141][T28132] kvm: pic: non byte read [ 1411.475195][T28132] kvm: pic: level sensitive irq not supported [ 1411.475295][T28132] kvm: pic: non byte read [ 1411.492744][T28132] kvm: pic: non byte read [ 1411.498573][T28132] kvm: pic: non byte read [ 1411.528150][T28132] kvm: pic: non byte read [ 1411.534400][T28132] kvm: pic: non byte read [ 1411.699322][ T5230] Bluetooth: hci0: command tx timeout [ 1411.899627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.100809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.164244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.232365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.375266][T28069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.402626][T26842] bridge0: port 3(syz_tun) entered disabled state [ 1412.458402][T26842] syz_tun (unregistering): left allmulticast mode [ 1412.466251][T26842] syz_tun (unregistering): left promiscuous mode [ 1412.473591][T26842] bridge0: port 3(syz_tun) entered disabled state [ 1412.488470][T28069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.503616][T28081] chnl_net:caif_netlink_parms(): no params data found [ 1412.702497][T28069] team0: Port device team_slave_0 added [ 1412.768755][T28069] team0: Port device team_slave_1 added [ 1412.972160][ T5230] Bluetooth: hci3: command tx timeout [ 1413.000388][T28069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.022019][T28069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.049989][T28069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.216684][T28069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.231939][T28069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.270414][T28069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.313222][T28081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.322066][T28081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.330459][T28081] bridge_slave_0: entered allmulticast mode [ 1413.383102][T28081] bridge_slave_0: entered promiscuous mode [ 1413.403275][ T5282] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1413.434832][T28081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.461977][T28081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.479792][T28081] bridge_slave_1: entered allmulticast mode [ 1413.503361][T28081] bridge_slave_1: entered promiscuous mode [ 1413.572039][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 1413.586504][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14112, setting to 1024 [ 1413.612217][ T5282] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1413.640194][T28069] hsr_slave_0: entered promiscuous mode [ 1413.651330][T26140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1413.652807][ T5282] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1413.669188][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.678364][T26140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1413.678367][T28069] hsr_slave_1: entered promiscuous mode [ 1413.686300][ T5282] usb 4-1: Product: syz [ 1413.696793][ T5282] usb 4-1: Manufacturer: syz [ 1413.699084][T26140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1413.701550][ T5282] usb 4-1: SerialNumber: syz [ 1413.730729][T26140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1413.741150][T26140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1413.741195][ T5282] usb 4-1: config 0 descriptor?? [ 1413.753698][T26140] Bluetooth: hci0: command tx timeout [ 1413.762056][T26140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1413.776190][T28081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.812985][T28150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1413.823671][ T5282] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1413.845141][T28081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.019005][T28081] team0: Port device team_slave_0 added [ 1414.035173][T28081] team0: Port device team_slave_1 added [ 1414.063326][ T5285] usb 4-1: USB disconnect, device number 79 [ 1414.306857][ T2682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.348807][T28081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.358729][T28081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.403649][T28081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.434162][T28081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.441365][T28081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.468776][T28081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.556627][ T2682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.749199][ T2682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.868932][T28081] hsr_slave_0: entered promiscuous mode [ 1414.898070][T28081] hsr_slave_1: entered promiscuous mode [ 1414.920025][T28081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1414.944260][T28081] Cannot create hsr debugfs directory [ 1415.045810][ T5230] Bluetooth: hci3: command tx timeout [ 1415.068531][ T2682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.554068][T28166] chnl_net:caif_netlink_parms(): no params data found [ 1415.832234][ T5230] Bluetooth: hci1: command tx timeout [ 1416.233949][ T2682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.296871][T28166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.316771][T28166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.331771][T28166] bridge_slave_0: entered allmulticast mode [ 1416.339760][T28166] bridge_slave_0: entered promiscuous mode [ 1416.357498][T28166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.368907][T28166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.380690][T28166] bridge_slave_1: entered allmulticast mode [ 1416.389283][T28166] bridge_slave_1: entered promiscuous mode [ 1416.434882][ T2682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.513980][T28166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.539599][T28166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.595288][ T2682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.647931][T28198] geneve2: entered promiscuous mode [ 1416.661999][T28198] geneve2: entered allmulticast mode [ 1416.720987][T28166] team0: Port device team_slave_0 added [ 1416.745838][T28166] team0: Port device team_slave_1 added [ 1416.779291][ T2682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.845305][T28166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.856566][T28166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.891324][T28166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.928622][T28166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.942043][T28166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.001898][T28166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.042333][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1417.097578][T28166] hsr_slave_0: entered promiscuous mode [ 1417.105563][T28166] hsr_slave_1: entered promiscuous mode [ 1417.113791][T28166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.122384][T28166] Cannot create hsr debugfs directory [ 1417.212127][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1417.226670][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1417.283383][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1417.301655][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1417.315949][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1417.346113][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1417.376241][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.391932][ T9] usb 4-1: Product: syz [ 1417.399488][ T9] usb 4-1: Manufacturer: syz [ 1417.411738][ T2682] bridge_slave_1: left allmulticast mode [ 1417.427395][ T9] usb 4-1: SerialNumber: syz [ 1417.434791][ T2682] bridge_slave_1: left promiscuous mode [ 1417.434980][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.462169][ T9] usb 4-1: config 0 descriptor?? [ 1417.483009][ T2682] bridge_slave_0: left allmulticast mode [ 1417.487589][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input93 [ 1417.491024][ T2682] bridge_slave_0: left promiscuous mode [ 1417.520679][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.543600][ T2682] bridge_slave_1: left allmulticast mode [ 1417.553124][ T2682] bridge_slave_1: left promiscuous mode [ 1417.560129][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.573437][ T2682] bridge_slave_0: left allmulticast mode [ 1417.589680][ T2682] bridge_slave_0: left promiscuous mode [ 1417.600127][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.757714][ T9] imon:send_packet: packet tx failed (-71) [ 1417.804484][ T9] imon 4-1:0.0: panel buttons/knobs setup failed [ 1417.930315][ T5230] Bluetooth: hci1: command tx timeout [ 1417.942799][ T9] rc_core: IR keymap rc-imon-pad not found [ 1417.960447][ T9] Registered IR keymap rc-empty [ 1417.979110][ T9] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1418.002128][ T9] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1418.027180][ T9] imon:send_packet: packet tx failed (-71) [ 1418.049895][ T9] imon 4-1:0.0: remote input dev register failed [ 1418.065385][ T9] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1418.167193][ T9] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1418.174309][ T9] imon:imon_probe: failed to initialize context! [ 1418.181546][ T9] imon 4-1:0.0: unable to register, err -19 [ 1418.210454][ T9] usb 4-1: USB disconnect, device number 80 [ 1418.981304][ T2682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.000126][ T2682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.013229][ T2682] bond0 (unregistering): Released all slaves [ 1419.202393][ T5282] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1419.259883][ T2682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.280907][ T2682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.299856][ T2682] bond0 (unregistering): Released all slaves [ 1419.372306][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 1419.383906][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14112, setting to 1024 [ 1419.395852][ T5282] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1419.413800][ T5282] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1419.438630][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.448846][ T5282] usb 4-1: Product: syz [ 1419.456832][ T5282] usb 4-1: Manufacturer: syz [ 1419.463172][ T5282] usb 4-1: SerialNumber: syz [ 1419.500611][ T5282] usb 4-1: config 0 descriptor?? [ 1419.506989][T28217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1419.551317][ T5282] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1419.794256][ T5282] usb 4-1: USB disconnect, device number 81 [ 1420.002679][ T5230] Bluetooth: hci1: command tx timeout [ 1420.201460][T28081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1420.223743][T28081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1420.252505][T28081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1420.338594][T28081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1420.506730][ T2682] hsr_slave_0: left promiscuous mode [ 1420.532821][ T2682] hsr_slave_1: left promiscuous mode [ 1420.539758][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.572792][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.594783][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.611606][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.642311][ T2682] hsr_slave_0: left promiscuous mode [ 1420.651507][ T2682] hsr_slave_1: left promiscuous mode [ 1420.685648][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.700851][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.722886][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.742051][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.837145][ T2682] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1420.856099][ T2682] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1420.875614][ T2682] veth1_macvtap: left promiscuous mode [ 1420.896137][ T2682] veth0_macvtap: left promiscuous mode [ 1420.912901][ T2682] veth1_vlan: left promiscuous mode [ 1420.918465][ T2682] veth0_vlan: left promiscuous mode [ 1420.933773][ T2682] veth1_macvtap: left promiscuous mode [ 1420.939569][ T2682] veth0_macvtap: left promiscuous mode [ 1420.958765][ T2682] veth1_vlan: left promiscuous mode [ 1420.970693][ T2682] veth0_vlan: left promiscuous mode [ 1421.519141][ T2682] team0 (unregistering): Port device vlan2 removed [ 1421.607187][T28286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5421'. [ 1422.083503][ T5230] Bluetooth: hci1: command tx timeout [ 1422.686035][ T2682] team0 (unregistering): Port device team_slave_1 removed [ 1422.785870][ T2682] team0 (unregistering): Port device team_slave_0 removed [ 1423.209466][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.218500][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.326896][ T2682] team0 (unregistering): Port device team_slave_1 removed [ 1424.410775][ T2682] team0 (unregistering): Port device team_slave_0 removed [ 1425.265159][T28069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1425.590589][T28069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1425.601430][T28069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1425.729417][T28069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1425.982149][T28322] fuse: Bad value for 'fd' [ 1426.279672][T28081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.491457][T28069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.551347][T28081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.619543][T28069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.638301][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.646869][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.687240][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.694849][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.746858][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.755064][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.787567][T28166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1426.853816][T28166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1426.889431][T28166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1426.924368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.931766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.980068][T28166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1427.100126][ T2682] bridge_slave_1: left allmulticast mode [ 1427.107300][ T2682] bridge_slave_1: left promiscuous mode [ 1427.116752][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.127387][ T2682] bridge_slave_0: left allmulticast mode [ 1427.134984][ T2682] bridge_slave_0: left promiscuous mode [ 1427.142826][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.429588][T27301] IPVS: starting estimator thread 0... [ 1427.532184][T28353] IPVS: using max 20 ests per chain, 48000 per kthread [ 1427.919735][ T2682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.936807][ T2682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.950219][ T2682] bond0 (unregistering): Released all slaves [ 1428.280600][T28081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.362353][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1428.417921][ T2682] hsr_slave_0: left promiscuous mode [ 1428.425953][ T2682] hsr_slave_1: left promiscuous mode [ 1428.434031][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.452007][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.469962][ T2682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.480274][ T2682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.523883][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.547166][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.564782][ T2682] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1428.583356][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1428.605694][ T2682] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1428.617857][ T2682] veth1_macvtap: left promiscuous mode [ 1428.627827][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.642011][ T2682] veth0_macvtap: left promiscuous mode [ 1428.667680][ T9] usb 4-1: config 0 descriptor?? [ 1428.673742][ T2682] veth1_vlan: left promiscuous mode [ 1428.679212][ T2682] veth0_vlan: left promiscuous mode [ 1428.980448][ T2682] team0 (unregistering): Port device vlan2 removed [ 1429.116712][ T9] appleir 0003:05AC:8241.007A: item fetching failed at offset 5/7 [ 1429.138191][ T9] appleir 0003:05AC:8241.007A: parse failed [ 1429.146756][ T9] appleir 0003:05AC:8241.007A: probe with driver appleir failed with error -22 [ 1429.456499][ T9] usb 4-1: USB disconnect, device number 82 [ 1429.822567][ T2682] team0 (unregistering): Port device team_slave_1 removed [ 1429.905810][ T2682] team0 (unregistering): Port device team_slave_0 removed [ 1430.481945][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1430.642050][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1430.653684][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.673061][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.685521][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1430.706298][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.727869][ T9] usb 4-1: config 0 descriptor?? [ 1430.963760][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1430.984275][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1431.020499][ T9] usb 4-1: USB disconnect, device number 83 [ 1431.297164][T28166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.316682][T28069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.427572][T28166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.473701][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.481443][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.499254][T28081] veth0_vlan: entered promiscuous mode [ 1431.530907][T28069] veth0_vlan: entered promiscuous mode [ 1431.560559][T28081] veth1_vlan: entered promiscuous mode [ 1431.590070][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.597794][T16443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.651633][T28069] veth1_vlan: entered promiscuous mode [ 1431.749698][T28081] veth0_macvtap: entered promiscuous mode [ 1431.829889][T28081] veth1_macvtap: entered promiscuous mode [ 1431.860392][T28069] veth0_macvtap: entered promiscuous mode [ 1431.891440][T28069] veth1_macvtap: entered promiscuous mode [ 1431.921055][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.942627][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.968031][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.982108][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.003233][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1432.005704][T28081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.053287][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.084541][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.097537][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.109172][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.123005][T28081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.153496][T28081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.172092][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1432.175921][T28081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.180723][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14112, setting to 1024 [ 1432.190867][T28081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.216677][T28081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.219652][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1432.235119][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.254340][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1432.257861][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.274005][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.281901][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.285146][ T9] usb 4-1: Product: syz [ 1432.299353][ T9] usb 4-1: Manufacturer: syz [ 1432.301090][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.305035][ T9] usb 4-1: SerialNumber: syz [ 1432.331063][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.333034][ T9] usb 4-1: config 0 descriptor?? [ 1432.351106][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.352873][T28371] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1432.363218][T28069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.380140][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1432.451572][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.464716][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.492033][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.504482][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.515702][T28069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.526701][T28069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.539098][T28069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.551765][T28069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.562997][T28069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.582485][T28069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.596962][T27301] usb 4-1: USB disconnect, device number 84 [ 1432.604260][T28069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.650226][T28166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.805903][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.828255][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.910754][T28166] veth0_vlan: entered promiscuous mode [ 1432.949253][ T2682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.967606][ T2682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.982620][T16443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.991137][T16443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.018252][T28166] veth1_vlan: entered promiscuous mode [ 1433.059002][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.070989][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.139538][T28166] veth0_macvtap: entered promiscuous mode [ 1433.211238][T28166] veth1_macvtap: entered promiscuous mode [ 1433.281733][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.322964][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.349596][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.368704][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.376892][T28396] FAULT_INJECTION: forcing a failure. [ 1433.376892][T28396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.379559][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.402217][T28396] CPU: 1 UID: 0 PID: 28396 Comm: syz.3.5440 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 1433.404744][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.413500][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1433.413527][T28396] Call Trace: [ 1433.413539][T28396] [ 1433.413551][T28396] dump_stack_lvl+0x241/0x360 [ 1433.413592][T28396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.413622][T28396] ? __pfx__printk+0x10/0x10 [ 1433.413662][T28396] should_fail_ex+0x3b0/0x4e0 [ 1433.413699][T28396] _copy_from_user+0x2f/0xe0 [ 1433.413730][T28396] uhid_char_write+0x1f6/0xb40 [ 1433.425731][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.434189][T28396] ? security_file_permission+0x74/0x280 [ 1433.434249][T28396] vfs_writev+0x5a9/0xba0 [ 1433.434288][T28396] ? __pfx_uhid_char_write+0x10/0x10 [ 1433.434320][T28396] ? __pfx_vfs_writev+0x10/0x10 [ 1433.434344][T28396] ? vfs_write+0x7bf/0xc90 [ 1433.434409][T28396] ? __fdget_pos+0x19a/0x320 [ 1433.434437][T28396] do_writev+0x1b1/0x350 [ 1433.434469][T28396] ? __pfx_do_writev+0x10/0x10 [ 1433.440174][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.441598][T28396] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1433.448698][T28166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.451773][T28396] ? lockdep_hardirqs_on+0x99/0x150 [ 1433.451816][T28396] __do_fast_syscall_32+0xb4/0x110 [ 1433.451848][T28396] ? exc_page_fault+0x590/0x8c0 [ 1433.451885][T28396] do_fast_syscall_32+0x34/0x80 [ 1433.451916][T28396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1433.451946][T28396] RIP: 0023:0xf742d579 [ 1433.451969][T28396] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1433.451989][T28396] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1433.452015][T28396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 1433.452033][T28396] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1433.452048][T28396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1433.452063][T28396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1433.452079][T28396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1433.452111][T28396] [ 1433.697071][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.708365][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.718759][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.730197][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.740805][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.751629][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.763688][T28166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.777122][T28166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.790051][T28166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.834995][T28166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.862854][T28166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.878923][T28166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.888986][T28166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.912014][T27301] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1434.007906][T24939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.028198][T24939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.060901][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.081406][T27301] usb 4-1: Using ep0 maxpacket: 8 [ 1434.089392][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.100542][T27301] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1434.121642][T27301] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1434.135936][T27301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1434.150600][T27301] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1434.169112][T27301] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1434.201211][T27301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.216678][T27301] usb 4-1: Product: syz [ 1434.221165][T27301] usb 4-1: Manufacturer: syz [ 1434.230798][T27301] usb 4-1: SerialNumber: syz [ 1434.256677][T27301] usb 4-1: config 0 descriptor?? [ 1434.278753][T27301] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input95 [ 1434.300471][T28408] bridge0: port 3(syz_tun) entered blocking state [ 1434.315882][T28408] bridge0: port 3(syz_tun) entered disabled state [ 1434.324975][T28408] syz_tun: entered allmulticast mode [ 1434.334239][T28408] syz_tun: entered promiscuous mode [ 1434.346279][T28408] bridge0: port 3(syz_tun) entered blocking state [ 1434.353740][T28408] bridge0: port 3(syz_tun) entered forwarding state [ 1434.380467][T28408] IPVS: length: 8 != 6818872 [ 1434.406359][T28408] vlan2: entered promiscuous mode [ 1434.411676][T28408] vlan2: entered allmulticast mode [ 1434.426274][T28408] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1434.437742][T28408] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1434.456623][T28408] team0: Port device vlan2 added [ 1434.632156][T27301] imon:send_packet: packet tx failed (-71) [ 1434.656238][T27301] imon 4-1:0.0: panel buttons/knobs setup failed [ 1434.696858][T28420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1434.709136][T28420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1434.766603][ T9] IPVS: starting estimator thread 0... [ 1434.778117][T27301] rc_core: IR keymap rc-imon-pad not found [ 1434.808274][T27301] Registered IR keymap rc-empty [ 1434.816506][T27301] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1434.828677][T27301] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1434.839762][T27301] imon:send_packet: packet tx failed (-71) [ 1434.862133][T27301] imon 4-1:0.0: remote input dev register failed [ 1434.869153][T27301] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1434.891746][T27301] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1434.891963][T28421] IPVS: using max 15 ests per chain, 36000 per kthread [ 1434.898299][T27301] imon:imon_probe: failed to initialize context! [ 1434.914497][T27301] imon 4-1:0.0: unable to register, err -19 [ 1434.925547][T27301] usb 4-1: USB disconnect, device number 85 [ 1435.052475][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1435.235396][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1435.272978][T28435] loop9: detected capacity change from 0 to 7 [ 1435.281010][T28435] Dev loop9: unable to read RDB block 7 [ 1435.283658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.311217][T28435] loop9: unable to read partition table [ 1435.316553][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.330668][T28435] loop9: partition table beyond EOD, truncated [ 1435.359453][T28435] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1435.359453][T28435] ) failed (rc=-5) [ 1435.359678][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1435.395342][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.443955][ T9] usb 3-1: config 0 descriptor?? [ 1435.777904][T28449] IPVS: length: 8 != 6818872 [ 1435.859680][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1435.878220][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1435.898607][ T9] usb 3-1: USB disconnect, device number 83 [ 1436.051758][T28456] FAULT_INJECTION: forcing a failure. [ 1436.051758][T28456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.110182][T28456] CPU: 1 UID: 0 PID: 28456 Comm: syz.3.5459 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 1436.122333][T28456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1436.135222][T28456] Call Trace: [ 1436.139359][T28456] [ 1436.142523][T28456] dump_stack_lvl+0x241/0x360 [ 1436.147939][T28456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1436.154029][T28456] ? __pfx__printk+0x10/0x10 [ 1436.161142][T28456] ? __pfx_lock_release+0x10/0x10 [ 1436.167657][T28456] should_fail_ex+0x3b0/0x4e0 [ 1436.172980][T28456] _copy_from_iter+0x1ed/0x1d60 [ 1436.179592][T28456] ? __virt_addr_valid+0x183/0x530 [ 1436.185287][T28456] ? __pfx_lock_release+0x10/0x10 [ 1436.190644][T28456] ? __alloc_skb+0x28f/0x440 [ 1436.196365][T28456] ? __pfx__copy_from_iter+0x10/0x10 [ 1436.202560][T28456] ? __virt_addr_valid+0x183/0x530 [ 1436.208388][T28456] ? __virt_addr_valid+0x183/0x530 [ 1436.215302][T28456] ? __virt_addr_valid+0x45f/0x530 [ 1436.221645][T28456] ? __check_object_size+0x48e/0x900 [ 1436.227867][T28456] netlink_sendmsg+0x73d/0xcb0 [ 1436.234083][T28456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.241005][T28456] ? __pfx_lock_release+0x10/0x10 [ 1436.247677][T28456] ? aa_sock_msg_perm+0x91/0x160 [ 1436.254893][T28456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.260314][T28456] __sock_sendmsg+0x221/0x270 [ 1436.265305][T28456] ____sys_sendmsg+0x52a/0x7e0 [ 1436.270306][T28456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1436.277074][T28456] __sys_sendmsg+0x2aa/0x390 [ 1436.283048][T28456] ? __pfx___sys_sendmsg+0x10/0x10 [ 1436.288643][T28456] ? vfs_write+0x7bf/0xc90 [ 1436.293299][T28456] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1436.300898][T28456] ? lockdep_hardirqs_on+0x99/0x150 [ 1436.306567][T28456] __do_fast_syscall_32+0xb4/0x110 [ 1436.312329][T28456] ? exc_page_fault+0x590/0x8c0 [ 1436.317469][T28456] do_fast_syscall_32+0x34/0x80 [ 1436.322511][T28456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1436.329773][T28456] RIP: 0023:0xf742d579 [ 1436.334584][T28456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1436.361842][T28456] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1436.372334][T28456] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000380 [ 1436.381835][T28456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1436.390145][T28456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1436.398653][T28456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1436.408529][T28456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1436.416857][T28456] [ 1436.524239][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1436.591478][T28463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1436.681986][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1436.696315][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1436.720586][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1436.747018][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1436.812862][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.837844][ T9] usb 5-1: Product: syz [ 1436.858033][ T9] usb 5-1: Manufacturer: syz [ 1436.868184][ T9] usb 5-1: SerialNumber: syz [ 1436.887781][ T9] usb 5-1: config 0 descriptor?? [ 1436.901226][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1436.921694][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1437.002048][T18208] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1437.163321][T28480] IPVS: length: 8 != 6818872 [ 1437.164583][T18208] usb 2-1: Using ep0 maxpacket: 16 [ 1437.189727][T18208] usb 2-1: config index 0 descriptor too short (expected 12147, got 27) [ 1437.200197][T18208] usb 2-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 1437.237146][T27301] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1437.268114][T18208] usb 2-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.289451][T18208] usb 2-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 1437.307029][T18208] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.318609][T18208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.331900][T18208] usb 2-1: Product: syz [ 1437.336888][T18208] usb 2-1: Manufacturer: syz [ 1437.349987][T18208] usb 2-1: SerialNumber: syz [ 1437.432606][T27301] usb 4-1: Using ep0 maxpacket: 8 [ 1437.447334][T27301] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1437.467788][T27301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1437.488389][T27301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1437.500920][T27301] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.517535][T27301] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1437.542063][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1437.557675][T27301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.568159][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1437.573669][T28466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.585394][T13772] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1437.600081][T28466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.618456][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1437.788536][T13772] usb 3-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 1437.811874][T13772] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1437.821439][T13772] usb 3-1: Product: syz [ 1437.845031][T13772] usb 3-1: config 0 descriptor?? [ 1437.852817][T27301] usb 4-1: GET_CAPABILITIES returned 0 [ 1437.871218][T13772] gspca_main: tv8532-2.14.0 probing 0545:808b [ 1437.872466][T27301] usbtmc 4-1:16.0: can't read capabilities [ 1437.911374][T28485] input: syz0 as /devices/virtual/input/input97 [ 1438.141323][ T5281] usb 4-1: USB disconnect, device number 86 [ 1438.208484][T28455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.221039][T28455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.236876][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1438.332602][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1438.347965][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1438.357993][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1438.371732][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1438.830840][T28499] loop9: detected capacity change from 0 to 7 [ 1438.851071][T28499] Dev loop9: unable to read RDB block 7 [ 1438.858547][T28499] loop9: unable to read partition table [ 1438.873140][T28499] loop9: partition table beyond EOD, truncated [ 1438.881389][T28499] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1438.881389][T28499] ) failed (rc=-5) [ 1439.014964][T28503] tipc: Started in network mode [ 1439.020215][T28503] tipc: Node identity f7, cluster identity 4711 [ 1439.029891][T28503] tipc: Node number set to 247 [ 1439.743649][T27301] usb 2-1: USB disconnect, device number 36 [ 1439.979998][T28517] IPVS: length: 8 != 6818872 [ 1440.032982][T18208] usb 5-1: USB disconnect, device number 106 [ 1440.076808][T28519] loop2: detected capacity change from 0 to 7 [ 1440.089232][T28519] Dev loop2: unable to read RDB block 7 [ 1440.097946][T28519] loop2: unable to read partition table [ 1440.110043][T28519] loop2: partition table beyond EOD, truncated [ 1440.118725][T28519] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1440.182572][T27301] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1440.290202][ T9] usb 3-1: USB disconnect, device number 84 [ 1440.381442][T28529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.385311][T27301] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 1440.417959][T27301] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 1440.426843][T18208] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1440.435031][T27301] usb 2-1: Manufacturer: syz [ 1440.449385][T27301] usb 2-1: config 0 descriptor?? [ 1440.500612][T28529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.592240][T18208] usb 5-1: Using ep0 maxpacket: 32 [ 1440.604285][T18208] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=89.65 [ 1440.615235][T18208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.624694][T18208] usb 5-1: Product: syz [ 1440.630592][T18208] usb 5-1: Manufacturer: syz [ 1440.637033][T18208] usb 5-1: SerialNumber: syz [ 1440.645867][T18208] usb 5-1: config 0 descriptor?? [ 1440.654825][T18208] net1080 5-1:0.0: probe with driver net1080 failed with error -22 [ 1440.873339][T27301] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1440.889359][T28521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.906171][T28521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.936437][T13772] usb 5-1: USB disconnect, device number 107 [ 1441.032494][ T5285] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1441.172084][ T5285] usb 4-1: device descriptor read/64, error -71 [ 1441.286383][T27301] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1441.297463][T27301] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1441.316449][T27301] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1441.340083][T27301] usb 2-1: USB disconnect, device number 37 [ 1441.360449][T28166] bridge0: port 3(syz_tun) entered disabled state [ 1441.391868][T28166] syz_tun (unregistering): left allmulticast mode [ 1441.399820][T28166] syz_tun (unregistering): left promiscuous mode [ 1441.408239][T28166] bridge0: port 3(syz_tun) entered disabled state [ 1441.412178][ T5285] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1441.552697][ T5285] usb 4-1: device descriptor read/64, error -71 [ 1441.595961][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.621506][T28541] IPVS: length: 8 != 6818872 [ 1441.651703][T28540] bridge0: port 3(syz_tun) entered blocking state [ 1441.667951][T28540] bridge0: port 3(syz_tun) entered disabled state [ 1441.678179][T28540] syz_tun: entered allmulticast mode [ 1441.694092][ T5285] usb usb4-port1: attempt power cycle [ 1441.703629][T28540] syz_tun: entered promiscuous mode [ 1441.714683][T28540] bridge0: port 3(syz_tun) entered blocking state [ 1441.722280][T28540] bridge0: port 3(syz_tun) entered forwarding state [ 1441.744830][T28541] vlan2: entered promiscuous mode [ 1441.751644][T28541] vlan2: entered allmulticast mode [ 1441.759237][T28541] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1441.771061][T28541] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1441.832769][T28541] team0: Port device vlan2 added [ 1441.917761][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.068000][T26140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1442.087562][T26140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1442.099968][T26140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1442.111934][ T5285] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1442.124867][T26140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1442.137625][ T5285] usb 4-1: device descriptor read/8, error -71 [ 1442.148702][T26140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1442.153251][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.176772][T26140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1442.239664][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.262135][ T5281] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1442.322145][T27301] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1442.392823][ T5285] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1442.436884][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.450163][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.465300][T27301] usb 5-1: device descriptor read/64, error -71 [ 1442.468251][ T5281] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1442.493645][ T5285] usb 4-1: device descriptor read/8, error -71 [ 1442.508138][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.531544][ T5281] usb 2-1: config 0 descriptor?? [ 1442.571453][ T12] bridge_slave_1: left allmulticast mode [ 1442.592558][ T12] bridge_slave_1: left promiscuous mode [ 1442.600137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.623963][ T5285] usb usb4-port1: unable to enumerate USB device [ 1442.646633][ T12] bridge_slave_0: left allmulticast mode [ 1442.654275][ T12] bridge_slave_0: left promiscuous mode [ 1442.664714][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.748531][T28545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.752102][T27301] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1442.788345][T28545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.923064][T27301] usb 5-1: device descriptor read/64, error -71 [ 1443.059645][T27301] usb usb5-port1: attempt power cycle [ 1443.414904][T27301] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1443.480149][T27301] usb 5-1: device descriptor read/8, error -71 [ 1443.708825][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.726884][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.744632][ T12] bond0 (unregistering): Released all slaves [ 1443.752367][T27301] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1443.794208][T27301] usb 5-1: device descriptor read/8, error -71 [ 1443.805560][T28551] chnl_net:caif_netlink_parms(): no params data found [ 1443.873418][ T5281] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.007B/input/input98 [ 1443.913748][T27301] usb usb5-port1: unable to enumerate USB device [ 1444.004422][ T5281] uclogic 0003:256C:006D.007B: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1444.139940][T28545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.197795][T28545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.242315][ T5230] Bluetooth: hci1: command tx timeout [ 1444.249850][ T5282] usb 2-1: USB disconnect, device number 38 [ 1444.251468][T28571] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1444.274455][T28571] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1444.343420][T28571] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1444.547660][T28551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.558277][T28587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 1444.564400][T28551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.587361][T28551] bridge_slave_0: entered allmulticast mode [ 1444.600121][T28551] bridge_slave_0: entered promiscuous mode [ 1444.657569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.687477][ T12] hsr_slave_0: left promiscuous mode [ 1444.698494][ T12] hsr_slave_1: left promiscuous mode [ 1444.710609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.722141][T13772] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1444.729849][T28592] loop9: detected capacity change from 0 to 7 [ 1444.747432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.753818][T28592] Dev loop9: unable to read RDB block 7 [ 1444.763711][T28592] loop9: unable to read partition table [ 1444.768486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.770515][T28592] loop9: partition table beyond EOD, truncated [ 1444.787341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.791525][T28592] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1444.791525][T28592] ) failed (rc=-5) [ 1444.850442][ T12] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1444.885736][ T12] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1444.905259][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1444.934724][ T12] veth1_macvtap: left promiscuous mode [ 1444.942879][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1444.960432][ T12] veth0_macvtap: left promiscuous mode [ 1444.967525][ T12] veth1_vlan: left promiscuous mode [ 1444.975673][ T12] veth0_vlan: left promiscuous mode [ 1444.985293][T13772] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 1444.995605][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.005132][T13772] usb 4-1: Product: syz [ 1445.009515][T13772] usb 4-1: Manufacturer: syz [ 1445.014488][T13772] usb 4-1: SerialNumber: syz [ 1445.024383][T13772] usb 4-1: config 0 descriptor?? [ 1445.040943][T13772] option 4-1:0.0: GSM modem (1-port) converter detected [ 1445.302720][T28603] hub 9-0:1.0: USB hub found [ 1445.362845][T28603] hub 9-0:1.0: 8 ports detected [ 1445.363610][T28604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.391630][T28604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.414134][ T12] team0 (unregistering): Port device vlan2 removed [ 1445.414337][ T5281] usb 4-1: USB disconnect, device number 91 [ 1445.454676][ T5281] option 4-1:0.0: device disconnected [ 1445.605372][T13772] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1445.752868][T13772] usb 5-1: device descriptor read/64, error -71 [ 1445.822235][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1445.992245][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1446.024343][T13772] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1446.042667][ T25] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1446.066573][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1446.093066][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1446.113616][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.137189][ T25] usb 2-1: config 0 descriptor?? [ 1446.202085][T13772] usb 5-1: device descriptor read/64, error -71 [ 1446.313105][T13772] usb usb5-port1: attempt power cycle [ 1446.318766][ T5230] Bluetooth: hci1: command tx timeout [ 1446.406512][ T5282] usb 2-1: USB disconnect, device number 39 [ 1446.657926][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1446.681909][T13772] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1446.713530][T13772] usb 5-1: device descriptor read/8, error -71 [ 1446.784537][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1446.982989][T13772] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1447.012861][T13772] usb 5-1: device descriptor read/8, error -71 [ 1447.141088][T13772] usb usb5-port1: unable to enumerate USB device [ 1447.303350][ T25] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1447.442146][ T25] usb 5-1: device descriptor read/64, error -71 [ 1447.702167][ T25] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1447.748403][T28551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.756342][T28551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.767683][T28551] bridge_slave_1: entered allmulticast mode [ 1447.781531][T28551] bridge_slave_1: entered promiscuous mode [ 1447.827467][T27628] bridge0: port 3(syz_tun) entered disabled state [ 1447.842199][ T25] usb 5-1: device descriptor read/64, error -71 [ 1447.862555][T27628] syz_tun (unregistering): left allmulticast mode [ 1447.869686][T27628] syz_tun (unregistering): left promiscuous mode [ 1447.877969][T27628] bridge0: port 3(syz_tun) entered disabled state [ 1447.954366][ T25] usb usb5-port1: attempt power cycle [ 1447.984963][T28551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.036396][T28551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.203778][T28551] team0: Port device team_slave_0 added [ 1448.260769][T28551] team0: Port device team_slave_1 added [ 1448.450782][ T5230] Bluetooth: hci1: command tx timeout [ 1449.420824][T28551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.437412][T28551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.518852][T28551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.607603][T28551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.619909][T28551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.659315][T28551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.666814][ T25] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1449.828729][ T12] IPVS: stop unused estimator thread 0... [ 1450.090538][ T8878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.136356][T27301] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.151083][ T8878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.160791][T27301] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.222751][T28551] hsr_slave_0: entered promiscuous mode [ 1450.275750][T28551] hsr_slave_1: entered promiscuous mode [ 1450.318570][T28551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.350113][T28551] Cannot create hsr debugfs directory [ 1450.472005][ T5230] Bluetooth: hci1: command tx timeout [ 1450.493383][ T5282] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.583746][T26140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.601999][T26140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.622147][T26140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.635440][T26140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.655967][T26140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.666457][T26140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1451.222004][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1451.443933][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1451.477671][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.511485][ T9] usb 2-1: Product: syz [ 1451.531525][ T9] usb 2-1: Manufacturer: syz [ 1451.553283][ T9] usb 2-1: SerialNumber: syz [ 1451.582379][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1451.650045][ T5285] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1451.903653][T28663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.987458][T28663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.029727][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.085809][ T9] usb 2-1: USB disconnect, device number 40 [ 1452.521590][T28661] chnl_net:caif_netlink_parms(): no params data found [ 1452.712236][T26140] Bluetooth: hci4: command tx timeout [ 1452.730300][ T5285] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1452.756335][ T5285] ath9k_htc: Failed to initialize the device [ 1452.773894][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1452.942450][T28661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.949722][T28661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.000377][T28661] bridge_slave_0: entered allmulticast mode [ 1453.034096][T28661] bridge_slave_0: entered promiscuous mode [ 1453.061346][T28687] loop9: detected capacity change from 0 to 7 [ 1453.076706][T28661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.104232][T28687] Dev loop9: unable to read RDB block 7 [ 1453.109904][T28687] loop9: unable to read partition table [ 1453.123769][T28661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.159696][T28687] loop9: partition table beyond EOD, truncated [ 1453.170137][T28661] bridge_slave_1: entered allmulticast mode [ 1453.194466][T28687] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1453.194466][T28687] ) failed (rc=-5) [ 1453.215616][T28661] bridge_slave_1: entered promiscuous mode [ 1453.358283][T28691] net_ratelimit: 22 callbacks suppressed [ 1453.358308][T28691] netlink: zone id is out of range [ 1453.427791][T28691] netlink: zone id is out of range [ 1453.458465][T28691] netlink: zone id is out of range [ 1453.464921][T28661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.499540][T28691] netlink: zone id is out of range [ 1453.530697][T28661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.547575][T28691] netlink: zone id is out of range [ 1453.572078][T28691] netlink: zone id is out of range [ 1453.577453][T28691] netlink: zone id is out of range [ 1453.711088][T28691] netlink: zone id is out of range [ 1453.722181][T28691] netlink: del zone limit has 8 unknown bytes [ 1454.071968][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1454.792158][T26140] Bluetooth: hci4: command tx timeout [ 1456.872279][T26140] Bluetooth: hci4: command tx timeout [ 1457.231815][ C1] sched: DL replenish lagged too much [ 1457.555423][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1457.573088][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1457.582444][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1457.592994][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1457.622922][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1457.630442][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1458.952166][ T5230] Bluetooth: hci4: command tx timeout [ 1459.672589][ T5230] Bluetooth: hci5: command tx timeout [ 1461.592145][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1461.752136][ T5230] Bluetooth: hci5: command tx timeout [ 1463.832401][ T5230] Bluetooth: hci5: command tx timeout [ 1464.034161][T26140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1464.054634][T26140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1464.066888][T26140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1464.082481][T26140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1464.092805][T26140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1464.106898][T26140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1464.731523][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1464.747392][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1464.759814][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1464.779180][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1464.790375][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1464.800230][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1465.912681][ T5230] Bluetooth: hci5: command tx timeout [ 1466.154992][ T5230] Bluetooth: hci2: command tx timeout [ 1466.872154][ T5230] Bluetooth: hci6: command tx timeout [ 1468.232279][ T5230] Bluetooth: hci2: command tx timeout [ 1468.952252][ T5230] Bluetooth: hci6: command tx timeout [ 1470.312138][ T5230] Bluetooth: hci2: command tx timeout [ 1471.033083][ T5230] Bluetooth: hci6: command tx timeout [ 1472.392105][ T5230] Bluetooth: hci2: command tx timeout [ 1473.112132][ T5230] Bluetooth: hci6: command tx timeout [ 1476.311992][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1484.642589][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.649460][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.094517][T28661] team0: Port device team_slave_0 added [ 1498.762207][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.690874][T28729] chnl_net:caif_netlink_parms(): no params data found [ 1499.903833][T28729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.912832][T28729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.920673][T28729] bridge_slave_0: entered allmulticast mode [ 1499.945709][T28729] bridge_slave_0: entered promiscuous mode [ 1499.965495][T28729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.972858][T28729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.981317][T28729] bridge_slave_1: entered allmulticast mode [ 1499.997873][T28729] bridge_slave_1: entered promiscuous mode [ 1500.096099][T28729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.121044][T28729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.269946][T28729] team0: Port device team_slave_0 added [ 1500.297785][T28729] team0: Port device team_slave_1 added [ 1500.402131][T28729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.411091][T28729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.464463][T28729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.497532][T28729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.511193][T28729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.558421][T28729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.707009][T28729] hsr_slave_0: entered promiscuous mode [ 1500.743125][T28729] hsr_slave_1: entered promiscuous mode [ 1500.779339][T28729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1500.789605][T28729] Cannot create hsr debugfs directory [ 1502.943740][T26140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1502.958500][T26140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1502.974093][T26140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1502.984476][T26140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1502.992435][T26140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1503.000629][T26140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1503.406853][T28743] chnl_net:caif_netlink_parms(): no params data found [ 1503.679986][T28743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.696702][T28743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.715788][T28743] bridge_slave_0: entered allmulticast mode [ 1503.735803][T28743] bridge_slave_0: entered promiscuous mode [ 1503.754218][T28743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.771928][T28743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.794807][T28743] bridge_slave_1: entered allmulticast mode [ 1503.815657][T28743] bridge_slave_1: entered promiscuous mode [ 1503.963328][T28743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.985501][T28743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.176591][T28743] team0: Port device team_slave_0 added [ 1504.200747][T28743] team0: Port device team_slave_1 added [ 1504.273281][T28743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.280939][T28743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.324187][T28743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.348916][T28743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.361601][T28743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.405572][T28743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.633219][T28743] hsr_slave_0: entered promiscuous mode [ 1504.669968][T28743] hsr_slave_1: entered promiscuous mode [ 1504.685172][T28743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1504.700585][T28743] Cannot create hsr debugfs directory [ 1505.113754][ T5230] Bluetooth: hci0: command tx timeout [ 1507.031973][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1507.192183][ T5230] Bluetooth: hci0: command tx timeout [ 1509.281470][ T5230] Bluetooth: hci0: command tx timeout [ 1510.530660][T26140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1510.547881][T26140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1510.562566][T26140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1510.573469][T26140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1510.583615][T26140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1510.593957][T26140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1511.035654][T28755] chnl_net:caif_netlink_parms(): no params data found [ 1511.352225][T26140] Bluetooth: hci0: command tx timeout [ 1511.375428][T28755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.396619][T28755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.414700][T28755] bridge_slave_0: entered allmulticast mode [ 1511.436927][T28755] bridge_slave_0: entered promiscuous mode [ 1511.468131][T28755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.491559][T28755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.501473][T28755] bridge_slave_1: entered allmulticast mode [ 1511.523237][T28755] bridge_slave_1: entered promiscuous mode [ 1511.702195][T28755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.718084][T28755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.905375][T28755] team0: Port device team_slave_0 added [ 1511.934343][T28755] team0: Port device team_slave_1 added [ 1512.095523][T28755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.112037][T28755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.159303][T28755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.188113][T28755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.209281][T28755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.268940][T28755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.418331][T28755] hsr_slave_0: entered promiscuous mode [ 1512.445224][T28755] hsr_slave_1: entered promiscuous mode [ 1512.511123][T28755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.525249][T28755] Cannot create hsr debugfs directory [ 1512.712909][T26140] Bluetooth: hci3: command tx timeout [ 1514.792220][T26140] Bluetooth: hci3: command tx timeout [ 1516.872077][T26140] Bluetooth: hci3: command tx timeout [ 1517.522455][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1517.541050][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1517.555233][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1517.565206][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1517.578128][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1517.588488][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1518.069754][T28766] chnl_net:caif_netlink_parms(): no params data found [ 1518.375095][T28766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.398304][T28766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.412240][T28766] bridge_slave_0: entered allmulticast mode [ 1518.432106][T28766] bridge_slave_0: entered promiscuous mode [ 1518.461482][T28766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.492761][T28766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.501446][T28766] bridge_slave_1: entered allmulticast mode [ 1518.527330][T28766] bridge_slave_1: entered promiscuous mode [ 1518.665081][T28766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.699583][T28766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.867155][T28766] team0: Port device team_slave_0 added [ 1518.884745][T28766] team0: Port device team_slave_1 added [ 1518.962338][ T5230] Bluetooth: hci3: command tx timeout [ 1519.019312][T28766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.032944][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.087474][T28766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.109549][T28766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.128139][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.172214][T28766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.395436][T28766] hsr_slave_0: entered promiscuous mode [ 1519.439560][T28766] hsr_slave_1: entered promiscuous mode [ 1519.477645][T28766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.497953][T28766] Cannot create hsr debugfs directory [ 1519.690124][ T5230] Bluetooth: hci7: command tx timeout [ 1521.752229][ T5230] Bluetooth: hci7: command tx timeout [ 1523.832106][ T5230] Bluetooth: hci7: command tx timeout [ 1525.343031][T26140] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1525.359149][T26140] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1525.370673][T26140] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1525.383278][T26140] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1525.399596][T26140] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1525.411149][T26140] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1525.561974][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1525.584243][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1525.600052][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1525.614133][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1525.623860][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1525.633870][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1525.912016][ T5230] Bluetooth: hci7: command tx timeout [ 1526.111076][T28779] chnl_net:caif_netlink_parms(): no params data found [ 1526.449859][T28779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.472079][T28779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.494684][T28779] bridge_slave_0: entered allmulticast mode [ 1526.513337][T28779] bridge_slave_0: entered promiscuous mode [ 1526.538478][T28779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.561984][T28779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.571497][T28779] bridge_slave_1: entered allmulticast mode [ 1526.602011][T28779] bridge_slave_1: entered promiscuous mode [ 1526.761064][T28779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.802517][T28779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.995128][T28779] team0: Port device team_slave_0 added [ 1527.022230][T28779] team0: Port device team_slave_1 added [ 1527.187724][T28779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.211990][T28779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.266888][T28779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.299657][T28779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.322444][T28779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.381577][T28779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.512366][ T5230] Bluetooth: hci8: command tx timeout [ 1527.654491][T28779] hsr_slave_0: entered promiscuous mode [ 1527.672350][ T5230] Bluetooth: hci9: command tx timeout [ 1527.686586][T28779] hsr_slave_1: entered promiscuous mode [ 1527.706922][T28779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1527.731969][T28779] Cannot create hsr debugfs directory [ 1529.592404][ T5230] Bluetooth: hci8: command tx timeout [ 1529.752254][ T5230] Bluetooth: hci9: command tx timeout [ 1531.672212][ T5230] Bluetooth: hci8: command tx timeout [ 1531.832214][ T5230] Bluetooth: hci9: command tx timeout [ 1533.752206][ T5230] Bluetooth: hci8: command tx timeout [ 1533.915020][T26140] Bluetooth: hci9: command tx timeout [ 1546.084743][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.092711][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1565.935125][T26140] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1565.949503][T26140] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1565.963203][T26140] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1565.974604][T26140] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1565.988476][T26140] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1565.997880][T26140] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1566.476608][T28792] chnl_net:caif_netlink_parms(): no params data found [ 1566.551957][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1566.798485][T28792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.822765][T28792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.831511][T28792] bridge_slave_0: entered allmulticast mode [ 1566.860722][T28792] bridge_slave_0: entered promiscuous mode [ 1566.876416][T28792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.902130][T28792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.911074][T28792] bridge_slave_1: entered allmulticast mode [ 1566.927990][T28792] bridge_slave_1: entered promiscuous mode [ 1567.063927][T28792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.097050][T28792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.241359][T28792] team0: Port device team_slave_0 added [ 1567.273597][T28792] team0: Port device team_slave_1 added [ 1567.398384][T28792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.415132][T28792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.481612][T28792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.532839][T28792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.551983][T28792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.617085][T28792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.793085][T28792] hsr_slave_0: entered promiscuous mode [ 1567.815226][T28792] hsr_slave_1: entered promiscuous mode [ 1567.836502][T28792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1567.851995][T28792] Cannot create hsr debugfs directory [ 1568.072167][T26205] Bluetooth: hci10: command tx timeout [ 1568.632183][T26205] Bluetooth: hci1: command 0x0406 tx timeout [ 1570.152283][ T5230] Bluetooth: hci10: command tx timeout [ 1571.056409][T26205] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1571.069645][T26205] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1571.081107][T26205] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1571.089992][T26205] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1571.098995][T26205] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1571.108800][T26205] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1571.559070][T28803] chnl_net:caif_netlink_parms(): no params data found [ 1571.835164][T28803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.851956][T28803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.859418][T28803] bridge_slave_0: entered allmulticast mode [ 1571.883382][T28803] bridge_slave_0: entered promiscuous mode [ 1571.898448][T28803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.919006][T28803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.942677][T28803] bridge_slave_1: entered allmulticast mode [ 1571.962066][T28803] bridge_slave_1: entered promiscuous mode [ 1572.054316][T28803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.082967][T28803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.188050][T28803] team0: Port device team_slave_0 added [ 1572.216006][T28803] team0: Port device team_slave_1 added [ 1572.233539][T26205] Bluetooth: hci10: command tx timeout [ 1572.377921][T28803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.392495][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.450368][T28803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.484042][T28803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.501895][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.549337][T28803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.744683][T28803] hsr_slave_0: entered promiscuous mode [ 1572.775515][T28803] hsr_slave_1: entered promiscuous mode [ 1572.815947][T28803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.831951][T28803] Cannot create hsr debugfs directory [ 1573.192295][T26205] Bluetooth: hci11: command tx timeout [ 1573.758832][T26205] Bluetooth: hci4: command 0x0406 tx timeout [ 1574.312186][ T5230] Bluetooth: hci10: command tx timeout [ 1575.272125][ T5230] Bluetooth: hci11: command tx timeout [ 1577.352217][ T5230] Bluetooth: hci11: command tx timeout [ 1577.988382][T26205] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1578.012044][T26205] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1578.032231][T26205] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1578.042779][T26205] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1578.050798][T26205] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1578.059474][T26205] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1578.473431][T28814] chnl_net:caif_netlink_parms(): no params data found [ 1578.840006][T28814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.859852][T28814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.873141][T28814] bridge_slave_0: entered allmulticast mode [ 1578.893332][T28814] bridge_slave_0: entered promiscuous mode [ 1578.913450][T28814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.921527][T28814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.942570][T28814] bridge_slave_1: entered allmulticast mode [ 1578.962541][T28814] bridge_slave_1: entered promiscuous mode [ 1579.145419][T28814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.187434][T28814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.402539][T28814] team0: Port device team_slave_0 added [ 1579.425252][T28814] team0: Port device team_slave_1 added [ 1579.433107][T26205] Bluetooth: hci11: command tx timeout [ 1579.592344][T28814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.599368][T28814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.661377][T28814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.700585][T28814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.721893][T28814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.781393][T28814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.015813][T28814] hsr_slave_0: entered promiscuous mode [ 1580.061390][T28814] hsr_slave_1: entered promiscuous mode [ 1580.072882][T28814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1580.081180][T28814] Cannot create hsr debugfs directory [ 1580.161495][T26205] Bluetooth: hci12: command tx timeout [ 1582.232139][T26205] Bluetooth: hci12: command tx timeout [ 1584.000309][T26205] Bluetooth: hci5: command 0x0406 tx timeout [ 1584.312224][ T5230] Bluetooth: hci12: command tx timeout [ 1585.757388][T26205] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1585.768854][T26205] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1585.779326][T26205] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1585.788272][T26205] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1585.797577][T26205] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1585.806566][T26205] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1585.879190][ T5230] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1585.891515][ T5230] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1585.901678][ T5230] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1585.914349][ T5230] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1585.929709][ T5230] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1585.937547][ T5230] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1586.392248][T26205] Bluetooth: hci12: command tx timeout [ 1586.401115][T28828] chnl_net:caif_netlink_parms(): no params data found [ 1586.664797][T28828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.682088][T28828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.690144][T28828] bridge_slave_0: entered allmulticast mode [ 1586.722972][T28828] bridge_slave_0: entered promiscuous mode [ 1586.731674][T28828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.744956][T28828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.761986][T28828] bridge_slave_1: entered allmulticast mode [ 1586.769968][T28828] bridge_slave_1: entered promiscuous mode [ 1586.927143][T28828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.963837][T28828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.175860][T28828] team0: Port device team_slave_0 added [ 1587.195369][T28828] team0: Port device team_slave_1 added [ 1587.332905][T28828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.339961][T28828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.396297][T28828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.445174][T28828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.461595][T28828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.509595][T28828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.728220][T28828] hsr_slave_0: entered promiscuous mode [ 1587.736006][T28828] hsr_slave_1: entered promiscuous mode [ 1587.755904][T28828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.773180][T28828] Cannot create hsr debugfs directory [ 1587.832336][T28836] Bluetooth: hci13: command tx timeout [ 1587.993686][T28836] Bluetooth: hci14: command tx timeout [ 1589.132557][T28836] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.138865][T28836] Bluetooth: hci6: command 0x0406 tx timeout [ 1589.912271][T26205] Bluetooth: hci13: command tx timeout [ 1590.072429][T26205] Bluetooth: hci14: command tx timeout [ 1591.992326][T26205] Bluetooth: hci13: command tx timeout [ 1592.152299][T26205] Bluetooth: hci14: command tx timeout [ 1594.072203][T26205] Bluetooth: hci13: command tx timeout [ 1594.232489][T26205] Bluetooth: hci14: command tx timeout [ 1595.352340][ T30] INFO: task syz.0.5514:28620 blocked for more than 143 seconds. [ 1595.360436][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1595.412071][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1595.452050][ T30] task:syz.0.5514 state:D stack:24992 pid:28620 tgid:28616 ppid:27544 flags:0x20004002 [ 1595.514607][ T30] Call Trace: [ 1595.518516][ T30] [ 1595.542180][ T30] __schedule+0x1895/0x4b30 [ 1595.547104][ T30] ? __pfx___schedule+0x10/0x10 [ 1595.567820][ T30] ? __pfx_lock_release+0x10/0x10 [ 1595.653688][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1595.716299][ T30] ? schedule+0x90/0x320 [ 1595.721446][ T30] schedule+0x14b/0x320 [ 1595.741944][ T30] schedule_preempt_disabled+0x13/0x30 [ 1595.747865][ T30] __mutex_lock+0x6a7/0xd70 [ 1595.765354][ T30] ? __mutex_lock+0x52a/0xd70 [ 1595.770584][ T30] ? usbdev_release+0x77/0x7a0 [ 1595.792077][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1595.797259][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 1595.811925][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 1595.817781][ T30] usbdev_release+0x77/0x7a0 [ 1595.842817][ T30] ? evm_file_release+0x13d/0x1c0 [ 1595.848229][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 1595.861890][ T30] __fput+0x23f/0x880 [ 1595.866554][ T30] task_work_run+0x24f/0x310 [ 1595.892097][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1595.897779][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1595.912637][ T30] do_exit+0xa2f/0x28e0 [ 1595.917515][ T30] ? __pfx_do_exit+0x10/0x10 [ 1595.933857][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1595.940176][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1595.960584][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1595.981392][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1595.988319][ T30] do_group_exit+0x207/0x2c0 [ 1596.001895][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1596.007344][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1596.032198][ T30] get_signal+0x176f/0x1810 [ 1596.037027][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 1596.052240][ T30] ? __pfx_get_signal+0x10/0x10 [ 1596.058260][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 1596.082452][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1596.090054][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1596.111983][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1596.120132][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1596.142062][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1596.147365][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1596.165336][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1596.170636][ T30] do_fast_syscall_32+0x34/0x80 [ 1596.187578][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1596.202686][ T30] RIP: 0023:0xf7fc4579 [ 1596.208250][ T30] RSP: 002b:00000000f5704110 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1596.240064][ T30] RAX: 000000000000000a RBX: 00000000ffffff9c RCX: 00000000f5704160 [ 1596.261445][ T30] RDX: 00000000001a1281 RSI: 0000000000000000 RDI: 00000000f744bff4 [ 1596.280081][ T30] RBP: 00000000001a1281 R08: 0000000000000000 R09: 0000000000000000 [ 1596.292364][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1596.315235][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1596.331891][ T30] [ 1596.341895][ T30] [ 1596.341895][ T30] Showing all locks held in the system: [ 1596.351023][ T30] 6 locks held by kworker/u8:1/12: [ 1596.370200][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1596.396128][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1596.423562][ T30] #2: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1596.443802][ T30] #3: ffff88806738e0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1596.473018][ T30] #4: ffff88806738f250 (&devlink->lock_key#118){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1596.491833][ T30] #5: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1596.522046][ T30] 5 locks held by kworker/1:0/25: [ 1596.527539][ T30] 1 lock held by khungtaskd/30: [ 1596.552502][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1596.571861][ T30] 5 locks held by kworker/1:1/46: [ 1596.578378][ T30] 3 locks held by kworker/u8:4/68: [ 1596.591888][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1596.622386][ T30] #1: ffffc900015e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1596.651871][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1596.661164][ T30] 3 locks held by kworker/u8:5/157: [ 1596.691816][ T30] #0: ffff88814b4df148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1596.722077][ T30] #1: ffffc90002d57d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1596.752780][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1596.771821][ T30] 2 locks held by kworker/u8:6/2682: [ 1596.777543][ T30] 1 lock held by dhcpcd/4894: [ 1596.792504][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1596.822061][ T30] 2 locks held by getty/4986: [ 1596.827187][ T30] #0: ffff88814b6140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1596.852016][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1596.880413][ T30] 3 locks held by kworker/1:5/13772: [ 1596.901691][ T30] 3 locks held by kworker/0:6/27301: [ 1596.907269][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1596.939160][ T30] #1: ffffc90003f77d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1596.960053][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1596.982807][ T30] 7 locks held by syz-executor/28551: [ 1596.989805][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.012251][ T30] #1: ffff888079b13c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.034214][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.061903][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.082545][ T30] #4: ffff8880631590e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1597.112385][ T30] #5: ffff888063158250 (&devlink->lock_key#121){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1597.131874][ T30] #6: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1597.140985][ T30] 1 lock held by syz.0.5514/28620: [ 1597.161974][ T30] #0: ffff888144bbb190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x77/0x7a0 [ 1597.182283][ T30] 1 lock held by syz-executor/28661: [ 1597.197680][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1597.221956][ T30] 1 lock held by syz.1.5529/28690: [ 1597.227234][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1597.252007][ T30] 1 lock held by syz.4.5531/28705: [ 1597.257392][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1597.281977][ T30] 2 locks held by syz-executor/28721: [ 1597.288503][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1597.322449][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1597.343855][ T30] 2 locks held by syz-executor/28727: [ 1597.349398][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1597.379927][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1597.401924][ T30] 4 locks held by syz-executor/28729: [ 1597.409124][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.440396][ T30] #1: ffff888056b82088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.462166][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.482244][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.501938][ T30] 4 locks held by syz-executor/28743: [ 1597.508572][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.542556][ T30] #1: ffff88805d2b9c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.562140][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.583344][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.612058][ T30] 4 locks held by syz-executor/28755: [ 1597.617805][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.642637][ T30] #1: ffff888029851c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.672226][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.691896][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.711951][ T30] 4 locks held by syz-executor/28766: [ 1597.718439][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.751523][ T30] #1: ffff88807a36d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.771794][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.792181][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.822045][ T30] 4 locks held by syz-executor/28779: [ 1597.828880][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1597.851816][ T30] #1: ffff88806f64b088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1597.881323][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1597.901798][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1597.931958][ T30] 2 locks held by syz-executor/28782: [ 1597.938397][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1597.971930][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1597.992374][ T30] 4 locks held by syz-executor/28792: [ 1597.997916][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1598.021969][ T30] #1: ffff888030714c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1598.051917][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1598.072195][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1598.093345][ T30] 4 locks held by syz-executor/28803: [ 1598.098984][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1598.131907][ T30] #1: ffff888051a02088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1598.152020][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1598.171904][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1598.193695][ T30] 4 locks held by syz-executor/28814: [ 1598.199328][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1598.231147][ T30] #1: ffff8880313ee888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1598.262030][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1598.282004][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1598.313397][ T30] 4 locks held by syz-executor/28828: [ 1598.320571][ T30] #0: ffff888032b5a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1598.342519][ T30] #1: ffff888028537088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1598.363826][ T30] #2: ffff888027a0ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1598.392145][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1598.411875][ T30] 2 locks held by syz-executor/28829: [ 1598.431842][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1598.451833][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1598.482045][ T30] [ 1598.484534][ T30] ============================================= [ 1598.484534][ T30] [ 1598.501914][ T30] NMI backtrace for cpu 0 [ 1598.507376][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 1598.518932][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1598.529302][ T30] Call Trace: [ 1598.532689][ T30] [ 1598.535682][ T30] dump_stack_lvl+0x241/0x360 [ 1598.540682][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1598.546287][ T30] ? __pfx__printk+0x10/0x10 [ 1598.551645][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1598.558091][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1598.564761][ T30] ? _printk+0xd5/0x120 [ 1598.569154][ T30] ? __pfx__printk+0x10/0x10 [ 1598.574332][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1598.579430][ T30] ? __pfx__printk+0x10/0x10 [ 1598.584302][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1598.589401][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1598.596028][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1598.602353][ T30] watchdog+0xff4/0x1040 [ 1598.607068][ T30] ? watchdog+0x1ea/0x1040 [ 1598.612005][ T30] ? __pfx_watchdog+0x10/0x10 [ 1598.617441][ T30] kthread+0x2f0/0x390 [ 1598.621674][ T30] ? __pfx_watchdog+0x10/0x10 [ 1598.626773][ T30] ? __pfx_kthread+0x10/0x10 [ 1598.632393][ T30] ret_from_fork+0x4b/0x80 [ 1598.637402][ T30] ? __pfx_kthread+0x10/0x10 [ 1598.642495][ T30] ret_from_fork_asm+0x1a/0x30 [ 1598.648221][ T30] [ 1598.652628][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1598.657932][ C1] NMI backtrace for cpu 1 [ 1598.657949][ C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 1598.657972][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1598.657986][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 1598.658024][ C1] RIP: 0010:unwind_next_frame+0x6d1/0x22d0 [ 1598.658056][ C1] Code: 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c [ 1598.658072][ C1] RSP: 0018:ffffc90000a176d0 EFLAGS: 00000a06 [ 1598.658089][ C1] RAX: 1ffffffff210bfe7 RBX: ffffffff9085ff38 RCX: dffffc0000000000 [ 1598.658104][ C1] RDX: 00000000000b0001 RSI: ffffffff9127b8fc RDI: 0000000000000001 [ 1598.658118][ C1] RBP: ffffffff9085ff38 R08: 0000000000000001 R09: ffffc90000a17890 [ 1598.658132][ C1] R10: ffffc90000a177f0 R11: ffffffff81806cf0 R12: ffffffff9085ff38 [ 1598.658146][ C1] R13: ffffffff9085ff38 R14: ffffffff9085ff38 R15: ffffffff89e5297c [ 1598.658161][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1598.658177][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1598.658191][ C1] CR2: 00000000f5705da4 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1598.658208][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1598.658220][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1598.658232][ C1] Call Trace: [ 1598.658240][ C1] [ 1598.658248][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1598.658276][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1598.658306][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1598.658332][ C1] ? nmi_handle+0x2a/0x5a0 [ 1598.658358][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1598.658382][ C1] ? nmi_handle+0x14f/0x5a0 [ 1598.658400][ C1] ? nmi_handle+0x2a/0x5a0 [ 1598.658418][ C1] ? unwind_next_frame+0x6d1/0x22d0 [ 1598.658445][ C1] ? default_do_nmi+0x63/0x160 [ 1598.658475][ C1] ? exc_nmi+0x123/0x1f0 [ 1598.658502][ C1] ? end_repeat_nmi+0xf/0x53 [ 1598.658523][ C1] ? nft_do_chain+0x4ac/0x1da0 [ 1598.658547][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.658572][ C1] ? unwind_next_frame+0x6d1/0x22d0 [ 1598.658600][ C1] ? unwind_next_frame+0x6d1/0x22d0 [ 1598.658628][ C1] ? unwind_next_frame+0x6d1/0x22d0 [ 1598.658656][ C1] [ 1598.658663][ C1] [ 1598.658674][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1598.658697][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.658726][ C1] arch_stack_walk+0x11c/0x150 [ 1598.658748][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1598.658779][ C1] stack_trace_save+0x118/0x1d0 [ 1598.658801][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1598.658829][ C1] kasan_save_track+0x3f/0x80 [ 1598.658856][ C1] ? kasan_save_track+0x3f/0x80 [ 1598.658881][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 1598.658898][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 1598.658920][ C1] ? dst_alloc+0x12b/0x190 [ 1598.658941][ C1] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1598.658963][ C1] ? ip_route_output_key_hash+0x193/0x2b0 [ 1598.658983][ C1] ? ip_route_output_flow+0x29/0x140 [ 1598.659000][ C1] ? ip_route_me_harder+0x80d/0x1300 [ 1598.659027][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 1598.659044][ C1] ? synproxy_send_client_synack+0x8b8/0xf30 [ 1598.659062][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 1598.659083][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1598.659103][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1598.659144][ C1] __kasan_slab_alloc+0x66/0x80 [ 1598.659162][ C1] ? dst_alloc+0x12b/0x190 [ 1598.659183][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1598.659207][ C1] dst_alloc+0x12b/0x190 [ 1598.659231][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1598.659267][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 1598.659288][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1598.659308][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1598.659331][ C1] ? __pfx_lock_release+0x10/0x10 [ 1598.659357][ C1] ? kthread+0x2f0/0x390 [ 1598.659379][ C1] ip_route_output_flow+0x29/0x140 [ 1598.659399][ C1] ip_route_me_harder+0x80d/0x1300 [ 1598.659433][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1598.659464][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1598.659484][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1598.659529][ C1] synproxy_send_tcp+0x356/0x6c0 [ 1598.659552][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 1598.659578][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1598.659599][ C1] ? synproxy_pernet+0x45/0x270 [ 1598.659622][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 1598.659646][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1598.659666][ C1] ? validate_chain+0x11e/0x5920 [ 1598.659686][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1598.659716][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1598.659739][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1598.659764][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1598.659788][ C1] nft_do_chain+0x4ad/0x1da0 [ 1598.659817][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1598.659837][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1598.659874][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1598.659901][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1598.659923][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1598.659943][ C1] ? ipt_do_table+0x312/0x1860 [ 1598.659972][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1598.659992][ C1] nf_hook_slow+0xc3/0x220 [ 1598.660011][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1598.660037][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1598.660063][ C1] NF_HOOK+0x29e/0x450 [ 1598.660089][ C1] ? NF_HOOK+0x9a/0x450 [ 1598.660114][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1598.660140][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1598.660170][ C1] ? ip_rcv_finish+0x406/0x560 [ 1598.660208][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1598.660233][ C1] NF_HOOK+0x3a4/0x450 [ 1598.660257][ C1] ? __lock_acquire+0x1384/0x2050 [ 1598.660284][ C1] ? NF_HOOK+0x9a/0x450 [ 1598.660308][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1598.660332][ C1] ? ip_rcv_core+0x801/0xd10 [ 1598.660358][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1598.660387][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1598.660412][ C1] __netif_receive_skb+0x2bf/0x650 [ 1598.660441][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1598.660469][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1598.660496][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1598.660523][ C1] ? __pfx_lock_release+0x10/0x10 [ 1598.660550][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1598.660576][ C1] process_backlog+0x662/0x15b0 [ 1598.660597][ C1] ? process_backlog+0x33b/0x15b0 [ 1598.660619][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1598.660637][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1598.660665][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1598.660694][ C1] __napi_poll+0xcb/0x490 [ 1598.660728][ C1] net_rx_action+0x89b/0x1240 [ 1598.660757][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1598.660777][ C1] ? sched_clock+0x4a/0x70 [ 1598.660807][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1598.660839][ C1] handle_softirqs+0x2c5/0x980 [ 1598.660866][ C1] ? do_softirq+0x11b/0x1e0 [ 1598.660890][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1598.660919][ C1] do_softirq+0x11b/0x1e0 [ 1598.660941][ C1] [ 1598.660948][ C1] [ 1598.660955][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1598.660979][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1598.661005][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1598.661032][ C1] ? rcu_is_watching+0x15/0xb0 [ 1598.661053][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1598.661077][ C1] ? wg_packet_decrypt_worker+0x2a9/0xd80 [ 1598.661106][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1598.661132][ C1] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 1598.661164][ C1] wg_packet_decrypt_worker+0x2a9/0xd80 [ 1598.661200][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1598.661220][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 1598.661257][ C1] ? look_up_lock_class+0x77/0x170 [ 1598.661279][ C1] ? register_lock_class+0x102/0x980 [ 1598.661305][ C1] ? try_to_wake_up+0x5f4/0x1480 [ 1598.661333][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1598.661355][ C1] ? __pfx_lock_release+0x10/0x10 [ 1598.661382][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1598.661411][ C1] ? mark_lock+0x9a/0x360 [ 1598.661430][ C1] ? __lock_acquire+0x1384/0x2050 [ 1598.661471][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1598.661498][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1598.661527][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1598.661559][ C1] ? process_scheduled_works+0x976/0x1850 [ 1598.661585][ C1] process_scheduled_works+0xa63/0x1850 [ 1598.661622][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1598.661651][ C1] ? assign_work+0x364/0x3d0 [ 1598.661677][ C1] worker_thread+0x870/0xd30 [ 1598.661717][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1598.661745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1598.661772][ C1] kthread+0x2f0/0x390 [ 1598.661790][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1598.661815][ C1] ? __pfx_kthread+0x10/0x10 [ 1598.661835][ C1] ret_from_fork+0x4b/0x80 [ 1598.661862][ C1] ? __pfx_kthread+0x10/0x10 [ 1598.661880][ C1] ret_from_fork_asm+0x1a/0x30 [ 1598.661917][ C1] [ 1599.780878][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1599.790706][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 1599.804638][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1599.819693][ T30] Call Trace: [ 1599.823462][ T30] [ 1599.827828][ T30] dump_stack_lvl+0x241/0x360 [ 1599.833310][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1599.841568][ T30] ? __pfx__printk+0x10/0x10 [ 1599.847404][ T30] ? vscnprintf+0x5d/0x90 [ 1599.853694][ T30] panic+0x349/0x880 [ 1599.858423][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1599.864940][ T30] ? __pfx_panic+0x10/0x10 [ 1599.870646][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1599.877068][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1599.883282][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1599.888881][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1599.896553][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1599.907379][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1599.914314][ T30] watchdog+0x1033/0x1040 [ 1599.919258][ T30] ? watchdog+0x1ea/0x1040 [ 1599.924446][ T30] ? __pfx_watchdog+0x10/0x10 [ 1599.931145][ T30] kthread+0x2f0/0x390 [ 1599.936587][ T30] ? __pfx_watchdog+0x10/0x10 [ 1599.941684][ T30] ? __pfx_kthread+0x10/0x10 [ 1599.949122][ T30] ret_from_fork+0x4b/0x80 [ 1599.954921][ T30] ? __pfx_kthread+0x10/0x10 [ 1599.960584][ T30] ret_from_fork_asm+0x1a/0x30 [ 1599.966491][ T30] [ 1599.970982][ T30] Kernel Offset: disabled [ 1599.977120][ T30] Rebooting in 86400 seconds..