last executing test programs: 27.658949419s ago: executing program 0 (id=786): madvise(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a010e04"], 0xd) pipe(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, @empty, @empty}}) syz_emit_ethernet(0xb3, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES64=r2, @ANYBLOB="425898bfdd744d703660d53c2a8e0e37073be4969607a6f43920d554d7cbf9077298cb3be387dd43cd047b68018d83ebed6a8a3932165d586a"], 0x1e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000020000001800028014000180080001", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8840) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9300c00080005000603040001000200c20c1c7699da99f93fed4efbdab092fffbb530ca82eab8249a6fbee05c5e96b3bf7002b56ae579bccfbf02ec5c8018af1a73b6550689527289bca357ec54eb2c534f5063deb06436a42d0410d68262af2490f6eacb287d64bf8716a7f83214"], 0x11) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x84a00, 0x18) unshare(0x2a020400) fcntl$setpipe(r7, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaabb86dd6081d90d00100600ff010000000000000000000000000001000000000000000c0000ffffffffffff02000000000000130502000b00000000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003006272696467653000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="c8728ab80b69d6d1c2efa9b832f9bd8c98e5e334bf2bc55c99de9660cc96de2ae3c9aec30cfa322ae3"], 0x3c}}, 0x0) 25.677112915s ago: executing program 0 (id=792): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x0, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xe) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x128}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000680)={{0x8, 0x3, 0x0, 0x6, 'syz1\x00', 0xb3a}, 0x0, 0x3, 0x3, r0, 0x1, 0x1f4, 'syz1\x00', &(0x7f0000000200)=['[*+\x00'], 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @dev, 0x1}}}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000380)=0x8) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], 0x1}, 0x58) 24.282156125s ago: executing program 0 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) 24.209130515s ago: executing program 2 (id=798): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1000}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x2041}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) listen(r0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000080)=0x7) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xa30d, 0x0, 0xffffffffffffffff, 0xc53a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b00000002000000f600000c03000000006130612e303000306100"], &(0x7f0000000340)=""/85, 0x2f, 0x55, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x100, 0x0, r9, 0x6, '\x00', r10, r11, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(r8, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x200, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@dev, 0x0, 0x1}}, 0xe8) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 23.948255382s ago: executing program 0 (id=800): r0 = socket$inet6(0xa, 0x3, 0x3c) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0x46b5b071fb3773b1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x3, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) io_setup(0x81, &(0x7f00000005c0)=0x0) io_pgetevents(r8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000044d82, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 23.280080874s ago: executing program 0 (id=803): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000640)={'HL\x00'}, &(0x7f0000000680)=0x1e) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x0, {0x0, @pix={0xe, 0x5, 0x34325258, 0x9, 0x9, 0x3ff, 0xb, 0x3, 0x0, 0x3, 0x0, 0x4}}, 0x7fff}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x0, "8a96e772ccf229b82e7c16bf9d3fd9ae636a3a8ee17cd05b31a80858d74f6af6", 0x221, 0x4, 0x2, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="14", 0x1}], 0x3}, 0x0) clock_gettime(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0xff, 0xa, 0x4, 0x70000, 0x9, {}, {0x1, 0x1, 0x0, 0x8, 0x6, 0x0, "aa67c2f2"}, 0x6, 0x4, {}, 0x13}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r8, 0xc0086202, &(0x7f00000001c0)='\x03\x00\x00\x00\x00\x00\x00\x00-control\x00') sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 22.960357055s ago: executing program 2 (id=804): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000640)={'HL\x00'}, &(0x7f0000000680)=0x1e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x0, {0x0, @pix={0xe, 0x5, 0x34325258, 0x9, 0x9, 0x3ff, 0xb, 0x3, 0x0, 0x3, 0x0, 0x4}}, 0x7fff}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x0, "8a96e772ccf229b82e7c16bf9d3fd9ae636a3a8ee17cd05b31a80858d74f6af6", 0x221, 0x4, 0x2, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="14", 0x1}], 0x3}, 0x0) clock_gettime(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0xff, 0xa, 0x4, 0x70000, 0x9, {}, {0x1, 0x1, 0x0, 0x8, 0x6, 0x0, "aa67c2f2"}, 0x6, 0x4, {}, 0x13}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r7, 0xc0086202, &(0x7f00000001c0)='\x03\x00\x00\x00\x00\x00\x00\x00-control\x00') sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 22.572950719s ago: executing program 2 (id=806): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = eventfd(0xfffdffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000100)) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ppoll(&(0x7f0000000340)=[{r3}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0xd0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_VFINFO_LIST={0xa8, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x6c}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x8}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x2fd}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0xc2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x3ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x2}}]}]}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0xd0}}, 0x0) fcntl$dupfd(r11, 0x0, r11) 21.428744101s ago: executing program 2 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) unshare(0x2a020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(0x0, 0x0) socket(0x2, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) fchmod(r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x150, 0x4c, 0x1a, 0x150, 0x73, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x20000000, 0x2, 0x0, 0x6}}, @common=@unspec=@limit={{0x48}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @empty, [], [], 'bond0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 21.239327203s ago: executing program 0 (id=809): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0xc, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @generic={0x94, 0xd, "ef731a46d573ccaab38cab"}, @noop, @noop, @generic={0x44, 0xf, "a53688f5220d79bbf6544620c4"}, @lsrr={0x83, 0xb, 0x39, [@private, @empty]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8f8, 0x0) r8 = dup(r3) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000"], 0xcc}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) 20.27105871s ago: executing program 2 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000010018000380040004000a00020000"], 0x44}}, 0x0) io_uring_setup(0x65fd, &(0x7f0000005c00)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000039c0)='./file0/file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x24}, 0x18) read$FUSE(r5, &(0x7f000000cb00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000140)='\x00', r6, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711069000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x1) syz_emit_ethernet(0xc8, &(0x7f00000005c0)={@multicast, @random="1704b45adbde", @void, {@llc={0x4, {@snap={0x54, 0x1, "d1", ')\nu', 0x9200, "aa06617d0ad07bde280291ba76cf986e2793b5b13c2d9968424e1334363db158b51c852ec981c2e600435985272252cb1c67ef47f2c7aab9685f72f743502261bf7dd4d5accf109081cd570bc7edb2901376fa11dd108876b39475dab4941d025147a9cbe00a700d2fcc1b2513d325ac3600a65a3f1aeca181f7917e28179bc7599156cfdbf28b4f6c8c4394dc3b79a7ecfddc6f0498c48b501d611d59bfcae0387e04aa8e371fd01a279e9bc3eec13cbe0a"}}}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000e5f000)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000040)) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) write$binfmt_elf64(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4605062046000000000000000003003e0002000000740300000000000040000000000000003c020000000000000100000001013800010002000000f9ff00000070790000000900000000000000fbffffffffffffff070000000000000003000000000000000400000000000000200000000000000000000070d00000000700000000000000000000000000000005"], 0x61c) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0xc8) 19.802812179s ago: executing program 2 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x20000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) sendto$inet(r3, &(0x7f00000003c0)="9e83179addc94debd3d7ba6c5dae0ddeccc12e68d4ab72a8aee5e391ac3391b2a5a41c6634dabeaed843dc98d70ec1b8a41aba514dcac14d841c7691cbb434e289f5ffb0d057cf7ce4686f22d6c37dd40f5a93a628d6870c2adfe0bdb54e1a7e400a44a20b2d5383f806b91b904057bdb59bebf6e08ea77091c619bcf9c8d1431f4ff0a9d21af9d7e1ea0d9304622aedb2c70e8987ed8e85fd30726f6bfe4f647a337eb8c0cb855522097db900a26a3fc93b7ff1467554e3781223335ee41ff5c67e494365e2bf8fcef8bd3f8f95b420e4e88c564dd10f158d84bbf07058107b22d52be31efc872e1b2ac0bfde09c5c1e9b06d05157650a16ceaea3297957c2ebf81ece5b55d9b2c6460774a2d0e4fa3753143ab371637588277e9488478e3469313c560f17e62a1ccec003545e75cbacfb588bdd225927514ca5b9c03c61bb0ef0f793ca1fd4c22921d8d8d78f83afdd4105452fdadb36b47800de35c22c6215c5559e142f76cdd874b42f4257000d3354cb0515aedac59881d3ae5e9de7a286c409889a4e999ac5b0b31137b5914be4c5edc4581a20255158ce511b413a862183c17c55769acea79c7874239fca61cf619040ff188b73c58df9254bb6c9fea5ed6b4a0049fbd3787c09443d8f61e073d0a56947d57da8efe9f2394601fe868f3790d49814cb9de926508bda23967305c74355bec5f19d970f3ae84b92ab33f8ea68ef9ad27907d2b1d0d634250439f383463060dc738da925e4918194154d432055ff1971dc454f404859b1b6f518548af898a3cd10fd316f23af4980cc15ccdecedefd07c0c83c3e080ec8c66a922b32682f0c9818fa1a968f4f81ffdb1d981ebaa321c4a98864202ed6a92690193e28abd2e8cb49f1ac36adcee27b723a57752b3e52b189b859d64b512f3ab961e422791e65365371ec8d29cfdc8b03c9db34c0fac9d511ee7bd85aebbd532e7b7bcace3409cde76d6ca5a853d91537be7263bbb103d440caf4212fa23951229548549cd952eac0f4ffea07c8e0ca93a3d562db428af762ebb790c3227f68a0d9a300203943610d2b70e05d474bcf19de164da2df52772b53ce2eeacae27236a7d7a0d97d46f010b098f4e516c476245091d8177c9e8cc5707d3509ed9adce6239bdbe5cacc3a63252d8aff5f5f42cea735b7493a786c3002afed6b219fe5dceaa0c3bf10265211d786dad131782089569a4a00c384e64aef30121b322076ea0260ac496e24854a21bfe2b4a71e375b094a6a8eaafacef556c06c3a022d58371f25b000f850bbe8eaf4ff801b8d80f5b862ebc6333e49f88c93b556014f503ae10ad089f0c5a50bc6667cb690bde9b54430d168d253808bcfe210c4eaaad9127b133d78c15fdea9e94cc7df8e4010f3b96941dd2717ec7586b5b30b4f8e72068879c337336cab2cb44485e1de73b9fed25d748c85afee2fa4c7e96470e70620d94fb68ea1f7edeae0d1b7543681bc60dc8532fad9c742d3992ca24922963666983147416f521c35b55a6f6e4fef9963756b2ca08ddf97d85c5b7e16c972f5b5d47e890cf80079f9d711eac5b6b44b19d5c519b349e29f59e49967b105668c5a8cd9e08a619ff863f41514b3acc635b43d22c6ab62eff0da8971f84c666e034fbf94430322680bcc36b5f41b8382e96df3fde48efe00117425290cfe48d1f82310eadb0ad2cb5734132322f4e7f11a6dc30fb573abb57f3d7fe685435fb75df2f36cecb441ad9d8228069fefa7561d0379e03e6bdb82e996f3bf9828feb8f982d7ebd250425d7b5e5203ef72d7ca923bd1cd3abe01187e99989caf719f3192257aad2bb88643975b8c4a603d4d862ec4a34d0b67927638a8df1201698d87b441a921121c4dc48847c373247b29ed39da3c0b1c99cc56b507ed461d81edb8806316759b55f3eeecc3494ca8c552988cd3dc1221685f7f2bcdc805fca5b828eae2f176ae870a49f35fe2e97e7e858b8aecfc54e16d28fe6568e1291ef24e89ac694009188177ad531608046147abb92cba8566ed8d8b8ea80e7c242125bb696fc41ec7ad04b54011f90b0ffa3e76796b4ebd6afb9e8fb9163664353e55155eeb2cce7f59139820ffa0ed52ab3c619712574d6deb87af1092f4529430920cff9d3c3929e126cc877bd49bf34fb3a67faeb1f5c3a2159e8c5607f21769e0b238058336a2472b83a62444f00543302f78e6e6664c05fe0c16cf673dad1f4ae826a899d7e0c5dcc7711021f5a6e18fb9ae7b6dbaeb0e49343a3a0efd767e6409abe3b2440f425ff67773795c6337fc0597a762c08b021105d21e818b22a129bc68c9561382a0c3504d5a0caf8f5a23377499c7783471885e4d1d9c7c9532a114bbe2231e439650bf35241ac340976ed1d7ed11d47ca996611f75af71862b3aca916ef1291e73e58df5888f1056f9e7da06734599287af6e754a9f68272b10fa502d3e8189de55d2e882d0a4b88e8db1b5b13184f951abc03990b8912e5af019a74d6c1fb90611dffaadcd9ba46bfb424e66d912a2db8ef26ee0b90fd98f18885aea2cfacc0ce74d0e5b0692b151c41e1dca5c882fc15e2e102d3942b8558a2f77d7bea4342f0579ba998e76dcd8cb6a1053a127a065c915fb10813e19dcfe048b32153498d4b40a6af989c12dcf9563e9be7c57f8ecd536875011c15fbe4c72da7cd121fec339854ad3d9adbeb6ffebfdb2d6ca31efa334998f6391ea0f8e7aaebc632f89a40cf4cd684e10d91005c9e4e962e3e2add62a7744d0160e0d27517624af3976fd2ad754dd2beec1a4b7dc347654b134a76d354a9b350851d0cb210c4f974bc37bf7530eaa49ce000f1469b2fefc04d09fb0e5b93e10e235a7b3764c7c463215816926956af039d743d4acac72f6c38d91dec9ca7b948fdeb7c6b1d94ba8c68d7227e3f38e71690f7d767f1f0ed502a985f4e2df71c249e597a21a0ccf97437dc1fbe13e0a3c0f6c6b1ca3a09d4b9483edaaf683eadeb8bae6f89b64e41733c6b3d2928cb9594072141766fe7652716fb92e9dcfca79aa37ccdab8e342f2e67c6aa40f98cba0121593c0440148e335e15ea4faf24147b47eb3658255864f55d68ebc1a469baebd00030a2862649712e06d374f986e582578e050a0881f0ea3d708ad3da2afd9974a8dcd81cbed51b8ea970e88f83cf5de19d4407d68cad88cdb41dc710aeb652dfef303426aa9c61a93dc00dc25e77212212b205f28d530e13e35aba437fbeb44ebab95d0f41e998dfdaee77a1eef61089b8bef7dc39c8587aacceabe22526d99fe7c3566190da43b4d3de19c2d93f698952077c7ac5e905ee1ff58dd64af157ad8734858cb3e53909529813471f69c6a695d84c3f10cbd049a94cda5a350858323b62847023df6b90f55a6407246c932cf8b9d71502b701e7d56073cf89d5c2afbfbeaf88340cb21a8db99b43dd20e5867a0c2371bbfec1865e7d75f9381b7238c4a1e75d6f7aeefbaa0a4b72bc7dac799fe07965b779930e69577a149212f85f50d443a5e0477068fad3e348eb47039559600a7fe9d0e4f7c231d595bd2eab49419c03d303f94097b7f7575006d7d503c8c6eb1fecdd84fbe9fd0ce4573f86b2227f404488bb9138e146022e80812f95213fd0cf5a4580f8b27863b5749de23ad526823f3174dba2e1801345a575bbe6aca9d41b5b05868b64590f0477762f7a7a9892ac5a96260fe92e4111b75924b228be995d411716911fe50179f622f74ad3d093136e7d04a96795e972138e0633ae9680192aa03842b36389acee3afd8b0460bbc7f252e1aa47239e6adba2042c19e15f7c71a8449e3a3bdd7bf79e17ac4834463d56753700510dd5a497239720985e58259ed2a75a38c32317184084ddcb064050dade908e91432476cc2cc6652cfc6277c50eaf47134bcd7002fc686cd16db02efe1d3f0ad201d109aa2866968f99b15c37f946a983799bb11af2a7d5347b5d11695dfb8bcf6ef693c9d98704c73c87c24562e911b3c5203d1c1a05c871f94c8f9465c42a799af7f784d27f7f8edd0d1edcba328fb0a890b20c08459b26d0c07eb7ccbec44b722b6d7b98a8422c709b1fff58aa196a9361c0d07b97df7b75cdeb36e9f6e17f8786e07016acaff9dbbcdcdbc6e7b17803880e98ed2dfdf6f50820e37e651c10dd2662ec57b45f8270db81a0f830f19fd4f9e96c335f9b50af7e0361baa197364d82ecd5be44bd84847356f926cee04d3b581abcef55d2831cce8bf50a639ca49cda4773ab7d8d87922b4317dcc675ff1512b1ec9edc8623cc84968477292cf0ae9f9a90e882e26904ef6c1dcf939d78580b19152c613b3866f710c726f4f0a3defc583eb77c47c5ade1049afc5c64e3498388a6c238e7e90ad26809c5dbd3e5971e1b841fbf6f287c793660796d965c4f20a516302bc10b82b001082d51ea771808a799d10c1e6211f0ad5c3cb8a8b15856729d025adac16cc513cb80819b5f6cb1e241f000b91f4c451820b7d2a959e34d0b7e525181d67c1afe41a769d9318b592d7444d3ca97db10633679f9c9752fd1ade90bc23ee8251d3617d7082a2fd0f6b13280f57849f9fcbf2a784bc18c37c7791fccf9289e2797e1d40dd0268636ad6b98c32304690335e93c3d5d27002e39c882713671fe336a1d9609771da99d8ffe63e0baf6677348f63ec9155368ce1a8738b894cb26bf3235d154dff49b4e0c923cbc4d0989908c95e37e712db3c6e604a8b385375e060ebbe32b7afdb807c04fb57d2755d44b829776b90cef1fa3171107ec8c80ccd89b77439f843f983d48cadd8cc6ab6acceef80a5ec6e56412d9139a41b64099cf235a0b57c88807a7ec205c24071207493f0a86b49245608fa9de0c57b882b25bdbe98df4e24c3441dac1ddfdd1d06ed38af7b874372a71c24d5525c9effa9b5859c82fe53e454b908d5d36814dfebf83451c9ec1e062bd8191c73cda5060fe07d533991159cb490318379fbc7ce2f44af473a8cbbf482a0e354658b6c119f97134196791596e042691161046c0b8f2c9b51b15d6fb16e29376ec31b37c1b95e586aab0e0604ba0ebbaf0457d76195f9a063b5ca0452d2fe368c981928ed026581c8190571b15ca9e1e69b026411cd979492688b9916a12dab9acde81f34b2268e2071eafe60d8daf4db7f98adee585ac44b946e72cfc97a3566de73ec80f0251ddb61f0f4f7ab4507b07db06897bee7ac3ce5657ccabd18b3092e2850bf02cd9b138c0628877dc7eab2dfdcbb6e0ff2b923c62eb8b4e9b54f6f0f1f9ceed631ee493150a6ebe428a69d73631e8521c9c05a604e88def9da2031a5f815c1f5b74a710ad206d4fdf7f73e3b74d936fbd332005fb7bbab3ae860e9699e14e436f0f39361b1294f0c3833bb98b2c8158f519d46a83516ace9dd5d47a11e275b8ee100fdce21df11ae7d954b96d272bc6159294b1230ca1ec737864cabd3e960440f77bea392cc6cb53dd5ef18ca496f7e35c4158befd8e1b43f456a0eae6a83f403396ef200fc73b0792c92d8d99786ace7b6f20d024034edba83686708e55f594b7e2261e16ebb84a9435831a3448519f8ee7c134803d0341aa6513cb603de781fd36b6e9c15574b391cae61019eae03baf7137e1dd41982af38fb31a7a4c73c99aa2d5dbe72b238bd42fd48dc89529aa4206fee1dbffd2c11b9e0418ec7282114fe6010ddd60859789c25f3e66a353588a8f2dc54f65cddf794d703b6fc055cb992cae0addb7ef058957ec947bb1ad26f9f6e1ba523d16b300d861837b272cb14ed2044fc196a65", 0x1000, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0}, &(0x7f0000000080)=0x40) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x20000005) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)=""/91, 0x5b}], 0x2}, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0xc, 0x128, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x40}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'gretap0\x00', 'vlan0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = socket(0xb, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f00000013c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf251100000005003700010000000a000904bbbbbbbb443ee6ce8be965bbbb0000080006000618aab3a6927c42edaf94aa54d9b9f2deba9e50ae20ef703631b3265a18d2d3b6243def60d42e87b1d542e8cefbd9afd368673b51700aaaca179a1570631dbee9f47371e6a1ad97c5cbe439e306d23cbdd25a59dc003442f5d51ffbbd1f4ff75a722b24a0e031f195dd9ebc81d422f360a413bb89e31338", @ANYRES32=r9, @ANYBLOB="05002a00010000000800390001000000"], 0x40}}, 0x4000001) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYRES8=r7, @ANYRES32=r9, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100677265002c00028008000700ac1e000106000f0020000000050008000000000008000100", @ANYRES32=0x0, @ANYBLOB="060010000000000008000a00", @ANYRES32=r11], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 9.368681446s ago: executing program 1 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40186f40, 0x20000502) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)=ANY=[@ANYBLOB="34000000000801014000000000000000000000000900010073797a31000000000600020000040004800500030011000000"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x120, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55e9}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed3b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x66d2ce23}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe00}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3d38d31d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x9d75e855227d9569}, 0x4004) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x10, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 8.626630646s ago: executing program 4 (id=836): sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mremap(&(0x7f0000270000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00004b3000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x63, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000180)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={r2, 0x0, r5, 0x6, 0x9, 0x6e158023, 0x335a6b02, 0x9, 0x316, 0x6, 0x1, 0x7}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fspick(r7, &(0x7f0000000340)='.\x00', 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 8.115293249s ago: executing program 3 (id=837): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x814, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000140)='O', 0x1, 0xffffffffffffffff) io_uring_setup(0x66b, &(0x7f0000000340)={0x0, 0x3b34}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newsa={0xf8, 0x10, 0x1, 0x1, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev, 0x4e23, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, {0x0, 0x3, 0x0, 0x0, 0x3}, {0x1000}, {}, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16, 0x30f5e9ae}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40404}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x143742, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000002c0)={0x4000000c}) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0'], 0x2a, 0xfffffffffffffffc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_macvtap\x00'}, 0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000190a01020000000000000000000000000900010073797a30000000000900020073797a"], 0x2c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000400)) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.015741084s ago: executing program 3 (id=838): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) close(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r8 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r8, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071112d0000000000851000000200000085a562f70000000095000000000000009500a50500000000c8650b2cfc43f7d6b9d96df6264d9d088ed70469cdb4665e42063f11e6c09edb5d205622dc2c6264d6f7a24ac7dc0f635849c878cce7b785ab0be88795f1e055ed0f2899be730d207ed3f9fece99b274005d59a557a71427c5727be830db59f8cdc0c4cff2"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) 5.756772648s ago: executing program 1 (id=839): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) 5.614918552s ago: executing program 1 (id=840): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003a00070128bd700000000000027c000008000000", @ANYRES32=0x0, @ANYBLOB="d6060b9928ce0e4294adeaa560994d9f8d09651331ec8d8457b43d10b8e0fa82de48d5b72bd4ebbf18297c9e6015ef8efacdea99db74a91963bc486c1f"], 0x1c}}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r7, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006372637431306469662d67656e6572696300"], 0x184}}, 0x0) 5.347868483s ago: executing program 4 (id=841): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r3, @ANYRESOCT=r1], 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x180600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r6, 0x0, 0x7}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 4.973879765s ago: executing program 3 (id=842): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a0017000000000400140010000300013025642558b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) unshare(0x68060200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x0, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x0, 0x0, 0x7, 0x2}]}) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xf, &(0x7f0000000080)={0x1, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x19}) r1 = syz_io_uring_setup(0x64db, &(0x7f0000000080), &(0x7f0000000380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x52}, 0x20) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0x47) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000800)=@t={0x81, 0x5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 4.798237029s ago: executing program 4 (id=843): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffe90}}, 0x10040) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100001000000d1f00000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000020000020000840400000000000008001b0000000000"], 0x40}}, 0x8acff544f49e41a) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0xc0000, 0x54) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x74b) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='bic\x00', 0x4) r5 = socket$inet(0x2, 0x4000000000000802, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_ethernet(0x3d, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {{0x0, 0x2000, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5c6000233d1d67"}}}}}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x8000, 0x7fffffff, 0x40, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xb, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) io_uring_setup(0x31d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080), 0xc) read(r6, &(0x7f0000000180)=""/52, 0xfffffdef) 4.566774126s ago: executing program 1 (id=844): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0xc, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x7e}, @timestamp_addr={0x44, 0x14, 0xc8, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x46}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x25, 0x3, 0x9, [{@multicast1, 0x5}, {@broadcast, 0x5}, {@rand_addr=0x64010102, 0xa8d}, {@broadcast, 0x9}, {@remote, 0x10000}, {@multicast2, 0x8}, {@multicast1, 0x6}, {@loopback, 0x4}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @noop, @generic={0x44, 0xf, "a53688f5220d79bbf6544620c4"}, @lsrr={0x83, 0xf, 0x39, [@private=0xfffffffe, @empty, @loopback]}]}}}}}) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x8f8, 0x0) r10 = dup(r5) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000"], 0xcc}}, 0x0) 4.169415169s ago: executing program 3 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) getrlimit(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x1c, 0x0, 0x93688a73cf98924, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x10}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x227, &(0x7f0000000240)=ANY=[@ANYBLOB="614bd4eaa01baaaaaaaaaabb8100000086dd6c8e9e1901800000000000000000000000000000000000aaff02000000000000000000000000000167"], 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01005ddf8a90c74181e533495988ca36fec70436a7a188a7d510", @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x405c804}, 0x4c8c0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) io_setup(0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000001c0)={0x100005, 0x7a, 0x100000}, 0x20) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.672530921s ago: executing program 4 (id=846): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) socket$rds(0x15, 0x5, 0x0) rt_sigqueueinfo(r1, 0x1d, &(0x7f00000003c0)={0x5, 0x6, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x3b4a, &(0x7f0000000ac0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, r5, {0x7, 0x28, 0x3, 0x80000, 0x5, 0x0, 0x2, 0x8}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3a0a, 0xbc, 0x1, 0xb}, {0x3, 0xa6, 0x5, 0x10001}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r4, &(0x7f0000000240)=0xc, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 3.375740717s ago: executing program 1 (id=847): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120010001600020000000600180040000000050017"], 0x50}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@cgroup=r0, 0x24, 0x0, 0x1665, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000940)=[0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/86, 0x56}], 0x7, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='befs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x5) openat$cgroup_ro(r9, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000a00)) ioctl$USBDEVFS_IOCTL(r10, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) 2.2881603s ago: executing program 3 (id=848): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0xc, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @generic={0x94, 0xd, "ef731a46d573ccaab38cab"}, @noop, @noop, @generic={0x44, 0xf, "a53688f5220d79bbf6544620c4"}, @lsrr={0x83, 0xb, 0x39, [@private, @empty]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8f8, 0x0) r8 = dup(r3) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000008000700"], 0xcc}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) 2.280209407s ago: executing program 1 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000004800010028bd7000fddbdf250a", @ANYRES32], 0xa4}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040700c0ef0000000000001090224000100000000090400000203000000092100000001220500090581030000000000f340a4cf93c1e173a8901d13b77f1c77199db65f9988724dc80cae5aa1b60fb309837298dc4014984f57a8ebdc74f624d6850e94f5c6eda64a8d9b27a54e2ea3454e7754f36d6866dcc7b5cd076ee15c4952ea70eea0b98966c94a0000000000000000"], 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x10d}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r9, 0x300, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 1.752695824s ago: executing program 3 (id=850): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) close(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r8 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r8, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071112d0000000000851000000200000085a562f70000000095000000000000009500a50500000000c8650b2cfc43f7d6b9d96df6264d9d088ed70469cdb4665e42063f11e6c09edb5d205622dc2c6264d6f7a24ac7dc0f635849c878cce7b785ab0be88795f1e055ed0f2899be730d207ed3f9fece99b274005d59a557a71427c5727be830db59f8cdc0c4cff2"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) 1.114549557s ago: executing program 4 (id=852): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003a00070128bd700000000000027c000008000000", @ANYRES32=0x0, @ANYBLOB="d6060b9928ce0e4294adeaa560994d9f8d09651331ec8d8457b43d10b8e0fa82de48d5b72bd4ebbf18297c9e6015ef8efacdea99db74a91963bc486c1f"], 0x1c}}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r7, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006372637431306469662d67656e6572696300"], 0x184}}, 0x0) 0s ago: executing program 4 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() r3 = socket$inet6(0xa, 0x2, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x1, 'nicvf0\x00', {}, 0x5}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000e4b9b6d763a805d78fff0357f214f1714f17a19db11b4331ff7a888ba4a54b0002b841d44f6fca5e22b4c65c0ee916894b867176ae95fad1"], 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): ppleir failed with error -22 [ 342.061864][ T9557] netlink: 144 bytes leftover after parsing attributes in process `syz.4.555'. [ 342.281950][ T9561] netlink: 5 bytes leftover after parsing attributes in process `syz.3.562'. [ 342.501112][ T5240] Bluetooth: hci5: Malformed Event: 0x2f [ 343.436291][ T5284] usb 3-1: USB disconnect, device number 28 [ 343.595423][ T9575] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.628158][ T9575] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.674362][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 343.685264][ T9578] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.715059][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 343.727353][ T9575] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.742980][ T46] usb 5-1: USB disconnect, device number 18 [ 343.755491][ T9575] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.768006][ T9575] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 343.777810][ T9575] trusted_key: encrypted_key: insufficient parameters specified [ 343.989450][ T9583] netlink: 48 bytes leftover after parsing attributes in process `syz.2.567'. [ 344.079205][ T29] audit: type=1326 audit(1726048410.305:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.3.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86dd57def9 code=0x0 [ 344.241271][ T9590] netlink: 'syz.1.571': attribute type 17 has an invalid length. [ 344.253868][ T9590] netlink: 'syz.1.571': attribute type 16 has an invalid length. [ 344.279135][ T9590] netlink: 152 bytes leftover after parsing attributes in process `syz.1.571'. [ 344.332092][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 344.842937][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 344.856792][ T9585] delete_channel: no stack [ 344.861489][ T9585] delete_channel: no stack [ 345.095885][ T2638] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 345.155066][ T5240] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 345.188914][ T9608] netlink: 'syz.1.575': attribute type 5 has an invalid length. [ 345.323812][ T29] audit: type=1326 audit(1726048411.545:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9606 comm="syz.1.575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556657def9 code=0x0 [ 345.364710][ T2638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.393120][ T2638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.410842][ T2638] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 345.420359][ T2638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.431094][ T9614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 345.437708][ T9614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.449423][ T9614] vhci_hcd vhci_hcd.0: Device attached [ 345.467406][ T2638] usb 3-1: config 0 descriptor?? [ 345.499960][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 345.571844][ T9614] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 345.594745][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 345.628395][ T9614] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.637842][ T9614] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.649728][ T9614] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.655744][ T5284] vhci_hcd: vhci_device speed not set [ 345.664770][ T9614] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.728567][ T5284] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 345.744912][ T9619] dvmrp0: entered allmulticast mode [ 345.835293][ T9618] input: syz1 as /devices/virtual/input/input31 [ 346.021770][ T9615] vhci_hcd: connection reset by peer [ 346.049583][ T146] vhci_hcd: stop threads [ 346.065089][ T146] vhci_hcd: release socket [ 346.095736][ T146] vhci_hcd: disconnect device [ 346.270155][ T9636] netlink: 5 bytes leftover after parsing attributes in process `syz.4.580'. [ 346.531167][ T5240] Bluetooth: hci4: Malformed Event: 0x2f [ 346.683275][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 346.800005][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 347.050093][ T5307] IPVS: starting estimator thread 0... [ 347.145942][ T9652] IPVS: using max 20 ests per chain, 48000 per kthread [ 347.713411][ T9660] input: syz1 as /devices/virtual/input/input32 [ 347.862709][ T2638] usbhid 3-1:0.0: can't add hid device: -71 [ 347.885797][ T2638] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 347.923006][ T2638] usb 3-1: USB disconnect, device number 29 [ 348.085389][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 348.248294][ T9670] input: syz1 as /devices/virtual/input/input33 [ 348.520647][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 348.617431][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 348.837764][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 348.874556][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 348.935714][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 348.955696][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.007111][ T25] usb 1-1: config 0 descriptor?? [ 350.033264][ T9700] netlink: 5 bytes leftover after parsing attributes in process `syz.1.595'. [ 350.360772][ T5240] Bluetooth: hci0: Malformed Event: 0x2f [ 350.908199][ T5284] vhci_hcd: vhci_device speed not set [ 351.080549][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 351.090625][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 351.143305][ T25] usb 1-1: USB disconnect, device number 34 [ 351.274025][ T9721] atomic_op ffff8881492f5998 conn xmit_atomic 0000000000000000 [ 351.517275][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.864539][ T9735] netlink: 5 bytes leftover after parsing attributes in process `syz.2.603'. [ 351.912575][ T9732] input: syz1 as /devices/virtual/input/input34 [ 352.102499][ T5240] Bluetooth: hci2: Malformed Event: 0x2f [ 352.617950][ T5307] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 352.627827][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 352.736080][ T5240] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 352.746447][ T5240] Bluetooth: hci4: Injecting HCI hardware error event [ 352.756282][ T5233] Bluetooth: hci4: hardware error 0x00 [ 352.817350][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 352.825027][ T5307] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 352.842928][ T5307] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.875650][ T5307] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.925662][ T5307] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.958379][ T5307] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.041915][ T5307] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.062895][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.430544][ T5307] usb 5-1: usb_control_msg returned -32 [ 353.467978][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.605'. [ 353.485909][ T5307] usbtmc 5-1:16.0: can't read capabilities [ 353.922970][ T9773] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 354.369416][ T9753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.382338][ T9753] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.410391][ T9753] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.434557][ T9753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.446985][ T9753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.469761][ T9753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.482024][ T9753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.492963][ T9753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 354.504833][ T9753] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 354.521194][ T9753] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 354.543741][ T9753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.550141][ T9753] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 354.748170][ T9777] netlink: 5 bytes leftover after parsing attributes in process `syz.0.612'. [ 354.835770][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 354.974041][ T5240] Bluetooth: hci3: Malformed Event: 0x2f [ 354.983076][ T9780] netem: incorrect ge model size [ 354.989628][ T9780] netem: change failed [ 355.045784][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 355.061887][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.130012][ T25] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 355.133411][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 355.188302][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.202005][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.214867][ T25] usb 4-1: Product: syz [ 355.216298][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 355.232760][ T25] usb 4-1: Manufacturer: syz [ 355.269673][ T25] usb 4-1: SerialNumber: syz [ 355.421636][ T9789] input: syz1 as /devices/virtual/input/input35 [ 355.657558][ T9765] sctp: [Deprecated]: syz.3.611 (pid 9765) Use of int in max_burst socket option deprecated. [ 355.657558][ T9765] Use struct sctp_assoc_value instead [ 355.699198][ T25] usb 5-1: USB disconnect, device number 19 [ 355.811517][ T9796] dccp_v6_rcv: dropped packet with invalid checksum [ 356.102011][ T5307] usb 4-1: USB disconnect, device number 17 [ 356.358992][ T5233] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 356.477571][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 356.511535][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.527433][ T29] audit: type=1326 audit(1726048422.755:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9809 comm="syz.1.619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556657def9 code=0x0 [ 356.548975][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.576036][ T5240] Bluetooth: hci5: command 0x0c1a tx timeout [ 356.582057][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 356.862788][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 357.061028][ T9819] netlink: 148 bytes leftover after parsing attributes in process `syz.3.621'. [ 358.066768][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 358.313677][ T25] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 358.395207][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.440148][ T25] usb 4-1: Product: syz [ 358.451272][ T25] usb 4-1: Manufacturer: syz [ 358.473042][ T25] usb 4-1: SerialNumber: syz [ 358.491436][ T25] usb 4-1: config 0 descriptor?? [ 358.578623][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.631429][ T9837] input: syz1 as /devices/virtual/input/input36 [ 358.646375][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 358.652551][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 358.736528][ T9835] netlink: 312 bytes leftover after parsing attributes in process `syz.1.627'. [ 358.792706][ T25] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 358.821875][ T25] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 358.872120][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.883953][ T25] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 359.054359][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.245478][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.267534][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 359.350677][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.514355][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.535172][ T35] bridge_slave_1: left allmulticast mode [ 359.538902][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.551829][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 359.573469][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 359.588586][ T35] bridge_slave_1: left promiscuous mode [ 359.597621][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.611418][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.632177][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.654074][ T9843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.670543][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.672704][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.679816][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 359.700547][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 359.708342][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 359.713711][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 359.727312][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 359.733309][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.741844][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 359.750235][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.758629][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.767692][ T35] bridge_slave_0: left allmulticast mode [ 359.789537][ T35] bridge_slave_0: left promiscuous mode [ 359.836205][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.130252][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.155278][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.237153][ T5284] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 360.262605][ T46] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 360.288845][ T35] dvmrp0 (unregistering): left allmulticast mode [ 360.412637][ T5233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 360.412729][ T5233] Bluetooth: hci0: Injecting HCI hardware error event [ 360.414826][ T5233] Bluetooth: hci0: hardware error 0x00 [ 360.430582][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 360.432493][ T5284] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 360.432537][ T5284] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 360.432562][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.445900][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 360.453678][ T46] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 360.453696][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.453707][ T46] usb 3-1: config 0 has no interface number 0 [ 360.458354][ T46] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=a8.3d [ 360.458409][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.458432][ T46] usb 3-1: Product: syz [ 360.458447][ T46] usb 3-1: Manufacturer: syz [ 360.458462][ T46] usb 3-1: SerialNumber: syz [ 360.464261][ T46] usb 3-1: config 0 descriptor?? [ 360.506277][ T46] usb 3-1: bad CDC descriptors [ 360.655350][ T5240] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.687729][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.689869][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.732762][ T5240] Bluetooth: hci5: command 0x0c1a tx timeout [ 360.986009][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.014231][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.035060][ T35] bond0 (unregistering): Released all slaves [ 361.073528][ T35] bond1 (unregistering): Released all slaves [ 361.121115][ T9864] netlink: 'syz.0.631': attribute type 30 has an invalid length. [ 361.147926][ T2638] usb 3-1: USB disconnect, device number 30 [ 361.604354][ T35] hsr_slave_0: left promiscuous mode [ 361.633823][ T35] hsr_slave_1: left promiscuous mode [ 361.645508][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.659631][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.760315][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.780235][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.838742][ T35] veth1_macvtap: left promiscuous mode [ 361.846902][ T5240] Bluetooth: hci4: command tx timeout [ 361.939519][ T35] veth0_macvtap: left promiscuous mode [ 361.985027][ T35] veth1_vlan: left promiscuous mode [ 362.024354][ T35] veth0_vlan: left promiscuous mode [ 362.225134][ T25] usb 4-1: USB disconnect, device number 18 [ 362.487538][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 362.725808][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.864563][ T5284] usb 2-1: string descriptor 0 read error: -71 [ 362.890673][ T5284] hub 2-1:32.0: bad descriptor, ignoring hub [ 362.919951][ T5284] hub 2-1:32.0: probe with driver hub failed with error -5 [ 362.998137][ T5284] usb 2-1: USB disconnect, device number 21 [ 363.215892][ T35] team0 (unregistering): Port device team_slave_1 removed [ 363.270802][ T35] team0 (unregistering): Port device team_slave_0 removed [ 363.876345][ T9891] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 363.936211][ T5233] Bluetooth: hci4: command tx timeout [ 363.977172][ T5284] usb 1-1: USB disconnect, device number 35 [ 364.143968][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 364.198923][ T29] audit: type=1326 audit(1726048430.425:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.3.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86dd57def9 code=0x0 [ 364.534443][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 364.534500][ T9905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.640'. [ 364.616939][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.617042][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.617219][ T9857] bridge_slave_0: entered allmulticast mode [ 364.623205][ T9857] bridge_slave_0: entered promiscuous mode [ 364.633518][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.635797][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.637179][ T9857] bridge_slave_1: entered allmulticast mode [ 364.641977][ T9857] bridge_slave_1: entered promiscuous mode [ 364.900520][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.960494][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.205111][ T9857] team0: Port device team_slave_0 added [ 365.399040][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.484127][ T9857] team0: Port device team_slave_1 added [ 365.656941][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.667541][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.675281][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.688444][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.696118][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 365.704097][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.713706][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.885498][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.931070][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.962287][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.982906][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.004371][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.008386][ T5233] Bluetooth: hci4: command tx timeout [ 366.025823][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.052406][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.067254][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 366.078989][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.095461][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.108898][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.144943][ T9] usb 1-1: SerialNumber: syz [ 366.144962][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.265282][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.427716][ T9] usb 1-1: 0:2 : does not exist [ 366.484401][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.560473][ T9857] hsr_slave_0: entered promiscuous mode [ 366.569855][ T9857] hsr_slave_1: entered promiscuous mode [ 366.582687][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.592362][ T9857] Cannot create hsr debugfs directory [ 366.599561][ T9953] netlink: 5 bytes leftover after parsing attributes in process `syz.3.648'. [ 366.725843][ T2638] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 366.826580][ T5233] Bluetooth: hci5: Malformed Event: 0x2f [ 366.887911][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 366.950167][ T2638] usb 2-1: Using ep0 maxpacket: 16 [ 366.982640][ T2638] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.014146][ T2638] usb 2-1: config 0 has no interface number 0 [ 367.033262][ T2638] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.072115][ T2638] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 367.123528][ T35] bridge_slave_1: left allmulticast mode [ 367.125304][ T2638] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 367.135752][ T35] bridge_slave_1: left promiscuous mode [ 367.143531][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.165294][ T35] bridge_slave_0: left allmulticast mode [ 367.177452][ T2638] usb 2-1: Product: syz [ 367.179847][ T35] bridge_slave_0: left promiscuous mode [ 367.183170][ T2638] usb 2-1: SerialNumber: syz [ 367.187770][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.218065][ T5284] usb 1-1: USB disconnect, device number 36 [ 367.233261][ T2638] usb 2-1: config 0 descriptor?? [ 367.265291][ T2638] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 367.765828][ T5233] Bluetooth: hci2: command tx timeout [ 368.086160][ T5233] Bluetooth: hci4: command tx timeout [ 368.224311][ T35] team0: Port device bridge0 removed [ 368.442472][ T9989] netlink: 'syz.3.651': attribute type 9 has an invalid length. [ 368.450989][ T5233] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 368.504615][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.516601][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.529422][ T35] bond0 (unregistering): Released all slaves [ 368.592094][ T9991] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 368.597390][ T2638] usb 2-1: USB disconnect, device number 22 [ 368.603749][ T9989] warning: `syz.3.651' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 368.751288][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 368.933878][ T9997] netlink: 148 bytes leftover after parsing attributes in process `syz.0.652'. [ 369.150781][ T9943] chnl_net:caif_netlink_parms(): no params data found [ 369.382183][ T29] audit: type=1326 audit(1726048435.605:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86dd57def9 code=0x0 [ 369.491437][ T35] hsr_slave_0: left promiscuous mode [ 369.548626][ T35] hsr_slave_1: left promiscuous mode [ 369.576151][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.643515][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.691609][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.709719][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.751400][ T35] veth1_macvtap: left promiscuous mode [ 369.757667][ T35] veth0_macvtap: left promiscuous mode [ 369.763498][ T35] veth1_vlan: left promiscuous mode [ 369.775760][ T35] veth0_vlan: left promiscuous mode [ 369.846466][ T5233] Bluetooth: hci2: command tx timeout [ 370.325752][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 370.549239][ T35] team0 (unregistering): Port device virt_wifi0 removed [ 370.813476][ T35] team0 (unregistering): Port device team_slave_1 removed [ 370.858480][ T35] team0 (unregistering): Port device team_slave_0 removed [ 371.360674][T10019] netem: unknown loss type 5 [ 371.423386][T10029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.446639][T10029] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 371.476487][T10029] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 371.499689][T10029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.506355][T10029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.537728][T10029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.622094][T10051] x_tables: duplicate underflow at hook 3 [ 371.635733][T10029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.641770][T10029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.675409][T10029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.687432][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.695859][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.703239][ T9943] bridge_slave_0: entered allmulticast mode [ 371.712525][ T9943] bridge_slave_0: entered promiscuous mode [ 371.730997][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.747520][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.754734][ T9943] bridge_slave_1: entered allmulticast mode [ 371.806424][ T9943] bridge_slave_1: entered promiscuous mode [ 372.039700][ T9943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.090794][ T9943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.219825][T10063] netlink: 5 bytes leftover after parsing attributes in process `syz.0.663'. [ 372.253854][ T9943] team0: Port device team_slave_0 added [ 372.293619][ T9943] team0: Port device team_slave_1 added [ 372.407456][ T5233] Bluetooth: hci3: Malformed Event: 0x2f [ 372.453634][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.460928][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.488013][ T9943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.538541][ T29] audit: type=1326 audit(1726048438.755:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.1.664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556657def9 code=0x0 [ 372.555625][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.587096][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.706973][ T9943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.763568][ T9857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.831862][ T9857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.851559][ T9857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.881605][ T9857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.900551][ T9943] hsr_slave_0: entered promiscuous mode [ 372.912340][ T9943] hsr_slave_1: entered promiscuous mode [ 372.921307][ T9943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.950210][ T9943] Cannot create hsr debugfs directory [ 373.446615][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.452647][ T5240] Bluetooth: hci5: command 0x0c1a tx timeout [ 373.500384][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 373.526892][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.695774][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 373.728945][T10078] netlink: 76 bytes leftover after parsing attributes in process `syz.0.666'. [ 373.980671][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.292288][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.367098][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.374235][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.425188][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 374.471345][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.478481][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.507078][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'. [ 374.857010][ T9943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.881120][ T9943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.902573][ T9943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.935004][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.952726][ T9943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.101496][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 375.165527][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 375.204403][ T9857] veth0_vlan: entered promiscuous mode [ 375.286826][ T9857] veth1_vlan: entered promiscuous mode [ 375.371916][ T9943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.437559][ T9943] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.453555][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.460730][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.481598][ T940] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 375.519291][T10120] netlink: 5 bytes leftover after parsing attributes in process `syz.3.672'. [ 375.530971][ T5240] Bluetooth: hci5: command 0x0c1a tx timeout [ 375.595482][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.602672][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.614709][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.675231][ T9857] veth0_macvtap: entered promiscuous mode [ 375.708099][ T940] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.734044][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 375.761954][ T5240] Bluetooth: hci5: Malformed Event: 0x2f [ 375.768292][ T5233] Bluetooth: hci2: command 0x0419 tx timeout [ 375.781957][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.799554][ T9857] veth1_macvtap: entered promiscuous mode [ 375.809777][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.834268][ T940] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.844386][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.855499][ T940] usb 1-1: config 0 descriptor?? [ 375.863117][T10113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.967166][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.986230][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.011823][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.022838][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.034218][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.052097][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.062836][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.098155][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.114773][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.134132][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.162174][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.211420][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.229741][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.256845][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.295582][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.308500][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.324873][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.337574][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.354318][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.364482][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.385212][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.407925][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.408868][T10113] fuse: Unknown parameter '0x0000000000000009' [ 376.472143][T10110] tipc: Started in network mode [ 376.478257][T10110] tipc: Node identity ., cluster identity 4711 [ 376.487713][T10110] tipc: Enabling of bearer rejected, failed to enable media [ 376.526217][ T5284] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 376.617769][ T9857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.639989][ T9857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.651228][ T9857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.662288][ T9857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.686606][ T5284] usb 2-1: device descriptor read/64, error -71 [ 376.690399][ T940] usbhid 1-1:0.0: can't add hid device: -71 [ 376.702377][ T940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 376.773239][ T940] usb 1-1: USB disconnect, device number 37 [ 376.903900][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.924266][ T9943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.934731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.976272][ T5284] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 377.011136][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.023503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.121695][ T9943] veth0_vlan: entered promiscuous mode [ 377.148111][ T5284] usb 2-1: device descriptor read/64, error -71 [ 377.170949][ T9943] veth1_vlan: entered promiscuous mode [ 377.288570][ T5284] usb usb2-port1: attempt power cycle [ 377.307424][ T9943] veth0_macvtap: entered promiscuous mode [ 377.329063][ T9943] veth1_macvtap: entered promiscuous mode [ 377.405135][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.447645][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.482562][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.506386][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 377.533474][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.560813][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.573623][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.589455][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.602605][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.622720][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.641287][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.653425][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.674771][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.686372][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.707162][ T9943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.727515][ T5284] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 377.799510][ T5284] usb 2-1: device descriptor read/8, error -71 [ 377.845966][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 377.857829][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.892109][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.912791][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.957567][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.981664][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.011742][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.039426][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.082694][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.095670][ T5284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 378.127515][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.149229][ T5284] usb 2-1: device descriptor read/8, error -71 [ 378.174113][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.191429][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.225380][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.276068][ T5284] usb usb2-port1: unable to enumerate USB device [ 378.291128][ T9943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.351245][ T9943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.397041][ T9943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.435524][ T9943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.472358][ T9943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.553563][ T29] audit: type=1326 audit(1726048444.775:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.636013][ T29] audit: type=1326 audit(1726048444.805:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.661813][ T29] audit: type=1326 audit(1726048444.805:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.685986][ T29] audit: type=1326 audit(1726048444.805:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.696599][ T5240] Bluetooth: hci3: unexpected event for opcode 0x204e [ 378.759688][ T29] audit: type=1326 audit(1726048444.805:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.782848][ T29] audit: type=1326 audit(1726048444.805:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.809195][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812685][ T29] audit: type=1326 audit(1726048444.805:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 378.824021][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.909938][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.917986][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.979936][ T29] audit: type=1326 audit(1726048444.805:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 379.034851][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.075750][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.156945][ T29] audit: type=1326 audit(1726048444.805:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 379.190612][ T29] audit: type=1326 audit(1726048444.815:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff383b7def9 code=0x7ffc0000 [ 379.926639][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 380.064667][T10197] sch_tbf: burst 480 is lower than device veth1_to_bridge mtu (1514) ! [ 380.488675][T10228] netlink: 5 bytes leftover after parsing attributes in process `syz.2.683'. [ 380.736253][ T5240] Bluetooth: hci2: Malformed Event: 0x2f [ 380.823042][T10240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.284448][T10255] syzkaller1: entered promiscuous mode [ 381.299077][T10255] syzkaller1: entered allmulticast mode [ 381.337356][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 381.456583][ T940] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 381.573484][T10267] netlink: 76 bytes leftover after parsing attributes in process `syz.0.687'. [ 381.709750][ T940] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 381.769955][ T940] usb 2-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 381.816065][ T940] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 381.831228][T10273] netlink: 136 bytes leftover after parsing attributes in process `syz.4.689'. [ 381.870218][ T940] usb 2-1: config 0 has no interface number 0 [ 381.892829][ T940] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 381.910894][ T940] usb 2-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 381.960942][ T940] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 382.019477][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.054427][ T940] usb 2-1: Product: syz [ 382.084549][ T940] usb 2-1: Manufacturer: syz [ 382.110225][ T940] usb 2-1: SerialNumber: syz [ 382.131351][ T940] usb 2-1: config 0 descriptor?? [ 382.153892][T10275] netlink: 144 bytes leftover after parsing attributes in process `syz.4.689'. [ 382.157483][ T940] cdc_ether 2-1:0.185: skipping garbage [ 382.201675][ T940] cdc_ether 2-1:0.185: skipping garbage [ 382.265204][ T940] cdc_ether 2-1:0.185: skipping garbage [ 382.301979][ T940] usb 2-1: bad CDC descriptors [ 382.320464][ T940] usb 2-1: unsupported MDLM descriptors [ 382.508686][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.690'. [ 382.542175][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.690'. [ 382.616790][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.690'. [ 382.778881][T10293] netlink: 68 bytes leftover after parsing attributes in process `syz.1.686'. [ 382.925838][ T5307] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 383.148475][ T5307] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 383.164932][ T25] usb 2-1: USB disconnect, device number 27 [ 383.203176][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.258004][ T5307] usb 4-1: config 0 descriptor?? [ 383.340748][ T5240] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 383.590620][T10309] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 383.634536][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.673352][T10309] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 383.707719][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 383.855845][ T5307] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 383.879889][ T5307] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 383.895437][ T5307] [drm:udl_init] *ERROR* Selecting channel failed [ 383.931811][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.941369][ T5307] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 383.949651][ T5284] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 383.960638][T10317] bridge0: port 3(erspan0) entered blocking state [ 383.974682][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.992152][T10317] bridge0: port 3(erspan0) entered disabled state [ 383.995705][ T5307] [drm] Initialized udl on minor 2 [ 384.005363][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.025350][T10317] erspan0: entered allmulticast mode [ 384.028187][ T5307] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.031982][ T25] usb 5-1: Product: syz [ 384.061284][ T5307] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 384.063201][T10317] erspan0: entered promiscuous mode [ 384.070969][ T940] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.081350][ T25] usb 5-1: Manufacturer: syz [ 384.089172][ T25] usb 5-1: SerialNumber: syz [ 384.109101][T10317] bridge0: port 3(erspan0) entered blocking state [ 384.109484][T10317] bridge0: port 3(erspan0) entered forwarding state [ 384.145428][ T940] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.146161][ T940] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 384.146966][ T5307] usb 4-1: USB disconnect, device number 19 [ 384.176457][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 384.200118][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.200152][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.200198][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.200239][ T5284] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 384.200262][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.262973][ T5284] usb 1-1: config 0 descriptor?? [ 384.730340][ T5284] logitech 0003:046D:C211.000A: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0 [ 384.746592][ T5284] logitech 0003:046D:C211.000A: no inputs found [ 384.831922][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 384.972080][ T5307] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 385.017168][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.070932][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.127324][T10327] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 385.153343][ T25] cdc_ncm 5-1:1.0: failed to get mac address [ 385.175703][ T5307] usb 4-1: Using ep0 maxpacket: 16 [ 385.186359][ T5307] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 385.199183][ T5307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.226367][ T5307] usb 4-1: config 0 has no interface number 0 [ 385.257555][ T5307] usb 4-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=a8.3d [ 385.280792][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.318715][ T5307] usb 4-1: Product: syz [ 385.335359][ T5307] usb 4-1: Manufacturer: syz [ 385.349074][ T5307] usb 4-1: SerialNumber: syz [ 385.362129][ T25] cdc_ncm 5-1:1.0: bind() failure [ 385.366898][ T5307] usb 4-1: config 0 descriptor?? [ 385.396435][ T5307] usb 4-1: bad CDC descriptors [ 385.406000][ T25] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 385.440007][ T25] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 385.473961][ T25] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 385.493585][ T25] usb 5-1: USB disconnect, device number 20 [ 385.627440][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.668908][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.814760][ T940] usb 4-1: USB disconnect, device number 20 [ 386.066077][ T5284] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 386.268035][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.304253][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.345900][ T5284] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 386.360537][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.393226][ T5284] usb 3-1: config 0 descriptor?? [ 386.803916][ T25] usb 1-1: USB disconnect, device number 38 [ 386.829301][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.844612][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.856158][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.863509][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.871184][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.878738][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.890065][ T5284] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 386.912907][ T5284] petalynx 0003:18B1:0037.000B: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 387.041232][ T5240] Bluetooth: hci3: ISO packet for unknown connection handle 200 [ 387.140464][T10353] futex_wake_op: syz.0.708 tries to shift op by -1; fix this program [ 387.877883][ T25] usb 3-1: USB disconnect, device number 31 [ 387.894217][ T5284] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 388.085129][T10367] netlink: 5 bytes leftover after parsing attributes in process `syz.4.712'. [ 388.107697][ T5284] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 388.147018][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.170089][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.192234][ T5284] usb 1-1: config 0 descriptor?? [ 388.205207][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.224311][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.233244][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.243142][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.251106][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.285724][ T5240] Bluetooth: hci4: Malformed Event: 0x2f [ 388.606213][ T2929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.627591][ T2929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.942364][ T2929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.945768][ T5284] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 388.953250][ T2929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.021740][ T5284] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 389.035498][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 389.076790][ T5284] [drm:udl_init] *ERROR* Selecting channel failed [ 389.149098][ T2929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.150654][ T5284] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 389.179170][ T5284] [drm] Initialized udl on minor 2 [ 389.187909][ T2929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.187952][ T5284] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 389.230505][ T5284] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 389.254114][T10383] netlink: 76 bytes leftover after parsing attributes in process `syz.2.713'. [ 389.285060][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 389.294137][ T5284] usb 1-1: USB disconnect, device number 39 [ 389.300364][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 389.394119][ T2929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.404997][ T2929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.737791][T10371] chnl_net:caif_netlink_parms(): no params data found [ 390.161308][T10396] netlink: 'syz.0.715': attribute type 22 has an invalid length. [ 390.180941][ T2929] bridge_slave_1: left allmulticast mode [ 390.216820][ T2929] bridge_slave_1: left promiscuous mode [ 390.224911][T10393] usb usb9: usbfs: process 10393 (syz.0.715) did not claim interface 0 before use [ 390.256008][T10393] usb usb9: selecting invalid altsetting 21783 [ 390.275726][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.292395][ T2929] bridge_slave_0: left allmulticast mode [ 390.323096][ T2929] bridge_slave_0: left promiscuous mode [ 390.328116][ T5240] Bluetooth: hci5: command tx timeout [ 390.358074][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.428580][ T5284] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 390.586069][ T2638] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 390.616105][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 390.637580][ T5284] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 390.664468][ T5284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.679338][ T5284] usb 2-1: config 0 has no interface number 0 [ 390.689244][ T5284] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=a8.3d [ 390.705198][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.725501][ T5284] usb 2-1: Product: syz [ 390.731194][ T5284] usb 2-1: Manufacturer: syz [ 390.755903][ T5284] usb 2-1: SerialNumber: syz [ 390.765168][ T5284] usb 2-1: config 0 descriptor?? [ 390.788662][ T2638] usb 5-1: Using ep0 maxpacket: 8 [ 390.819030][ T5284] usb 2-1: bad CDC descriptors [ 390.834058][ T2638] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 390.862563][ T2638] usb 5-1: can't read configurations, error -61 [ 391.015707][ T2638] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 391.023786][ T2929] dvmrp0 (unregistering): left allmulticast mode [ 391.036991][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.069287][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.202894][ T5236] usb 2-1: USB disconnect, device number 28 [ 391.237004][ T2638] usb 5-1: Using ep0 maxpacket: 8 [ 391.270558][ T2638] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.285743][ T2638] usb 5-1: can't read configurations, error -61 [ 391.296758][ T2638] usb usb5-port1: attempt power cycle [ 391.302880][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.316883][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.334430][ T2929] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 391.345080][ T2929] bond0 (unregistering): Released all slaves [ 391.360676][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.369186][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.378269][T10371] bridge_slave_0: entered allmulticast mode [ 391.385726][ T5284] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 391.386194][T10371] bridge_slave_0: entered promiscuous mode [ 391.429146][T10404] netlink: 'syz.4.718': attribute type 6 has an invalid length. [ 391.446618][T10404] netlink: 64 bytes leftover after parsing attributes in process `syz.4.718'. [ 391.508714][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.529214][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.546308][T10371] bridge_slave_1: entered allmulticast mode [ 391.567423][ T2929] IPVS: stopping backup sync thread 9527 ... [ 391.584913][ T5284] usb 1-1: device descriptor read/64, error -71 [ 391.585158][T10371] bridge_slave_1: entered promiscuous mode [ 391.716542][ T2638] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 391.768614][ T2638] usb 5-1: Using ep0 maxpacket: 8 [ 391.800435][ T2638] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.820345][ T2638] usb 5-1: can't read configurations, error -61 [ 391.852644][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.878380][ T5284] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 391.985812][ T2638] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.002666][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.045950][ T5284] usb 1-1: device descriptor read/64, error -71 [ 392.054602][ T2638] usb 5-1: Using ep0 maxpacket: 8 [ 392.076631][ T2638] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 392.085086][ T2638] usb 5-1: can't read configurations, error -61 [ 392.100733][ T2638] usb usb5-port1: unable to enumerate USB device [ 392.119701][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.130245][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.174072][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.184193][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.184837][ T5284] usb usb1-port1: attempt power cycle [ 392.201750][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.218254][T10424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 392.405823][ T5240] Bluetooth: hci5: command tx timeout [ 392.436652][T10371] team0: Port device team_slave_0 added [ 392.501410][ T2929] hsr_slave_0: left promiscuous mode [ 392.512744][ T2929] hsr_slave_1: left promiscuous mode [ 392.534961][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.551062][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.564958][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.581021][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.639846][ T2929] veth1_macvtap: left promiscuous mode [ 392.645903][ T5284] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 392.666152][ T2929] veth0_macvtap: left promiscuous mode [ 392.693113][ T2929] veth1_vlan: left promiscuous mode [ 392.697285][ T5284] usb 1-1: device descriptor read/8, error -71 [ 392.714048][ T2929] veth0_vlan: left promiscuous mode [ 392.975774][ T5284] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 393.016707][ T5284] usb 1-1: device descriptor read/8, error -71 [ 393.072262][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.091136][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.101924][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.112619][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.133863][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 393.147791][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.156151][ T5284] usb usb1-port1: unable to enumerate USB device [ 393.441390][T10436] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 394.068856][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 394.138557][T10444] __nla_validate_parse: 66 callbacks suppressed [ 394.138572][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 394.243031][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 394.396590][T10448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.726'. [ 394.462329][T10449] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 394.462329][T10449] cct.usage_percpu_sys' [ 394.485796][ T5240] Bluetooth: hci5: command tx timeout [ 395.220166][ T5240] Bluetooth: hci0: command tx timeout [ 395.375970][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 395.532687][T10371] team0: Port device team_slave_1 added [ 395.672107][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.685395][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.761426][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.838918][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.864119][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.970460][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.372372][T10371] hsr_slave_0: entered promiscuous mode [ 396.389303][T10371] hsr_slave_1: entered promiscuous mode [ 396.413142][T10371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.437838][T10371] Cannot create hsr debugfs directory [ 396.579882][ T5240] Bluetooth: hci5: command tx timeout [ 396.698819][ T2929] IPVS: stop unused estimator thread 0... [ 397.006189][ T29] audit: type=1326 audit(1726048463.225:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.4.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9cb7def9 code=0x0 [ 397.281544][ T2929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.296225][ T5240] Bluetooth: hci0: command tx timeout [ 397.305702][ T2929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.443462][T10434] chnl_net:caif_netlink_parms(): no params data found [ 397.574632][ T29] audit: type=1326 audit(1726048463.795:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x0 [ 397.613859][ T2929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.636869][ T2929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.833097][ T2929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.872065][ T2929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.908894][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 398.019578][ T2929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.044343][ T2929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.243725][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.254376][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.262748][T10434] bridge_slave_0: entered allmulticast mode [ 398.272192][T10434] bridge_slave_0: entered promiscuous mode [ 398.281705][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.291813][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.305052][T10434] bridge_slave_1: entered allmulticast mode [ 398.317504][T10434] bridge_slave_1: entered promiscuous mode [ 398.515240][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.587810][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.780857][T10371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.824801][T10371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.864198][ T2929] bridge_slave_1: left allmulticast mode [ 398.869984][ T2929] bridge_slave_1: left promiscuous mode [ 398.876167][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.903279][ T2929] bridge_slave_0: left allmulticast mode [ 398.930521][ T2929] bridge_slave_0: left promiscuous mode [ 398.936560][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.368135][ T5240] Bluetooth: hci0: command tx timeout [ 399.636411][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 399.821806][ T2929] dvmrp0 (unregistering): left allmulticast mode [ 399.909566][T10535] netlink: 148 bytes leftover after parsing attributes in process `syz.0.741'. [ 400.481646][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.522056][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.534407][ T2929] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 400.561602][ T2929] bond0 (unregistering): Released all slaves [ 400.621678][T10434] team0: Port device team_slave_0 added [ 400.693887][T10434] team0: Port device team_slave_1 added [ 400.824594][T10371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.867910][ T2929] IPVS: stopping backup sync thread 9160 ... [ 400.988289][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.005525][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.063962][T10543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.742'. [ 401.084597][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.118542][T10371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.195175][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.205666][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.261426][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.335722][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 401.361248][ T5284] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 401.446154][ T5240] Bluetooth: hci0: command tx timeout [ 401.525426][ T2929] hsr_slave_0: left promiscuous mode [ 401.537978][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.548063][ T2929] hsr_slave_1: left promiscuous mode [ 401.556259][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.565041][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.565073][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.583012][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 401.599538][ T5284] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 401.613085][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.625041][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.635796][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.648813][ T8] usb 1-1: config 0 descriptor?? [ 401.648854][ T5284] usb 5-1: config 0 descriptor?? [ 401.670029][ T5284] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 401.712893][ T2929] veth1_macvtap: left promiscuous mode [ 401.720191][ T2929] veth0_macvtap: left promiscuous mode [ 401.726172][ T2929] veth1_vlan: left promiscuous mode [ 401.733045][ T2929] veth0_vlan: left promiscuous mode [ 402.189097][ T5284] gspca_sunplus: reg_w_riv err -110 [ 402.211401][ T5284] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 402.290658][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 402.312084][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 402.356856][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 402.406349][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 402.417922][ T8] [drm] Initialized udl on minor 2 [ 402.436434][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.459242][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 402.475128][ T5307] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.508231][ T8] usb 1-1: USB disconnect, device number 44 [ 402.528257][ T5307] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 402.858604][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 402.995351][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 403.136761][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 403.245831][ T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 403.465892][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 403.485167][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.505864][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.525624][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 403.545393][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.567478][ T8] usb 1-1: config 0 descriptor?? [ 403.841120][T10434] hsr_slave_0: entered promiscuous mode [ 403.856141][T10434] hsr_slave_1: entered promiscuous mode [ 403.894865][T10434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.903809][T10434] Cannot create hsr debugfs directory [ 403.904246][ T5307] usb 5-1: USB disconnect, device number 25 [ 404.234644][ T8] savu 0003:1E7D:2D5A.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 404.456306][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.484896][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.495016][T10560] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 404.519493][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 404.536607][T10560] ipvlan0: entered promiscuous mode [ 404.543578][T10560] ipvlan0: left promiscuous mode [ 404.563907][T10560] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 404.695100][ T5284] usb 1-1: USB disconnect, device number 45 [ 404.776755][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.057309][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.070572][ T5240] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 405.113687][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.120854][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.280840][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.288035][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.448947][T10587] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.591853][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 405.731652][T10596] random: crng reseeded on system resumption [ 405.749629][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.765674][T10592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.749'. [ 405.991651][T10434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 406.038592][T10434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 406.064184][T10434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.105242][T10434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.184090][T10371] veth0_vlan: entered promiscuous mode [ 406.232568][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 406.313299][T10371] veth1_vlan: entered promiscuous mode [ 406.377690][T10605] netlink: 148 bytes leftover after parsing attributes in process `syz.4.751'. [ 406.454299][T10371] veth0_macvtap: entered promiscuous mode [ 406.490787][T10371] veth1_macvtap: entered promiscuous mode [ 406.528581][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.586944][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.599730][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.632043][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.655130][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.685330][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.710520][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.734846][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.766060][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.801259][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.831037][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.946608][T10371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.099687][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.115476][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.127912][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.153752][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.184415][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.204783][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.230561][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.245141][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.255462][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.267594][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.292806][T10371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.333462][T10632] netlink: 48 bytes leftover after parsing attributes in process `syz.4.753'. [ 407.368641][T10371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.418956][T10371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.454647][T10371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.480538][T10371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.493389][T10634] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 407.568956][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.703053][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.710232][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.774956][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.782110][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.818048][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.842888][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.851369][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 407.933106][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.964150][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.057527][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.091429][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.108968][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.118364][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.137139][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.160772][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.216554][ T8] usb 1-1: config 0 descriptor?? [ 408.280469][T10434] veth0_vlan: entered promiscuous mode [ 408.349803][T10643] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 408.408352][T10434] veth1_vlan: entered promiscuous mode [ 408.523106][T10434] veth0_macvtap: entered promiscuous mode [ 408.589222][T10434] veth1_macvtap: entered promiscuous mode [ 408.677922][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.703354][ T8] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 408.714803][ T5236] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 408.730000][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.771866][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.804953][ T8] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 408.820285][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.842294][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.870939][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.898474][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.935770][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 408.942370][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.959362][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.984092][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.997361][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.025657][ T5236] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 409.034838][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.062318][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.086157][ T5236] usb 3-1: config 0 descriptor?? [ 409.104191][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.133553][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.159175][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.229102][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.260294][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.273478][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.292123][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.334394][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.373759][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.415511][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.434895][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.455813][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.474794][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.495020][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.523069][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.567163][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.592036][T10655] netlink: 'syz.0.755': attribute type 11 has an invalid length. [ 409.614903][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 409.678230][T10656] netlink: 'syz.0.755': attribute type 11 has an invalid length. [ 409.697393][T10434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.737825][T10434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.764524][T10434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.799551][T10434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.860080][T10656] debugfs: Directory 'netdev:' with parent 'phy58' already present! [ 409.910411][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.988509][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.029651][ T9] usb 3-1: USB disconnect, device number 32 [ 410.046162][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 410.081381][T10661] dvmrp0: entered allmulticast mode [ 410.125129][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.147919][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.198366][T10661] input: syz1 as /devices/virtual/input/input41 [ 410.230098][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.271127][ T8] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 410.283058][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.303771][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.336295][ T8] usb 5-1: Product: syz [ 410.354560][ T8] usb 5-1: Manufacturer: syz [ 410.377428][ T8] usb 5-1: SerialNumber: syz [ 410.418059][ T8] usb 5-1: config 0 descriptor?? [ 410.439906][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 410.451813][T10664] netlink: 136 bytes leftover after parsing attributes in process `syz.1.723'. [ 410.811603][ T29] audit: type=1326 audit(1726048477.035:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.4.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9cb7def9 code=0x0 [ 410.917559][ T5284] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 410.978078][ T8] gspca_vc032x: reg_r err -110 [ 411.019056][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.033225][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.759'. [ 411.052139][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 411.076793][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 411.076874][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.192700][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.207338][ T5236] usb 1-1: USB disconnect, device number 46 [ 411.223085][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.238739][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.248693][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.282974][ T5284] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 411.283704][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.299100][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.329808][ T5284] usb 2-1: config 0 descriptor?? [ 411.382878][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.436819][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.454296][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.470236][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.487890][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.501167][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.515476][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.522965][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.561946][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.580075][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.600577][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.633777][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.652802][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.675790][ T2638] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 411.684227][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.704474][ T8] gspca_vc032x: Unknown sensor... [ 411.735156][ T8] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 411.825189][T10665] netlink: 144 bytes leftover after parsing attributes in process `syz.1.723'. [ 411.855976][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 411.922514][ T2638] usb 4-1: string descriptor 0 read error: -22 [ 411.943041][ T2638] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 411.986403][ T2638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.003804][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 412.016361][ T2638] usb 4-1: config 0 descriptor?? [ 412.078341][ T2638] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 412.095114][ T2638] usb 4-1: No valid video chain found. [ 412.621542][T10694] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 412.811887][T10696] netlink: 5 bytes leftover after parsing attributes in process `syz.2.766'. [ 412.879628][ T5307] usb 5-1: USB disconnect, device number 26 [ 413.049962][ T5240] Bluetooth: hci2: Malformed Event: 0x2f [ 413.284808][T10703] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 413.530875][ T29] audit: type=1326 audit(1726048479.755:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.0.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383b7def9 code=0x0 [ 413.553985][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'. [ 413.610581][ T5284] usbhid 2-1:0.0: can't add hid device: -71 [ 413.629683][ T5284] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 413.647775][ T5284] usb 2-1: USB disconnect, device number 29 [ 413.773999][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 414.127059][T10724] netlink: 5 bytes leftover after parsing attributes in process `syz.4.772'. [ 414.174446][ T5307] usb 4-1: USB disconnect, device number 21 [ 414.306397][ T5284] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 414.319384][ T5240] Bluetooth: hci4: Malformed Event: 0x2f [ 414.562510][ T5284] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 414.589587][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.622971][ T5284] usb 2-1: Product: syz [ 414.628490][ T5284] usb 2-1: Manufacturer: syz [ 414.646672][ T5284] usb 2-1: SerialNumber: syz [ 414.659838][ T5284] usb 2-1: config 0 descriptor?? [ 414.772514][T10736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.849987][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 415.230621][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.298919][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.995824][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 416.218576][T10755] __nla_validate_parse: 1 callbacks suppressed [ 416.218590][T10755] netlink: 136 bytes leftover after parsing attributes in process `syz.2.780'. [ 416.235933][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 416.253400][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 416.276356][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 416.314238][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.342767][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.394107][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 416.448570][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 416.476668][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.523724][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.581280][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.647537][ T9] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 416.675880][ T5284] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 416.870373][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.910836][ T5307] usb 2-1: USB disconnect, device number 30 [ 416.984975][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.003584][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.020962][ T5284] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 417.030577][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.061878][ T5284] usb 3-1: config 0 descriptor?? [ 417.411270][T10769] netlink: 538 bytes leftover after parsing attributes in process `syz.1.784'. [ 417.537785][T10758] netlink: 144 bytes leftover after parsing attributes in process `syz.2.780'. [ 418.196393][ T2638] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 418.398978][ T2638] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.435941][ T2638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.477358][ T2638] usb 5-1: config 0 descriptor?? [ 418.768758][ T5240] Bluetooth: hci3: unexpected event for opcode 0x040e [ 418.817846][ T5240] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 418.838878][T10786] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 418.983701][T10786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.044105][T10786] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 419.073902][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.081621][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.204346][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.211865][T10778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.220912][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.228085][T10778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.328186][ T5284] usbhid 3-1:0.0: can't add hid device: -71 [ 419.346866][ T5284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 419.389723][ T5284] usb 3-1: USB disconnect, device number 33 [ 419.389791][T10778] team0: Port device bridge0 added [ 419.641583][ T9] usb 4-1: USB disconnect, device number 22 [ 419.661713][ T5240] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 419.697751][ T2638] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 419.749450][ T2638] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 419.783281][T10794] netlink: 'syz.2.790': attribute type 2 has an invalid length. [ 419.792250][ T2638] [drm:udl_init] *ERROR* Selecting channel failed [ 419.807757][ T146] bridge0: port 3(hsr0) entered disabled state [ 419.819148][ T2638] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 419.839247][T10794] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.790'. [ 419.875818][ T2638] [drm] Initialized udl on minor 2 [ 419.894368][ T146] bridge_slave_1: left allmulticast mode [ 419.902324][ T2638] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.917067][ T5284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.922721][ T146] bridge_slave_1: left promiscuous mode [ 419.925041][ T2638] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 419.970891][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.988018][ T5284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.024470][ T2638] usb 5-1: USB disconnect, device number 27 [ 420.033658][ T146] bridge_slave_0: left allmulticast mode [ 420.042623][ T5284] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 420.070649][ T146] bridge_slave_0: left promiscuous mode [ 420.118490][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.292613][T10806] sctp: [Deprecated]: syz.0.792 (pid 10806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.292613][T10806] Use struct sctp_sack_info instead [ 420.440754][T10808] libceph: resolve '0.0' (ret=-3): failed [ 420.460077][ T29] audit: type=1326 audit(1726048486.685:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.3.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7db7d7def9 code=0x0 [ 420.682119][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 421.019085][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.040984][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.062901][ T146] bond0 (unregistering): Released all slaves [ 421.090035][ T146] bond1 (unregistering): Released all slaves [ 421.325734][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 421.376634][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 421.591145][T10829] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 421.671115][T10835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.801'. [ 421.855251][ T146] hsr_slave_0: left promiscuous mode [ 421.875200][ T5240] Bluetooth: hci5: Malformed Event: 0x2f [ 421.931523][ T146] hsr_slave_1: left promiscuous mode [ 421.958185][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.986951][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.025759][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.058649][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.146169][ T146] veth1_macvtap: left promiscuous mode [ 422.182855][ T146] veth0_macvtap: left promiscuous mode [ 422.280346][ T146] veth1_vlan: left promiscuous mode [ 422.370079][ T146] veth0_vlan: left promiscuous mode [ 422.892315][ T5240] Bluetooth: hci4: Malformed Event: 0x2f [ 422.993905][T10902] ipt_REJECT: TCP_RESET invalid for non-tcp [ 423.332333][ T146] team0 (unregistering): Port device team_slave_1 removed [ 423.383723][ T146] team0 (unregistering): Port device team_slave_0 removed [ 423.704502][ T5240] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 423.713515][ T5240] Bluetooth: hci2: Injecting HCI hardware error event [ 423.725247][ T5233] Bluetooth: hci2: hardware error 0x00 [ 423.979259][T10895] netlink: 5 bytes leftover after parsing attributes in process `syz.4.805'. [ 424.101607][ T5240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 424.110521][ T5240] Bluetooth: hci0: Injecting HCI hardware error event [ 424.120438][ T5240] Bluetooth: hci0: hardware error 0x00 [ 424.129709][ T29] audit: type=1326 audit(1726048490.355:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.1.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee97def9 code=0x0 [ 424.233276][T10912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.807'. [ 424.538512][T10908] xt_l2tp: v2 sid > 0xffff: 536870912 [ 424.586213][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 424.727801][T10919] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 424.828205][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 424.863623][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 424.878791][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.905651][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.931349][ T9] usb 2-1: config 1 has no interface number 1 [ 424.957372][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 425.013583][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 425.021748][T10922] netlink: 136 bytes leftover after parsing attributes in process `syz.3.812'. [ 425.046169][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 425.088373][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 425.101716][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.152107][ T9] usb 2-1: string descriptor 0 read error: -22 [ 425.174778][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.205580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.260711][ T9] usb 2-1: low speed audio streaming not supported [ 425.296104][T10926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.308569][T10926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.321756][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.335808][T10926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.352805][T10926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.364835][T10926] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 425.394470][T10926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.458447][ T2638] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 425.505136][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.646114][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 425.649553][ T2638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.683022][ T2638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.714087][ T2638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.766258][ T5233] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 425.769526][ T2638] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 425.784510][ T2638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.870675][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 425.888012][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 425.908699][ T2638] usb 4-1: config 0 descriptor?? [ 425.912163][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.960777][ T9] usb 5-1: config 0 descriptor?? [ 426.001159][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 426.226706][ T146] bridge_slave_1: left allmulticast mode [ 426.232415][ T146] bridge_slave_1: left promiscuous mode [ 426.255958][ T5240] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 426.272974][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.366391][ T146] bridge_slave_0: left allmulticast mode [ 426.372083][ T146] bridge_slave_0: left promiscuous mode [ 426.403048][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.916951][ T29] audit: type=1326 audit(1726048493.145:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9cb7def9 code=0x0 [ 427.041009][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.053656][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.100523][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.114107][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.128372][ T5236] usb 2-1: USB disconnect, device number 31 [ 427.134898][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.146265][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.156374][ T9] gspca_sunplus: reg_r err -110 [ 427.205024][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 427.391767][ T146] dvmrp0 (unregistering): left allmulticast mode [ 427.446154][ T5240] Bluetooth: hci3: command tx timeout [ 427.589102][ T146] team0: Port device bridge0 removed [ 427.833148][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.849124][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.862382][ T146] bond0 (unregistering): Released all slaves [ 427.897891][T10923] netlink: 144 bytes leftover after parsing attributes in process `syz.3.812'. [ 427.956439][ T146] tipc: Left network mode [ 428.007812][ T146] IPVS: stopping backup sync thread 9991 ... [ 428.118829][ T2638] usbhid 4-1:0.0: can't add hid device: -71 [ 428.150600][ T2638] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 428.158414][T10965] netlink: 5 bytes leftover after parsing attributes in process `syz.1.818'. [ 428.191425][ T2638] usb 4-1: USB disconnect, device number 23 [ 428.312367][T10929] chnl_net:caif_netlink_parms(): no params data found [ 428.629884][ T146] hsr_slave_0: left promiscuous mode [ 428.700317][ T146] hsr_slave_1: left promiscuous mode [ 428.710200][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.719851][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.730278][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.738821][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.778368][ T146] veth1_macvtap: left promiscuous mode [ 428.784823][ T146] veth0_macvtap: left promiscuous mode [ 428.791742][ T146] veth1_vlan: left promiscuous mode [ 428.797464][ T146] veth0_vlan: left promiscuous mode [ 429.213112][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 429.222388][ T5240] Bluetooth: hci2: command tx timeout [ 429.536261][ T5240] Bluetooth: hci3: command tx timeout [ 429.543652][ T8] usb 5-1: USB disconnect, device number 28 [ 429.661491][T11000] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 430.174321][ T146] team0 (unregistering): Port device team_slave_1 removed [ 430.267378][ T146] team0 (unregistering): Port device team_slave_0 removed [ 431.080703][T11006] netlink: 5 bytes leftover after parsing attributes in process `syz.1.823'. [ 431.283177][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.291567][ T5240] Bluetooth: hci2: command tx timeout [ 431.297830][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.304995][T10929] bridge_slave_0: entered allmulticast mode [ 431.313478][T10929] bridge_slave_0: entered promiscuous mode [ 431.333896][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.347376][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.354632][T10929] bridge_slave_1: entered allmulticast mode [ 431.362641][T10929] bridge_slave_1: entered promiscuous mode [ 431.520935][T10953] chnl_net:caif_netlink_parms(): no params data found [ 431.608430][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.620012][ T5240] Bluetooth: hci3: command tx timeout [ 431.633775][T11023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.638714][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.673827][T11023] fuse: Invalid rootmode [ 431.863826][T10929] team0: Port device team_slave_0 added [ 431.967927][T10929] team0: Port device team_slave_1 added [ 432.105151][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.138843][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.176247][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.209594][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.243866][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.254313][T10953] bridge_slave_0: entered allmulticast mode [ 432.265309][T10953] bridge_slave_0: entered promiscuous mode [ 432.300914][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.310455][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.336520][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.369159][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.473712][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.490031][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.513038][T10953] bridge_slave_1: entered allmulticast mode [ 432.531517][T10953] bridge_slave_1: entered promiscuous mode [ 432.657642][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.738392][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.777232][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.801466][T11047] netlink: 5 bytes leftover after parsing attributes in process `syz.1.828'. [ 432.926586][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.049193][T10953] team0: Port device team_slave_0 added [ 433.096111][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.136659][T11058] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 433.218582][T10953] team0: Port device team_slave_1 added [ 433.269749][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.303516][T10929] hsr_slave_0: entered promiscuous mode [ 433.318071][T10929] hsr_slave_1: entered promiscuous mode [ 433.376211][ T5240] Bluetooth: hci2: command tx timeout [ 433.509668][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.532640][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.606888][ T2638] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 433.625874][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.686009][ T5240] Bluetooth: hci3: command tx timeout [ 433.748515][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.777057][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.802948][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.849782][ T2638] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.855567][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.870288][ T2638] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 433.906471][ T2638] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.942360][ T2638] usb 5-1: config 1 interface 0 has no altsetting 0 [ 433.971751][ T2638] usb 5-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 433.989456][ T2638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.997756][ T2638] usb 5-1: Product: syz [ 434.002126][ T2638] usb 5-1: Manufacturer: syz [ 434.006916][ T2638] usb 5-1: SerialNumber: syz [ 434.319213][T10953] hsr_slave_0: entered promiscuous mode [ 434.343971][ T2638] cdc_ether 5-1:1.0: skipping garbage [ 434.364728][ T2638] usb 5-1: bad CDC descriptors [ 434.367613][T10953] hsr_slave_1: entered promiscuous mode [ 434.373912][ T2638] usb 5-1: USB disconnect, device number 29 [ 434.402719][T10953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.435875][T10953] Cannot create hsr debugfs directory [ 434.732669][ T146] erspan0: left allmulticast mode [ 434.753095][ T146] erspan0: left promiscuous mode [ 434.763428][ T146] bridge0: port 3(erspan0) entered disabled state [ 434.794385][ T146] bridge_slave_1: left allmulticast mode [ 434.802395][ T146] bridge_slave_1: left promiscuous mode [ 434.809172][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.824146][ T146] bridge_slave_0: left allmulticast mode [ 434.832386][ T146] bridge_slave_0: left promiscuous mode [ 434.842160][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.455792][ T5240] Bluetooth: hci2: command tx timeout [ 435.651801][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.675875][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.688307][ T146] bond0 (unregistering): Released all slaves [ 435.699468][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 436.390940][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 436.494620][ T146] hsr_slave_0: left promiscuous mode [ 436.509125][ T146] hsr_slave_1: left promiscuous mode [ 436.520777][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.532653][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.556419][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.575014][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.681175][ T146] veth1_macvtap: left promiscuous mode [ 436.692616][ T146] veth0_macvtap: left promiscuous mode [ 436.711011][ T146] veth1_vlan: left promiscuous mode [ 436.726277][ T146] veth0_vlan: left promiscuous mode [ 437.285771][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 437.505974][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 437.558726][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 437.576798][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.592876][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.604866][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.619470][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.632967][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.648331][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.899040][ T25] usb 5-1: usb_control_msg returned -32 [ 437.909098][ T25] usbtmc 5-1:16.0: can't read capabilities [ 438.171427][ T146] team0 (unregistering): Port device team_slave_1 removed [ 438.296804][ T146] team0 (unregistering): Port device team_slave_0 removed [ 439.966426][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 440.071045][ T5236] usb 5-1: USB disconnect, device number 30 [ 440.231996][T11113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.840'. [ 440.252610][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274409][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.302599][T11118] x_tables: duplicate entry at hook 2 [ 440.486435][T10953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.525671][T10953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.561759][T11124] netlink: 5 bytes leftover after parsing attributes in process `syz.3.842'. [ 440.574880][T10953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.601992][T10953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.734087][T11129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.799765][ T5240] Bluetooth: hci5: Malformed Event: 0x2f [ 440.815076][T10929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.840947][T10929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.897003][T10929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.921612][T10929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.271670][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 441.524725][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.604052][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.678760][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.770183][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.859670][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.866862][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.942547][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.949789][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.001315][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.008487][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.089183][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.096356][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.271087][T11150] ======================================================= [ 442.271087][T11150] WARNING: The mand mount option has been deprecated and [ 442.271087][T11150] and is ignored by this kernel. Remove the mand [ 442.271087][T11150] option from the mount to silence this warning. [ 442.271087][T11150] ======================================================= [ 442.297836][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.363366][T11160] netlink: 'syz.1.847': attribute type 22 has an invalid length. [ 442.548358][T11158] usb usb9: usbfs: process 11158 (syz.1.847) did not claim interface 0 before use [ 442.579281][T11158] usb usb9: selecting invalid altsetting 21783 [ 442.730749][T10953] veth0_vlan: entered promiscuous mode [ 442.818398][T10929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.894616][T10953] veth1_vlan: entered promiscuous mode [ 443.021157][T10929] veth0_vlan: entered promiscuous mode [ 443.121231][T10953] veth0_macvtap: entered promiscuous mode [ 443.179763][T10929] veth1_vlan: entered promiscuous mode [ 443.221467][T10953] veth1_macvtap: entered promiscuous mode [ 443.289110][T11170] netlink: 136 bytes leftover after parsing attributes in process `syz.1.849'. [ 443.387159][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.406851][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.440341][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.465094][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.495710][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.517693][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.528545][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.575703][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.598282][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.642544][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.677204][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.704490][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.728165][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.738299][ T2638] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.757603][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.787174][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.816085][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.860802][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.927362][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.950099][ T2638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.984283][ T2638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.998555][T10929] veth0_macvtap: entered promiscuous mode [ 444.030276][ T2638] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.068986][ T2638] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 444.116339][ T2638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.146714][ T2638] usb 2-1: config 0 descriptor?? [ 444.231927][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.311788][T10929] veth1_macvtap: entered promiscuous mode [ 444.347390][T10953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.385942][T10953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.411688][T10953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.443239][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 444.455279][T10953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.550960][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.719294][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.723433][T11195] netlink: 76 bytes leftover after parsing attributes in process `syz.4.852'. [ 444.805309][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.850869][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.880735][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.913779][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.952826][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.000260][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.052931][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.069594][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.087178][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.100778][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.113927][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.124072][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 445.132374][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.144068][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.203590][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.233040][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.284733][T10929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.356267][T11174] netlink: 144 bytes leftover after parsing attributes in process `syz.1.849'. [ 445.414608][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.579326][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.616904][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.649681][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.711211][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.751857][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.802783][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.834452][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.869150][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.937084][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.975139][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.006062][ T30] INFO: task syz.3.448:8776 blocked for more than 143 seconds. [ 446.013645][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 446.037468][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.042450][T10929] batman_adv: batadv0: Interface activated: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 446.079233][ T30] task:syz.3.448 state:D stack:26384 pid:8776 tgid:8776 ppid:8261 flags:0x00004004 [ 446.116235][ T30] Call Trace: [ 446.126351][ T30] [ 446.134651][ T30] __schedule+0x1800/0x4a60 [ 446.139162][T10953] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht' [ 446.157596][ T30] ? __pfx___schedule+0x10/0x10 [ 446.196627][ T30] ? __pfx_lock_release+0x10/0x10 [ 446.230875][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 446.255687][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 446.263937][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 446.282772][ T30] ? schedule+0x90/0x320 [ 446.297439][ T30] schedule+0x14b/0x320 [ 446.305932][ T30] schedule_preempt_disabled+0x13/0x30 [ 446.311425][ T30] __mutex_lock+0x6a4/0xd70 [ 446.345606][ T30] ? __mutex_lock+0x527/0xd70 [ 446.350534][ T30] ? hugetlb_fault+0x56f/0x3770 [ 446.355432][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 446.401371][T11220] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.410518][ T30] hugetlb_fault+0x56f/0x3770 [ 446.415266][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.432748][T11220] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.441636][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 446.447398][ T30] ? mt_find+0x226/0x850 [ 446.451816][ T30] ? __pfx_lock_release+0x10/0x10 [ 446.457354][T11220] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.466246][ T30] handle_mm_fault+0x1901/0x1bc0 [ 446.471465][ T30] ? mt_find+0x62d/0x850 [ 446.477296][T11220] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.487178][ T30] ? mt_find+0x226/0x850 [ 446.491494][ T30] ? __pfx_mt_find+0x10/0x10 [ 446.496836][T11220] geneve2: entered promiscuous mode [ 446.502046][T11220] geneve2: entered allmulticast mode [ 446.515637][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 446.520998][ T30] ? find_vma+0xf9/0x170 [ 446.525274][ T30] ? __pfx_find_vma+0x10/0x10 [ 446.575673][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 446.595892][ T30] exc_page_fault+0x2b9/0x8c0 [ 446.600655][ T30] asm_exc_page_fault+0x26/0x30 [ 446.643233][ T30] RIP: 0033:0x7f9dd534597c [ 446.665576][ T30] RSP: 002b:00007f9dd565fb88 EFLAGS: 00010246 [ 446.671707][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 446.732313][ T30] RDX: 0000000000000010 RSI: 00007f9dd4e005d5 RDI: 0000000020000d00 [ 446.758685][ T30] RBP: 00007f9dd5537a80 R08: 00007f9dd5200000 R09: 0000000000000001 [ 446.775954][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000479c6 [ 446.784019][ T30] R13: 00007f9dd565fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 446.794097][ T30] [ 446.812699][ T30] INFO: task syz.3.448:8777 blocked for more than 144 seconds. [ 446.851318][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 446.890635][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.933952][ T30] task:syz.3.448 state:D stack:24920 pid:8777 tgid:8776 ppid:8261 flags:0x00004006 [ 446.957296][ T30] Call Trace: [ 446.960664][ T30] [ 446.963869][ T30] __schedule+0x1800/0x4a60 [ 446.971444][ T30] ? __pfx___schedule+0x10/0x10 [ 446.978782][ T30] ? __pfx_lock_release+0x10/0x10 [ 446.984208][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 446.991291][ T30] ? schedule+0x90/0x320 [ 447.002785][ T30] schedule+0x14b/0x320 [ 447.012996][ T30] schedule_preempt_disabled+0x13/0x30 [ 447.019103][ T30] __mutex_lock+0x6a4/0xd70 [ 447.025610][ T30] ? __mutex_lock+0x527/0xd70 [ 447.030521][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 447.035236][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 447.041593][ T30] ? __pfx_up_write+0x10/0x10 [ 447.047146][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.052391][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 447.060465][ T30] hugetlb_wp+0x104d/0x3a90 [ 447.065038][ T30] ? mark_lock+0x9a/0x350 [ 447.070114][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 447.075022][ T30] ? __pfx___might_resched+0x10/0x10 [ 447.081888][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 447.089385][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 447.104864][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.110861][ T30] ? __filemap_get_folio+0x769/0xc10 [ 447.125176][ T30] hugetlb_fault+0x27b2/0x3770 [ 447.130745][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 447.145394][ T30] ? mt_find+0x226/0x850 [ 447.150450][ T30] ? __pfx_lock_release+0x10/0x10 [ 447.155981][ T30] handle_mm_fault+0x1901/0x1bc0 [ 447.160995][ T30] ? mt_find+0x62d/0x850 [ 447.165289][ T30] ? mt_find+0x226/0x850 [ 447.179593][ T30] ? __pfx_mt_find+0x10/0x10 [ 447.184284][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 447.194165][ T30] ? find_vma+0xf9/0x170 [ 447.202026][ T30] ? __pfx_find_vma+0x10/0x10 [ 447.207469][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.213863][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 447.226497][ T5233] Bluetooth: hci5: command tx timeout [ 447.245563][ T30] exc_page_fault+0x2b9/0x8c0 [ 447.250328][ T30] asm_exc_page_fault+0x26/0x30 [ 447.255208][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 447.268476][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 447.305779][ T30] RSP: 0018:ffffc9000425fad0 EFLAGS: 00050246 [ 447.311972][ T30] RAX: ffffffff84b29701 RBX: 0000000020011c40 RCX: 0000000000000040 [ 447.325853][ T30] RDX: 0000000000000000 RSI: ffffc9000425fb60 RDI: 0000000020011c00 [ 447.333873][ T30] RBP: ffffc9000425fc10 R08: ffffc9000425fb9f R09: 1ffff9200084bf73 [ 447.351850][ T30] R10: dffffc0000000000 R11: fffff5200084bf74 R12: 0000000000000040 [ 447.359968][ T30] R13: 00000000000115c0 R14: 0000000020011c00 R15: ffffc9000425fb60 [ 447.381843][ T30] ? _copy_to_user+0x11/0xb0 [ 447.387856][ T30] _copy_to_user+0x86/0xb0 [ 447.392366][ T30] rng_dev_read+0x3be/0x6d0 [ 447.397380][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 447.402949][ T30] ? security_file_permission+0x7f/0xa0 [ 447.413089][ T30] ? rw_verify_area+0x52a/0x6b0 [ 447.420448][ T30] vfs_readv+0x6c2/0xa90 [ 447.424764][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 447.430008][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 447.434846][ T30] ? __fget_files+0x29/0x470 [ 447.440517][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 447.445434][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 447.451706][ T30] ? do_syscall_64+0x100/0x230 [ 447.456630][ T30] ? do_syscall_64+0xb6/0x230 [ 447.461555][ T30] do_syscall_64+0xf3/0x230 [ 447.466456][ T30] ? clear_bhb_loop+0x35/0x90 [ 447.471384][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.477538][ T30] RIP: 0033:0x7f9dd537def9 [ 447.483368][ T30] RSP: 002b:00007f9dd61c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 447.492239][ T30] RAX: ffffffffffffffda RBX: 00007f9dd5535f80 RCX: 00007f9dd537def9 [ 447.510245][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 447.521251][ T30] RBP: 00007f9dd53f0b56 R08: 0000000000000000 R09: 0000000000000000 [ 447.542339][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.553040][ T30] R13: 0000000000000000 R14: 00007f9dd5535f80 R15: 00007f9dd565fa28 [ 447.561591][ T30] [ 447.564690][ T30] INFO: task syz.3.448:8779 blocked for more than 144 seconds. [ 447.603581][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 447.616172][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.625638][ T30] task:syz.3.448 state:D stack:22832 pid:8779 tgid:8776 ppid:8261 flags:0x00004006 [ 447.655575][ T30] Call Trace: [ 447.658893][ T30] [ 447.661824][ T30] __schedule+0x1800/0x4a60 [ 447.725650][ T30] ? __pfx___schedule+0x10/0x10 [ 447.730593][ T30] ? __pfx_lock_release+0x10/0x10 [ 447.766089][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.795720][ T30] ? schedule+0x90/0x320 [ 447.800015][ T30] schedule+0x14b/0x320 [ 447.804211][ T30] io_schedule+0x8d/0x110 [ 447.861192][ T30] folio_wait_bit_common+0x882/0x12b0 [ 447.902760][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 447.978060][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 447.983721][ T30] ? _raw_spin_unlock+0x28/0x50 [ 448.035847][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 448.041672][ T30] __filemap_get_folio+0xb7/0xc10 [ 448.129407][ T30] hugetlb_fault+0x1b72/0x3770 [ 448.134286][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 448.166001][ T30] ? mt_find+0x226/0x850 [ 448.170359][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.175446][ T30] handle_mm_fault+0x1901/0x1bc0 [ 448.191172][ T30] ? mt_find+0x62d/0x850 [ 448.195498][ T30] ? mt_find+0x226/0x850 [ 448.202035][ T30] ? __pfx_mt_find+0x10/0x10 [ 448.214608][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 448.225597][ T30] ? find_vma+0xf9/0x170 [ 448.229900][ T30] ? __pfx_find_vma+0x10/0x10 [ 448.234628][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.244448][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 448.250699][ T30] exc_page_fault+0x2b9/0x8c0 [ 448.255446][ T30] asm_exc_page_fault+0x26/0x30 [ 448.260445][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 448.266736][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 448.286886][ T30] RSP: 0018:ffffc9000436f778 EFLAGS: 00050202 [ 448.293055][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 448.301493][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 448.312326][ T30] RBP: ffffc9000436fec8 R08: ffffffff901875ef R09: 1ffffffff2030ebd [ 448.320882][ T30] R10: dffffc0000000000 R11: fffffbfff2030ebe R12: 1ffff9200086df7d [ 448.330633][ T30] R13: 1ffff9200086df08 R14: 0000000020800000 R15: 0000000000800000 [ 448.338915][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 448.344095][ T30] ? stack_trace_save+0x118/0x1d0 [ 448.350033][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 448.355835][ T30] ? stack_depot_save_flags+0x29/0x830 [ 448.361356][ T30] ? kasan_save_track+0x51/0x80 [ 448.366727][ T30] ? kasan_save_track+0x3f/0x80 [ 448.371621][ T30] ? kasan_save_free_info+0x40/0x50 [ 448.378672][ T30] ? poison_slab_object+0xe0/0x150 [ 448.383846][ T30] ? __kasan_slab_free+0x37/0x60 [ 448.389172][ T30] ? kfree+0x149/0x360 [ 448.393315][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 448.399323][ T30] ? security_file_ioctl+0x75/0xb0 [ 448.404498][ T30] ? __se_sys_ioctl+0x47/0x170 [ 448.412668][ T30] ? do_syscall_64+0xf3/0x230 [ 448.420475][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.427373][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 448.432225][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 448.437986][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.444375][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 448.450398][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.455553][ T30] ? kfree+0x149/0x360 [ 448.459686][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 448.465366][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.472281][ T30] ? __fget_files+0x29/0x470 [ 448.477202][ T30] ? __fget_files+0x3f6/0x470 [ 448.481934][ T30] ? __fget_files+0x29/0x470 [ 448.488115][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 448.493329][ T30] ? security_file_ioctl+0x87/0xb0 [ 448.504420][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 448.510272][ T30] __se_sys_ioctl+0xfc/0x170 [ 448.514927][ T30] do_syscall_64+0xf3/0x230 [ 448.519957][ T30] ? clear_bhb_loop+0x35/0x90 [ 448.524690][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.534386][ T30] RIP: 0033:0x7f9dd537def9 [ 448.539064][ T30] RSP: 002b:00007f9dd61a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.547852][ T30] RAX: ffffffffffffffda RBX: 00007f9dd5536058 RCX: 00007f9dd537def9 [ 448.556418][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 448.564437][ T30] RBP: 00007f9dd53f0b56 R08: 0000000000000000 R09: 0000000000000000 [ 448.572941][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.581263][ T30] R13: 0000000000000000 R14: 00007f9dd5536058 R15: 00007f9dd565fa28 [ 448.589935][ T30] [ 448.594531][ T30] [ 448.594531][ T30] Showing all locks held in the system: [ 448.627600][ T30] 1 lock held by pool_workqueue_/3: [ 448.633675][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 448.687576][ T30] 1 lock held by khungtaskd/30: [ 448.692534][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 448.726232][ T30] 4 locks held by kworker/u8:3/52: [ 448.732230][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 448.748252][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 448.758945][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 448.768481][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 448.777516][ T30] 5 locks held by kworker/1:2/2638: [ 448.782723][ T30] #0: ffff88801e6b3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 448.794142][ T30] #1: ffffc90009a87d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 448.806179][ T30] #2: ffff8880287c4190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 448.815108][ T30] #3: ffff888054077190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 448.832427][ T30] #4: ffff888068f7a160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 448.843726][ T30] 1 lock held by klogd/4675: [ 448.853985][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 448.865994][ T30] 2 locks held by getty/4983: [ 448.870697][ T30] #0: ffff8880300e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 448.888420][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 448.902899][ T30] 2 locks held by syz.3.448/8776: [ 448.908100][ T30] #0: ffff88807986d718 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 448.924627][ T30] #1: ffff888021692338 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 448.940720][ T30] 2 locks held by syz.3.448/8777: [ 448.946509][ T30] #0: ffff88807986d718 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 448.958321][ T30] #1: ffff888021692338 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 448.971777][ T30] 3 locks held by syz.3.448/8779: [ 448.977529][ T30] #0: ffff88807986d718 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 448.988586][ T30] #1: ffff888021692338 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 448.999676][ T30] #2: ffff8880316f60e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 449.016237][ T30] 3 locks held by kworker/u8:8/10870: [ 449.021647][ T30] #0: ffff88802fa93148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 449.038229][ T30] #1: ffffc90004dcfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 449.059017][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 449.070725][ T30] 3 locks held by syz-executor/10929: [ 449.080391][ T30] #0: ffff88806d9a8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 449.090491][ T30] #1: ffff88806d9a8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 449.108088][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 449.122257][ T30] 4 locks held by syz-executor/10953: [ 449.132320][ T30] #0: ffff88806d9acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 449.145644][ T30] #1: ffff88806d9ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 449.155377][ T30] #2: ffffffff8fdf7e28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 449.171863][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 449.182911][ T30] 1 lock held by syz.1.849/11176: [ 449.194331][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 449.203464][ T30] 2 locks held by syz-executor/11205: [ 449.224358][ T30] #0: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 449.233886][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x83d/0xca0 [ 449.243281][ T30] 1 lock held by syz.4.853/11220: [ 449.254958][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 449.264051][ T30] 3 locks held by dhcpcd-run-hook/11285: [ 449.285619][ T5233] Bluetooth: hci5: command tx timeout [ 449.294103][ T30] [ 449.300074][ T30] ============================================= [ 449.300074][ T30] [ 449.322833][ T52] bridge_slave_1: left allmulticast mode [ 449.330978][ T52] bridge_slave_1: left promiscuous mode [ 449.338418][ T2638] usbhid 2-1:0.0: can't add hid device: -71 [ 449.338656][ T30] NMI backtrace for cpu 0 [ 449.344414][ T2638] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 449.348650][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 449.348675][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 449.348686][ T30] Call Trace: [ 449.348695][ T30] [ 449.348704][ T30] dump_stack_lvl+0x241/0x360 [ 449.348731][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.348751][ T30] ? __pfx__printk+0x10/0x10 [ 449.348766][ T30] ? vprintk_emit+0x667/0x7c0 [ 449.348788][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 449.348812][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 449.348842][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 449.348861][ T30] ? _printk+0xd5/0x120 [ 449.348877][ T30] ? __pfx__printk+0x10/0x10 [ 449.348896][ T30] ? __wake_up_klogd+0xcc/0x110 [ 449.348918][ T30] ? __pfx__printk+0x10/0x10 [ 449.348938][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 449.348960][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.348991][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 449.349019][ T30] watchdog+0xff4/0x1040 [ 449.349046][ T30] ? watchdog+0x1ea/0x1040 [ 449.349075][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.349098][ T30] kthread+0x2f0/0x390 [ 449.349117][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.349140][ T30] ? __pfx_kthread+0x10/0x10 [ 449.349158][ T30] ret_from_fork+0x4b/0x80 [ 449.349181][ T30] ? __pfx_kthread+0x10/0x10 [ 449.349198][ T30] ret_from_fork_asm+0x1a/0x30 [ 449.349237][ T30] [ 449.349786][ T30] Sending NMI from CPU 0 to CPUs 1: [ 449.358343][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.368465][ C1] NMI backtrace for cpu 1 [ 449.368478][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 449.368497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 449.368508][ C1] Workqueue: netns cleanup_net [ 449.368529][ C1] RIP: 0010:delay_tsc+0x73/0xe0 [ 449.368549][ C1] Code: 00 e8 d1 41 ad f5 65 8b 05 a2 17 4e 74 85 c0 74 2f f3 90 bf 01 00 00 00 e8 1a 40 ad f5 e8 55 f8 03 00 41 39 c7 75 20 0f 01 f9 <66> 90 48 89 d5 48 c1 e5 20 48 09 c5 48 29 dd 49 39 ee 77 be eb 23 [ 449.368562][ C1] RSP: 0018:ffffc90000bc7158 EFLAGS: 00000046 [ 449.368576][ C1] RAX: 0000000066d83b10 RBX: 000000e866d83916 RCX: 0000000000000001 [ 449.368588][ C1] RDX: 00000000000000e8 RSI: ffffffff8c608f20 RDI: ffffffff8c608ee0 [ 449.368600][ C1] RBP: 000000000000017e R08: ffffffff85408aea R09: 1ffff11004ae8046 [ 449.368612][ C1] R10: dffffc0000000000 R11: ffffffff8bb5bf10 R12: dffffc0000000000 [ 449.368624][ C1] R13: 00000000000026d7 R14: 0000000000000899 R15: 0000000000000001 [ 449.368635][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 449.368650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.368662][ C1] CR2: 00007f5b0778d440 CR3: 0000000032074000 CR4: 00000000003526f0 [ 449.368676][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.368686][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.368697][ C1] Call Trace: [ 449.368704][ C1] [ 449.368711][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 449.368730][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 449.368759][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 449.368777][ C1] ? nmi_handle+0x2a/0x5a0 [ 449.368801][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 449.368819][ C1] ? nmi_handle+0x14f/0x5a0 [ 449.368834][ C1] ? nmi_handle+0x2a/0x5a0 [ 449.368850][ C1] ? delay_tsc+0x73/0xe0 [ 449.368867][ C1] ? default_do_nmi+0x63/0x160 [ 449.368886][ C1] ? exc_nmi+0x123/0x1f0 [ 449.368904][ C1] ? end_repeat_nmi+0xf/0x53 [ 449.368926][ C1] ? __pfx_delay_tsc+0x10/0x10 [ 449.368942][ C1] ? serial8250_console_write+0x103a/0x1770 [ 449.368966][ C1] ? delay_tsc+0x73/0xe0 [ 449.368983][ C1] ? delay_tsc+0x73/0xe0 [ 449.369002][ C1] ? delay_tsc+0x73/0xe0 [ 449.369019][ C1] [ 449.369025][ C1] [ 449.369032][ C1] serial8250_console_write+0x104e/0x1770 [ 449.369063][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 449.369083][ C1] ? __pfx_lock_release+0x10/0x10 [ 449.369101][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 449.369124][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 449.369144][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 449.369162][ C1] console_flush_all+0x865/0xfd0 [ 449.369182][ C1] ? console_flush_all+0x152/0xfd0 [ 449.369202][ C1] ? __lock_acquire+0x137a/0x2040 [ 449.369222][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 449.369249][ C1] console_unlock+0x13b/0x4d0 [ 449.369269][ C1] ? __pfx_console_unlock+0x10/0x10 [ 449.369287][ C1] ? vprintk_emit+0x400/0x7c0 [ 449.369305][ C1] ? vprintk_emit+0x5a7/0x7c0 [ 449.369322][ C1] ? vprintk_emit+0x405/0x7c0 [ 449.369338][ C1] vprintk_emit+0x5dc/0x7c0 [ 449.369355][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 449.369371][ C1] ? switchdev_deferred_enqueue+0x44/0x260 [ 449.369390][ C1] ? switchdev_deferred_enqueue+0x14e/0x260 [ 449.369413][ C1] _printk+0xd5/0x120 [ 449.369430][ C1] ? br_set_state+0x2d9/0x7b0 [ 449.369449][ C1] ? __pfx__printk+0x10/0x10 [ 449.369470][ C1] br_set_state+0x3d9/0x7b0 [ 449.369491][ C1] ? __pfx_br_set_state+0x10/0x10 [ 449.369514][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 449.369530][ C1] ? veth_set_multicast_list+0x9/0x10 [ 449.369552][ C1] ? br_become_designated_port+0x20/0x340 [ 449.369572][ C1] br_stp_disable_port+0x78/0x1c0 [ 449.369594][ C1] del_nbp+0x17f/0xb40 [ 449.369608][ C1] ? __pfx_vxlan_exit_batch_rtnl+0x10/0x10 [ 449.369633][ C1] br_dev_delete+0x6e/0x100 [ 449.369650][ C1] br_net_exit_batch_rtnl+0xf2/0x1a0 [ 449.369671][ C1] ? __pfx_br_net_exit_batch_rtnl+0x10/0x10 [ 449.369690][ C1] cleanup_net+0x709/0xcc0 [ 449.369710][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 449.369751][ C1] ? process_scheduled_works+0x945/0x1830 [ 449.369771][ C1] process_scheduled_works+0xa2c/0x1830 [ 449.369804][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.369828][ C1] ? assign_work+0x364/0x3d0 [ 449.369849][ C1] worker_thread+0x86d/0xd10 [ 449.369876][ C1] ? __kthread_parkme+0x169/0x1d0 [ 449.369897][ C1] ? __pfx_worker_thread+0x10/0x10 [ 449.369916][ C1] kthread+0x2f0/0x390 [ 449.369930][ C1] ? __pfx_worker_thread+0x10/0x10 [ 449.369948][ C1] ? __pfx_kthread+0x10/0x10 [ 449.369963][ C1] ret_from_fork+0x4b/0x80 [ 449.369982][ C1] ? __pfx_kthread+0x10/0x10 [ 449.369997][ C1] ret_from_fork_asm+0x1a/0x30 [ 449.370024][ C1] [ 449.383327][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 449.383341][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 449.383362][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 449.383373][ T30] Call Trace: [ 449.383382][ T30] [ 449.383390][ T30] dump_stack_lvl+0x241/0x360 [ 449.383416][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.383435][ T30] ? __pfx__printk+0x10/0x10 [ 449.383450][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.383479][ T30] ? vscnprintf+0x5d/0x90 [ 449.383501][ T30] panic+0x349/0x860 [ 449.383520][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.383543][ T30] ? __pfx_panic+0x10/0x10 [ 449.383558][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 449.383578][ T30] ? __irq_work_queue_local+0x137/0x410 [ 449.383602][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 449.383621][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.383641][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 449.383665][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 449.383689][ T30] watchdog+0x1033/0x1040 [ 449.383713][ T30] ? watchdog+0x1ea/0x1040 [ 449.383740][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.383763][ T30] kthread+0x2f0/0x390 [ 449.383779][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.383801][ T30] ? __pfx_kthread+0x10/0x10 [ 449.383818][ T30] ret_from_fork+0x4b/0x80 [ 449.383839][ T30] ? __pfx_kthread+0x10/0x10 [ 449.383856][ T30] ret_from_fork_asm+0x1a/0x30 [ 449.383890][ T30] [ 449.385118][ T30] Kernel Offset: disabled