last executing test programs: 17.945170926s ago: executing program 2 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0009"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e90521f5f2930c53f33c4653b501000000000000000000000000a4372d0c66f680d7408c7ce88fe7dc26a2e696e73c65ff23212c4ac27dcffb299dfc0c1d88607ddfce3d5cf47dd4b52171ee89bf10c8a473ccaca0c7c85657a1bd834a834cf41b94c4bb57a37694d14adc7962a9053ad8d8de552b447a90953576c8bac7863407e6474b210f3a0978027785c581604f12ce670a1a5b73e5c30ed4f53d7cb5508f85157807185e402e0eb4e6f804b32cd3c7cc0d4e000000"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x4, 0x4000000000, 0x8, 0xfffffffffffffffe, 0x0, 0x100], 0x2000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffff7be, 0x4, 0x2, 0x100000000000000, 0xefffffffffffffff, 0x400000000010000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2], 0x0, 0x41901}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast1}, &(0x7f00000000c0)=0xc) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000440)={0xdf, 0x0, 0x9000}) 16.594637474s ago: executing program 2 (id=106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711071000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15.572603238s ago: executing program 2 (id=111): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ioctl$int_in(r0, 0x73, &(0x7f0000000000)=0x7) 15.438088945s ago: executing program 2 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x18) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES64=r0, @ANYBLOB="fc"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000006380), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x29, 0x3, 0x4004000, 0x5, 0x1, 0x9, 0xffb0, 0x0, 0x0, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x6, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r9, 0x0}]) shutdown(r6, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 14.950752347s ago: executing program 2 (id=118): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(r3, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70003400000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 14.574618142s ago: executing program 2 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x8000ffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) (async) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@prinfo={0x18, 0x84, 0x5, {0x28, 0x3}}], 0x18, 0x4000}], 0x1, 0x20048805) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=',*', 0x2, 0xfffffffffffffffd) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000380)) (async) keyctl$update(0x2, r2, &(0x7f0000000540)='|x', 0x2) r3 = syz_io_uring_setup(0x819, &(0x7f0000000540)={0x0, 0x80, 0x10100, 0xffffffff, 0x1de}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000004", @ANYRES16=0x0, @ANYBLOB="0101000000000000000010000000"], 0x14}}, 0x0) (async) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) (async) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25050000000800020000003100"], 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x44) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x83}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x7d40c15f504d9cef}, 0x40050) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) (async) poll(&(0x7f0000000000)=[{r0, 0x1080}], 0x1, 0x2) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0xc4, "239de3c390910430238c93bd3dfa6d031052826de8ede8c692f72f85d3748d54d45800ac7e5b323cb00000000000000000fbaff6a7ad2c4205a67f96930a3ce4c9c02e26678831db80d0f474867a44b631338079729563fc59791f3d9091d82f0df5404f2ba9d3f3a3c065e6c8c03a0d5cc7501ae362401c89504c5983f7d3a1d00181e575208ed6ce73200e7835641c005d4e7745c66a36bbbe06addf5164136a677f5ed4fcbbcd2ddb842c92d8e0468c30e6da98bdebdd84563bc2249876a7e8b22042"}}) 14.053008413s ago: executing program 32 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x8000ffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) (async) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@prinfo={0x18, 0x84, 0x5, {0x28, 0x3}}], 0x18, 0x4000}], 0x1, 0x20048805) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=',*', 0x2, 0xfffffffffffffffd) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000380)) (async) keyctl$update(0x2, r2, &(0x7f0000000540)='|x', 0x2) r3 = syz_io_uring_setup(0x819, &(0x7f0000000540)={0x0, 0x80, 0x10100, 0xffffffff, 0x1de}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000004", @ANYRES16=0x0, @ANYBLOB="0101000000000000000010000000"], 0x14}}, 0x0) (async) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) (async) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25050000000800020000003100"], 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x44) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x83}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x7d40c15f504d9cef}, 0x40050) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) (async) poll(&(0x7f0000000000)=[{r0, 0x1080}], 0x1, 0x2) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0xc4, "239de3c390910430238c93bd3dfa6d031052826de8ede8c692f72f85d3748d54d45800ac7e5b323cb00000000000000000fbaff6a7ad2c4205a67f96930a3ce4c9c02e26678831db80d0f474867a44b631338079729563fc59791f3d9091d82f0df5404f2ba9d3f3a3c065e6c8c03a0d5cc7501ae362401c89504c5983f7d3a1d00181e575208ed6ce73200e7835641c005d4e7745c66a36bbbe06addf5164136a677f5ed4fcbbcd2ddb842c92d8e0468c30e6da98bdebdd84563bc2249876a7e8b22042"}}) 11.467339053s ago: executing program 3 (id=131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(r3, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70003400000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 11.33007804s ago: executing program 0 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x2, 0xc03}}}}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x50}, 0x1, 0xd}, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000"], 0x10}}], 0x2, 0x0) 7.324753323s ago: executing program 3 (id=139): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="11010080733336088dee1adba8c10423610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e200915f6eb5375fbe223dabe08cd70e4782437e406d1397413f2a0ef5f17dd06eeebd33eb707890dd5daaad426c9dde71b29afd6a99c79ad5996e8e7dff81a64dd5e321b22d76a2070807d228934e08a9ba4fe127664e768f3bb261dacb42346078156280b4975164825685f6c5ece972e57acb66413c624310a0ed18a612db9667c5357ce490d5fd79f17e4f42d8845801c"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40025b0c, &(0x7f0000000040)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES8=r0, @ANYRESHEX=r1], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000000)={0xc, 0xfffffffc, 0xff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000407010300f80000000000000200010905000100070000006eac000000000000000000000000ebffffff000000232049ed5872b8ab5b4d847314e5397c53c59c379e3a090083c725bba3c62ede96bf0f9b7bbb16449181cfc4f2e44ede11663299d999d63821020126eb630d84e4982033df75cbaca184ffdfd2217307000000f2517acf6961ec910bbe3de48f9d61c1c72907f3"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100677265746170000020000280040012000500130001"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x7, 0x40, {{0xe, 0x4, 0x1, 0x3d, 0x38, 0x65, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0xd6, [@rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @private=0xa010102]}]}}}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000300)={0x1d, r11}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0x58, &(0x7f0000002840)}, 0x10) 7.190863147s ago: executing program 0 (id=140): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1, 0xfffffffe, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) 6.471357128s ago: executing program 1 (id=145): unshare(0x22020600) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20c880, 0x0) mq_notify(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget(0x0, 0x2c4) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x2000, 0x0) socket(0x1e, 0x3, 0x8) unshare(0x22020600) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, 0x0, 0x0) r4 = msgget$private(0x0, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0x8000}, 0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x0, 0x4, 0xf, 0x1}) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000000)=""/123) msgctl$IPC_RMID(r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6.032016278s ago: executing program 1 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010601"], 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1d}]}, 0x24}], 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0x208300, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x8, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r7, 0x851, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0xfffffffc, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}]}, 0x24}}, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/513, @ANYRES32=0x0, @ANYRES32], 0x20e) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x6c00}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x400]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb17}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="b55fac88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="941bddbb96dd6cfeff3adfb684268bdaa04be35dcc8f389af886de9c00917d659245591a3dab728378d4830e2d0518b8e0d97e4f4828034ab7aa955bb9eeaffafc4fc5f26f0c3cdf384c2264e092976a4e353e67e84e4b455d955c1a886361d1a68f503015de7eccd0f7932e0800a369c73fe7afbce2b8a39041e5f2f412ccd20b90d2a99f997c0d25dc76f46cdea360160cf8e65e4ea7016ef38fe6a5c71030bc60832ef66c2ded455429f087c1fe00"/204], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 5.650690052s ago: executing program 3 (id=147): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000240)={0x0, 0x1f, 0x1, @thr={&(0x7f00000000c0)="83957447ffe45e5fe80ad0f5c59cff3f8ab618cc290a309e6a4f5fd2a4a5574d3253416472e7292a2a0af12f66075b71e7ac09b798753a30b51321423579f6899694588e93d2fbfaa3b7805f43642211a92c21d2dced0abf5db83e11192ea4533175e4abe7d4f402b61ca31ef4170d1082dc4bf2e4a34cf995d7ee55074d16491c40bba83041d0e623f6cdf5c82a82934fea1f2a9fc0c1f132cc3cab5ad3f62a7d835808e010dcd41feab2485bdc24c31e487713c3105bf114bc9b7e1f5d23f6b1347c86a3166438513154d0f54908edab60b5de946eb13906b421d59a9e15b54d3f75e2bdfb9f5bdecc22c45c788d2491", &(0x7f00000001c0)="c1661fde938b16589db53cce394bb4b0617d5a2ec1f785909fa8a3d9466ba98046af0f11fa5c041f4ff988b5829239b1bbab6252b23ac627d2f473366cb4d843d3ad409375238ef1decd95e3db7f9ba09d0898"}}, &(0x7f0000000280)) syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000300), 0x3, 0x600303) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000340)=""/63) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000400)=""/159) openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500), 0x41c240, 0x0) getpid() prctl$PR_MCE_KILL(0x21, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x101}, @in6={0xa, 0x4e22, 0x1, @private2, 0x2}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e24, 0x8000, @loopback, 0x48e}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, @in6={0xa, 0x4e24, 0x4cb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0xc8) gettid() write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, ']$$:/#'}, {0x20, '/dev/audio#\x00'}, {0x20, '\\{!@@'}, {0x20, '\\'}, {0x20, '\''}, {0x20, '/dev/dsp1\x00'}, {0x20, '/dev/dsp1\x00'}, {0x20, '/dev/audio#\x00'}, {0x20, '\xff\xff'}, {}], 0xa, "8e8bcf7a240be847529f5bdd1a32e47391cbd57bfdc99882375f38ae48401e755f0f80730cba1ea21646e453ac7a680fd52685453e17a0117ace14af38493ae33f5e85c9384767cfac7250a2422844d5bec857fc936e3f06ded45a8d9d66a9b060852d0b88273464e22e77bce40b39474eca79ea524efb60855e7337be287a70c29938d99414560298272e1b6a54f29aeb7ae40ee719f524abae955bb0ea92e87bd1c99b156d929bba1e1b459f83104961ca99f3f8df9ea9fa4f629ede40560fe4462cb54e89a2e8001860e0e05c5b75f0890f1b3a3c63024305c35f8bc705bdb2bd19931c3d530b2d3e4cd04e530922"}, 0x140) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000780)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000880)={r4, &(0x7f0000000840)=""/4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002a00)={'syztnl0\x00', &(0x7f0000002980)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x4, 0x6, 0x10, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x40000000, 0x3ff}}) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000002a40)={@dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x36}, r8}, 0xc) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000002a80)=0xfffffffd) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000002b40)=[@text64={0x40, &(0x7f0000002ac0)="400f01f8440f20c0350b000000440f22c0c4c2c59154c80d66ba4300ec48b808000000000000000f23d00f21f835100000060f23f8660f38825bc1430f21f166440ffe7a0f410f01c2c7442400e1000000c74424023df00000ff1c24", 0x5c}], 0x1, 0x1, &(0x7f0000002b80)=[@cr4={0x1, 0x482}], 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000002c00)={r5, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000002c80)={&(0x7f0000002c40)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000002d40)={r6, r9, r10, 0x0, 0x0, 0x3, &(0x7f0000002d00)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000002dc0)={0x7, 0x0, &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_tcp(0xa, 0x1, 0x0) 5.50306751s ago: executing program 3 (id=148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(r3, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 5.229528488s ago: executing program 1 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x300, 0x1100, 0x3, 0x0}) unshare(0x2c020400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lseek(r6, 0x5, 0x1) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000002c0)=0x1, 0x4) r7 = socket$inet6(0xa, 0x80002, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r8}, 0x38) r9 = syz_open_pts(0xffffffffffffffff, 0x40a000) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000100)={0x9, 0x2, 0x2595, 0x209, 0x14, "f6ffb8b12abce3ca47193cd69d2f596a98aa2c"}) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000140)=0x6, 0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x5, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000140)=0x7, 0x4) ioctl$TIOCSBRK(r9, 0x5427) syz_usb_connect$uac1(0x6, 0xa2, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r0], 0x0) 4.095897693s ago: executing program 4 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x24040010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x10}, 0xc) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='W', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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"/917, 0x395}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb0", 0x20}], 0x2}}], 0x2, 0x40000) close_range(r1, 0xffffffffffffffff, 0x0) 4.042060769s ago: executing program 0 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b9000000100001000000000000a1b0000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a0104000000000032ebda24c8948029000b4000000000300004802c00018008000100636d700020000286c51f7fe3c996dcc2800c00038005000100ac000000080001400000000c08000240000000030900010073797a30000000001400000011000100000000"], 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000500260001000000050025"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) 3.58981578s ago: executing program 4 (id=153): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x9ef, 0x4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xc41) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="8e00"]) 3.370763687s ago: executing program 0 (id=154): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x3, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000580)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0801}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x400000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x13, 0x2, 0x2, "0d9a5c6dd40df16bca7562d81158d50bc7cef1c15c32000054a800000000fb00", 0x31384142}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1201000000000010ac0592024000010203010902240001010000000904000000030102000921000000012200000805"], 0x0) r3 = getpid() r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0xffffff2e) readv(r4, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/102, 0x66}, {0x0, 0x500}], 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'veth1_to_team\x00', @multicast}) r6 = syz_pidfd_open(r3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x41015500, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0xd34}) getsockname$l2tp(r10, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000540)=0x10) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0xb, 0x32165b32, {}, 0x3, 0x5, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x772}, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, r9, 0x3}}, 0x48) 3.209630708s ago: executing program 4 (id=155): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x18c, 0x203, 0x120, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "8186"}}, @common=@mh={{0x28}, {"0b83"}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'sit0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x360) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x9403, 0x3002, 0x2b8, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x8, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xffffff00, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 2.956650136s ago: executing program 4 (id=156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e00)={'filter\x00', 0x7, 0x4, 0x3f8, 0xf0, 0xe0, 0x200, 0xe0, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0xa, &(0x7f00000003c0)=[{0x45, 0x8, 0xe, 0xfd1}, {0x7f, 0x6, 0x3, 0x8}, {0x10, 0x0, 0x0, 0x2}, {0x3, 0x40, 0x1, 0x100}, {0x14, 0xff, 0x90, 0x200}, {0x4, 0x6, 0x1, 0x7ff}, {0x69, 0x7, 0x4, 0x2}, {0x0, 0xf9, 0xb, 0xc}, {0x0, 0xd, 0x81, 0x5}, {0x0, 0x27, 0xb, 0x4}]}) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022050000713ec03b949ecdb30000"], 0x0}, 0x0) 2.553890084s ago: executing program 5 (id=122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r1}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x30, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x88f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0xb2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x4, 0x8a}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x300, 0xfd, 0x5, 0x3, 0x20, 0xbb}, 0x44, &(0x7f0000001140)={0x5, 0xf, 0x44, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xa, 0xff0f, 0x101, [0xc0, 0xffff30]}, @ss_container_id={0x14, 0x10, 0x4, 0x13, "172d5e3b2ef118df698fefe6a99632fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "18e87ada12000ed8717efd145ca7f874"}]}, 0x8, [{0xfd, &(0x7f0000001240)=@string={0xfd, 0x3, "25d28abdb0ad8c4e4d3f7f7e4b792d1506e0b8242cfd94bc87be17367ec3c06b02a4e00c7d4c723c1ea401b93c0fe358c43100cc40a90a0cbc316ec3fc0b662b440d83acb202f38aa3a1faef17fd5a208fddae0da39c59bcdb50cf461e895c74409731da91e4ad6fb48748eaf94867e757bce11c9b24b1298e3760af36c7feb26159b8f42715f22452de14162596779c6a17b0993bc155d9aa92b32dbc119a00cd950306a7e9fdbf2c302cb14148dee21354905baf808de7ec707ce5d9eac86040a29b335bd2d1072dff771d363db42dd3e5d41b0156db6256637360f25c12cc9d0eca47a6d30c6ae3443ab8b59b39ff9556dac0369908cabdb4e5"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x801}}, {0xd3, &(0x7f0000001340)=@string={0xd3, 0x3, "803f9f384f0c413c70db476aabb0b60ae3a2e7ce65c6825d60953bc6ac6db3b3d50a55b31cf0c72ba60149fc4657031765083eaf6cc0cadd83bc9d38ddfc6db94870d9b750e2ef0176d427222133a26f99a30aa0a7df0d6ac35f9b8fca111219152e571a4d19a2a354f8a7594e9cef8c96353612919807628bb3d281c4ec1a6f989f65f265a82b619db5c86f4b13b813035b5a26f88ddaac3ef525055cd0b6ebcf14bf757fd9b4752f22962f6cfa454e00e97db02538009e83c6e4f8628887c251759449bcaa04bdaf1c9538905a117e5f"}}, {0x3b, &(0x7f0000001440)=@string={0x3b, 0x3, "3d6cfc24231a6100f899392c833fa845b70bc49a7e320b2149d2f233b8a9d0cfdbeebca05e2c30ff086531ff027d894b768ef1752462e9e9e3"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x81d}}, {0x99, &(0x7f00000014c0)=@string={0x99, 0x3, "6f09e276a2c5fc2f9b79f04b8f033cd12b53f30aa8e2a4eeeabf430bd771c1d8fedabd99a8809fb6b35697e69adcde92940fb7db10c96041e4c33d30a87e1a9ca6b2dfd1e12ebee7e3891ff2593b80ca4054b3f60fa7d59cec6f51ccdc620e569c8765cce861c8b4d937cccea8ebba4fe4d34e0596257b55d1d4b562b3918ce1c34b1cfe15ab9ea7fd5515108b34cccdd2d313006d0fa7"}}, {0xcd, &(0x7f0000001580)=@string={0xcd, 0x3, "6210ea70b9c80afedff2bdb570c69b1f806785da83c515fdac38ebdfacf5f9f372027011754d2cb86f03a2b2cd17962ab8b408673bd4b49dc24d72e4be366c6457520b92308238b20b46911e64e55b1217b9d1cff5ef88df80954d1d6f7f6362353fee3118bf9645bcb4022168da6b5c1d18472c044324e3cc7e2852930fdae3a8a1d0dae0f69b9addb54c88322477f8a71171572fd99bf433b14a5d6b99b47e98924ee5121637cc279109ff7934cf7e6c185a6206526396dcc5d1a6b64850a150b9d0bc90ecc167aae5b1"}}, {0xb1, &(0x7f0000001680)=@string={0xb1, 0x3, "f782645852e3de68e34d6a076345f796ab2ca85887c2cfbbbedf95550c21b6a4632a66b404e47fbf6daf4ea847a435237a4e94685c9de5251a823effc5b2a85d40b70991c90865f98a7528f4c7015fa3810b1b575c47b2306c45d851d1119d25540fb83881c160e4cc725ffdd8c5a571d7f6aa2d6c98a46a88916231593e0f20d98674a2c19c7c7e010b2f0fce891d5bb09a80b5c858780fa1d10be1672c2a6720e55b8469a81aa7c31ca405a16dfd"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r4], 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0xc0086202, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x3) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4048890}, 0x10044000) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4048890}, 0x10044000) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r8, 0xc018480d, 0x0) (async) ioctl$HIDIOCGUCODE(r8, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0) r9 = inotify_init1(0x0) fcntl$dupfd(r9, 0x0, r9) (async) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x5452, &(0x7f0000000000)={'tunl0\x00', 0x0}) 1.830724576s ago: executing program 1 (id=157): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="080001"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000018143276effcb6fe0012000a140000001100010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x7, 0x1}, 0x8, 0x0, 0x3, 0x0, 0x4bf, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0f01306f650fc71f650f798900000000b805000000b9bef06a9d0f01c1650fc71e0f214f363e660f3882a7503eec80c4e1fe6f878e60000066baf80cb88038408def66bafc0c66ed", 0x48}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 1.553933928s ago: executing program 1 (id=158): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "036c00", 0x48, 0x87, 0x0, @private1, @mcast2, {[@dstopts={0x76, 0x7, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x4006, 0x54, 0x5, [0x40]}}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) 1.22754744s ago: executing program 1 (id=159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000006c0), 0x103200, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x28000) r4 = syz_io_uring_setup(0x1b3d, &(0x7f0000000280)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(r3, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@getneigh={0x14, 0x1e, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x100, 0x1, {0x0, r10}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x23}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r11, &(0x7f0000000a00)=[{&(0x7f0000000200)="03e6b107e445a7d8276efefff13dfeff", 0x10}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000280)="b3", 0x1}, {&(0x7f0000000780)="b5b0", 0x2}, {&(0x7f0000000880)="6d8492", 0x3}, {&(0x7f0000000980)='=', 0x1}], 0x6) r12 = syz_usb_connect$uac1(0x7, 0xa5, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010100000904000000010100000a2401000000020102132406000006000000000000000000000000000924030000000000000924050000f8431cfd09240300060300040006240504"], 0x0) r13 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r13, 0x4030582b, &(0x7f0000000080)={0x1f, 0x39061c595a41012a, 0xa0b}) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r14, &(0x7f00000001c0)={0x2020}, 0x2020) syz_usb_control_io$uac1(r12, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x24, 0xf2, {0xf2, 0x31, "2bb5dbc59762b4e204de2df64acc1ef5dc8b21383c8954e02094a0e7fb9c6f09848c46af6af3cbbba82875a388671dd73b53990abdfe21ca7d35c19d137c01b95024ab73e05ee668beb330ddf365bebcb01ff898197145b141f19bb7122b3f16fbfc9bb8ecfe095214ed899a09df6e8b3c9c67262a4a9f18c26e9063e64c3e42535d4c3677a05a1286fb61195c61a43177cb60d7ca45bd13a015badb646cab86e873c00172f537363785838820e7a0ab4d44101964561710ad58e0b041250e19d8100a7d194691aa0ffb57cf4ed173aae15828ebdf15da2c5b9496f30efe4622976db0b8861a44bd1d0ed2e6dc38874a"}}, &(0x7f0000000400)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "428f5d5540016fd0a3fc863f8e7661beba4e9359fa7222385b76a11c2d7e77fa52f8dea191a279d3efd883c842ef9a7a133da9f0217fe3ecc0a1fc6a40e55161a489c33f618ff9e1134c36f69d75e42c2752f3adfc40941b40b1049c9cffd1aa08db9a575b31733b791283fc50a6ff4d33e823baafbee2bb278dd1c2505413f97a84ec718b3b30677ab76c641581da8adf6eb5011d44010d8ed9bcfc6c367add1e"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200e2d000000e08fdafb544c71bad58509d4050a1cc2c7b38d9a25f7eccb4aa41bf28664da14c5de726eba0f0417da821c16c1"], &(0x7f0000002340)={0x0, 0xa, 0x1, 0xc5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x81, 0x2, "de00"}, &(0x7f0000002300)={0x20, 0x82, 0x3, "03e146"}, &(0x7f00000002c0)={0x20, 0x83, 0x2, "0011"}, &(0x7f0000000300)={0x20, 0x84, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "000200"}}) 846.772313ms ago: executing program 3 (id=160): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @random="4057673ab0ff"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000008c0)="3a0ea7f7425af62ea8e60f", 0xb}], 0x1}}], 0x1, 0x40080) splice(r6, 0x0, r5, 0x0, 0x800000000000045, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd390f5f61a7c6", 0x22, 0x20008040, &(0x7f0000000000)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 730.554659ms ago: executing program 4 (id=161): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b41640e"], 0x0) 582.561407ms ago: executing program 3 (id=162): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0xcf99f52d353901b4, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6c9312003000010000904d90000155e5c20082406000017e9450524004af60d240f010f0000007f000700800c241b07000100090540000705241580c012241a92070707240a0105ad0715241200b42d5dbb41d51a3fe4a804b4860af26800a317a88b045e4f01a607c0ff"], 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 251.834103ms ago: executing program 0 (id=163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xe, 0x6, "ce8349", 0x50, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[@hopopts], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "a1c7fa6384b2f3ff913dee4ceb920e832da4e00ea2262c1d", "ec1f256d0551fde0057bef91adf64a9804a9231b515e2ca0ca9f19ec6e7b4d06"}}}}}}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x5, 0x80]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x540, r0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x8}, @broadcast, @random="0ecd7f2e098c"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x9}, @broadcast, @random="3ef8a794ebad"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x36b, 0x33, @mgmt_frame=@reassoc_resp={{{}, {0x8}, @device_b, @broadcast, @random="e61682d73c1f", {0x8, 0x891}}, 0x4604, 0xa, @default, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x1, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8, 0x7, 0xf4}}, [{0xdd, 0xb5, "316770d4172b2343ad62407c7bfbbc77d88285751966c7695d702e036cf60ec1cd2e7a9d6f4aed96cbd425755c1fb84fc835f19c635f854d4cbc85aa10436cc87c0623dd604d7081422c15a6053edcfad7e3a99504009092f4991e790753e226888f9c55800af154cfadff8fafc59ced040fdbf12acdf5622493216f4fc28c62ea686bb92a07e1504cbb5643f48b635364a544771521f3aaa2fbcfc64b32a8285425e4f07eccf663a436733d238620cd880dbb3b9f"}, {0xdd, 0xb2, "9c997490eea2a2803966ab220d3852a82d0eb057e5f5d56cf651a13c69079297393763ed990f08221c0a364a528c45eba4e1f29d8c4c9fc48a9f9c8cce4a07f110fb088487259907483380a6d95c2c61fb9de69b092f16cb7da3d3ed5fd052de56cb67fa4fed6f2a21d3a9dbc02d8e916995d09a0662b1053f57458b10d1d9acc301e643c900f2d9182a7e11583cdb129e028914a6d949425d4c457f2698c506677def519154761b1186ebf4750bb698343d"}, {0xdd, 0xdc, "4b265e241d0dc70c4332cdaaad179c8f9816277b9ad886ba47d818adb680295338c9e93947f964dd260ee86a5b88d672fd172f602a3f67097d4473bf78fabe5e3d0d9f2e8cc0912f76738b4e513625971b362bed07ce672032cee0769ce27a0bcf6b4b7a001ef30ce027ecf2f7d244dffedbd44aeb08eee8b6da7077ffc19bf67f258afa582986ae09661530d0216e8080f9a99285e1fe04ed74e76a9546060a849530264274277d177207b56706fb30340b2b602984f6132ce40b2c901bf9269f769e84a7b1f7f42ebceacb87c351943ba9b5dc2168fe615a1f230f"}, {0xdd, 0x41, "6d10cd23362e3039fb992e2834c0b6776676d37aaacd205dab49db7369a7fa6a4d4dcb4e9e96fb045a3c74130862408be0470df38d9ebb7c11fad9fea1d02273bc"}, {0xdd, 0x9f, "5c6c363be6409425d53261916dbf0045f05c2459b14da750157f018d154ff8ee130ac04368990f380cdef201114063962fcbe2419c20ca43384ee0e6ea34093a3ac9f8f8351694f273970b313d973256b4e5b949faed3074a7493bc6cf435140798e621e0fdb607c6c47c50dcd9ea77aafde49a852a56c0a4ca40d45f4a14d82b64dc181137ae01181de2535a8ad05ce96d265825fcfbfa01565beecf106a0"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x15b, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x6, @random=0x100, 0x4a86, @void, @void, @void, @val={0x4, 0x6, {0xab, 0x7, 0x0, 0x3}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x65, 0x64, 0xe4}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x3, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7fff}}, @void, @void, @void, [{0xdd, 0x2b, "ceb4c6716387bcb298e7a99eeacddbebed85f04ea4d8173b1d032b73342eb9bcead241a10dea4f4b30ed2b"}, {0xdd, 0xd6, "dd92b83576b225be50b6c5641ee3fda8373f58cbde5321082faf91cc178df4b2a8a27aa374ceac110854c25acac7e9cf5afd95d43f66eaeed399656c2a91829747296eb4d18b266e0eb7f1f07581fd41d258303a147827a6ea88f3ded6ad7d3e31ac2bb2938794cdeabeb6c86f1ee1aeda09a170035972c3323aa6b6b6a9725b2b2c266fb9a4e95ecd8f4513c4a6b867e0b8f00b4f36f3d53305750a852e1e6a4d72c8c207fbe51759eb1ad1be34fdbdd686bd2bfc5e05ab8c5bfee7681664ae716da1e9b20c99e90969093c69b4d96a650704817deb"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x540}, 0x1, 0x0, 0x0, 0x800}, 0x4014) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1f4, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x7, 0x0, {0x80000000, 0x8, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0xc, 0x5}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x60}, {0x18}, {0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x48, 0x1}, {0x24}, {0x6}, {0x16}, {0x36, 0x1}, {0xb}, {0x30, 0x1}, {0x2, 0x1}, {0x3, 0x1}]}, @NL80211_ATTR_KEYS={0x160, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "89f4d2bbf4fd885c78f4830b1b"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x87a01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "271a240ba2"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x6, 0x4, "e95c"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a11d0519d2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, "ef"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "76e8cf0a03"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6a7de1d7642ba5f4b2971768a6"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "33d58d915a"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3bac123062b5ac10d93d49293c"}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x0, 0x0, {0x7f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0x34}, 0x1, 0x0, 0x0, 0x80048d6}, 0x92) 66.649342ms ago: executing program 4 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x92801624}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x6bc, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x31}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb60}, @NL80211_ATTR_FRAME={0x640, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @random="191319869850", {0x2, 0x2}}, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x30, 0x1}, {0xb, 0x1}, {0x48, 0x1}, {0x9, 0x1}, {0x12}, {0x36, 0x1}]}, @void, @void, @void, [{0xdd, 0xd8, "2865d315a09af6284e6e7ee826e8d54db76b3c1ed7ef58236c938bd77f3bc0de1f0b975af1ca8a33f464439d2e4617257cf59af119a797819bc2a66404c0d6db434b5e374f14f74c8bb09901fc4d530cb411e24fe030300577449c9246f31da916d2834d25e91d5df19d80b49982ba210d796e0b960bfc3b1f963f124153b58a7e86afa5062079c082c7240096272ecd057db7e663f1b69c0699f7cf4ccf243b2cb21ae6fdbc9d2ac7d964c721f6675c8b331fd8d6f248ff8a6f2facceed3e98aa0be26cb44799b71154a9460eff6ed1e4925f2d7a609240"}, {0xdd, 0x9f, "42a717161201f4ceae80b0be56da051253bb615ac2a2bb3230590b3785e2ef8397f725efdb859ca5c5cdbe4a3cdab4afdde598890f4dd0011d7cf2ed7d0f8a8787a42505be71ea832579756af8bc4645b37dbfbeac12be7e2c280b4575111ab434ae99ba65c9f7ba181ce833601733b6ff392baba6367e4b1794300ff9eb989850ecf41d3c8f001d2bd816b6046e838a9cebb0c7f59e60c9f8e05dc4c3e6d1"}, {0xdd, 0xb9, "34d7eb708254aa42e6a35793c190b714105db1b6dda261fbf86b9269dd24aba2ab77c3888b05c60051468e08a463f1ef06acd54cd127c63844efa4b351005825a70800e49f360e3b99b54f323dc4ae14d126d13227510c89b10a8984f721fc8a16b6f49d4c65c1081bfd8c7aaa75c4a2145d5843f40a4fae6423bd99fd08fb4b042b973ab57d16d6b2d05a19fb039d1d9075b4df2fe22393feaaaae2f441440f3f175c2e711f6c740923964ccfc1cbf0cddce75fb574acf9ad"}, {0xdd, 0xc0, "76176cfe9d3e44be68b6921fe57998d0457cd0d89fd0cfbd7f5ff561a969ec10b193f654790dd30c0994ebb28b595e686981bf38c242d5a8cc1ef41a313a2398fa5b09d8ac8fe60136babac36b90b927296f30329c5a53e00b736e52d9683e1939269477ebeca1fd1515f176f244f74203de20f8f6b82bd46bdbe5f63056bdd3a537a9e50cb0c3a7d01e4db055a1e04134069adbe0c9167952abcd1938d4d4e5724f0502ca5ba557e1cc572d02718d51a8f8b824b9e3bb715533c8b3bfb80426"}, {0xdd, 0xbc, "94c7508a0a5edb070c4b8eeb96fdc529f2b361b6ca598d54081fb15ac948a7d18b5c281fc0c19c966a2db6bbfe8c3b4f437d10fcee8e9e9acd064a2820831269e207e0dddb2d63f45db7038a1274cad3ce5960e1fff098109d576a5b8853dc73f6c87b566b62442db4abe543a1bf8f798ede895aa30d2710de9f0969e9eff125e43d80b4bf2bf1986a8529f769ddaed9c99759a1a58062e3c609e0a2d4dc5d1ec9ec01244b9a249057863a8072cf395fc02391221f482daa2286eb2f"}, {0xdd, 0xc9, "ca151633482cf196b3fcac34c5415e41235aac024f2471c9ffaa741987b243208bceb2cb3a98cefcedb4bd8f689676296415607b1283f943c74f9894da6a75539b649b7c6c47761b331af94dc0a9896269c8419c9c5b3124134cfcf0423c9656ead1fab345560168c8edbe6ee4988df7bca2b22d5a4611cd254775b63ab21f88c565fa71ae48544fa7b5cb93c4d39647b57d405f23d2e57d125980749d881a7016d7f9f09b967d066fc26eb184578bf0fa036b7c5a854e85d72c5e55c738e2049eb8a63ab7ccc27a9b"}, {0xdd, 0xb0, "5538aabbe2f2c125e06934d8eb451b918b6e814aac7607db170a5b1382c93fa2b0e750ad36bd9abcbfa3ab908539c0724a3206c68dd9cdf69e2cb434df357ce55399109a8c8c57ebdb144ae6b1e436d0ccc09c6819cfe9920385de2b8d6a3b2e41b1227452272906ab450b3c4ec71cfca8a1bc0aa14f0201782798ebbaba948fd7dd48954c911cc750d7225c116370b62165e03248757905446d7a7fd568eedc3176423031ca9b102d9701ce8201c193"}, {0xdd, 0xdf, "92f986fe57853c1369fb28b80308e3abd7ad7f49b5e3047b1c03666dd0b9354d58dc7dcdcb6981aded8a5ee86c0b9b4d4462c938b0bbf523d10f8e74c97bccfe5d7c562c8b3d1c21e4f005e31953537432481cc9a229456b5d48a2642b56d84b149de9d29f010ecc2936a349a6a30038541805d7e9db08a36cb0d9349b2a03c4c3a3ff39f02722e7d844311e04140ac280556b62289aab53c4127f3ee5ce438b357fca0d0bab0706e251360d2d39aa6e7531b0288b3884e7c2f1964ade021d0f403e3f294d5146699b93d4019d6e78db1ccac4e12421c054420e40a6c41eb3"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x4002000}, 0x4000000) r9 = socket(0x2, 0x3, 0x67) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000007c0)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xf, 0x10}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xaa6bcb446f30dd89}, 0x0) 0s ago: executing program 0 (id=165): fchdir(0xffffffffffffffff) (async) mkdir(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2143) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000200)={0x0, 0xc2, 0x80, 0x20203843, 0x3, [r5, 0x0, r5], [0x80ffff, 0x1], [0x0, 0x0, 0xfffffffe], [0x9]}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x1903, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x29) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 72.278700][ T5824] cgroup: Unknown subsys name 'net' [ 72.415747][ T5824] cgroup: Unknown subsys name 'cpuset' [ 72.424097][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.996551][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.439685][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.451379][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.460174][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.474002][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.475317][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.492920][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.494688][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.509903][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.519490][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.521981][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.530232][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.539976][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.544049][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.557032][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.557404][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.566410][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.573646][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.579415][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.586307][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.594586][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.603534][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.610368][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.617732][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.631579][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.635194][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.656053][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.663956][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.678926][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.678956][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.695329][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.176723][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 77.287258][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 77.330393][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 77.358037][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 77.426752][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.434682][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.445509][ T5857] bridge_slave_0: entered allmulticast mode [ 77.454742][ T5857] bridge_slave_0: entered promiscuous mode [ 77.468509][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.476177][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.483998][ T5857] bridge_slave_1: entered allmulticast mode [ 77.491386][ T5857] bridge_slave_1: entered promiscuous mode [ 77.547937][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 77.657878][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.705015][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.712715][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.719947][ T5855] bridge_slave_0: entered allmulticast mode [ 77.728083][ T5855] bridge_slave_0: entered promiscuous mode [ 77.752189][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.776835][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.784709][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.793189][ T5854] bridge_slave_0: entered allmulticast mode [ 77.800012][ T5854] bridge_slave_0: entered promiscuous mode [ 77.808119][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.815480][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.823987][ T5855] bridge_slave_1: entered allmulticast mode [ 77.831245][ T5855] bridge_slave_1: entered promiscuous mode [ 77.882862][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.890466][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.898576][ T5854] bridge_slave_1: entered allmulticast mode [ 77.906829][ T5854] bridge_slave_1: entered promiscuous mode [ 77.976855][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.988729][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.998508][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.006943][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.014843][ T5852] bridge_slave_0: entered allmulticast mode [ 78.021921][ T5852] bridge_slave_0: entered promiscuous mode [ 78.032407][ T5857] team0: Port device team_slave_0 added [ 78.040124][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.047587][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.055005][ T5856] bridge_slave_0: entered allmulticast mode [ 78.061931][ T5856] bridge_slave_0: entered promiscuous mode [ 78.071094][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.083568][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.101105][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.110947][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.119067][ T5852] bridge_slave_1: entered allmulticast mode [ 78.126490][ T5852] bridge_slave_1: entered promiscuous mode [ 78.145880][ T5857] team0: Port device team_slave_1 added [ 78.152639][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.160209][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.169001][ T5856] bridge_slave_1: entered allmulticast mode [ 78.176468][ T5856] bridge_slave_1: entered promiscuous mode [ 78.265312][ T5854] team0: Port device team_slave_0 added [ 78.279183][ T5855] team0: Port device team_slave_0 added [ 78.288897][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.300812][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.311506][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.318993][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.345719][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.360860][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.372524][ T5854] team0: Port device team_slave_1 added [ 78.380352][ T5855] team0: Port device team_slave_1 added [ 78.406892][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.414990][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.444230][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.459191][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.525380][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.532808][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.559925][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.574586][ T5852] team0: Port device team_slave_0 added [ 78.584072][ T5852] team0: Port device team_slave_1 added [ 78.608901][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.616058][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.643380][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.659011][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.668413][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.673564][ T5849] Bluetooth: hci0: command tx timeout [ 78.696519][ T5848] Bluetooth: hci1: command tx timeout [ 78.708310][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.744763][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.752510][ T5848] Bluetooth: hci3: command tx timeout [ 78.757899][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.761891][ T5848] Bluetooth: hci4: command tx timeout [ 78.784518][ T5849] Bluetooth: hci2: command tx timeout [ 78.796630][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.813294][ T5856] team0: Port device team_slave_0 added [ 78.820037][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.827642][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.854666][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.888911][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.896090][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.922747][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.940150][ T5856] team0: Port device team_slave_1 added [ 78.977464][ T5857] hsr_slave_0: entered promiscuous mode [ 78.986166][ T5857] hsr_slave_1: entered promiscuous mode [ 79.035604][ T5855] hsr_slave_0: entered promiscuous mode [ 79.043023][ T5855] hsr_slave_1: entered promiscuous mode [ 79.049306][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.057479][ T5855] Cannot create hsr debugfs directory [ 79.088044][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.095232][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.122027][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.136954][ T5854] hsr_slave_0: entered promiscuous mode [ 79.143510][ T5854] hsr_slave_1: entered promiscuous mode [ 79.150563][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.159263][ T5854] Cannot create hsr debugfs directory [ 79.189730][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.197122][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.223355][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.249828][ T5852] hsr_slave_0: entered promiscuous mode [ 79.256786][ T5852] hsr_slave_1: entered promiscuous mode [ 79.265299][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.273421][ T5852] Cannot create hsr debugfs directory [ 79.405855][ T5856] hsr_slave_0: entered promiscuous mode [ 79.415563][ T5856] hsr_slave_1: entered promiscuous mode [ 79.424325][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.433904][ T5856] Cannot create hsr debugfs directory [ 79.728850][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.747314][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.768335][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.784735][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.827729][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.855503][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.866589][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.896921][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.925275][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.937973][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.964441][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.998870][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.024596][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.040515][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.050915][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.065082][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.176778][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.190281][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.205336][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.220568][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.276675][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.353196][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.406387][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.413852][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.426734][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.434496][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.485352][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.548168][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.565909][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.579217][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.616045][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.632971][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.655697][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.663072][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.707271][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.719944][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.727235][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.737494][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.745043][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.753394][ T5849] Bluetooth: hci0: command tx timeout [ 80.759578][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.766953][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.774561][ T5849] Bluetooth: hci1: command tx timeout [ 80.807935][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.818901][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.826251][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.835078][ T5849] Bluetooth: hci2: command tx timeout [ 80.842612][ T5849] Bluetooth: hci4: command tx timeout [ 80.843195][ T5848] Bluetooth: hci3: command tx timeout [ 80.853537][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.876161][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.883709][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.947883][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.983655][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.990889][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.039237][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.046927][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.075925][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.131533][ T5857] veth0_vlan: entered promiscuous mode [ 81.167052][ T5857] veth1_vlan: entered promiscuous mode [ 81.213088][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.225410][ T5856] veth0_vlan: entered promiscuous mode [ 81.249117][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.262428][ T5856] veth1_vlan: entered promiscuous mode [ 81.296246][ T5857] veth0_macvtap: entered promiscuous mode [ 81.306897][ T5857] veth1_macvtap: entered promiscuous mode [ 81.316085][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.384628][ T5852] veth0_vlan: entered promiscuous mode [ 81.400994][ T5856] veth0_macvtap: entered promiscuous mode [ 81.425872][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.445674][ T5856] veth1_macvtap: entered promiscuous mode [ 81.476096][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.500380][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.513411][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526062][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.537082][ T5852] veth1_vlan: entered promiscuous mode [ 81.547828][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.558212][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.568084][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.577018][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.599856][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.611281][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.623667][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.634766][ T5855] veth0_vlan: entered promiscuous mode [ 81.648534][ T5854] veth0_vlan: entered promiscuous mode [ 81.660455][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.670008][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.679856][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.690194][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.707762][ T5855] veth1_vlan: entered promiscuous mode [ 81.721028][ T5854] veth1_vlan: entered promiscuous mode [ 81.802819][ T5852] veth0_macvtap: entered promiscuous mode [ 81.836641][ T5852] veth1_macvtap: entered promiscuous mode [ 81.894212][ T5854] veth0_macvtap: entered promiscuous mode [ 81.911936][ T5855] veth0_macvtap: entered promiscuous mode [ 81.920072][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.923097][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.930077][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.947781][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.959996][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.971089][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.982333][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.000666][ T5855] veth1_macvtap: entered promiscuous mode [ 82.022720][ T5854] veth1_macvtap: entered promiscuous mode [ 82.047425][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.060756][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.072442][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.083522][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.094379][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.117595][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.129538][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.140505][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.151498][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.162649][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.174873][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.186662][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.220979][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.234356][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.245093][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.255812][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.265750][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.277272][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.288620][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.299914][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.311225][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.321558][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.332819][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.343112][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.361979][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.372631][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.384186][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.395997][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.407570][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.413244][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.426298][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.429522][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.438150][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.453269][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.469751][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.473538][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.478326][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.493282][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.505153][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.514389][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.530762][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.548161][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.558662][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.569443][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.579444][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.590012][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.601544][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.612211][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.623621][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.664039][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675649][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686469][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.697015][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.714945][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.723835][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.764311][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.832511][ T5848] Bluetooth: hci1: command tx timeout [ 82.832827][ T5849] Bluetooth: hci0: command tx timeout [ 82.873576][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.890361][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.919835][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.922226][ T5849] Bluetooth: hci4: command tx timeout [ 82.933822][ T5849] Bluetooth: hci2: command tx timeout [ 82.938831][ T5848] Bluetooth: hci3: command tx timeout [ 82.951796][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.987950][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.013095][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.105379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.114044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.216043][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.226951][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.300771][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.322396][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.439321][ T5907] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 83.479968][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.602719][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.811041][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.841354][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.891510][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.932706][ T5893] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.949419][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 83.950460][ T5925] mmap: syz.4.9 (5925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.964715][ T9] usb 4-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 83.982044][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.991161][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.993339][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.005612][ T9] usb 4-1: Product: syz [ 84.023881][ T9] usb 4-1: Manufacturer: syz [ 84.028718][ T9] usb 4-1: SerialNumber: syz [ 84.041055][ T9] usb 4-1: config 0 descriptor?? [ 84.056988][ T9] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 84.071520][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 84.085884][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.115442][ T5893] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 84.124622][ T5893] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 84.135967][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 84.153600][ T5893] usb 2-1: config 1 has no interface number 0 [ 84.160228][ T5893] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 84.175909][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 84.185481][ T5893] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 84.201383][ T5895] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 84.216542][ T5895] usb 1-1: config 0 has no interface number 0 [ 84.225710][ T5895] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 84.242917][ T5893] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 84.252764][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 84.259216][ T5895] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 84.279049][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.291194][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.303589][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.308198][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.322185][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.331906][ T5890] usb 3-1: Product: syz [ 84.336528][ T5895] usb 1-1: config 0 interface 167 has no altsetting 0 [ 84.343244][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.344561][ T5890] usb 3-1: Manufacturer: syz [ 84.359036][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.382871][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 84.398219][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 84.411116][ T5890] usb 3-1: SerialNumber: syz [ 84.418569][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.431404][ T5890] usb 3-1: config 0 descriptor?? [ 84.434714][ T974] usb 4-1: USB disconnect, device number 2 [ 84.447226][ T5895] usb 1-1: Product: syz [ 84.452525][ T5895] usb 1-1: Manufacturer: syz [ 84.464055][ T5895] usb 1-1: SerialNumber: syz [ 84.470807][ T974] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 84.513714][ T5895] usb 1-1: config 0 descriptor?? [ 84.523619][ T5916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 84.541084][ T5916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 84.683658][ T5890] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.737843][ T5934] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.772599][ T5895] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 84.781011][ T5895] usbtest 1-1:0.167: probe with driver usbtest failed with error -22 [ 84.824802][ T5895] usb 1-1: USB disconnect, device number 2 [ 84.859275][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.879128][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.894784][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.905294][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.913876][ T5848] Bluetooth: hci0: command tx timeout [ 84.923064][ T5848] Bluetooth: hci1: command tx timeout [ 84.941417][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 84.953708][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.963313][ T5932] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 84.993484][ T5848] Bluetooth: hci2: command tx timeout [ 85.000015][ T5848] Bluetooth: hci4: command tx timeout [ 85.001832][ T54] Bluetooth: hci3: command tx timeout [ 85.103894][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.149947][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.199538][ T5893] usb 2-1: USB disconnect, device number 2 [ 85.205918][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.208397][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 85.253406][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.346916][ T5890] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 85.357323][ T5895] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 85.407029][ T5890] usb 3-1: USB disconnect, device number 2 [ 85.531543][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 85.549617][ T5895] usb 5-1: config 0 has an invalid interface number: 81 but max is 0 [ 85.560612][ T5895] usb 5-1: config 0 has no interface number 0 [ 85.572506][ T5955] netlink: 45 bytes leftover after parsing attributes in process `syz.2.14'. [ 85.583483][ T5895] usb 5-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 85.607110][ T5895] usb 5-1: config 0 interface 81 has no altsetting 0 [ 85.616309][ T29] audit: type=1326 audit(1735481378.103:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 85.646320][ T5895] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 85.665946][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.678060][ T29] audit: type=1326 audit(1735481378.163:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 85.710254][ T5895] usb 5-1: Product: syz [ 85.715001][ T5895] usb 5-1: Manufacturer: syz [ 85.719738][ T5895] usb 5-1: SerialNumber: syz [ 85.763124][ T29] audit: type=1326 audit(1735481378.173:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 85.795441][ T5895] usb 5-1: config 0 descriptor?? [ 85.821617][ T5940] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 86.002262][ T5968] bridge0: port 3(vlan2) entered blocking state [ 86.012526][ T5968] bridge0: port 3(vlan2) entered disabled state [ 86.019284][ T5968] vlan2: entered allmulticast mode [ 86.024894][ T5968] erspan0: entered allmulticast mode [ 86.032041][ T5968] vlan2: entered promiscuous mode [ 86.038096][ T5968] erspan0: entered promiscuous mode [ 86.044972][ T5968] bridge0: port 3(vlan2) entered blocking state [ 86.051790][ T5968] bridge0: port 3(vlan2) entered forwarding state [ 86.136123][ T29] audit: type=1326 audit(1735481378.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.248292][ T29] audit: type=1326 audit(1735481378.633:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.343126][ T5895] HFC-S_USB 5-1:0.81: probe with driver HFC-S_USB failed with error -5 [ 86.429342][ T29] audit: type=1326 audit(1735481378.923:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.540358][ T29] audit: type=1326 audit(1735481378.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.598595][ T29] audit: type=1326 audit(1735481378.953:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.603867][ T5977] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 86.672595][ T29] audit: type=1326 audit(1735481378.953:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 86.691574][ T5983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.706067][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.734615][ T29] audit: type=1326 audit(1735481378.953:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 87.011831][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.085305][ T5989] loop9: detected capacity change from 0 to 7 [ 87.113650][ T5989] Dev loop9: unable to read RDB block 7 [ 87.129831][ T5989] loop9: unable to read partition table [ 87.146209][ T5989] loop9: partition table beyond EOD, truncated [ 87.178872][ T5989] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 87.189689][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 87.203641][ T5895] usb 3-1: config index 0 descriptor too short (expected 49410, got 36) [ 87.222081][ T5895] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 87.256688][ T5895] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 87.287919][ T5895] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 87.319213][ T5895] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 87.352710][ T5895] usb 3-1: config index 1 descriptor too short (expected 49410, got 36) [ 87.361548][ T5895] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 87.381410][ T5895] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 87.421208][ T5895] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 87.452649][ T5895] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 87.476348][ T5895] usb 3-1: config index 2 descriptor too short (expected 49410, got 36) [ 87.491939][ T5895] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 87.516621][ T5895] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 87.552755][ T5895] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 87.575157][ T5895] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 87.604498][ T5895] usb 3-1: config index 3 descriptor too short (expected 49410, got 36) [ 87.613651][ T5895] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 87.640513][ T5895] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 87.661714][ T5895] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 87.664602][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.686972][ T5895] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 87.722131][ T5895] usb 3-1: New USB device found, idVendor=2c42, idProduct=0102, bcdDevice= 0.00 [ 87.737844][ T5895] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9 [ 87.747504][ T5999] trusted_key: syz.3.27 sent an empty control message without MSG_MORE. [ 87.785596][ T5895] usb 3-1: Manufacturer: syz [ 87.841900][ T5895] usb 3-1: SerialNumber: syz [ 88.213797][ T5892] usb 3-1: USB disconnect, device number 3 [ 88.242058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.337876][ T5895] usb 5-1: USB disconnect, device number 2 [ 88.760473][ T6030] vivid-002: ================= START STATUS ================= [ 88.781365][ T6030] vivid-002: Radio HW Seek Mode: Bounded [ 88.810634][ T6030] vivid-002: Radio Programmable HW Seek: false [ 88.818880][ T6030] vivid-002: RDS Rx I/O Mode: Block I/O [ 88.865356][ T6030] vivid-002: Generate RBDS Instead of RDS: false [ 88.914833][ T6030] vivid-002: RDS Reception: true [ 88.959060][ T6030] vivid-002: RDS Program Type: 0 inactive [ 88.969448][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 88.979646][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 88.989395][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 88.998308][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 89.008460][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 89.017015][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 89.025633][ T6035] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 89.070904][ T6030] vivid-002: RDS PS Name: inactive [ 89.092235][ T6030] vivid-002: RDS Radio Text: inactive [ 89.098641][ T6030] vivid-002: RDS Traffic Announcement: false inactive [ 89.106083][ T6030] vivid-002: RDS Traffic Program: false inactive [ 89.147791][ T6030] vivid-002: RDS Music: false inactive [ 89.186376][ T6030] vivid-002: ================== END STATUS ================== [ 89.371058][ T6046] Zero length message leads to an empty skb [ 89.632114][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.814730][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.844228][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 89.876632][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.912692][ T5890] usb 3-1: config 0 descriptor?? [ 90.158863][ T5890] lenovo 0003:17EF:60A3.0001: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 90.409788][ T6064] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 90.427275][ T5890] usb 3-1: USB disconnect, device number 4 [ 91.038873][ T6076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.127126][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 91.142350][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.204929][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.232966][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.250466][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.259040][ T6076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.289663][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 91.335925][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 91.389559][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.420039][ T6082] syz.1.50 (6082) used greatest stack depth: 17936 bytes left [ 91.422189][ T5890] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 91.478181][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.512770][ T5890] usb 4-1: config 0 descriptor?? [ 91.988126][ T5890] dragonrise 0003:0079:0006.0002: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 92.017616][ T5890] dragonrise 0003:0079:0006.0002: no inputs found [ 92.031859][ T5890] dragonrise 0003:0079:0006.0002: force feedback init failed [ 92.031917][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.189026][ T5892] usb 4-1: USB disconnect, device number 3 [ 92.213824][ T8] cfg80211: failed to load regulatory.db [ 92.233732][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 92.259619][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.280076][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.295284][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 544 [ 92.310920][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.321083][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.329853][ T25] usb 3-1: Product: syz [ 92.334866][ T25] usb 3-1: Manufacturer: 鶖譢㰏䊔^璧栓㮜鬁钛沗勱텭儖칧柰┭㿳춝䔱羬镰蜾ᮈ駣휇ꡢ痛殴ꊎ䜐䌙릉눞۶蜠ᙚ톴䝥嚛ᖫ墦ᄵ⋔ꜭ橄ᠽꢏ㪨샶ꜰ젗⯀ꌯ슌⌟쎽ᦈ㻌婐➖ᮠ쁅ष聢穾뵣먪̏ [ 92.377492][ T25] usb 3-1: SerialNumber: syz [ 92.619076][ T25] cdc_ncm 3-1:1.0: bind() failure [ 92.646448][ T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 92.661850][ T25] cdc_ncm 3-1:1.1: bind() failure [ 92.697604][ T25] usb 3-1: USB disconnect, device number 5 [ 92.952338][ T6104] QAT: failed to copy from user. [ 93.331410][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.475542][ T5893] usb 5-1: device descriptor read/64, error -71 [ 93.621998][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.698689][ T6127] pim6reg: entered allmulticast mode [ 93.698942][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.714742][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.732820][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.763642][ T6127] pim6reg: left allmulticast mode [ 93.792483][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 93.812641][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.841374][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 93.869419][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 93.887520][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 93.904563][ T5893] usb 5-1: device descriptor read/64, error -71 [ 93.921832][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.921854][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.924598][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 93.945645][ T6135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.962516][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.972719][ T5895] usb 2-1: Product: syz [ 93.986399][ T5895] usb 2-1: Manufacturer: syz [ 94.001858][ T5895] usb 2-1: SerialNumber: syz [ 94.018748][ T6136] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 94.019599][ T5895] usb 2-1: config 0 descriptor?? [ 94.032783][ T5893] usb usb5-port1: attempt power cycle [ 94.048550][ T6135] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 94.055935][ T5892] usb 3-1: device descriptor read/64, error -71 [ 94.179676][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 94.179695][ T29] audit: type=1326 audit(1735481386.673:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.253348][ T29] audit: type=1326 audit(1735481386.673:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.295537][ T5895] appledisplay: Apple Cinema Display connected [ 94.316400][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.354568][ T29] audit: type=1326 audit(1735481386.673:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.398690][ T29] audit: type=1326 audit(1735481386.673:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.422662][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.440143][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.469341][ T29] audit: type=1326 audit(1735481386.873:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.507423][ T5892] usb 3-1: device descriptor read/64, error -71 [ 94.531095][ T25] usb 2-1: USB disconnect, device number 3 [ 94.531238][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 94.550641][ T5893] usb 5-1: device descriptor read/8, error -71 [ 94.550891][ T25] appledisplay: Apple Cinema Display disconnected [ 94.572100][ T29] audit: type=1326 audit(1735481386.873:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 94.602049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.602092][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.611435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.612637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.626741][ T29] audit: type=1326 audit(1735481386.963:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 94.662033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.689483][ T5892] usb usb3-port1: attempt power cycle [ 94.706314][ T29] audit: type=1326 audit(1735481386.963:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 94.811979][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.821752][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 94.836952][ T29] audit: type=1326 audit(1735481386.993:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 94.885877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.907211][ T29] audit: type=1326 audit(1735481387.043:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6dd85d29 code=0x7ffc0000 [ 94.930477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.946327][ T5893] usb 5-1: device descriptor read/8, error -71 [ 94.958301][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.980225][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.993586][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 95.003108][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.014350][ T5895] usb 4-1: config 0 descriptor?? [ 95.032254][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 95.062104][ T5893] usb usb5-port1: unable to enumerate USB device [ 95.072915][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.141780][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.272680][ T5892] usb 3-1: device descriptor read/8, error -71 [ 95.411868][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 95.527370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.562691][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.570645][ T5888] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.600598][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.634973][ T5892] usb 3-1: device descriptor read/8, error -71 [ 95.648063][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.706233][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 95.732713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.741858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.755195][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.761817][ T5888] usb 2-1: device descriptor read/64, error -71 [ 95.770561][ T5892] usb usb3-port1: unable to enumerate USB device [ 95.793373][ T8] usb 1-1: config 0 descriptor?? [ 95.811341][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 96.014962][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.181929][ T5888] usb 2-1: device descriptor read/64, error -71 [ 96.302718][ T5888] usb usb2-port1: attempt power cycle [ 96.309879][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 96.333428][ T6155] loop9: detected capacity change from 0 to 7 [ 96.341267][ T6155] Dev loop9: unable to read RDB block 7 [ 96.379204][ T6155] loop9: unable to read partition table [ 96.394809][ T6155] loop9: partition table beyond EOD, truncated [ 96.406939][ T6155] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 96.742657][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.803707][ T5888] usb 2-1: device descriptor read/8, error -71 [ 97.082362][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.133570][ T5888] usb 2-1: device descriptor read/8, error -71 [ 97.215981][ T6168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.280384][ T5888] usb usb2-port1: unable to enumerate USB device [ 97.297134][ T6169] IPv6: addrconf: prefix option has invalid lifetime [ 97.621888][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.824763][ T5892] usb 3-1: config 0 has an invalid interface number: 118 but max is 0 [ 97.865142][ T5892] usb 3-1: config 0 has no interface number 0 [ 97.878205][ T5892] usb 3-1: config 0 interface 118 has no altsetting 0 [ 97.892978][ T5893] usb 4-1: USB disconnect, device number 4 [ 97.900258][ T5892] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 97.912107][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.954440][ T5892] usb 3-1: Product: syz [ 97.974957][ T5892] usb 3-1: Manufacturer: syz [ 98.012409][ T5892] usb 3-1: SerialNumber: syz [ 98.021344][ T5892] usb 3-1: config 0 descriptor?? [ 98.093431][ T6180] capability: warning: `syz.3.80' uses deprecated v2 capabilities in a way that may be insecure [ 98.121979][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.253649][ T5892] f81232 3-1:0.118: f81232 converter detected [ 98.284284][ T5892] usb 3-1: f81232 converter now attached to ttyUSB0 [ 98.310487][ T5892] usb 3-1: USB disconnect, device number 10 [ 98.320322][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 98.338117][ T25] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 98.350066][ T5892] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 98.392405][ T25] usb 5-1: config 0 has no interface number 0 [ 98.410111][ T5892] f81232 3-1:0.118: device disconnected [ 98.440824][ T25] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 98.496261][ T25] usb 5-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.552354][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice= 8.6b [ 98.574707][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.598445][ T25] usb 5-1: Product: syz [ 98.611803][ T25] usb 5-1: Manufacturer: syz [ 98.631230][ T25] usb 5-1: SerialNumber: syz [ 98.690566][ T8] usb 1-1: USB disconnect, device number 3 [ 98.735004][ T25] usb 5-1: config 0 descriptor?? [ 98.754182][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 98.905412][ T6196] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 98.936933][ T6196] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 98.981824][ T5893] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 99.143686][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 4 [ 99.184273][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 99.258405][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.297235][ T5893] usb 2-1: config 0 descriptor?? [ 99.300064][ T25] gspca_zc3xx: reg_w_i err -110 [ 99.335982][ T5893] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 99.604352][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.617303][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.874833][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.891830][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 99.906636][ T25] gspca_zc3xx 5-1:0.146: probe with driver gspca_zc3xx failed with error -110 [ 99.922282][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.998565][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.070572][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 100.070588][ T29] audit: type=1326 audit(1735481392.563:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.102469][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.161033][ T29] audit: type=1326 audit(1735481392.613:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.249608][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.271847][ T29] audit: type=1326 audit(1735481392.613:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.299831][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.318378][ T29] audit: type=1326 audit(1735481392.613:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.375928][ T29] audit: type=1326 audit(1735481392.623:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.402677][ T29] audit: type=1326 audit(1735481392.623:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.431761][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.464278][ T29] audit: type=1326 audit(1735481392.623:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.520309][ T29] audit: type=1326 audit(1735481392.623:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.612467][ T29] audit: type=1326 audit(1735481392.623:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.621954][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 100.635036][ T29] audit: type=1326 audit(1735481392.623:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 100.668370][ T5893] usb 5-1: USB disconnect, device number 7 [ 100.944527][ T6230] team_slave_0: entered promiscuous mode [ 100.950585][ T6230] team_slave_1: entered promiscuous mode [ 101.078403][ T6230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.145874][ T6230] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 101.521061][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.521114][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.521160][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 101.521187][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.527611][ T8] usb 4-1: config 0 descriptor?? [ 101.538561][ T25] usb 2-1: USB disconnect, device number 8 [ 101.668502][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 101.713889][ T6235] process 'syz.2.94' launched './file1' with NULL argv: empty string added [ 101.942061][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.101809][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 102.134132][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 102.174264][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 102.187463][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.205293][ T5895] usb 1-1: Product: syz [ 102.211340][ T5895] usb 1-1: Manufacturer: syz [ 102.218112][ T5895] usb 1-1: SerialNumber: syz [ 102.227569][ T5895] usb 1-1: config 0 descriptor?? [ 102.239723][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 102.592035][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.781930][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 102.806338][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.828021][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.861114][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.885768][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.914854][ T25] usb 2-1: Product: syz [ 102.940195][ T25] usb 2-1: Manufacturer: syz [ 102.958304][ T25] usb 2-1: SerialNumber: syz [ 103.393271][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.404966][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.486006][ T25] usb 2-1: 0:2 : does not exist [ 103.888723][ T974] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.913460][ T25] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 104.044466][ T25] usb 2-1: USB disconnect, device number 9 [ 104.097616][ T974] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.138423][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.160580][ T5895] gspca_zc3xx: reg_w_i err -71 [ 104.167986][ T974] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 104.185505][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 104.207603][ T974] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 104.232738][ T974] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 104.245878][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.281976][ T974] usb 5-1: Product: syz [ 104.294179][ T974] usb 5-1: Manufacturer: syz [ 104.304140][ T974] usb 5-1: SerialNumber: syz [ 104.313058][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.336388][ T974] usb 5-1: config 0 descriptor?? [ 104.347437][ T6274] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 104.378468][ C1] usb 5-1: NFC: Urb failure (status -71) [ 104.437090][ T974] usb 5-1: NFC: Unable to get FW version [ 104.473302][ T974] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 104.484238][ T8] usb 4-1: USB disconnect, device number 5 [ 104.605415][ T25] usb 5-1: USB disconnect, device number 8 [ 104.771826][ T5895] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 104.778324][ T5895] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 104.811851][ T5895] usb 1-1: USB disconnect, device number 4 [ 105.172194][ T5895] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.225518][ T6300] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.236285][ T6300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.245242][ T6300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.254159][ T6300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.351886][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 105.373767][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.380472][ T5895] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 105.446411][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.481100][ T5895] usb 1-1: config 0 descriptor?? [ 105.517023][ T5895] usb 1-1: can't set config #0, error -71 [ 105.538298][ T5895] usb 1-1: USB disconnect, device number 5 [ 105.591779][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.772269][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 105.788305][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 105.842400][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.880415][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.901836][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.909387][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 105.909427][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 105.986323][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 106.021857][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.071989][ T5895] usb 1-1: device descriptor read/64, error -71 [ 106.073062][ T25] usb 4-1: config 0 descriptor?? [ 106.091176][ T3032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.119124][ T6305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.142150][ T3032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.296863][ T3032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.321813][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.339819][ T3032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.485932][ T5895] usb 1-1: device descriptor read/64, error -71 [ 106.533459][ T3032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.575803][ T3032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.605574][ T5895] usb usb1-port1: attempt power cycle [ 106.710598][ T3032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.730413][ T3032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.801882][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.926065][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.964264][ T5893] usb 5-1: config index 0 descriptor too short (expected 44, got 36) [ 106.973346][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 106.983748][ T3032] bridge_slave_1: left allmulticast mode [ 106.992636][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.011974][ T3032] bridge_slave_1: left promiscuous mode [ 107.030347][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.047553][ T5893] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 107.051976][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.057770][ T5895] usb 1-1: device descriptor read/8, error -71 [ 107.073505][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.079585][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.090139][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.102400][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 107.109466][ T3032] bridge_slave_0: left allmulticast mode [ 107.117086][ T3032] bridge_slave_0: left promiscuous mode [ 107.123598][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.135288][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.137076][ T5893] usb 5-1: config 0 descriptor?? [ 107.147948][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 107.160790][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.162291][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.177241][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 107.178286][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.189316][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 107.245596][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 107.257523][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.286485][ T8] usb 2-1: Product: syz [ 107.296811][ T8] usb 2-1: Manufacturer: syz [ 107.312651][ T8] usb 2-1: SerialNumber: syz [ 107.328932][ T8] usb 2-1: config 0 descriptor?? [ 107.342194][ T5895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.356468][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 107.372223][ T8] imon 2-1:0.0: unable to initialize intf0, err -19 [ 107.383031][ T8] imon:imon_probe: failed to initialize context! [ 107.392196][ T5895] usb 1-1: device descriptor read/8, error -71 [ 107.412647][ T8] imon 2-1:0.0: unable to register, err -19 [ 107.504870][ T5895] usb usb1-port1: unable to enumerate USB device [ 107.563215][ T5895] usb 2-1: USB disconnect, device number 10 [ 107.623629][ T5893] hid (null): unknown global tag 0xd [ 107.646184][ T5893] aquacomputer_d5next 0003:0C70:F003.0003: unknown global tag 0xd [ 107.667354][ T5893] aquacomputer_d5next 0003:0C70:F003.0003: item 0 0 1 13 parsing failed [ 107.682540][ T5893] aquacomputer_d5next 0003:0C70:F003.0003: probe with driver aquacomputer_d5next failed with error -22 [ 107.856902][ T5888] usb 5-1: USB disconnect, device number 9 [ 108.050815][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.071601][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.103402][ T3032] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 108.114108][ T3032] team_slave_0: left promiscuous mode [ 108.119824][ T3032] team_slave_1: left promiscuous mode [ 108.130373][ T3032] bond0 (unregistering): Released all slaves [ 108.273357][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 108.404008][ T5888] usb 4-1: USB disconnect, device number 6 [ 109.314557][ T54] Bluetooth: hci0: command tx timeout [ 109.414265][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 109.414281][ T29] audit: type=1326 audit(1735481401.913:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 109.451852][ T3032] hsr_slave_0: left promiscuous mode [ 109.505316][ T29] audit: type=1326 audit(1735481401.953:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 109.544184][ T3032] hsr_slave_1: left promiscuous mode [ 109.590971][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.612187][ T29] audit: type=1326 audit(1735481401.953:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 109.649348][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.744520][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.763009][ T29] audit: type=1326 audit(1735481401.973:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 109.819825][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.819875][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.867293][ T29] audit: type=1326 audit(1735481401.993:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 109.895344][ T3032] veth1_macvtap: left promiscuous mode [ 109.901451][ T3032] veth0_macvtap: left promiscuous mode [ 109.907824][ T3032] veth1_vlan: left promiscuous mode [ 109.913764][ T3032] veth0_vlan: left promiscuous mode [ 110.063834][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 110.075084][ T29] audit: type=1326 audit(1735481401.993:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 110.098008][ T29] audit: type=1326 audit(1735481401.993:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 110.148240][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.169432][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.192019][ T5834] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.227930][ T29] audit: type=1326 audit(1735481401.993:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 110.227933][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 110.227969][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.316201][ T5893] usb 4-1: config 0 descriptor?? [ 110.341726][ T29] audit: type=1326 audit(1735481402.023:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc103384690 code=0x7ffc0000 [ 110.342590][ T5893] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 110.391869][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 110.407576][ T5834] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 110.416443][ T5834] usb 2-1: config 0 has no interface number 0 [ 110.437075][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 110.450536][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.474500][ T29] audit: type=1326 audit(1735481402.053:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10338592b code=0x7ffc0000 [ 110.479489][ T5834] usb 2-1: Product: syz [ 110.527632][ T5834] usb 2-1: Manufacturer: syz [ 110.554074][ T5834] usb 2-1: SerialNumber: syz [ 110.577343][ T5834] usb 2-1: config 0 descriptor?? [ 110.852575][ T5834] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 110.867032][ T5834] usb 2-1: No streaming interface found for terminal 6. [ 110.885970][ T5834] usb 2-1: USB disconnect, device number 11 [ 111.398121][ T54] Bluetooth: hci0: command tx timeout [ 111.737733][ T3032] team0 (unregistering): Port device team_slave_1 removed [ 111.797197][ T3032] team0 (unregistering): Port device team_slave_0 removed [ 111.883651][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.054250][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 112.066201][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.068375][ T5888] usb 2-1: config 2 has an invalid interface number: 124 but max is 0 [ 112.068411][ T5888] usb 2-1: config 2 has no interface number 0 [ 112.068448][ T5888] usb 2-1: config 2 interface 124 altsetting 100 bulk endpoint 0x5 has invalid maxpacket 8 [ 112.068478][ T5888] usb 2-1: config 2 interface 124 has no altsetting 0 [ 112.071347][ T5888] usb 2-1: string descriptor 0 read error: -22 [ 112.071451][ T5888] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=bb.c4 [ 112.071480][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.076188][ T6394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.080338][ T5888] kvaser_usb 2-1:2.124: error -ENODEV: Cannot get usb endpoint(s) [ 112.845849][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 112.995097][ T974] usb 2-1: USB disconnect, device number 12 [ 113.151187][ T5893] usb 4-1: USB disconnect, device number 7 [ 113.259843][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.278854][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.302836][ T6329] bridge_slave_0: entered allmulticast mode [ 113.310030][ T6329] bridge_slave_0: entered promiscuous mode [ 113.319238][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.326575][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.333945][ T6329] bridge_slave_1: entered allmulticast mode [ 113.343566][ T6329] bridge_slave_1: entered promiscuous mode [ 113.455579][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.472444][ T54] Bluetooth: hci0: command tx timeout [ 113.485699][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.585444][ T6329] team0: Port device team_slave_0 added [ 113.612709][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.632237][ T6329] team0: Port device team_slave_1 added [ 113.669436][ T974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.766562][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.790978][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.836731][ T5888] usb 1-1: device descriptor read/64, error -71 [ 113.860877][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.872265][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 113.913751][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.936915][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.949513][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.978599][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.009766][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.054301][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.076457][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 114.102285][ T5888] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.118098][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.141317][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 114.144270][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.228852][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.247265][ T974] usb 4-1: no configurations [ 114.253882][ T974] usb 4-1: can't read configurations, error -22 [ 114.261805][ T5888] usb 1-1: device descriptor read/64, error -71 [ 114.314610][ T6329] hsr_slave_0: entered promiscuous mode [ 114.321874][ T6329] hsr_slave_1: entered promiscuous mode [ 114.329382][ T6329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.333548][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.338239][ T6329] Cannot create hsr debugfs directory [ 114.373416][ T5888] usb usb1-port1: attempt power cycle [ 114.378286][ T5893] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 114.403112][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.484525][ T5893] usb 5-1: config 0 descriptor?? [ 114.610944][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.635988][ T6444] netlink: 'syz.1.146': attribute type 29 has an invalid length. [ 114.660539][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.691590][ T6444] vlan2: entered promiscuous mode [ 114.701861][ T6444] hsr0: entered promiscuous mode [ 114.707284][ T6444] vlan2: entered allmulticast mode [ 114.717827][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 114.725738][ T6444] hsr0: entered allmulticast mode [ 114.732087][ T6444] hsr_slave_0: entered allmulticast mode [ 114.734710][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.758828][ T6444] hsr_slave_1: entered allmulticast mode [ 114.773153][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.777686][ T5888] usb 1-1: device descriptor read/8, error -71 [ 114.803063][ T6444] hsr0: left allmulticast mode [ 114.873124][ T5893] usb 5-1: USB disconnect, device number 10 [ 114.882138][ T6444] hsr_slave_0: left allmulticast mode [ 114.888218][ T6444] hsr_slave_1: left allmulticast mode [ 114.928635][ T6444] hsr0: left promiscuous mode [ 115.047429][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.104544][ T5888] usb 1-1: device descriptor read/8, error -71 [ 115.194977][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 115.194997][ T29] audit: type=1326 audit(1735481407.693:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.233501][ T5888] usb usb1-port1: unable to enumerate USB device [ 115.235063][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.286528][ T6329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.324535][ T6329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.332168][ T29] audit: type=1326 audit(1735481407.733:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.355133][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.373338][ T29] audit: type=1326 audit(1735481407.753:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.417916][ T29] audit: type=1326 audit(1735481407.753:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.442948][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.483513][ T29] audit: type=1326 audit(1735481407.753:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.496709][ T6467] usb usb1: usbfs: process 6467 (syz.1.149) did not claim interface 0 before use [ 115.510027][ T29] audit: type=1326 audit(1735481407.783:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.532075][ T6329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.545711][ T29] audit: type=1326 audit(1735481407.783:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.553006][ T54] Bluetooth: hci0: command tx timeout [ 115.578226][ T29] audit: type=1326 audit(1735481407.783:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc103385d29 code=0x7ffc0000 [ 115.608401][ T29] audit: type=1326 audit(1735481407.783:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc103384690 code=0x7ffc0000 [ 115.633591][ T29] audit: type=1326 audit(1735481407.783:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10338592b code=0x7ffc0000 [ 115.664602][ T6329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.791539][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.811564][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.811917][ T5834] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.829257][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.837210][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.887691][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.891945][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.895056][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.154702][ T5834] usb 1-1: device descriptor read/64, error -71 [ 116.161014][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.191975][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 116.220563][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.269358][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.305539][ T6329] veth0_vlan: entered promiscuous mode [ 116.334956][ T6329] veth1_vlan: entered promiscuous mode [ 116.368415][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 116.395226][ T6329] veth0_macvtap: entered promiscuous mode [ 116.431421][ T6329] veth1_macvtap: entered promiscuous mode [ 116.441467][ T5834] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 116.506503][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.593031][ T5888] usb 4-1: config 0 descriptor?? [ 116.611627][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.635618][ T6480] netlink: 1 bytes leftover after parsing attributes in process `syz.0.152'. [ 116.653416][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.654870][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 116.672305][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.695290][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.718901][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.733529][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'. [ 116.764666][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.820742][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.884746][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.945144][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.002627][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.029471][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.064913][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.113552][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.129089][ T6491] program syz.4.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.171375][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.189106][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.207294][ T6329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.219906][ T6329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.269579][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.310659][ T6329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.320942][ T6329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.351563][ T6329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.373401][ T6329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.693360][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.724509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.809963][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.828749][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.862653][ T5834] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 118.012143][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 118.040272][ T5834] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 118.076903][ T5834] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.119631][ T5834] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.132783][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.155069][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 118.223077][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.236453][ T5834] usb 1-1: Product: syz [ 118.241182][ T5834] usb 1-1: Manufacturer: syz [ 118.247530][ T5834] usb 1-1: SerialNumber: syz [ 118.280386][ T5834] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 118.314137][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.362750][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.381367][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 118.402250][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.438374][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.519310][ T8] usb 5-1: config 0 descriptor?? [ 118.612394][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 118.619640][ T5893] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.637424][ T5893] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.717467][ T5893] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.764365][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 118.781754][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 118.794535][ T5893] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 118.811047][ T6520] xfrm1: entered promiscuous mode [ 118.816809][ T6520] xfrm1: entered allmulticast mode [ 118.826829][ T6520] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.837718][ T6521] je: renamed from lo (while UP) [ 118.866209][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.126668][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.348539][ T5893] usb 6-1: config 0 descriptor?? [ 119.361256][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 119.367624][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.395354][ T8] usb 5-1: USB disconnect, device number 11 [ 119.564582][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.594669][ T5888] usb 4-1: USB disconnect, device number 10 [ 119.612125][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.659668][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.676886][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.080597][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.112288][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.139743][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.179005][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.235619][ T8] usb 1-1: USB disconnect, device number 16 [ 120.473557][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 120.486393][ C0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 120.494863][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 120.505499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.516488][ C0] RIP: 0010:put_page+0x23/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.521582][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 a8 31 12 f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 5f 99 78 f8 48 8b 1b 48 89 de 48 83 [ 120.541580][ C0] RSP: 0018:ffffc90000156b90 EFLAGS: 00010202 [ 120.547829][ C0] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801cacda00 [ 120.555859][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.563876][ C0] RBP: dffffc0000000000 R08: ffffffff898cd5ad R09: 1ffff1100f73962c [ 120.572183][ C0] R10: dffffc0000000000 R11: ffffed100f73962d R12: 0000000000000007 [ 120.580287][ C0] R13: ffff88807b9cb142 R14: 0000000000000000 R15: 0000000000000000 [ 120.588727][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 120.598206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.605109][ C0] CR2: 00007ffd198ee298 CR3: 00000000333ca000 CR4: 00000000003526f0 [ 120.613283][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.621552][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.629586][ C0] Call Trace: [ 120.632995][ C0] [ 120.636034][ C0] ? __die_body+0x5f/0xb0 [ 120.640864][ C0] ? die_addr+0xb0/0xe0 [ 120.645136][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 120.650792][ C0] ? asm_exc_general_protection+0x26/0x30 [ 120.656632][ C0] ? skb_release_data+0x46d/0x8a0 [ 120.661797][ C0] ? put_page+0x23/0x260 [ 120.666369][ C0] skb_release_data+0x483/0x8a0 [ 120.671535][ C0] __kfree_skb+0x55/0x70 [ 120.675899][ C0] tcp_ack+0x2442/0x6bc0 [ 120.680526][ C0] ? __pfx_tcp_ack+0x10/0x10 [ 120.685449][ C0] ? __lock_acquire+0x1397/0x2100 [ 120.690688][ C0] tcp_rcv_state_process+0x8eb/0x44e0 [ 120.696092][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 120.701974][ C0] ? sk_filter_trim_cap+0x5bf/0xa80 [ 120.707451][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 120.712621][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 120.718118][ C0] tcp_v4_do_rcv+0x77d/0xc70 [ 120.723001][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 120.727539][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 120.732412][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 120.737410][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 120.742296][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 120.747899][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 120.754079][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 120.759792][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 120.766747][ C0] NF_HOOK+0x3a4/0x450 [ 120.770932][ C0] ? NF_HOOK+0x9a/0x450 [ 120.775344][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 120.780850][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 120.786995][ C0] ? ip_rcv_finish+0x406/0x560 [ 120.792088][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 120.797337][ C0] NF_HOOK+0x3a4/0x450 [ 120.801533][ C0] ? __lock_acquire+0x1397/0x2100 [ 120.807178][ C0] ? NF_HOOK+0x9a/0x450 [ 120.812270][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 120.817272][ C0] ? ip_rcv_core+0x801/0xd10 [ 120.822023][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 120.827291][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 120.831826][ C0] __netif_receive_skb+0x2bf/0x650 [ 120.837086][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 120.842315][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 120.848122][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.854856][ C0] ? __pfx_lock_release+0x10/0x10 [ 120.860323][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 120.865704][ C0] process_backlog+0x662/0x15b0 [ 120.871413][ C0] ? process_backlog+0x33b/0x15b0 [ 120.876676][ C0] ? __pfx_process_backlog+0x10/0x10 [ 120.882081][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.888127][ C0] ? __lock_acquire+0x1397/0x2100 [ 120.893919][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.900541][ C0] __napi_poll+0xcb/0x490 [ 120.904959][ C0] net_rx_action+0x89b/0x1240 [ 120.909874][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 120.915235][ C0] ? sched_clock+0x4a/0x70 [ 120.920029][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.927346][ C0] ? __schedule+0x1858/0x4c30 [ 120.932505][ C0] handle_softirqs+0x2d4/0x9b0 [ 120.937316][ C0] ? run_ksoftirqd+0xca/0x130 [ 120.942303][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 120.947630][ C0] run_ksoftirqd+0xca/0x130 [ 120.952174][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 120.957455][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 120.962589][ C0] smpboot_thread_fn+0x544/0xa30 [ 120.967593][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 120.973015][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 120.978949][ C0] kthread+0x2f0/0x390 [ 120.983078][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 120.989020][ C0] ? __pfx_kthread+0x10/0x10 [ 120.993988][ C0] ret_from_fork+0x4b/0x80 [ 120.998432][ C0] ? __pfx_kthread+0x10/0x10 [ 121.003059][ C0] ret_from_fork_asm+0x1a/0x30 [ 121.007873][ C0] [ 121.010904][ C0] Modules linked in: [ 121.014913][ C0] ---[ end trace 0000000000000000 ]--- [ 121.020458][ C0] RIP: 0010:put_page+0x23/0x260 [ 121.025397][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 a8 31 12 f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 5f 99 78 f8 48 8b 1b 48 89 de 48 83 [ 121.045293][ C0] RSP: 0018:ffffc90000156b90 EFLAGS: 00010202 [ 121.051533][ C0] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801cacda00 [ 121.059686][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.067930][ C0] RBP: dffffc0000000000 R08: ffffffff898cd5ad R09: 1ffff1100f73962c [ 121.075993][ C0] R10: dffffc0000000000 R11: ffffed100f73962d R12: 0000000000000007 [ 121.084129][ C0] R13: ffff88807b9cb142 R14: 0000000000000000 R15: 0000000000000000 [ 121.092552][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 121.101848][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.108496][ C0] CR2: 00007ffd198ee298 CR3: 00000000333ca000 CR4: 00000000003526f0 [ 121.116654][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.124796][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.133560][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 121.141286][ C0] Kernel Offset: disabled [ 121.145668][ C0] Rebooting in 86400 seconds..