last executing test programs: 26.241193389s ago: executing program 3 (id=1699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000280)=ANY=[], 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x8209, 0x4, 0x0, 0x80c, 0x8, 0x5916}, &(0x7f0000000080)=0x20) 25.181293796s ago: executing program 3 (id=1702): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close(r0) 24.641331496s ago: executing program 2 (id=1705): r0 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r0, 0x82000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) preadv(r3, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, 0xc, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r8], 0x3c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 23.19300352s ago: executing program 3 (id=1706): write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x3, 0x67, 0x5001, 0x8, 0x0, 0x0, 0x1}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0xc018480d, &(0x7f0000000000)={0x2}) sendmmsg$inet(r4, 0x0, 0x0, 0xc0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000039000701000000000000000001000000040000000c15bd88cfd0010fa7dd000009000200005272fb64000000"], 0x30}}, 0x0) 22.354195022s ago: executing program 2 (id=1707): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @remote}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r2, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x58}}, 0x0) read$FUSE(r2, &(0x7f0000001800)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x0, 0xd47}) write$cgroup_devices(r2, &(0x7f0000000180)={'a', ' *:* ', 'm\x00'}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x4}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) 21.926427783s ago: executing program 3 (id=1709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = dup2(0xffffffffffffffff, r3) lseek(r4, 0x0, 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cd", 0x6, 0x1, 0x0, 0x0) shutdown(r2, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/13, 0xd}, {0x0}, {0x0}], 0x3}, 0xb2}], 0x1, 0x10001, 0x0) 13.400619572s ago: executing program 4 (id=1721): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000300)=r0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000004c0), &(0x7f0000000640)}, 0x20) r2 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 10.212960682s ago: executing program 4 (id=1723): write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x3, 0x67, 0x5001, 0x8, 0x0, 0x0, 0x1}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0xc018480d, &(0x7f0000000000)={0x2}) sendmmsg$inet(r4, 0x0, 0x0, 0xc0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000039000701000000000000000001000000040000000c15bd88cfd0010fa7dd000009000200005272fb64000000"], 0x30}}, 0x0) 6.707758087s ago: executing program 2 (id=1708): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000006800010000000000000000000a00000000000000060007000400000008000500", @ANYRES32=r1, @ANYBLOB="14000880100008800c00038008"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da8121336d640d", @ANYRES8, @ANYRES32=r2], 0xfe33) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x803}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) 5.884703838s ago: executing program 4 (id=1728): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 5.842622437s ago: executing program 2 (id=1729): r0 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r0, 0x82000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) preadv(r3, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, 0xc, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r8], 0x3c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.264781685s ago: executing program 2 (id=1730): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.899752509s ago: executing program 3 (id=1717): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x0, [{@multicast2}, {@dev, 0x5}, {@broadcast}, {@empty}, {@private, 0xf}, {@private}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x4, 0x40000, 0x6, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0, 0xfffffffffffffd87}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 4.438332804s ago: executing program 0 (id=1732): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 4.420819914s ago: executing program 1 (id=1733): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = mq_open(0x0, 0x40, 0x1c0, &(0x7f0000000100)={0xd34d, 0x800000000000004, 0x100, 0xfffffffffffffff2}) mq_timedreceive(r3, 0x0, 0x0, 0xb, &(0x7f00000001c0)={0x77359400}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) listen(r1, 0x403) r9 = dup2(r8, r0) close_range(r9, 0xffffffffffffffff, 0x0) 4.057271819s ago: executing program 4 (id=1734): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010104}, {}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.990289545s ago: executing program 0 (id=1735): fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000003040)=ANY=[@ANYBLOB="040e0600130c"], 0x9) 3.777007456s ago: executing program 0 (id=1736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4040) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x22020400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x6835, &(0x7f0000000300)={0x0, 0x5f52, 0x2000, 0xffffdfff, 0xfffffffa, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0x25f, 0x200) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r9, &(0x7f0000000740)=ANY=[], 0x78) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f0000000240)={0x1, 0x8001, 0x3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0xffffc000) 3.641429156s ago: executing program 3 (id=1737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x3, [{{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e23, @empty}}]}, 0x210) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = shmget(0x0, 0x4000, 0x100, &(0x7f0000790000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000300)=""/135) pselect6(0x40, &(0x7f0000000980)={0x1, 0x0, 0x5, 0x0, 0x3f37}, &(0x7f0000000840)={0x8000000000000000, 0x8000000000000001, 0x0, 0x8000}, &(0x7f0000000880)={0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x4}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x4]}, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x12}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@delchain={0x34, 0x65, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {}, {0x4, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x7a00}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xe) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000002000000380000000000000000191bda000020000100006b5e0200000000000003"], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.227286829s ago: executing program 1 (id=1738): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050401c9"], 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000050007400f000000200004801c0001800a0001006c696d69740000000c0002800800044000000001147c7659fe00010000000000000000000000000a"], 0x7c}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000070000000000001cecaf7a3b588e32b84352932b2a4907864010100ac1414aa0b0090780300000045000000000000000089000000000000ac1414aa862a00000000000d000000000000000000000000054eb8a600529606053d0006ff00800000b61af93a93070700e0000001860c000000000006f116177b000000"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x3000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x7, 0x9b, &(0x7f00000003c0)=""/155, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x2008800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b3267078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b9b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce21265b6e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f458d8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xb82) 2.9720608s ago: executing program 4 (id=1739): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x3]}, &(0x7f0000000340), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x24a37189c6b1afd9) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r4, &(0x7f0000002140)="3631f6d86aade8310e71e0e236c470ade3e9b07a8faa2aeef1e4e19a5329657abcd5ef2d09756199ae635e0fca96f996be7076cd2a3995103d5a9eb88fbf21b823c854f068ec813b9136bbaf3575ecfc2507aa63b15161b1fe564fcb63f35beb25a1ac1b885decd8d97b9749fa95190fa18501d6897a912e53c669b305312615ad93b2e424dc155c164fd766c139554b6a7a7876180f869963f1de26a8e93f3557624d19228177c32368186313d76d30218a5222c2be11017b8dbb230cc3a9355d930a45d925c91a69eb4a7e313983f778b2029ee1c64fec7f5e280907a443a39e93db6193822e3ebcdba1143d236d6ed0ef8589bd238ef4a7c5c1327a8f1d29be16f5b4b3ec54653619930c4747953a9ffb95de257fbcb44573edc6bf6d65004697a96ebd618d4ef26b312b58663ae91d964ae942769430ce5687e800d1982f6d9add3584562041d45eddefb96d996adda9143ac5cf2b6a5c86cbaa00dff5820e2ddf2f96014c3654b8e0834d0523d3ee5443e949910d78ebfe4ff4e8ebb5563ee9f2011cf3a1793578479cefc227ee3ae320b387a7249de223aa8cffc4800ea707a9810bf5a72c28e30824afd27663ec49be0a28ce420f175dff67a59b017f39c328f1fa6bb91f3596ae0bffb8237acc6083c1a3bef656c50673b0845f7c70d8ed515ebf0f41f1a23e8a2166624be59a7b7cc358a6a1db3838cf130b86b19c24845c36da41d05189dd9499e97966f33d83e4fec8c5b3d47e497c4283dc81e601ecc616271d54d6714d9edbde9416249924aa6499ada5576469ab462b2e34f3f3bf1db3c12774b37f2976018e2cd2be3b6e473745a78dca47cbdd44f604a1cf9bd4827ee7ad003adb3c68026e718cd86cbea86fdac1f03e1b355234adb37fe0a8de824c5faa2bbcdb4a0d198be28273c7b4b61c3bb203ded3d431d75b107a4ab78fd4889f08e3b5d39dd2e002ecc1a616516a5bd26ca7a68377ae6b170bbd9c059864476714a61b8aaea6fafcbfaaa2053a9ab26c8b9a0de59f4ab43d26ced00d7f44a79db81a0da59d6d35e9d9abe7eb51636a6e46a9a5e28164330aa598a247e8959f45d069c443509ce2eb79b6d22676a71ef4eb434cdf4501a15c93aec48747c9be2392df1cbfc8c8ad7b07d3f999038aa7dc770ad3359956a57f2138b5b774863ee6c7ec6133057ee86a989c05e37949dad64f1b1c78415cf190ac5591d43022fa23990dc3e3dad7258b8b3f40cb31b2a8fda36246aec8022770d471d270152d65d16710e3a94c61aa9be79c9d76f3c7c4c3f3dbfa1263320deb2312ef0ea4ea3b725bf4d83db0c3ea44f57b58f4cbc99958cb723f3b9f47d3bff76ecfd3f581015d1fa3fc5e63fbfc703bdeabf04882add9758d9219d9a38fe5b116e98cf83bb6a50d04cf862c3b3a76641409b42d32cc4fc156fd30502a6dfa6ae852ef95d26f601572d188eaa51405810984ec06f2bd6d87df812242b7417decf8ef964f68a28aae0b79e38e50005a7f0d7b240a096c7c1ae8a52333784c0df877abe6eb6249b71d68ac11c0bbbd08cb06d2303338dfe488a3249a0318896e1b35c18a40af231ca7a1a5fa0dda466af7a09215b82febbfd66d8b0c601c5a010c72402c9147dac5517ad3934ca4e0bc86f80bf71a79c61276bf744d54938cd8cfdb905d93a788eb38a75b238964c139bde24d5e55db2fe3ff253ba31bf5b9efe6c4172c764ab04659054e7ba3a1b6444bd0db8e7b655cc34e5dbe31b098a8aff01b878a7295e158043168dc27f32e726725dd9e43147669a9ecd8a4b703974af1aecb9888b6d1d53276299a02302c59bb10fea459f1a5db08bbf5493755bd20c31d0e1d504e5ad214a36a30c93cb301288ffe2a3001d42d25bbf0182d428e2628501afa69b1a62496278e4390686226b8e063fd4a55d08f60c24b2d76f4c662a06e4ebac5d37eaf4e4de67436e5040224ed5c38315fa30f5ff381eafbaf36d918bb27dade76527d9ff32d53d40d9862d5060b44b6392351d025af6de9f22402f43baf807e58608efed8f279cb3cfd2575d5bf09a66e7dd80754209c807bf56d8f4eb67e8150ffc8f0c209157a4080452f279048df1e4753a99fb3177ecb118ab61e40f0bce136c3d331060b935b33904b8e927b513759d534fe44cb0f35de5285573382887e87d15d822a8967a2488cc549a29761210f9d4871b2c8e2d5ef24c88be4f4265b4ec47f0419594434c6f8ff6f0e569ffe27cf5fa6bc44d359226517111cf665e7a6e232f4411d5367b9f23b3204482c3501687a9458de6dfd63cc0f0bcff8cfb9b5e602324b35d38bf9486c245a55ad8341068fcf6f292c7863f1fb1484aca0d3ea511ad9d70f3bfb09b6e793df31e44af36d66451660cc211b90da81ecf6a700f041ba7c376f28a6faef08c66ce3b95e3de9322372f59255aa185b375fffb8c98a247aac4f2d77c6e5ed0d22646fad6c10d6367ccf6a32d5428db770542190bae499cd7c3200bb5f879883c1165b6a83f4ac82477e5a9e2034036bdceb2522da22917c8f22ce30d06e9b34d2b5895eb76187f79825457e21922f51dd7619e1116868a296ed556a991a3bf4a31a5f59821e9c213d36caf2ede3b71487f981ec81572c01c883e33702cb8a8af5af5f0bdc5150cf0b99f921eab2aaa107ca8dfffe0b33dfa42e5b0e9a561fdc0eb029e97495bea1f87b838b90abbc657b42aaa3075655a9f9003866e07a8c80fa3eb4ad75010f0d0bf10552c9223206028e48e38b6f8a95f488a7c92e48d3713d7e374b788f510405aaad63ef099a5e578131b7370d8b361998a9db9658cf06b870905f5bd8ea18fb974addaea0fea834fd42e600eaafc963cfa478ca371793c2b40b5bb30cb4be7de91cf2e0617cd4334294b3cb12f38575c14a979b46a9d82ae59194a0b32ae69c2ca349263efeeaeb5037d95d80524a01aea085ff66c156e12556382965110756ad6b217b24d0593494d7418f46f1cd2848ca25267d2f45a6024ab845568b2a46949218165450e1be7738de92aeaed2f994009b6a7778f4439e2baf0e9b53a5916d1130febe1fabc002d684383914c2bb51c0b75289ab2c74d2e1a9cbd6b6fc653ed4918945919e9df0a49c545734044e29456c0bbb5d640b4bba7ee4f3ea1eedd3f6a42cfa57df40364ef0015e9183503b7e395d3776bfb8ac2eb4f83e9d5ba543c4213f8754e48a6411644aadf3c3f00bd246e66487928866e18cd96d51f5e0c49cc5935b119880b85c0b4cf5c631f5ed12c3eccf6a434016fbf2f0b44416f86b539f41b3a2e1372a9d5b1ec52dd735caa4692f134c204e5afea4e933b7ce196ce075c78d1d31ab03b5101cc2338e3a5769caa813a792708ffe5a353cc9384c83e6ea5929e90b31cc2525dbd6d21b4d14c46387b288239747d5ef4019a647f73e12222e9ac8556a5d803d18773eea92e7d7ab4b39b2c2c5205b59a2d55b52f98544ae9b0a9d3225f5be6200f7d87e7f4975d65d13d0874efcfb80eda4263f9d484b301fb65c642e994ab98917d38e4c48e290fb4cd6658f6920c386bf0089ffd3c70ee51a9df1016350350b4de7975bdea9a49bcc084e223f12866659bafeb5f55d9b68186a8920d1496cfb6302467d878dca0e67cc4f16b704d59a9df9ccdca35102cd872dc1c471ce33007cea5daea146eaf811ba5a52c88af93309de296e80a752092dbb811d9141fe8e99fd1b9ebde4aaacde20e0e6b65e691cd181b1775749492c25e7dad40443c96c28c23ef9971a8230030214f1c360c5d805bd6f48f05eeaa2869c7374cf2133709264a7f597c31188eff1a97bc095a9a3297e9498fe0853cf1b93e7569c61eb9f93a2839bc3ab6a2bcb50443470ae03b88c221e1212628b2badf58efe86db8e2e9c761fd49ee4b5a798aaa0035a485954ddbc65fc5e79e04e1af7976866ee59fc9b82bbdbbf8b1a98904612c3e20c1c0cc14a4dd5306f32ea2d6aa63fc6dc66de9b5d0927fb626857c57d76d5db4f2d60e681f019742cbac566460c8565a805342c204a075addae3a4446e66ef326c6719ed790a073c286724cf544bf632dd4a726ccce3440c68eb691c043e7fe1d1b6ce08fdedf3a837705be77a19843c1aa5fe302779e8a1b3619966828f1d0f7347db13fbaa94d375c36d2e53a3f8e1e7f8b05dcf239ec5a8dfdefa6ebce72730b6728607d13d50d8b9ea6219cac30d1b26cd6b7b9eb01c8b16776ae037755f7972868ccef0682ad049315d781105a9589da8ba86f33d775ea3db3d18dd5d4761ba8d4e36e5de7c0124f70ed14fe839860d093c74f4cd409c41a01dcbcb7c3bf902e57ed7b411f6d272436c26c0881450d13e53fc9974b06cd45bab4b8a23a47c90b04dbfb52722c811fb42aac0f1f95d9453375ce38fb0428069cccd676a6282fc534b6201ecf69c2c9d8354849bf2932145835336e4a175e527b9b1884d2ea932d622582c391dc2ea7211be114316b197e6f260d666c0492ded20d8e599d185c4859afdf1bef8ce8be47582c9abf03f8b1680fed5bf0382f6ef02d3702c9885288692e4b72e13e64bbb970c47d107002a46543ff3bf880ba6abf8608520b9aee83ee872f10354bf5d64e508208bb1e64bfeaa7c6862104de089529c84471206d8f97faf16092c11870da27455cf708e7ad0c7cd90621f84902401a69d5942d3b8a4f27604d5527d8e0aee9335919af5f24d0db883eec8a99f3747af7dcb685fe9a360452dcf9d7317b3b48b33f7ec875668124af9a3628d419c9552d065879e9b70298712db1dc5342fe33343d64ff25ca47f092dfaae901520feaf92b56db36f35ea50b64de7d028bbc21dadf6038c82f8b6b4c7e25fa33f42497f0bc645ecbff005f40819327caf825de93f302a34c8968a3b739f89ec72c042dc720c086749689f8b0611e77aa7c6335ed9b309e2f785538638b396ff5f57bfd58c29a2bdde233432239bf6f8578e1611e4b14b5f9d1866626ba2b6c658b3e76415200f09c15fea45014be7e3ab0edd0685763f0ab736c8934ddba20bf0717c6f6b7cf026f0f0e8990af13ac97ef24ddc69aa7469a114208136216078e4f8eb2618850b0d7c7f1c0e20becf11daecbf68b5171405f8942a6382952e415e54cc81e88b69970494af082965b48774407de53b19eb94a7d7f51e5453776f7551fbbebf8fcf52d7cb8c332b24dd10d38147cf27a7064ef1b33283d566babc3bc4075c415262a43cd0a87bdbfaaa719e81fd0a710513ea4fe74cf983c86bb2e66c5fc55391c3168814088c186a2ba679f624d768649f39acdccbd67fa797cc925177bbabf85c4cc919ed8fbf467681616115d11892eb4aa4c0940aa8f3e524e57866fbabc6471fd528165811547142aace46b100156f8a10524ecff414cedec2bde24d232dfb57915a2b7fc151c1edb7878db430628d1a7d5520dc5882fcd1657752c2fd23495ca8999721849ad0bdedd9f10ba1ca7b470c16eb747030fcaf9b3d8933bfd71dfd0f6843306caeb6a55ef0d912415919d477dc623f7a38fa44ab85e70b3e8dfd94499a4df9e3b6d1056a53e531404a85b19fe5841021f3ce6c582b30c58a9006efe251f8504372d9d26fe04f3b542de9b91c5f1b921f4e77ec1e23d4dd7ff8a3bf5a697e6fd4a18d9fd2c99f939ba3941fcb072d2686b6fa40d77895b78cd617fe6f973d72146787b078647f25b1af74ef358fdeb5621ef9b5c3bae021976e8f9b4abac49c23db6084a74361962bc5fb1fb66f5389f7ab30e412fd9ab8cd187cb8f2afed54d1eb8f66a5061cbbf02d00f2ecf4d0542358511145775d09ede3105b3db18744685f7b546f8b8947844872e6750efbf2c44b512971d54e163bb0c44ca6e65bfcb05824a7be78341eb9eed1d523c80b811c1eaaa716cb60348f31701ad550756d20b5027936f95250a5b2e7aeb86a1b841b443fc5fe4579fdb65b57f230abf3a4cee105a9590793e5dc9e95ff841cb57af561b438372c6237c6bdb4fe5dbb673507c3c5fc3c9c191ff76b9d4b874f77d2c34c0102f1de884f236af66beb473a484b53d7ddc22f37cd6e831509b1a22b02e8cf13b3747fc0c0781453b1bfddfbbaa00c908837c0b55126bb48cf8287a448548f8e56e0f708c537feec8323befb7be42351aada37c5032d6c521985ce765d0c69a811c81cc1b8a45c79da1cca749faaa9d9b2725b4875acc92db52bc1cc30485d7460dcc677350ddb68580e9b671d57458dfbe7b8865e2b9b4ae49ef5b650118f36f76590c5674cb536732f5f47cce2de0c623ea48fa0a71c5bed6ff63ccde01d9677e089bc5f73ff1f80385f9ba02efc021dafef412bc831a254092c2063e5cb90a0d6d24b43bcfa8b9567c75d1219ac171329004eb380d0922ccacfead17df21871821397579de50fd6d5d5496b99a4416b66d70fc899a92c96416f576c3c09c0300902e4b25d6572f76ba9f26e75c29183a3c3bb14ee61dd6000db701af927f8aebc1c9e3559ca7aa33900f788f9e22f6120809aa478cc0ea78a40d58232ee6429237fff41d9355ab1b0b3308ab4841a108647427368293baf59eb7fe6be945fad7d527cefe43c54686ff06de00ba8d22ba44e6ca30af8eb1ec762255eb8882990e982715376a8443d847c4a883b90f5dbfd725cc5944da81367ffa37b2533ef41e99bae6d83c777899ef74aa52d6b71f5f379d140a7f6d5949f34526ffb701573e2fe058cdc9c7e593a6528e0cc0a635f291af0f5229ecfbf6d63586930c4533dde9944ddf500eb678d302d1b96707b4f6ae4644d0a8583c840f16954bfc96a3fa0d0d4c623e19b5d423504264d41a329379ce8c150e364f7041124f7d039fac8b015fb81d2a3503b1b780077eecf24253ac53c8590e71601f2b0d3bac4fae5114fa8cfce0f6f37e9eec49920e60abc36485b3d6dd4fe4f1c53dbc62959d8378e904707ca97cbdaeb7d45a62ff34f2c977e22b3a3ab3cfbd6f01448b27f9a0fc322bd039491e77c1eddc2de09820a3303d8be959ebfc8c1d9fc0ad946f1d3b2bdf8cf3b01120e27c4edec9f4e150ef661ad32115b26b18c935b5b2782f291dc4ecc6abeef1c005ee4200641a9a5797c0d3c794c311817711d4ee0c53a6002f1c8ffee823daa6911ff0ea5303b473d2691d25e39fbea40ee5b6dba0e1d292cf86bd92733e84c1a05cc27dca18850b1d71a2ef20c9cf7d645a48962a8e9e1edf28a0b72d0a5bbdc88ccce61333ea3f74d23d8fec97c6264d01afb06498e79f740b648d21cda7aa0cdebe73c1c7d5f16664bf84f7169672c0579594620d52ab63ab5392d1d8ac347e5aab6564a4bebfb5beb425b5be62c652bebb6ed60af57ebfde8a40c680d7e25d034d7e79d32949efb2043bd518c60a08f065fa34500f7e6336683c7f07ed41a8a729d3c959dcb0bf439053b32932a5dad71a05dc34de274bc63c42a11f5878b29fc83b94b233bd4cd709d291db9d8072f164645650a31df1a659fadccc2d96c550589997900cb55deff4b4cb4268b528c79feb210657f367f102d80cbcdb351ca8d42a85f2b88ab22ebd5aa77ebdf21bea4f07a3c9d086635ca08248ee929762f8019a24374f4453d1ba4fc7803448b9be62016ca640307252bcd2dccbe7d5dcc6d5b1811e00ee546ab9abd2f275ffe690eed5090dc36c946172ccd05955b028947be5d7c7e16dddf725221ee6e7e383ef9cbdb5e2a75e6c40bf14ded2e997c904753c7555f6e7c1138ade08208f48437c2e5bb92623d79b03ac9137b50eb989a7ddaf8c43b1ba42c7bb1b125c56d1326de5e5365ef66029a94700cf5da5f05492ac7567db69d0f1c2a9677cdcd3283621a00dc6bbabd3b97e03d90cdbf915415fcd9245ee71474e2e314253c7c9b9b36510062d06ad48e13d7ce764dc624a3176a668df0356475981c424edbf28f3ff525e86a2b51cd54f9ef56848993fc2e05deab4223d2167473623354559700aa837e70dedca377e61e2d0a373a227c568a9a9b6052119139990789f719a6ff6ba93a1759354b0cf7411fd2de957b4165ca80db8ed8e19e1dd36519296a0d7b90b702aa67475e6c0967eaf532d7aa4af6f50d5aff19f211c31a9d0abaca4f9379978b5dad45df46af325a1acabafca9b2701f0ef228f17893b5a88a3a7ce27cf111e3c3fbcdfee1566965a8cf4bf90d42cded34989f51dac1edecffdbf3223f8ae0f01827f5c5928ae7c0270e754be302b84a01ae0f0049b85bdb9d8f1d3e50106a65a02e3546dd47db66bb14a40097161dc39d95f0ab76d8b7191301096823d214c7c829dbe2ba20d95c465444637da92c78ef239d67268ac58718743e619b1b444c24004c65b120da131000173f0355a01d07e9dfa80956e55979be5db574f8d0795cbbc5c1480049c68845c4cd08c9f8ebd27684bde62fe326ca5aca749cf00abb0b182bd157c3d7db9998029383ab10c0a4fddc3ba399250cd76d361c35d6dd251425532d0946fed7bad77947ad6fd6e2a36f8d54b48d5acd0749f20afb12c16d6f9fde6fbacebad2759fdfd7f4f638d0413079d4dcc0c8bb97872dba314c4c89b882b31538aeddef3aecfa8c9ecfd244c77d776441b3c395a0b90769d01ad59df5a4103c79f9f324ef18e008c6ea9e356e745940faf9c39d27e0da0123bdf46c26f38556be117d271618db686d6d0cdc1e45d068e1c65b7fc4142176e6efc33d555ade5a92be6b0317d623dfc5a1182d7072e760ea9413fe484c7ca2ca39b6a07fd854b4261d2ea3dfb78482588c5337075ce13a36e02c8c15643843fcfdffd1560dc84202d01f49bb53eeb69292ceb5fd2efa3255db360b2fef3f033e071981af81a15421b1c62f34018fb272b07168956636e456a24e78ced48e78a34699fe4bd8ba9a4bf5ad3dab9cb53370c5a3acfc48816c7d8e23c40befad4b78ac08d347889ed5ee34abcdee6f3178a12659a788d284d4e8433bd8a9f53c9e06365b2ff21d4cce03740dde605bb5b12c5039d4902e9588d03fa27d5f6c0b5cf9e8ce52312c633a97646f6c6c63e9e753f19b3904c64560189c0e7cf3193b0af35e6d1504141b72f3d986827e49501489af29c4db545b2812fe8a0882350473f03016b85ba5c9b4b8b5fadf02ec5d13c8e80d44466083db9cdd3631a4d92fa8647d542b60d33fab6b104c72e059c7b5ed2976def4e364eedcd85727bdf9c579c1e6eef2b64994ab633fee460b371e3268de14117b8f39aaab171b3fed91c704ab4329ce145b378ef49068c6ce939187329c326c64d08690ca3f1c7788660142237b70aeb51819d9304559cd5c1e7320e6997cbdd113b4327f1331833b247b674f8e5b6dccdbff8e1be71af6a0133cd9fddd290e9f8f61f15b6e4115185266b0c3edbd99746e8e50478b12181d2f43f05332c90f92ab013ffb601ff6f38a1e1b33908b53cbb7eb8e0ef68b3959fda5d9dac59324828b785d26b77f373b85b3303f5f3d2f78eb90c52206137921624ddb5e8e65752ca4e6b4be7c5312bfeced80d1bd442437dbc731fd1a044c4a70419d0561596261414c2161b690108701d0be95a056cc29d34e079d47db7efdd1c98b1ada045f75adba7f4f872e369287e9e87c1f8e93f9d0335fc7c9baeaf762141f910e8a311b05956e6f211c8e2b06d79e75226d887a2d129970d978c7cb671ca3e4f2317dddaf5a7fa4664089bc9b21a127f02b1c3f7277e5f435427594cad6fe17c0f6e0d403c056205a6fe9cb2e8bd01087cb74e74a19bdf6f89beca1dd85e776778aa9d1f5dafbde7b4f2df7ba6abcac6c1600982180ff64a73e0e5624f2cf418d380436409cc3d14acf252e868bac0035f59541cf498bd13495df92f136ef806933dd4e0e746104c48372e53ccf47b42ce096919fef8e191de8bf86a9c431826cf658ea8d3befddfb870755758b34fb62765d867cb4300af8390e59e7165a5dbf75222074fb510627405db40245b9cb31925ff53f6263353a563112ff9bb2d08953d5047dabd03cfdfb6fc4270a789ce529eb045aa0f08eab940cd7f2bcc4b7fc01627bdf1bff61d7f136b180d0ee8ac3e4e7c7625abdaf92bc4bc0cacd9a8f4c1196ab792d12fd1f7520075bcf8231419f1b4c0b82b4e699112e8d5cb5ce7c52f420456dead3fd13701442b32fb962f7164fc1fbcf0b313838ab3c7adb51461919e7244c53f002a62a6932d18c424d9cfb04d035dea8bafc317f385b50897939348514b3c094ea1249be3209b20acd4e02a84bdc5ebbfc16ec9092293d227a7d3c7341a2cfeafe3904dc49a4b507c20dc0b210c60b4ad65924e104fb5f55fa9e9708d8fec9eae77a2f74941d1745b99aeeee1db14a2d6729a071c001dda44820a6bf04ebf420ef885d161df0706d7014bd9ba0dbaf98ea414a45e015c41fe9e6578b2c507c12a71ebc2b0eb8b152650eb82b45b9e6b9373d56ff088b1bfbc89f235a9581e19a34cdc94ed3bab349aa1de00b76eec8e4dcb80a7c822b7b6080bb72aa10e179f1e603174c3554fb2af0e9db6e5d68075bad65eb3b7b6f6704ab9474e3ff1c6b737181b1e5365e2bf351613559599c325835452bbf3419cf9413448dcf08a08c0ef31ae5fc9dc43b710144ae1bcf2e61b79d760efb8bb7e1387257f7e4ae16d83d374b34d44b0ce5d98e808dc4a4c29234822c476af14c63f6950a0206f2ad99dc85a57e536790a75f8be023d8d8227aab2f8d59c265dafca7befd682cfc82224ee1ea9c85ae8f5991d128c7484ef46a1d4ec847e3bfe231f2da667d9818eccb7d947158afbb6b4abf826033de07e080771ae02d160225130f11ea30e8a0311afce0879b0af15e34d72d5aff289a07e516d48afedc3e7f6d83d30de2e48912bf05d2d817cea39c940845baa686f4c1d1f89d8a0fff4ef219a326f24c574d79576933ae9caccc5c4df1d8908c4c5649ca1b062ddd72b003e8ab4f6307e0c276af2f67ba75230b03ac00d5a25fd9ca9b6562a8143963595382b7c40564e389aa026edb0d9a51bebb71443f9897c9d06d2219657fe6714f265e2bf2a877a21108c2a4eabc958a3c7d8eb193801ee23cd14644c8b714b6bec81a1098b075388c98b764cd793b8bcc27e5c9f5b195b4095b4e2e65ce8b3ebeebb1d41f0dac18eb1edf68565394818864ea0400ab188e6e142791d6c9526dab1ac1454e19691cccd1db77e13a54c123296acc99f0d84e99ea5e721681096b1cdf027d07d409f4048e28d4af31911cdcbedcdda8809993c038bba9471d1e07e467ac8dee9d45d2d770e4891759a50eb7f0448ea1ef1d921124229ea68a9da527e85806910bfb11ce47e40ee8df7ca12d735d92c92f7e7ecf9b6b7bd76236f75e76642cbc484c60bb348d4b75bf606eb8448e7391af63c24b8105bfd4b64915b125b01cd8b48c86d64be0a39b27552cdf6b29bf9d37f1d13e435107fa066bc9a40c0191f6115f2792b8d0395faeb3b27aea492b5536dc3456fe5054dacc64b743ad505811fd9643dad1888569aaa2d63b94b530649cc240db8d536194adbe95cdec6b8f1e12a21b2c07f0ad47451cc9fe426a4d3561f2413f477cfaf54afcba9c1fd129ba022dc4d0cc39406cb316a7ea6660d3a5cf1", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x1a8, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x10, 0x0, '.\',x\x8e\xe6!\xb5\x01\x00\xa0\xb4\x19\xa8\x02\x1c'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x54, 0x0, '{d\a\x84\xa10\xfb\xf0\xb4\xbf\x7f\xfdc\x16}\x8d{m\x8b;\x93\xb3~KA(aeYP\xf5\x9b\xd0\x9f\xf3\x92<>\x05(\xc1E0/\xd7\xf5\xbeg0\x1e\xb4p\xd5;\xa1\xdf\x9a\x8a\xd7$\x904^(\'b!\x11\xe1j\x92\xddN\xf4\a\xb0\xe2d\xad\x00\xe9\xc6\xd3\xcc'}}]}, 0x0, 0x0}) 2.359478005s ago: executing program 0 (id=1740): syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x411}}}, 0x7) 2.076536128s ago: executing program 1 (id=1741): io_pgetevents(0x0, 0x57d, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={[0x10000]}, 0x8}) 1.996963117s ago: executing program 0 (id=1742): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000103a00fe800000000000000006000000000002ff0200000000000000000000000000018600907800"/70], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x80, 0x1, 0xe5}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="94000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xe0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xa0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe0}}, 0x840) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) 1.862979197s ago: executing program 2 (id=1743): write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x3, 0x67, 0x5001, 0x8, 0x0, 0x0, 0x1}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0xc018480d, &(0x7f0000000000)={0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000039000701000000000000000001000000040000000c15bd88cfd0010fa7dd000009000200005272fb64000000"], 0x30}}, 0x0) 1.748413015s ago: executing program 1 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.534990944s ago: executing program 1 (id=1745): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x110) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 281.385661ms ago: executing program 0 (id=1746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000000000fe791071000000000007000000000000009508000000000000bc7b84b3038f6ddf978aa1661f6857f0daccaaf78deabc7e0f62340397d09e3fb207df17c4500bc22b529e7350f719133ea1544a459c717758496f3c06a8d598f51a017a721bdbdf96d2ae40c976"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000c40)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000000000bf090000000000000000000000000000330000008000009604000000000000370a000000000000070000000000000000"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x38}}, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0xb, 0x0) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6}, &(0x7f0000000480)=""/231, 0xe7, &(0x7f00000000c0)={&(0x7f0000000040)={'crc32c-generic\x00'}}) sendto$inet6(r4, 0x0, 0x0, 0x20004016, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') 35.665129ms ago: executing program 4 (id=1747): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="78a367bd88eb9c7ed48495fc053ac615ff05f8479f142af391181a8b71f5a34a40c6fbf82fc257286f3d0b00b4130c11fdf6164017ebb15987dd0a87a1f48ead3da61d0187e2a314f402acdbe54e520a2ad28992c026c3dea55526f39dc27c67cafa1e4aedb8568c523d1fda22a092688791e96fe9", 0x75}], 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 1 (id=1748): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)}, {&(0x7f0000001a00)="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", 0xf33}], 0x2}, 0x8c0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001e00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440), 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000e00)=""/4083, 0xff9) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): returned -16 [ 571.430037][ T5241] Bluetooth: hci1: command tx timeout [ 571.715687][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 571.813729][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 572.456683][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 572.456704][ T29] audit: type=1326 audit(1728516813.287:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13147 comm="syz.1.1527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b8277dff9 code=0x0 [ 572.823288][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 572.832664][T13139] netlink: 'syz.0.1523': attribute type 18 has an invalid length. [ 572.850786][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.863741][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.895996][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.908728][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.930991][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.993773][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.191513][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 573.226777][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 573.322472][T13056] hsr_slave_0: entered promiscuous mode [ 573.386076][T13056] hsr_slave_1: entered promiscuous mode [ 573.417150][T13056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.426731][T13056] Cannot create hsr debugfs directory [ 573.509985][ T5241] Bluetooth: hci1: command tx timeout [ 573.571146][T13171] bond_slave_0: entered promiscuous mode [ 573.577317][T13171] bond_slave_1: entered promiscuous mode [ 573.584604][T13171] batadv0: entered promiscuous mode [ 573.632379][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 573.636505][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.665033][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.715942][T13172] batman_adv: batadv1: Adding interface: netdevsim0 [ 573.730344][T13172] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.820366][T13172] batman_adv: batadv1: Interface activated: netdevsim0 [ 574.005950][T13170] bond_slave_0: left promiscuous mode [ 574.012338][T13170] bond_slave_1: left promiscuous mode [ 574.018080][T13170] batadv0: left promiscuous mode [ 574.423914][T13190] fuse: Unknown parameter 'use00000000000000000000' [ 575.385106][ T2991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.485247][T13056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.551745][ T2991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.660531][T13056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.692492][T13056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.716461][T13056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.825374][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.836761][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.845719][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.854686][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.864576][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 575.873475][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.990018][ T2991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.080974][ T2991] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 576.090059][ T5234] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 576.134775][ T2991] batman_adv: batadv1: Removing interface: netdevsim0 [ 576.154685][ T2991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.250479][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 576.270867][ T5234] usb 2-1: config 0 has no interfaces? [ 576.285214][ T5234] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 576.298369][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.317837][ T5234] usb 2-1: config 0 descriptor?? [ 576.547401][ T5234] usb 2-1: USB disconnect, device number 38 [ 576.767859][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.809379][ T2991] bridge_slave_1: left allmulticast mode [ 576.819179][ T2991] bridge_slave_1: left promiscuous mode [ 576.827651][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.838377][ T2991] bridge_slave_0: left allmulticast mode [ 576.845353][ T2991] bridge_slave_0: left promiscuous mode [ 576.855858][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.889235][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.910502][ T5241] Bluetooth: hci3: command tx timeout [ 577.919062][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.938195][ T2991] bond0 (unregistering): Released all slaves [ 577.954081][ T2991] bond1 (unregistering): (slave team_slave_1): Releasing active interface [ 577.966466][ T2991] bond1 (unregistering): Released all slaves [ 577.982566][T13230] chnl_net:caif_netlink_parms(): no params data found [ 578.383940][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.636668][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.643902][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.809877][ T2991] hsr_slave_0: left promiscuous mode [ 578.824401][ T2991] hsr_slave_1: left promiscuous mode [ 578.835727][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.847809][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.862181][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.879958][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.918312][ T2991] veth0_macvtap: left promiscuous mode [ 578.950962][ T2991] veth1_vlan: left promiscuous mode [ 578.956334][ T2991] veth0_vlan: left promiscuous mode [ 578.979520][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.997129][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.006305][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.020729][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 579.031235][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 579.040505][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 579.854509][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 579.996853][ T5241] Bluetooth: hci3: command tx timeout [ 580.463614][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.473374][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.485254][T13230] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.495531][T13230] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.504302][T13230] bridge_slave_0: entered allmulticast mode [ 580.515811][T13230] bridge_slave_0: entered promiscuous mode [ 580.577260][T13230] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.586440][T13230] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.596205][T13230] bridge_slave_1: entered allmulticast mode [ 580.606723][T13230] bridge_slave_1: entered promiscuous mode [ 580.674041][T13230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.709544][T13230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.826732][T13230] team0: Port device team_slave_0 added [ 580.911210][T13230] team0: Port device team_slave_1 added [ 580.951916][T13056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.110418][ T5241] Bluetooth: hci4: command tx timeout [ 581.130769][T13230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.172286][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.239837][T13230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.300715][T13230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.307736][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.347137][T13230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.430327][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.449182][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.463032][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.473518][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.492114][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 581.503732][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.523695][T13230] hsr_slave_0: entered promiscuous mode [ 581.559093][T13230] hsr_slave_1: entered promiscuous mode [ 581.566925][T13230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.589830][T13230] Cannot create hsr debugfs directory [ 581.683882][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.737589][ T2991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.852074][ T2991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.866810][T13303] chnl_net:caif_netlink_parms(): no params data found [ 581.956378][ T2991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.088675][ T5241] Bluetooth: hci3: command tx timeout [ 582.114021][ T2991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.444204][T13056] veth0_vlan: entered promiscuous mode [ 582.478078][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.500318][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.517589][T13303] bridge_slave_0: entered allmulticast mode [ 582.536236][T13303] bridge_slave_0: entered promiscuous mode [ 582.560976][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.573606][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.590059][T13303] bridge_slave_1: entered allmulticast mode [ 582.610245][T13303] bridge_slave_1: entered promiscuous mode [ 582.881046][T13056] veth1_vlan: entered promiscuous mode [ 582.955078][T13321] chnl_net:caif_netlink_parms(): no params data found [ 583.074081][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.088019][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.190579][ T5241] Bluetooth: hci4: command tx timeout [ 583.312906][T13303] team0: Port device team_slave_0 added [ 583.353258][T13056] veth0_macvtap: entered promiscuous mode [ 583.512393][ T2991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.552424][T13303] team0: Port device team_slave_1 added [ 583.578745][T13056] veth1_macvtap: entered promiscuous mode [ 583.590162][ T5241] Bluetooth: hci2: command tx timeout [ 583.717413][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.751028][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.789157][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.838818][ T2991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.915994][T13321] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.928328][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.936643][T13321] bridge_slave_0: entered allmulticast mode [ 583.944891][T13321] bridge_slave_0: entered promiscuous mode [ 583.956154][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.964392][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.994363][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.037287][ T2991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.094021][T13321] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.101650][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.108894][T13321] bridge_slave_1: entered allmulticast mode [ 584.153134][T13321] bridge_slave_1: entered promiscuous mode [ 584.160187][ T5241] Bluetooth: hci3: command tx timeout [ 584.373378][ T2991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.432875][T13303] hsr_slave_0: entered promiscuous mode [ 584.446215][T13303] hsr_slave_1: entered promiscuous mode [ 584.461549][T13303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.490127][T13303] Cannot create hsr debugfs directory [ 584.585940][T13321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.611768][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.639227][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.673845][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.694692][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.716673][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.727564][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.746594][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.758147][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.770560][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.780809][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.800882][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.817785][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.828680][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.840601][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.856422][T13321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.866533][T13230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.879618][T13230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.933850][T13230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.957435][T13056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.967769][T13056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.977151][T13056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.986654][T13056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.020490][T13230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.062627][T13321] team0: Port device team_slave_0 added [ 585.123812][T13321] team0: Port device team_slave_1 added [ 585.220883][ T2991] bridge_slave_1: left allmulticast mode [ 585.226806][ T2991] bridge_slave_1: left promiscuous mode [ 585.259815][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.274443][ T5241] Bluetooth: hci4: command tx timeout [ 585.288967][ T2991] bridge_slave_0: left allmulticast mode [ 585.309997][ T2991] bridge_slave_0: left promiscuous mode [ 585.318273][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.342389][ T2991] bridge_slave_1: left allmulticast mode [ 585.348110][ T2991] bridge_slave_1: left promiscuous mode [ 585.359883][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.368954][ T2991] bridge_slave_0: left allmulticast mode [ 585.376217][ T2991] bridge_slave_0: left promiscuous mode [ 585.383337][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.675020][ T5241] Bluetooth: hci2: command tx timeout [ 586.226761][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.239652][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.251254][ T2991] bond0 (unregistering): Released all slaves [ 586.419108][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.432779][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.444637][ T2991] bond0 (unregistering): Released all slaves [ 586.547447][T13321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.577358][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.609051][T13321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.624840][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.649828][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.685255][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.943939][T13321] hsr_slave_0: entered promiscuous mode [ 586.951116][T13321] hsr_slave_1: entered promiscuous mode [ 586.957549][T13321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.978501][T13321] Cannot create hsr debugfs directory [ 587.050518][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.074919][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.349964][ T5241] Bluetooth: hci4: command tx timeout [ 587.376696][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.440667][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.642549][T13230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.717847][ T2991] hsr_slave_0: left promiscuous mode [ 587.742492][ T2991] hsr_slave_1: left promiscuous mode [ 587.748771][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.760388][ T5241] Bluetooth: hci2: command tx timeout [ 587.760496][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.790832][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.811540][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.836552][ T2991] hsr_slave_0: left promiscuous mode [ 587.844052][ T2991] hsr_slave_1: left promiscuous mode [ 587.850616][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.860598][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.868437][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.877037][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.942682][ T2991] veth1_macvtap: left promiscuous mode [ 587.948236][ T2991] veth0_macvtap: left promiscuous mode [ 587.955168][ T2991] veth1_vlan: left promiscuous mode [ 587.961196][ T2991] veth0_vlan: left promiscuous mode [ 587.977765][ T2991] veth1_macvtap: left promiscuous mode [ 587.987421][ T2991] veth0_macvtap: left promiscuous mode [ 587.993657][ T2991] veth1_vlan: left promiscuous mode [ 587.999340][ T2991] veth0_vlan: left promiscuous mode [ 589.489019][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 589.611415][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 589.848738][ T5241] Bluetooth: hci2: command tx timeout [ 591.467699][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 591.532320][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 592.219628][T13230] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.301404][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.310770][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.424889][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.432130][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.697072][T13230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.708201][T13230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.976411][T13303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 593.027669][T13303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 593.079047][T13303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 593.118341][T13303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 593.166599][T13230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.458839][T13230] veth0_vlan: entered promiscuous mode [ 593.583253][T13230] veth1_vlan: entered promiscuous mode [ 593.702690][T13303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.712420][T13230] veth0_macvtap: entered promiscuous mode [ 593.734154][T13230] veth1_macvtap: entered promiscuous mode [ 593.780276][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.815231][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.822557][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.842372][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.849749][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.905702][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.933682][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.945671][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.963133][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.980201][T13230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.028778][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.042560][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.053979][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.065412][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.082683][T13230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.101158][T13230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.111363][T13230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.121089][T13230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.132743][T13230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.154535][T13303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.197526][T13321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.212497][T13321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.238035][T13321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 594.258701][T13321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 594.375722][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.399986][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.439303][T13303] veth0_vlan: entered promiscuous mode [ 594.465876][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.475785][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.492283][T13303] veth1_vlan: entered promiscuous mode [ 594.567570][T13303] veth0_macvtap: entered promiscuous mode [ 594.589607][T13321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.611188][T13303] veth1_macvtap: entered promiscuous mode [ 594.636635][T13321] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.661672][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.674163][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.688207][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.711382][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.739825][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.755981][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.775160][T13303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.821292][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.829133][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.859183][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.877356][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.888365][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.901082][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.913717][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.924940][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.936794][T13303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.948946][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.956195][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.007539][T13303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.017628][T13303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.034635][T13303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.045522][T13303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.271206][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.285929][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.346154][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.376164][T13321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.389198][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.504554][T13321] veth0_vlan: entered promiscuous mode [ 595.557765][T13321] veth1_vlan: entered promiscuous mode [ 595.636307][ T29] audit: type=1326 audit(1728516836.467:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13467 comm="syz.3.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12ad57dff9 code=0x0 [ 595.675253][T13321] veth0_macvtap: entered promiscuous mode [ 595.704946][T13321] veth1_macvtap: entered promiscuous mode [ 595.763187][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.807036][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.847437][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.890248][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.919004][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.953442][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.979470][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.031969][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.061639][T13321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.308732][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.321714][T13488] binder: 13487:13488 ioctl c0306201 20000940 returned -14 [ 596.355681][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.382203][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.426205][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.458502][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.505516][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.558746][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.589766][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.611874][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1576'. [ 596.625765][T13321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.687221][T13321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.726358][T13321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.746551][T13321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.766788][T13321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.984507][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.205075][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.241878][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.260914][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.272794][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.290560][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.301746][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 597.314415][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.425915][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.691561][T13517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.704398][T13517] autofs4:pid:13517:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 597.808111][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.157296][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.178761][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.202305][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.224694][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.235711][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.257957][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.270677][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 598.279163][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.375111][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.392161][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.408910][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.424160][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.435674][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 598.450434][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.452505][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.518508][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.578286][ T80] bridge_slave_1: left allmulticast mode [ 598.601907][ T80] bridge_slave_1: left promiscuous mode [ 598.618872][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.642490][ T80] bridge_slave_0: left allmulticast mode [ 598.648193][ T80] bridge_slave_0: left promiscuous mode [ 598.658007][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.720012][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.741394][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.835537][T13534] sctp: [Deprecated]: syz.0.1591 (pid 13534) Use of int in max_burst socket option deprecated. [ 598.835537][T13534] Use struct sctp_assoc_value instead [ 599.356883][ T5237] Bluetooth: hci1: command tx timeout [ 599.401723][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.436344][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.449330][ T80] bond0 (unregistering): Released all slaves [ 599.694184][T13515] chnl_net:caif_netlink_parms(): no params data found [ 600.056900][ T80] hsr_slave_0: left promiscuous mode [ 600.067474][ T80] hsr_slave_1: left promiscuous mode [ 600.075644][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.083757][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.094039][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.102897][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.146686][ T80] veth1_macvtap: left promiscuous mode [ 600.170793][ T80] veth0_macvtap: left promiscuous mode [ 600.177189][ T80] veth1_vlan: left promiscuous mode [ 600.182953][ T80] veth0_vlan: left promiscuous mode [ 600.311763][ T5237] Bluetooth: hci0: command tx timeout [ 600.389841][ T5410] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 600.596521][ T5237] Bluetooth: hci3: command tx timeout [ 600.619639][ T5410] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.662759][ T5410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.710516][ T5410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 600.764100][ T5410] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.856030][ T5410] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.028028][ T5410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.100426][ T5410] usb 2-1: config 0 descriptor?? [ 601.443684][ T5237] Bluetooth: hci1: command tx timeout [ 601.497293][ T80] team0 (unregistering): Port device team_slave_1 removed [ 601.548950][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1592'. [ 601.682549][ T80] team0 (unregistering): Port device team_slave_0 removed [ 602.404236][ T5237] Bluetooth: hci0: command tx timeout [ 602.550797][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.586159][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.631696][ T5237] Bluetooth: hci3: command tx timeout [ 603.502377][T13515] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.520388][ T5237] Bluetooth: hci1: command tx timeout [ 603.549023][T13515] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.571649][T13515] bridge_slave_0: entered allmulticast mode [ 603.619647][T13515] bridge_slave_0: entered promiscuous mode [ 603.744727][T13515] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.813258][T13515] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.850110][T13515] bridge_slave_1: entered allmulticast mode [ 603.887637][T13515] bridge_slave_1: entered promiscuous mode [ 603.896788][ T5410] usbhid 2-1:0.0: can't add hid device: -71 [ 603.922685][ T5410] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 603.957584][ T5410] usb 2-1: USB disconnect, device number 39 [ 604.073785][T13515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.145745][T13528] chnl_net:caif_netlink_parms(): no params data found [ 604.178059][T13515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.348010][T13532] chnl_net:caif_netlink_parms(): no params data found [ 604.469899][ T5237] Bluetooth: hci0: command tx timeout [ 604.502638][T13515] team0: Port device team_slave_0 added [ 604.585282][T13515] team0: Port device team_slave_1 added [ 604.710759][ T5237] Bluetooth: hci3: command tx timeout [ 604.771885][ T5285] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 604.823437][T13515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.868237][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.969219][T13515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.010374][T13515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.011479][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 605.032768][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.069140][ T5285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 605.078837][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.093540][ T5285] usb 2-1: Product: syz [ 605.097834][ T5285] usb 2-1: Manufacturer: syz [ 605.105300][ T5285] usb 2-1: SerialNumber: syz [ 605.110433][T13515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.132290][ T5285] usb 2-1: config 0 descriptor?? [ 605.164259][ T5285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 605.177292][ T5285] pvrusb2: ********** [ 605.186513][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.200480][ T5285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 605.205967][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.230137][T13528] bridge_slave_0: entered allmulticast mode [ 605.242299][T13528] bridge_slave_0: entered promiscuous mode [ 605.259617][ T5285] pvrusb2: Important functionality might not be entirely working. [ 605.268080][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.268152][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.293287][ T5285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 605.293428][T13528] bridge_slave_1: entered allmulticast mode [ 605.312465][T13528] bridge_slave_1: entered promiscuous mode [ 605.338665][ T5285] pvrusb2: ********** [ 605.379871][T13567] netlink: 'syz.1.1596': attribute type 11 has an invalid length. [ 605.420225][ T2040] pvrusb2: Invalid write control endpoint [ 605.427290][ T5285] usb 2-1: USB disconnect, device number 40 [ 605.600243][ T5237] Bluetooth: hci1: command tx timeout [ 605.611477][ T2040] pvrusb2: Invalid write control endpoint [ 605.618249][ T2040] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 605.640383][ T2040] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 605.674133][ T2040] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 605.674635][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.707939][ T2040] pvrusb2: Device being rendered inoperable [ 605.728296][ T2040] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 605.749806][ T2040] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 605.786518][ T2040] pvrusb2: Attached sub-driver cx25840 [ 605.878862][ T2040] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 605.900833][ T2040] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 605.921431][T13515] hsr_slave_0: entered promiscuous mode [ 605.943506][T13515] hsr_slave_1: entered promiscuous mode [ 605.954660][T13532] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.980108][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.987589][T13532] bridge_slave_0: entered allmulticast mode [ 605.995225][T13532] bridge_slave_0: entered promiscuous mode [ 606.086596][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.108379][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.128936][T13532] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.136307][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.144108][T13532] bridge_slave_1: entered allmulticast mode [ 606.151821][T13532] bridge_slave_1: entered promiscuous mode [ 606.171505][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.273753][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.423958][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.552110][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.558153][ T5237] Bluetooth: hci0: command tx timeout [ 606.618911][T13528] team0: Port device team_slave_0 added [ 606.762797][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.794557][ T5285] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 606.810462][ T5237] Bluetooth: hci3: command tx timeout [ 606.824374][T13528] team0: Port device team_slave_1 added [ 606.896256][T13532] team0: Port device team_slave_0 added [ 606.946839][T13532] team0: Port device team_slave_1 added [ 606.970568][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 606.998626][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.040813][ T5285] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 607.073368][ T5285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.098578][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.138714][ T5285] usb 2-1: Product: syz [ 607.148807][ T5285] usb 2-1: Manufacturer: syz [ 607.166060][ T5285] usb 2-1: SerialNumber: syz [ 607.435825][T13605] sctp: [Deprecated]: syz.1.1600 (pid 13605) Use of int in max_burst socket option deprecated. [ 607.435825][T13605] Use struct sctp_assoc_value instead [ 607.488877][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.508937][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.591303][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.616339][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.629906][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.686600][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.786392][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.807269][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.849557][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.045046][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.058533][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.093902][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.148683][ T80] bridge_slave_1: left allmulticast mode [ 608.159085][ T80] bridge_slave_1: left promiscuous mode [ 608.170038][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.191534][ T80] bridge_slave_0: left allmulticast mode [ 608.221332][ T80] bridge_slave_0: left promiscuous mode [ 608.236969][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.430867][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.498836][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.532028][ T80] bond0 (unregistering): Released all slaves [ 609.617985][ T5410] usb 2-1: USB disconnect, device number 41 [ 609.856239][T13528] hsr_slave_0: entered promiscuous mode [ 609.877513][T13528] hsr_slave_1: entered promiscuous mode [ 609.896586][T13528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.911756][T13528] Cannot create hsr debugfs directory [ 610.330247][T13532] hsr_slave_0: entered promiscuous mode [ 610.337199][T13532] hsr_slave_1: entered promiscuous mode [ 610.344688][T13532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.352498][T13532] Cannot create hsr debugfs directory [ 610.415593][ T80] hsr_slave_0: left promiscuous mode [ 610.429650][ T80] hsr_slave_1: left promiscuous mode [ 610.438434][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.453482][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.467128][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.474976][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.505278][ T80] veth1_macvtap: left promiscuous mode [ 610.511690][ T80] veth0_macvtap: left promiscuous mode [ 610.517498][ T80] veth1_vlan: left promiscuous mode [ 610.523884][ T80] veth0_vlan: left promiscuous mode [ 610.937733][ T29] audit: type=1804 audit(1728516851.767:416): pid=13668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1607" name="/newroot/17/file0" dev="fuse" ino=1 res=1 errno=0 [ 611.377079][ T80] team0 (unregistering): Port device team_slave_1 removed [ 611.439646][ T80] team0 (unregistering): Port device team_slave_0 removed [ 612.462404][T13515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.503030][T13515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.681817][T13515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.706103][T13515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.958471][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.993273][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.006584][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.016545][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.025687][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 613.035207][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.136615][ T1047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.445192][ T1047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.610533][T13532] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.621484][T13532] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.676025][ T1047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.708080][T13699] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 613.766511][T13532] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.778705][T13532] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.866214][ T1047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.908014][T13515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.972934][T13532] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.983792][T13532] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.002941][T13515] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.054722][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.062078][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.123399][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.130608][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.233281][T13532] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.245831][T13532] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.364410][T13677] chnl_net:caif_netlink_parms(): no params data found [ 614.545572][ T1047] bridge_slave_1: left allmulticast mode [ 614.555159][ T1047] bridge_slave_1: left promiscuous mode [ 614.581371][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.603375][ T1047] bridge_slave_0: left allmulticast mode [ 614.609102][ T1047] bridge_slave_0: left promiscuous mode [ 614.640618][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.127282][ T5237] Bluetooth: hci4: command tx timeout [ 615.413247][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.433402][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.453189][ T1047] bond0 (unregistering): Released all slaves [ 615.754782][T13515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.783610][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.792147][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.799499][T13677] bridge_slave_0: entered allmulticast mode [ 615.806788][T13677] bridge_slave_0: entered promiscuous mode [ 615.816724][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.825094][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.835678][T13677] bridge_slave_1: entered allmulticast mode [ 615.844531][T13677] bridge_slave_1: entered promiscuous mode [ 616.109452][T13677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.179501][ T1047] hsr_slave_0: left promiscuous mode [ 616.191352][ T1047] hsr_slave_1: left promiscuous mode [ 616.210650][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.218234][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.260559][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.268138][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.341098][ T1047] veth1_macvtap: left promiscuous mode [ 616.346933][ T1047] veth0_macvtap: left promiscuous mode [ 616.360263][ T1047] veth1_vlan: left promiscuous mode [ 616.365665][ T1047] veth0_vlan: left promiscuous mode [ 617.085982][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 617.144062][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 617.194297][ T5237] Bluetooth: hci4: command tx timeout [ 617.752849][T13532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.774765][T13677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.845446][T13532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.857743][T13532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.956471][T13532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.981609][T13677] team0: Port device team_slave_0 added [ 618.057536][T13528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.068314][T13528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 618.080657][T13677] team0: Port device team_slave_1 added [ 618.106732][T13677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.114044][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.142217][T13677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.155395][T13528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.166922][T13528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.202213][T13677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.225578][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.269786][T13677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.293774][T13515] veth0_vlan: entered promiscuous mode [ 618.363149][T13677] hsr_slave_0: entered promiscuous mode [ 618.371846][T13677] hsr_slave_1: entered promiscuous mode [ 618.377984][T13677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.389399][T13677] Cannot create hsr debugfs directory [ 618.434785][T13515] veth1_vlan: entered promiscuous mode [ 618.693141][T13515] veth0_macvtap: entered promiscuous mode [ 618.772688][T13515] veth1_macvtap: entered promiscuous mode [ 618.896537][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.911109][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.921088][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.933180][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.947113][T13515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.977738][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.057285][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.071692][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.083982][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.098277][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.110689][T13515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.127109][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.140292][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 619.227542][T13515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.238628][T13515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.247557][T13515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.260274][T13515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.282648][ T5237] Bluetooth: hci4: command tx timeout [ 619.311668][ T25] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 619.323017][ T25] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 619.334070][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 619.344101][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.463185][T13532] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.482600][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.495235][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.502447][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.571854][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.579146][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.606057][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.613520][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.656997][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.664761][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.761776][T13759] tipc: Started in network mode [ 619.767209][T13759] tipc: Node identity 080211, cluster identity 4711 [ 619.805044][T13759] tipc: Enabled bearer , priority 10 [ 619.858078][ T80] tipc: Resetting bearer [ 619.935141][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.951858][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.036178][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.036384][T13677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.054030][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.100955][T13677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.128920][T13677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.170906][T13677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.234051][T13532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.278646][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.289252][T13459] usb 2-1: USB disconnect, device number 42 [ 620.529354][T13528] veth0_vlan: entered promiscuous mode [ 620.600016][T13532] veth0_vlan: entered promiscuous mode [ 620.664871][T13528] veth1_vlan: entered promiscuous mode [ 620.729405][T13532] veth1_vlan: entered promiscuous mode [ 620.795636][T13677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.844803][T13528] veth0_macvtap: entered promiscuous mode [ 620.852411][ T5286] tipc: Node number set to 134353152 [ 620.888168][T13528] veth1_macvtap: entered promiscuous mode [ 620.899449][T13532] veth0_macvtap: entered promiscuous mode [ 620.913017][T13677] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.931971][T13532] veth1_macvtap: entered promiscuous mode [ 620.972794][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.004372][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.018882][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.037718][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.048258][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.080110][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.121931][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.174132][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.181882][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.212993][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.250261][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.267373][ T29] audit: type=1326 audit(1728516862.097:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.1.1621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56c17dff9 code=0x0 [ 621.269301][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.318701][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.335918][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.347250][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.358154][ T5237] Bluetooth: hci4: command tx timeout [ 621.365981][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.385838][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.393026][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.405375][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.426578][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.451337][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.467648][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.478661][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.490275][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.500960][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.513613][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.527765][T13532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.550290][T13528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.559441][T13528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.574560][T13528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.583779][T13528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.600288][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.611759][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.622395][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.633771][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.644755][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.655834][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.666173][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.678415][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.691770][T13532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.716989][T13532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.726766][T13532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.736297][T13532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.745983][T13532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.986873][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.011238][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.019360][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.020187][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.054693][T13677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.110611][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.119613][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.247304][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.272414][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.329092][T13677] veth0_vlan: entered promiscuous mode [ 622.428488][T13677] veth1_vlan: entered promiscuous mode [ 622.496553][T13677] veth0_macvtap: entered promiscuous mode [ 622.523755][T13677] veth1_macvtap: entered promiscuous mode [ 622.554854][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.598875][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.614677][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.628892][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.643338][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.657431][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.670593][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.681167][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.692447][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.704417][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.719512][T13677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.730686][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.743620][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.754885][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.766232][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.776536][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.787413][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.798051][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.809026][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.819302][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.831284][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.850208][T13677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.903030][T13677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.912163][T13677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.927937][T13677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.945240][T13677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.139010][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.174546][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.225331][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.243114][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.383839][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.406091][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.518146][T13830] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.294665][ T1071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.470808][ T1071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.641997][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.650364][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.661574][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.696780][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.728808][ T1071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.760082][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.781079][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.790332][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.798814][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 625.036445][ T1071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.323889][ T1071] bridge_slave_1: left allmulticast mode [ 625.333537][ T1071] bridge_slave_1: left promiscuous mode [ 625.345263][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.358699][ T1071] bridge_slave_0: left allmulticast mode [ 625.364995][ T1071] bridge_slave_0: left promiscuous mode [ 625.371877][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.430599][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 625.599470][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 625.610563][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 625.669907][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 625.740199][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 625.769950][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.779299][ T9] usb 2-1: Product: syz [ 625.789104][ T9] usb 2-1: Manufacturer: syz [ 625.798166][ T9] usb 2-1: SerialNumber: syz [ 625.820833][ T9] usb 2-1: config 0 descriptor?? [ 625.862782][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 625.887928][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 626.324795][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.340556][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.355594][ T1071] bond0 (unregistering): Released all slaves [ 626.505508][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 626.542265][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 626.870165][ T5241] Bluetooth: hci0: command tx timeout [ 627.048768][T13850] chnl_net:caif_netlink_parms(): no params data found [ 627.616709][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 627.637951][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 627.699953][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 627.770093][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 627.897908][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 627.991488][ T1071] hsr_slave_0: left promiscuous mode [ 627.998496][ T1071] hsr_slave_1: left promiscuous mode [ 628.008099][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.022277][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.045413][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.071009][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.160471][ T1071] veth1_macvtap: left promiscuous mode [ 628.181184][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 628.189914][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 628.192312][ T1071] veth0_macvtap: left promiscuous mode [ 628.212672][ T9] usb 2-1: USB disconnect, device number 43 [ 628.220629][ T1071] veth1_vlan: left promiscuous mode [ 628.225984][ T1071] veth0_vlan: left promiscuous mode [ 628.370697][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 628.956681][T13924] loop6: detected capacity change from 0 to 524287999 [ 628.959794][ T5241] Bluetooth: hci0: command tx timeout [ 629.142757][T13920] "syz.1.1650" (13920) uses obsolete ecb(arc4) skcipher [ 629.207180][T13929] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1652'. [ 629.235468][T13929] openvswitch: netlink: Multiple metadata blocks provided [ 629.725967][T13936] futex_wake_op: syz.4.1651 tries to shift op by -1; fix this program [ 629.926067][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 630.007939][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 630.984989][T13933] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 631.040548][ T5241] Bluetooth: hci0: command tx timeout [ 631.066846][T13933] team0: Device ipvlan2 is already an upper device of the team interface [ 631.188156][T13952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.211654][T13941] syzkaller0: entered allmulticast mode [ 631.224282][T13952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.242322][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.250804][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.258693][T13850] bridge_slave_0: entered allmulticast mode [ 631.267377][T13850] bridge_slave_0: entered promiscuous mode [ 631.313680][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.321658][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.344593][T13850] bridge_slave_1: entered allmulticast mode [ 631.384471][T13850] bridge_slave_1: entered promiscuous mode [ 631.424063][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.444105][T13952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.456419][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.508979][T13952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.646361][T13850] team0: Port device team_slave_0 added [ 631.668372][T13850] team0: Port device team_slave_1 added [ 631.683674][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 631.891357][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.928332][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.967318][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.000490][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.007508][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.056078][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.402040][ T1071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.498505][T13850] hsr_slave_0: entered promiscuous mode [ 632.557850][T13850] hsr_slave_1: entered promiscuous mode [ 632.595532][T13850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.619974][T13850] Cannot create hsr debugfs directory [ 632.669893][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.705846][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.756865][ T1071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.889311][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.902912][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.912927][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 632.926212][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 632.935336][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 632.943082][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 632.999282][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'. [ 633.028060][T13989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1666'. [ 633.088327][ T1071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.120078][ T5241] Bluetooth: hci0: command tx timeout [ 633.193188][ T1071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.317103][T13995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1667'. [ 634.078224][ T1071] bridge_slave_1: left allmulticast mode [ 634.100370][ T1071] bridge_slave_1: left promiscuous mode [ 634.141721][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.188757][ T1071] bridge_slave_0: left allmulticast mode [ 634.225398][ T1071] bridge_slave_0: left promiscuous mode [ 634.248020][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.035259][ T5241] Bluetooth: hci2: command tx timeout [ 635.683521][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.723105][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.747183][ T1071] bond0 (unregistering): Released all slaves [ 636.243031][ T1071] tipc: Disabling bearer [ 636.266966][ T1071] tipc: Left network mode [ 636.429615][T13993] chnl_net:caif_netlink_parms(): no params data found [ 636.809271][ T1071] hsr_slave_0: left promiscuous mode [ 636.816387][ T1071] hsr_slave_1: left promiscuous mode [ 636.835968][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.849857][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.866980][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.876987][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.930226][ T1071] veth1_macvtap: left promiscuous mode [ 636.935876][ T1071] veth0_macvtap: left promiscuous mode [ 636.949957][ T1071] veth1_vlan: left promiscuous mode [ 636.955415][ T1071] veth0_vlan: left promiscuous mode [ 637.110807][ T5241] Bluetooth: hci2: command tx timeout [ 637.718981][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 637.791806][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 638.393958][T13993] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.405647][T13993] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.414610][T13993] bridge_slave_0: entered allmulticast mode [ 638.423499][T13993] bridge_slave_0: entered promiscuous mode [ 638.467186][T13993] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.476022][T13993] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.483809][T13993] bridge_slave_1: entered allmulticast mode [ 638.491975][T13993] bridge_slave_1: entered promiscuous mode [ 638.685363][T13993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.753494][T13993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.812943][T13850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.861642][T13850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.885405][T13850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.962026][T13993] team0: Port device team_slave_0 added [ 638.982352][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.004766][T13993] team0: Port device team_slave_1 added [ 639.024456][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.034017][T13850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.108341][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.125216][T13993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.140038][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.184570][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.192656][T13993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.193329][ T5241] Bluetooth: hci2: command tx timeout [ 639.206923][T13993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.219833][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.248479][T13993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.420627][T13993] hsr_slave_0: entered promiscuous mode [ 639.437025][T13993] hsr_slave_1: entered promiscuous mode [ 639.445908][T13993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.453656][T13993] Cannot create hsr debugfs directory [ 639.488148][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.532661][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.680959][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.784139][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.833061][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.843227][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.882485][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.891016][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.223677][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.415461][T13850] veth0_vlan: entered promiscuous mode [ 640.486078][T13850] veth1_vlan: entered promiscuous mode [ 640.583567][T13993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 640.642091][T13993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 640.669121][T13993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 640.716513][T13993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 640.803493][T13850] veth0_macvtap: entered promiscuous mode [ 640.826034][T13850] veth1_macvtap: entered promiscuous mode [ 640.906683][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.920010][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.947808][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.986732][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.016379][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.035913][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.054248][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.082219][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.097609][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.112956][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.124881][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.135866][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.150287][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.160982][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.172394][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.183500][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.209307][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.228418][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.269913][T13850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.270622][ T5241] Bluetooth: hci2: command tx timeout [ 641.300224][T13850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.318682][T13850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.327826][T13850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.515265][T13993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.617912][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.626352][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.748330][T13993] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.803713][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.813589][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.872903][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.886560][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.893818][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.913772][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.089214][T13993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.150900][T13993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.320579][T13993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.653276][T13993] veth0_vlan: entered promiscuous mode [ 642.752154][T13993] veth1_vlan: entered promiscuous mode [ 642.892213][T13993] veth0_macvtap: entered promiscuous mode [ 643.032657][T13993] veth1_macvtap: entered promiscuous mode [ 643.075408][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.124537][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.158051][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.175799][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.197316][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.225511][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.255866][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.280112][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.304438][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.331420][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.345155][T13993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.425300][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.440925][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.452904][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.465079][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.476669][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.526139][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.539327][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.559939][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.597047][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.613875][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.627765][T13993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.658769][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.695308][T13993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.721014][T13993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.733349][T13993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.746396][T13993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.760366][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.874483][T14128] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 643.881400][T14128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.900453][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.922561][T14128] vhci_hcd vhci_hcd.0: Device attached [ 643.928740][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.936690][T14136] vhci_hcd: connection closed [ 643.959946][ T1047] vhci_hcd: stop threads [ 643.977220][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.978912][ T1047] vhci_hcd: release socket [ 643.997587][ T1047] vhci_hcd: disconnect device [ 644.002403][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.382816][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.399077][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.860087][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 646.019921][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 646.035857][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.089894][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.102719][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 646.112096][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.137740][T14203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1690'. [ 646.144049][ T8] usb 2-1: config 0 descriptor?? [ 646.176698][T14203] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1690'. [ 646.206016][T14203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1690'. [ 646.228501][ T8] hub 2-1:0.0: USB hub found [ 646.446118][ T8] hub 2-1:0.0: 1 port detected [ 646.669929][ T8] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 646.712786][ T8] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 647.109051][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.201216][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.637588][ T1047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.236221][ T1047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.396701][ T1047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.685632][ T1047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.953619][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 648.982811][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 649.000189][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.012820][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.021373][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.029349][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.038559][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 649.045983][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 649.122031][ T8] usb 2-1: USB disconnect, device number 44 [ 649.291075][ T1047] bridge_slave_1: left allmulticast mode [ 649.299237][ T1047] bridge_slave_1: left promiscuous mode [ 649.317579][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.342000][ T1047] bridge_slave_0: left allmulticast mode [ 649.350078][ T1047] bridge_slave_0: left promiscuous mode [ 649.366238][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.021388][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.037580][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.052077][ T1047] bond0 (unregistering): Released all slaves [ 651.067759][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 651.081465][T14240] team0: entered promiscuous mode [ 651.090128][T14240] team_slave_0: entered promiscuous mode [ 651.096015][T14240] team_slave_1: entered promiscuous mode [ 651.110249][ T5237] Bluetooth: hci4: command tx timeout [ 651.132404][T14240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 651.152354][T14240] team0: left promiscuous mode [ 651.197108][T14240] team_slave_0: left promiscuous mode [ 651.208760][T14240] team_slave_1: left promiscuous mode [ 651.886783][ T1047] hsr_slave_0: left promiscuous mode [ 651.930838][ T1047] hsr_slave_1: left promiscuous mode [ 651.951090][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.969567][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.998635][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.018112][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.093199][ T1047] veth1_macvtap: left promiscuous mode [ 652.110055][ T1047] veth0_macvtap: left promiscuous mode [ 652.127911][ T1047] veth1_vlan: left promiscuous mode [ 652.133461][ T1047] veth0_vlan: left promiscuous mode [ 652.169908][T13459] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 652.330689][T13459] usb 2-1: Using ep0 maxpacket: 8 [ 652.338004][T13459] usb 2-1: unable to get BOS descriptor or descriptor too short [ 652.348081][T13459] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 652.357357][T13459] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.367746][T13459] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 652.377005][T13459] usb 2-1: config 1 has no interface number 1 [ 652.384035][T13459] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 652.397202][T13459] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 652.409160][T13459] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 652.424034][T13459] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.450285][T13459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.466721][T13459] usb 2-1: Product: syz [ 652.471004][T13459] usb 2-1: Manufacturer: syz [ 652.475653][T13459] usb 2-1: SerialNumber: syz [ 653.011474][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 653.075990][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 653.190184][ T5237] Bluetooth: hci4: command tx timeout [ 653.866925][T13459] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 653.875274][T13459] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 653.888056][T13459] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 653.898600][T13459] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 653.906896][T13459] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 653.917928][T13459] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 654.035741][T13459] usb 2-1: USB disconnect, device number 45 [ 654.072864][T14228] chnl_net:caif_netlink_parms(): no params data found [ 654.211992][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.621468][T14228] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.628831][T14228] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.638121][T14228] bridge_slave_0: entered allmulticast mode [ 654.655646][T14228] bridge_slave_0: entered promiscuous mode [ 654.684915][T14228] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.726604][T14228] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.761001][T14228] bridge_slave_1: entered allmulticast mode [ 654.768810][T14228] bridge_slave_1: entered promiscuous mode [ 654.897299][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.900597][T14228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.922626][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.934992][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.946703][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.958531][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 654.968050][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.075763][T14228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.100070][ T5234] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 655.261711][T14228] team0: Port device team_slave_0 added [ 655.270347][ T5237] Bluetooth: hci4: command tx timeout [ 655.278786][T14310] program syz.4.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.300308][ T5234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.346381][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.348426][T14228] team0: Port device team_slave_1 added [ 655.362047][ T5234] usb 2-1: config 0 has no interfaces? [ 655.372768][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.383997][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.393804][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.401604][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 655.410631][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.421954][ T5234] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 655.441840][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.454013][ T5234] usb 2-1: config 0 descriptor?? [ 655.576225][ T1047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.639146][T14320] usb usb8: usbfs: process 14320 (syz.4.1713) did not claim interface 0 before use [ 655.656215][T14228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.663507][T14228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.699805][ T5234] usb 2-1: USB disconnect, device number 46 [ 655.700874][T14228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.772680][ T1047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.790039][T14228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.797229][T14228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.823437][T14228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.945122][ T1047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.054592][ T1047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.077155][T14228] hsr_slave_0: entered promiscuous mode [ 656.085636][T14228] hsr_slave_1: entered promiscuous mode [ 656.092202][T14228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.105637][T14228] Cannot create hsr debugfs directory [ 656.147875][T14306] chnl_net:caif_netlink_parms(): no params data found [ 656.155053][T13459] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 656.334996][T13459] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.356335][T13459] usb 2-1: config 0 has no interfaces? [ 656.366199][T13459] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 656.393648][T13459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.410582][T13459] usb 2-1: config 0 descriptor?? [ 656.671674][ T1047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.722169][T14306] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.729921][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.737288][T14306] bridge_slave_0: entered allmulticast mode [ 656.753986][T14306] bridge_slave_0: entered promiscuous mode [ 656.775064][T14317] chnl_net:caif_netlink_parms(): no params data found [ 656.839224][T14306] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.856808][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.864849][T14306] bridge_slave_1: entered allmulticast mode [ 656.873312][T14306] bridge_slave_1: entered promiscuous mode [ 656.928317][ T1047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.032364][ T5237] Bluetooth: hci0: command tx timeout [ 657.065993][T14306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.124117][ T1047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.196008][T14306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.310311][ T1047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.350502][ T5237] Bluetooth: hci4: command tx timeout [ 657.428815][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.441548][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.449617][T14317] bridge_slave_0: entered allmulticast mode [ 657.462752][T14317] bridge_slave_0: entered promiscuous mode [ 657.472653][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.479963][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.488425][T14317] bridge_slave_1: entered allmulticast mode [ 657.495711][T14317] bridge_slave_1: entered promiscuous mode [ 657.510054][ T5237] Bluetooth: hci1: command tx timeout [ 657.532378][ T5234] usb 2-1: USB disconnect, device number 47 [ 657.580572][T14306] team0: Port device team_slave_0 added [ 657.667177][T14306] team0: Port device team_slave_1 added [ 657.699984][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.727402][T14306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.735240][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.769562][T14306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.785988][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.878088][T14306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.893815][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.924465][T14306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.018306][T14317] team0: Port device team_slave_0 added [ 658.052470][T14317] team0: Port device team_slave_1 added [ 658.116607][T14306] hsr_slave_0: entered promiscuous mode [ 658.129388][T14306] hsr_slave_1: entered promiscuous mode [ 658.154270][T14306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.175856][T14306] Cannot create hsr debugfs directory [ 658.205091][ T1047] bridge_slave_1: left allmulticast mode [ 658.211494][ T1047] bridge_slave_1: left promiscuous mode [ 658.217696][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.220573][T14351] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1714'. [ 658.236526][ T1047] bridge_slave_0: left allmulticast mode [ 658.246617][T14351] unsupported nla_type 14345 [ 658.252302][ T1047] bridge_slave_0: left promiscuous mode [ 658.258047][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.277490][ T1047] bridge_slave_1: left allmulticast mode [ 658.284248][ T1047] bridge_slave_1: left promiscuous mode [ 658.291296][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.302148][ T1047] bridge_slave_0: left allmulticast mode [ 658.307843][ T1047] bridge_slave_0: left promiscuous mode [ 658.314819][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.110222][ T5237] Bluetooth: hci0: command tx timeout [ 659.304734][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.318260][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.329929][ T1047] bond0 (unregistering): Released all slaves [ 659.506004][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.525057][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.536005][ T1047] bond0 (unregistering): Released all slaves [ 659.591369][ T5237] Bluetooth: hci1: command tx timeout [ 659.820538][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.827577][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.965482][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.011734][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.018768][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.048537][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.318405][T14317] hsr_slave_0: entered promiscuous mode [ 660.327730][T14317] hsr_slave_1: entered promiscuous mode [ 660.359778][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.369162][T14317] Cannot create hsr debugfs directory [ 660.382348][T14228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.556234][T14228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.613884][T14228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.632900][T14228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 661.006168][ T1047] hsr_slave_0: left promiscuous mode [ 661.040196][ T1047] hsr_slave_1: left promiscuous mode [ 661.066199][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.099919][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.122734][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.151159][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.179265][ T1047] hsr_slave_0: left promiscuous mode [ 661.189903][ T5237] Bluetooth: hci0: command tx timeout [ 661.202176][ T1047] hsr_slave_1: left promiscuous mode [ 661.217777][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.230471][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.262984][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.302097][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.403404][ T1047] veth1_macvtap: left promiscuous mode [ 661.408943][ T1047] veth0_macvtap: left promiscuous mode [ 661.437296][ T1047] veth1_vlan: left promiscuous mode [ 661.442896][ T1047] veth0_vlan: left promiscuous mode [ 661.469055][ T1047] veth1_macvtap: left promiscuous mode [ 661.480268][ T1047] veth0_macvtap: left promiscuous mode [ 661.485941][ T1047] veth1_vlan: left promiscuous mode [ 661.501775][ T1047] veth0_vlan: left promiscuous mode [ 661.671203][ T5237] Bluetooth: hci1: command tx timeout [ 661.800135][T14378] fuse: Unknown parameter 'use00000000000000000000' [ 662.381445][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 662.437452][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 663.269803][ T5237] Bluetooth: hci0: command tx timeout [ 663.613976][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 663.669150][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 663.751789][ T5237] Bluetooth: hci1: command tx timeout [ 664.642031][T14228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.722766][T14228] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.753199][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.762036][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.786783][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.794038][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.829091][T14306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.836843][ T5285] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 664.939385][T14306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.981423][ T5285] usb 2-1: device descriptor read/64, error -71 [ 665.049225][T14306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.081774][T14306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.235317][ T5285] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 665.334651][T14228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.389950][ T5285] usb 2-1: device descriptor read/64, error -71 [ 665.435634][T14306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.474385][T14306] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.520373][ T5285] usb usb2-port1: attempt power cycle [ 665.558229][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.565528][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.578178][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.585480][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.597221][T14317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 665.615818][T14317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.628600][T14317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 665.638934][T14317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.664891][T14228] veth0_vlan: entered promiscuous mode [ 665.701398][T14228] veth1_vlan: entered promiscuous mode [ 665.773536][T14228] veth0_macvtap: entered promiscuous mode [ 665.787746][T14228] veth1_macvtap: entered promiscuous mode [ 665.838056][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.856536][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.869450][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.880899][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.892044][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.899824][ T5285] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 665.912292][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.928775][T14228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.941913][ T5285] usb 2-1: device descriptor read/8, error -71 [ 665.956181][T14306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.977187][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.994391][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.039795][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.059781][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.076005][T14228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.093694][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.108043][T14228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.176770][T14228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.200159][ T5285] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 666.213370][T14228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.229088][T14228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.242072][ T5285] usb 2-1: device descriptor read/8, error -71 [ 666.254251][T14228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.350237][ T5285] usb usb2-port1: unable to enumerate USB device [ 666.363611][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.412328][T14306] veth0_vlan: entered promiscuous mode [ 666.498691][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.561564][T14306] veth1_vlan: entered promiscuous mode [ 666.598560][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.605780][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.661397][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.686863][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.694056][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.708416][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.801191][T14306] veth0_macvtap: entered promiscuous mode [ 666.829337][T14306] veth1_macvtap: entered promiscuous mode [ 666.852573][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.868401][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.886776][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.898840][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.925162][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.946871][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.961213][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.972775][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.983392][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.998760][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.011347][T14306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.061935][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.083662][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.102253][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.123878][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.136444][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.153655][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.165800][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.185154][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.212867][T14306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.288420][T14306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.331874][T14306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.344642][T14306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.367204][T14306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.404098][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.641010][T14317] veth0_vlan: entered promiscuous mode [ 667.806275][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.809859][T14317] veth1_vlan: entered promiscuous mode [ 667.884596][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.159854][T13459] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 668.503999][T14317] veth0_macvtap: entered promiscuous mode [ 668.561897][T13459] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.623896][T13459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 668.662747][T13459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 668.706010][T14317] veth1_macvtap: entered promiscuous mode [ 668.752259][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.770971][T13459] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.795734][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.811634][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.847702][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.878854][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.908720][T13459] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.948179][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.980731][T13459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.988884][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.029956][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.053553][T13459] usb 2-1: config 0 descriptor?? [ 669.056098][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.105315][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.128396][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.156225][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.186114][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.217568][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.226590][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.275847][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.297699][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.313721][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.325121][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.349171][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.365298][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.377116][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.396031][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.505636][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.554472][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.644569][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.659516][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1725'. [ 669.736964][T14317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.760048][T14317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.770099][T14317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.778976][T14317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.290766][T14470] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1708'. [ 670.386962][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.440724][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.618694][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.662212][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.709348][T14479] batman_adv: batadv0: Adding interface: dummy0 [ 670.731200][T14479] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.764321][T14479] batman_adv: batadv0: Interface activated: dummy0 [ 670.847450][T14483] batadv0: mtu less than device minimum [ 670.885988][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.899012][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.911648][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.924293][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.936830][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.948812][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.960912][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.972787][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.984578][T14483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.139988][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.148004][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.907391][T13459] usbhid 2-1:0.0: can't add hid device: -71 [ 671.916649][T13459] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.967829][T13459] usb 2-1: USB disconnect, device number 52 [ 672.068959][ T29] audit: type=1326 audit(1728516912.897:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.1.1733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39017dff9 code=0x0 [ 672.091070][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.459291][ T5237] Bluetooth: hci4: unexpected cc 0x0c13 length: 3 > 1 [ 674.151855][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 674.162976][ T5237] Bluetooth: hci0: Injecting HCI hardware error event [ 674.174169][ T5230] Bluetooth: hci0: hardware error 0x00 [ 674.901034][T14565] fuse: Unknown parameter 'use00000000000000000000' [ 676.398457][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 676.470692][ T30] INFO: task kworker/0:4:5240 blocked for more than 143 seconds. [ 676.479043][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 676.488930][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.501981][ T30] task:kworker/0:4 state:D stack:18768 pid:5240 tgid:5240 ppid:2 flags:0x00004000 [ 676.514014][ T30] Workqueue: usb_hub_wq hub_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 676.526450][ T30] Call Trace: [ 676.531611][ T30] [ 676.534919][ T30] __schedule+0x1895/0x4b30 [ 676.541709][ T30] ? __pfx___schedule+0x10/0x10 [ 676.547347][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.601922][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.652642][ T30] ? kick_pool+0x45c/0x620 [ 676.719083][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.789835][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 676.807887][ T30] ? schedule+0x90/0x320 [ 676.817151][ T30] schedule+0x14b/0x320 [ 676.839952][ T5298] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 676.866542][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.879929][ T30] __mutex_lock+0x6a7/0xd70 [ 676.884512][ T30] ? __mutex_lock+0x52a/0xd70 [ 676.889242][ T30] ? adu_disconnect+0xca/0x2b0 [ 676.969940][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.997824][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 677.003717][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.019795][ T30] adu_disconnect+0xca/0x2b0 [ 677.024931][ T30] usb_unbind_interface+0x25e/0x940 [ 677.067670][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 677.073624][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 677.079410][ T30] device_release_driver_internal+0x503/0x7c0 [ 677.113034][ T30] bus_remove_device+0x34f/0x420 [ 677.118347][ T30] device_del+0x57a/0x9b0 [ 677.122966][ T30] ? kobject_put+0x272/0x480 [ 677.128013][ T30] ? __pfx_device_del+0x10/0x10 [ 677.133100][ T30] ? kobject_put+0x44d/0x480 [ 677.139878][ T30] usb_disable_device+0x3bf/0x850 [ 677.169791][ T30] usb_disconnect+0x340/0x950 [ 677.174652][ T30] hub_event+0x1ebc/0x5150 [ 677.179124][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 677.189893][ T30] ? __pfx_hub_event+0x10/0x10 [ 677.194746][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 677.199898][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.205917][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.212339][ T30] ? process_scheduled_works+0x976/0x1850 [ 677.218101][ T30] process_scheduled_works+0xa63/0x1850 [ 677.223792][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.230115][ T30] ? assign_work+0x364/0x3d0 [ 677.234758][ T30] worker_thread+0x870/0xd30 [ 677.239390][ T30] ? __kthread_parkme+0x169/0x1d0 [ 677.259751][ T30] ? __pfx_worker_thread+0x10/0x10 [ 677.264953][ T30] kthread+0x2f0/0x390 [ 677.269114][ T30] ? __pfx_worker_thread+0x10/0x10 [ 677.289789][ T30] ? __pfx_kthread+0x10/0x10 [ 677.299983][ T30] ret_from_fork+0x4b/0x80 [ 677.309812][ T30] ? __pfx_kthread+0x10/0x10 [ 677.319873][ T30] ret_from_fork_asm+0x1a/0x30 [ 677.324725][ T30] [ 677.327808][ T30] INFO: task kworker/0:5:5294 blocked for more than 144 seconds. [ 677.340251][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 677.348211][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.357076][ T30] task:kworker/0:5 state:D stack:18200 pid:5294 tgid:5294 ppid:2 flags:0x00004000 [ 677.379763][ T30] Workqueue: usb_hub_wq hub_event [ 677.384907][ T30] Call Trace: [ 677.388214][ T30] [ 677.399865][ T30] __schedule+0x1895/0x4b30 [ 677.419773][ T30] ? mark_lock+0x9a/0x360 [ 677.424218][ T30] ? __pfx___schedule+0x10/0x10 [ 677.429140][ T30] ? __pfx_lock_release+0x10/0x10 [ 677.434557][ T30] ? schedule+0x90/0x320 [ 677.439994][ T30] schedule+0x14b/0x320 [ 677.444206][ T30] schedule_preempt_disabled+0x13/0x30 [ 677.449790][ T30] __mutex_lock+0x6a7/0xd70 [ 677.454348][ T30] ? __mutex_lock+0x52a/0xd70 [ 677.459066][ T30] ? adu_disconnect+0xca/0x2b0 [ 677.464040][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 677.469933][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 677.475536][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.481625][ T30] adu_disconnect+0xca/0x2b0 [ 677.486309][ T30] usb_unbind_interface+0x25e/0x940 [ 677.499778][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 677.505563][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 677.511682][ T30] device_release_driver_internal+0x503/0x7c0 [ 677.517811][ T30] bus_remove_device+0x34f/0x420 [ 677.523101][ T30] device_del+0x57a/0x9b0 [ 677.529893][ T30] ? kobject_put+0x272/0x480 [ 677.539777][ T30] ? __pfx_device_del+0x10/0x10 [ 677.544689][ T30] ? kobject_put+0x44d/0x480 [ 677.549767][ T30] usb_disable_device+0x3bf/0x850 [ 677.554851][ T30] usb_disconnect+0x340/0x950 [ 677.569728][ T30] hub_event+0x1ebc/0x5150 [ 677.574330][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 677.580199][ T30] ? __pfx_hub_event+0x10/0x10 [ 677.589964][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 677.595167][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.601353][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.609907][ T30] ? process_scheduled_works+0x976/0x1850 [ 677.615713][ T30] process_scheduled_works+0xa63/0x1850 [ 677.621471][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.629969][ T30] ? assign_work+0x364/0x3d0 [ 677.634885][ T30] worker_thread+0x870/0xd30 [ 677.640192][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 677.646440][ T30] ? __kthread_parkme+0x169/0x1d0 [ 677.652174][ T30] ? __pfx_worker_thread+0x10/0x10 [ 677.657634][ T30] kthread+0x2f0/0x390 [ 677.662163][ T30] ? __pfx_worker_thread+0x10/0x10 [ 677.668133][ T30] ? __pfx_kthread+0x10/0x10 [ 677.679783][ T30] ret_from_fork+0x4b/0x80 [ 677.689756][ T30] ? __pfx_kthread+0x10/0x10 [ 677.694429][ T30] ret_from_fork_asm+0x1a/0x30 [ 677.699274][ T30] [ 677.707492][ T30] [ 677.707492][ T30] Showing all locks held in the system: [ 677.715632][ T30] 1 lock held by init/1: [ 677.720166][ T30] 3 locks held by kworker/1:0/25: [ 677.725235][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 677.736667][ T30] #1: ffffc900001f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 677.747586][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 677.760460][ T30] 1 lock held by khungtaskd/30: [ 677.765751][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 677.775998][ T30] 3 locks held by kworker/u8:8/1131: [ 677.781588][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 677.792040][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 677.804029][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 677.813917][ T30] 6 locks held by kworker/0:2/1174: [ 677.819182][ T30] #0: ffff88801ded6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 677.834772][ T30] #1: ffffc900044d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 677.848862][ T30] #2: ffff888028137190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 677.859182][ T30] #3: ffff88807aad2190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 677.880098][ T30] #4: ffff88806a8c8160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 677.900000][ T30] #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 677.909435][ T30] 2 locks held by getty/4988: [ 677.919971][ T30] #0: ffff88814bf210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 677.930184][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 677.940489][ T30] 6 locks held by kworker/0:4/5240: [ 677.945986][ T30] #0: ffff88801ded6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 677.959729][ T30] #1: ffffc90003c87d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 677.980054][ T30] #2: ffff8880281bf190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 677.989203][ T30] #3: ffff88802da6a190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 677.998995][ T30] #4: ffff88807e227160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 678.019784][ T30] #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 678.049406][ T30] 6 locks held by kworker/0:5/5294: [ 678.054852][ T30] #0: ffff88801ded6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.069750][ T30] #1: ffffc90004017d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.081863][ T30] #2: ffff88814539f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 678.099720][ T30] #3: ffff888060b26190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 678.119738][ T30] #4: ffff88814a280160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 678.139779][ T30] #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 678.169875][ T30] 5 locks held by kworker/1:7/5298: [ 678.175151][ T30] #0: ffff88801ded6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.186666][ T30] #1: ffffc90004047d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.198716][ T30] #2: ffff88814538f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 678.207793][ T30] #3: ffff88814539a510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 678.219858][ T30] #4: ffff8880272f5468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 678.229753][ T30] 1 lock held by syz.0.1040/11435: [ 678.239808][ T30] #0: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 678.259798][ T30] 1 lock held by syz-executor/13532: [ 678.265221][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 678.274462][ T30] 2 locks held by syz.3.1737/14548: [ 678.279746][ T30] 1 lock held by syz.2.1743/14571: [ 678.284900][ T30] 1 lock held by syz.1.1748/14606: [ 678.290187][ T30] [ 678.299939][ T30] ============================================= [ 678.299939][ T30] [ 678.308420][ T30] NMI backtrace for cpu 0 [ 678.312776][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 678.323424][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 678.335891][ T30] Call Trace: [ 678.339314][ T30] [ 678.343358][ T30] dump_stack_lvl+0x241/0x360 [ 678.348197][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.354102][ T30] ? __pfx__printk+0x10/0x10 [ 678.359310][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 678.364332][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.369852][ T30] ? _printk+0xd5/0x120 [ 678.374068][ T30] ? __pfx__printk+0x10/0x10 [ 678.378713][ T30] ? __wake_up_klogd+0xcc/0x110 [ 678.383675][ T30] ? __pfx__printk+0x10/0x10 [ 678.388408][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 678.393756][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 678.400324][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 678.406913][ T30] watchdog+0xff4/0x1040 [ 678.412291][ T30] ? watchdog+0x1ea/0x1040 [ 678.416831][ T30] ? __pfx_watchdog+0x10/0x10 [ 678.421752][ T30] kthread+0x2f0/0x390 [ 678.426213][ T30] ? __pfx_watchdog+0x10/0x10 [ 678.431059][ T30] ? __pfx_kthread+0x10/0x10 [ 678.436396][ T30] ret_from_fork+0x4b/0x80 [ 678.441686][ T30] ? __pfx_kthread+0x10/0x10 [ 678.446406][ T30] ret_from_fork_asm+0x1a/0x30 [ 678.451228][ T30] [ 678.455508][ T30] Sending NMI from CPU 0 to CPUs 1: [ 678.461469][ C1] NMI backtrace for cpu 1 [ 678.461484][ C1] CPU: 1 UID: 0 PID: 1131 Comm: kworker/u8:8 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 678.461507][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 678.461519][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 678.461547][ C1] RIP: 0010:rb_next+0xaa/0xf0 [ 678.461575][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 e3 48 89 df e8 cd 8a 40 f6 eb d9 4c 3b 63 08 49 89 dc 75 3d 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 e7 e8 ac 8a 40 f6 49 8b 1c 24 48 83 e3 fc 0f 84 75 ff [ 678.461592][ C1] RSP: 0018:ffffc90000a18c40 EFLAGS: 00000046 [ 678.461609][ C1] RAX: 1ffff11028a71a83 RBX: ffff8880b872cb58 RCX: ffff888026de0000 [ 678.461624][ C1] RDX: 0000000000000100 RSI: ffff88814538d418 RDI: ffff88814538d418 [ 678.461638][ C1] RBP: dffffc0000000000 R08: ffffffff8bbe8858 R09: 1ffffffff2039dc5 [ 678.461653][ C1] R10: dffffc0000000000 R11: fffffbfff2039dc6 R12: ffff88814538d418 [ 678.461668][ C1] R13: ffff88814538d418 R14: 0000000000000000 R15: dffffc0000000000 [ 678.461682][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 678.461699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.461712][ C1] CR2: 0000000020378030 CR3: 0000000066e76000 CR4: 00000000003526f0 [ 678.461729][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 678.461741][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 678.461753][ C1] Call Trace: [ 678.461760][ C1] [ 678.461767][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 678.461790][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 678.461820][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.461842][ C1] ? nmi_handle+0x2a/0x5a0 [ 678.461876][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 678.461903][ C1] ? nmi_handle+0x14f/0x5a0 [ 678.461922][ C1] ? nmi_handle+0x2a/0x5a0 [ 678.461942][ C1] ? rb_next+0xaa/0xf0 [ 678.461966][ C1] ? default_do_nmi+0x63/0x160 [ 678.461990][ C1] ? exc_nmi+0x123/0x1f0 [ 678.462012][ C1] ? end_repeat_nmi+0xf/0x53 [ 678.462032][ C1] ? timerqueue_del+0x48/0x100 [ 678.462065][ C1] ? rb_next+0xaa/0xf0 [ 678.462090][ C1] ? rb_next+0xaa/0xf0 [ 678.462115][ C1] ? rb_next+0xaa/0xf0 [ 678.462140][ C1] [ 678.462146][ C1] [ 678.462155][ C1] timerqueue_del+0x89/0x100 [ 678.462176][ C1] __hrtimer_run_queues+0x3d0/0xd50 [ 678.462196][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 678.462230][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 678.462250][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 678.462278][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 678.462301][ C1] handle_softirqs+0x2c5/0x980 [ 678.462328][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 678.462354][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 678.462381][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 678.462402][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 678.462426][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 678.462455][ C1] irq_exit_rcu+0x9/0x30 [ 678.462477][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.462523][ C1] [ 678.462529][ C1] [ 678.462536][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.462566][ C1] RIP: 0010:debug_check_no_obj_freed+0x17b/0x580 [ 678.462595][ C1] Code: 84 24 80 00 00 00 0e 36 e0 45 48 b8 00 00 00 00 00 fc ff df c7 04 08 00 00 00 00 c7 44 08 09 00 00 00 00 66 c7 44 08 0d 00 00 44 08 0f 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 00 01 00 00 [ 678.462611][ C1] RSP: 0018:ffffc90003e37680 EFLAGS: 00000246 [ 678.462627][ C1] RAX: dffffc0000000000 RBX: 1ffffffff34c0fe5 RCX: 1ffff920007c6ee0 [ 678.462642][ C1] RDX: 0000000000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 678.462655][ C1] RBP: ffffc90003e377d0 R08: ffffffff942c586f R09: 1ffffffff2858b0d [ 678.462670][ C1] R10: dffffc0000000000 R11: fffffbfff2858b0e R12: ffff888023368400 [ 678.462684][ C1] R13: ffff888023368000 R14: 0000000000000000 R15: 0000000000000000 [ 678.462708][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 678.462740][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 678.462769][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 678.462797][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 678.462822][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 678.462847][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 678.462877][ C1] kfree+0x11f/0x440 [ 678.462904][ C1] ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 678.462936][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 678.462961][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 678.462990][ C1] ? mark_lock+0x9a/0x360 [ 678.463010][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 678.463039][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 678.463068][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 678.463099][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 678.463129][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 678.463152][ C1] ? process_scheduled_works+0x976/0x1850 [ 678.463178][ C1] process_scheduled_works+0xa63/0x1850 [ 678.463217][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.463247][ C1] ? assign_work+0x364/0x3d0 [ 678.463274][ C1] worker_thread+0x870/0xd30 [ 678.463304][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.463333][ C1] ? __kthread_parkme+0x169/0x1d0 [ 678.463361][ C1] ? __pfx_worker_thread+0x10/0x10 [ 678.463388][ C1] kthread+0x2f0/0x390 [ 678.463405][ C1] ? __pfx_worker_thread+0x10/0x10 [ 678.463430][ C1] ? __pfx_kthread+0x10/0x10 [ 678.463448][ C1] ret_from_fork+0x4b/0x80 [ 678.463475][ C1] ? __pfx_kthread+0x10/0x10 [ 678.463493][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.463527][ C1] [ 679.034953][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 679.043299][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 679.054739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 679.065685][ T30] Call Trace: [ 679.069211][ T30] [ 679.072235][ T30] dump_stack_lvl+0x241/0x360 [ 679.077255][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.083137][ T30] ? __pfx__printk+0x10/0x10 [ 679.087784][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 679.095827][ T30] ? vscnprintf+0x5d/0x90 [ 679.102949][ T30] panic+0x349/0x880 [ 679.108013][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 679.114514][ T30] ? __pfx_panic+0x10/0x10 [ 679.119373][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 679.124823][ T30] ? __irq_work_queue_local+0x137/0x410 [ 679.131117][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 679.136965][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 679.143346][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 679.149634][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 679.155837][ T30] watchdog+0x1033/0x1040 [ 679.160207][ T30] ? watchdog+0x1ea/0x1040 [ 679.164657][ T30] ? __pfx_watchdog+0x10/0x10 [ 679.169410][ T30] kthread+0x2f0/0x390 [ 679.173516][ T30] ? __pfx_watchdog+0x10/0x10 [ 679.178239][ T30] ? __pfx_kthread+0x10/0x10 [ 679.182858][ T30] ret_from_fork+0x4b/0x80 [ 679.187308][ T30] ? __pfx_kthread+0x10/0x10 [ 679.191928][ T30] ret_from_fork_asm+0x1a/0x30 [ 679.196770][ T30] [ 679.200150][ T30] Kernel Offset: disabled [ 679.204493][ T30] Rebooting in 86400 seconds..