last executing test programs: 16.237567508s ago: executing program 1 (id=1266): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="3f5685271a5a13d6e053a9541f95e0fc6511412a1ea9234bc08ff589fe9b", 0x1e}], 0x1, &(0x7f0000002f80)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dstopts={{0x0, 0x29, 0x37, {0x67, 0x0, '\x00', [@generic={0x5, 0x0, "a5a23559a1e7615121e0607686fb97ca94"}, @generic={0x10, 0x0, "38d30ff02c0d761dde64473204e1e8c3e396734017204b833d0c6803f01bab0280c6d1e546eb363e0a2b0ac8bbf2e4e90a58dd56cc4d1d6da7492e2b47573f627e91a0afdbae6511f88e0cb6ba4bf6785614d2ae2ea28fb5d9df24038ac3d3cab0f37e43d4ef203e7ef39b0615ba39708d3c5fc114a953094e88a443d8bd0f2eb94c04ca3c45e1"}, @calipso={0x7, 0x0, {0x3, 0x0, 0x8, 0x7, [0x6, 0x4cb21596, 0x1, 0x40, 0x3]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x8, 0x4, [0x314aade5, 0x3be, 0x2, 0xf]}}, @hao={0xc9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @rthdrdstopts={{0x1028, 0x29, 0x37, {0x11, 0x201, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0xd, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x10a8}}, {{&(0x7f0000000600)={0xa, 0x4e23, 0x279, @remote, 0x9}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000640)="7a27ced5c0098a0f7deb81dabb0c8b8cd1ee431ec98f8725add0bd281b74d7fce76ee7c698888aa83446f40360d3f5dd2cebfe43c52cdd90f106e22900f2bb228763e9a67c2a7a61a3553ad6a3b3e9b2aa373352bfb9ea24226345767d0f663a3f27092f1cf8957f33a84e79b30d112e0c8877b771effed4b75c8abe32c3b2b652b1280485057b1087deb1e4b97edacd5a9468535be6ee082f23bd832088f356f7d230220724a1c043678549", 0xac}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x220}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="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", 0xfa}, {&(0x7f0000001c40)="875defadfb823795ec598c168202ae49d8c72fcbdda19daf7685ea779ecb1e696b9d09122cc2ca9508ec742a93061933e42de4228c99c4071a20d514e730545b871dddbbce457d8b2033b370b66b3655095415dc62ed2209ff0573cb56a6e5f2a0f96f3efbb7b9ec8c73d5830a18eca895ecc324bdd212112852f0c85040bbc4dd3fecd8c8d13312795e572566afc2bb474a39c3bc073973b8c27baf9108eb5bd52c1d3cd1daf36db9e7e54ab9b168d3ab34a9a3fd0deac86147df81fa53535df797af", 0xc3}], 0x2}}, {{&(0x7f00000003c0)={0xa, 0x4e27, 0x9, @private1, 0x2}, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="09eb9977699e3b26f39c6e4495ac3581f33ed450d04086480572374f8888c1b3c45a684090689a59c5b87edb8dc98f63ca1bd6a83ce19ab0d47fecfc64b5cd2d0e426d5fc4b0a53efeb1a653ce6865717a277868bb72"}, {&(0x7f0000000480)="e990a519417d04059628d4eca8af6c3c33b589656456d436d36cdade23763698e686efab226d1ec48391455c5225d3ea4461b36b4aa77230d029c8ac32299e21a37bdb7cd11974ae3b49ab2a3e08903e4b4df5887211dea770b2660607cac3ee6dabfab5711cb0ab5ee4090087cf97464d723ba9b990e588a8ef66cb70c48a30d85ecc102cc948428f82eb478a5519114943b8808eaa364e2d5653f40d012450d20fe343a10da27c"}, {&(0x7f0000000540)="e9cd7ce93ddf22694ea08870f1b37ab25a9fda030dffe634cae194acb7aa39fa6275e3bba1a65998a1a968222a4a55ff0b25a1e0dc0742b2485351c736da0c02b6b3fe79151bb2f0de4c78b1c38283847f0f33e34b67b5976e7a6ae6374b0cbf54f2b1c56ab2b24c97fd2b885ce3ecf522091656b56b5efce0a4c7d465d683488843356ec5a49d403ba19bc4329631c0e8"}]}}], 0x3, 0xc8000) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000000045, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f01d1670f01c367f30f58bbc1c10f01c2660f3881130f090f01c8ea000000001b012ec9f2c061efdb", 0x29}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet6(r3, &(0x7f0000000140)="3de90000", 0x4, 0x40004, &(0x7f00000000c0)={0xa, 0x0, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='macvlan1\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0xfffffead) r9 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 14.989593624s ago: executing program 3 (id=1273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000053c0)=@delchain={0x4f0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x484, 0x7, [@m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x140, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x60, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x34, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x40, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x1f, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x30, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x164, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xf1, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97ec2efe958898f5beb20933796e6b3c7209a4c6a7ab7fcfcac6e41ee18e2999944"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r3, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93a\xa0\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\x1cY\xdb7\x15\xc2V\xd0\"\x1a\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xfay\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|TG\x83}*\xb8_\xffF\xd7T\xe0\xbb\xbb\x97\x8a\xdf.\xe2\xd2;\n\xa3\xefO\xb7\x11\xfco\xe2FU0\xaeY\xa4L==\xfcII6}M\xf1\xecCb\xbeb\n {Y-,\xf9 \x1aP\xe5\xddn28za', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686", 0x4a}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) close_range(r6, 0xffffffffffffffff, 0x0) 13.137710215s ago: executing program 4 (id=1286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0x80000501, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x180, 0x37, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7c, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x893}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6, 0x8}}}}}]}}]}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x20010, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = accept4$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x0) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000200)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff050024000000000105002400"], 0x58}}, 0x0) 13.004371884s ago: executing program 1 (id=1288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fec0ffff00000000000000000000001002000000200002000a00000000000000fe8000000000000000000000008000bb000000000d0001007564703a73"], 0x6c}}, 0x0) write$cgroup_devices(r3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=r3, @ANYRESDEC=r4, @ANYBLOB="8494a1baec313ff9763af22b2ef929dc2cad0c9d4fd6c7db5264c98d2176265ed8dd29aac46e76d826ee6c", @ANYRESHEX=r0, @ANYRESDEC=r2], 0xffdd) 11.847074097s ago: executing program 3 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x327, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0) 9.023698628s ago: executing program 3 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r1 = socket$netlink(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000020, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x1, r1, 0x80000}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x73622a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xffffffff}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) 8.908690886s ago: executing program 1 (id=1296): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000500030002000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}}, 0x0) io_submit(r0, 0x2, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="02", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0, 0x0, 0x2000000}]) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x10ac, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe22}]}, @TIPC_NLA_NODE={0x1088, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1b0a6e103643bf8c9b966c905fbf90f0ed5533e1071b70ab621658"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "170e4fe67049e3fdae3956ed38813512d9b0bf320606478f7e"}]}, @TIPC_NLA_NODE={0x4}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4048047) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.906507219s ago: executing program 4 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x396fade609e147d3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x1000000, 0x40110}, 0x0) 8.843909176s ago: executing program 3 (id=1298): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001d00)={0x0, 0x2000000}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000001c0)={0x1, 0x102, 0x2, {0x5, 0xbca, 0x81, 0x100}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x54}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8.765675682s ago: executing program 4 (id=1299): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001580)={'wlan1\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x885a0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x0, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x443) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000d"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0xa2e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x10000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0xb62b2d7fbad10100, 0x0, @fd_index=0xa, 0xa, 0x0, 0xb232, 0x3, 0x0, {0x0, r9}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r6, 0x5b3f, 0x0, 0x6, 0x0, 0x0) 8.544915661s ago: executing program 3 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x401) sendfile(r2, r2, 0x0, 0x401) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x80, 0x0, 0xbe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd45, 0x26}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x3, 0x1, [0x5], 0x7}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x8, "4bbbd12ace"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x5d, 0x9, {0x7, 0x25, 0x1, 0x2, 0x9, 0xa4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xffff, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xe9, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x6, 0x10, {0x2, 0x25, 0x1, 0x82, 0xf, 0x4}}}}}}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000080510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="090000007a1d000002000000e0000002"], 0x90) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x1fd, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000001c0)={0xc}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r10, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)='\n\x00\x00\x00', 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_usb_connect(0x0, 0x1e3, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x0) 8.437523231s ago: executing program 1 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44004, 0x40100}, [@IFLA_GROUP={0x8, 0x1b, 0x4c9}]}, 0x28}}, 0x20040000) (fail_nth: 1) 8.086825475s ago: executing program 1 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)={0x77359400}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@sr0, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@deltclass={0x6c, 0x29, 0x300, 0x70bd28, 0x259fdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x9}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x2}}, @TCA_RATE={0xfffffffffffffc5f, 0x5, {0x40, 0x1}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_hfsc={{0x9}, {0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x80}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000000)=0x9, 0x4) listen(r3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000380)=0x4, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380), 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x4) preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/77, 0x4d}], 0x7, 0x81, 0x93) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x0) 8.003978759s ago: executing program 0 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110100000000000000000a0003000000000600000000"], 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0xfffffffe, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x3c}}, 0xc000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001600010408000000fedbdf25fc000000000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000ffffe1affe199d88597249cafaffff04001b00"], 0xfc}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x11, 0x17, {0x17, 0xe, "0a4ac25fd3d8e2185e743199dbdc93e2734acdb66b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0xee01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r7, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x54}}, 0x0) 7.793749695s ago: executing program 3 (id=1307): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x200, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0xe1, &(0x7f0000000280), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r7, r4, r0, r2, r0, r7, r8, r9, r0, r10]}, 0xa) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80}]}}]}, 0x40}}, 0x0) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000070d0001007564703a73797a3100000000"], 0x54}}, 0x0) r15 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SIOCGETVIFCNT(r15, 0x89e0, 0x0) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x58, r14, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4000) shutdown(r1, 0x1) 7.127626583s ago: executing program 4 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) syz_open_dev$evdev(&(0x7f0000000240), 0x10000, 0x4000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x3f}, 0xe) recvfrom(r1, &(0x7f0000002ec0)=""/226, 0xe2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x64, 0xd0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "eb7a58"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0xfff8, 0x2c}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfe, 0x6, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x5, 0x1c}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x4c, 0x3, 0x10, 0x7}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xb, 0x9, 0x7}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1811}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x440a}}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.069391964s ago: executing program 2 (id=1313): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0xd0, 0x1a0, 0xd0, 0x270, 0x340, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [0x1d, 0xff000000, 0xffffff00], [], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0x0, 0xff], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x900, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x35, 0x37, 0x34, 0x64, 0x62, 0x61, 0x38, 0x39, 0x37, 0x33, 0x32, 0x35, 0x32, 0x32, 0x39]}, &(0x7f0000000140)={0x0, "64ade5ebf7d0193f101b2a315cab4b4e5801838e21cc35a551b83b22c6880443bbe726384439f9dbb1356c534cd5fa8ac0674c16535ba81998da74da83926fcd", 0x33}, 0x48, 0xfffffffffffffff8) preadv(r1, 0x0, 0x0, 0x8000, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) 6.671788516s ago: executing program 0 (id=1314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ex:') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc000100789be1642f8430c460e8692a8f8c45aaf3118316539052ba181a60f03707ec8179fd143ed6c4db73977b77f68686d2ec94b25435ecec60f6ac23db96833cbf99779e33db32e62fe3a078933d3c1122022952988b9550db169ecb6e39fd8720a05d3eeb5d40a7ab91f9b5565dc2b48c9ac61eefd9d0aab86e58ea1940d2240a851dbeabcf0b6cefba164663ad87cbcdb6aa1468529d1206b1fa3aa39118b45ab882df7fb2c6e9c25a706f99002cc42ee9b894b4bbfe66ce8fa1038566ae3407d5c80e28dc3911476785933d1ef923697a44a9cd4271d539e2ecc14d37a5e2074116425f0766b49a6febf9f1b8405ee9de1363b262f1be283921020180380002800900020073797a300000000008000340000000000900020073797a300000000008000180000000000900020073797a30000000003c0002800900020073797a320000000008000180000000000800018000000000080003400000000008000180000000000900020073797a3100000000380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a320000000024000280d3fd0180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a258bc430008000340000000010c0004400000000000000001941001802c0001001943281e8af5fa4de43a18b194246a7a86da4a16357db4bc3d3edaccb333b121e8636c2e1c00e4e13c0002800900020073797a310000000008000340000000040900020073797a3100000000080003400000000008000340000000030800034000000007"], 0x17d4}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 6.212452196s ago: executing program 2 (id=1315): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4}, [], {}, [], {}, {0x20, 0x0, 0xfff6}}, 0x24, 0x0) 5.972838351s ago: executing program 0 (id=1316): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x4, 0xa, 0x80}, {0x8000000000, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x1, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x3}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x4d5, 0x2b}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x81000) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x4, "000400"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x20, 0xc, 0x89, {0x89, 0x1, "20e237da7c5ab99f2b4a09e1c2829f0b2bd44dc3f86f3023da0c2e682fdc697a6b8ac16e986238dbb87649ef5c46a52118bc28e6f25ed065048e5e1f0e6eacef9c3ad37c6e665ac5c4f4f47953d233d0718a36cedbafef0b611e07719743ff4355f734da8d3ec1cf936b522f7a5953100340d191e68ed975bf3046bdc529a431b675e92e34ccb5"}}, &(0x7f00000003c0)={0x0, 0x3, 0xda, @string={0xda, 0x3, "be03fd6e05658c0d059ed2e9a0c2b4fcbea2faac077253c9bc5c4ecbada8d85f2cd366a3247c5744600f05a3ca2d015ccd84312899edd36f4015bdd683e726a7cdce258ea33ab4b4c3157bc6aae093353183bea27614676c82cecb09577345ccd3c5cff61ef3bb01f98a6c34ff4ee1480d086880dc12d1b268c3507d44b46e6422ae10ef7e8cadc102d26522b08860be3bdd985faf0f024789155d28a4b395d674a2df0c7670be4469f63770e740976d2877d7cbac88b97d819274608f8262911a6cb6659f2e89d8c1371e2fcedb413bfbafeb0b9b3c12ac"}}, &(0x7f0000000080)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xd4, 0x5, 0x1, 0x56, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x9ac6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x80, 0x10}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x3, 0x3, "12141da7", "52f6f271"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x1, 0x80, 0x4, 0x20, 0x9}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000640)={0x20, 0x30, 0xca, "38330d80adc2f3980510181c9b3452c0fa7ee0f9ebd0d3955a92c2dae2545536c10504ec3c51ca9f56154527c36dc8bc852e0751b049d747d70806327bd64a7ad7bc03bd9bba16e0e9000a1c718da98dd915cdb673948977d1f2e2da9e6afd8ba45b3ba4406f50f2a225554485e60db719f749d4685c8ea39f50b5fb1cf6fab8c32b699b6dd6c700b63a56fb7d1b04b6c154ad16b35e47549fcb6b3afe4e22639a4752ab9fab1d8853d651c1e6062139b674f96fbb8bb548fe1dfff57e1aa8b5dcda35fe4bc162df67cd"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x1, 0x2, [0x78f]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "913e"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "b17c"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x3}}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x14, 0x4, 0xffffffffffffffff, @void, @value}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5.924694765s ago: executing program 2 (id=1317): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x3, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x233ef8a50fe2ed74, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x3f1, 0x148, 0x0, 0x5, 0x170, 0x2a8, 0x2a8, 0x170, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0xd0, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0xf, 0x6, 0x2, 0x1]}}}}, {{@ip={@local, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r4) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x180, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x108411, 0x4) bind$xdp(r10, &(0x7f0000000500)={0x2c, 0x0, r11}, 0x10) bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x1, r9, 0x400000, r10}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000140)={'wlan1\x00'}) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x3, 0x2, 0x3}}, 0x10) 4.763836676s ago: executing program 2 (id=1318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 3.618864926s ago: executing program 2 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r1 = socket$netlink(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000020, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x1, r1, 0x80000}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x73622a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xffffffff}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) 3.532838887s ago: executing program 4 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000340)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x9}) sendmsg$NFT_BATCH(r1, 0x0, 0x22080881) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$tipc(0x1e, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x3a) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/159) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$vsock_stream(0x28, 0x1, 0x0) inotify_init1(0x0) fchdir(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) get_robust_list(0x0, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0xa4f4, &(0x7f0000000080)={0x0, 0x9c1b, 0x400, 0x3, 0x36a, 0x0, r3}, &(0x7f0000000100), &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) 3.125912342s ago: executing program 2 (id=1321): socket(0x1, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x885a0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x0, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x443) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000d"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0xa2e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x10000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0xb62b2d7fbad10100, 0x0, @fd_index=0xa, 0xa, 0x0, 0xb232, 0x3, 0x0, {0x0, r9}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r6, 0x5b3f, 0x0, 0x6, 0x0, 0x0) 2.971108702s ago: executing program 1 (id=1322): r0 = socket(0xa, 0x3, 0x3a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 2.568789208s ago: executing program 0 (id=1323): r0 = openat2(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x400000, 0x37, 0x1}, 0x18) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008940)=[{0x6, 0x1, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000000bc0)=""/186, 0xba}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/170, 0xaa}, {&(0x7f0000000a00)=""/61, 0x3d}, {&(0x7f0000000e40)=""/214, 0xd6}], &(0x7f0000000a40)=[0x7, 0xef, 0x7, 0xffffffffffffffff, 0x3]}, {0x6, 0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/119, 0x77}, {&(0x7f0000002040)=""/109, 0x6d}, {&(0x7f00000020c0)=""/133, 0x85}, {&(0x7f0000002180)=""/189, 0xbd}, {&(0x7f0000002240)=""/84, 0x54}], &(0x7f0000002340)=[0x100000001, 0x7]}, {0x8, 0x1, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002380)=""/128, 0x80}, {&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/200, 0xc8}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000002580)=""/15, 0xf}, {&(0x7f00000025c0)=""/17, 0x11}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/136, 0x88}], &(0x7f0000003740)=[0x246f, 0x3, 0x8000]}, {0x1, 0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003780)=""/223, 0xdf}], &(0x7f00000038c0)=[0xfffffffffffffff7, 0x7, 0x7f, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x4, 0x874f, 0xe]}, {0x4, 0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003940)=""/234, 0xea}, {&(0x7f0000003a40)=""/124, 0x7c}, {&(0x7f0000003ac0)=""/163, 0xa3}, {&(0x7f0000003b80)=""/120, 0x78}], &(0x7f0000003c40)=[0x3ff, 0x1, 0x333, 0x7ff]}, {0x7, 0x1, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/137, 0x89}, {&(0x7f0000004d40)=""/25, 0x19}, {&(0x7f0000004d80)=""/58, 0x3a}, {&(0x7f0000004dc0)=""/39, 0x27}, {&(0x7f0000004e00)=""/78, 0x4e}, {&(0x7f0000004e80)=""/238, 0xee}], &(0x7f0000005000)}, {0x2, 0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/229, 0xe5}], &(0x7f0000006180)}, {0x2, 0x1, 0x0, &(0x7f0000006380)=[{&(0x7f00000061c0)=""/242, 0xf2}, {&(0x7f00000062c0)=""/137, 0x89}], &(0x7f00000063c0)=[0x0, 0xd]}, {0x8, 0x0, 0x0, &(0x7f0000008880)=[{&(0x7f0000006400)=""/252, 0xfc}, {&(0x7f0000006500)=""/41, 0x29}, {&(0x7f0000006540)=""/209, 0xd1}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)=""/236, 0xec}, {&(0x7f0000008740)=""/121, 0x79}, {&(0x7f00000087c0)=""/131, 0x83}], &(0x7f0000008900)=[0x5, 0x7240, 0x4, 0x7, 0xea, 0x8]}], 0x9) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x2, 0x100, 0x1010002}) 274.606828ms ago: executing program 4 (id=1324): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000452000/0x4000)=nil, 0x4000, 0x2, 0x20010, r1, 0x4000) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@broadcast, @private=0xa010101}, 0xc) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000340)={r7, 0x0, r8, 0x400, 0x9, 0x8, 0x6, 0x3, 0xfff, 0x1, 0x800003ff, 0x4}) delete_module(0x0, 0xa00) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001439) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20080, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r10}], 0x1, 0x0, 0x0, 0x0) close(r9) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xffffffff}, 0xc) 213.785105ms ago: executing program 0 (id=1325): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "d2c4924d5e89213dc6e4453739f82a75eb318fca428cc2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000f00f3c49e4906eddfecd83634e4a37ef94add"}) 0s ago: executing program 0 (id=1326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="a5ad86773ea3f35185012c14d3c8465dd18a67f734e103057af803e393bb84b4c5f3ae9f05108954a1f6cab83a71ffcebfc4c22cf08eab03b069c11638e8a1cf3e365a4f95ba87d5c4a4986904db9022a74959b4d68bd2d40db0b058862556cf1ded5abe050782ef99f33c352e494407f16160730d9e6fe95e42595c499a11f27d7d6c3ca05c75f7f42e1b74941efd4fb8f90b11d26962b125a3e990f9bf9aeec32a17f1b1a5d624755edc3461379e0bdf0067a4ea52538bcadec95df4d53598def1c6a0b65dde20d8e32517b66a5d0726f4da53b17456e1543d11a3271bcfdd4ca4e640ab56f533a266498540752e615b25d15937df25f6da29ecddb9d32664b20c13acd4c6d03d621ad1ad28065466360869349f19653faf8b13e12030dbc28fffe9c7fa0bee63b03a0859da3cfff249bc14228607eaf030f5023bf7b171686d0b8c0d31d6d3013f3883846ffb0ecc5344784d2ae4ff6d1503fc6159799088b81107f61454c7b7163cdcfcb6a82d7a471a262f3a3f3cfd2fe6c7f58e699429c1a4ac7ca2791497d01ef4ab116e48ba925b668314022b1c27bea368910a46c075d598831c60071b5c8677c3df9d27f9164ca69d1d1dbd0d41330d2d4b12c07c0992087f398ab8fe9b19c7f5c48f4c8c347e18fc93cf6b4389775fb48e243d3264e4afc1ed26ddfca69e81cfd63cd04dbfe2c2d6b8499f2e1fb075c84226bc7a1efb0f19ebb89bfabb3d85374dc758f9591ace38a6fef45cecf3081f5a9ccdf77d0ddede13af89d703c199a7dfbe2aff3d9d3a9d4fcde60aefbb0abb7ae590869d767b84e0dca3b4073115348519d88028afc16240252e5d4472137d25b966b37adabcb6f01e36856f4217cf29a0d662131f093cd8185a41b01a206fb73a5df26df6ba2c3fc393ddf4f99e02678e3853ee83d19d0a4d7dc40191342c93b23e86f1edabfc3e9bd7efc0bf28a744212ced0ace896e0eee3414cc0ddffde9366d44e7700baba4a00d56007d693b778f1ab2de6905161da8731641f476108fd681ca09a1bbb95809c75f72a4ebf3d38c74f62c70f6822b4fd8039f8f2f7b8e712b9378d6d4747b8f6d158cfce5d6ffe1319c7b86a0f96b3f4365d9849a790d836037eb20bb8596851ecd3f110abf89b8a4f4eb576190526a91de141565c0c3af9b76a324dee6f44501897138404b30a847ebac6fd0b26305d27eddf40ecf07ab7e8b8d3b5b962811639077151f3c847a1f9cbce30e5ccf555de6118324370005636662fce70347c67b0a7bb973fbabb62da6af821940342ab3c4d3f73595b3d9f6a65f7b910273dd4ebdfc8416a428a17e92cb693ad6e03e09edf3bc208120d4aae4ff12c59ec3d5a64a51a80995a616b0b45f0ea045ebe09d3c3cc873f8a40cb9db578ae5a78f31404435359f877ed89014267024cfbb8426ee1e150d7dfd194ce9cbc5f312e2336a348917530e18b66a41e01e74f191399cae49992a31e9bf5d3b2e8305d984243ddf7fa0795e08590f94b6041d4f5401c9a7449ec699e4c7eb08d89a184eb63067377d96e53cfd93fd5b5866fa972f9474203ae6018371ed2365e7bb88bc6bff008dbb632c5c9760a5d7a65c7302941d6d4f84803479d952719caa9bc1220b592d60a8aa2b04f62a04a0049d9a36d12ed06ac68674eee13c3cca1d2a07f91dd8debbf5e82bbaae8c5a1e5521ddd128a23a922f10023c5e8e55f96c881f2bf417c3792f0a8c4a22f737bd04084e9db61d1657647118c1d003091eab1a3adf097fbe9136dacada86dd60a75f2827eff50df641d66962323abd5f8202d16c636b9274e7ad46bd519f2a0757b8553401011747364268143c4485fb51b2ecca18919f909d2cb2d4a2c103723ba4349a2381f83a7fd3f6b008358a24193571bd76591b613b4b30929a2558bd1879ce1c449e8e3307c6ac1173ad292775322dda75279ca9001d20bd0064a3899eeb87b5f4fbaf65d91155dc39e0f79891f762e10987b2ebac618f40be327d465cf40c2b148c9d3742760d6beeb391a0a8c4e3838e7cd2b742a306d1a5972827e839eedd6bfeef56bcb004b833662d17e759b1b706e28b32b2a84e4d86b67e2b11dc7ae4ef8151fdd4fc53428c50855e9abaeb0b956332289210d86dc378feaab8a0c45b6f09bc4391886b707db37c83bf22f02a9bcd43caf3c6ec0e8ad4b84f2aec3da84da1758067a4cec8de26490f06697df3f7d7a86299df4bfebb52f43a5a605232b5f92fdccd669fab79ae7adfc9c68adc2a55c13c70b5737d2fe0c69f4a8a5a4178fa7f097f5158ad90b4724288dd6ce1ff7708c3bd1e19ba2a2a186a0894a61f6cafc44bf29a4851a7c0c2deb822f1603918398ee4798bb4e593f08c4e9515b1350b50592f4a282824861d861ff70c5ae244f3d4b4d95b496982b0edf90ebe7bb222f0f3f228a48a4392ba8e0ea4c2aa486afe7d111fdc614f930c04be43cdb34c2450dbb733ddc826d8271bd6ac9d9df049aeb2a57f285738b7542662375422ddc4349dee1885c64effb5c8c8e3a8bd7848e878387ab4261f0a0e9bd8e000c2523d08d6fa03c8296c1929b2bcb30c689c6465eeb0713019ead65e07130eb71baa15eeffc70bf70dcfbe5c13e5759b313b35b8c112a8307931560e213ef1ee7ad2374c0312da17a6b7ec3f48a11cf6bdad0b6f67b7c60eaa4cbabbcafade116ee217bf3f05253356feb0256a1df45fbfb00c3f6278a56eea13aa32fe83edbd15e23253b862da2993e96fb709c2c0528b0b516c8ca560dcc24e7c433500ee1351f97178fb9b61eacff792a9261f27e934a24fccf11012e6a5eee61c597a9559b6a5f7d0d88f67fc1541462b9dfc2024d73bff0ffc3c46739cfaa41f840fe2d7b1298d80f128b3eb160bca57fdea45bbe29eaf7b7640f5ea2a5d77279e02b6c013bc679ea4283d32e78d4c21f5f58a9806a4de70bb7f49504edfea453a8e3697fbe9ee6239eb04b4bd697034f8c1fe1a4d7fdd3d80109f78bb85cd6914b4a9d00a3bf87849497e18ae2dadd9cd442e1c894715023fcaffe8a27a703c6a34dec4445f228bd60b868fedd096cac23378d109468b79581f5124eea9f3ea80ca6f2715b8e0e80cc81750e8988d89fcc50dc9e76ba46ec36dd5585874af0f02941c02ca858b5becdefe0e6c77c1bfcc126ccf13c902343519b41b15f910fdb1bac64655e3679bbf8b59648d65b1c5d57c6bf693cfde85b5511a1be1a931d37a3211d25ae28c593f46656f9722172b3e7b1c3dbaf61d6235ca84fd5498bcb7510ca9c06d058ea26e9fe57f2dbd18053642c460087ebbe4b0c3059e817a9951e039c23de52bf4b928ee5d11772707051be72bd3884498a007b9135cec74be9696301621f711b47a2b989566c6bb3a9631f85c6748522370b1c4fea537b83b49b2ae44f06fc74fecfd42922854bca422f81d404661a9c4103b483c9f79c32f9eddd1ea947c1e348b4064165ef4ac0507d0f565a1634a70a1fab4f891823ea7afc8edb3889b1fb7a7819d857c1045b4f8b01f8bdaafd6f4f213b2eda85a27338bbaaa24dbb22a88413a5b4c0b1ac51f7a1aa61a85f76223c91364fa44773898af48c23981d8c52297e8907aae0551613b953a859dddac4e19fe9f2327be14664c2b2c8f6d362b6e18fd96b554f4e742e2d778f5de63bdd17fb381858a6d14da717fcc9c7b06004e937317bf1bdfc8a6374e015e9979e43af1f66e62f90b1b468b14febfdcfd15c589c9baa42a67b6ccbb81dcebf9bfa78d2abb2082c0c33ee2d899e7b87023b0f1c799eef6e53283da313e3c474b954d380b6c4693e1083f01dfb02fb53c304f0bfdfb40fcfa08eaf72760dceb3813595bb49be0dcd1e4c1161abb7ac570dc5bc2baeb79cca7bf301875f3f6093dd0b122f771808627f780821f2d8fe4cf39d161cbfe9941da79f1f2f5be327c2d213da3e1618b803ab40eaf9f4589cd2f3ed74a2f912ab5e2dd05c19475568c20ed7c34e605bee8d323b56063cfb13c4f2269073bf7fcad909f7fd3325f98fca2363960a432b2b2ca4e04e4f39d9ebe4bc2ca59900b0ce612f01fd9afedebc22f4ae58604e48e33a0c4119b206a60d4b97b063d79385bdefa1c23468506303c79d31b77fb544eb8f8c3236e1ec72b9d58fe4e49fbcaa19fb07edb43191b5e48c1eede95a28b9e8c7860ccd5bb6a007a2c768a0760f9c9570b080f441dc6dc033d81c8ef13b60f9ce96ec6818e5776fde349c7d3874d3146a38c1e58471217e10ec300cc737ee91e045ffa79ca2338e67805209e1f3a04a9dae39ca37a3c6ed64578fde29d133a39bb9da890cfc6a9c6f84c56c9e44577ea74e7b9157f95aa2b3079af7845e38abc372184b48a8228df2840a524b5848a3af818d7ae11835a8bec25175b1aeee4a508b8d20b8ddd8373afccbf7b9aff7fbdcc8f6d7fff9ab723b5ade5936cf505505e4a89cf2272276d9bf56d7c6e945f3c39f2254c305beffdb265ca1f3b195b839c0f826f71b2959e73a54134749209a2ace005054697bd0a0016d0cefc7c4f2b0dc4584dc3e5b7d94ec23d7209b94ab96c41060423bcc99af410b07bfecf5cc262264f9a591b85b901524752b9ce5a3903a03b82036a4270bd8ad6f28fa8d0f209e16ff7f12fcb8805bfb5c8656175ce50873a2cb7066a837cc63d2b0b65cde5b119e47b54aaf1ab069484fadedd103441a694d0f0acb2e1da52a70a64c42248ce36fed3d0fa5b1b078c3b6a63beb0317b6739f9a8808b66afda629c96360ab132799af6dba0672ac4be87e259b430be1efaaac7c9c05ab195ed70a1dc2680ba71db3f0dc48967e6628df8142597abe82d630c1d4479fe475a172953812d7c325fef53891ce2983f201b6c061738c6ec221ce2b5cf0aae38d5ac05e6672644d4f0b1c4f9a3e45509cccb6f61d90962621c2d9e083bafa8e7243348425697edeb7d7ddc276e83908216fa4e2ab35aae56de866dd5a18a58fe8c1cca43a6078653fc270f59492e089b6e0bd4d2bc30488070e52588134f778c77e354575304eeee2e1d5df597b88197f906ce9e24d4bcd9eec05e014130ae2e2dcf8397b1ed7af9a30827222867aa962aa2252f57960ac5d5ed8e46e6e8db69de0858afe84dddb49176e1041de067046bcf7981d69adfe495ce1c15334977aca3c2a125f694edec5bc78a7a8e738753fdebb655e75310f4a22af0bfa26fb4985f11053df8af53e309b218969f6c582787ff3cded70b68754b379d640c776e8465377687f4fcddcfa4f5277093537d5e049527a0e6e6e411645e31c4935a080bb7b15fdc56df5ac1ada5fcc07b621d43dc91afb7d6b5d427dda3ca0d825e8042e7e01a8a430fde4b6561f6df873629cba4ce513fd5b0a83333022d55f1073809b23fdad04e0c5c5644c933e96dcb29c54eb4565d119dbe5a2f352180b1605275a7aa82cc6d81971fff3d5bb81dc7e9af8174213c650c277d9adf8a2b8d6ad768210194b5d7288814a744e58075b170e02893d0be115e1b2e3ccba2980a8864e3cba9fa84e6a47f90fe7a4a70c025f57e4027bd7f0306c92e92f0977a26415462a5a5f61a19099cde2aa0fec1b9fd8abc249b7b69fca9e1cf4b42abc0172bd20801ea9bd215e2bd9aefe52e780573a23342ed1ad03b24bafcc94ebdf131ed05134b753603c666a055eca36bf54efb416a98afc6847402c78824bac3403a79aa775b05e531e453e83416302ce7f01a9da05e54e731c20afb01674816c5e9366efe78a9b4b8661a859ae5f8fbd03a461004d422a0b3dab16f7883e2d26e9915b24df897f7acf5fe893cd80c5c8f0442e2686ff6d536271bd776a56d12fc4275c675cc4bb8c844ec6024a4a939d45a96064674f5d351e51fa8f8facdccf8cfec3de7c47deb24c3ff4c4a4b99c13a518c1f5dea99471f59a27d6d515d7c8ca06e53224dc4bf6e6d7d006d37ba13bfe2d1d77f04cbd44eb124cf71cbb8e6e4a9956769c57d4a64b6d95d73452c46c8a17e303ed77b6b726cf4c753690bfb61c27c1f45f5e3121064281016c353c84b65b94003ff01cb1d57d65a4380dd630d650293a07c9eecbe34c7e5d03a3d5062ad93a1327797e4bd3d4cc9336bb395385e5e9f03d8d5dbdb2da0d9a0f68fb9a919679473939f4a9a9e4a2ce9f816bd8f2a4252c7b634fef79234721c1d7fa34dd1b6598edfa84ecd62c92666dfa219dfed8485c9498a80184505673dd79b4c9a336b416a441e8b8e79ee1f9426d1fe2adb929fb8854ec6225e4175edc22eb73ac3f9b28c9c1adafcc2815a7b7f6c1a729aa301c7086d66b5a0f0c27cabac1599538a1ed5976f01257b95fb9a4cc1e5a12aba39f8809980ac76393977b5b0385c951a7690fd953b5bc3d2079a3ee8c551510562fbe7d2ff5116ec85c5cdb37cbb86b7fa606db26316172e57a3075bceef8dba1be6a8f61ce527f3b584e37f9e1c0befbfb83cf807e86716973013e6fd688e809ba31c1369f99ffbe6b8199a2c9aac0091e2f0f2a51700e89ca2efb381ea971e7bdfe9caa310003f9f198d640c0b8b6badeb767cb972fa5abc97d6e0c0ddc77b2eb494c5da33204afe3c970c8909f98b25e31e30bb42234106ce86ee6136d0a16ab914f8d6f1a9fe88048d22a13871ec9774da2602a0d4cdb9f8d0949c50507547ab2493c7d0fb4bbd3287dcfc1eb57d0c71bddea38dd1786768eabea8580f1900eb214f384511dbb99f4386953f373100aeed54ea66cb1f32344582a90849d3023b0de8bafe5b0f1d5234002216dd70634d942ef158f49359d623493f1d2adada48242d21d193179b8f5e1a1bb0c164391fb17d44cd09f764813dca6347b273598435865dbec1c589dc5d5aaf9fe6bebe721e8785d5ed664e50c414fbef17cc4686c603020a4011ff60f5b7ffe6a4d8217be0b4e8fae75a8220f6f072710e1f0c2a89633aed3adf2af7d427436d7068aea64b7882187fea7d69f02c44e867998efeb8f90ce9e3fce2fc5e3f977a9d6415fe595e92753bd5e8811b4ab2cc7bc3b34ea8d91e95d547ead77873e26e07a90427547361299a21b29dd5a1bbeaa33b4655fb3df7e99238b53f033758dbc351844409acddb2333170e07142b071d2d7ea86fcb37649a7400cf462fcbd6c02fb609e56e8e47c80b58b9dbf4e73bcbadf376cbafae49249b610058238e392a749b071b725529c668eb2e75044bc466bfb5dbab9312abb06436e1a317626f9622803561a71e22091c960c8c423ac00a449b9a5451dd99cc1722c1b0340d082a7122cb3392a19193897b406bbc4a78ca0bfbeca71fd9910ed9cdf669f940d7d61cdd74823914ba203d1103eddd28fd1ed0c0bcab9b572221366a296031cc7f1e9f97b7ef05e110cd27f9ed1b0df2a2f981944ffc9fc6e92b4dbef75e527553d3829af2aca624b18ef92dec1b73851a9ea355d98ec2ea68274985e4aa95faab576c81e6586b7801a2b99073c2d656d297d2e0a983de09d86b0bc36fd02137b215d6a4cc5adfe544a166139dd89ff4d0de249a784321db8dfc73de81279bc6c2839c650f54a5e88b50bb11ffac42a90f2aca834d1c0f06b6478202ef56de684f4776ba94b0fa397f5db3977b39ddb7f70cd6463103fd4703e30ae1b94c8e6398a7007974ed43776cd2f1b494f65435dfa5d815a50e15afbad31d3261321d77569f1dadf6f48b6caa307521d1d3103dcbff0ba520dcf80500d688dad6e988c717690ab7e29523f8a608861b766abff0cdebd2f7f4282f368511dd1df9489b0c6ce07ba9425b4b1f756ed37fce6655799645c4553388d054f86f81989b3e8fba5c21298dba9106f46266cf2014e76ee47124e04c7d75e92a064160d96657bc5df0b8e932c64f6cf55d95c983d5147b4506b6d54b6e670fbf8934752007adabdb434a70f63801c4c3341471bedc1f022311d06544431ed3e7d9da29f95e800a0381e5756cb62f2a6ff85ed3f36e72ddab05a47816b2d02baf92351f0f3bb4cdbe23ba3f469a8745148b8c9bf844021cb8848d605430df2127634f7613ce3bb7757de1de0644e9598a17272d1e7756d4f9458fd3fe8f4106c7fb1a1e1d6c8557291448c16c04a51c4472bdb4cd2b57dbaa67b81b3f1e9e3b86c9b0da0e9d2d89b59303c678ec58405224dc1e5f2cd9e9b7b72d5fa31348d76cad9a853570858678678cc92ce1d62955e82915a8d0e88056b3edf310bca83b7356f9f73e3b5de4745a6f47824d292f56165620ab44b0d22799df21820943b8357eae383bb70c2f0e9a215588a147e5d2a9e16bbeb5ec4841c5ee91dd882e5a203b45b73b4f4fd1d889f4683834fc92a1e1b24535bcbe602b3b340b4c117279fa553d004a16fc4b7d9fd6729cb13b235d7b203192edccec5974f63ddbbba9dbeafd06dd570a33be5f6193b82ae77deb202e2986f816ad9285edbd2954c0e9aa43c39684d0a5e290b2b13c8cba34c054f41eff0d190f25c1d59cbcffd1e579826fbbdf80b681c05e2fd0475de344b3ac41367493e7310e5fa72ce9a2e416d35cdbbedf1c93810ebcf9f5732c5b484415cf71ae710e00577f0f3f7ef5d3e4d47b5d5e9e21abc44753405771d9c618b0c05ab9ec1bc45c34a67f70b74fb33b8f746a758bc5042b031737a12014e5d73cdc989a670db9d4423abeb8f6427f066bd8fcc71c582adedad3b72647138219f5a4435a41872804b5978e268aad516b0b3c0f974f480eb981d2db793aa25c5790cc56b397c6105da21152347521e103b0eaac91e050493099982f93e5ec75ed706d0fff7ec5b9661c66d02fc6e7fb49bb65c50a4812e58820a1147b5329df73eb4992929799e343839d965729434f8a606fe7392e0e48ddccd3f59fdbf38a592a9e1dec57d7d4b89e78d2bd30ab9eb265db1f80ac985222f873dd890afff7dd605d7402dbed83ea5607f289d961abac5f0c00e98fcbdd836780835800eb0a790118ee0b035b5cf39ff1caf872a0e86444478a1b83faa8f1d5ea398347303c1b8be1a94693eaf1de04cace54f0c3382ebea97a331fac8e4f5abaa24b822324553fc1b125dcb529136f2197951967d02a55790b4d417fb275f929f1ed6e0cfa7a9a614265c7ea9ccf9bb96cba9accaba01fd63af4ebc37d2c7cb0bb7389fdd328f993949dfdaf063578db6e1e35c3749447a0a845b6ba04f937e4e0c4980f1ce7dc5d47774f7dcfa3e84bec4876af3b51ede5aecf92d1a0ef9f012d7cd9c5f47abdbddb076ac0fc05ba2658ebdda7af2435059b24c9aee20876fdda66656b831cad9609391794bf0fb57e518ab26fb0d177a4110a87ac93768b08b92f0683a66bf1532b0ff6a8db03554d1d4047d2c073fb60d4cd9bb9ed2d41cfc2025665f5ac00957e0eaf7b2ba7518d1713262b470f6857a07853276bf08b0eb041715c1b7c448e1b28a41dbcd5ce69fa1131660808c08d105f5788796066af89097edf7090eaa022e75915cbe72c689ab93d213889fef4d6de2acc059fd6c35a9cdf80a3d88cb860a202a597cf673b79a1c609043ef1e65aa0e6288dd1092ff1b531b7dd7a488afae9dceebeba90b60b6b71e96a1823ebf486bf5e375176c3c526fad306dc1e44993695b32f5300f135a2aebad9b5656a5fcb67a3f1859de9ba4ed843852f91350509ea7304fe7f472da15e50a54e7262a0514bfd2cdfa0d9e9b4a481d39c2b0a46a8947af02704216fe262461e06cbd88c590e3f86a7d74adce933d23beb02195d2c9560728b96247d02bde5286b8710261a96f19e141b2f1622031df8b75cdc5a8c65e711b2087d8899b31cf86a885577aae471a1146641b20afc3bdf1911be8823bab47c195221a7fbba5733c4d874cbb6d1f207a1d155fbd1e9793cb46ba83b6ab91caa1a5aa5284b5007bf628206eb704e80f4e28a09770bc4fa6e3400b31c37561f3bed0290c51b1d01d232e343d84c698f64b7d492a379786c63f4796651bc715c1dd30ae37e6ff3967326a2593974fa02efac13bc74cfa071d3c348f9f84d7a6dd97a610bf7f0024ce7ccc0398acbb3ef7c3ce3600bb5a07b4881abc9e9ffdf1ba1152b9d225053efe3c181c9d9e98a456a9f28319e39b866b0cbc4a6eff719fa3540ce3026ba90e30660f09d3e16db8778e979709ae27e40f1c5f180594dbf55f153927ca9c881c3ff706b7de6e239095d9ccac1ac8f1d5988e9cda3556e43cf74f651738209ddccbfda79e67c23ed97d1cdd92433fe51a003446a56836b220da9593ef87911fd3078a51c0c209e92151d35291af699a77b83f3e09d2f8f9dfb66b34c842ab861dcf33ec1110273bfcf7fa29c8baa43fa8da2ccd3162b3152357681107f4be09ab0e662f950448c8886ebf49655705df0977f0fdf12fb3c2a81d246e78d6e3ad8a4b0c5b9a39aee65f83ee2aa62b129a7efb72057cb2357aa72aa1cf2eedb8daf0a836c7da040a94e166d17d8f0b41d236abbf2061af06facb9a86b806de43ce4822c2636147247ab1b8fc32a888eff0e260297a605a71899e075e8309711e933138f7428a1e1954adc35a23d8c315e5a65602a8aa2268b5d392061be3aa40ed52b6054c25a0c539dda675c413e6cc5ec19a7c1e3c7131184501377e25636e1e37a0b8a6480611a6cc021b478551a8c3ff5e7d57166888675a3d725a2a1b4a9b69fd60c49683814014f1fcd050e8f26f440e614ed5934bd283be8d1d43477549b3e428b41aeccfd3369e757d70c412559c765520b34cafda9229146a9bea0d055aff9f106ba9349bd2f645c505e89333536e8b188c5eae0fda1e541736f7dce3b7a12aa7430078ce70f2a8eafa66843fa130f0cd2cf6cc1f56be9680b5750a7a3a6816e5b4f9ffa728c65bc28053d84beb84565103e61fca58485e0cf1278814bf5e2d2d120c16b08161d59483c5cc2548ba53b3e1291b0b0ebe1514f5fec853e3e26e1f4549ba0d0c7c858935c646c7595f734fba241165dc31b359c67e90db8e27a985f21edfe98fd498ce88d38a532e5300d1abdde20706e13c431221d9c403f7643436858c19fd340a1e74f30c2033f79a3bf9ec68bd38635714097186ce3a42b600b697d12550a09c2060832c904ae72acd1c509ef0adcb31640402e4e65c26c815e2bc35d12b657ba619058484bd9a3ea9e263a213513e2b0d07b06fb002865a9d29b399ab07d4471cd2da3685bde46f5b09f6169c26d904afdeb86f2f4d085f86d175be548d1608fcd8ba5514f22a65071467bba7c44d34d39863006396f8dff18ab1cd7e4e4672053804c1060f3164a9df4887beda223104813ca0bdce7e812db8ebbefc71e03ca41f36d1ffffa303cfcf4c4385a792358c6779948ee91bc2d497de9fc21dd9635be1b66f723cb8a209e063a87df1ee57a240a667bc8c25968aefc53190ca6005140628077f1a069f0f569f3a5fac034fedc9b5e15ed73843bfdbbf264664ae276afbd6cf4769b660f271e7b01726871fc283cfa16431028d73d42ef76af2c813b6b5acc6e344da7edf7e6b248f0e9dc0a6c164a1ee821e5ed42d64a4b6054e0e7bf5f920b3bf64d52f3175861d6a95f28a644824ea6ae6988948d9c94c3a9b567573f10e0ca6a22913d200", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x4001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x2) dup3(r1, r2, 0x0) open$dir(0x0, 0x0, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000002c2803", @ANYRES32=0x0], 0x34}}, 0x48040) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xe0}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="f4000900062c2c25fe80000000000000dc9f8d0f238466cc00007a000000ad6e2f911b51818462", 0x27}, {&(0x7f0000001780)="8c", 0x1}], 0x2, 0x0, 0x0, 0x74}, 0x0) ptrace$getenv(0x4201, r4, 0xfffffffffffffffe, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x63d2, 0x0) gettid() socket(0x1e, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8, {0x95b, 0xfffffffb}}, './file0\x00'}) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, 0x0) kernel console output (not intermixed with test programs): es [ 384.364648][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.371286][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.377602][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.384229][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.390459][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.397054][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.403288][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.409891][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.416303][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.422940][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.429200][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 384.435810][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 384.436016][T10472] Bluetooth: hci1: command tx timeout [ 384.457285][ T8] usb 5-1: USB disconnect, device number 64 [ 384.463299][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.063588][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 385.178467][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 385.902991][ T29] audit: type=1326 audit(1729668188.598:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01a7f7dff9 code=0x0 [ 386.191774][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.215978][T10599] IPv6: Can't replace route, no match found [ 386.247096][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.392400][T10559] team0: Port device team_slave_0 added [ 386.446892][T10559] team0: Port device team_slave_1 added [ 386.494947][T10472] Bluetooth: hci1: command tx timeout [ 386.514314][T10616] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 386.547413][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.554416][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.594498][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.607865][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.614921][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.641077][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.767520][T10559] hsr_slave_0: entered promiscuous mode [ 386.800924][T10559] hsr_slave_1: entered promiscuous mode [ 386.842667][T10559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.873758][ T29] audit: type=1326 audit(1729668189.568:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68277dff9 code=0x7ffc0000 [ 386.898809][T10559] Cannot create hsr debugfs directory [ 386.924887][ T937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 386.953172][T10631] misc userio: The device must be registered before sending interrupts [ 386.996427][ T29] audit: type=1326 audit(1729668189.598:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68277dff9 code=0x7ffc0000 [ 387.135212][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 387.161307][ T29] audit: type=1326 audit(1729668189.598:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc68277c990 code=0x7ffc0000 [ 387.184901][ T51] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 387.199037][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 387.235702][ T29] audit: type=1326 audit(1729668189.598:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.275214][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 387.305292][ T937] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 387.314366][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.324918][ T5348] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 387.344807][ T29] audit: type=1326 audit(1729668189.598:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.398392][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 387.428874][ T29] audit: type=1326 audit(1729668189.638:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.517494][ T937] usb 1-1: config 0 descriptor?? [ 387.555581][ T5348] usb 4-1: config 0 has no interfaces? [ 387.561906][ T29] audit: type=1326 audit(1729668189.638:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.596313][ T51] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 387.607352][ T5348] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.637170][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.677261][ T5348] usb 4-1: Product: syz [ 387.681553][ T5348] usb 4-1: Manufacturer: syz [ 387.701889][ T29] audit: type=1326 audit(1729668189.738:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.734795][ T51] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 387.745193][T10621] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1134'. [ 387.765263][ T5348] usb 4-1: SerialNumber: syz [ 387.765849][ T51] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 387.781328][ T5348] usb 4-1: config 0 descriptor?? [ 387.816608][ T51] usb 5-1: config 0 has no interface number 0 [ 387.826407][ T29] audit: type=1326 audit(1729668189.818:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc68277dbfb code=0x7ffc0000 [ 387.847758][T10644] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1134'. [ 387.875382][ T51] usb 5-1: config 0 has no interface number 1 [ 387.887734][ T51] usb 5-1: config 0 interface 65 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 387.972678][T10644] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 388.024832][ T51] usb 5-1: config 0 interface 65 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 388.178440][ T51] usb 5-1: config 0 interface 65 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 388.190144][ T51] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x8E has invalid maxpacket 6487, setting to 64 [ 388.201640][ T51] usb 5-1: config 0 interface 65 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 388.212401][ T51] usb 5-1: config 0 interface 65 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 388.223543][ T51] usb 5-1: config 0 interface 65 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 388.235638][ T51] usb 5-1: config 0 interface 65 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 388.246381][ T51] usb 5-1: config 0 interface 65 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 16 [ 388.259624][ T51] usb 5-1: too many endpoints for config 0 interface 231 altsetting 239: 180, using maximum allowed: 30 [ 388.270998][ T51] usb 5-1: config 0 interface 231 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 388.282125][ T51] usb 5-1: config 0 interface 231 altsetting 239 has a duplicate endpoint with address 0x3, skipping [ 388.293096][ T51] usb 5-1: config 0 interface 231 altsetting 239 has a duplicate endpoint with address 0xE, skipping [ 388.304188][ T51] usb 5-1: config 0 interface 231 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 388.315469][ T51] usb 5-1: config 0 interface 231 altsetting 239 has a duplicate endpoint with address 0x2, skipping [ 388.326905][ T51] usb 5-1: config 0 interface 231 altsetting 239 has 6 endpoint descriptors, different from the interface descriptor's value: 180 [ 388.340940][ T51] usb 5-1: config 0 interface 231 has no altsetting 0 [ 388.393197][ T937] usbhid 1-1:0.0: can't add hid device: -71 [ 388.399434][ T937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.477602][ T937] usb 1-1: USB disconnect, device number 33 [ 388.547986][ T51] usb 5-1: New USB device found, idVendor=0d46, idProduct=2021, bcdDevice=fb.3f [ 388.557286][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.565621][ T51] usb 5-1: Product: syz [ 388.569828][ T51] usb 5-1: Manufacturer: syz [ 388.573054][T10472] Bluetooth: hci1: command tx timeout [ 388.574449][ T51] usb 5-1: SerialNumber: syz [ 388.587387][ T51] usb 5-1: config 0 descriptor?? [ 388.669579][T10627] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.925857][T10627] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.976403][ T51] ftdi_sio 5-1:0.65: FTDI USB Serial Device converter detected [ 388.984965][ T51] ftdi_sio ttyUSB0: unknown device type: 0xfb3f [ 389.287221][T10559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.771315][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 389.778880][ T937] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 389.800257][T10559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.854816][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 389.934967][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 389.941732][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.953074][ T937] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.963863][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.975246][T10559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.998310][T10559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 390.024949][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.048126][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.063797][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 390.073412][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.132321][ T937] usb 1-1: config 0 descriptor?? [ 390.458242][T10559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.585296][ T937] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 390.617655][T10559] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.776849][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.784002][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.795179][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.802326][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.912015][T10559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.942216][T10559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.082320][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.146625][ T5321] usb 1-1: USB disconnect, device number 34 [ 391.155765][ T5321] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 391.244078][T10666] chnl_net:caif_netlink_parms(): no params data found [ 391.433654][ T5321] usb 4-1: USB disconnect, device number 62 [ 391.662804][ T51] ftdi_sio 5-1:0.231: FTDI USB Serial Device converter detected [ 391.668881][T10559] veth0_vlan: entered promiscuous mode [ 391.671543][ T51] ftdi_sio ttyUSB1: unknown device type: 0xfb3f [ 391.701275][T10559] veth1_vlan: entered promiscuous mode [ 391.725813][T10559] veth0_macvtap: entered promiscuous mode [ 391.762783][ T51] usb 5-1: USB disconnect, device number 65 [ 391.773243][ T51] ftdi_sio 5-1:0.65: device disconnected [ 391.780859][ T51] ftdi_sio 5-1:0.231: device disconnected [ 391.901588][T10559] veth1_macvtap: entered promiscuous mode [ 391.913548][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.921944][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.931910][T10666] bridge_slave_0: entered allmulticast mode [ 391.963252][T10666] bridge_slave_0: entered promiscuous mode [ 391.996728][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.014948][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.032388][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.062374][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.092743][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.147903][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.165338][ T54] Bluetooth: hci7: command tx timeout [ 392.180741][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.191539][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.203653][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.216108][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.226239][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.237169][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.258193][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 392.267406][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.320759][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.333699][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.345869][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.367546][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.385355][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.392681][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.402907][T10666] bridge_slave_1: entered allmulticast mode [ 392.431178][T10666] bridge_slave_1: entered promiscuous mode [ 392.487600][T10686] IPv6: Can't replace route, no match found [ 392.498858][T10700] bridge0: port 3(vlan3) entered blocking state [ 392.505730][T10700] bridge0: port 3(vlan3) entered disabled state [ 392.517919][T10700] vlan3: entered allmulticast mode [ 392.536325][T10700] vlan3: entered promiscuous mode [ 392.561580][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.571774][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.601842][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.627386][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.650622][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.672951][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.694522][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.713535][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.734981][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.756126][ T5321] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 392.758857][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.784840][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.805676][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.824837][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.847614][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.864911][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.894800][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.914812][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.934738][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.936394][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.956091][T10559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.966941][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.000026][ T5321] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 393.019322][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.031043][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.058272][T10559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.076876][ T5321] usb 1-1: config 0 descriptor?? [ 393.095416][T10559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.104154][T10559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.157789][T10559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.181566][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.378325][T10666] team0: Port device team_slave_0 added [ 393.445346][T10666] team0: Port device team_slave_1 added [ 393.707880][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.747081][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.845176][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.887789][ T5321] usbhid 1-1:0.0: can't add hid device: -71 [ 393.905522][ T5321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 393.910473][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.929876][ T5321] usb 1-1: USB disconnect, device number 35 [ 393.940915][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.971766][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.024815][T10744] lo: entered allmulticast mode [ 394.094823][ T937] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 394.246473][ T54] Bluetooth: hci7: command tx timeout [ 394.266600][T10666] hsr_slave_0: entered promiscuous mode [ 394.305398][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 394.318408][T10666] hsr_slave_1: entered promiscuous mode [ 394.329078][ T937] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 394.351156][ T937] usb 4-1: config 0 has no interface number 0 [ 394.368947][T10666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.390954][ T937] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 394.421528][T10666] Cannot create hsr debugfs directory [ 394.457864][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.484922][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.496875][ T937] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 394.528045][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.596395][ T937] usb 4-1: Product: syz [ 394.618983][ T937] usb 4-1: Manufacturer: syz [ 394.623656][ T937] usb 4-1: SerialNumber: syz [ 394.651721][ T937] usb 4-1: config 0 descriptor?? [ 394.781155][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.807491][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.279788][T10666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.755580][ T5293] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 395.784947][ T5290] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 395.849104][T10666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.914948][ T5290] usb 5-1: device descriptor read/64, error -71 [ 395.923479][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.940018][ T5293] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.962391][ T5293] usb 1-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 396.018261][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.057732][ T5293] usb 1-1: config 0 descriptor?? [ 396.092648][T10666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.108552][ T5293] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 396.151711][ T5293] dvb-usb: bulk message failed: -90 (3/0) [ 396.180724][ T5290] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 396.227880][ T5293] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.259189][ T5293] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 396.276963][T10666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.309559][ T5293] usb 1-1: media controller created [ 396.325617][ T54] Bluetooth: hci7: command tx timeout [ 396.354968][ T5290] usb 5-1: device descriptor read/64, error -71 [ 396.418913][ T5293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.472621][ T5293] dvb-usb: bulk message failed: -90 (6/0) [ 396.500385][ T5290] usb usb5-port1: attempt power cycle [ 396.525221][ T5293] dvb-usb: bulk message failed: -90 (6/0) [ 396.531612][ T5293] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 396.574865][ T5289] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 396.585615][ T5293] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 396.638322][ T5293] dvb-usb: schedule remote query interval to 150 msecs. [ 396.646794][T10666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.657053][ T5293] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 396.671681][T10666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.698246][ T5293] usb 1-1: USB disconnect, device number 36 [ 396.705190][T10666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.734806][ T5289] usb 3-1: device descriptor read/64, error -71 [ 396.758511][T10666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.797978][ T5293] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 396.874822][ T5290] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 396.896916][ T5290] usb 5-1: device descriptor read/8, error -71 [ 396.997612][ T5289] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 397.027682][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.089335][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.135259][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.142368][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.164839][ T5290] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 397.173283][ T5289] usb 3-1: device descriptor read/64, error -71 [ 397.195293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.202424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.214812][ T5290] usb 5-1: device descriptor read/8, error -71 [ 397.283732][T10666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.303777][ T937] usb 4-1: USB disconnect, device number 63 [ 397.306059][T10666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.325979][ T5289] usb usb3-port1: attempt power cycle [ 397.357201][ T5290] usb usb5-port1: unable to enumerate USB device [ 397.383049][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.403444][T10809] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 397.414306][T10812] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1164'. [ 397.425850][T10812] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 397.462594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.473885][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.474962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.530371][T10666] veth0_vlan: entered promiscuous mode [ 397.571100][T10814] sctp: [Deprecated]: syz.0.1166 (pid 10814) Use of int in maxseg socket option. [ 397.571100][T10814] Use struct sctp_assoc_value instead [ 397.603253][T10666] veth1_vlan: entered promiscuous mode [ 397.714879][ T5289] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 397.726968][T10666] veth0_macvtap: entered promiscuous mode [ 397.747346][ T5289] usb 3-1: device descriptor read/8, error -71 [ 397.747726][T10666] veth1_macvtap: entered promiscuous mode [ 397.773457][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.799417][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.817303][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.848670][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.860370][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.870945][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.881623][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.892954][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.903268][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.913971][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.923842][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.935427][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.946079][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.958024][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.969778][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.980497][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.990948][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.002146][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.016235][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.035489][ T5289] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 398.039676][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.056033][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.066366][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.077455][ T5289] usb 3-1: device descriptor read/8, error -71 [ 398.077603][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.094118][ T5318] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 398.100575][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.102531][ T5348] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 398.122812][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.132939][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.143742][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.155701][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.166924][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.177066][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.187345][ T5289] usb usb3-port1: unable to enumerate USB device [ 398.188802][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.203871][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.214908][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.226678][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.237414][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.248201][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.260452][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.270531][ T5318] usb 1-1: Using ep0 maxpacket: 8 [ 398.272419][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.275726][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 398.278693][ T5318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.291555][T10666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.309148][T10666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.314843][ T5348] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 398.319322][T10666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.334869][ T5318] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.337007][T10666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.347865][ T5348] usb 4-1: can't read configurations, error -61 [ 398.354995][ T5318] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 398.373764][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.389522][ T5318] usb 1-1: config 0 descriptor?? [ 398.410489][ T5318] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 398.420175][ T54] Bluetooth: hci7: command tx timeout [ 398.471216][ T6933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.482339][ T6933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.490307][ T5348] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 398.513532][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.522582][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.603106][ T5289] usb 1-1: USB disconnect, device number 37 [ 398.654843][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 398.666677][ T5348] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 398.674534][ T5348] usb 4-1: can't read configurations, error -61 [ 398.682459][ T5348] usb usb4-port1: attempt power cycle [ 398.895238][ T5321] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 399.024971][ T5348] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 399.045152][ T5321] usb 2-1: Using ep0 maxpacket: 16 [ 399.060061][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 399.105851][ T5321] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 399.119921][ T5348] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 399.128550][ T5348] usb 4-1: can't read configurations, error -61 [ 399.135250][ T5321] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 399.144385][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.154910][ T5321] usb 2-1: Product: syz [ 399.159385][ T5321] usb 2-1: Manufacturer: syz [ 399.164061][ T5321] usb 2-1: SerialNumber: syz [ 399.170969][ T5321] usb 2-1: config 0 descriptor?? [ 399.223146][ T5321] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 399.274865][ T5348] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 399.313032][T10842] ipt_ECN: cannot use operation on non-tcp rule [ 399.320615][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 399.330034][ T5348] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 399.349801][ T5348] usb 4-1: can't read configurations, error -61 [ 399.366568][ T5348] usb usb4-port1: unable to enumerate USB device [ 399.490093][T10846] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1176'. [ 400.364935][ T63] usb 2-1: Failed to submit usb control message: -110 [ 400.372346][ T63] usb 2-1: unable to send the bmi data to the device: -110 [ 400.391281][ T63] usb 2-1: unable to get target info from device [ 400.424546][ T63] usb 2-1: could not get target info (-110) [ 400.465024][ T63] usb 2-1: could not probe fw (-110) [ 400.815090][ T937] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 400.959309][ T937] usb 3-1: device descriptor read/64, error -71 [ 401.225300][ T937] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 401.385605][ T937] usb 3-1: device descriptor read/64, error -71 [ 401.395034][T10880] dummy0: entered promiscuous mode [ 401.407529][T10880] macsec1: entered promiscuous mode [ 401.419735][T10880] macsec1: entered allmulticast mode [ 401.434380][T10880] dummy0: entered allmulticast mode [ 401.456257][T10880] dummy0: left allmulticast mode [ 401.466155][T10880] dummy0: left promiscuous mode [ 401.495471][ T937] usb usb3-port1: attempt power cycle [ 401.712252][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 401.712273][ T29] audit: type=1326 audit(1729668204.408:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 401.755835][ T5293] usb 2-1: USB disconnect, device number 50 [ 401.786725][ T29] audit: type=1326 audit(1729668204.408:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 401.845581][ T937] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 401.876849][T10894] ipt_ECN: cannot use operation on non-tcp rule [ 401.877013][ T937] usb 3-1: device descriptor read/8, error -71 [ 401.895688][ T29] audit: type=1326 audit(1729668204.458:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 401.987970][ T29] audit: type=1326 audit(1729668204.458:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.024958][T10896] program syz.4.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.064996][ T29] audit: type=1326 audit(1729668204.458:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.129266][ T29] audit: type=1326 audit(1729668204.458:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.165417][ T937] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 402.217305][ T937] usb 3-1: device descriptor read/8, error -71 [ 402.240590][ T29] audit: type=1326 audit(1729668204.458:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.318781][ T29] audit: type=1326 audit(1729668204.458:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.345175][ T937] usb usb3-port1: unable to enumerate USB device [ 402.388160][ T29] audit: type=1326 audit(1729668204.458:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.454985][ T29] audit: type=1326 audit(1729668204.518:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ab7dff9 code=0x7ffc0000 [ 402.576078][ T5293] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 402.735509][ T5293] usb 5-1: Using ep0 maxpacket: 16 [ 402.754640][ T5293] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 402.767095][ T5293] usb 5-1: config 0 has no interface number 0 [ 402.811878][ T5293] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 402.834315][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.860690][ T5293] usb 5-1: Product: syz [ 402.878734][ T5293] usb 5-1: Manufacturer: syz [ 402.883410][ T5293] usb 5-1: SerialNumber: syz [ 402.935657][ T5293] usb 5-1: config 0 descriptor?? [ 403.156942][ T5318] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 403.203092][ T5293] usb 5-1: USB disconnect, device number 70 [ 403.294803][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 403.316233][ T5318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.326713][ T5318] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 403.336405][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.355091][ T5318] usb 4-1: config 0 descriptor?? [ 403.455149][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 403.462377][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 403.470705][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 403.482325][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.492200][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.606549][ T9] usb 4-1: USB disconnect, device number 68 [ 404.216128][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 404.323682][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.366271][ T9] usb 5-1: device descriptor read/64, error -71 [ 404.454152][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.561908][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.605838][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 404.721200][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.746398][T10472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.755198][ T9] usb 5-1: device descriptor read/64, error -71 [ 404.765009][T10472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.774441][T10472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.785476][T10472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.793367][T10472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.800845][T10472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.885486][ T9] usb usb5-port1: attempt power cycle [ 405.039057][ T63] bridge_slave_1: left allmulticast mode [ 405.064511][ T63] bridge_slave_1: left promiscuous mode [ 405.075250][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.150015][ T63] bridge_slave_0: left allmulticast mode [ 405.166005][ T63] bridge_slave_0: left promiscuous mode [ 405.171863][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.254947][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 405.296015][ T9] usb 5-1: device descriptor read/8, error -71 [ 405.493841][ T5293] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 405.582433][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 405.615751][ T9] usb 5-1: device descriptor read/8, error -71 [ 405.675963][ T5293] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 405.684490][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 405.720069][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 405.736522][ T9] usb usb5-port1: unable to enumerate USB device [ 405.763125][ T5293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.804921][ T5293] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.836213][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.865827][ T5293] usb 3-1: config 0 descriptor?? [ 405.875217][T10948] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 406.039709][T10961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 406.078605][ T9] usb 2-1: USB disconnect, device number 51 [ 406.324273][ T5293] usbhid 3-1:0.0: can't add hid device: -71 [ 406.348009][ T5293] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 406.375247][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.385976][ T5293] usb 3-1: USB disconnect, device number 79 [ 406.412813][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.441837][ T63] bond0 (unregistering): Released all slaves [ 406.663271][T10958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.672500][T10958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.681493][T10958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.690297][T10958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.738381][T10977] netlink: 'syz.2.1215': attribute type 3 has an invalid length. [ 406.785456][T10980] ipt_ECN: cannot use operation on non-tcp rule [ 406.885753][T10472] Bluetooth: hci3: command tx timeout [ 407.161821][ T937] IPVS: starting estimator thread 0... [ 407.194266][ T63] hsr_slave_0: left promiscuous mode [ 407.267431][T10995] IPVS: using max 16 ests per chain, 38400 per kthread [ 407.302593][ T63] hsr_slave_1: left promiscuous mode [ 407.368057][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.376844][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.385155][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.408490][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.428952][T10999] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1219'. [ 407.514640][ T63] veth1_macvtap: left promiscuous mode [ 407.563265][ T63] veth0_macvtap: left promiscuous mode [ 407.585016][ T63] veth1_vlan: left promiscuous mode [ 407.607427][ T63] veth0_vlan: left promiscuous mode [ 408.116637][ T5293] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 408.287212][ T5293] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 408.297469][ T5293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.319556][ T5293] usb 2-1: config 0 has no interface number 0 [ 408.331281][ T5293] usb 2-1: config 0 interface 242 has no altsetting 0 [ 408.343569][ T5293] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba [ 408.366315][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.374511][ T5293] usb 2-1: Product: syz [ 408.387443][ T5293] usb 2-1: Manufacturer: syz [ 408.393767][ T5293] usb 2-1: SerialNumber: syz [ 408.402099][ T5293] usb 2-1: config 0 descriptor?? [ 408.435579][ T5293] option 2-1:0.242: GSM modem (1-port) converter detected [ 408.836388][ T63] team0 (unregistering): Port device team_slave_1 removed [ 408.914172][ T63] team0 (unregistering): Port device team_slave_0 removed [ 408.968303][T10472] Bluetooth: hci3: command tx timeout [ 409.648659][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1225'. [ 409.662111][T11023] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 409.715178][T11025] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 409.752866][T11025] batman_adv: batadv0: Adding interface: team0 [ 409.760141][T11025] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.797065][T11025] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 409.835767][T11027] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 409.843669][T11027] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1226'. [ 409.875015][T11027] team0: entered promiscuous mode [ 409.889203][T11027] team_slave_0: entered promiscuous mode [ 409.895678][T11027] team_slave_1: entered promiscuous mode [ 409.912537][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.919711][T11027] batman_adv: batadv0: Interface activated: team0 [ 409.926948][T11027] batman_adv: batadv0: Interface deactivated: team0 [ 409.936220][T11027] batman_adv: batadv0: Removing interface: team0 [ 409.951297][T11027] bridge0: port 3(team0) entered blocking state [ 409.958030][T11027] bridge0: port 3(team0) entered disabled state [ 409.964521][T11027] team0: entered allmulticast mode [ 409.969921][T11027] team_slave_0: entered allmulticast mode [ 409.975859][T11027] team_slave_1: entered allmulticast mode [ 409.984904][T11027] bridge0: port 3(team0) entered blocking state [ 409.991239][T11027] bridge0: port 3(team0) entered forwarding state [ 409.999826][T11014] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 410.011765][T11014] netlink: 'syz.1.1224': attribute type 2 has an invalid length. [ 410.033131][ T937] usb 2-1: USB disconnect, device number 52 [ 410.053278][T11031] tipc: Started in network mode [ 410.062426][ T937] option 2-1:0.242: device disconnected [ 410.068832][T11031] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 410.085358][T11031] tipc: Enabling of bearer rejected, failed to enable media [ 410.372124][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x7 [ 410.385460][T10939] chnl_net:caif_netlink_parms(): no params data found [ 410.414840][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: ignoring exceeding usage max [ 410.465378][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.512619][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.544406][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.570312][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.624965][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.665295][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.675818][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.685862][ T5318] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 410.709052][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.730258][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.741637][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.752712][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.772414][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.876973][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.924199][ T5318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 410.942622][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 410.956597][T11061] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1231'. [ 410.963613][T10939] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.982888][ T5318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.997172][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.019255][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.019259][ T5318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 411.019307][ T5318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.026549][ T5293] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 411.055441][T10472] Bluetooth: hci3: command tx timeout [ 411.075116][T10939] bridge_slave_0: entered allmulticast mode [ 411.081807][T10939] bridge_slave_0: entered promiscuous mode [ 411.087841][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.096047][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.103996][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.121344][ T5318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 411.131895][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.145482][T10939] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.165866][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 411.194981][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.196821][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.214245][ T5318] usb 3-1: Product: syz [ 411.231324][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: unknown main item tag 0x0 [ 411.240017][ T5318] usb 3-1: Manufacturer: syz [ 411.262197][T10939] bridge_slave_1: entered allmulticast mode [ 411.280397][ T5318] cdc_wdm 3-1:1.0: skipping garbage [ 411.286237][ T5321] hid-generic 0000:FFFFFFFE:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.302163][ T5318] cdc_wdm 3-1:1.0: skipping garbage [ 411.314563][T10939] bridge_slave_1: entered promiscuous mode [ 411.319228][ T5318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 411.324801][ T5293] usb 4-1: Using ep0 maxpacket: 32 [ 411.335340][ T5293] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 411.350187][ T5318] cdc_wdm 3-1:1.0: Unknown control protocol [ 411.370345][T11070] program syz.1.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.373527][ T5293] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 411.463004][ T5293] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 411.484608][T10939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.501021][ T5293] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 411.522443][ C0] wdm_int_callback: 77 callbacks suppressed [ 411.522470][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.535076][ C0] wdm_int_callback: 77 callbacks suppressed [ 411.535091][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.547956][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.554564][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.560918][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.567518][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.575158][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.581789][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.588774][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.595425][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.598208][ T5293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.601757][ T5318] usb 3-1: USB disconnect, device number 80 [ 411.608317][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 411.608351][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 411.608369][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 411.623365][ T5293] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 411.645738][ T5293] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 411.647177][T10939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.654346][ T5293] usb 4-1: Product: syz [ 411.671258][ T5293] usb 4-1: Manufacturer: syz [ 411.676127][ T5293] usb 4-1: SerialNumber: syz [ 411.685795][ T5321] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 411.719808][ T5293] usb 4-1: config 0 descriptor?? [ 411.805441][ T5293] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 411.865139][ T5321] usb 5-1: Using ep0 maxpacket: 16 [ 411.871828][ T5293] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 411.874731][ T5321] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 411.904013][T11077] binder: 11076:11077 ioctl 4018620d 0 returned -22 [ 411.929465][ T5321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.949998][T10939] team0: Port device team_slave_0 added [ 411.990325][ T5321] usb 5-1: config 0 has no interface number 0 [ 412.013998][T10939] team0: Port device team_slave_1 added [ 412.035883][ T5321] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 412.045548][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.069854][ T5321] usb 5-1: Product: syz [ 412.099163][ T5321] usb 5-1: Manufacturer: syz [ 412.132102][T10939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.143937][ T5321] usb 5-1: SerialNumber: syz [ 412.166288][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.200545][T10939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.226853][T10939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.233947][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.261088][T10939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.295335][ T5321] usb 5-1: config 0 descriptor?? [ 412.319155][T10939] hsr_slave_0: entered promiscuous mode [ 412.332143][T10939] hsr_slave_1: entered promiscuous mode [ 412.354439][ T5321] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 412.393800][ T5321] usb 5-1: No valid video chain found. [ 412.620904][T11069] IPVS: Error connecting to the multicast addr [ 412.724285][T11088] x_tables: duplicate underflow at hook 1 [ 413.125081][T10472] Bluetooth: hci3: command tx timeout [ 413.449703][T11104] tipc: Cannot configure node identity twice [ 413.786158][T10939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.803259][ T5321] usb 5-1: USB disconnect, device number 75 [ 413.817721][ T5290] usb 4-1: USB disconnect, device number 69 [ 413.841652][ T5290] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 413.855354][T10939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.881510][T10939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.914839][T10939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 413.947986][T11112] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1243'. [ 413.960086][T11114] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1244'. [ 414.051074][T11114] Êü: entered promiscuous mode [ 414.182160][T10939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.245406][T11123] binder: 11122:11123 ioctl 4018620d 0 returned -22 [ 414.275311][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.326082][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.333263][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.387624][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.394881][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.569520][T10939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.606886][T10939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.668056][T10939] veth0_vlan: entered promiscuous mode [ 414.676382][ T5290] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 414.682687][T10939] veth1_vlan: entered promiscuous mode [ 414.706204][T11140] ipt_ECN: cannot use operation on non-tcp rule [ 414.725894][T10939] veth0_macvtap: entered promiscuous mode [ 414.735430][T10939] veth1_macvtap: entered promiscuous mode [ 414.753403][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.764364][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.784937][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.795677][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.805812][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.816731][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.826650][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.837652][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.848562][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.859791][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.865994][ T5290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.874740][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.894254][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.904268][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.915140][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.925154][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.935052][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 414.935631][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.966741][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.977286][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.988832][T10939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.991349][ T5290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.998696][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.018109][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.034720][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.045700][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.056583][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.067907][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.078063][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.078292][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.104923][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.117044][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.134080][ T5290] usb 3-1: config 0 descriptor?? [ 415.143110][T11133] kvm: kvm [11132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5100000800 [ 415.158068][ T5290] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 415.162219][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.184775][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.210401][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.257089][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.279299][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.301909][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.322909][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.353228][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x7 [ 415.362835][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: ignoring exceeding usage max [ 415.371515][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.394371][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.402535][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.422872][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.434152][T10939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.453330][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.492243][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.534360][T10939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.560901][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.576527][T10939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.594743][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.604838][T10939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.644996][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.652816][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.661329][T10939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.697905][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.718688][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.736163][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.750307][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.768479][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.784802][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 415.792732][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.806182][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.816889][T11158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.834752][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.894565][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 415.949199][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.965207][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.984738][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 416.004818][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 416.012663][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.025231][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.052130][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 416.063063][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.076716][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.111547][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: unknown main item tag 0x0 [ 416.137716][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.152086][ T5321] hid-generic 0000:FFFFFFFE:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 416.169289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.189659][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.205173][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.222585][ T9] usb 5-1: Product: syz [ 416.259621][ T9] usb 5-1: Manufacturer: syz [ 416.328225][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 416.333511][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 416.344162][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 416.350355][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 416.539464][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.546092][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.552427][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.559030][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.565973][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.572580][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.578828][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.585422][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.592168][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.598771][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.605549][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.612153][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.618399][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.625008][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.631270][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.637860][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.644167][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.650768][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.657290][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 416.663889][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 416.683868][ T5321] usb 5-1: USB disconnect, device number 76 [ 416.689908][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 417.012520][T11179] FAULT_INJECTION: forcing a failure. [ 417.012520][T11179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.045017][T11179] CPU: 1 UID: 0 PID: 11179 Comm: syz.0.1255 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 417.055845][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.065903][T11179] Call Trace: [ 417.069199][T11179] [ 417.072128][T11179] dump_stack_lvl+0x241/0x360 [ 417.076807][T11179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.082007][T11179] ? __pfx__printk+0x10/0x10 [ 417.086600][T11179] ? __pfx_lock_release+0x10/0x10 [ 417.091670][T11179] should_fail_ex+0x3b0/0x4e0 [ 417.096370][T11179] _copy_to_user+0x2f/0xb0 [ 417.100810][T11179] video_usercopy+0xe5e/0x1180 [ 417.105587][T11179] ? __pfx___video_do_ioctl+0x10/0x10 [ 417.110982][T11179] ? __pfx_video_usercopy+0x10/0x10 [ 417.116192][T11179] ? __fget_files+0x29/0x470 [ 417.120795][T11179] ? __fget_files+0x3f3/0x470 [ 417.125469][T11179] v4l2_ioctl+0x189/0x1e0 [ 417.129812][T11179] ? __pfx_v4l2_ioctl+0x10/0x10 [ 417.134680][T11179] __se_sys_ioctl+0xf9/0x170 [ 417.139294][T11179] do_syscall_64+0xf3/0x230 [ 417.143798][T11179] ? clear_bhb_loop+0x35/0x90 [ 417.148477][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.154372][T11179] RIP: 0033:0x7f871db7dff9 [ 417.158792][T11179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.178408][T11179] RSP: 002b:00007f871e94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.186836][T11179] RAX: ffffffffffffffda RBX: 00007f871dd35f80 RCX: 00007f871db7dff9 [ 417.194811][T11179] RDX: 0000000020002300 RSI: 00000000c0405602 RDI: 0000000000000003 [ 417.202790][T11179] RBP: 00007f871e94e090 R08: 0000000000000000 R09: 0000000000000000 [ 417.210819][T11179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.218811][T11179] R13: 0000000000000000 R14: 00007f871dd35f80 R15: 00007f871de5fa28 [ 417.226806][T11179] [ 417.332176][T11185] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1254'. [ 417.453529][T11189] binder: 11188:11189 ioctl c0306201 0 returned -14 [ 417.807794][ T5321] usb 3-1: USB disconnect, device number 81 [ 417.834844][ T5289] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 418.005213][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 418.034503][ T5289] usb 4-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 418.057759][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 418.074784][ T5318] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 418.082119][ T5289] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 418.107447][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.138024][ T5289] usb 4-1: config 0 descriptor?? [ 418.156579][ T5289] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 418.226587][ T5318] usb 2-1: Using ep0 maxpacket: 8 [ 418.238517][ T5318] usb 2-1: config 12 has an invalid interface number: 10 but max is 0 [ 418.265369][ T5318] usb 2-1: config 12 has no interface number 0 [ 418.271601][ T5318] usb 2-1: config 12 interface 10 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 418.283577][ T5318] usb 2-1: config 12 interface 10 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 418.300147][ T5318] usb 2-1: config 12 interface 10 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 418.311746][ T5321] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 418.320305][ T5318] usb 2-1: config 12 interface 10 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 418.334412][ T5318] usb 2-1: config 12 interface 10 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 418.346741][ T5318] usb 2-1: config 12 interface 10 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 418.356784][ T5348] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 418.365826][ T5318] usb 2-1: config 12 interface 10 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 418.381493][ T5318] usb 2-1: New USB device found, idVendor=2001, idProduct=7d01, bcdDevice=29.18 [ 418.394213][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.402759][ T5318] usb 2-1: Product: syz [ 418.408116][ T5318] usb 2-1: Manufacturer: syz [ 418.412882][ T5318] usb 2-1: SerialNumber: syz [ 418.421299][T11195] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 418.454447][T11195] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 418.464894][ T5321] usb 3-1: device descriptor read/64, error -71 [ 418.471991][ T5318] option 2-1:12.10: GSM modem (1-port) converter detected [ 418.484000][ T5318] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 418.531723][ T5348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.552515][ T5348] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.585763][ T5348] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 418.605152][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.626823][ T5348] usb 5-1: config 0 descriptor?? [ 418.637230][ T5348] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 418.704753][ T5321] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 418.796781][T11192] binder_alloc: 11191: binder_alloc_buf, no vma [ 418.835027][ T5321] usb 3-1: device descriptor read/64, error -71 [ 418.954838][ T5293] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 418.957517][ T5321] usb usb3-port1: attempt power cycle [ 419.097381][ T5293] usb 1-1: device descriptor read/64, error -71 [ 419.135104][ T5289] usb 2-1: USB disconnect, device number 53 [ 419.159887][ T5289] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 419.188008][ T5289] option 2-1:12.10: device disconnected [ 419.334894][ T5321] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 419.354875][ T5293] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 419.366579][ T5321] usb 3-1: device descriptor read/8, error -71 [ 419.504857][ T5293] usb 1-1: device descriptor read/64, error -71 [ 419.616391][ T5293] usb usb1-port1: attempt power cycle [ 419.626699][ T5321] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 419.665696][ T5321] usb 3-1: device descriptor read/8, error -71 [ 419.775280][ T5321] usb usb3-port1: unable to enumerate USB device [ 419.969365][ T5293] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 419.999799][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.015742][ T5293] usb 1-1: device descriptor read/8, error -71 [ 420.022281][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.274963][ T5293] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 420.315987][ T5293] usb 1-1: device descriptor read/8, error -71 [ 420.425057][ T5293] usb usb1-port1: unable to enumerate USB device [ 420.675418][ T5293] usb 4-1: USB disconnect, device number 70 [ 420.928318][T11282] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1268'. [ 421.086374][ T5293] usb 5-1: USB disconnect, device number 77 [ 421.223564][T11286] binder: 11285:11286 ioctl c0306201 0 returned -14 [ 421.530603][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x7 [ 421.542412][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: ignoring exceeding usage max [ 421.573362][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.624536][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.649595][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.674634][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.701855][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.774244][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.779882][T11306] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 421.808838][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.854725][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.885074][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.892881][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.901157][ T5321] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 421.958027][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 421.984589][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.033360][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.059476][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.088694][ T5321] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.104695][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.128928][ T5321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.153329][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.184698][ T5321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.195369][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.220891][ T5321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.232206][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.274395][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.277237][T11313] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1280'. [ 422.296116][ T5321] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.312733][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.334090][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.346320][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: unknown main item tag 0x0 [ 422.374904][ T5321] usb 4-1: Product: syz [ 422.392194][ T5242] hid-generic 0000:FFFFFFFE:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 422.402507][ T5321] usb 4-1: Manufacturer: syz [ 422.436454][ T5321] cdc_wdm 4-1:1.0: skipping garbage [ 422.442893][ T5321] cdc_wdm 4-1:1.0: skipping garbage [ 422.471324][ T5321] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 422.479645][T11318] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 422.488825][ T5321] cdc_wdm 4-1:1.0: Unknown control protocol [ 422.530726][T11318] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1282'. [ 422.544791][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 422.636670][T11321] binder: 11320:11321 ioctl c0306201 0 returned -14 [ 422.670594][ C0] wdm_int_callback: 81 callbacks suppressed [ 422.670629][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.683142][ C0] wdm_int_callback: 81 callbacks suppressed [ 422.683157][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.695359][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.701964][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.708219][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.715015][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.721301][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.727912][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.734687][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.741306][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.748032][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.754641][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.760987][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.767645][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.773970][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.780597][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.786858][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.793479][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.799770][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 422.806397][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 422.813807][ T5348] usb 4-1: USB disconnect, device number 71 [ 422.819786][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 422.836179][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 422.883797][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.924817][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.994506][ T25] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 423.030338][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.103342][ T25] usb 1-1: config 0 descriptor?? [ 423.550350][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 423.561652][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 423.587726][ T25] usb 1-1: USB disconnect, device number 42 [ 423.597580][T11338] tipc: Started in network mode [ 423.668524][T11338] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 423.696494][T11338] tipc: Enabling of bearer rejected, failed to enable media [ 423.715029][ T5242] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 423.970018][ T5242] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.994315][ T5242] usb 5-1: config 0 has no interfaces? [ 424.052531][ T5242] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 424.124923][ T5348] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 424.148688][ T5242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.202013][ T5242] usb 5-1: Product: syz [ 424.226373][ T5242] usb 5-1: Manufacturer: syz [ 424.274792][ T5348] usb 3-1: device descriptor read/64, error -71 [ 424.294756][ T5242] usb 5-1: SerialNumber: syz [ 424.308063][ T5242] usb 5-1: config 0 descriptor?? [ 424.575544][ T5348] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 424.714891][ T5348] usb 3-1: device descriptor read/64, error -71 [ 424.848642][ T5348] usb usb3-port1: attempt power cycle [ 425.254812][ T5348] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 425.315599][ T5348] usb 3-1: device descriptor read/8, error -71 [ 425.555062][ T5348] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 425.592102][ T5348] usb 3-1: device descriptor read/8, error -71 [ 425.705958][ T5348] usb usb3-port1: unable to enumerate USB device [ 426.964102][T11352] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1293'. [ 427.283217][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 427.405775][ T5289] usb 5-1: USB disconnect, device number 78 [ 427.622052][T11367] ipt_ECN: cannot use operation on non-tcp rule [ 427.943754][T11374] FAULT_INJECTION: forcing a failure. [ 427.943754][T11374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.966323][T11374] CPU: 1 UID: 0 PID: 11374 Comm: syz.1.1302 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 427.977167][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.987259][T11374] Call Trace: [ 427.990572][T11374] [ 427.993535][T11374] dump_stack_lvl+0x241/0x360 [ 427.998258][T11374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.003494][T11374] ? __pfx__printk+0x10/0x10 [ 428.008127][T11374] ? __pfx_lock_release+0x10/0x10 [ 428.013212][T11374] should_fail_ex+0x3b0/0x4e0 [ 428.017951][T11374] _copy_from_user+0x2f/0xe0 [ 428.022593][T11374] copy_msghdr_from_user+0xae/0x680 [ 428.027833][T11374] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 428.033675][T11374] __sys_sendmsg+0x22d/0x380 [ 428.038290][T11374] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.043430][T11374] ? __pfx_vfs_write+0x10/0x10 [ 428.048237][T11374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.054586][T11374] ? do_syscall_64+0x100/0x230 [ 428.059365][T11374] ? do_syscall_64+0xb6/0x230 [ 428.064064][T11374] do_syscall_64+0xf3/0x230 [ 428.068596][T11374] ? clear_bhb_loop+0x35/0x90 [ 428.073322][T11374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.079242][T11374] RIP: 0033:0x7fbb8c97dff9 [ 428.083753][T11374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.103369][T11374] RSP: 002b:00007fbb8d76a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.111802][T11374] RAX: ffffffffffffffda RBX: 00007fbb8cb35f80 RCX: 00007fbb8c97dff9 [ 428.119780][T11374] RDX: 0000000020040000 RSI: 0000000020000140 RDI: 0000000000000003 [ 428.127761][T11374] RBP: 00007fbb8d76a090 R08: 0000000000000000 R09: 0000000000000000 [ 428.135742][T11374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.143720][T11374] R13: 0000000000000000 R14: 00007fbb8cb35f80 R15: 00007fbb8cc5fa28 [ 428.151724][T11374] [ 428.182380][T11370] kvm: kvm [11366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5100000800 [ 428.481309][T11392] IPv6: Can't replace route, no match found [ 428.626206][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 428.856481][ T1307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.958691][ T1307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.114768][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 429.355729][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.412772][ T25] usb 2-1: config 0 has no interfaces? [ 429.434218][ T25] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 429.451759][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.460687][ T25] usb 2-1: Product: syz [ 429.479667][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.490008][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.499043][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.507618][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.515818][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 429.523111][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.531402][ T25] usb 2-1: Manufacturer: syz [ 429.536084][ T25] usb 2-1: SerialNumber: syz [ 429.542079][ T25] usb 2-1: config 0 descriptor?? [ 429.577895][ T1307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.595961][ T1307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.758846][T11412] netlink: 4544 bytes leftover after parsing attributes in process `syz.0.1314'. [ 430.025228][T11412] netlink: 4544 bytes leftover after parsing attributes in process `syz.0.1314'. [ 430.079857][ T1307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.109196][ T5242] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 430.273426][ T1307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.631467][T11423] Cannot find add_set index 0 as target [ 431.034948][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 431.119249][T11420] tipc: Can't bind to reserved service type 3 [ 431.135831][T11410] chnl_net:caif_netlink_parms(): no params data found [ 431.315804][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.447562][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.520833][ T1307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.702465][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 431.713534][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.715498][ T5244] Bluetooth: hci0: command tx timeout [ 431.748182][ T25] usb 1-1: config 0 descriptor?? [ 431.788419][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 431.814853][ T1307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.026939][T11429] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1318'. [ 432.170257][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 432.177933][ T5244] Bluetooth: hci4: command 0x0406 tx timeout [ 432.186582][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 432.193945][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 432.204267][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 432.422270][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.721743][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.847787][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.913002][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 432.920649][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.953434][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 432.965500][T11410] bridge_slave_0: entered allmulticast mode [ 432.992704][T11435] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 433.010241][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 433.026862][T11410] bridge_slave_0: entered promiscuous mode [ 433.044408][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 433.089119][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.109013][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 433.157400][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.164957][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 433.205753][T11410] bridge_slave_1: entered allmulticast mode [ 433.212265][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 433.255402][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 433.263401][T11410] bridge_slave_1: entered promiscuous mode [ 433.278719][ T5293] usb 2-1: USB disconnect, device number 54 [ 433.308309][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 433.380553][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 433.411015][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 433.481391][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 433.505662][ T25] pwc: Registered as video71. [ 433.532652][T11441] ipt_ECN: cannot use operation on non-tcp rule [ 433.549674][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 433.633887][ T25] usb 1-1: USB disconnect, device number 43 [ 433.765477][T10472] Bluetooth: hci0: command tx timeout [ 433.876101][T11410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.911344][T11444] pim6reg: entered allmulticast mode [ 433.922555][T11440] pim6reg: left allmulticast mode [ 434.082002][T11441] kvm: kvm [11437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5100000800 [ 434.147012][T11441] kvm: kvm [11437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd200000000 [ 434.556332][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 434.755647][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 434.786049][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.837958][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.886308][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 434.950672][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 434.985045][ T25] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.021383][ T25] usb 1-1: Manufacturer: syz [ 435.055669][ T25] usb 1-1: config 0 descriptor?? [ 435.508968][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 435.546814][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 435.587650][ T25] usb 1-1: USB disconnect, device number 44 [ 435.846132][T10472] Bluetooth: hci0: command tx timeout [ 437.924933][T10472] Bluetooth: hci0: command tx timeout [ 440.335187][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.342583][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.194688][ C0] sched: DL replenish lagged too much [ 452.797864][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.835553][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.845655][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.853754][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.866364][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 452.874910][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.007788][T10472] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 453.018782][T10472] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 453.027258][T10472] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 453.039851][T10472] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 453.050728][T10472] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 453.060196][T10472] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 453.193745][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 453.204386][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 453.214241][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 453.225522][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 453.233860][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 453.241876][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 453.415608][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 453.428514][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 453.436749][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 453.459636][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 453.467684][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 453.478999][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 454.964976][ T54] Bluetooth: hci3: command tx timeout [ 455.125068][ T54] Bluetooth: hci8: command tx timeout [ 455.365154][ T54] Bluetooth: hci9: command tx timeout [ 455.525021][ T54] Bluetooth: hci10: command tx timeout [ 457.044980][ T54] Bluetooth: hci3: command tx timeout [ 457.205169][ T54] Bluetooth: hci8: command tx timeout [ 457.445100][ T54] Bluetooth: hci9: command tx timeout [ 457.614576][T10555] Bluetooth: hci10: command tx timeout [ 457.772540][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 459.125047][T10472] Bluetooth: hci3: command tx timeout [ 459.285353][T10472] Bluetooth: hci8: command tx timeout [ 459.525795][T10472] Bluetooth: hci9: command tx timeout [ 459.684946][ T54] Bluetooth: hci10: command tx timeout [ 461.143308][T11410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.204959][ T54] Bluetooth: hci3: command tx timeout [ 461.369720][ T54] Bluetooth: hci8: command tx timeout [ 461.605470][ T54] Bluetooth: hci9: command tx timeout [ 461.764996][ T54] Bluetooth: hci10: command tx timeout [ 468.572189][ T1307] team0: left allmulticast mode [ 468.603490][ T1307] team_slave_0: left allmulticast mode [ 468.622597][ T1307] team_slave_1: left allmulticast mode [ 468.644138][ T1307] bridge0: port 3(team0) entered disabled state [ 468.673159][ T1307] bridge_slave_1: left allmulticast mode [ 468.681430][ T1307] bridge_slave_1: left promiscuous mode [ 468.694991][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.714148][ T1307] bridge_slave_0: left allmulticast mode [ 468.721335][ T1307] bridge_slave_0: left promiscuous mode [ 468.734983][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.179283][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.238539][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.286700][ T1307] bond0 (unregistering): Released all slaves [ 478.573427][ T5242] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 478.882107][ T5242] usb 5-1: can't read configurations, error -71 [ 485.622846][T11410] team0: Port device team_slave_0 added [ 486.016286][ T1307] Êü: left promiscuous mode [ 490.191852][T10472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.202027][T10472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.214232][T10472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.224127][T10472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.235435][T10472] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 490.245771][T10472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.324936][T10472] Bluetooth: hci1: command tx timeout [ 493.610947][T10472] Bluetooth: hci6: command 0x0406 tx timeout [ 494.404891][ T54] Bluetooth: hci1: command tx timeout [ 496.490697][ T54] Bluetooth: hci1: command tx timeout [ 498.565028][ T54] Bluetooth: hci1: command tx timeout [ 499.555149][T11410] team0: Port device team_slave_1 added [ 501.768332][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.774952][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.718357][T10472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.728885][T10472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.737849][T10472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.750367][T10472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.762826][T10472] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 513.772924][T10472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.821360][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.858051][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.870366][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.878590][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.886371][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 513.895569][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.089548][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.103631][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.113406][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.126446][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.136637][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 514.146527][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.211981][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 514.231020][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 514.244500][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 514.253499][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 514.261632][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 514.274101][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 515.850662][T10472] Bluetooth: hci0: command tx timeout [ 516.004878][T10472] Bluetooth: hci4: command tx timeout [ 516.245096][T10472] Bluetooth: hci7: command tx timeout [ 516.325178][T10472] Bluetooth: hci11: command tx timeout [ 517.924863][T10472] Bluetooth: hci0: command tx timeout [ 518.086300][T10472] Bluetooth: hci4: command tx timeout [ 518.325042][T10472] Bluetooth: hci7: command tx timeout [ 518.405409][ T54] Bluetooth: hci11: command tx timeout [ 520.004899][T10472] Bluetooth: hci0: command tx timeout [ 520.165046][T10472] Bluetooth: hci4: command tx timeout [ 520.404998][T10472] Bluetooth: hci7: command tx timeout [ 520.485061][T10472] Bluetooth: hci11: command tx timeout [ 522.090350][T10472] Bluetooth: hci0: command tx timeout [ 522.249721][T10472] Bluetooth: hci4: command tx timeout [ 522.485071][T10472] Bluetooth: hci7: command tx timeout [ 522.565091][T10472] Bluetooth: hci11: command tx timeout [ 535.355958][ T1307] hsr_slave_0: left promiscuous mode [ 535.365843][ T1307] hsr_slave_1: left promiscuous mode [ 535.395826][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.403330][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.427076][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.434535][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.488205][ T1307] veth1_macvtap: left promiscuous mode [ 535.493796][ T1307] veth0_macvtap: left promiscuous mode [ 535.520585][ T1307] veth1_vlan: left promiscuous mode [ 535.532790][ T1307] veth0_vlan: left promiscuous mode [ 537.023109][ T1307] team_slave_1 (unregistering): left promiscuous mode [ 537.052281][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 537.189804][ T1307] team_slave_0 (unregistering): left promiscuous mode [ 537.215351][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 551.880383][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 551.890383][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 551.900555][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 551.909961][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 551.920757][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 551.928452][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 554.005332][ T54] Bluetooth: hci12: command tx timeout [ 556.086296][ T54] Bluetooth: hci12: command tx timeout [ 557.622387][T11524] chnl_net:caif_netlink_parms(): no params data found [ 557.682690][T11518] chnl_net:caif_netlink_parms(): no params data found [ 558.012248][T11525] chnl_net:caif_netlink_parms(): no params data found [ 558.058254][T11520] chnl_net:caif_netlink_parms(): no params data found [ 558.165027][T10472] Bluetooth: hci12: command tx timeout [ 558.200072][T11585] chnl_net:caif_netlink_parms(): no params data found [ 558.609518][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.634827][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.642958][T11518] bridge_slave_0: entered allmulticast mode [ 558.664803][T11518] bridge_slave_0: entered promiscuous mode [ 558.834522][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.855049][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.862365][T11518] bridge_slave_1: entered allmulticast mode [ 558.886339][T11518] bridge_slave_1: entered promiscuous mode [ 559.004518][T11524] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.023050][T11524] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.037684][T11524] bridge_slave_0: entered allmulticast mode [ 559.059451][T11524] bridge_slave_0: entered promiscuous mode [ 559.076577][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.083707][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.104992][T11520] bridge_slave_0: entered allmulticast mode [ 559.121942][T11520] bridge_slave_0: entered promiscuous mode [ 559.195905][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.203064][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.225474][T11585] bridge_slave_0: entered allmulticast mode [ 559.244400][T11585] bridge_slave_0: entered promiscuous mode [ 559.268464][T11524] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.284868][T11524] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.292178][T11524] bridge_slave_1: entered allmulticast mode [ 559.318021][T11524] bridge_slave_1: entered promiscuous mode [ 559.363369][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.381349][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.395050][T11520] bridge_slave_1: entered allmulticast mode [ 559.407753][T11520] bridge_slave_1: entered promiscuous mode [ 559.465124][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.556748][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.563910][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.597839][T11525] bridge_slave_0: entered allmulticast mode [ 559.628403][T11525] bridge_slave_0: entered promiscuous mode [ 559.659188][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.676399][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.683768][T11585] bridge_slave_1: entered allmulticast mode [ 559.724450][T11585] bridge_slave_1: entered promiscuous mode [ 559.779287][T11524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.856671][T11520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.912512][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.989895][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.013495][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.049398][T11525] bridge_slave_1: entered allmulticast mode [ 560.076090][T11525] bridge_slave_1: entered promiscuous mode [ 560.208583][T11524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.245385][T10472] Bluetooth: hci12: command tx timeout [ 560.307010][T11520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.443679][T11518] team0: Port device team_slave_0 added [ 560.591585][T11525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.618149][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.676062][T11524] team0: Port device team_slave_0 added [ 560.713893][T11520] team0: Port device team_slave_0 added [ 560.735883][T11518] team0: Port device team_slave_1 added [ 560.756330][T11525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.817422][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.845729][T11524] team0: Port device team_slave_1 added [ 560.853722][T11520] team0: Port device team_slave_1 added [ 561.028934][T11525] team0: Port device team_slave_0 added [ 561.138934][T11520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.146936][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.212241][T11520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.237402][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.244408][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.311733][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.341192][T11525] team0: Port device team_slave_1 added [ 561.413854][T11585] team0: Port device team_slave_0 added [ 561.437523][T11524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.444515][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.512674][T11524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.537917][T11520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.546199][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.615541][T11520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.649744][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.674709][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.754958][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.865216][T11525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.884761][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.974805][T11525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.008405][T11585] team0: Port device team_slave_1 added [ 562.163353][T11524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.193715][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.284836][T11524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.460870][T11525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.485203][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.574918][T11525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.664977][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.672007][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.776341][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.882415][T11520] hsr_slave_0: entered promiscuous mode [ 562.903068][T11520] hsr_slave_1: entered promiscuous mode [ 562.922636][T11520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.945386][T11520] Cannot create hsr debugfs directory [ 562.998761][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.017956][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.074475][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.135867][T11524] hsr_slave_0: entered promiscuous mode [ 563.146479][T11524] hsr_slave_1: entered promiscuous mode [ 563.170190][T11524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.184938][T11524] Cannot create hsr debugfs directory [ 563.225835][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.232198][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.272399][T11518] hsr_slave_0: entered promiscuous mode [ 563.298700][T11518] hsr_slave_1: entered promiscuous mode [ 563.316160][T11518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.334833][T11518] Cannot create hsr debugfs directory [ 563.435859][T11525] hsr_slave_0: entered promiscuous mode [ 563.459333][T11525] hsr_slave_1: entered promiscuous mode [ 563.466474][T11525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.474091][T11525] Cannot create hsr debugfs directory [ 563.694345][T11585] hsr_slave_0: entered promiscuous mode [ 563.720353][T11585] hsr_slave_1: entered promiscuous mode [ 563.740174][T11585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.754820][T11585] Cannot create hsr debugfs directory [ 565.998660][T11520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.537521][T11520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.262305][T11520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.691077][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.704835][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.716345][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.727828][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.737261][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 574.745263][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.832364][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 574.846344][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 574.864844][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 574.877251][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 574.924404][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 574.936144][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.099488][T10472] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 575.116385][T10472] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 575.129252][T10472] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 575.137398][T10472] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 575.145890][T10472] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 575.158820][T10472] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 575.254224][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 575.267462][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 575.276103][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 575.284080][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 575.300832][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 575.310213][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 576.885234][ T54] Bluetooth: hci1: command tx timeout [ 577.045425][ T54] Bluetooth: hci3: command tx timeout [ 577.204901][ T54] Bluetooth: hci8: command tx timeout [ 577.364993][ T54] Bluetooth: hci9: command tx timeout [ 578.964981][ T54] Bluetooth: hci1: command tx timeout [ 579.125095][ T54] Bluetooth: hci3: command tx timeout [ 579.284893][ T54] Bluetooth: hci8: command tx timeout [ 579.445226][ T54] Bluetooth: hci9: command tx timeout [ 581.044943][ T54] Bluetooth: hci1: command tx timeout [ 581.205100][ T54] Bluetooth: hci3: command tx timeout [ 581.365292][ T54] Bluetooth: hci8: command tx timeout [ 581.525003][ T54] Bluetooth: hci9: command tx timeout [ 583.125209][ T54] Bluetooth: hci1: command tx timeout [ 583.285068][ T54] Bluetooth: hci3: command tx timeout [ 583.445302][ T54] Bluetooth: hci8: command tx timeout [ 583.605163][ T54] Bluetooth: hci9: command tx timeout [ 588.319799][T11520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.158989][T11524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.617916][T11524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.875680][T11524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.435832][T11524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.600229][T11518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.671663][T11692] chnl_net:caif_netlink_parms(): no params data found [ 599.700093][T11688] chnl_net:caif_netlink_parms(): no params data found [ 599.721432][T11694] chnl_net:caif_netlink_parms(): no params data found [ 599.742801][T11690] chnl_net:caif_netlink_parms(): no params data found [ 600.467189][T11518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.721129][T11518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.212419][T11518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.289253][T11688] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.314351][T11688] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.335161][T11688] bridge_slave_0: entered allmulticast mode [ 601.363964][T11688] bridge_slave_0: entered promiscuous mode [ 601.601025][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.624744][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.632079][T11690] bridge_slave_0: entered allmulticast mode [ 601.683503][T11690] bridge_slave_0: entered promiscuous mode [ 601.706520][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.713683][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.758194][T11690] bridge_slave_1: entered allmulticast mode [ 601.794021][T11690] bridge_slave_1: entered promiscuous mode [ 601.817279][T11688] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.824506][T11688] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.855100][T11688] bridge_slave_1: entered allmulticast mode [ 601.884996][T11688] bridge_slave_1: entered promiscuous mode [ 601.937178][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.944346][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.975374][T11692] bridge_slave_0: entered allmulticast mode [ 601.982518][T11692] bridge_slave_0: entered promiscuous mode [ 602.006466][T11694] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.013631][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.024962][T11694] bridge_slave_0: entered allmulticast mode [ 602.048185][T11694] bridge_slave_0: entered promiscuous mode [ 602.175318][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.182470][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.194993][T11692] bridge_slave_1: entered allmulticast mode [ 602.262224][T11692] bridge_slave_1: entered promiscuous mode [ 602.364427][T11694] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.385838][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.393248][T11694] bridge_slave_1: entered allmulticast mode [ 602.436075][T11694] bridge_slave_1: entered promiscuous mode [ 602.540035][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.608090][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.648617][T11688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.680463][T11688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.136600][T11692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.213913][T11694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.571150][T11692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.695760][T10472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.706698][T10472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.716616][T10472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.728351][T10472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.737463][T10472] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 611.747282][T10472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.845120][T10472] Bluetooth: hci0: command tx timeout [ 615.925053][T10472] Bluetooth: hci0: command tx timeout [ 618.005190][T10472] Bluetooth: hci0: command tx timeout [ 620.093019][T10472] Bluetooth: hci0: command tx timeout [ 620.126028][T11694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.213679][T11690] team0: Port device team_slave_0 added [ 620.267317][T11688] team0: Port device team_slave_0 added [ 624.661751][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.668359][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.933022][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 634.965669][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 634.975526][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 634.983591][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 634.991826][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 635.009241][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 635.193521][T10472] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.211661][T10472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.220944][T10472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.233189][T10472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.242230][T10472] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 635.250134][T10472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 635.672337][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 635.695215][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 635.705488][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 635.713549][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 635.736620][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 635.748398][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 635.786256][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 635.796844][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 635.805952][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 635.816772][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 635.836443][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 635.851775][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 637.044959][ T54] Bluetooth: hci4: command tx timeout [ 637.365110][ T54] Bluetooth: hci7: command tx timeout [ 637.845017][ T54] Bluetooth: hci10: command tx timeout [ 637.924953][ T54] Bluetooth: hci11: command tx timeout [ 639.125075][ T54] Bluetooth: hci4: command tx timeout [ 639.445005][ T54] Bluetooth: hci7: command tx timeout [ 639.925951][ T54] Bluetooth: hci10: command tx timeout [ 640.006312][ T54] Bluetooth: hci11: command tx timeout [ 640.819489][T11690] team0: Port device team_slave_1 added [ 640.857110][T11688] team0: Port device team_slave_1 added [ 640.922173][T11692] team0: Port device team_slave_0 added [ 641.224827][T10472] Bluetooth: hci4: command tx timeout [ 641.534909][T10472] Bluetooth: hci7: command tx timeout [ 642.006089][T10472] Bluetooth: hci10: command tx timeout [ 642.086207][T10472] Bluetooth: hci11: command tx timeout [ 643.285447][T10472] Bluetooth: hci4: command tx timeout [ 643.605678][T10472] Bluetooth: hci7: command tx timeout [ 644.085227][T10472] Bluetooth: hci10: command tx timeout [ 644.165322][T10472] Bluetooth: hci11: command tx timeout [ 652.805095][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 652.814034][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 652.842246][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 652.854813][ T30] task:kworker/0:0 state:D stack:20560 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 652.894886][ T30] Workqueue: 0x0 (events) [ 652.899438][ T30] Call Trace: [ 652.902753][ T30] [ 652.994970][ T30] __schedule+0x18af/0x4bd0 [ 652.999694][ T30] ? __pfx___schedule+0x10/0x10 [ 653.046133][ T30] ? __pfx_lock_release+0x10/0x10 [ 653.051258][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 653.075226][ T30] ? kthread_data+0x52/0xd0 [ 653.079911][ T30] ? schedule+0x90/0x320 [ 653.084203][ T30] ? wq_worker_sleeping+0x66/0x240 [ 653.104661][ T30] ? schedule+0x90/0x320 [ 653.108990][ T30] schedule+0x14b/0x320 [ 653.113197][ T30] schedule_preempt_disabled+0x13/0x30 [ 653.134990][ T30] __mutex_lock+0x6a7/0xd70 [ 653.139587][ T30] ? __mutex_lock+0x52a/0xd70 [ 653.144304][ T30] ? worker_attach_to_pool+0x31/0x390 [ 653.164707][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 653.169824][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 653.195011][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 653.201010][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 653.224764][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 653.231494][ T30] worker_attach_to_pool+0x31/0x390 [ 653.244636][ T30] create_worker+0x491/0x720 [ 653.249399][ T30] ? __pfx_create_worker+0x10/0x10 [ 653.265110][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 653.271190][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.295059][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.300358][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 653.315370][ T30] worker_thread+0x318/0xd30 [ 653.326749][ T30] ? __kthread_parkme+0x169/0x1d0 [ 653.345365][ T30] ? __pfx_worker_thread+0x10/0x10 [ 653.351539][ T30] kthread+0x2f0/0x390 [ 653.357125][ T30] ? __pfx_worker_thread+0x10/0x10 [ 653.362305][ T30] ? __pfx_kthread+0x10/0x10 [ 653.394853][ T30] ret_from_fork+0x4b/0x80 [ 653.399357][ T30] ? __pfx_kthread+0x10/0x10 [ 653.403985][ T30] ret_from_fork_asm+0x1a/0x30 [ 653.424707][ T30] [ 653.427895][ T30] INFO: task kworker/R-mm_pe:13 blocked for more than 143 seconds. [ 653.455682][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 653.463392][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 653.504818][ T30] task:kworker/R-mm_pe state:D stack:29296 pid:13 tgid:13 ppid:2 flags:0x00004000 [ 653.525305][ T30] Call Trace: [ 653.528657][ T30] [ 653.531627][ T30] __schedule+0x18af/0x4bd0 [ 653.546241][ T30] ? __pfx___schedule+0x10/0x10 [ 653.555023][ T30] ? __pfx_lock_release+0x10/0x10 [ 653.565510][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 653.571066][ T30] ? kthread_data+0x52/0xd0 [ 653.584704][ T30] ? schedule+0x90/0x320 [ 653.589048][ T30] ? wq_worker_sleeping+0x66/0x240 [ 653.594237][ T30] ? schedule+0x90/0x320 [ 653.614864][ T30] schedule+0x14b/0x320 [ 653.619147][ T30] schedule_preempt_disabled+0x13/0x30 [ 653.635127][ T30] __mutex_lock+0x6a7/0xd70 [ 653.654801][ T30] ? __mutex_lock+0x52a/0xd70 [ 653.659564][ T30] ? worker_attach_to_pool+0x31/0x390 [ 653.675423][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 653.680565][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.705319][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 653.710538][ T30] worker_attach_to_pool+0x31/0x390 [ 653.724852][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 653.730129][ T30] rescuer_thread+0x3ed/0x10a0 [ 653.743190][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.762785][ T30] ? rescuer_thread+0x119/0x10a0 [ 653.768549][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 653.774526][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 653.790622][ T30] ? __kthread_parkme+0x169/0x1d0 [ 653.804736][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 653.810055][ T30] kthread+0x2f0/0x390 [ 653.814179][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 653.846434][ T30] ? __pfx_kthread+0x10/0x10 [ 653.851139][ T30] ret_from_fork+0x4b/0x80 [ 653.858045][ T30] ? __pfx_kthread+0x10/0x10 [ 653.862705][ T30] ret_from_fork_asm+0x1a/0x30 [ 653.884778][ T30] [ 653.891370][ T30] INFO: task kworker/R-wg-cr:9471 blocked for more than 144 seconds. [ 653.914777][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 653.922549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 653.944866][ T30] task:kworker/R-wg-cr state:D stack:26712 pid:9471 tgid:9471 ppid:2 flags:0x00004000 [ 653.974950][ T30] Workqueue: 0x0 (wg-crypt-wg0) [ 653.979999][ T30] Call Trace: [ 653.983322][ T30] [ 653.994810][ T30] __schedule+0x18af/0x4bd0 [ 653.999453][ T30] ? __pfx___schedule+0x10/0x10 [ 654.004360][ T30] ? __pfx_lock_release+0x10/0x10 [ 654.025046][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 654.030597][ T30] ? kthread_data+0x52/0xd0 [ 654.050105][ T30] ? schedule+0x90/0x320 [ 654.054437][ T30] ? wq_worker_sleeping+0x66/0x240 [ 654.074812][ T30] ? schedule+0x90/0x320 [ 654.079166][ T30] schedule+0x14b/0x320 [ 654.084256][ T30] schedule_preempt_disabled+0x13/0x30 [ 654.104720][ T30] __mutex_lock+0x6a7/0xd70 [ 654.109315][ T30] ? __mutex_lock+0x52a/0xd70 [ 654.114031][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 654.134833][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 654.139951][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.152634][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 654.165147][ T30] rescuer_thread+0xaf5/0x10a0 [ 654.169993][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.194861][ T30] ? rescuer_thread+0x119/0x10a0 [ 654.199915][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.215640][ T30] ? __kthread_parkme+0x169/0x1d0 [ 654.220757][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.235139][ T30] kthread+0x2f0/0x390 [ 654.239280][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.244532][ T30] ? __pfx_kthread+0x10/0x10 [ 654.262079][ T30] ret_from_fork+0x4b/0x80 [ 654.274755][ T30] ? __pfx_kthread+0x10/0x10 [ 654.279433][ T30] ret_from_fork_asm+0x1a/0x30 [ 654.284264][ T30] [ 654.305213][ T30] INFO: task kworker/R-wg-cr:9913 blocked for more than 144 seconds. [ 654.313356][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 654.344834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.353576][ T30] task:kworker/R-wg-cr state:D stack:26528 pid:9913 tgid:9913 ppid:2 flags:0x00004000 [ 654.394732][ T30] Call Trace: [ 654.398095][ T30] [ 654.401066][ T30] __schedule+0x18af/0x4bd0 [ 654.424805][ T30] ? __pfx___schedule+0x10/0x10 [ 654.429808][ T30] ? __pfx_lock_release+0x10/0x10 [ 654.445455][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 654.451005][ T30] ? kthread_data+0x52/0xd0 [ 654.464781][ T30] ? schedule+0x90/0x320 [ 654.469112][ T30] ? wq_worker_sleeping+0x66/0x240 [ 654.474280][ T30] ? schedule+0x90/0x320 [ 654.494816][ T30] schedule+0x14b/0x320 [ 654.499069][ T30] schedule_preempt_disabled+0x13/0x30 [ 654.516087][ T30] __mutex_lock+0x6a7/0xd70 [ 654.520681][ T30] ? __mutex_lock+0x52a/0xd70 [ 654.535128][ T30] ? worker_attach_to_pool+0x31/0x390 [ 654.540584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 654.562268][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.575080][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 654.594764][ T30] worker_attach_to_pool+0x31/0x390 [ 654.600048][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 654.614711][ T30] rescuer_thread+0x3ed/0x10a0 [ 654.619662][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.635067][ T30] ? rescuer_thread+0x119/0x10a0 [ 654.640104][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 654.665601][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.670985][ T30] ? __kthread_parkme+0x169/0x1d0 [ 654.685655][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.690948][ T30] kthread+0x2f0/0x390 [ 654.705169][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 654.710456][ T30] ? __pfx_kthread+0x10/0x10 [ 654.726317][ T30] ret_from_fork+0x4b/0x80 [ 654.730822][ T30] ? __pfx_kthread+0x10/0x10 [ 654.754809][ T30] ret_from_fork_asm+0x1a/0x30 [ 654.759684][ T30] [ 654.771878][ T30] INFO: task kworker/R-wg-cr:10385 blocked for more than 145 seconds. [ 654.805351][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 654.813064][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.834689][ T30] task:kworker/R-wg-cr state:D stack:29296 pid:10385 tgid:10385 ppid:2 flags:0x00004000 [ 654.864785][ T30] Call Trace: [ 654.869748][ T30] [ 654.872740][ T30] __schedule+0x18af/0x4bd0 [ 654.885661][ T30] ? __pfx___schedule+0x10/0x10 [ 654.890607][ T30] ? __pfx_lock_release+0x10/0x10 [ 654.914798][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 654.921628][ T30] ? kthread_data+0x52/0xd0 [ 654.935238][ T30] ? schedule+0x90/0x320 [ 654.939564][ T30] ? wq_worker_sleeping+0x66/0x240 [ 654.954632][ T30] ? schedule+0x90/0x320 [ 654.958979][ T30] schedule+0x14b/0x320 [ 654.963195][ T30] schedule_preempt_disabled+0x13/0x30 [ 654.984839][ T30] __mutex_lock+0x6a7/0xd70 [ 654.989440][ T30] ? __mutex_lock+0x52a/0xd70 [ 655.004769][ T30] ? worker_attach_to_pool+0x31/0x390 [ 655.010229][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.024740][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 655.031154][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 655.054859][ T30] worker_attach_to_pool+0x31/0x390 [ 655.060144][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 655.076331][ T30] rescuer_thread+0x3ed/0x10a0 [ 655.081175][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 655.105402][ T30] ? rescuer_thread+0x119/0x10a0 [ 655.110448][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 655.125343][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.130634][ T30] ? __kthread_parkme+0x169/0x1d0 [ 655.154905][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.160213][ T30] kthread+0x2f0/0x390 [ 655.164322][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.184757][ T30] ? __pfx_kthread+0x10/0x10 [ 655.189527][ T30] ret_from_fork+0x4b/0x80 [ 655.193996][ T30] ? __pfx_kthread+0x10/0x10 [ 655.215574][ T30] ret_from_fork_asm+0x1a/0x30 [ 655.220464][ T30] [ 655.234855][ T30] INFO: task kworker/R-wg-cr:10581 blocked for more than 145 seconds. [ 655.243083][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 655.264652][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.284713][ T30] task:kworker/R-wg-cr state:D stack:26912 pid:10581 tgid:10581 ppid:2 flags:0x00004000 [ 655.304746][ T30] Workqueue: 0x0 (wg-crypt-wg2) [ 655.315424][ T30] Call Trace: [ 655.318760][ T30] [ 655.321729][ T30] __schedule+0x18af/0x4bd0 [ 655.336423][ T30] ? __pfx___schedule+0x10/0x10 [ 655.341361][ T30] ? __pfx_lock_release+0x10/0x10 [ 655.369420][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 655.375647][ T30] ? kthread_data+0x52/0xd0 [ 655.381415][ T30] ? schedule+0x90/0x320 [ 655.396177][ T30] ? wq_worker_sleeping+0x66/0x240 [ 655.401673][ T30] ? schedule+0x90/0x320 [ 655.412839][ T30] schedule+0x14b/0x320 [ 655.424744][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.430290][ T30] __mutex_lock+0x6a7/0xd70 [ 655.453258][ T30] ? __mutex_lock+0x52a/0xd70 [ 655.464685][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 655.469742][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.483887][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.494927][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 655.500204][ T30] rescuer_thread+0xaf5/0x10a0 [ 655.516298][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 655.522730][ T30] ? rescuer_thread+0x119/0x10a0 [ 655.545382][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.550674][ T30] ? __kthread_parkme+0x169/0x1d0 [ 655.567234][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.572615][ T30] kthread+0x2f0/0x390 [ 655.586969][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 655.592347][ T30] ? __pfx_kthread+0x10/0x10 [ 655.614955][ T30] ret_from_fork+0x4b/0x80 [ 655.619837][ T30] ? __pfx_kthread+0x10/0x10 [ 655.624483][ T30] ret_from_fork_asm+0x1a/0x30 [ 655.636831][ T30] [ 655.647498][ T30] INFO: task kworker/0:2:11492 blocked for more than 146 seconds. [ 655.688763][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 655.724912][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.733662][ T30] task:kworker/0:2 state:D stack:30096 pid:11492 tgid:11492 ppid:2 flags:0x00004000 [ 655.811511][ T30] Call Trace: [ 655.825929][ T30] [ 655.829026][ T30] __schedule+0x18af/0x4bd0 [ 655.833606][ T30] ? __pfx___schedule+0x10/0x10 [ 655.872000][ T30] ? __pfx_lock_release+0x10/0x10 [ 655.908037][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 655.914040][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 655.965044][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 655.971554][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 655.999147][ T30] ? schedule+0x90/0x320 [ 656.003488][ T30] schedule+0x14b/0x320 [ 656.034742][ T30] ? kthread+0x1c6/0x390 [ 656.039081][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.074763][ T30] kthread+0x23b/0x390 [ 656.078919][ T30] ? __pfx_worker_thread+0x10/0x10 [ 656.084082][ T30] ? __pfx_kthread+0x10/0x10 [ 656.114806][ T30] ret_from_fork+0x4b/0x80 [ 656.124722][ T30] ? __pfx_kthread+0x10/0x10 [ 656.129479][ T30] ret_from_fork_asm+0x1a/0x30 [ 656.134316][ T30] [ 656.174909][ T30] [ 656.174909][ T30] Showing all locks held in the system: [ 656.182703][ T30] 1 lock held by kworker/0:0/8: [ 656.225578][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 656.258917][ T30] 1 lock held by kworker/R-mm_pe/13: [ 656.264281][ T30] 1 lock held by khungtaskd/30: [ 656.292687][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 656.326358][ T30] 4 locks held by kworker/u8:7/1307: [ 656.331719][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 656.384896][ T30] #1: ffffc9000466fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 656.424185][ T30] #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 656.465238][ T30] #3: ffff88807e155428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 656.507956][ T30] 1 lock held by kworker/R-dm_bu/2373: [ 656.513493][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 656.560913][ T30] 2 locks held by getty/4989: [ 656.584774][ T30] #0: ffff88814bfbe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.610259][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 656.645055][ T30] 4 locks held by kworker/0:7/5348: [ 656.650326][ T30] 3 locks held by kworker/u8:10/6933: [ 656.685239][ T30] 1 lock held by kworker/R-wg-cr/9157: [ 656.690777][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 656.731743][ T30] 1 lock held by kworker/R-wg-cr/9159: [ 656.754980][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 656.784929][ T30] 1 lock held by kworker/R-wg-cr/9428: [ 656.790558][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 656.843310][ T30] 1 lock held by kworker/R-wg-cr/9429: [ 656.868935][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 656.905293][ T30] 1 lock held by kworker/R-wg-cr/9471: [ 656.910830][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 656.964906][ T30] 1 lock held by kworker/R-wg-cr/9472: [ 656.970528][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.019991][ T30] 1 lock held by kworker/R-wg-cr/9912: [ 657.034783][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.065704][ T30] 1 lock held by kworker/R-wg-cr/9913: [ 657.071238][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.122284][ T30] 1 lock held by kworker/R-wg-cr/9914: [ 657.146259][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.184774][ T30] 1 lock held by kworker/R-wg-cr/10385: [ 657.190403][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.225247][ T30] 1 lock held by kworker/R-wg-cr/10386: [ 657.230863][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.280772][ T30] 1 lock held by kworker/R-wg-cr/10387: [ 657.308365][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.345347][ T30] 1 lock held by kworker/R-wg-cr/10446: [ 657.364829][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.404699][ T30] 1 lock held by kworker/R-wg-cr/10447: [ 657.410321][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.453505][ T30] 1 lock held by kworker/R-wg-cr/10578: [ 657.474750][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.509240][ T30] 1 lock held by kworker/R-wg-cr/10580: [ 657.532338][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.574809][ T30] 1 lock held by kworker/R-wg-cr/10581: [ 657.580437][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.615000][ T30] 1 lock held by kworker/R-wg-cr/10673: [ 657.620624][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.675258][ T30] 1 lock held by kworker/R-wg-cr/10675: [ 657.680907][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.725097][ T30] 1 lock held by kworker/R-wg-cr/11051: [ 657.730725][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.785139][ T30] 1 lock held by kworker/R-wg-cr/11054: [ 657.790853][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 657.834796][ T30] 1 lock held by kworker/R-wg-cr/11055: [ 657.856693][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 657.895385][ T30] 7 locks held by syz-executor/11585: [ 657.900834][ T30] #0: ffff888032260420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 657.934794][ T30] #1: ffff888065546888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 657.975637][ T30] #2: ffff888144f145a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 658.014924][ T30] #3: ffffffff8f570e28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 658.044076][ T30] #4: ffff8880609060e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 658.078691][ T30] #5: ffff88802fbdb250 (&devlink->lock_key#28){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 658.115258][ T30] #6: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 658.154929][ T30] 1 lock held by kworker/R-bond0/11593: [ 658.160563][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.204626][ T30] 1 lock held by kworker/R-bond0/11595: [ 658.210252][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.251242][ T30] 1 lock held by kworker/R-bond0/11600: [ 658.269967][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.305679][ T30] 1 lock held by kworker/R-bond0/11605: [ 658.311302][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.354912][ T30] 1 lock held by kworker/R-bond0/11608: [ 658.360539][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.415549][ T30] 1 lock held by kworker/R-wg-cr/11616: [ 658.421176][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.464897][ T30] 1 lock held by kworker/R-wg-cr/11617: [ 658.470544][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.525518][ T30] 1 lock held by kworker/R-wg-cr/11619: [ 658.531142][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.584893][ T30] 1 lock held by kworker/R-wg-cr/11620: [ 658.590519][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.635473][ T30] 1 lock held by kworker/R-wg-cr/11621: [ 658.641101][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.684935][ T30] 1 lock held by kworker/R-wg-cr/11622: [ 658.690565][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.745533][ T30] 1 lock held by kworker/R-wg-cr/11623: [ 658.751154][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.799127][ T30] 1 lock held by kworker/R-wg-cr/11624: [ 658.834758][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.863128][ T30] 1 lock held by kworker/R-wg-cr/11625: [ 658.876884][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.917123][ T30] 1 lock held by kworker/R-wg-cr/11626: [ 658.922832][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 658.974897][ T30] 1 lock held by kworker/R-wg-cr/11627: [ 658.980533][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.015013][ T30] 1 lock held by kworker/R-wg-cr/11628: [ 659.020643][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.065108][ T30] 1 lock held by kworker/R-wg-cr/11629: [ 659.094846][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.125738][ T30] 1 lock held by kworker/R-wg-cr/11630: [ 659.131360][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.170517][ T30] 1 lock held by kworker/R-wg-cr/11631: [ 659.193598][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.225303][ T30] 1 lock held by kworker/R-bond0/11706: [ 659.231015][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.274696][ T30] 1 lock held by kworker/R-bond0/11707: [ 659.280319][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.335412][ T30] 1 lock held by kworker/R-bond0/11708: [ 659.341042][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.377702][ T30] 1 lock held by kworker/R-bond0/11711: [ 659.383335][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.434714][ T30] 1 lock held by kworker/R-wg-cr/11724: [ 659.440343][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.484764][ T30] 1 lock held by kworker/R-wg-cr/11725: [ 659.490471][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.539517][ T30] 1 lock held by kworker/R-wg-cr/11726: [ 659.564642][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.594754][ T30] 1 lock held by kworker/R-wg-cr/11727: [ 659.600389][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.654825][ T30] 1 lock held by kworker/R-wg-cr/11728: [ 659.660455][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.700184][ T30] 1 lock held by kworker/R-wg-cr/11729: [ 659.728137][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.756818][ T30] 1 lock held by kworker/R-wg-cr/11730: [ 659.762443][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.808726][ T30] 1 lock held by kworker/R-wg-cr/11731: [ 659.814446][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.858508][ T30] 1 lock held by kworker/R-wg-cr/11732: [ 659.864227][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.910345][ T30] 1 lock held by kworker/R-wg-cr/11735: [ 659.939162][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 659.974985][ T30] 1 lock held by kworker/R-wg-cr/11736: [ 659.980698][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 660.024766][ T30] 1 lock held by kworker/R-wg-cr/11738: [ 660.030503][ T30] #0: ffffffff8e7e23e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 660.084807][ T30] 1 lock held by syz-executor/11786: [ 660.090172][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.135002][ T30] 1 lock held by syz-executor/11798: [ 660.140366][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.176080][ T30] 1 lock held by syz-executor/11800: [ 660.181443][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.234784][ T30] 1 lock held by syz-executor/11803: [ 660.240159][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.274820][ T30] 1 lock held by syz-executor/11804: [ 660.280207][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.319379][ T30] 2 locks held by dhcpcd/11850: [ 660.324331][ T30] #0: ffff888069c52258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.369012][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 660.405055][ T30] 1 lock held by dhcpcd/11851: [ 660.409899][ T30] #0: ffff88807ed0a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.454971][ T30] 1 lock held by dhcpcd/11852: [ 660.459816][ T30] #0: ffff88802925e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.505381][ T30] 1 lock held by dhcpcd/11853: [ 660.510231][ T30] #0: ffff88802925c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.559872][ T30] 1 lock held by dhcpcd/11854: [ 660.575298][ T30] #0: ffff8880455b6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.604086][ T30] 1 lock held by dhcpcd/11855: [ 660.618109][ T30] #0: ffff8880286b2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 660.660441][ T30] [ 660.662839][ T30] ============================================= [ 660.662839][ T30] [ 660.890685][ T30] NMI backtrace for cpu 1 [ 660.895094][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 660.905637][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.915729][ T30] Call Trace: [ 660.919036][ T30] [ 660.921995][ T30] dump_stack_lvl+0x241/0x360 [ 660.926716][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.931947][ T30] ? __pfx__printk+0x10/0x10 [ 660.936587][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 660.941565][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 660.947105][ T30] ? _printk+0xd5/0x120 [ 660.951295][ T30] ? __pfx__printk+0x10/0x10 [ 660.955919][ T30] ? __wake_up_klogd+0xcc/0x110 [ 660.960815][ T30] ? __pfx__printk+0x10/0x10 [ 660.965444][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 660.970528][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 660.976563][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 660.982607][ T30] watchdog+0xff4/0x1040 [ 660.986911][ T30] ? watchdog+0x1ea/0x1040 [ 660.991379][ T30] ? __pfx_watchdog+0x10/0x10 [ 660.996118][ T30] kthread+0x2f0/0x390 [ 661.000216][ T30] ? __pfx_watchdog+0x10/0x10 [ 661.004928][ T30] ? __pfx_kthread+0x10/0x10 [ 661.009551][ T30] ret_from_fork+0x4b/0x80 [ 661.014010][ T30] ? __pfx_kthread+0x10/0x10 [ 661.018637][ T30] ret_from_fork_asm+0x1a/0x30 [ 661.023457][ T30] [ 661.027808][ T30] Sending NMI from CPU 1 to CPUs 0: [ 661.033084][ C0] NMI backtrace for cpu 0 [ 661.033099][ C0] CPU: 0 UID: 0 PID: 5348 Comm: kworker/0:7 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 661.033123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.033136][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 661.033167][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 661.033195][ C0] Code: 8b 3d 74 1a 9d 0c 48 89 de 5b e9 33 dd 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d7 03 00 65 8b 15 d0 ff 6e 7e 81 e2 00 01 ff 00 [ 661.033213][ C0] RSP: 0018:ffffc90000006bd8 EFLAGS: 00000297 [ 661.033229][ C0] RAX: ffffffff8a4d9bc5 RBX: 0000000000000003 RCX: ffffc90000006d40 [ 661.033244][ C0] RDX: ffff88802cb81e00 RSI: 0000000000000003 RDI: 0000000000000020 [ 661.033258][ C0] RBP: ffffc90000006dd0 R08: ffffffff8a4d9bb7 R09: 0000000000000000 [ 661.033272][ C0] R10: ffffc90000006d40 R11: fffff52000000dac R12: ffff8880862fc140 [ 661.033286][ C0] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880862fc140 [ 661.033300][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 661.033316][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.033335][ C0] CR2: 0000000020191030 CR3: 000000000e734000 CR4: 00000000003526f0 [ 661.033352][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.033363][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.033376][ C0] Call Trace: [ 661.033383][ C0] [ 661.033392][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 661.033417][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 661.033447][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 661.033471][ C0] ? nmi_handle+0x2a/0x5a0 [ 661.033497][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 661.033523][ C0] ? nmi_handle+0x14f/0x5a0 [ 661.033542][ C0] ? nmi_handle+0x2a/0x5a0 [ 661.033562][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 661.033586][ C0] ? default_do_nmi+0x63/0x160 [ 661.033611][ C0] ? exc_nmi+0x123/0x1f0 [ 661.033635][ C0] ? end_repeat_nmi+0xf/0x53 [ 661.033657][ C0] ? ipt_do_table+0x2d7/0x1860 [ 661.033685][ C0] ? ipt_do_table+0x2e5/0x1860 [ 661.033713][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 661.033738][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 661.033762][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 661.033786][ C0] [ 661.033793][ C0] [ 661.033799][ C0] ipt_do_table+0x2e5/0x1860 [ 661.033839][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 661.033860][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 661.033890][ C0] ? ipt_do_table+0x312/0x1860 [ 661.033946][ C0] iptable_mangle_hook+0x154/0x4b0 [ 661.033970][ C0] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 661.033990][ C0] nf_hook_slow+0xc3/0x220 [ 661.034015][ C0] ? __pfx_dst_output+0x10/0x10 [ 661.034041][ C0] nf_hook+0x2c4/0x450 [ 661.034069][ C0] ? nf_hook+0x9e/0x450 [ 661.034094][ C0] ? __pfx_nf_hook+0x10/0x10 [ 661.034121][ C0] ? __pfx_dst_output+0x10/0x10 [ 661.034150][ C0] ? ip_fast_csum+0x1f0/0x2b0 [ 661.034174][ C0] __ip_local_out+0x3d9/0x4e0 [ 661.034199][ C0] ? __pfx_dst_output+0x10/0x10 [ 661.034227][ C0] ip_local_out+0x26/0x70 [ 661.034253][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 661.034288][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 661.034317][ C0] ? synproxy_pernet+0x45/0x270 [ 661.034352][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 661.034383][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 661.034414][ C0] ? nf_ip_checksum+0x13a/0x500 [ 661.034434][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 661.034465][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 661.034497][ C0] ? __pfx_validate_chain+0x10/0x10 [ 661.034523][ C0] nft_do_chain+0x4ad/0x1da0 [ 661.034553][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 661.034572][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 661.034614][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 661.034640][ C0] nft_do_chain_inet+0x418/0x6b0 [ 661.034672][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 661.034702][ C0] ? ipt_do_table+0x312/0x1860 [ 661.034741][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 661.034771][ C0] nf_hook_slow+0xc3/0x220 [ 661.034801][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.034828][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.034854][ C0] NF_HOOK+0x29e/0x450 [ 661.034881][ C0] ? NF_HOOK+0x9a/0x450 [ 661.034906][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.034932][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.034962][ C0] ? ip_rcv_finish+0x406/0x560 [ 661.034989][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.035015][ C0] NF_HOOK+0x3a4/0x450 [ 661.035039][ C0] ? __lock_acquire+0x1384/0x2050 [ 661.035084][ C0] ? NF_HOOK+0x9a/0x450 [ 661.035108][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.035129][ C0] ? ip_rcv_core+0x801/0xd10 [ 661.035151][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.035176][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 661.035197][ C0] __netif_receive_skb+0x2bf/0x650 [ 661.035223][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 661.035250][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 661.035272][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 661.035299][ C0] ? __pfx_lock_release+0x10/0x10 [ 661.035327][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 661.035365][ C0] process_backlog+0x662/0x15b0 [ 661.035392][ C0] ? process_backlog+0x33b/0x15b0 [ 661.035420][ C0] ? __pfx_process_backlog+0x10/0x10 [ 661.035445][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 661.035473][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 661.035502][ C0] __napi_poll+0xcb/0x490 [ 661.035526][ C0] net_rx_action+0x89b/0x1240 [ 661.035560][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 661.035587][ C0] ? sched_clock+0x4a/0x70 [ 661.035617][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 661.035648][ C0] handle_softirqs+0x2c5/0x980 [ 661.035675][ C0] ? do_softirq+0x11b/0x1e0 [ 661.035699][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 661.035727][ C0] do_softirq+0x11b/0x1e0 [ 661.035749][ C0] [ 661.035756][ C0] [ 661.035763][ C0] ? __pfx_do_softirq+0x10/0x10 [ 661.035786][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 661.035815][ C0] ? rcu_is_watching+0x15/0xb0 [ 661.035837][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 661.035860][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 661.035884][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 661.035909][ C0] ? neigh_destroy+0x423/0x580 [ 661.035933][ C0] neigh_periodic_work+0xb35/0xd50 [ 661.035960][ C0] ? process_scheduled_works+0x976/0x1850 [ 661.035986][ C0] process_scheduled_works+0xa63/0x1850 [ 661.036023][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.036052][ C0] ? assign_work+0x364/0x3d0 [ 661.036078][ C0] worker_thread+0x870/0xd30 [ 661.036108][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 661.036138][ C0] ? __kthread_parkme+0x169/0x1d0 [ 661.036166][ C0] ? __pfx_worker_thread+0x10/0x10 [ 661.036191][ C0] kthread+0x2f0/0x390 [ 661.036208][ C0] ? __pfx_worker_thread+0x10/0x10 [ 661.036233][ C0] ? __pfx_kthread+0x10/0x10 [ 661.036251][ C0] ret_from_fork+0x4b/0x80 [ 661.036277][ C0] ? __pfx_kthread+0x10/0x10 [ 661.036295][ C0] ret_from_fork_asm+0x1a/0x30 [ 661.036335][ C0] [ 661.989091][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 661.996022][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 662.006561][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 662.016653][ T30] Call Trace: [ 662.019965][ T30] [ 662.022931][ T30] dump_stack_lvl+0x241/0x360 [ 662.027673][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.032913][ T30] ? __pfx__printk+0x10/0x10 [ 662.037557][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 662.043599][ T30] ? vscnprintf+0x5d/0x90 [ 662.047983][ T30] panic+0x349/0x880 [ 662.051932][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.058136][ T30] ? __pfx_panic+0x10/0x10 [ 662.062583][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 662.068005][ T30] ? __irq_work_queue_local+0x137/0x410 [ 662.073599][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 662.079009][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.085201][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 662.091397][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 662.097593][ T30] watchdog+0x1033/0x1040 [ 662.101960][ T30] ? watchdog+0x1ea/0x1040 [ 662.106422][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.111142][ T30] kthread+0x2f0/0x390 [ 662.115240][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.119964][ T30] ? __pfx_kthread+0x10/0x10 [ 662.124593][ T30] ret_from_fork+0x4b/0x80 [ 662.129056][ T30] ? __pfx_kthread+0x10/0x10 [ 662.133688][ T30] ret_from_fork_asm+0x1a/0x30 [ 662.138515][ T30] [ 662.141919][ T30] Kernel Offset: disabled [ 662.146261][ T30] Rebooting in 86400 seconds..