last executing test programs: 1m28.603276507s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x8cf, &(0x7f0000000140)={0x0, 0x61ab, 0x40, 0x2, 0xc7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x72, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) (async) io_uring_setup(0x8cf, &(0x7f0000000140)={0x0, 0x61ab, 0x40, 0x2, 0xc7}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) (async) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x72, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) 1m28.363069743s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) 1m28.004185163s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0xc086) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8, 0x6, 0x7fffffff, r6}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001500)={r6, 0x4}, &(0x7f00000015c0)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$tun(r9, &(0x7f0000001440)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYRESOCT=r9, @ANYRES16=r8, @ANYRESHEX=r9, @ANYRESHEX=r8, @ANYRES64, @ANYRESHEX=r9, @ANYRES32, @ANYRES8=r8], 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f00000014c0)=0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r11, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x715d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x0, 0xc3, r13}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x12c, 0x12c, 0x12c, 0xfeffffff, 0xffffffff, 0x1310, 0x1310, 0x1310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x12c, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'nr0\x00', {0xf6b10943545b75d8}, 'wg1\x00', {0xff}, 0x14, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x10d4, 0x111c, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'bridge_slave_1\x00', {0x7ff}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xff], [0x1fe, 0xff000000, 0xff000000, 0xffffffff], 'veth0_to_bridge\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x4, 0x23}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1434) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xd4, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xd4}}, 0x0) 1m27.399355763s ago: executing program 3 (id=13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000300)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x460, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002e844c40882054200d3a00102030109024e04020000000409044b090c45e46c0209050210e0663204ca09050102000206ab0407250101000000dc06658ac7a116af8ca8e4cceb783de43c3ff8cf89711d4f5d9e328402fe3dc2cb843756ab204973e307e75f48e6c64064d497f67487954df54febba69f95bfbee41d208b4674b727673ef4a625de270ac967063dbafc020b9d5945eff0651a191643ea5b853edbc1f28073066daf12b121779333f8f800a6eb29ec6a55065d16383f920520483762350b5314e81866e2f93a85e8a703158beaa36166a30c2bd417c57d25f8f5aa558c04a03611befd2560e689b5ae9535a948aa8e18e4f1afd7ffe9a3aed8a64e5923df85146d6322013b896be070905080108000406080725018123fdff0725018201050009050900000402048009050b080002fd08058307dc804f8b0a2c8d6e5158be7c6c9b2ea5a8afc3c10b529698a71e3a2b540c16a553761b0e903dddbce556c2bd30b0a00a914eb081dd133a59c5a6424953e5020936f13267d6f349e9e50cd3ae40f58f982576e2a2ce8bd13bc4cd8ae91a5320a9512d3599aa77ec26d3c7d75173bd1a22cbe3edf13559d5f7a0358d273be2ddff4b611789285ef8ee199e34090905000c400009010109050100ff030540af072501024d030009050e03000408050f09050a00ff03dc04c307250102d308000725018006090009050e081000020100090503102000010804020409050104000208089a072501020770000904bac0035f266b080b2402010902f7092b7c520e2402020900ff0f08e77d55c6010e24020113020509a0fb2c0b6981092402010504df0e4e0e2402020600d6750fe69b82a3030a2402012003690ea1240a2401ffff9d0201020924030304030203010824070e00000d340724040607f284092404032823aa5a5b0c240205060205de04004c0609050c040004fa06400725010330080009050203100009040c090509102000d00400ec09f95598fbca3ae1b6ed59a4fdee803c9ce52e41b7774fc95ec96cb7b8415da8dc3abf1ab68aac14c81778c7cfc35a58149fbafdb06c12b95206f51a7996a39d2662c7689f9841f8e574929c7fa4f5118dc62fc9a31ce6c9ec5a1248f27ae2924777b8d137c90f5da6edf3e34b519a03ba884d9a791e1ea54d49ae300832a2c71153ed4e0b46a951a738d9e89b603084df58510cc5609fd24d214128a65a5359f2959a2b5665e004008bdd712cd80829c8164ea669b9cbc57ded3d5e2cdec539c7614a9bc39aba89347eb86e5930008cc0a780cbd702000000ea6ee744e2f8dcbb6102e09a2c0c2e80859fa931726b04da01de8e81912c5931c2dc0cebf6cdc3e99a26878b49615f5f0f73de04bfa0700fd6435d213f4080918345b201391a232a0b50acc2666bc983f73225a233ab32a504557672649ad40814692f40dfac62454a4442419c5612431c5af3ad199109c24f8b97410a4e4cd537211be7bb3438a0735613ccf5f902440eb4c8515db3331eafc79c04d39b1c73f692f89f7fa8b0a65406d4c83b651640e8ab0dd45709691b6e2c19f4a22fd65e237cbf8a52cf231f8978c15d8f52abff29374dba4edd46eba68e3a8d649d5d38a4fea89f0bddb7d62ca2b23005ae3c9c98445415250e5af88c077db29aedf4247afae3459bfdcaa7dbee0d35d255191d978b6782b46c1c3f1bd25c26"], 0x0) 1m25.600482193s ago: executing program 3 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) (fail_nth: 4) 1m25.2800184s ago: executing program 3 (id=32): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff3, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = socket$packet(0x11, 0xa, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x202800, 0x0) 1m24.847837975s ago: executing program 32 (id=32): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff3, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = socket$packet(0x11, 0xa, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x202800, 0x0) 1m13.702970668s ago: executing program 2 (id=97): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000300)="01000000a06b955a2a630b00c145f94cd9ffbf111100000000002b8ad7243ca1", 0x20, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b", 0x16}], 0x2, 0x8) r2 = socket$inet(0x2, 0x3, 0x7c) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xc, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1m13.364112856s ago: executing program 2 (id=101): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="1c0000002000190f00003fffffffda0602000000fde80001dd000004", 0x1c}], 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="81e8f1aa0df0596b53807b05fe1b8e7c8ab090c241f099b84a62993fbbd150f29e6c9eb9982528f77eb8c500f6fd0cd08b6fac796b08a4bf2975365207596d7f5add808dc7f9fbe311da3ba28ada05666a3736d9f195380a4a1579f2867ca9c5b0fe1395554b6dad5d3c7abfd0416bf70ae7415796bed8b71c744c842b0a4c21eab3d871", 0x84}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="1c0000002000190f00003fffffffda0602000000fde80001dd000004", 0x1c}], 0x1) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="81e8f1aa0df0596b53807b05fe1b8e7c8ab090c241f099b84a62993fbbd150f29e6c9eb9982528f77eb8c500f6fd0cd08b6fac796b08a4bf2975365207596d7f5add808dc7f9fbe311da3ba28ada05666a3736d9f195380a4a1579f2867ca9c5b0fe1395554b6dad5d3c7abfd0416bf70ae7415796bed8b71c744c842b0a4c21eab3d871", 0x84}], 0x1) (async) 1m12.893026748s ago: executing program 2 (id=104): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300242007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) 1m12.684238953s ago: executing program 2 (id=106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200341, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8010}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@polexpire={0xec, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x3}}, [@policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@local, 0x2, 0x40}}]}, 0xec}}, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x121a00, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r0, r1, 0x0, 0x1000000000004) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x8}) 1m12.004334675s ago: executing program 5 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x100000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) fcntl$dupfd(r2, 0x406, r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000180c200000008004503e76000000000002f907800000000e000000124678065580000000000000000100008000000000086dd003f080088be00000000100000000100000000000000080022ebbf920000200000000200000000000000000000000800655800000000"], 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38f40000dd3d5f307156", @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0500180134000000050018010e0000000a0034000202020202020000"], 0x38}}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) lseek(r10, 0xfffffff4, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x100000) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) (async) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) fcntl$dupfd(r2, 0x406, r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000180c200000008004503e76000000000002f907800000000e000000124678065580000000000000000100008000000000086dd003f080088be00000000100000000100000000000000080022ebbf920000200000000200000000000000000000000800655800000000"], 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38f40000dd3d5f307156", @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0500180134000000050018010e0000000a0034000202020202020000"], 0x38}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) (async) lseek(r10, 0xfffffff4, 0x1) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) 1m11.814070463s ago: executing program 2 (id=111): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1m11.698052713s ago: executing program 5 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000040000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 1m11.556292037s ago: executing program 2 (id=114): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xac}}, 0x4002000) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x8000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000011402909a2afcb6d02d303b0029bd7000ffdbdf250800000001000000010001000200000008000100010000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000041) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) (async) ioctl$KVM_NMI(r10, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x20003, 0x40000000002, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xffffffffffffffff, 0x3], 0xeeee0000, 0x1941}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m11.13225612s ago: executing program 33 (id=114): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xac}}, 0x4002000) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x8000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000011402909a2afcb6d02d303b0029bd7000ffdbdf250800000001000000010001000200000008000100010000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000041) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) (async) ioctl$KVM_NMI(r10, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x20003, 0x40000000002, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xffffffffffffffff, 0x3], 0xeeee0000, 0x1941}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m11.116042118s ago: executing program 5 (id=118): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x5) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r2) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x8) (async) syz_emit_ethernet(0x1166, &(0x7f0000000240)={@empty, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, ')5%', 0x1130, 0x2, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, {[@fragment={0x2f, 0x0, 0x9, 0x0, 0x0, 0x3, 0x67}, @srh={0x2c, 0x4, 0x4, 0x2, 0x5, 0x18, 0x8, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}]}, @fragment={0x33, 0x0, 0x18, 0x1, 0x0, 0x1a, 0x64}, @routing={0x21, 0xc, 0x2, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @remote, @loopback, @rand_addr=' \x01\x00']}, @routing={0x62, 0x10, 0x0, 0xed, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x3a, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x67}], "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"}}}}}, 0x0) 1m7.863625197s ago: executing program 5 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010000000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="6044ffffffa10000180016801400018010000600030000004bc25d029c826ff4040014"], 0x3c}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) 53.621924446s ago: executing program 5 (id=137): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) (fail_nth: 8) 52.273798665s ago: executing program 5 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffab, &(0x7f0000000080)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}]}, 0x50}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xffff}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fremovexattr(r1, &(0x7f0000000100)=@known='system.posix_acl_default\x00') 52.015531578s ago: executing program 4 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e300000feffff7f00", @ANYRES32=0x0, @ANYBLOB="1c0016801800018014000a"], 0x58}}, 0x0) 51.667302005s ago: executing program 4 (id=146): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000c80)=[{0x20, 0x0, 0x0, 0xe523}, {0x6, 0x8, 0x0, 0x2}]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) 50.974304087s ago: executing program 4 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000100000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 50.708104684s ago: executing program 0 (id=149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x0, 0x0, 0x0}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff034}, {0x48}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) r3 = dup3(r2, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x1}, @increfs={0x40046304, 0x2}, @request_death, @enter_looper, @register_looper, @clear_death={0x400c630f, 0x3}], 0x66, 0x0, &(0x7f0000000400)="9fab450a0a3d9099e50ebe6a1731081a3d3b996ecd3127dceea962328732913c45e3469fc536f7926ed252410881999acc9e3477ce81c5e1f1b119f8b35052b92941322eba92614912e2a3d0a77e59982cb7dc403d767213b2171032402d5f3d210c1ff7ac49"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) socket$inet_sctp(0x2, 0xfbe667279041e50c, 0x84) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000280)={0x20, r10, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) (async) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000300)={0x8, r10}) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, 0x0, 0x0) (async) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x6}, 0x8) (async) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000340)={0x8, r9}) (async) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r8, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000400)={0x8, r7}) 50.697280611s ago: executing program 1 (id=150): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500200000000072000000000000000000", 0x39}], 0x1) 50.283069647s ago: executing program 0 (id=151): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x208080, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000)="a65957629f5a7be7cfc86c6ce1f048", 0xf, r0}, 0x64) 50.191704313s ago: executing program 4 (id=152): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x286000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000480)) r1 = userfaultfd(0x80001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffff5, 0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) read(r1, &(0x7f0000000180)=""/227, 0xe3) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="0420"], 0xa) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000003c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@any, 0x2}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 49.757396697s ago: executing program 4 (id=153): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 49.671310272s ago: executing program 1 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000007b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000000000009500000007000000b7000005000000009500"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 49.362785991s ago: executing program 1 (id=155): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "5dac86968f32b331"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ppoll(&(0x7f0000000000)=[{r2, 0x480}], 0x1, &(0x7f0000000100), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2, 0x5]}, 0x8, 0x800) socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x1a8) write$binfmt_misc(r3, &(0x7f0000000180)="abd004f047c28ac221829e7a2af772899618c71320fca25fd5a113756ab6d85b81cd53102b591446d64fa178c3842b0981f5d3f04e3fb9006657b84f13fce37fcf519f3809fad8ed62955b2034b87d8558c10f34a5b20338", 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fstatat64(0xffffff9c, 0x0, 0x0, 0x3100) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b62d25a80648c2594f905246e60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 49.056007639s ago: executing program 0 (id=156): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff59240000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) 48.855809505s ago: executing program 1 (id=157): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9cd5ca00fffb483909e7f76874aa02ea454062ad"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "55d3609f83f3a5cc7aa8bca0414d5c1ef0da9d70"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x94}}, 0x0) 48.580700704s ago: executing program 0 (id=158): r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) close_range(r0, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x204c0, 0x0) 48.580289255s ago: executing program 1 (id=159): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x500}, 0x0) 48.300980673s ago: executing program 0 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x401, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) 48.3007413s ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0400040000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000c00000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000006c0)=0x30000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000700)={@local}) ppoll(&(0x7f0000000040)=[{r2, 0x12c}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000180)={&(0x7f0000000280)={{@local, 0x8}, {@local, 0x10000000}, 0x400, "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"}, 0x418, 0x1}) connect$inet6(r1, &(0x7f000000b0c0)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001240)="fe", 0x1}, {0x0, 0x31}], 0x2}}], 0x1, 0x0) 48.120425615s ago: executing program 4 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000300)="fc4a97e0f69e357698165c19d6d3479f5cfcebcf880c5774006a393ff566b26a12ea38111c8abaecdf793bf1ef4e94252a0b05ef34018f9e312d088aa517f72e717881c2453795c149894b699bba"}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000120000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 47.994716424s ago: executing program 0 (id=163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e0278410f33b37f69ca83c8a92a6a78191790236eb8d005af8a8201", 0x1c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f00000019c0)="a818cdd621e709ec5052bd1839aec792c7412a7af4b81a54602427", 0x1b}], 0x1}}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffe4c, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r6, 0x1, 0x0, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0xfffffffffffffe27}}, {0x8, 0x3, 0xfffffffe}}}]}, 0x38}}, 0x0) 0s ago: executing program 34 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffab, &(0x7f0000000080)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}]}, 0x50}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xffff}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fremovexattr(r1, &(0x7f0000000100)=@known='system.posix_acl_default\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 54.945071][ T5830] cgroup: Unknown subsys name 'net' [ 55.057299][ T5830] cgroup: Unknown subsys name 'cpuset' [ 55.065135][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.368516][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.516445][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.531319][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.539241][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.547765][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.555714][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.563116][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.573598][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.581540][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.583060][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.590002][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.600789][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.606682][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.611465][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.619649][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.630095][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.632061][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.641745][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.647125][ T5158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.654996][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.668102][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.668606][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.676070][ T5158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.691094][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.699219][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.706730][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.723235][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.732396][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.739557][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.751631][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.764723][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.050804][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 59.252627][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 59.276608][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.284471][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.291779][ T5863] bridge_slave_0: entered allmulticast mode [ 59.299347][ T5863] bridge_slave_0: entered promiscuous mode [ 59.348773][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.366514][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.376572][ T5863] bridge_slave_1: entered allmulticast mode [ 59.385020][ T5863] bridge_slave_1: entered promiscuous mode [ 59.439848][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 59.452505][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.462446][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 59.488533][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 59.503326][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.578225][ T5863] team0: Port device team_slave_0 added [ 59.621687][ T5863] team0: Port device team_slave_1 added [ 59.652566][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.659879][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.667083][ T5858] bridge_slave_0: entered allmulticast mode [ 59.673728][ T5858] bridge_slave_0: entered promiscuous mode [ 59.708324][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.715785][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.723065][ T5858] bridge_slave_1: entered allmulticast mode [ 59.730404][ T5858] bridge_slave_1: entered promiscuous mode [ 59.764212][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.771193][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.798033][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.840935][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.848037][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.873989][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.893578][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.918209][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.925508][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.932732][ T5860] bridge_slave_0: entered allmulticast mode [ 59.940243][ T5860] bridge_slave_0: entered promiscuous mode [ 59.965458][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.974878][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.982003][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.990691][ T5864] bridge_slave_0: entered allmulticast mode [ 59.997971][ T5864] bridge_slave_0: entered promiscuous mode [ 60.006463][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.013607][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.020821][ T5864] bridge_slave_1: entered allmulticast mode [ 60.027752][ T5864] bridge_slave_1: entered promiscuous mode [ 60.034295][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.041368][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.049309][ T5860] bridge_slave_1: entered allmulticast mode [ 60.056590][ T5860] bridge_slave_1: entered promiscuous mode [ 60.064233][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.071312][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.078556][ T5861] bridge_slave_0: entered allmulticast mode [ 60.085667][ T5861] bridge_slave_0: entered promiscuous mode [ 60.140449][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.149681][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.158302][ T5861] bridge_slave_1: entered allmulticast mode [ 60.167030][ T5861] bridge_slave_1: entered promiscuous mode [ 60.176239][ T5863] hsr_slave_0: entered promiscuous mode [ 60.182568][ T5863] hsr_slave_1: entered promiscuous mode [ 60.192117][ T5858] team0: Port device team_slave_0 added [ 60.209977][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.244287][ T5858] team0: Port device team_slave_1 added [ 60.252552][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.264030][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.275031][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.339431][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.356044][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.363014][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.390250][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.402300][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.409679][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.435946][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.455634][ T5860] team0: Port device team_slave_0 added [ 60.463468][ T5864] team0: Port device team_slave_0 added [ 60.473104][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.498639][ T5860] team0: Port device team_slave_1 added [ 60.506867][ T5864] team0: Port device team_slave_1 added [ 60.547840][ T5861] team0: Port device team_slave_0 added [ 60.574593][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.581592][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.607779][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.621781][ T5861] team0: Port device team_slave_1 added [ 60.646161][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.653145][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.679388][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.691104][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.698456][ T5856] Bluetooth: hci0: command tx timeout [ 60.704903][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.731152][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.771679][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.778810][ T5856] Bluetooth: hci1: command tx timeout [ 60.783888][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.810555][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.835384][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.842532][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.869048][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.873925][ T5856] Bluetooth: hci3: command tx timeout [ 60.879660][ T5848] Bluetooth: hci2: command tx timeout [ 60.885400][ T5856] Bluetooth: hci4: command tx timeout [ 60.892879][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.903079][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.929291][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.943862][ T5858] hsr_slave_0: entered promiscuous mode [ 60.950114][ T5858] hsr_slave_1: entered promiscuous mode [ 60.956359][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.964298][ T5858] Cannot create hsr debugfs directory [ 61.002452][ T5864] hsr_slave_0: entered promiscuous mode [ 61.009119][ T5864] hsr_slave_1: entered promiscuous mode [ 61.015475][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.023056][ T5864] Cannot create hsr debugfs directory [ 61.115780][ T5861] hsr_slave_0: entered promiscuous mode [ 61.122225][ T5861] hsr_slave_1: entered promiscuous mode [ 61.128474][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.136242][ T5861] Cannot create hsr debugfs directory [ 61.153488][ T5860] hsr_slave_0: entered promiscuous mode [ 61.160338][ T5860] hsr_slave_1: entered promiscuous mode [ 61.169763][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.178399][ T5860] Cannot create hsr debugfs directory [ 61.315149][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.348064][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.376349][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.388845][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.528093][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.552994][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.574684][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.595575][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.613200][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.625878][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.649093][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.682521][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.708677][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.733130][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.747477][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.762789][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.795631][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.831736][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.853583][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.884831][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.914282][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.940050][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.987563][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.994820][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.014230][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.021309][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.039049][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.050962][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.097768][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.136240][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.165438][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.172524][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.182326][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.189473][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.199174][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.206367][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.231931][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.239243][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.276329][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.297153][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.308515][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.370991][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.385655][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.411732][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.426753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.433917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.450044][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.463561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.470722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.507652][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.544541][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.565028][ T5863] veth0_vlan: entered promiscuous mode [ 62.587213][ T5858] veth0_vlan: entered promiscuous mode [ 62.606605][ T5863] veth1_vlan: entered promiscuous mode [ 62.624858][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.631967][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.642460][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.649629][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.682846][ T5858] veth1_vlan: entered promiscuous mode [ 62.727991][ T5863] veth0_macvtap: entered promiscuous mode [ 62.748618][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.764973][ T5863] veth1_macvtap: entered promiscuous mode [ 62.774877][ T5856] Bluetooth: hci0: command tx timeout [ 62.807921][ T5858] veth0_macvtap: entered promiscuous mode [ 62.822078][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.832895][ T5861] veth0_vlan: entered promiscuous mode [ 62.849897][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.858233][ T5856] Bluetooth: hci1: command tx timeout [ 62.870950][ T5861] veth1_vlan: entered promiscuous mode [ 62.881858][ T5858] veth1_macvtap: entered promiscuous mode [ 62.898628][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.916282][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.924514][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.933390][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.943018][ T5856] Bluetooth: hci4: command tx timeout [ 62.948705][ T5856] Bluetooth: hci2: command tx timeout [ 62.951110][ T5848] Bluetooth: hci3: command tx timeout [ 62.959878][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969015][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.003145][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.015107][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.026653][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.053193][ T5864] veth0_vlan: entered promiscuous mode [ 63.076637][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.088713][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.100835][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.112345][ T5861] veth0_macvtap: entered promiscuous mode [ 63.121490][ T5861] veth1_macvtap: entered promiscuous mode [ 63.131751][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.140974][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.152548][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.162216][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.176383][ T5864] veth1_vlan: entered promiscuous mode [ 63.250469][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.262172][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.272991][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.283760][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.295490][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.329492][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.348159][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.358360][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.369063][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.380771][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.417021][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.428279][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.437178][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.446207][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.485938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.498581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.522316][ T5860] veth0_vlan: entered promiscuous mode [ 63.535741][ T5860] veth1_vlan: entered promiscuous mode [ 63.543451][ T5864] veth0_macvtap: entered promiscuous mode [ 63.556870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.569671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.591996][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.592898][ T5864] veth1_macvtap: entered promiscuous mode [ 63.603758][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.661270][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.682556][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.698995][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.707223][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.718138][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.729029][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.739791][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.750443][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.762426][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.795594][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.831449][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.842040][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.852405][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.863610][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.875111][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.885641][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.897655][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.907323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.923793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.954186][ T5860] veth0_macvtap: entered promiscuous mode [ 63.964005][ T5860] veth1_macvtap: entered promiscuous mode [ 63.981032][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.994428][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.003164][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.023393][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.041231][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.053442][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.097052][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.127537][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.140614][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.150868][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.161431][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.171301][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.181896][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.191844][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.202602][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.215574][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.260510][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.279068][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.289557][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.301026][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.311229][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.321823][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.331807][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.342442][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.355065][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.365210][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.374417][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.383206][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.392029][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.573029][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.608547][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.756005][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.779145][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.815466][ T2196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.836033][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 64.846435][ T2196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.854975][ T5848] Bluetooth: hci0: command tx timeout [ 64.934423][ T5848] Bluetooth: hci1: command tx timeout [ 65.010730][ T5917] ip6t_REJECT: ECHOREPLY is not supported [ 65.018665][ T5848] Bluetooth: hci2: command tx timeout [ 65.027411][ T5848] Bluetooth: hci4: command tx timeout [ 65.032859][ T5848] Bluetooth: hci3: command tx timeout [ 65.051158][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.089477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.097636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.241839][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12'. [ 65.269413][ T5901] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 65.305933][ T5934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 65.351431][ T5901] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 65.363717][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 65.395571][ T5901] usb 1-1: Product: syz [ 65.399819][ T5901] usb 1-1: Manufacturer: syz [ 65.416214][ T5901] usb 1-1: SerialNumber: syz [ 65.440284][ T5938] tmpfs: Unknown parameter ',2otmode' [ 65.498835][ T5901] usb 1-1: config 0 descriptor?? [ 65.541840][ T5944] netlink: 'syz.1.16': attribute type 11 has an invalid length. [ 65.606219][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.615181][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.728890][ T25] usb 1-1: USB disconnect, device number 2 [ 65.754145][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.928005][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.934692][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 65.947594][ T5895] usb 4-1: config 0 has an invalid interface number: 75 but max is 1 [ 65.959293][ T5895] usb 4-1: config 0 has an invalid interface number: 12 but max is 1 [ 65.983032][ T5895] usb 4-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 66.020803][ T5895] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 66.030378][ T5895] usb 4-1: config 0 has no interface number 1 [ 66.036611][ T5895] usb 4-1: config 0 has no interface number 2 [ 66.044855][ T5895] usb 4-1: config 0 interface 75 altsetting 9 endpoint 0x2 has invalid maxpacket 26336, setting to 64 [ 66.056652][ T5895] usb 4-1: config 0 interface 75 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 66.069837][ T5895] usb 4-1: config 0 interface 12 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 66.083021][ T5895] usb 4-1: config 0 interface 0 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 66.096435][ T5895] usb 4-1: config 0 interface 75 has no altsetting 0 [ 66.096861][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 66.103125][ T5895] usb 4-1: config 0 interface 12 has no altsetting 0 [ 66.103166][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.123213][ T5898] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 66.131892][ T5898] usb 2-1: config 0 has no interface number 0 [ 66.145039][ T5898] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 66.157937][ T5898] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 66.163748][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0042, bcdDevice=a0.d3 [ 66.179734][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.188777][ T5895] usb 4-1: Product: syz [ 66.192990][ T5895] usb 4-1: Manufacturer: syz [ 66.197877][ T5895] usb 4-1: SerialNumber: syz [ 66.205963][ T5895] usb 4-1: config 0 descriptor?? [ 66.241995][ T5898] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 66.254547][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.262728][ T5898] usb 2-1: Product: syz [ 66.268306][ T5898] usb 2-1: Manufacturer: syz [ 66.273120][ T5898] usb 2-1: SerialNumber: syz [ 66.335401][ T5898] usb 2-1: config 0 descriptor?? [ 66.429220][ T5895] hub 4-1:0.12: bad descriptor, ignoring hub [ 66.436146][ T5895] hub 4-1:0.12: probe with driver hub failed with error -5 [ 66.463737][ T5959] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 66.502345][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 66.511614][ T5963] netlink: 6 bytes leftover after parsing attributes in process `syz.2.21'. [ 66.527641][ T5959] loop2: detected capacity change from 0 to 7 [ 66.560652][ T5959] Dev loop2: unable to read RDB block 7 [ 66.590919][ T5959] loop2: unable to read partition table [ 66.606989][ T5959] loop2: partition table beyond EOD, truncated [ 66.670992][ T5959] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 66.701680][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.708635][ T5898] usb 2-1: USB disconnect, device number 2 [ 66.746466][ T5219] Dev loop2: unable to read RDB block 7 [ 66.752114][ T5219] loop2: unable to read partition table [ 66.771053][ T5895] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 66.782067][ T5219] loop2: partition table beyond EOD, truncated [ 66.826871][ T5895] usb 4-1: USB disconnect, device number 2 [ 66.895978][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.910650][ T5974] Zero length message leads to an empty skb [ 66.944543][ T5850] Bluetooth: hci0: command tx timeout [ 67.015068][ T5850] Bluetooth: hci1: command tx timeout [ 67.068436][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.094817][ T5848] Bluetooth: hci4: command tx timeout [ 67.100278][ T5848] Bluetooth: hci2: command tx timeout [ 67.109198][ T5850] Bluetooth: hci3: command tx timeout [ 67.254817][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 67.278398][ T5984] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 67.331732][ T5984] batman_adv: batadv0: Adding interface: team0 [ 67.340106][ T5986] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 67.350628][ T5986] netlink: 2 bytes leftover after parsing attributes in process `syz.2.30'. [ 67.359506][ T5984] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.394129][ T5984] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 67.422078][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 67.431158][ T5990] capability: warning: `syz.0.33' uses deprecated v2 capabilities in a way that may be insecure [ 67.449592][ T5989] bridge0: entered promiscuous mode [ 67.455798][ T5989] bridge0: entered allmulticast mode [ 67.462609][ T5986] team0: entered promiscuous mode [ 67.470511][ T5986] team_slave_0: entered promiscuous mode [ 67.478423][ T5986] team_slave_1: entered promiscuous mode [ 67.486505][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.495097][ T5986] batman_adv: batadv0: Interface activated: team0 [ 67.501868][ T5986] batman_adv: batadv0: Interface deactivated: team0 [ 67.510531][ T5986] batman_adv: batadv0: Removing interface: team0 [ 67.538298][ T5986] bridge0: port 3(team0) entered blocking state [ 67.557670][ T5986] bridge0: port 3(team0) entered disabled state [ 67.575993][ T5986] team0: entered allmulticast mode [ 67.591415][ T5986] team_slave_0: entered allmulticast mode [ 67.601530][ T5986] team_slave_1: entered allmulticast mode [ 67.626207][ T5986] bridge0: port 3(team0) entered blocking state [ 67.632897][ T5986] bridge0: port 3(team0) entered forwarding state [ 67.701594][ T2196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.731326][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.739880][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.884263][ T2196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.903904][ T5996] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 67.974336][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 68.023867][ T2196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.058814][ T6001] vlan0: entered promiscuous mode [ 68.191378][ T2196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.270577][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 68.288221][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.298216][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.319943][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.334083][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.344021][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.364015][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.666948][ T2196] bridge_slave_1: left allmulticast mode [ 68.703799][ T2196] bridge_slave_1: left promiscuous mode [ 68.710593][ T2196] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.834902][ T2196] bridge_slave_0: left allmulticast mode [ 68.865028][ T2196] bridge_slave_0: left promiscuous mode [ 68.871013][ T2196] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.975902][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 69.053808][ T5948] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.176081][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.227364][ T5948] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 69.238306][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.282345][ T5948] usb 3-1: config 0 descriptor?? [ 69.304357][ T5948] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 69.389931][ T5895] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 69.398912][ T2196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.405421][ T5895] usb 1-1: config 0 has no interface number 0 [ 69.413596][ T5895] usb 1-1: config 0 interface 50 has no altsetting 0 [ 69.431307][ T5895] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=dc.3c [ 69.440641][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.449344][ T2196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.460844][ T5895] usb 1-1: config 0 descriptor?? [ 69.477442][ T2196] bond0 (unregistering): Released all slaves [ 69.500468][ T6030] dummy0: entered promiscuous mode [ 69.510112][ T6030] dummy0: left promiscuous mode [ 69.523172][ T6035] vxcan1: entered promiscuous mode [ 69.549866][ T6035] vxcan1: entered allmulticast mode [ 69.595129][ T5948] gp8psk: usb in 128 operation failed. [ 69.626697][ T5895] usb_8dev 1-1:0.50 can0: sending command message failed [ 69.650088][ T5895] usb_8dev 1-1:0.50 can0: can't get firmware version [ 69.651896][ T5948] gp8psk: usb in 137 operation failed. [ 69.682450][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.697911][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.703979][ T5948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 69.718230][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.739280][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.747022][ T5948] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 69.759020][ T5948] usb 3-1: USB disconnect, device number 2 [ 69.775787][ T5895] usb_8dev 1-1:0.50: probe with driver usb_8dev failed with error -22 [ 69.854911][ T5895] usb 1-1: USB disconnect, device number 3 [ 69.928702][ T6056] veth2: entered allmulticast mode [ 69.981762][ T6019] chnl_net:caif_netlink_parms(): no params data found [ 70.483966][ T5850] Bluetooth: hci0: command tx timeout [ 70.507557][ T6084] netlink: set zone limit has 8 unknown bytes [ 70.582509][ T6088] usb usb8: usbfs: process 6088 (syz.0.58) did not claim interface 0 before use [ 70.602789][ T2196] hsr_slave_0: left promiscuous mode [ 70.688504][ T2196] hsr_slave_1: left promiscuous mode [ 70.702268][ T6097] FAULT_INJECTION: forcing a failure. [ 70.702268][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.716912][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.60 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 70.727119][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.737205][ T6097] Call Trace: [ 70.740510][ T6097] [ 70.743474][ T6097] dump_stack_lvl+0x241/0x360 [ 70.748209][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.753538][ T6097] ? __pfx__printk+0x10/0x10 [ 70.758165][ T6097] ? __pfx_lock_release+0x10/0x10 [ 70.763218][ T6097] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.769157][ T6097] ? get_synthdev+0x117/0x2c0 [ 70.773910][ T6097] should_fail_ex+0x3b0/0x4e0 [ 70.778814][ T6097] _copy_from_user+0x2f/0xc0 [ 70.783441][ T6097] snd_seq_oss_write+0x5a9/0xbb0 [ 70.788415][ T6097] ? mark_lock+0x9a/0x360 [ 70.792790][ T6097] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 70.798288][ T6097] ? common_file_perm+0x1a6/0x210 [ 70.803355][ T6097] ? bpf_lsm_file_permission+0x9/0x10 [ 70.808851][ T6097] ? security_file_permission+0x74/0x280 [ 70.814533][ T6097] odev_write+0x5b/0x80 [ 70.818723][ T6097] ? __pfx_odev_write+0x10/0x10 [ 70.823619][ T6097] vfs_write+0x2a3/0xd30 [ 70.827906][ T6097] ? __pfx_vfs_write+0x10/0x10 [ 70.832737][ T6097] ? __fget_files+0x2a/0x410 [ 70.837369][ T6097] ? __fget_files+0x395/0x410 [ 70.842092][ T6097] ? __fget_files+0x2a/0x410 [ 70.846733][ T6097] ksys_write+0x18f/0x2b0 [ 70.851208][ T6097] ? __pfx_ksys_write+0x10/0x10 [ 70.856287][ T6097] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 70.862918][ T6097] ? lockdep_hardirqs_on+0x99/0x150 [ 70.868161][ T6097] __do_fast_syscall_32+0xb4/0x110 [ 70.873330][ T6097] ? exc_page_fault+0x590/0x8c0 [ 70.878235][ T6097] do_fast_syscall_32+0x34/0x80 [ 70.883211][ T6097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.889587][ T6097] RIP: 0023:0xf73bd579 [ 70.893711][ T6097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 70.903836][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.913459][ T6097] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 70.913490][ T6097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 70.913502][ T6097] RDX: 0000000000000230 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.913512][ T6097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.913522][ T6097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.913539][ T6097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.913564][ T6097] [ 70.975541][ T2196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.985771][ T2196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.002329][ T2196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.010098][ T2196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.048994][ T2196] veth1_macvtap: left promiscuous mode [ 71.057362][ T2196] veth0_macvtap: left promiscuous mode [ 71.063002][ T2196] veth1_vlan: left promiscuous mode [ 71.069298][ T2196] veth0_vlan: left promiscuous mode [ 71.173779][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 71.190899][ T5948] usb 5-1: config index 0 descriptor too short (expected 62738, got 18) [ 71.206107][ T5948] usb 5-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 71.215931][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.234661][ T5948] usb 5-1: Product: syz [ 71.239082][ T5948] usb 5-1: Manufacturer: syz [ 71.261162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.299666][ T5948] usb 5-1: SerialNumber: syz [ 71.331194][ T5948] usb 5-1: config 0 descriptor?? [ 71.360855][ T6109] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 71.371537][ T5948] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 71.738061][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.745250][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.954246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.112912][ T6122] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 72.126622][ T2196] team0 (unregistering): Port device team_slave_1 removed [ 72.160724][ T2196] team0 (unregistering): Port device team_slave_0 removed [ 72.509092][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.516618][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.524106][ T6019] bridge_slave_0: entered allmulticast mode [ 72.532419][ T6019] bridge_slave_0: entered promiscuous mode [ 72.541307][ T5850] Bluetooth: hci0: command tx timeout [ 72.557285][ T6074] netlink: 'syz.1.57': attribute type 21 has an invalid length. [ 72.602720][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.610636][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.618794][ T6019] bridge_slave_1: entered allmulticast mode [ 72.627103][ T6019] bridge_slave_1: entered promiscuous mode [ 72.790754][ T5948] gspca_sunplus: reg_r err -71 [ 72.813806][ T5948] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 72.856709][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.872943][ T5948] usb 5-1: USB disconnect, device number 2 [ 72.900508][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.082165][ T6019] team0: Port device team_slave_0 added [ 73.107134][ T6019] team0: Port device team_slave_1 added [ 73.223619][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.244667][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.283462][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.367213][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.406803][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.453765][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.464857][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.504480][ T6153] __nla_validate_parse: 1 callbacks suppressed [ 73.504500][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 73.521351][ T6147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 73.624514][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 73.652126][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 73.668881][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.694052][ T6019] hsr_slave_0: entered promiscuous mode [ 73.696476][ T5844] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ea.7a [ 73.717075][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.719169][ T6019] hsr_slave_1: entered promiscuous mode [ 73.730910][ T5844] usb 3-1: Product: syz [ 73.735442][ T5948] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.743679][ T5844] usb 3-1: Manufacturer: syz [ 73.748435][ T5844] usb 3-1: SerialNumber: syz [ 73.753350][ T6160] process 'syz.0.76' launched './file0' with NULL argv: empty string added [ 73.763477][ T5844] usb 3-1: config 0 descriptor?? [ 73.771115][ T6019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.779081][ T5844] HFC-S_USB 3-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 73.793433][ T6019] Cannot create hsr debugfs directory [ 73.884022][ T5948] usb 2-1: device descriptor read/64, error -71 [ 73.992531][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.020044][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.030917][ T5844] usb 3-1: USB disconnect, device number 4 [ 74.108595][ T6168] netlink: 'syz.0.78': attribute type 11 has an invalid length. [ 74.123860][ T5948] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.191838][ T6019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.246780][ T6019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.278564][ T6019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.324443][ T5948] usb 2-1: device descriptor read/64, error -71 [ 74.326083][ T6019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.403082][ T6179] tunl0: entered promiscuous mode [ 74.411507][ T6179] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 74.441937][ T6179] netlink: 9 bytes leftover after parsing attributes in process `syz.0.80'. [ 74.470205][ T5948] usb usb2-port1: attempt power cycle [ 74.600333][ T6189] netlink: 44 bytes leftover after parsing attributes in process `syz.0.82'. [ 74.624327][ T5850] Bluetooth: hci0: command tx timeout [ 74.708940][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.733096][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.781809][ T6019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.793135][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.831955][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.839154][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.863738][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.865022][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.879108][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.887080][ T5948] usb 2-1: device descriptor read/8, error -71 [ 74.935343][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.951016][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.051200][ T6019] veth0_vlan: entered promiscuous mode [ 75.070130][ T6019] veth1_vlan: entered promiscuous mode [ 75.097925][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.102979][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.111381][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.131570][ T6019] veth0_macvtap: entered promiscuous mode [ 75.133925][ T5948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 75.141261][ T6019] veth1_macvtap: entered promiscuous mode [ 75.163773][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.174407][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.184377][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.194899][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.203047][ T5898] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 75.204782][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.204843][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.204854][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.204867][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.206708][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.233949][ T5948] usb 2-1: device descriptor read/8, error -71 [ 75.278760][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.297722][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.312730][ T5898] usb 5-1: config 0 descriptor?? [ 75.314872][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.333500][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.351938][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.362925][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.374377][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.394244][ T5948] usb usb2-port1: unable to enumerate USB device [ 75.405177][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.416134][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.427592][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.441566][ T6201] syzkaller1: entered promiscuous mode [ 75.448362][ T6201] syzkaller1: entered allmulticast mode [ 75.480984][ T6019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.499705][ T6019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.512607][ T6019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.526548][ T6019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.623812][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.651065][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.681686][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.718685][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.730882][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.738724][ T5898] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.786039][ T5898] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 75.797673][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 75.811492][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.834313][ T29] audit: type=1326 audit(1732422252.902:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 75.842882][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.887631][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.906682][ T5898] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 75.921387][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.933167][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.971741][ T5898] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 76.008002][ T5898] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 76.036210][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 76.050815][ T5896] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.107981][ T5896] usb 3-1: Manufacturer: syz [ 76.135299][ T5896] usb 3-1: config 0 descriptor?? [ 76.413834][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.444370][ T5896] rc_core: IR keymap rc-hauppauge not found [ 76.457812][ T5896] Registered IR keymap rc-empty [ 76.470515][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 76.506655][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 76.546448][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 76.568134][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 76.574195][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 76.585557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.597318][ T25] usb 1-1: config 8 has an invalid interface number: 122 but max is 0 [ 76.620063][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 76.632266][ T25] usb 1-1: config 8 has no interface number 0 [ 76.632312][ T25] usb 1-1: config 8 interface 122 altsetting 37 has an endpoint descriptor with address 0x19, changing to 0x9 [ 76.632338][ T25] usb 1-1: config 8 interface 122 altsetting 37 endpoint 0x9 has an invalid bInterval 204, changing to 7 [ 76.632362][ T25] usb 1-1: config 8 interface 122 altsetting 37 endpoint 0x9 has invalid maxpacket 25687, setting to 1024 [ 76.632386][ T25] usb 1-1: config 8 interface 122 altsetting 37 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 76.632411][ T25] usb 1-1: config 8 interface 122 altsetting 37 endpoint 0xA has invalid maxpacket 41551, setting to 1024 [ 76.632435][ T25] usb 1-1: config 8 interface 122 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 76.632456][ T25] usb 1-1: config 8 interface 122 altsetting 37 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 76.632480][ T25] usb 1-1: config 8 interface 122 altsetting 37 has a duplicate endpoint with address 0x9, skipping [ 76.632501][ T25] usb 1-1: config 8 interface 122 altsetting 37 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 76.632526][ T25] usb 1-1: config 8 interface 122 has no altsetting 0 [ 76.730739][ T5850] Bluetooth: hci0: command tx timeout [ 76.740179][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 76.798871][ T25] usb 1-1: New USB device found, idVendor=0856, idProduct=ac16, bcdDevice=81.75 [ 76.808141][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.813943][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 76.816368][ T25] usb 1-1: Product: 蜤㯲뮸ս䑶త겡䟺㔩⯞ [ 76.828394][ T25] usb 1-1: Manufacturer: ࢇ㙵諛犲읧唯╀緘⛺쏇䒝秛︹䀏衦꠸㧚ﰯ㙨⳥엋䩼㡅쟧이變ة㕺䀞䯰㯎座ဒ㎍閊襤렻㻛棟Ὰ砻짏뫽䍻飻辇害ꫪ밆䘳㊍睺郠堮ᭌ츨㝷韚䢦㈓侏ⶮ䨕鬁拕Ә︍农᰺⹟♬ [ 76.857620][ T25] usb 1-1: SerialNumber: Д [ 76.891246][ T6234] macvlan0: entered allmulticast mode [ 76.893692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.906795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 76.921450][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.935447][ T6234] veth1_vlan: entered allmulticast mode [ 76.939953][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 76.962649][ T5898] usb 2-1: can't read configurations, error -71 [ 77.008595][ T6234] veth1_vlan: left allmulticast mode [ 77.160067][ T6234] macvlan0 (unregistering): left allmulticast mode [ 77.174616][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.224011][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.256916][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.294712][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.346028][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.388725][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.434879][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.479025][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.513949][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.558305][ T5896] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 77.588189][ T5896] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 77.632425][ T5896] usb 3-1: USB disconnect, device number 5 [ 77.814923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.019487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.087330][ T5895] usb 5-1: USB disconnect, device number 3 [ 78.326369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.448051][ T6259] FAULT_INJECTION: forcing a failure. [ 78.448051][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.487175][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.1.95 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 78.497384][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.507474][ T6259] Call Trace: [ 78.510754][ T6259] [ 78.513700][ T6259] dump_stack_lvl+0x241/0x360 [ 78.518394][ T6259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.523710][ T6259] ? __pfx__printk+0x10/0x10 [ 78.528407][ T6259] ? __pfx_lock_release+0x10/0x10 [ 78.533615][ T6259] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.539633][ T6259] ? get_synthdev+0x117/0x2c0 [ 78.544328][ T6259] should_fail_ex+0x3b0/0x4e0 [ 78.549034][ T6259] _copy_from_user+0x2f/0xc0 [ 78.553638][ T6259] snd_seq_oss_write+0x5a9/0xbb0 [ 78.558599][ T6259] ? mark_lock+0x9a/0x360 [ 78.563026][ T6259] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 78.568567][ T6259] ? common_file_perm+0x1a6/0x210 [ 78.573647][ T6259] ? bpf_lsm_file_permission+0x9/0x10 [ 78.579067][ T6259] ? security_file_permission+0x74/0x280 [ 78.584790][ T6259] odev_write+0x5b/0x80 [ 78.588955][ T6259] ? __pfx_odev_write+0x10/0x10 [ 78.593827][ T6259] vfs_write+0x2a3/0xd30 [ 78.598075][ T6259] ? __pfx_vfs_write+0x10/0x10 [ 78.602838][ T6259] ? __fget_files+0x2a/0x410 [ 78.607430][ T6259] ? __fget_files+0x395/0x410 [ 78.612119][ T6259] ? __fget_files+0x2a/0x410 [ 78.616727][ T6259] ksys_write+0x18f/0x2b0 [ 78.621080][ T6259] ? __pfx_ksys_write+0x10/0x10 [ 78.625929][ T6259] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 78.632580][ T6259] ? lockdep_hardirqs_on+0x99/0x150 [ 78.637790][ T6259] __do_fast_syscall_32+0xb4/0x110 [ 78.642938][ T6259] ? exc_page_fault+0x590/0x8c0 [ 78.647899][ T6259] do_fast_syscall_32+0x34/0x80 [ 78.652767][ T6259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.659122][ T6259] RIP: 0023:0xf73ed579 [ 78.663190][ T6259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 78.683229][ T6259] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 78.691846][ T6259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 78.699921][ T6259] RDX: 0000000000000230 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.707900][ T6259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.716388][ T6259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 78.724568][ T6259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.732654][ T6259] [ 78.914324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.283769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.323826][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.484025][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 79.576933][ T5896] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 79.592470][ T5896] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 79.643773][ T5896] usb 5-1: config 0 has no interface number 1 [ 79.650318][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.700080][ T25] ftdi_sio 1-1:8.122: FTDI USB Serial Device converter detected [ 79.729179][ T25] ftdi_sio ttyUSB0: unknown device type: 0x8175 [ 79.753792][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.772199][ T25] usb 1-1: USB disconnect, device number 4 [ 79.774058][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.801151][ T5896] usb 5-1: config 0 descriptor?? [ 79.806582][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 79.821399][ T25] ftdi_sio 1-1:8.122: device disconnected [ 79.830565][ T6286] netlink: 'syz.5.103': attribute type 1 has an invalid length. [ 79.899296][ T5896] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.905668][ T5896] hub 5-1:0.0: probe with driver hub failed with error -5 [ 79.914930][ T5896] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.927037][ T5896] hub 5-1:0.129: bad descriptor, ignoring hub [ 79.932094][ T6291] netlink: 10 bytes leftover after parsing attributes in process `syz.2.106'. [ 79.933155][ T5896] hub 5-1:0.129: probe with driver hub failed with error -5 [ 79.974166][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 80.006216][ T5844] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 80.022155][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.032278][ T5844] usb 2-1: Product: syz [ 80.036912][ T5844] usb 2-1: Manufacturer: syz [ 80.041539][ T5844] usb 2-1: SerialNumber: syz [ 80.154004][ T5898] usb 5-1: USB disconnect, device number 4 [ 80.273894][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.347914][ T5844] rtl8150 2-1:20.0: couldn't reset the device [ 80.365926][ T5844] rtl8150 2-1:20.0: probe with driver rtl8150 failed with error -5 [ 80.390459][ T5844] usb 2-1: USB disconnect, device number 9 [ 80.435273][ T25] usb 1-1: device descriptor read/64, error -71 [ 80.674811][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.820818][ T25] usb 1-1: device descriptor read/64, error -71 [ 80.958937][ T25] usb usb1-port1: attempt power cycle [ 81.344049][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.379390][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.397421][ T25] usb 1-1: device descriptor read/8, error -71 [ 81.541058][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 81.595969][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.678496][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.119'. [ 81.693855][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 81.738171][ T25] usb 1-1: device descriptor read/8, error -71 [ 81.784031][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.814002][ T5901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.874445][ T25] usb usb1-port1: unable to enumerate USB device [ 81.898672][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.955209][ T5901] usb 6-1: device descriptor read/64, error -71 [ 81.984262][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.005253][ T970] cfg80211: failed to load regulatory.db [ 82.019408][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.030482][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.039212][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.050173][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.069295][ T5856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.077328][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.173013][ T12] team0: left allmulticast mode [ 82.183560][ T12] team_slave_0: left allmulticast mode [ 82.193117][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.209019][ T12] team_slave_1: left allmulticast mode [ 82.224736][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.235031][ T5901] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.235213][ T12] bridge0: port 3(team0) entered disabled state [ 82.249613][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 82.259604][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.269903][ T12] bridge_slave_1: left allmulticast mode [ 82.275632][ T12] bridge_slave_1: left promiscuous mode [ 82.281377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.292324][ T5896] usb 2-1: config 0 descriptor?? [ 82.304447][ T12] bridge_slave_0: left allmulticast mode [ 82.310234][ T12] bridge_slave_0: left promiscuous mode [ 82.317125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.387158][ T5901] usb 6-1: device descriptor read/64, error -71 [ 82.515686][ T5901] usb usb6-port1: attempt power cycle [ 82.833167][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.855720][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.868538][ T12] bond0 (unregistering): Released all slaves [ 82.905327][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 82.909320][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 82.914509][ T5901] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.948205][ T5896] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 82.957979][ T5896] logitech 0003:046D:C294.0002: item fetching failed at offset 3/7 [ 82.971019][ T5896] logitech 0003:046D:C294.0002: parse failed [ 82.971185][ T5901] usb 6-1: device descriptor read/8, error -71 [ 82.978373][ T5896] logitech 0003:046D:C294.0002: probe with driver logitech failed with error -22 [ 83.220621][ T5901] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.244916][ T5901] usb 6-1: device descriptor read/8, error -71 [ 83.355584][ T5901] usb usb6-port1: unable to enumerate USB device [ 83.920093][ T12] hsr_slave_0: left promiscuous mode [ 83.941313][ T12] hsr_slave_1: left promiscuous mode [ 84.019286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.036566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.072438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.096479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.214090][ T5856] Bluetooth: hci4: command tx timeout [ 84.582471][ T12] veth1_macvtap: left promiscuous mode [ 84.602922][ T12] veth0_macvtap: left promiscuous mode [ 84.623396][ T12] veth1_vlan: left promiscuous mode [ 84.653413][ T12] veth0_vlan: left promiscuous mode [ 85.008742][ T25] usb 2-1: USB disconnect, device number 10 [ 86.294094][ T5856] Bluetooth: hci4: command tx timeout [ 88.375292][ T5856] Bluetooth: hci4: command tx timeout [ 90.453850][ T5856] Bluetooth: hci4: command tx timeout [ 94.416650][ T12] team_slave_1 (unregistering): left promiscuous mode [ 94.433409][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.515945][ T12] team_slave_0 (unregistering): left promiscuous mode [ 94.531901][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.796500][ T6408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.435778][ T6438] FAULT_INJECTION: forcing a failure. [ 99.435778][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.458985][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.5.137 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 99.469406][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.479516][ T6438] Call Trace: [ 99.482863][ T6438] [ 99.485832][ T6438] dump_stack_lvl+0x241/0x360 [ 99.490568][ T6438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.495805][ T6438] ? __pfx__printk+0x10/0x10 [ 99.500435][ T6438] ? __pfx_lock_release+0x10/0x10 [ 99.505510][ T6438] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.511456][ T6438] ? get_synthdev+0x117/0x2c0 [ 99.516384][ T6438] should_fail_ex+0x3b0/0x4e0 [ 99.521107][ T6438] _copy_from_user+0x2f/0xc0 [ 99.525753][ T6438] snd_seq_oss_write+0x5a9/0xbb0 [ 99.530725][ T6438] ? mark_lock+0x9a/0x360 [ 99.535119][ T6438] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 99.540623][ T6438] ? common_file_perm+0x1a6/0x210 [ 99.545702][ T6438] ? bpf_lsm_file_permission+0x9/0x10 [ 99.551116][ T6438] ? security_file_permission+0x74/0x280 [ 99.556796][ T6438] odev_write+0x5b/0x80 [ 99.560981][ T6438] ? __pfx_odev_write+0x10/0x10 [ 99.565866][ T6438] vfs_write+0x2a3/0xd30 [ 99.570156][ T6438] ? __pfx_vfs_write+0x10/0x10 [ 99.574963][ T6438] ? __fget_files+0x2a/0x410 [ 99.579595][ T6438] ? __fget_files+0x395/0x410 [ 99.584309][ T6438] ? __fget_files+0x2a/0x410 [ 99.588943][ T6438] ksys_write+0x18f/0x2b0 [ 99.593311][ T6438] ? __pfx_ksys_write+0x10/0x10 [ 99.598204][ T6438] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 99.604833][ T6438] ? lockdep_hardirqs_on+0x99/0x150 [ 99.610066][ T6438] __do_fast_syscall_32+0xb4/0x110 [ 99.615218][ T6438] ? exc_page_fault+0x590/0x8c0 [ 99.620118][ T6438] do_fast_syscall_32+0x34/0x80 [ 99.625007][ T6438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.631377][ T6438] RIP: 0023:0xf7f47579 [ 99.635478][ T6438] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 99.655126][ T6438] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 99.663587][ T6438] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 99.671590][ T6438] RDX: 0000000000000230 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.679600][ T6438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.687619][ T6438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.695621][ T6438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.703632][ T6438] [ 100.483826][ T5901] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.687006][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 100.696851][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 100.734584][ T5901] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 100.757747][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.790630][ T5901] usb 2-1: Product: syz [ 100.811484][ T5901] usb 2-1: Manufacturer: syz [ 100.835537][ T5901] usb 2-1: SerialNumber: syz [ 101.064495][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 101.192734][ T5901] rtl8150 2-1:21.0: couldn't reset the device [ 101.213093][ T5901] rtl8150 2-1:21.0: probe with driver rtl8150 failed with error -5 [ 101.254172][ T5901] usb 2-1: USB disconnect, device number 11 [ 101.332052][ T6444] udevd[6444]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: No such file or directory [ 101.433497][ T29] audit: type=1326 audit(1732422278.492:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 101.471220][ T29] audit: type=1326 audit(1732422278.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 101.508942][ T29] audit: type=1326 audit(1732422278.492:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 101.657042][ T29] audit: type=1326 audit(1732422278.492:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 101.723222][ T29] audit: type=1326 audit(1732422278.492:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 101.871912][ T29] audit: type=1326 audit(1732422278.492:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 102.063766][ T29] audit: type=1326 audit(1732422278.492:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 102.187294][ T29] audit: type=1326 audit(1732422278.492:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 102.216035][ T6483] tunl0: entered promiscuous mode [ 102.257593][ T6483] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 102.301824][ T6483] netlink: 9 bytes leftover after parsing attributes in process `syz.1.150'. [ 102.553953][ T29] audit: type=1326 audit(1732422278.492:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 102.620383][ T29] audit: type=1326 audit(1732422278.492:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 103.116342][ T6504] binder_alloc: 6499: binder_alloc_buf size 16448 failed, no address space [ 103.125768][ T6504] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 103.407345][ T6509] loop6: detected capacity change from 0 to 1 [ 103.436594][ T6509] Dev loop6: unable to read RDB block 1 [ 103.443598][ T6509] loop6: unable to read partition table [ 103.477934][ T6509] loop6: partition table beyond EOD, truncated [ 103.525367][ T6510] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 103.555174][ T6509] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 103.555174][ T6509] ) failed (rc=-5) [ 112.923662][ C0] sched: DL replenish lagged too much [ 118.278639][ T6543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.485889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.509811][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.665872][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.677366][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.422745][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 207.436416][ T5847] Bluetooth: hci2: command tx timeout [ 207.441883][ T5847] Bluetooth: hci3: command tx timeout [ 207.499363][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 210.476160][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 266.383813][ T30] INFO: task kworker/u8:1:12 blocked for more than 147 seconds. [ 266.391784][ T30] Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 266.483792][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.492535][ T30] task:kworker/u8:1 state:D stack:22192 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 266.573728][ T30] Workqueue: netns cleanup_net [ 266.578601][ T30] Call Trace: [ 266.581900][ T30] [ 266.623736][ T30] __schedule+0x1850/0x4c30 [ 266.628344][ T30] ? __pfx___schedule+0x10/0x10 [ 266.633226][ T30] ? __pfx_lock_release+0x10/0x10 [ 266.673713][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 266.679691][ T30] ? kthread_data+0x52/0xd0 [ 266.723728][ T30] ? schedule+0x90/0x320 [ 266.728037][ T30] ? wq_worker_sleeping+0x66/0x240 [ 266.733180][ T30] ? schedule+0x90/0x320 [ 266.798881][ T30] schedule+0x14b/0x320 [ 266.803210][ T30] schedule_preempt_disabled+0x13/0x30 [ 266.843851][ T30] __mutex_lock+0x7e7/0xee0 [ 266.848892][ T30] ? __mutex_lock+0x5ef/0xee0 [ 266.853614][ T30] ? wg_destruct+0x25/0x2e0 [ 266.888254][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 266.893309][ T30] ? free_percpu+0xb34/0x1150 [ 266.933758][ T30] ? __pfx_free_percpu+0x10/0x10 [ 266.938767][ T30] ? kobject_put+0x272/0x480 [ 266.943390][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 266.993728][ T30] wg_destruct+0x25/0x2e0 [ 266.998215][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 267.003188][ T30] netdev_run_todo+0xe1a/0x1000 [ 267.053715][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 267.059078][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 267.103756][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 267.109990][ T30] default_device_exit_batch+0xa24/0xaa0 [ 267.153704][ T30] ? __pfx___might_resched+0x10/0x10 [ 267.159097][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 267.203723][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 267.209276][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 267.253866][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 267.260465][ T30] cleanup_net+0x89d/0xcc0 [ 267.313738][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 267.318766][ T30] ? process_scheduled_works+0x976/0x1850 [ 267.373946][ T30] process_scheduled_works+0xa63/0x1850 [ 267.379599][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.438415][ T30] ? assign_work+0x364/0x3d0 [ 267.443095][ T30] worker_thread+0x870/0xd30 [ 267.504612][ T30] ? __kthread_parkme+0x169/0x1d0 [ 267.509724][ T30] ? __pfx_worker_thread+0x10/0x10 [ 267.573822][ T30] kthread+0x2f0/0x390 [ 267.577968][ T30] ? __pfx_worker_thread+0x10/0x10 [ 267.583117][ T30] ? __pfx_kthread+0x10/0x10 [ 268.063711][ T30] ret_from_fork+0x4b/0x80 [ 268.068209][ T30] ? __pfx_kthread+0x10/0x10 [ 268.072835][ T30] ret_from_fork_asm+0x1a/0x30 [ 268.184000][ T30] [ 268.189501][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 268.243942][ T30] INFO: task kworker/u8:5:1307 blocked for more than 149 seconds. [ 268.251811][ T30] Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 268.394281][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.400623][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.413725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.422454][ T30] task:kworker/u8:5 state:D stack:22000 pid:1307 tgid:1307 ppid:2 flags:0x00004000 [ 268.574068][ T30] Workqueue: events_unbound linkwatch_event [ 268.580057][ T30] Call Trace: [ 268.583353][ T30] [ 268.663889][ T30] __schedule+0x1850/0x4c30 [ 268.668500][ T30] ? __pfx___schedule+0x10/0x10 [ 268.673387][ T30] ? __pfx_lock_release+0x10/0x10 [ 268.759211][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 268.803808][ T30] ? kthread_data+0x52/0xd0 [ 268.808399][ T30] ? schedule+0x90/0x320 [ 268.812673][ T30] ? wq_worker_sleeping+0x66/0x240 [ 269.353710][ T30] ? schedule+0x90/0x320 [ 269.358033][ T30] schedule+0x14b/0x320 [ 269.362221][ T30] schedule_preempt_disabled+0x13/0x30 [ 269.453709][ T30] __mutex_lock+0x7e7/0xee0 [ 269.458305][ T30] ? __mutex_lock+0x5ef/0xee0 [ 269.463018][ T30] ? linkwatch_event+0xe/0x60 [ 269.563733][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 269.568832][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.643718][ T30] ? process_scheduled_works+0x976/0x1850 [ 269.649527][ T30] linkwatch_event+0xe/0x60 [ 269.733726][ T30] process_scheduled_works+0xa63/0x1850 [ 269.739392][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.823751][ T30] ? assign_work+0x364/0x3d0 [ 269.828420][ T30] worker_thread+0x870/0xd30 [ 269.833070][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 269.963823][ T30] ? __kthread_parkme+0x169/0x1d0 [ 269.968946][ T30] ? __pfx_worker_thread+0x10/0x10 [ 270.063751][ T30] kthread+0x2f0/0x390 [ 270.067934][ T30] ? __pfx_worker_thread+0x10/0x10 [ 270.073109][ T30] ? __pfx_kthread+0x10/0x10 [ 270.201763][ T30] ret_from_fork+0x4b/0x80 [ 270.243960][ T30] ? __pfx_kthread+0x10/0x10 [ 270.248619][ T30] ret_from_fork_asm+0x1a/0x30 [ 270.253541][ T30] [ 270.380501][ T30] INFO: task kworker/u8:6:2196 blocked for more than 151 seconds. [ 270.470132][ T30] Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 270.523865][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.623740][ T30] task:kworker/u8:6 state:D stack:21656 pid:2196 tgid:2196 ppid:2 flags:0x00004000 [ 270.743750][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 270.750789][ T30] Call Trace: [ 270.863957][ T30] [ 270.866975][ T30] __schedule+0x1850/0x4c30 [ 270.871551][ T30] ? __pfx___schedule+0x10/0x10 [ 271.023776][ T30] ? __pfx_lock_release+0x10/0x10 [ 271.028884][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 271.143702][ T30] ? kthread_data+0x52/0xd0 [ 271.148676][ T30] ? schedule+0x90/0x320 [ 271.152968][ T30] ? wq_worker_sleeping+0x66/0x240 [ 271.264274][ T30] ? schedule+0x90/0x320 [ 271.268595][ T30] schedule+0x14b/0x320 [ 271.272781][ T30] schedule_preempt_disabled+0x13/0x30 [ 271.463788][ T30] __mutex_lock+0x7e7/0xee0 [ 271.468379][ T30] ? __mutex_lock+0x5ef/0xee0 [ 271.473103][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 271.593774][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 271.653913][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 271.660637][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.773794][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 271.780744][ T30] ? process_scheduled_works+0x976/0x1850 [ 271.888244][ T30] process_scheduled_works+0xa63/0x1850 [ 271.983087][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.033982][ T30] ? assign_work+0x364/0x3d0 [ 272.038676][ T30] worker_thread+0x870/0xd30 [ 272.043317][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.213853][ T30] ? __kthread_parkme+0x169/0x1d0 [ 272.218968][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.330032][ T30] kthread+0x2f0/0x390 [ 272.373895][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.379477][ T30] ? __pfx_kthread+0x10/0x10 [ 272.493725][ T30] ret_from_fork+0x4b/0x80 [ 272.498218][ T30] ? __pfx_kthread+0x10/0x10 [ 272.502838][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.669867][ T30] [ 272.703793][ T30] INFO: task kworker/0:5:5898 blocked for more than 154 seconds. [ 272.711589][ T30] Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 272.883943][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.893069][ T30] task:kworker/0:5 state:D stack:20216 pid:5898 tgid:5898 ppid:2 flags:0x00004000 [ 273.063743][ T30] Workqueue: events_power_efficient crda_timeout_work [ 273.070598][ T30] Call Trace: [ 273.183766][ T30] [ 273.186772][ T30] __schedule+0x1850/0x4c30 [ 273.191312][ T30] ? try_to_wake_up+0x959/0x1470 [ 273.318720][ T30] ? schedule+0x90/0x320 [ 273.323056][ T30] ? __pfx___schedule+0x10/0x10 [ 273.425175][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.431230][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.583702][ T30] ? kick_pool+0x45c/0x620 [ 273.588206][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.593429][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 273.769118][ T30] ? schedule+0x90/0x320 [ 273.773443][ T30] schedule+0x14b/0x320 [ 274.762394][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.793707][ T30] __mutex_lock+0x7e7/0xee0 [ 274.798292][ T30] ? __mutex_lock+0x5ef/0xee0 [ 274.803011][ T30] ? crda_timeout_work+0x15/0x50 [ 274.843723][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.848828][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.883724][ T30] ? process_scheduled_works+0x976/0x1850 [ 274.889538][ T30] crda_timeout_work+0x15/0x50 [ 274.923747][ T30] process_scheduled_works+0xa63/0x1850 [ 274.929415][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.973740][ T30] ? assign_work+0x364/0x3d0 [ 274.978445][ T30] worker_thread+0x870/0xd30 [ 274.983107][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.043752][ T30] ? __kthread_parkme+0x169/0x1d0 [ 275.048861][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.093703][ T30] kthread+0x2f0/0x390 [ 275.097868][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.103019][ T30] ? __pfx_kthread+0x10/0x10 [ 275.143723][ T30] ret_from_fork+0x4b/0x80 [ 275.148209][ T30] ? __pfx_kthread+0x10/0x10 [ 275.152832][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.193720][ T30] [ 275.196842][ T30] INFO: task syz.5.142:6449 blocked for more than 156 seconds. [ 275.243768][ T30] Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 275.251117][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.309249][ T30] task:syz.5.142 state:D stack:25152 pid:6449 tgid:6448 ppid:6019 flags:0x20000004 [ 275.393709][ T30] Call Trace: [ 275.397050][ T30] [ 275.400012][ T30] __schedule+0x1850/0x4c30 [ 275.518699][ T30] ? __pfx___schedule+0x10/0x10 [ 275.553735][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.558846][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 275.603777][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.609764][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.643712][ T30] ? schedule+0x90/0x320 [ 275.648040][ T30] schedule+0x14b/0x320 [ 275.652575][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.670031][ T30] __mutex_lock+0x7e7/0xee0 [ 275.674993][ T30] ? __mutex_lock+0x5ef/0xee0 [ 275.680049][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 275.685355][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.690465][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 275.695497][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 275.700654][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.706270][ T30] ? ref_tracker_free+0x643/0x7e0 [ 275.711351][ T30] netlink_rcv_skb+0x1e3/0x430 [ 275.716322][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.721822][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.727243][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.732487][ T30] netlink_unicast+0x7f6/0x990 [ 275.737382][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 275.742699][ T30] ? __virt_addr_valid+0x183/0x530 [ 275.747945][ T30] ? __check_object_size+0x48e/0x900 [ 275.753274][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 275.758377][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.763933][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.768992][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 275.774022][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.779339][ T30] __sock_sendmsg+0x221/0x270 [ 275.784089][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 275.788888][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.794267][ T30] __sys_sendmsg+0x269/0x350 [ 275.798894][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.804166][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 275.810788][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 275.816115][ T30] __do_fast_syscall_32+0xb4/0x110 [ 275.821265][ T30] ? exc_page_fault+0x590/0x8c0 [ 275.826227][ T30] do_fast_syscall_32+0x34/0x80 [ 275.831112][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.837528][ T30] RIP: 0023:0xf7f47579 [ 275.841621][ T30] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 275.850132][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200007c0 [ 275.858394][ T30] RDX: 0000000004004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.866679][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.874758][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.882758][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.890846][ T30] [ 275.894081][ T30] [ 275.894081][ T30] Showing all locks held in the system: [ 275.901816][ T30] 3 locks held by kworker/0:1/9: [ 275.906830][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.919341][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.930565][ T30] #2: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfd0 [ 275.940261][ T30] 4 locks held by kworker/u8:1/12: [ 275.945480][ T30] 3 locks held by kworker/1:0/25: [ 275.950518][ T30] 1 lock held by khungtaskd/30: [ 275.955440][ T30] #0: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 275.965596][ T30] 5 locks held by kworker/u9:0/54: [ 275.970729][ T30] #0: ffff88805ad0b148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.981883][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.994541][ T30] #2: ffff88807eb78d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 276.004490][ T30] #3: ffff88807eb78078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1ea/0xe00 [ 276.014302][ T30] #4: ffffffff8fe46b68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 [ 276.024162][ T30] 3 locks held by kworker/u8:4/61: [ 276.029317][ T30] 3 locks held by kworker/u8:5/1307: [ 276.034668][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.046445][ T30] #1: ffffc90004577d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.057710][ T30] #2: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 276.067005][ T30] 3 locks held by kworker/u8:6/2196: [ 276.072323][ T30] #0: ffff888020ae9948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.083857][ T30] #1: ffffc9000567fd00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.098107][ T30] #2: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 276.108968][ T30] 1 lock held by syslogd/5201: [ 276.113791][ T30] 3 locks held by udevd/5219: [ 276.118493][ T30] 2 locks held by getty/5595: [ 276.123186][ T30] #0: ffff88814db1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 276.133114][ T30] #1: ffffc90002fc62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 276.143425][ T30] 5 locks held by kworker/u9:2/5845: [ 276.148795][ T30] #0: ffff888064b20948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.159755][ T30] #1: ffffc90004147d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.172795][ T30] #2: ffff888079060d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 276.183008][ T30] #3: ffff888079060078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1ea/0xe00 [ 276.192871][ T30] #4: ffffffff8fe46b68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 [ 276.202739][ T30] 4 locks held by kworker/u9:4/5848: [ 276.208104][ T30] #0: ffff8880304f9148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.219261][ T30] #1: ffffc90004167d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.231962][ T30] #2: ffff88807e800d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 276.241932][ T30] #3: ffff88807e800078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1ea/0xe00 [ 276.251748][ T30] 3 locks held by kworker/0:4/5896: [ 276.257051][ T30] 3 locks held by kworker/0:5/5898: [ 276.262280][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.274997][ T30] #1: ffffc90004477d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.286106][ T30] #2: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 276.295514][ T30] 2 locks held by syz-executor/6365: [ 276.300834][ T30] #0: ffffffff8f46c960 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 276.310469][ T30] #1: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd04/0x24f0 [ 276.319649][ T30] 1 lock held by syz.5.142/6449: [ 276.324669][ T30] #0: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 276.334181][ T30] 3 locks held by kworker/u8:10/6544: [ 276.339567][ T30] #0: ffff88814d82d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 276.351381][ T30] #1: ffffc9000c167d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 276.365266][ T30] #2: ffffffff8fcd8a08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 276.375080][ T30] 2 locks held by kworker/u8:13/6548: [ 276.380478][ T30] 1 lock held by syz-executor/6549: [ 276.385962][ T30] 2 locks held by syz-executor/6552: [ 276.391325][ T30] [ 276.393722][ T30] ============================================= [ 276.393722][ T30] [ 276.402149][ T30] NMI backtrace for cpu 0