last executing test programs: 17.239735137s ago: executing program 2 (id=9): sigaltstack(&(0x7f0000000100)={&(0x7f0000001200)=""/4096, 0x0, 0x1000}, 0x0) (async) sigaltstack(0x0, &(0x7f0000000400)={0x0}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x74}, 0x1, 0xba01}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500bba1ca3a534084105f01936155249b623d119c1843299205c664b34b79efbb1d8c3b51a99d0e443118fa53c13722dbeb35301705ae0fd450ed5f26b497bef653005275", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) 16.935161483s ago: executing program 2 (id=10): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, 0x0, 0x0}, 0x90) getpid() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000004}]}) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x640400, 0x0) write$sequencer(r3, &(0x7f00000000c0)=[@raw={0xfe, 0x6, "18e7fa426dba"}, @n={0x0, 0x8, @generic=0xe3, 0x1}, @e={0xff, 0x3, 0xa, 0x7c, @SEQ_NOTEON=@special, 0x3, 0x5, 0x4}, @generic={0x8}, @raw={0xfe, 0x0, "615ba2d51262"}, @raw={0xc, 0xe, "b96da54adfad"}, @echo=0x7, @generic={0x6865dc0e583e19bd}, @echo=0x81, @generic={0xa}], 0x2f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 16.555682256s ago: executing program 2 (id=11): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xffffc025}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4e479b03c28c7298, 0x0) recvmmsg(r5, &(0x7f0000008440)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/208, 0xd0}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/60, 0x3c}], 0x6, &(0x7f0000001800)=""/151, 0x97}, 0x8001}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/27, 0x1b}, {&(0x7f0000001980)=""/34, 0x22}, {&(0x7f00000019c0)=""/6, 0x6}], 0x3, &(0x7f0000001a40)=""/43, 0x2b}, 0x2e5}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/65, 0x41}, {&(0x7f0000001c80)=""/121, 0x79}], 0x3, &(0x7f0000001d40)=""/161, 0xa1}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/159, 0x9f}], 0x1, &(0x7f0000001f00)=""/6, 0x6}, 0xffff}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000002040)=""/137, 0x89}, {&(0x7f0000002100)=""/236, 0xec}, {&(0x7f0000002200)=""/130, 0x82}], 0x3, &(0x7f00000022c0)=""/206, 0xce}, 0x5}, {{&(0x7f00000023c0)=@caif=@rfm, 0x80, &(0x7f0000003580)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/130, 0x82}, {&(0x7f0000003540)=""/44, 0x2c}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000035c0)=""/217, 0xd9}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004800)=""/119, 0x77}], 0x5, &(0x7f0000004900)=""/173, 0xad}}, {{&(0x7f00000049c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/138, 0x8a}, {&(0x7f0000006b00)=""/202, 0xca}], 0x4, &(0x7f0000006c40)=""/172, 0xac}, 0x80000000}, {{&(0x7f0000006d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000008280)=[{&(0x7f0000006d80)=""/158, 0x9e}, {&(0x7f0000006e40)=""/169, 0xa9}, {&(0x7f0000006f00)=""/133, 0x85}, {&(0x7f0000006fc0)=""/241, 0xf1}, {&(0x7f00000070c0)=""/75, 0x4b}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/137, 0x89}, {&(0x7f0000008200)=""/1, 0x1}, {&(0x7f0000008240)=""/21, 0x15}], 0x9, &(0x7f0000008340)=""/225, 0xe1}, 0xd7}], 0xa, 0x23, &(0x7f00000086c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600), 0x3b, 0x0, &(0x7f0000001800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000780)="3f030e00401b12000000000089e9aaa911d7c2ff0700810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="0300"}, 0x14) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x74000000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) 14.551761379s ago: executing program 4 (id=19): r0 = syz_io_uring_setup(0x3552, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000000)) dup(r0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f0000000040)="468d1a9f5944dc3035ef4fd56e591c579a2c816d9539feaa8431ed478a27bd963973a6e7652a") socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 13.815823511s ago: executing program 4 (id=22): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:4.', @ANYRESHEX], 0x13) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a740, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'hsr0\x00'}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0xffff4856}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000102000006111c800000000001e000000000007009500000c00000000f409831fb0268be60926da8f006535b39115e05744988cd7fab5ce632d028e4aec3ced1996ae"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584000000000000de6ea6718c6878fe7ba226288e3db83e84fde332e337507afbd7cf4c7cde1a57df3d475ffe368e1d2c43b59d3f36a478b7c5b3b2c150bf366daa07ec45e296cb8230ba7e40a45cf906f44a0756bb9bb2387d9222329499a567e75fbaa72ffa146c88b4b07b748bd0cdbe04fee21ec239811ba1006653719acd1de257f3"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2, 0x26}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x40}, @mbim_extended={0x8}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3303) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="30f1415a56000000d500000000000000950000001745ce30"], &(0x7f0000000000)='GPL\x00', 0x5, 0x13, &(0x7f0000000200)=""/208}, 0x48) 13.251573666s ago: executing program 2 (id=28): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0xa00) 10.495616693s ago: executing program 4 (id=41): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x1, 0x0, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x6, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002800000000003a9098ac661d8e0a2714000e00907800"/54], 0x0) 10.324257239s ago: executing program 4 (id=42): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x154c, &(0x7f00000004c0)={0x0, 0x22d9, 0x400, 0x0, 0x8000030e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x4], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108000000340000000000800031e0000000008000240000000000800084000000000"], 0x5c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff0102030109021200010000000009040000003c6aba007da2c4169e704e74ded947a1969c1d339c87e6d77323b8fae35b1a1d85011f8933116b4d435a8236405c1c46f220b380242fa3c8e8c10d38aad6f351a97523d4abd9b58b89ef0fab4ec93ef1054da5172daddc849f61993031e720812fce32f01c6ff34c775e8fed483996303251614755a67d59f91075a261266fee6c1c57070955c1c5bab5f43428265c78"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b0a21d32", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf25130000000c0099000600000041000000060012001a8100002500be00f744f1d9651b2b9ab28a27318c9da3b80a3e1ec7b5d76ccf2a7593701bd8a044120000000400bd00050029000a0000000a00bd00d07000000500000005001301040000000800a400020000000c00430009000000000000c00600120000010000"], 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = open_tree(r7, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r8, &(0x7f0000000040)='.\x00', r9, &(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r11}, 0x8) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000940)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000008652048a377841b5a5ba72ea0e909b5e7e19b"], 0x0, 0x0}) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) unshare(0x8020480) 9.986545685s ago: executing program 2 (id=43): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x28, 0x0, 0x0, 0xfffff074}]}, 0x10) 9.586210673s ago: executing program 2 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000003", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020067656e65766531000000006e000000000c000380080001"], 0x38}}, 0x0) 8.696621543s ago: executing program 1 (id=51): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:4.', @ANYRESHEX], 0x13) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a740, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'hsr0\x00'}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0xffff4856}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000102000006111c800000000001e000000000007009500000c00000000f409831fb0268be60926da8f006535b39115e05744988cd7fab5ce632d028e4aec3ced1996ae"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584000000000000de6ea6718c6878fe7ba226288e3db83e84fde332e337507afbd7cf4c7cde1a57df3d475ffe368e1d2c43b59d3f36a478b7c5b3b2c150bf366daa07ec45e296cb8230ba7e40a45cf906f44a0756bb9bb2387d9222329499a567e75fbaa72ffa146c88b4b07b748bd0cdbe04fee21ec239811ba1006653719acd1de257f3"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2, 0x26}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x40}, @mbim_extended={0x8}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3303) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="30f1415a56000000d500000000000000950000001745ce30"], &(0x7f0000000000)='GPL\x00', 0x5, 0x13, &(0x7f0000000200)=""/208}, 0x48) 8.251828839s ago: executing program 3 (id=53): personality(0xfe47fef9f5ff7379) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x3c}}, 0x0) uname(&(0x7f0000000000)=""/123) 7.571604423s ago: executing program 3 (id=56): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044000}, 0x200000c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "0a55b0ca9cce75f5c91c906cf8542b42"}}]}, 0x194}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x10, 0x0) read(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mr_dereg\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001140)=0x14) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x40400c0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) socket$nl_generic(0x10, 0x3, 0x10) 6.940708872s ago: executing program 4 (id=58): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="205bce3225d94f9045a4c6e7158453793c845d00f300ec972e8fc419c22d1f02"], 0x20}}, 0x0) 6.434580386s ago: executing program 4 (id=61): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) 5.831222118s ago: executing program 3 (id=63): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) fstat(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x86, 0xdb2, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x67, 0x7c1, 0x8}}) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x29, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x5}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = syz_io_uring_setup(0x25f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5113, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000bb4000/0x3000)=nil, 0x3000, 0x5, 0x110, r4, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x99, 0x0, 0x406}}}, 0x7) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000ac0), 0x200, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3baa9bfa517a905b115662f9c4ee4a83c980322fd747ef74dfec9a30af714737e58a4b7cc19817fc5a663a0bc82902a31faba3dd5ea3afe050ee2f6f92db3d80567f7eb249b1a774c267b68cc25864664b5b4ef8b712af6a52bde9baf0cb123ed453857cfb6243396b82961f58bad0627a72"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, "c1e901d50100d1198b828c19715340f622a521fd53010720156aec943a8c2121"}) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f00000003c0)) 5.527745299s ago: executing program 1 (id=64): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x3}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37", 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x4000000010041) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) timer_create(0x8, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24db, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12371b676b55e11c, 0x0, 0x4, 0xfb, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd89, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f00000000c0)=""/175, 0xaf) (fail_nth: 14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5.383774453s ago: executing program 0 (id=65): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@ipv6_getaddr={0x18, 0x16, 0x300}, 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2701330080000000ffffffffffff080211"], 0x144}}, 0x0) (async) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4076, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x28dff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='bridge0\x00') 4.538944216s ago: executing program 1 (id=66): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xb, 0xffff}, {0x7, 0x2}}, ["", "", "", "", ""]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000000c0)="e2c6666156dd3064a70340ada771e48c29727e0c554f26cb7394ffab72de6827144c61fe3d404a825c39e20803d5614d99dad4da263a4038512104f00badf99fd1956c15f56189dfa8abe6522dae524617fecb1518dd26542261da4878f5e89739d6a31c0ec4a9e79255fd76310779e5439924334241f90d3aa1139edcb8bcf27a7ec5b0cc9660f3b155882b60e81169cb1d2e91e7c2ee96fae3b069b9fde61ea749699a4115cb39beaa86a87a3b268fffd248473d53dceabb9270ced38fd2d79e13", &(0x7f0000000480)=""/241, &(0x7f0000000580)="3625d1ed0f0d51294b1177efd299f96ccbfa1dbe978dc4e5f599949ca4ba4fcfc42af381307682116fe5debb54b2c94f81d9062213bfdd65110b628d89957338276d9e307639ddd2db96b41acb20fecad85de65b5598855157d3a9", &(0x7f0000000600)="313c41cea4d923833b53d337a26e077019737245ed4d87b7fcec13c1d205506920914a517a7645776f4414371fb11de3a613963209ad1c4d548b86bbd5b11cd74c8e0388217e69eb5149440a140d010e39e70b4209ac94e4d7964840a8833ae00b7aafac0ffebb2393e8e5944ec1b7ce5073bd281d2d40a70f5a961c3c1ff555f0ca39e30c7edac009702e5eed3e47afc5bd60ad381b0ae004f0e02ff20b93a611c99f9ae45937cd6d9f6d81856a784f", 0x6}, 0x38) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x400000000, &(0x7f0000000300)=""/117) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000e2ffffff0000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000003080002400000000314000000110001"], 0xd4}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x0, 0x0) (async) readv(r2, &(0x7f00000008c0)=[{0xfffffffffffffffc}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f0000000d80)=""/235, 0xeb}, {&(0x7f00000006c0)=""/111, 0x6f}], 0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x40000) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)) (async) read$dsp(r4, &(0x7f0000000140)=""/60, 0x3c) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/105, 0x69}) (async) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000b80)) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 4.472823046s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x154c, &(0x7f00000004c0)={0x0, 0x22d9, 0x400, 0x0, 0x8000030e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x4], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108000000340000000000800031e0000000008000240000000000800084000000000"], 0x5c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff0102030109021200010000000009040000003c6aba007da2c4169e704e74ded947a1969c1d339c87e6d77323b8fae35b1a1d85011f8933116b4d435a8236405c1c46f220b380242fa3c8e8c10d38aad6f351a97523d4abd9b58b89ef0fab4ec93ef1054da5172daddc849f61993031e720812fce32f01c6ff34c775e8fed483996303251614755a67d59f91075a261266fee6c1c57070955c1c5bab5f43428265c78"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b0a21d32", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf25130000000c0099000600000041000000060012001a8100002500be00f744f1d9651b2b9ab28a27318c9da3b80a3e1ec7b5d76ccf2a7593701bd8a044120000000400bd00050029000a0000000a00bd00d07000000500000005001301040000000800a400020000000c00430009000000000000c00600120000010000"], 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = open_tree(r7, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r8, &(0x7f0000000040)='.\x00', r9, &(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r11}, 0x8) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000940)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000008652048a377841b5a5ba72ea0e909b5e7e19b"], 0x0, 0x0}) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) unshare(0x8020480) 3.543325207s ago: executing program 3 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000500), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x13, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="bd", 0x1}], 0x1, &(0x7f0000001a00)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x28}}, {{&(0x7f0000001a80)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003e40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xd}]}}}], 0x18}}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r3, 0x0, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x801, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) 3.163900274s ago: executing program 0 (id=69): mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRES32]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300380c9008cba4d21bbf17ab9ffaa0a52c0186ef28359af281f3a6bfd6b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c33000000000000000000"], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78100000060a010100000000000000000200000044000580080001400000002f080001400000004508000140000000330800024000000002080002400000000008000140000000160800014000000001080001400000910008000b40000000060900020073797a300000000004100740e3532979f1e47199400bb60d7a2fef7f14c4ae7050307e614313f6fff03fa8902b40c8143000585db3ded4ca7a4ebcffcf65024a4186641c7e6abbc320a2ea624991ac02b263ee08c2f156bf150252d344b75e79da9809dbd68d0a874ae8795d997f5b964958d6aa298b3085eae3eaaa1cf0b0608749facdafab5555fd39720db66f5bc32d5d5a767e2eb8f6f26b6c73a478ac379761ea31d3797204f386adf8dccaf57d8836b29d6e74528f13178eaa8e2a7add116d4fece4e6c6505ed3655cdf55dc2c9470c37ecc2e0621f4c9bbaef1b3b2fffc3943a8c2f3d887e141077b40093c15f57b5db43cd7123ecff9fe51c806a804b31995e69498fbe5450c531e52d7c98ea8f66c12c24d2686a1ab8545cfbf56f62ea7316d78b023e7aa43111c6b3ce8d9827790884f5f357480e8da48d0fb43f0b519262dc444ff9eb6b14944e90e3f1b66c6b4dd6a724cbf6145dcb10f68b310bf52f6b56a6a25298e0e0151c527080e78796f10dbdd4536b87781c002c82cf35f7a3e04698512caa00ab3a8278501cd1db1de6bf3477086ecf80a92e0fb2e74369d79ab0ee53b938fcf86e38dae749ca38159245fa92089637032b9da11d424194cdbd087f2473e633eb331442770ab00fa720dcd18c3905565eb51f2b389875388ea4ea87a0fd2d531d66faf3666d2774898012d916e68b146b3a60ce8b05f293b3be79609a7d9ecf70cea35ad37da3cf10ae53297056baee4a50d8dfb870517c9072fb7dff58892aeeac39633a09320316d88bd0df519f093f452a81e65ad9ee9ebd59282ca980a21f1da426271f0a85ae05dc1a907f0d276139b495c27dc99cd53bbeaa90a94a478dbbf0439e1a4f431ec36c020779f587d8d15167497593ff7dab223d1dd35766008ac01cbdc5cf4b7d8f1e33d508d185d0a830e29d0435381cd5cd6af0b9129d65b53238cfde1d725a63c9c64a55196e1a2cb9aeb284f35ad5d2fb16a316a72ddcdcb3836a71d7deff7055bb87832214ee8cf21f488f7f4fbc721b8226dc0c9c772a2c04e76b7e4adfe687d6071013d42a57be85b6efd34627a6c7aa09661ef5f3f907002653996dbd9a95ce999baf07aa19b15af8b49478cdeefccf8e7643e134184626a271c76db48d45dbd01ea524e5cdc7649339dcd63da307b9694d75bf80f345be5335a28fc9d27ada4c099920972b9e1ea6625093e4175f5bd8f4dfc2595667213ead0d205df1509102fac4029beab7f5a30104c259e64e6e30822e36a9af852fe4d1ad0cf7f291259455d1d51a9d8a845bb91751ae49c36e3dc073f62a1f3924d44360a085f37cf226e6cd606876bbcd79dbd34ceda10a6c28d335f973368f2a2faa1c9a4bd380cf7a1e9e2f39ed094642a0697bbf4608b6e82193cd5f7105523c1a5a9d267bb6929a959b9d45a529eefc2ad555d580d4db9f400d1c425332a5df8117e8d87d9159b29f9d221181aa145267f8572ac609ca327fdf8a4abe5c2865a8b43ba99ab0790893dc92a643338ecf17aa4602af04e6d8fd71b29be0c12dc1cabe6656508c2eaff461e0e9e1c1d0c445d9663e33431547dac919ff3a86718c5a3161424730dfa283e32a1332361f9180299d93497f5ff99c25a2aec54de20ee5041baad5c72dcfdf9b6d8bc4216b7abec04bca412acdcf1507f0f2ceb3a193564ec5677a6463ed3ae7e52fdeb50b929dd045dc349e1d9b712e5b2c58ca59d7c91ee20049b311e62e5b1ecad49dc89fc3998a457e00aea2c174aea9f9f9b70c01fbe6fadd89edbfb9b764658053925661526772e3d6a74bad32f15287edf9bd09ad2fb99f571f20a8ae2738fc01e53ad2ebedbbc394347069bd69fed50504962a36f7c77081915d5494be173cdda4a7d4f870bdc52cd745053043ccd2582aea3d628a3c8a751bf6fcd19c1a5a66881da500d60d1e0a8584beea55d9f0f1e8345db396f0d3f1dcb0f6e27323a0957f2620d30f503f06cf55e67517326958e89158edde2ad9154f7e9ec10b707629e12bdbbb41cea29f306b458f1c50c18274a12d4e8a1e452b76d768459f2c80dd6a13f3fa32dcc6d63d68bd0d414b96ffe3b89fbe3e473cc591086f83ba35e45e7d5aec8b68d84eb7f394145504be4ff482aa4cc0818ce693950474a69f3c247e557023639a30ce3bb7ae33bfd183aeb537e5c711d85affe60d9e191d9b780e4557c590468ad0c40b7fe25692115dc816219f476d27b14c930e430e88f747081b57b4ffa5f63dd02769b2f121e43f2c9f09cef2721eec7457b77ce0a275f8e6b14455cf93381b0156145c040913ff4cf03609258dd953ae77cd2521e10be7840544402ca4de6d0aae344c80812d318fd8fb27da5c7c9a00a81f5322891b6a75e817f03baef07d2fcffe4ce0516cfc31a3fbabda4201a24ac13f24dd36790e12a246ca8a938cbd615a6341907234d9a2f259b455653c7a1d9678c14bd7107371b69173d23d5177b69cbf3d2e02228f83d65d525ef8264eaf6c87c33f71d0c8efbb7f416a888ad2a7a462ba0c65995dffc611bbcee8db14952218f29618efa048aa47c5c61cee1ce90d817ecc6449e432582d10d47246d483d5f19e4d755ce5eb80b5f528d1a2a5c1eb35dfc7bd32f140bf1769a0d6a0c3b7bde7237a55977482bef57b2159e502b31ba364afe1f4fdd6e07e5df2ef4cd7621086bcfa2b420ff1322b18f51349acf7d2e826e29bdfe0ec989b7e87247c4eee9c0b88d14ea86a0f3470d0105b1a31c6e7fd14837645fdb290c25552c5db7af23bb6eb1e8c6bb752b9b190acb05f2facc055fe1f330069fffad6947e118460bf3e0b6a3413a5e56f22288a9754b56b80dcec6f36631979dc6a47fa61b0582a9cf60b5e0e3982a8b964f2391da0c6c8eddfd7dd424bc2a24b646cac8ff4a6dffe1e7bcb0f9b822a2b59ea15a5f1c5a1ead29ac5ffd76476a02c52e783f4542ad28a15e10286aa2e32bfa3099c4d5a959c777a05f34223acea7e3b02c5ba5e894966efba8656e9576fa62f3add4b076eff7f5c2ad34be93629caa4cc8cf9b4d4e8b0b9cc824b6a03332ea60e948db000e2e1f2ed5f1b790a2622c172762cd496400615e6bfd9e2d80c444d9b247d525c76585efcbac57dc4f918f373523f378e997e54ddc6f96f2caf06e691e89ad0dcd10687caf4228bb8a798c2e72e7613fd9769f587df1b1a947f444b03494c8e9f1ee38a9beb514535be6a4a02e703fec60390201ee851cd8f51f46a8399522d77ea8b42ebaf6b25b44ca500cc7b2f43019a1d04b503bb49e554922ee7301cb2082a61601c4d4465252c851e3f7ad26bd3386393d6ad105ae62d31a03514d57c0ab791c743e335062e0490020201b29bfa02244aa987c40b035869bfa58b508d063dac20ec202fa4e92d8151fe23b86fac910861e233c2fc21e071807ad97b069de26a3f7630dc2fac5b503f8a80eb6243e6e4703052ac01649adc27fa4428c2967185e5ed93e2cb239713adfe71c5311a0a5d8bc952424a0083ee8414dd3731faaa4ce304cfbbe7361d1d54e971357242fd57c381e646327cead2a1b7fa78230bc07f90d813bf0c072d1ab2c227c58b6d3b2a7c6bea93cb446a3f4a6a5df145b5ae00a4b3852e4f80202459cd4964cd2fb3a5d00000000000000e45bd8cda4effd1f01b13e8142549e02b36ad08c47d614635dba42ff329d447450fa584303decb024c2da39c68a3740753c01e57d0008f0b2efc58d65ddbf82f6c91fb2c88b79d9e9f18cf54a765667c5063f9a32208b14a9772087a249c03307a6f7efe95a5a7f3bde51c99839ac5e4359146f2d95e928084b31fcdb0a625c0e69dbd7db80febb60fa73727658ebd2d5deeda4a2b20c0d61306c348d4a3ad9c65e7b498934208966786f154b8863db38ab111e821c2abb5409654029bf2a64c32bf97731466524e035129d6f4058afbc5527e4cf0e6301e66650b1f697084b7aa5d74f8a1201b58a1727216858b45d6db29c99958fef2402de7bacf44aee9706b632681a41ae364b7c7a83e3c3ca2140e5643390c7e659c777ea3ef2a8948e3b3e7fe987539c54c0d1c7056528e83e9147e6b972f6417cd033ab2c0745ec2baaf8c56412e4ea9433ae8f20a32a2a6493c3443ef5ca2596de9f05483f3fcae896ac464c5c4a4afc84c5c464fcd77645514711ca4bcc92be13028b72248e66ddfe887de9db285d8aef4c3e6702f90f025e106b9e73d58322f60a72378d89a155927b6a3e31a8efb82e4d508bd96667cc2bb48223a925d538fb48bc22017d78e55ba3849c25200e94faca3a317fc61a8a944dacd4d9753d59a52097ce9ed3eb34c7a6a950a7657fe8e7c40a438d2a2e2be97927ac70942c5f315379697b78eca2e1729fc3cb902a2c1717ae37942a680bebf03777ea5d3ef5f9cd52b0c660beacd308dfec569c9855faaf9b993af9d5af310d664574f49eb6c13cbc5ac0a9932778fba5e80f38a4422183c8c97b8766107568323a2142a89c1a95169a433ba828aa41401e8de5ac15a1e277196d891ff62f33b51ac9bd8080c828e5b79ec12ecb5506cb5208287cb770fd4c41fc5bcedc0a007deae9e429106aa4c9a444b28bf5cb7dc32419edaf6d24830fccbde3f1765bc2159c5ebccd992f5ed502d5a9a97f6313947b8df3a501175d12545badcbcc4e7002a2320e4806d03cc7153be21218e470257855d8309e5418a30e178ab6b113a54b4c02b362d1195408878db7f3e47a64b2a0e0a12d82d79068c4f1ef44155e029121eff64b8e357c67c7f6be8f2b27d56778ce4f822f3b1c6ac2012f106b020aed9eeab9ae8ecc5b61823033455055184ce06776aa18ddf85e14b38506f0da05953b67ee6ca7209d30bd146a2e7cd6b7c05c7bdf78e40885290a6e1d6ce90e1e74e0d6644f639d9c2179c202074b34af1d4c7e561251528f3e5ae076ffc0134bc04e4859a55cfb2c294397e88769c4df6480dfd4786cbef9d57cde6f271fc90facc8fe4f847e0c29db4f0c78dc8812a21e61e6a9a9526ee3c3c1da4bff0ab684ede03810b1c813a2cf46d2b28bca44bc69edca8f8937531ea3ca0e4ae47029400e994de8fb26a8c6503097c8d0492c7de37cf4f26b912e79dfe1fdf5841f990c985bd6b5ea18db93b27a326ac4afb8d29eb641ee8b46587fbdd78e01392368c4ba40edfba9275fc2db0995ec53e811ab5b94f46aa29652d69eeebc5e5f2ec97cc4bd8483d5eb7c4751d98d9027f87379d960db921a73cecec4d4e77c760a6d1e3faab9bad572b16b45ef7b1cca3fe1ddfadb8d7eca4a1329355c6397b138489ae492310d0ce38e1ed9fef473ae78cbb923cf86ecabc6e0b3e594dafe090cd2070995d3887082f1c59428b88687c161192e2aae9a653660733338c82c6efbbbd7ccd82f773a617b449b52830917541181d6f608b4d832b55fe4cb92a19e95cab2a753c1f39ff3dc1cc2e88c9a30bfedfc742886fd561fb9a8930e14893f3c1b321a3239b29b8afff37cb59b9774e7333d78164f8bb6f175edf81e280e27031fcb74d0c499e56b831f94f9c9a02a2da39e4d10192e89fd4ff2d0f2845cad679d5ce76e48674bcbea5b5e2ca6a042d9937c2da56eb216ad8be51c53b8c1b575fb049bb95727105fe02696bb9376979defd486fdfa3bea008f2c3d470e8b87cc3adf6ce5852bfd869574bb659fa8e80650958b5c08eb25dadbec338d740b74888e50f49bbde393cc6421610a0ef97aefc4925385654c7c89182acff236156f85efe5f9f48efe0df2c281ed054acf77939ad9143b3e31d88ce0a99f8bd982d92a908000b4000000007140000001100010000000000000000000000000a"], 0x10a0}, 0x1, 0x0, 0x0, 0x804}, 0x41) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = io_uring_setup(0x15ae, &(0x7f0000000080)={0x0, 0x0, 0x2}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r7, &(0x7f0000000300)="90", 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00c90001"], 0x22) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.616180778s ago: executing program 3 (id=70): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x7, 0x2, 0x0, 0x2}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002940)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x10, 0xa}, {0xffe0}}, ["", "", "", ""]}, 0x24}}, 0xc880) sendmmsg$alg(r3, &(0x7f0000007000)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="98bb59aea3ad64f4246dae78", 0xc}], 0x1, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}}}, 0xa) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 1.518312214s ago: executing program 0 (id=71): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) 1.348925579s ago: executing program 0 (id=72): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r0, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x40, 0x3f8, 0x0, 0x32}, 0x9c) socket(0x8000000010, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x115c00, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r5, r6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = dup(r3) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 606.207201ms ago: executing program 3 (id=73): syz_usb_connect(0x0, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x2f, 0xb5, 0xf8, 0x10, 0x79b, 0xf, 0x57ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0xb7, 0xff, 0x0, 0x39, 0xd9, 0x61, 0x0, [@generic={0x59, 0x1, "8800cc8db0bd1155f99f6de00a69081c5034b8df9d2a32ec7ea79d80c4d943fe2d8551c45193fc300a8d3194850a132e462c6fe5f6fe6ea9f9fd448c47a05d2307a7750a29f184a6f6475de71f476e32805cf104f62bea"}]}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x301, 0x0, 0x0, {{@in=@empty}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in=@local, @in=@remote}, {{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x90}}}}, 0x128}}, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r1 = socket(0x10, 0x3, 0x0) unshare(0x60480) write(r1, &(0x7f0000000080)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) syz_usb_connect$cdc_ncm(0x1, 0xc6, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x2, 0x1, 0xff, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x7ff, [0x800, 0xfff8, 0x52d]}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x2, 0x2}, @mdlm_detail={0x45, 0x24, 0x13, 0x9, "f39d219cd7b5a04e88d56c1370e1492aaafead288154ce2e99df8ca2bb0e27ef12db7b78421331faf2d1ed712ec9d7e54186ab048b6186bfa4073ceaaeccc2b33d"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xfa, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x87, 0x5, 0x4, 0x40, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x61, &(0x7f00000002c0)=@string={0x61, 0x3, "86e24a2f822faab18b9c61b5558dde076fddcf60b444f5cc8d7eaafdcd406fa8d3ca55cc6ce70e7be873e66bcd9ec4bd0ae87af3b87f4a9fee5414b2ba3cee304de055437bce1c90047d28cae906884ddd03b9b29e63f46ccf3dab63146bd5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 493.329904ms ago: executing program 1 (id=74): r0 = syz_io_uring_setup(0x2e38, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=0x0, &(0x7f0000000080)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000b00)=0x200, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x9}, 0x10) sendmmsg$unix(r7, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000280)="a4", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000000000eaffff"], 0x3c}}, 0x0) io_uring_enter(r0, 0x1d2d, 0x0, 0x0, 0x0, 0x0) 327.708378ms ago: executing program 0 (id=75): syz_emit_ethernet(0x46, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x10, 0x3a, 0x0, @private1, @local, {[@srh={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdbea}], @echo_reply}}}}}, 0x0) 211.813928ms ago: executing program 0 (id=76): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x4900, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 0s ago: executing program 1 (id=77): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r2, 0x0, 0x1400000000000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], 0x10) close_range(r0, 0xffffffffffffffff, 0x40000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 72.479990][ T5081] cgroup: Unknown subsys name 'net' [ 72.651615][ T5081] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.396773][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.802490][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.807935][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.812810][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.824119][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.824792][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.839787][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.847217][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.849418][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.861964][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.869330][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.876876][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.882805][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.884573][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.891984][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.900947][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.906315][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.913982][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.921655][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.926036][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.934010][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.942893][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.947040][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.953986][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.962165][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.976341][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.983891][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.991635][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.998889][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.025566][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.033124][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.578598][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 77.743225][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 77.843468][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 77.904896][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.913073][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.920548][ T5109] bridge_slave_0: entered allmulticast mode [ 77.928948][ T5109] bridge_slave_0: entered promiscuous mode [ 77.974385][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981816][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.989107][ T5109] bridge_slave_1: entered allmulticast mode [ 77.996447][ T5109] bridge_slave_1: entered promiscuous mode [ 78.003874][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 78.062889][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.070066][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.077958][ T5113] bridge_slave_0: entered allmulticast mode [ 78.085823][ T5113] bridge_slave_0: entered promiscuous mode [ 78.118694][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 78.130740][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.138197][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.146176][ T5113] bridge_slave_1: entered allmulticast mode [ 78.153670][ T5113] bridge_slave_1: entered promiscuous mode [ 78.185292][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.197917][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.318985][ T5109] team0: Port device team_slave_0 added [ 78.348655][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.370629][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.383626][ T5109] team0: Port device team_slave_1 added [ 78.453190][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.460412][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.468893][ T5111] bridge_slave_0: entered allmulticast mode [ 78.478213][ T5111] bridge_slave_0: entered promiscuous mode [ 78.536740][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.544171][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.570462][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.590248][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.597516][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.604981][ T5111] bridge_slave_1: entered allmulticast mode [ 78.612658][ T5111] bridge_slave_1: entered promiscuous mode [ 78.644040][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.654230][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.661827][ T5114] bridge_slave_0: entered allmulticast mode [ 78.669132][ T5114] bridge_slave_0: entered promiscuous mode [ 78.681252][ T5113] team0: Port device team_slave_0 added [ 78.687535][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.699494][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.706964][ T5114] bridge_slave_1: entered allmulticast mode [ 78.714947][ T5114] bridge_slave_1: entered promiscuous mode [ 78.723242][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.730216][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.756553][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.811466][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.818645][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.826998][ T5110] bridge_slave_0: entered allmulticast mode [ 78.834424][ T5110] bridge_slave_0: entered promiscuous mode [ 78.844067][ T5113] team0: Port device team_slave_1 added [ 78.850168][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.857986][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.865221][ T5110] bridge_slave_1: entered allmulticast mode [ 78.872758][ T5110] bridge_slave_1: entered promiscuous mode [ 78.910672][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.962077][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.974695][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.032437][ T5097] Bluetooth: hci2: command tx timeout [ 79.041559][ T5097] Bluetooth: hci3: command tx timeout [ 79.042696][ T5102] Bluetooth: hci4: command tx timeout [ 79.057304][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.084603][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.097548][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.107545][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.114846][ T5102] Bluetooth: hci0: command tx timeout [ 79.114872][ T5097] Bluetooth: hci1: command tx timeout [ 79.123144][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.152638][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.169155][ T5109] hsr_slave_0: entered promiscuous mode [ 79.176412][ T5109] hsr_slave_1: entered promiscuous mode [ 79.201558][ T5111] team0: Port device team_slave_0 added [ 79.223464][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.230446][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.256633][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.294648][ T5114] team0: Port device team_slave_0 added [ 79.304070][ T5111] team0: Port device team_slave_1 added [ 79.314400][ T5114] team0: Port device team_slave_1 added [ 79.338069][ T5110] team0: Port device team_slave_0 added [ 79.347065][ T5110] team0: Port device team_slave_1 added [ 79.447527][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.458573][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.485178][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.503654][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.510634][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.536702][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.549956][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.557040][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.583615][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.608566][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.615722][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.642073][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.654299][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.661737][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.687969][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.750014][ T5113] hsr_slave_0: entered promiscuous mode [ 79.756709][ T5113] hsr_slave_1: entered promiscuous mode [ 79.763408][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.771753][ T5113] Cannot create hsr debugfs directory [ 79.778011][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.785415][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.812228][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.967711][ T5110] hsr_slave_0: entered promiscuous mode [ 79.974873][ T5110] hsr_slave_1: entered promiscuous mode [ 79.983030][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.990614][ T5110] Cannot create hsr debugfs directory [ 80.010254][ T5111] hsr_slave_0: entered promiscuous mode [ 80.016776][ T5111] hsr_slave_1: entered promiscuous mode [ 80.024874][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.032528][ T5111] Cannot create hsr debugfs directory [ 80.050799][ T5114] hsr_slave_0: entered promiscuous mode [ 80.058007][ T5114] hsr_slave_1: entered promiscuous mode [ 80.065208][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.072922][ T5114] Cannot create hsr debugfs directory [ 80.626587][ T5109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.645091][ T5109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.675555][ T5109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.690118][ T5109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.763710][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.788443][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.799767][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.824642][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.959047][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.969983][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.001542][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.016398][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.111705][ T5102] Bluetooth: hci4: command tx timeout [ 81.116761][ T5097] Bluetooth: hci3: command tx timeout [ 81.117154][ T4488] Bluetooth: hci2: command tx timeout [ 81.150115][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.179826][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.191460][ T5102] Bluetooth: hci0: command tx timeout [ 81.196922][ T5102] Bluetooth: hci1: command tx timeout [ 81.226291][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.267780][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.282727][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.296148][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.310014][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.376993][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.393813][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.405744][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.421901][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.429277][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.450052][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.465566][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.472796][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.489100][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.538641][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.545859][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.594318][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.601632][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.738881][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.805384][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.856605][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.909900][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.929726][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.972657][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.979822][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.995062][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.002385][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.016207][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.023405][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.037873][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.066345][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.073577][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.146916][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.420118][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.464847][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.505743][ T5110] veth0_vlan: entered promiscuous mode [ 82.547303][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.557178][ T5109] veth0_vlan: entered promiscuous mode [ 82.590055][ T5110] veth1_vlan: entered promiscuous mode [ 82.631728][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.638979][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.700712][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.707933][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.736229][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.754876][ T5109] veth1_vlan: entered promiscuous mode [ 82.845760][ T5114] veth0_vlan: entered promiscuous mode [ 82.916002][ T5114] veth1_vlan: entered promiscuous mode [ 82.968317][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.985447][ T5110] veth0_macvtap: entered promiscuous mode [ 83.028442][ T5110] veth1_macvtap: entered promiscuous mode [ 83.057969][ T5114] veth0_macvtap: entered promiscuous mode [ 83.075912][ T5109] veth0_macvtap: entered promiscuous mode [ 83.098531][ T5114] veth1_macvtap: entered promiscuous mode [ 83.114188][ T5109] veth1_macvtap: entered promiscuous mode [ 83.155130][ T5113] veth0_vlan: entered promiscuous mode [ 83.165525][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.186192][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.199374][ T5102] Bluetooth: hci4: command tx timeout [ 83.199433][ T4488] Bluetooth: hci2: command tx timeout [ 83.205332][ T5102] Bluetooth: hci3: command tx timeout [ 83.205474][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.207277][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.229356][ T5113] veth1_vlan: entered promiscuous mode [ 83.248092][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.264846][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.275900][ T4488] Bluetooth: hci1: command tx timeout [ 83.275950][ T5097] Bluetooth: hci0: command tx timeout [ 83.281934][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.281953][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.281973][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.284056][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.332500][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.345382][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.356722][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.368718][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.387610][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.398126][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.408235][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.419955][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.432739][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.445980][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458028][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467187][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.476471][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.488263][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.500454][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.509505][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.518690][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.555075][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.564034][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.573834][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.583578][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.684234][ T5113] veth0_macvtap: entered promiscuous mode [ 83.748233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.767642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.803057][ T5113] veth1_macvtap: entered promiscuous mode [ 83.876724][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.888707][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.898849][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.909693][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.920138][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.930649][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.944395][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.956674][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.968580][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.978766][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.989517][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.999942][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.010680][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.026328][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.058433][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.068388][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078667][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.088057][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.099910][ T5111] veth0_vlan: entered promiscuous mode [ 84.125565][ T3854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.131257][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.141594][ T3854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.146281][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.195723][ T5111] veth1_vlan: entered promiscuous mode [ 84.232664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.240558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.333806][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.352557][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.436826][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.445023][ T5111] veth0_macvtap: entered promiscuous mode [ 84.463020][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.476304][ T5111] veth1_macvtap: entered promiscuous mode [ 84.606469][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.619452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.632300][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.666517][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.689520][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.718980][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.741728][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.758543][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.781652][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.811239][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.833580][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.886929][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.903523][ T5164] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.921231][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.961059][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.993100][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.017025][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.071559][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.093293][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.110562][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.128079][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.200345][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.227636][ T5181] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.242902][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.249218][ T5182] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 85.253413][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.272977][ T5097] Bluetooth: hci3: command tx timeout [ 85.273689][ T4488] Bluetooth: hci4: command tx timeout [ 85.278442][ T5097] Bluetooth: hci2: command tx timeout [ 85.292803][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.351460][ T5102] Bluetooth: hci0: command tx timeout [ 85.355556][ T5097] Bluetooth: hci1: command tx timeout [ 85.370016][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.383405][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.392188][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.600836][ T5186] kvm: kvm [5185]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 85.606731][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.635697][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.706186][ T3854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.720641][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.151313][ T5200] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 86.229489][ T5200] team0: Port device dummy0 added [ 86.387194][ T5206] FAULT_INJECTION: forcing a failure. [ 86.387194][ T5206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.406022][ T5202] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.411740][ T5206] CPU: 0 PID: 5206 Comm: syz.1.14 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 86.423744][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 86.433822][ T5206] Call Trace: [ 86.437112][ T5206] [ 86.440056][ T5206] dump_stack_lvl+0x241/0x360 [ 86.444863][ T5206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.450078][ T5206] ? __pfx__printk+0x10/0x10 [ 86.454706][ T5206] ? __pfx_lock_release+0x10/0x10 [ 86.459754][ T5206] should_fail_ex+0x3b0/0x4e0 [ 86.464455][ T5206] _copy_from_user+0x2f/0xe0 [ 86.469059][ T5206] copy_msghdr_from_user+0xae/0x680 [ 86.474277][ T5206] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 86.480291][ T5206] __sys_sendmsg+0x23d/0x3a0 [ 86.484892][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.490025][ T5206] ? vfs_write+0x7c4/0xc90 [ 86.494482][ T5206] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.500825][ T5206] ? do_syscall_64+0x100/0x230 [ 86.505616][ T5206] ? do_syscall_64+0xb6/0x230 [ 86.510343][ T5206] do_syscall_64+0xf3/0x230 [ 86.514946][ T5206] ? clear_bhb_loop+0x35/0x90 [ 86.519626][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.525537][ T5206] RIP: 0033:0x7f1261d75bd9 [ 86.529965][ T5206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.549759][ T5206] RSP: 002b:00007f1262a92048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.558297][ T5206] RAX: ffffffffffffffda RBX: 00007f1261f03f60 RCX: 00007f1261d75bd9 [ 86.566276][ T5206] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 86.574263][ T5206] RBP: 00007f1262a920a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.582264][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.590247][ T5206] R13: 000000000000000b R14: 00007f1261f03f60 R15: 00007f126202fa68 [ 86.598244][ T5206] [ 86.604129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.625817][ T5200] syz.3.13 (5200) used greatest stack depth: 19344 bytes left [ 86.639205][ T5206] x_tables: duplicate underflow at hook 3 [ 86.647973][ T29] audit: type=1326 audit(1720070901.291:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5199 comm="syz.3.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aacf75bd9 code=0x0 [ 86.797586][ T5202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.831686][ T5202] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 86.853653][ T5202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.896545][ T5202] usb 1-1: config 0 descriptor?? [ 86.976610][ T5202] gspca_main: spca561-2.14.0 probing abcd:cdee [ 87.091801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.254044][ T5202] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 87.265359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #201!!! [ 87.276584][ T5209] x_tables: duplicate underflow at hook 3 [ 87.284406][ T5219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 87.300757][ T5202] usb 1-1: MIDIStreaming interface descriptor not found [ 87.572189][ T5202] usb 1-1: USB disconnect, device number 2 [ 87.851727][ T5227] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.060197][ T5228] udevd[5228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.097775][ T5232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.421407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.441468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.450108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.722065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.909097][ T5247] Zero length message leads to an empty skb [ 89.071284][ T5149] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.072489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.321590][ T5149] usb 5-1: Using ep0 maxpacket: 16 [ 89.336696][ T5149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.374804][ T5149] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.386677][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.403638][ T5149] usb 5-1: Product: syz [ 89.413479][ T5149] usb 5-1: Manufacturer: syz [ 89.418382][ T5149] usb 5-1: SerialNumber: syz [ 89.442992][ T5149] usb 5-1: config 0 descriptor?? [ 89.456854][ T5149] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 89.468455][ T5149] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 89.482728][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.565761][ T5150] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.655377][ T5242] random: crng reseeded on system resumption [ 89.792372][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.808959][ T5150] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 89.828949][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.838895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.870038][ T5150] usb 4-1: config 0 descriptor?? [ 89.890530][ T5150] gspca_main: spca561-2.14.0 probing abcd:cdee [ 90.026496][ T5273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.045083][ T5273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.172529][ T5150] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 90.200424][ T5150] usb 4-1: MIDIStreaming interface descriptor not found [ 90.208256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.307388][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.318415][ T5150] usb 4-1: USB disconnect, device number 2 [ 90.485859][ T5281] loop0: detected capacity change from 0 to 7 [ 90.500436][ T5281] Dev loop0: unable to read RDB block 7 [ 90.508092][ T5281] loop0: unable to read partition table [ 90.511093][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 90.519266][ T5281] loop0: partition table beyond EOD, truncated [ 90.532092][ T5281] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 90.532092][ T5281] ) failed (rc=-5) [ 90.546323][ T25] usb 2-1: config 6 has an invalid interface number: 119 but max is 0 [ 90.554695][ T25] usb 2-1: config 6 has no interface number 0 [ 90.561075][ T25] usb 2-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 90.590298][ T25] usb 2-1: config 6 interface 119 has no altsetting 0 [ 90.611830][ T25] usb 2-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48 [ 90.622005][ T5149] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 90.627501][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.639471][ T25] usb 2-1: Product: 청歹駠䄢ॺﻫ懈紿Ḇᱭに頣ძ咍帾⌊娜敨ᆱ⬻⫯襭铛齱陞ᧉ쇤럯⠵冟芚ꈑ写陾⸂ꋔ䶁珃 [ 90.643015][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.660436][ T25] usb 2-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾椁ꁩ૪機虁극⡡๺卨葅ႊ᠌䂫⸃쟽븤夞췆秛灆钬륗᳂撝歴紆쥝ꩌ䀹嘧幌ㅰ滻켨뿝鑓Β퉼㉢좹⥗际侀ᗯ♣쨑氾棚겎롿訯ᢛ [ 90.695154][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.712314][ T25] usb 2-1: SerialNumber: С [ 90.747080][ T5149] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 90.777770][ T5149] em28xx 5-1:0.0: board has no eeprom [ 90.784838][ T5285] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 90.852312][ T5285] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 90.877170][ T5285] team0: Failed to send options change via netlink (err -105) [ 90.885531][ T5149] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 90.892399][ T5285] team0: Port device netdevsim0 added [ 90.893713][ T5149] em28xx 5-1:0.0: dvb set to bulk mode. [ 90.899824][ T5287] fuse: Bad value for 'fd' [ 90.907095][ T8] em28xx 5-1:0.0: Binding DVB extension [ 90.925366][ T786] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 91.077959][ T8] em28xx 5-1:0.0: Registering input extension [ 91.192167][ T5144] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.202103][ T25] digi_acceleport 2-1:6.119: required endpoints missing [ 91.227498][ T25] usb 2-1: USB disconnect, device number 2 [ 91.423987][ T5144] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.432263][ T5144] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 91.446193][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.456982][ T5144] usb 4-1: config 0 descriptor?? [ 91.786218][ T25] usb 5-1: USB disconnect, device number 2 [ 91.814520][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 91.832690][ T25] em28xx 5-1:0.0: Closing input extension [ 91.962969][ T25] em28xx 5-1:0.0: Freeing device [ 92.110611][ T5287] fuse: Unknown parameter '' [ 92.130267][ T5144] video4linux radio32: keene_cmd_set failed (-71) [ 92.147833][ T5144] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 92.180302][ T5144] usb 4-1: USB disconnect, device number 3 [ 92.198814][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 92.330333][ T9] cfg80211: failed to load regulatory.db [ 92.521478][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.729800][ T8] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 92.767704][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.769310][ T5109] syz-executor (5109) used greatest stack depth: 18352 bytes left [ 92.817422][ T8] usb 5-1: Product: syz [ 92.841237][ T8] usb 5-1: Manufacturer: syz [ 92.845894][ T8] usb 5-1: SerialNumber: syz [ 92.890548][ T8] usb 5-1: config 0 descriptor?? [ 92.974818][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.997755][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.041145][ T5097] Bluetooth: hci2: command tx timeout [ 93.201442][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.309197][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.375365][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 93.405453][ T8] asix 5-1:0.0: probe with driver asix failed with error -61 [ 93.459948][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.824439][ T146] bridge_slave_1: left allmulticast mode [ 93.830432][ T146] bridge_slave_1: left promiscuous mode [ 93.862580][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.906470][ T146] bridge_slave_0: left allmulticast mode [ 93.913993][ T146] bridge_slave_0: left promiscuous mode [ 93.919993][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.933412][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.943707][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.952455][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.963906][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.988306][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.000693][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.221741][ T5144] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.411257][ T5144] usb 2-1: Using ep0 maxpacket: 16 [ 94.418631][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.437422][ T5144] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.446708][ T5144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.462524][ T5144] usb 2-1: Product: syz [ 94.466869][ T5144] usb 2-1: Manufacturer: syz [ 94.472364][ T5144] usb 2-1: SerialNumber: syz [ 94.482771][ T5144] usb 2-1: config 0 descriptor?? [ 94.495564][ T5144] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.508456][ T5144] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 94.584146][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.600478][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.614692][ T146] bond0 (unregistering): Released all slaves [ 94.733232][ T5340] random: crng reseeded on system resumption [ 94.851130][ T5357] FAULT_INJECTION: forcing a failure. [ 94.851130][ T5357] name failslab, interval 1, probability 0, space 0, times 1 [ 94.916664][ T5357] CPU: 0 PID: 5357 Comm: syz.0.55 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 94.926727][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 94.937089][ T5357] Call Trace: [ 94.940487][ T5357] [ 94.943639][ T5357] dump_stack_lvl+0x241/0x360 [ 94.948468][ T5357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.953716][ T5357] ? __pfx__printk+0x10/0x10 [ 94.958358][ T5357] ? netlink_insert+0x10b7/0x14b0 [ 94.963493][ T5357] should_fail_ex+0x3b0/0x4e0 [ 94.968236][ T5357] ? __alloc_skb+0x1c3/0x440 [ 94.972860][ T5357] should_failslab+0x9/0x20 [ 94.977478][ T5357] kmem_cache_alloc_node_noprof+0x71/0x320 [ 94.983320][ T5357] __alloc_skb+0x1c3/0x440 [ 94.987776][ T5357] ? __pfx___alloc_skb+0x10/0x10 [ 94.992735][ T5357] ? netlink_autobind+0xd6/0x2f0 [ 94.997713][ T5357] ? netlink_autobind+0x2b0/0x2f0 [ 95.002761][ T5357] netlink_sendmsg+0x631/0xcb0 [ 95.007567][ T5357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.012892][ T5357] ? __import_iovec+0x536/0x820 [ 95.017764][ T5357] ? aa_sock_msg_perm+0x91/0x160 [ 95.022735][ T5357] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.028118][ T5357] ? security_socket_sendmsg+0x87/0xb0 [ 95.033696][ T5357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.038996][ T5357] __sock_sendmsg+0x221/0x270 [ 95.043705][ T5357] ____sys_sendmsg+0x525/0x7d0 [ 95.048487][ T5357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.053834][ T5357] __sys_sendmsg+0x2b0/0x3a0 [ 95.058450][ T5357] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.063579][ T5357] ? vfs_write+0x7c4/0xc90 [ 95.068091][ T5357] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.074478][ T5357] ? do_syscall_64+0x100/0x230 [ 95.079293][ T5357] ? do_syscall_64+0xb6/0x230 [ 95.084158][ T5357] do_syscall_64+0xf3/0x230 [ 95.088729][ T5357] ? clear_bhb_loop+0x35/0x90 [ 95.093444][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.099385][ T5357] RIP: 0033:0x7fae21f75bd9 [ 95.103817][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.123445][ T5357] RSP: 002b:00007fae22cc7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.131906][ T5357] RAX: ffffffffffffffda RBX: 00007fae22103f60 RCX: 00007fae21f75bd9 [ 95.139919][ T5357] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 95.147923][ T5357] RBP: 00007fae22cc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.155914][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.163921][ T5357] R13: 000000000000000b R14: 00007fae22103f60 R15: 00007fae2222fa68 [ 95.171959][ T5357] [ 95.196972][ T5097] Bluetooth: hci2: command tx timeout [ 95.430808][ T25] usb 5-1: USB disconnect, device number 3 [ 95.677651][ T5144] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 95.730837][ T5345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.771923][ T5345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.796607][ T5144] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.812865][ T5144] em28xx 2-1:0.0: board has no eeprom [ 95.904749][ T5144] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 95.948810][ T5144] em28xx 2-1:0.0: dvb set to bulk mode. [ 95.972399][ T5150] em28xx 2-1:0.0: Binding DVB extension [ 96.072454][ T5097] Bluetooth: hci3: command tx timeout [ 96.166701][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.196332][ T5150] em28xx 2-1:0.0: Registering input extension [ 96.517899][ T146] hsr_slave_0: left promiscuous mode [ 96.548808][ T146] hsr_slave_1: left promiscuous mode [ 96.585611][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.598427][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.618137][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.629973][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.691954][ T5388] xt_hashlimit: overflow, rate too high: 0 [ 96.693128][ T146] veth1_macvtap: left promiscuous mode [ 96.717460][ T146] veth0_macvtap: left promiscuous mode [ 96.735039][ T146] veth1_vlan: left promiscuous mode [ 96.748909][ T146] veth0_vlan: left promiscuous mode [ 96.748968][ T5150] usb 2-1: USB disconnect, device number 3 [ 96.814496][ T5150] em28xx 2-1:0.0: Disconnecting em28xx [ 96.837719][ T5150] em28xx 2-1:0.0: Closing input extension [ 96.913162][ T5150] em28xx 2-1:0.0: Freeing device [ 97.110066][ T5396] FAULT_INJECTION: forcing a failure. [ 97.110066][ T5396] name failslab, interval 1, probability 0, space 0, times 0 [ 97.124760][ T5396] CPU: 1 PID: 5396 Comm: syz.1.64 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 97.134723][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.144828][ T5396] Call Trace: [ 97.148151][ T5396] [ 97.151115][ T5396] dump_stack_lvl+0x241/0x360 [ 97.155849][ T5396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.161077][ T5396] ? __pfx__printk+0x10/0x10 [ 97.165714][ T5396] ? __pfx___might_resched+0x10/0x10 [ 97.171041][ T5396] should_fail_ex+0x3b0/0x4e0 [ 97.175762][ T5396] ? proc_alloc_inode+0x2a/0xc0 [ 97.180621][ T5396] should_failslab+0x9/0x20 [ 97.185411][ T5396] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 97.191187][ T5396] proc_alloc_inode+0x2a/0xc0 [ 97.195898][ T5396] ? __pfx_proc_alloc_inode+0x10/0x10 [ 97.201321][ T5396] new_inode_pseudo+0x69/0x1e0 [ 97.206151][ T5396] new_inode+0x22/0x1d0 [ 97.210366][ T5396] proc_sys_make_inode+0x4f/0x530 [ 97.215436][ T5396] ? d_set_d_op+0x288/0x3b0 [ 97.219993][ T5396] proc_sys_fill_cache+0x3ef/0x550 [ 97.225214][ T5396] ? __pfx_proc_sys_fill_cache+0x10/0x10 [ 97.230921][ T5396] ? _raw_spin_unlock+0x28/0x50 [ 97.235906][ T5396] ? sysctl_follow_link+0x3d8/0x450 [ 97.241163][ T5396] proc_sys_link_fill_cache+0x1ce/0x360 [ 97.246965][ T5396] ? __pfx_proc_sys_link_fill_cache+0x10/0x10 [ 97.253155][ T5396] ? do_raw_spin_unlock+0x13c/0x8b0 [ 97.255427][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.258480][ T5396] proc_sys_readdir+0x6bd/0x960 [ 97.258554][ T5396] iterate_dir+0x57a/0x810 [ 97.268521][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.270538][ T5396] __se_sys_getdents+0x1ef/0x4d0 [ 97.277357][ T5102] Bluetooth: hci2: command tx timeout [ 97.281964][ T5396] ? __pfx___se_sys_getdents+0x10/0x10 [ 97.281998][ T5396] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.282022][ T5396] ? __pfx_filldir+0x10/0x10 [ 97.282051][ T5396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.282077][ T5396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.282106][ T5396] ? __irq_exit_rcu+0x100/0x1c0 [ 97.282133][ T5396] ? do_syscall_64+0xb6/0x230 [ 97.282170][ T5396] do_syscall_64+0xf3/0x230 [ 97.282203][ T5396] ? clear_bhb_loop+0x35/0x90 [ 97.282227][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.282260][ T5396] RIP: 0033:0x7f1261d75bd9 [ 97.282282][ T5396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.282301][ T5396] RSP: 002b:00007f1262a71048 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 97.282325][ T5396] RAX: ffffffffffffffda RBX: 00007f1261f04038 RCX: 00007f1261d75bd9 [ 97.282342][ T5396] RDX: 00000000000000af RSI: 00000000200000c0 RDI: 000000000000000a [ 97.287974][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.292667][ T5396] RBP: 00007f1262a710a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.292687][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.292700][ T5396] R13: 000000000000006e R14: 00007f1261f04038 R15: 00007f126202fa68 [ 97.292734][ T5396] [ 97.300772][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.458349][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.466554][ T4488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.955101][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 98.151453][ T4488] Bluetooth: hci3: command tx timeout [ 98.237107][ T146] team0 (unregistering): Port device team_slave_1 removed [ 98.251354][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.280684][ T146] team0 (unregistering): Port device team_slave_0 removed [ 98.461215][ T45] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 98.470542][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.485896][ T45] usb 2-1: Product: syz [ 98.490189][ T45] usb 2-1: Manufacturer: syz [ 98.495114][ T45] usb 2-1: SerialNumber: syz [ 98.507462][ T45] usb 2-1: config 0 descriptor?? [ 98.707797][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 98.811090][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.819713][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.868736][ T5394] bridge_slave_1: left allmulticast mode [ 98.880255][ T5394] bridge_slave_1: left promiscuous mode [ 98.895158][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.929366][ T5394] bridge_slave_0: left allmulticast mode [ 98.940671][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 98.944385][ T5394] bridge_slave_0: left promiscuous mode [ 98.967914][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.969137][ T45] asix 2-1:0.0: probe with driver asix failed with error -61 [ 99.521101][ T4488] Bluetooth: hci0: command tx timeout [ 99.647591][ T4488] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 99.657602][ T4488] CPU: 0 PID: 4488 Comm: kworker/u9:1 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 99.667873][ T4488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 99.678028][ T4488] Workqueue: hci1 hci_rx_work [ 99.682741][ T4488] Call Trace: [ 99.686048][ T4488] [ 99.689009][ T4488] dump_stack_lvl+0x241/0x360 [ 99.693745][ T4488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.699000][ T4488] ? __pfx__printk+0x10/0x10 [ 99.703647][ T4488] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 99.708988][ T4488] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 99.714424][ T4488] sysfs_create_dir_ns+0x2ce/0x3a0 [ 99.719588][ T4488] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 99.725284][ T4488] kobject_add_internal+0x435/0x8d0 [ 99.730542][ T4488] kobject_add+0x152/0x220 [ 99.735004][ T4488] ? do_raw_spin_unlock+0x13c/0x8b0 [ 99.740247][ T4488] ? device_add+0x3e7/0xbf0 [ 99.744798][ T4488] ? __pfx_kobject_add+0x10/0x10 [ 99.749788][ T4488] ? _raw_spin_unlock+0x28/0x50 [ 99.754682][ T4488] ? get_device_parent+0x165/0x410 [ 99.759852][ T4488] device_add+0x4e5/0xbf0 [ 99.764273][ T4488] hci_conn_add_sysfs+0xe8/0x200 [ 99.769258][ T4488] le_conn_complete_evt+0xc9f/0x12e0 [ 99.774612][ T4488] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 99.780388][ T4488] ? __mutex_unlock_slowpath+0x21d/0x750 [ 99.786158][ T4488] ? __copy_skb_header+0x437/0x5b0 [ 99.791321][ T4488] ? skb_pull_data+0x112/0x230 [ 99.796137][ T4488] hci_le_enh_conn_complete_evt+0x185/0x420 [ 99.802096][ T4488] hci_event_packet+0xa53/0x1540 [ 99.807116][ T4488] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 99.812496][ T4488] ? __pfx_hci_event_packet+0x10/0x10 [ 99.817918][ T4488] ? do_raw_spin_unlock+0x13c/0x8b0 [ 99.823177][ T4488] ? hci_send_to_monitor+0xd8/0x7f0 [ 99.828434][ T4488] ? kcov_remote_start+0x9e/0x7e0 [ 99.833519][ T4488] hci_rx_work+0x3e8/0xca0 [ 99.838003][ T4488] ? process_scheduled_works+0x945/0x1830 [ 99.843769][ T4488] process_scheduled_works+0xa2c/0x1830 [ 99.849392][ T4488] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.855422][ T4488] ? assign_work+0x364/0x3d0 [ 99.860062][ T4488] worker_thread+0x86d/0xd50 [ 99.864706][ T4488] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.870668][ T4488] ? __kthread_parkme+0x169/0x1d0 [ 99.875832][ T4488] ? __pfx_worker_thread+0x10/0x10 [ 99.880971][ T4488] kthread+0x2f0/0x390 [ 99.885073][ T4488] ? __pfx_worker_thread+0x10/0x10 [ 99.890219][ T4488] ? __pfx_kthread+0x10/0x10 [ 99.894831][ T4488] ret_from_fork+0x4b/0x80 [ 99.899273][ T4488] ? __pfx_kthread+0x10/0x10 [ 99.903896][ T4488] ret_from_fork_asm+0x1a/0x30 [ 99.908690][ T4488] [ 99.957664][ T4488] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.972226][ T4488] Bluetooth: hci1: failed to register connection device [ 100.037537][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.090689][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.140528][ T5348] bridge_slave_0: entered allmulticast mode [ 100.182771][ T5348] bridge_slave_0: entered promiscuous mode [ 100.225931][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.241163][ T4488] Bluetooth: hci3: command tx timeout [ 100.249864][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.257489][ T5348] bridge_slave_1: entered allmulticast mode [ 100.265293][ T5348] bridge_slave_1: entered promiscuous mode [ 100.415104][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.540636][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.739569][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 100.792478][ T4488] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.804030][ T4488] Bluetooth: hci4: Injecting HCI hardware error event [ 100.812813][ T5102] Bluetooth: hci4: hardware error 0x00 [ 100.822665][ T5348] team0: Port device team_slave_0 added [ 101.006233][ T5348] team0: Port device team_slave_1 added [ 101.079768][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.295987][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.304627][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.339769][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.353741][ T4488] Bluetooth: hci1: command 0x0406 tx timeout [ 101.357143][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.374483][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.402713][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.592529][ T5097] Bluetooth: hci0: command tx timeout [ 101.686182][ T146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.802100][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.812760][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.833576][ T5399] bridge_slave_0: entered allmulticast mode [ 101.859157][ T5399] bridge_slave_0: entered promiscuous mode [ 101.863094][ T786] usb 2-1: USB disconnect, device number 4 [ 101.945733][ T146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.994633][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.018474][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.032486][ T5399] bridge_slave_1: entered allmulticast mode [ 102.052792][ T5399] bridge_slave_1: entered promiscuous mode [ 102.199507][ T146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.241642][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.268506][ T5348] hsr_slave_0: entered promiscuous mode [ 102.275174][ T5460] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 102.286854][ T5348] hsr_slave_1: entered promiscuous mode [ 102.311164][ T5097] Bluetooth: hci3: command tx timeout [ 102.331542][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.361473][ T146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.428229][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.441634][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 102.449096][ T45] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 102.468142][ T45] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 102.486313][ T45] usb 4-1: config 0 has no interface number 0 [ 102.501161][ T45] usb 4-1: config 0 interface 183 has no altsetting 0 [ 102.537730][ T45] usb 4-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=57.ce [ 102.558585][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.567127][ T45] usb 4-1: Product: syz [ 102.571649][ T45] usb 4-1: Manufacturer: syz [ 102.576280][ T45] usb 4-1: SerialNumber: syz [ 102.593401][ T45] usb 4-1: config 0 descriptor?? [ 102.691093][ T5086] ------------[ cut here ]------------ [ 102.697026][ T5086] ida_free called for id=8192 which is not allocated. [ 102.704692][ T5399] team0: Port device team_slave_0 added [ 102.726217][ T5086] WARNING: CPU: 0 PID: 5086 at lib/idr.c:525 ida_free+0x370/0x420 [ 102.734469][ T5086] Modules linked in: [ 102.738414][ T5086] CPU: 0 PID: 5086 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 102.749513][ T5399] team0: Port device team_slave_1 added [ 102.756799][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.767008][ T5086] RIP: 0010:ida_free+0x370/0x420 [ 102.772411][ T5086] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 102.792227][ T5086] RSP: 0018:ffffc900037bf940 EFLAGS: 00010246 [ 102.798392][ T5086] RAX: cd3c9ec712d26b00 RBX: 0000000000002000 RCX: ffff888028720000 [ 102.806800][ T5086] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.814915][ T5086] RBP: ffffc900037bfa30 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 102.823013][ T5086] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc900037bf980 [ 102.831449][ T5086] R13: dffffc0000000000 R14: ffff8880235e40a0 R15: 0000000000000246 [ 102.839489][ T5086] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 102.848510][ T5086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.856387][ T5086] CR2: 0000558c15614000 CR3: 0000000024a4e000 CR4: 00000000003506f0 [ 102.865474][ T5086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.873839][ T5086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.881248][ T5102] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 102.881873][ T5086] Call Trace: [ 102.891490][ T5086] [ 102.894477][ T5086] ? __warn+0x163/0x4e0 [ 102.898677][ T5086] ? ida_free+0x370/0x420 [ 102.903477][ T5086] ? report_bug+0x2b3/0x500 [ 102.908050][ T5086] ? ida_free+0x370/0x420 [ 102.912583][ T5086] ? handle_bug+0x3e/0x70 [ 102.917066][ T5086] ? exc_invalid_op+0x1a/0x50 [ 102.921869][ T5086] ? asm_exc_invalid_op+0x1a/0x20 [ 102.926966][ T5086] ? __warn_printk+0x292/0x360 [ 102.932146][ T5086] ? ida_free+0x370/0x420 [ 102.936545][ T5086] ? __pfx_ida_free+0x10/0x10 [ 102.941419][ T5086] ? synchronize_rcu+0x11b/0x360 [ 102.946428][ T5086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.953403][ T5086] hci_conn_del+0x746/0xc40 [ 102.957971][ T5086] hci_conn_hash_flush+0x18e/0x240 [ 102.958010][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.964505][ T5086] hci_dev_close_sync+0x911/0xf60 [ 102.977240][ T5086] hci_unregister_dev+0x1db/0x4e0 [ 102.982492][ T5086] vhci_release+0x83/0xd0 [ 102.986868][ T5086] ? __pfx_vhci_release+0x10/0x10 [ 102.992298][ T5086] __fput+0x24a/0x8a0 [ 102.996350][ T5086] task_work_run+0x24f/0x310 [ 103.001126][ T5086] ? __pfx_task_work_run+0x10/0x10 [ 103.006298][ T5086] ? switch_task_namespaces+0xe1/0x110 [ 103.011875][ T5086] do_exit+0xa27/0x27e0 [ 103.016094][ T5086] ? __pfx_do_exit+0x10/0x10 [ 103.020732][ T5086] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.027098][ T5086] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.034345][ T5086] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.040726][ T5086] ? lockdep_hardirqs_on+0x99/0x150 [ 103.046133][ T5086] do_group_exit+0x207/0x2c0 [ 103.050791][ T5086] __x64_sys_exit_group+0x3f/0x40 [ 103.057374][ T5086] do_syscall_64+0xf3/0x230 [ 103.062935][ T5086] ? clear_bhb_loop+0x35/0x90 [ 103.067669][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.073717][ T5086] RIP: 0033:0x7f1261d75bd9 [ 103.078171][ T5086] Code: Unable to access opcode bytes at 0x7f1261d75baf. [ 103.085559][ T5086] RSP: 002b:00007fffbd4095b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 103.094303][ T5086] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f1261d75bd9 [ 103.102497][ T5086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 103.110505][ T5086] RBP: 00007f1261f04a18 R08: 00007fffbd407357 R09: 000000000000000c [ 103.119171][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 103.127636][ T5086] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 103.135757][ T5086] [ 103.138810][ T5086] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.146121][ T5086] CPU: 0 PID: 5086 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 103.156399][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.166489][ T5086] Call Trace: [ 103.169790][ T5086] [ 103.172752][ T5086] dump_stack_lvl+0x241/0x360 [ 103.177479][ T5086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.182730][ T5086] ? __pfx__printk+0x10/0x10 [ 103.187382][ T5086] ? vscnprintf+0x5d/0x90 [ 103.191748][ T5086] panic+0x349/0x860 [ 103.195693][ T5086] ? __warn+0x172/0x4e0 [ 103.199895][ T5086] ? __pfx_panic+0x10/0x10 [ 103.204381][ T5086] __warn+0x346/0x4e0 [ 103.208398][ T5086] ? ida_free+0x370/0x420 [ 103.212770][ T5086] report_bug+0x2b3/0x500 [ 103.217241][ T5086] ? ida_free+0x370/0x420 [ 103.221621][ T5086] handle_bug+0x3e/0x70 [ 103.225820][ T5086] exc_invalid_op+0x1a/0x50 [ 103.230453][ T5086] asm_exc_invalid_op+0x1a/0x20 [ 103.235350][ T5086] RIP: 0010:ida_free+0x370/0x420 [ 103.240336][ T5086] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 103.260003][ T5086] RSP: 0018:ffffc900037bf940 EFLAGS: 00010246 [ 103.266107][ T5086] RAX: cd3c9ec712d26b00 RBX: 0000000000002000 RCX: ffff888028720000 [ 103.274093][ T5086] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 103.282079][ T5086] RBP: ffffc900037bfa30 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 103.290058][ T5086] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc900037bf980 [ 103.298048][ T5086] R13: dffffc0000000000 R14: ffff8880235e40a0 R15: 0000000000000246 [ 103.306038][ T5086] ? __warn_printk+0x292/0x360 [ 103.310829][ T5086] ? __pfx_ida_free+0x10/0x10 [ 103.315519][ T5086] ? synchronize_rcu+0x11b/0x360 [ 103.320471][ T5086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.326557][ T5086] hci_conn_del+0x746/0xc40 [ 103.331080][ T5086] hci_conn_hash_flush+0x18e/0x240 [ 103.336209][ T5086] hci_dev_close_sync+0x911/0xf60 [ 103.341261][ T5086] hci_unregister_dev+0x1db/0x4e0 [ 103.346314][ T5086] vhci_release+0x83/0xd0 [ 103.350653][ T5086] ? __pfx_vhci_release+0x10/0x10 [ 103.355688][ T5086] __fput+0x24a/0x8a0 [ 103.359687][ T5086] task_work_run+0x24f/0x310 [ 103.364311][ T5086] ? __pfx_task_work_run+0x10/0x10 [ 103.369462][ T5086] ? switch_task_namespaces+0xe1/0x110 [ 103.374933][ T5086] do_exit+0xa27/0x27e0 [ 103.379112][ T5086] ? __pfx_do_exit+0x10/0x10 [ 103.383716][ T5086] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.389708][ T5086] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.396050][ T5086] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.401254][ T5086] ? lockdep_hardirqs_on+0x99/0x150 [ 103.406481][ T5086] do_group_exit+0x207/0x2c0 [ 103.411096][ T5086] __x64_sys_exit_group+0x3f/0x40 [ 103.416133][ T5086] do_syscall_64+0xf3/0x230 [ 103.420651][ T5086] ? clear_bhb_loop+0x35/0x90 [ 103.425359][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.431448][ T5086] RIP: 0033:0x7f1261d75bd9 [ 103.435873][ T5086] Code: Unable to access opcode bytes at 0x7f1261d75baf. [ 103.442900][ T5086] RSP: 002b:00007fffbd4095b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 103.451324][ T5086] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f1261d75bd9 [ 103.459311][ T5086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 103.467295][ T5086] RBP: 00007f1261f04a18 R08: 00007fffbd407357 R09: 000000000000000c [ 103.475276][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 103.483255][ T5086] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 103.491343][ T5086] [ 103.494654][ T5086] Kernel Offset: disabled [ 103.499053][ T5086] Rebooting in 86400 seconds..