last executing test programs: 5.945728686s ago: executing program 1 (id=9): syz_open_dev$video4linux(&(0x7f0000000000), 0x200000071, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc038563b, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x1c}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x400, 0x1, 'A'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 5.504937431s ago: executing program 1 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x353140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000030900010073797a30000000000900020073797a32"], 0x88}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r2}, 0x18) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) unshare(0x600) timer_settime(0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @random="000000000005", @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback=0x7f000007, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5.024014096s ago: executing program 1 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x353140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000030900010073797a30000000000900020073797a32"], 0x88}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r3}, 0x18) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000200)) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) write$P9_RSTATu(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) unshare(0x600) timer_settime(0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x1c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @random="000000000005", @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback=0x7f000007, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.758264917s ago: executing program 1 (id=17): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip6_mr_cache\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x480c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0}}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r3, 0x37, 0x0, @val=@perf_event={0x3}}, 0x18) socket$kcm(0x10, 0x2, 0x0) r5 = dup(0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000245000/0x2000)=nil, &(0x7f0000246000/0x6000)=nil, 0x2000000000000b, 0x0, 0x6, 0x2, 0x1, 0x42, 0xc, 0x8}) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x7e) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000380)="32346ed759de8f71319708d0c82196f5e20d3860dbc7a3bfd844fb664ffb", 0x1e}, {0x0}], 0x3}}], 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008aec1, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYRES16=r0, @ANYBLOB="2fc7e3009c88e67175dd96c5b977ebc4a81778d2e4aaec95acb5e1a6b4ed06b674cf1fc14f2f2917b5df8d1f86832c4c55239413cefc4c3d39ed69c18e67b1ee670731d32909fee371306572ee37491d25b6d515c64194eb2c13f1888bb4c90b176798bb37effe08bb0df9b53a122959a21716d4a34bacdf346b7ef900b37de99206d85d5906ccbc43f6eeb0ed026b873ffc94916691953c47e06525a465f668207e", @ANYRESHEX, @ANYRESOCT=r6, @ANYRESHEX=r5, @ANYBLOB="207a41dfa2c63e66e3f46ae738c1c9c6f92e9ddadaf5f903cca251be616e9488b0baca3d0c307869d2dbed55fc4753e3adecbc792e23e157cec4f86ff7ce2e2ff7535ee1690ec476bbbb5148a6b82b04f36be7795fc8ed90ffe3d8", @ANYRES64=r4], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) munlockall() lseek(r0, 0x67, 0x1) 4.332269157s ago: executing program 3 (id=21): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, &(0x7f0000000200)="0709fe9a939c", 0x6) 3.70490459s ago: executing program 1 (id=26): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1fa, 0x2, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="bb844ad904000010b7080000000000007b8af8ff000000aaecd0cc1e276cc07454a100bfa21e000000000007020000f8ffffff0100000000000000b7040000000000008500000043eaffff94000000000000004aac60df1ebdcf76515850d7ef8fb9e2da1ab1a5197db20477fb93a7f4aac5e7dc4ce66cd09549e9b8b3ef4f728ee8210ff20e4492453b657c02da8796b5ea9d97cba5d377039e43a551a12f0012f14b338e98c19a7a08bdaaabf84470d15c96ddbe47862b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xf7, @none}}}, 0xa) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000080)=0xfffffffffffffff9) 2.498050749s ago: executing program 4 (id=34): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "00a138aa9318e9dd7077000000020000000000006dff0000f300000023f400", 0xffffffffffffffff}) r3 = epoll_create1(0xaf5b6dfe4e9f3aa4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000003c0)) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400004806c3bad0ad35"], 0x14}}], 0x2, 0x4001) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000380)={0x0, 0x3}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @local}, {0x16, 0x0, 0x0, @empty}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r10, 0x110, 0x3) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 2.414004365s ago: executing program 0 (id=35): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0xffffffa3, 0x10000}, {}, {}, @raw32}], 0x1c) 2.354302483s ago: executing program 4 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x4}]}, 0x44}}, 0x0) 2.282221378s ago: executing program 0 (id=37): socketpair(0x25, 0x6, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = add_key$user(0x0, 0x0, &(0x7f0000000580), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, 0x0, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x30, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.281317397s ago: executing program 2 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x50000000) 2.121139702s ago: executing program 2 (id=39): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000011000000000000000000fe8000000000000000000000000000bb"], 0x0) 2.120224541s ago: executing program 4 (id=40): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x84, 0x34}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x111, 0xa}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = memfd_secret(0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r5, r4, 0x80000) read(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xff}) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xff}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8101420}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7ff}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xa6}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffde7}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x10001}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x408, 0x108, 0x0, 0x218, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fff, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @empty, 0x8, 0xffffffff}}}, {{@arp={@remote, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) 2.08417175s ago: executing program 0 (id=41): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2087, 0xa01, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfe, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x0, "a7ea3163fdfa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.069556988s ago: executing program 2 (id=42): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=@newtfilter={0xd04, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x9}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x6}}, @filter_kind_options=@f_basic={{0xa}, {0xccc, 0x2, [@TCA_BASIC_ACT={0xcc8, 0x3, [@m_police={0xcc4, 0xf, 0x0, 0x0, {{0xb}, {0xc98, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x10000000, 0xecdb, 0x3, 0x2, {0x9, 0x0, 0x3, 0x4, 0x101, 0x2}, {0x9, 0x1, 0x6, 0x7f, 0x101, 0x40}, 0xff, 0x5, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xae8e, 0x1, 0x9, 0x10000, 0x9, 0x401, 0xc2, 0x5, 0x2, 0x99, 0x4a, 0xfffffff0, 0x8, 0x4, 0x5, 0x3, 0xffffffff, 0x2, 0x6, 0xa, 0x8, 0x51c666a0, 0xfffff000, 0x4, 0x0, 0xfffffff1, 0x3, 0x80000001, 0xff, 0x2, 0x80000001, 0x8, 0x7f, 0xa, 0x5, 0x103, 0x9, 0x9, 0x8, 0x17, 0xfffffff7, 0x800, 0x613, 0x6, 0x9, 0x200, 0x8, 0x101, 0x99, 0xfffffff7, 0x4000000, 0x1, 0x6, 0x7, 0xd6, 0x3, 0x57, 0x7f, 0x1, 0xff, 0x0, 0xc9, 0x6, 0x9, 0x8, 0x4, 0x4f4, 0x0, 0x100, 0x8000, 0x3, 0x7fffffff, 0x57, 0x7, 0x3, 0x7fff, 0x1, 0xfffffffe, 0x29e8, 0x5, 0xd, 0x8, 0x401, 0x4, 0x4, 0x1, 0x100, 0x81, 0x800, 0x2, 0x6, 0x4, 0xa, 0x2, 0x7, 0x0, 0x6, 0x80000001, 0xfffffffe, 0x8, 0x1, 0x5, 0x5, 0x2, 0xb, 0x8, 0x9, 0x18, 0x4, 0x7, 0x4, 0x2e, 0x4c, 0x8, 0x40, 0x2, 0x81, 0x1, 0x7f, 0x81, 0x3, 0x0, 0x7f, 0x0, 0x5, 0x3, 0xf, 0x8, 0x8000, 0x9, 0xa, 0x7eb6, 0x48000, 0xc1e, 0x6, 0x8, 0x200, 0x8, 0x6, 0x6, 0xfffffff8, 0x2, 0x3, 0x10, 0xfffffffb, 0xd25, 0x1, 0x0, 0x6, 0x9, 0x9, 0x0, 0xc, 0x80000000, 0x5941, 0x8, 0x1, 0x40, 0x1000, 0x5, 0x5, 0x4, 0xb, 0x8, 0x705, 0x3ff, 0x1, 0xff, 0x2, 0x2d55, 0x5, 0xfffff801, 0x5, 0x8, 0x1, 0x6, 0x0, 0x9, 0x0, 0x200, 0x5, 0x5, 0x7ff, 0x6, 0x5, 0x80, 0x8, 0x9, 0xe407b374, 0xfff, 0x2, 0x100d4, 0x8, 0x4b1274f3, 0xfff, 0x2, 0x5, 0x4, 0xb, 0x4, 0x20000000, 0x5, 0xb, 0x1, 0x8000, 0x827e, 0x3, 0x1, 0xffffffff, 0xdb2, 0x1, 0x8, 0x8, 0x40a43741, 0xff9, 0x7, 0xf3, 0xfffffff5, 0x6, 0x80000001, 0x401, 0x9, 0x800, 0x8, 0x8, 0xf9, 0x2, 0x0, 0x401, 0x1, 0x1, 0xfab, 0x7a012a96, 0xff, 0xfffffffb, 0x8, 0xc, 0x1ff, 0x7fff80, 0x0, 0x80000000, 0x5, 0x8, 0x80000000, 0xbc, 0x8, 0x3, 0x5, 0x1366, 0x0, 0x33, 0x8, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x4, 0x3, 0xffffffff, 0xc, 0x4, 0x5, 0x1, 0x6, 0xfff, 0x100, 0x2, 0x78, 0x9d, 0x31, 0x6, 0x0, 0x7, 0x57, 0x70c93c90, 0x2, 0x44f, 0xe, 0x1ff, 0x44d, 0xe, 0x5, 0x100, 0x3, 0x9, 0x7, 0x8, 0x2, 0x4, 0x1ab, 0x9, 0x1, 0x1, 0x9, 0x3, 0x9, 0xa9, 0x100, 0x5, 0xea5, 0x9, 0x5, 0x0, 0x6, 0xf8, 0x6, 0x7, 0x69, 0xfa, 0x400, 0x40, 0x10000, 0x4, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x4, 0x80000001, 0x7, 0x7, 0x3ff, 0x7, 0x9, 0x0, 0x3, 0x800, 0x6, 0x1, 0x8, 0x1, 0x7, 0x7, 0x401, 0x9f0a, 0x7, 0x1, 0x3, 0x7, 0x40, 0x1, 0xe000000, 0x9, 0x7, 0xffffffff, 0x80000001, 0x6, 0x9, 0x7, 0x4, 0x1, 0x7, 0xc8fe, 0x100, 0xfffffff9, 0x9, 0x683c, 0x0, 0x80000001, 0xfffffffc, 0x1, 0x1fd12f40, 0x1d8c, 0x2470, 0x8, 0x10, 0x80002, 0x65b1, 0x9, 0x80000001, 0x0, 0x2, 0x2, 0x7, 0x6, 0xb16, 0x9, 0xf, 0x624a, 0xf, 0x10001, 0xfffffff7, 0x8, 0xff, 0xffff, 0x5, 0xfff, 0x5, 0x1c5, 0x101, 0x558, 0x80000000, 0xf, 0x200, 0xffffff80, 0x6, 0x9, 0x2, 0x1, 0x2, 0xfffffffb, 0xf2, 0x8, 0x2, 0x4, 0x9, 0x9, 0x6, 0xffff, 0x400, 0x6, 0x4, 0xffffffff, 0x5, 0x9, 0x3ff, 0xd6bb, 0x7, 0x1f5, 0x5, 0x8, 0x2, 0x4, 0x1, 0x9, 0x7fffffff, 0x0, 0x0, 0x57, 0x7, 0xe, 0x0, 0x8, 0x7, 0x8, 0x4, 0xcbd, 0x9, 0x8, 0x9, 0x600, 0x9, 0x8, 0x0, 0x9, 0x9e67, 0xffffc77c, 0xd, 0x62, 0xfffffff7, 0x8, 0x200, 0x1, 0x1, 0x3ff, 0x4, 0x2, 0x2, 0x8, 0x7, 0x1, 0x5, 0x4, 0x8001, 0x3, 0x800, 0x8ee, 0x9, 0xd06, 0x5, 0x5, 0x5, 0x9, 0x5, 0xe, 0x2, 0x7, 0x3, 0x0, 0x3, 0x7, 0x2, 0x6, 0xffff0000, 0x7, 0x1, 0xab02, 0xa3, 0xfffffff2, 0xee9, 0x3, 0x0, 0xd, 0xfff, 0x7, 0x5, 0x3, 0xdd, 0xe80, 0x7, 0x1, 0x3ff, 0x7, 0x4, 0x0, 0xa, 0x7c, 0x8, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2, 0x3, 0x1ee5, 0xd, 0x6, 0x0, 0x81, 0x10000, 0x40, 0x9, 0x8, 0x1, 0xaacb, 0xc78a, 0x5, 0x100, 0x4, 0x9, 0x3, 0x2, 0xf8, 0x4, 0x6, 0x2, 0x81, 0x4, 0x0, 0x15, 0x38000000, 0x80, 0x8, 0xfffffffc, 0x0, 0xd0c, 0x2, 0x400, 0x8, 0x2, 0x5, 0x72e8abb4, 0x5, 0x1, 0x10001, 0xc, 0x5, 0x2, 0xffffffc0, 0x53, 0x65, 0x6, 0xffffff81, 0x0, 0x3, 0x800, 0x3, 0xe2, 0x3ff, 0x73b8, 0x2, 0x9, 0x3, 0x4, 0x3f, 0x7, 0x10001, 0x6, 0x950b, 0x5, 0x21, 0xffffffff, 0x800, 0x3, 0x3, 0x3, 0x1, 0x3, 0x80, 0xd377, 0x81, 0x5, 0x1, 0xbb, 0x342a, 0xb, 0x80, 0x200, 0x401, 0x9, 0x7, 0x7, 0x48, 0x6, 0x3ff, 0x1, 0x7fffffff, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x8, 0x9, 0x2, 0x0, 0x0, 0xb, 0x2, 0x28, 0x2, 0x2, 0x81, 0x2, 0x1800, 0xfffffffd, 0xffffff1a, 0xbcde, 0xcd9f, 0x3, 0x1, 0x6, 0xe, 0x1, 0x5, 0x2, 0x1, 0x9, 0x57c4, 0x5, 0x4, 0x7, 0x2, 0x8000, 0x2, 0x4, 0xfffffffa, 0x7, 0x8000, 0xffffffdd, 0x9, 0x7, 0x9, 0x81, 0x5, 0x7, 0x20000000, 0x1000, 0x98, 0x2, 0x2, 0xd3, 0x5, 0x3, 0x9, 0x0, 0xffff, 0x6, 0x6, 0x9, 0x4, 0x0, 0x5, 0xf, 0x9, 0x6, 0x3, 0x3, 0x7, 0x7f, 0x2b6a800, 0x1, 0x580000, 0x2b, 0x80000001, 0x2, 0x9, 0xc687, 0xc, 0x2, 0x5, 0x3, 0x1, 0xaa, 0x2, 0xaa5, 0x6, 0x5, 0x4, 0x7, 0xf422, 0x4913d238, 0x5, 0x51, 0xb8, 0x1, 0x8001, 0x4, 0x8, 0x81, 0x5, 0x401, 0x3, 0xa, 0xfa5, 0x3, 0x2, 0x2, 0x2, 0x9, 0x6, 0x6, 0x6, 0x2, 0x84b, 0x1c03, 0xa7b, 0x9, 0x8001, 0x2, 0x10, 0x6, 0x2, 0xf09b, 0x0, 0x6, 0x3, 0x2, 0x3, 0x8001, 0xfd5e, 0x5, 0xffff, 0x200, 0x3, 0x101, 0x533c0fd9, 0x3d5d, 0xffff, 0x0, 0x0, 0x1, 0x4, 0x5, 0x3, 0x4, 0x7fff, 0x7a2e, 0x9, 0xe, 0x6, 0x0, 0xa2e4, 0x7f, 0x6, 0x7, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x80000001, 0x7, 0x5, {0xa, 0x1, 0x3, 0x8, 0x9, 0x5}, {0x7, 0x0, 0xaace, 0x2, 0x7, 0x2ca61935}, 0x2, 0x4, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xd04}, 0x1, 0x0, 0x0, 0x80}, 0x240008f4) 1.940984006s ago: executing program 4 (id=43): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x28, 0x1, 0x2, 0x0, 0x10}) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x740c3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a62ad14000000020a0108000000000000000000000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00100000000000001b"]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, 0x0, 0x118) pipe(&(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000028c, 0x0, &(0x7f0000000440), 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='GPL\x00', 0x1, 0x3a, &(0x7f0000000280)=""/58, 0x0, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x8, 0xfffffd8d}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], 0x0, 0x10, 0x80000001, @void, @value}, 0x94) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r4) close(r5) 1.853166379s ago: executing program 2 (id=44): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00170300000025e32f81c6470a14c7b898c99fbc75967fce3c83cf435e742fd40fc80e095ebcd1b2cc7a04546fb971382b63832feca2c27ed41c410bb7774e85ffb02024d66c38277d9bf514d4384c42191d4d6801b1afe616dd000e9b76fbf23e034617562d0e5a622ab163172a7c8ee6f6033886bdd1af260c0a4418bbdc9c11b0578dadc7477b6e877388b611807656cba634df928157e8a01968d77fc301c89f4dee827254"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.474439193s ago: executing program 0 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x673e3a67a815e2f3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r2, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000ec0)=""/117, 0x75}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/179, 0xb3}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000480)=""/107, 0x6b}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x7, 0xb57a, "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", 0x80, 0xa, 0x7, 0xa, 0x40, 0x7, 0x1, 0x1}}}, 0x120) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x8, 0x7, 0x9, 0x7, 0x2, 0xa, 0x9, 0x4, 0x6, 0x5b, 0x9, 0x7, 0x4, 0xb, 0x3, 0xb}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r7, 0x0, 0x31, 0x0, &(0x7f00000001c0)=0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.234788274s ago: executing program 3 (id=46): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0x8, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.146147416s ago: executing program 3 (id=47): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "00a138aa9318e9dd7077000000020000000000006dff0000f300000023f400", 0xffffffffffffffff}) r3 = epoll_create1(0xaf5b6dfe4e9f3aa4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000003c0)) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400004806c3bad0ad35"], 0x14}}], 0x2, 0x4001) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000380)={0x0, 0x3}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @local}, {0x16, 0x0, 0x0, @empty}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r10, 0x110, 0x3) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 1.123163518s ago: executing program 3 (id=48): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0xffffffa3, 0x10000}, {}, {}, @raw32}], 0x1c) 1.03387953s ago: executing program 4 (id=49): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x0) syz_clone(0x7a068000, 0x0, 0x8c7f42b69a8c8c9e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') socket(0x18, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="feff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000040000000000000000000000000b6b137d3185d3b0000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa1000000000000070100879f01bf6b4fd369000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket(0x840000000002, 0xa, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x4840) mkdir(&(0x7f0000000600)='./cgroup/../file0\x00', 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x3f, 0x23f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 936.995891ms ago: executing program 3 (id=50): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x5000000) 644.385277ms ago: executing program 3 (id=51): r0 = socket$xdp(0x2c, 0x3, 0x0) socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0108000000000000000000000000080003400000003c08000540000000250900020073797a300000000008000a40000000000900010073797a310000000008000640ffffff000c000b"], 0x80}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) bind(r0, &(0x7f0000000080)=@can={0x1d, r8}, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x0) 188.307028ms ago: executing program 0 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000280)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x600, r1, {0xfff2}}}, 0x24}}, 0x0) 48.822252ms ago: executing program 4 (id=53): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xf4a, @remote, 0x33c000}, 0x1c) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='bond0\x00') r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x4605, 0x20000000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1b, 0x20000002, r4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0xe, 0x2000) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000180)={0x1, 0x7}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xf4a, @remote, 0x33c000}, 0x1c) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='bond0\x00') (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r2, 0x4605, 0x20000000) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) (async) io_uring_setup(0x1de0, &(0x7f0000000440)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1b, 0x20000002, r4) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000140), 0xe, 0x2000) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000180)={0x1, 0x7}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) (async) 0s ago: executing program 0 (id=54): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) faccessat(r6, &(0x7f0000000180)='./file0\x00', 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) splice(r12, 0x0, r10, 0x0, 0xf3a, 0x0) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) tee(r9, r13, 0xaf5, 0x0) write$binfmt_elf64(r11, &(0x7f0000003380)=ANY=[], 0x18c6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 49.723036][ T5215] cgroup: Unknown subsys name 'net' [ 49.850275][ T5215] cgroup: Unknown subsys name 'cpuset' [ 49.858216][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.108661][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.202943][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.210877][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.218457][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.218642][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.234819][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.237354][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.242093][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.249297][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.257380][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.263401][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.270362][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.285441][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.286508][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.293577][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.299980][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.308218][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.314230][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.320954][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.328126][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.337157][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.341934][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.349485][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.358520][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.364302][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.369980][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.383888][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.387420][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.399916][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.408090][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.415362][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.683896][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 53.837991][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.845646][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.853627][ T5242] bridge_slave_0: entered allmulticast mode [ 53.861046][ T5242] bridge_slave_0: entered promiscuous mode [ 53.872216][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.880333][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.887556][ T5242] bridge_slave_1: entered allmulticast mode [ 53.894047][ T5242] bridge_slave_1: entered promiscuous mode [ 53.942065][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.975171][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 53.987121][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.022881][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 54.055757][ T5242] team0: Port device team_slave_0 added [ 54.063039][ T5242] team0: Port device team_slave_1 added [ 54.150629][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 54.160530][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.168734][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.195131][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.231371][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.238631][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.264643][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.279564][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 54.301168][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.308465][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.315586][ T5246] bridge_slave_0: entered allmulticast mode [ 54.322615][ T5246] bridge_slave_0: entered promiscuous mode [ 54.341150][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.348695][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.355795][ T5248] bridge_slave_0: entered allmulticast mode [ 54.362466][ T5248] bridge_slave_0: entered promiscuous mode [ 54.381996][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.389270][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.396371][ T5246] bridge_slave_1: entered allmulticast mode [ 54.403135][ T5246] bridge_slave_1: entered promiscuous mode [ 54.425553][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.434973][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.442845][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.450328][ T5248] bridge_slave_1: entered allmulticast mode [ 54.456842][ T5248] bridge_slave_1: entered promiscuous mode [ 54.482713][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.528822][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.559114][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.587134][ T5242] hsr_slave_0: entered promiscuous mode [ 54.593461][ T5242] hsr_slave_1: entered promiscuous mode [ 54.602342][ T5246] team0: Port device team_slave_0 added [ 54.627969][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.635373][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.645793][ T5247] bridge_slave_0: entered allmulticast mode [ 54.652483][ T5247] bridge_slave_0: entered promiscuous mode [ 54.659800][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.666888][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.674652][ T5247] bridge_slave_1: entered allmulticast mode [ 54.681651][ T5247] bridge_slave_1: entered promiscuous mode [ 54.691332][ T5246] team0: Port device team_slave_1 added [ 54.702656][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.709952][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.717089][ T5245] bridge_slave_0: entered allmulticast mode [ 54.724143][ T5245] bridge_slave_0: entered promiscuous mode [ 54.772190][ T5248] team0: Port device team_slave_0 added [ 54.779541][ T5248] team0: Port device team_slave_1 added [ 54.785291][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.795463][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.802917][ T5245] bridge_slave_1: entered allmulticast mode [ 54.810182][ T5245] bridge_slave_1: entered promiscuous mode [ 54.839613][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.851659][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.861466][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.868593][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.894641][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.915333][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.941386][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.951228][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.977951][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.996247][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.026090][ T5247] team0: Port device team_slave_0 added [ 55.035720][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.042830][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.069055][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.091814][ T5247] team0: Port device team_slave_1 added [ 55.104620][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.111703][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.137675][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.155827][ T5245] team0: Port device team_slave_0 added [ 55.186679][ T5245] team0: Port device team_slave_1 added [ 55.200804][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.210203][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.237333][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.273464][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.280505][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.307183][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.347101][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.354283][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.380403][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.392821][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.400009][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.425948][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.441710][ T5246] hsr_slave_0: entered promiscuous mode [ 55.448006][ T5246] hsr_slave_1: entered promiscuous mode [ 55.453978][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.458879][ T55] Bluetooth: hci0: command tx timeout [ 55.462039][ T5235] Bluetooth: hci4: command tx timeout [ 55.467056][ T5239] Bluetooth: hci3: command tx timeout [ 55.472495][ T5230] Bluetooth: hci2: command tx timeout [ 55.483700][ T5246] Cannot create hsr debugfs directory [ 55.494714][ T5248] hsr_slave_0: entered promiscuous mode [ 55.501229][ T5248] hsr_slave_1: entered promiscuous mode [ 55.507206][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.514804][ T5248] Cannot create hsr debugfs directory [ 55.537610][ T5235] Bluetooth: hci1: command tx timeout [ 55.567089][ T5247] hsr_slave_0: entered promiscuous mode [ 55.573286][ T5247] hsr_slave_1: entered promiscuous mode [ 55.581762][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.589547][ T5247] Cannot create hsr debugfs directory [ 55.648031][ T5245] hsr_slave_0: entered promiscuous mode [ 55.654231][ T5245] hsr_slave_1: entered promiscuous mode [ 55.660672][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.669225][ T5245] Cannot create hsr debugfs directory [ 55.766648][ T5242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.780114][ T5242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.831093][ T5242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.860908][ T5242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.997000][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.020638][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.031552][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.058156][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.072999][ T5248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.107718][ T5248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.121485][ T5248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.144223][ T5248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.174020][ T5247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.191022][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.204631][ T5247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.239330][ T5247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.253299][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.265031][ T5247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.305016][ T5245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.315612][ T5245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.328868][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.336128][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.371036][ T5245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.381499][ T5245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.394235][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.401435][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.433956][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.484524][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.518617][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.525700][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.554068][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.590448][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.597861][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.633138][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.658690][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.678417][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.685574][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.704044][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.715224][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.744607][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.751744][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.775672][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.816358][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.823475][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.841113][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.851995][ T2586] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.859111][ T2586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.874949][ T5242] veth0_vlan: entered promiscuous mode [ 56.890726][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.897857][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.917075][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.924214][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.938118][ T5242] veth1_vlan: entered promiscuous mode [ 56.984707][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.049412][ T5242] veth0_macvtap: entered promiscuous mode [ 57.071515][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.095739][ T5242] veth1_macvtap: entered promiscuous mode [ 57.116739][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.139375][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.149223][ T5246] veth0_vlan: entered promiscuous mode [ 57.174422][ T5242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.183578][ T5242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.192476][ T5242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.202909][ T5242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.218984][ T5246] veth1_vlan: entered promiscuous mode [ 57.230647][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.246624][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.325301][ T5245] veth0_vlan: entered promiscuous mode [ 57.346854][ T5246] veth0_macvtap: entered promiscuous mode [ 57.374129][ T5245] veth1_vlan: entered promiscuous mode [ 57.383831][ T5246] veth1_macvtap: entered promiscuous mode [ 57.416839][ T5247] veth0_vlan: entered promiscuous mode [ 57.443415][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.454543][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.471571][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.474983][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490958][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.517081][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.532313][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.538479][ T5235] Bluetooth: hci3: command tx timeout [ 57.543139][ T5230] Bluetooth: hci0: command tx timeout [ 57.552919][ T5230] Bluetooth: hci4: command tx timeout [ 57.553149][ T5239] Bluetooth: hci2: command tx timeout [ 57.560751][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.592279][ T5245] veth0_macvtap: entered promiscuous mode [ 57.605749][ T5247] veth1_vlan: entered promiscuous mode [ 57.618690][ T5239] Bluetooth: hci1: command tx timeout [ 57.631316][ T5248] veth0_vlan: entered promiscuous mode [ 57.642623][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.651587][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.660733][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.669558][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.682373][ T5245] veth1_macvtap: entered promiscuous mode [ 57.697089][ T2586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.706010][ T5248] veth1_vlan: entered promiscuous mode [ 57.713136][ T2586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.764048][ T5247] veth0_macvtap: entered promiscuous mode [ 57.791827][ T5247] veth1_macvtap: entered promiscuous mode [ 57.823178][ T5242] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.841744][ T5248] veth0_macvtap: entered promiscuous mode [ 57.851120][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.863262][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.874250][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.885217][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.896211][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.915828][ T5248] veth1_macvtap: entered promiscuous mode [ 57.931730][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.942402][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.952339][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.962797][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.972741][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.983316][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.994397][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.020829][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.031492][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.041689][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.052470][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.063473][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.089908][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.095190][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.105298][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.105904][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.118953][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.136299][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.150217][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.161062][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.171244][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.182704][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.193380][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.204429][ T5245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.213241][ T5245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.222402][ T5245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.231196][ T5245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.251352][ T5248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.261863][ T5248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.271960][ T5248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.281689][ T5248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326986][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.342116][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.350211][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.356977][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.375094][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.385236][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.398870][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.410028][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.421084][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.432296][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.491706][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.503455][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.513531][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.524097][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.533974][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.544434][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.554308][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.564865][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.576315][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.587896][ T5247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.596616][ T5247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.605554][ T5247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.614335][ T5247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.636354][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.646074][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.653555][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 58.673087][ T5282] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f [ 58.683783][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.699021][ T5282] usb 4-1: Product: syz [ 58.703799][ T5282] usb 4-1: Manufacturer: syz [ 58.718215][ T5282] usb 4-1: SerialNumber: syz [ 58.721646][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.744256][ T5282] usb 4-1: config 0 descriptor?? [ 58.745819][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.827622][ T5281] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.828083][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.838125][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.870976][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.884206][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.974395][ T5296] mmap: syz.0.1 (5296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.990726][ T5289] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 58.998704][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.007088][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.033848][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.043433][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.068183][ T5281] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 59.076416][ T5281] usb 3-1: config 0 has no interface number 0 [ 59.082882][ T5281] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.097291][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.105593][ T5281] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.121935][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.146840][ T5281] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 59.163275][ T5281] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 59.183142][ T5281] usb 3-1: Manufacturer: syz [ 59.224285][ T5281] usb 3-1: config 0 descriptor?? [ 59.330655][ T5302] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.362244][ T937] usb 4-1: USB disconnect, device number 2 [ 59.433951][ T5302] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 59.459326][ T5302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.623820][ T5239] Bluetooth: hci2: command tx timeout [ 59.630469][ T5239] Bluetooth: hci3: command tx timeout [ 59.636361][ T5235] Bluetooth: hci0: command tx timeout [ 59.636432][ T5230] Bluetooth: hci4: command tx timeout [ 59.663661][ T5314] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8'. [ 59.685517][ T5281] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0001/input/input5 [ 59.699317][ T5230] Bluetooth: hci1: command tx timeout [ 59.797622][ T5273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.801543][ T5281] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 59.863305][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.925002][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.946131][ T29] audit: type=1326 audit(1727295983.564:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69517def9 code=0x7ffc0000 [ 59.968986][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 59.993155][ T5273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.039116][ T5287] usb 3-1: USB disconnect, device number 2 [ 60.055358][ T5273] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.068505][ T29] audit: type=1326 audit(1727295983.604:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69517def9 code=0x7ffc0000 [ 60.104212][ T5273] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 60.142775][ T29] audit: type=1326 audit(1727295983.604:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe69517def9 code=0x7ffc0000 [ 60.146132][ T5273] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 80 [ 60.172482][ T29] audit: type=1326 audit(1727295983.604:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69517def9 code=0x7ffc0000 [ 60.228568][ T5282] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.276717][ T5273] usb 1-1: language id specifier not provided by device, defaulting to English [ 60.296476][ T5273] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.306650][ T29] audit: type=1326 audit(1727295983.604:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69517def9 code=0x7ffc0000 [ 60.331047][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.342138][ T5273] usb 1-1: Product: syz [ 60.346326][ T5273] usb 1-1: Manufacturer:  [ 60.353910][ T5273] usb 1-1: SerialNumber: syz [ 60.372047][ T29] audit: type=1326 audit(1727295983.604:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe69517c890 code=0x7ffc0000 [ 60.418264][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 60.426450][ T5282] usb 5-1: config 0 has no interfaces? [ 60.435547][ T5282] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=c3.3e [ 60.455083][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.462083][ T29] audit: type=1326 audit(1727295983.604:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe69517dafb code=0x7ffc0000 [ 60.477275][ T5282] usb 5-1: Product: syz [ 60.504330][ T5282] usb 5-1: Manufacturer: syz [ 60.505865][ T29] audit: type=1326 audit(1727295983.604:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe69517dafb code=0x7ffc0000 [ 60.519768][ T5282] usb 5-1: SerialNumber: syz [ 60.532201][ T29] audit: type=1326 audit(1727295983.604:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe69517dafb code=0x7ffc0000 [ 60.546404][ T5282] usb 5-1: config 0 descriptor?? [ 60.570031][ T29] audit: type=1326 audit(1727295983.604:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe69517dafb code=0x7ffc0000 [ 60.642148][ T5273] cdc_ncm 1-1:1.0: bind() failure [ 60.678592][ T5273] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 60.685509][ T5273] cdc_ncm 1-1:1.1: bind() failure [ 60.724604][ T5273] usb 1-1: USB disconnect, device number 2 [ 60.946935][ T5336] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 60.970495][ T5336] team0: Cannot enslave team device to itself [ 61.077554][ T5333] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11'. [ 61.087442][ T5333] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 61.657858][ T4647] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 61.697466][ T5230] Bluetooth: hci0: command tx timeout [ 61.697932][ T5235] Bluetooth: hci4: command tx timeout [ 61.702907][ T5230] Bluetooth: hci2: command tx timeout [ 61.777674][ T5230] Bluetooth: hci1: command tx timeout [ 61.841978][ T4647] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.871259][ T4647] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.898081][ T4647] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 61.917347][ T4647] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 61.962313][ T5361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 61.967102][ T4647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.993253][ T5363] loop7: detected capacity change from 0 to 16384 [ 61.997376][ T5348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.020408][ T4647] hub 4-1:1.0: bad descriptor, ignoring hub [ 62.034130][ T4647] hub 4-1:1.0: probe with driver hub failed with error -5 [ 62.047820][ T4647] cdc_wdm 4-1:1.0: skipping garbage [ 62.053055][ T4647] cdc_wdm 4-1:1.0: skipping garbage [ 62.072869][ T5363] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 0 [ 62.076330][ T4647] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 62.105695][ T4647] cdc_wdm 4-1:1.0: Unknown control protocol [ 62.130489][ T5363] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 62.148235][ T5363] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.173529][ T5363] Buffer I/O error on dev loop7, logical block 384, async page read [ 62.378286][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.384980][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.391226][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.397835][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.403940][ C1] hrtimer: interrupt took 25809065 ns [ 62.409632][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.416275][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.422535][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.429134][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.435359][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.441959][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.448250][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.454851][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.461109][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.467709][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.473995][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.480591][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.486814][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.493408][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.499669][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 62.506264][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 62.621140][ T5373] vivid-000: ================= START STATUS ================= [ 62.629419][ T5373] vivid-000: Radio HW Seek Mode: Bounded [ 62.635584][ T5373] vivid-000: Radio Programmable HW Seek: false [ 62.642786][ T5373] vivid-000: RDS Rx I/O Mode: Block I/O [ 62.667178][ T5373] vivid-000: Generate RBDS Instead of RDS: false [ 62.679427][ T5373] vivid-000: RDS Reception: true [ 62.684778][ T5373] vivid-000: RDS Program Type: 0 inactive [ 62.694989][ T5373] vivid-000: RDS PS Name: inactive [ 62.701797][ T5373] vivid-000: RDS Radio Text: inactive [ 62.711202][ T5373] vivid-000: RDS Traffic Announcement: false inactive [ 62.721384][ T5373] vivid-000: RDS Traffic Program: false inactive [ 62.731867][ T5373] vivid-000: RDS Music: false inactive [ 62.745436][ T5373] vivid-000: ================== END STATUS ================== [ 62.772015][ T5376] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 63.014526][ T4647] usb 5-1: USB disconnect, device number 2 [ 63.144362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.167407][ T937] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 63.347492][ T937] usb 2-1: device descriptor read/64, error -71 [ 63.587910][ T937] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 63.740040][ T937] usb 2-1: device descriptor read/64, error -71 [ 63.834597][ T5410] program syz.4.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.848308][ T937] usb usb2-port1: attempt power cycle [ 64.057352][ T5285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.195575][ T5285] usb 3-1: device descriptor read/64, error -71 [ 64.214238][ T937] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 64.250590][ T937] usb 2-1: device descriptor read/8, error -71 [ 64.260793][ T5230] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 64.270805][ T5230] Bluetooth: hci3: Injecting HCI hardware error event [ 64.278797][ T5235] Bluetooth: hci3: hardware error 0x00 [ 64.378091][ T5283] usb 4-1: USB disconnect, device number 3 [ 64.447585][ T5285] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 64.487460][ T937] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 64.528315][ T937] usb 2-1: device descriptor read/8, error -71 [ 64.578206][ T5285] usb 3-1: device descriptor read/64, error -71 [ 64.650453][ T937] usb usb2-port1: unable to enumerate USB device [ 64.685210][ T5424] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 64.707631][ T5285] usb usb3-port1: attempt power cycle [ 64.748406][ T5426] macvlan2: entered allmulticast mode [ 64.774142][ T5426] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 64.795818][ T5426] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 64.826041][ T5426] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 64.864468][ T5428] bond0: entered promiscuous mode [ 64.866187][ T5428] bond_slave_0: entered promiscuous mode [ 64.866340][ T5428] bond_slave_1: entered promiscuous mode [ 64.866461][ T5428] macvlan2: entered promiscuous mode [ 64.962247][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 64.962264][ T29] audit: type=1326 audit(1727295988.584:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.024625][ T29] audit: type=1326 audit(1727295988.624:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.046648][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.047356][ T5285] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.074492][ T29] audit: type=1326 audit(1727295988.624:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.096503][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.103812][ T29] audit: type=1326 audit(1727295988.624:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.130243][ T5285] usb 3-1: device descriptor read/8, error -71 [ 65.140257][ T29] audit: type=1326 audit(1727295988.624:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.162241][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.181855][ T29] audit: type=1326 audit(1727295988.634:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.232011][ T29] audit: type=1326 audit(1727295988.644:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.259431][ T29] audit: type=1326 audit(1727295988.644:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.281306][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.296806][ T29] audit: type=1326 audit(1727295988.644:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.328692][ T29] audit: type=1326 audit(1727295988.644:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295cb7def9 code=0x7ffc0000 [ 65.350735][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.499561][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 65.609386][ T5285] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 65.642096][ T5285] usb 3-1: device descriptor read/8, error -71 [ 65.751555][ T5441] [ 65.753986][ T5441] ====================================================== [ 65.757628][ T5285] usb usb3-port1: unable to enumerate USB device [ 65.760974][ T5441] WARNING: possible circular locking dependency detected [ 65.760985][ T5441] 6.11.0-syzkaller-10547-g684a64bf32b6 #0 Not tainted [ 65.781029][ T5441] ------------------------------------------------------ [ 65.788034][ T5441] syz.0.54/5441 is trying to acquire lock: [ 65.793820][ T5441] ffff88807a7cd718 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 65.803481][ T5441] [ 65.803481][ T5441] but task is already holding lock: [ 65.810827][ T5441] ffff88807e82c418 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 65.821522][ T5441] [ 65.821522][ T5441] which lock already depends on the new lock. [ 65.821522][ T5441] [ 65.831907][ T5441] [ 65.831907][ T5441] the existing dependency chain (in reverse order) is: [ 65.840903][ T5441] [ 65.840903][ T5441] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 65.849638][ T5441] lock_acquire+0x1ed/0x550 [ 65.854661][ T5441] down_write+0x99/0x220 [ 65.859414][ T5441] process_measurement+0x439/0x1fb0 [ 65.865125][ T5441] ima_file_mmap+0x13d/0x2b0 [ 65.870225][ T5441] security_mmap_file+0x7e7/0xa40 [ 65.875763][ T5441] __se_sys_remap_file_pages+0x6e6/0xa50 [ 65.881906][ T5441] do_syscall_64+0xf3/0x230 [ 65.886916][ T5441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.893318][ T5441] [ 65.893318][ T5441] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 65.900954][ T5441] validate_chain+0x18ef/0x5920 [ 65.906312][ T5441] __lock_acquire+0x1384/0x2050 [ 65.911675][ T5441] lock_acquire+0x1ed/0x550 [ 65.916700][ T5441] down_read_killable+0xca/0xd30 [ 65.924675][ T5441] mmap_read_lock_killable+0x1d/0x70 [ 65.930471][ T5441] lock_mm_and_find_vma+0x29c/0x2f0 [ 65.936183][ T5441] exc_page_fault+0x1bf/0x8c0 [ 65.941374][ T5441] asm_exc_page_fault+0x26/0x30 [ 65.946751][ T5441] fault_in_readable+0x165/0x2b0 [ 65.952213][ T5441] fault_in_iov_iter_readable+0x229/0x280 [ 65.958447][ T5441] generic_perform_write+0x259/0x6d0 [ 65.964244][ T5441] shmem_file_write_iter+0xf9/0x120 [ 65.969957][ T5441] vfs_write+0xa6d/0xc90 [ 65.974717][ T5441] ksys_write+0x183/0x2b0 [ 65.979558][ T5441] do_syscall_64+0xf3/0x230 [ 65.984573][ T5441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.990974][ T5441] [ 65.990974][ T5441] other info that might help us debug this: [ 65.990974][ T5441] [ 66.001273][ T5441] Possible unsafe locking scenario: [ 66.001273][ T5441] [ 66.008706][ T5441] CPU0 CPU1 [ 66.014050][ T5441] ---- ---- [ 66.019397][ T5441] lock(&sb->s_type->i_mutex_key#12); [ 66.024856][ T5441] lock(&mm->mmap_lock); [ 66.031691][ T5441] lock(&sb->s_type->i_mutex_key#12); [ 66.039665][ T5441] rlock(&mm->mmap_lock); [ 66.044071][ T5441] [ 66.044071][ T5441] *** DEADLOCK *** [ 66.044071][ T5441] [ 66.052195][ T5441] 3 locks held by syz.0.54/5441: [ 66.057111][ T5441] #0: ffff88802f844ef8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 66.066154][ T5441] #1: ffff8880723de420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 66.075042][ T5441] #2: ffff88807e82c418 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 66.086191][ T5441] [ 66.086191][ T5441] stack backtrace: [ 66.092075][ T5441] CPU: 1 UID: 0 PID: 5441 Comm: syz.0.54 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 66.102222][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.112275][ T5441] Call Trace: [ 66.115548][ T5441] [ 66.118482][ T5441] dump_stack_lvl+0x241/0x360 [ 66.123155][ T5441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.128344][ T5441] ? __pfx__printk+0x10/0x10 [ 66.133050][ T5441] print_circular_bug+0x13a/0x1b0 [ 66.138071][ T5441] check_noncircular+0x36a/0x4a0 [ 66.143000][ T5441] ? __pfx_check_noncircular+0x10/0x10 [ 66.148447][ T5441] ? lockdep_lock+0x123/0x2b0 [ 66.153120][ T5441] ? __pfx_validate_chain+0x10/0x10 [ 66.158305][ T5441] validate_chain+0x18ef/0x5920 [ 66.163150][ T5441] ? __pfx_validate_chain+0x10/0x10 [ 66.168332][ T5441] ? mark_lock+0x9a/0x360 [ 66.172651][ T5441] ? __pfx_validate_chain+0x10/0x10 [ 66.177834][ T5441] ? __lock_acquire+0x1384/0x2050 [ 66.182851][ T5441] ? mark_lock+0x9a/0x360 [ 66.187165][ T5441] ? __lock_acquire+0x1384/0x2050 [ 66.192179][ T5441] ? mark_lock+0x9a/0x360 [ 66.196496][ T5441] __lock_acquire+0x1384/0x2050 [ 66.201340][ T5441] lock_acquire+0x1ed/0x550 [ 66.205833][ T5441] ? mmap_read_lock_killable+0x1d/0x70 [ 66.211280][ T5441] ? __pfx_lock_acquire+0x10/0x10 [ 66.216294][ T5441] ? __pfx___might_resched+0x10/0x10 [ 66.221566][ T5441] ? __folio_batch_add_and_move+0x845/0xf00 [ 66.227453][ T5441] ? __pfx_lru_add+0x10/0x10 [ 66.232032][ T5441] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 66.238267][ T5441] down_read_killable+0xca/0xd30 [ 66.243316][ T5441] ? mmap_read_lock_killable+0x1d/0x70 [ 66.248777][ T5441] ? folio_add_lru+0x28f/0x870 [ 66.253537][ T5441] ? cmp_ex_search+0x74/0xa0 [ 66.258120][ T5441] ? mmap_read_lock_killable+0x1d/0x70 [ 66.263571][ T5441] ? bsearch+0x98/0xc0 [ 66.267634][ T5441] ? __pfx_down_read_killable+0x10/0x10 [ 66.273189][ T5441] ? search_extable+0xb3/0x100 [ 66.277945][ T5441] ? __pfx_search_extable+0x10/0x10 [ 66.283139][ T5441] ? fault_in_readable+0x165/0x2b0 [ 66.288246][ T5441] ? __pfx_down_read_trylock+0x10/0x10 [ 66.293693][ T5441] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.300015][ T5441] mmap_read_lock_killable+0x1d/0x70 [ 66.305293][ T5441] lock_mm_and_find_vma+0x29c/0x2f0 [ 66.310486][ T5441] exc_page_fault+0x1bf/0x8c0 [ 66.315165][ T5441] asm_exc_page_fault+0x26/0x30 [ 66.320010][ T5441] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 66.325728][ T5441] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 95 cd b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 66.345424][ T5441] RSP: 0018:ffffc900042afa40 EFLAGS: 00050287 [ 66.351483][ T5441] RAX: ffffffff81e0e7ab RBX: 0000000020401000 RCX: 0000000000040000 [ 66.359442][ T5441] RDX: ffffc90004b71000 RSI: 000000000003ffff RDI: 0000000000040000 [ 66.367398][ T5441] RBP: ffffc900042afaf8 R08: ffffffff81e0e748 R09: ffffffff84b90999 [ 66.375354][ T5441] R10: 0000000000000002 R11: ffff88802d63bc00 R12: 0000000000200000 [ 66.383311][ T5441] R13: dffffc0000000000 R14: 0000000020601000 R15: 1ffff92000855f50 [ 66.391270][ T5441] ? fault_in_iov_iter_readable+0x49/0x280 [ 66.397063][ T5441] ? fault_in_readable+0xf8/0x2b0 [ 66.402088][ T5441] ? fault_in_readable+0x15b/0x2b0 [ 66.407194][ T5441] ? __pfx_fault_in_readable+0x10/0x10 [ 66.412651][ T5441] ? folio_unlock+0x126/0x2f0 [ 66.417323][ T5441] ? inode_to_bdi+0x69/0xf0 [ 66.421825][ T5441] fault_in_iov_iter_readable+0x229/0x280 [ 66.427537][ T5441] generic_perform_write+0x259/0x6d0 [ 66.432812][ T5441] ? __pfx_generic_perform_write+0x10/0x10 [ 66.438606][ T5441] ? __pfx_generic_write_checks+0x10/0x10 [ 66.444312][ T5441] ? rcu_read_lock_any_held+0xb7/0x160 [ 66.449763][ T5441] ? file_update_time+0x2a0/0x430 [ 66.454779][ T5441] shmem_file_write_iter+0xf9/0x120 [ 66.459973][ T5441] vfs_write+0xa6d/0xc90 [ 66.464208][ T5441] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 66.470002][ T5441] ? __pfx_vfs_write+0x10/0x10 [ 66.474762][ T5441] ? fdget_pos+0x24e/0x320 [ 66.479167][ T5441] ksys_write+0x183/0x2b0 [ 66.483485][ T5441] ? __pfx_ksys_write+0x10/0x10 [ 66.488323][ T5441] ? do_syscall_64+0x100/0x230 [ 66.493077][ T5441] ? do_syscall_64+0xb6/0x230 [ 66.497743][ T5441] do_syscall_64+0xf3/0x230 [ 66.502232][ T5441] ? clear_bhb_loop+0x35/0x90 [ 66.506898][ T5441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.512776][ T5441] RIP: 0033:0x7f295cb7def9 [ 66.517186][ T5441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.536778][ T5441] RSP: 002b:00007f295da08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.545183][ T5441] RAX: ffffffffffffffda RBX: 00007f295cd35f80 RCX: 00007f295cb7def9 [ 66.553149][ T5441] RDX: 000000000208e24b RSI: 0000000020000240 RDI: 0000000000000008 [ 66.561107][ T5441] RBP: 00007f295cbf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 66.569069][ T5441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.577023][ T5441] R13: 0000000000000000 R14: 00007f295cd35f80 R15: 00007f295ce5fa28 [ 66.584985][ T5441] [ 66.588123][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.598708][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 66.657328][ T5273] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.837500][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.867876][ T5273] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 66.876744][ T5441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'. [ 66.885864][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.886495][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 66.900022][ T5273] usb 5-1: config 0 descriptor?? [ 67.332479][ T5273] wacom 0003:056A:00B3.0002: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 67.342676][ T5273] wacom 0003:056A:00B3.0002: hidraw0: USB HID v0.01 Device [HID 056a:00b3] on usb-dummy_hcd.4-1/input0 [ 67.354573][ T5273] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B3.0002/input/input6 [ 67.542745][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.551535][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.568108][ T5273] usb 5-1: USB disconnect, device number 3 [ 71.541688][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.549608][ T1268] ieee802154 phy1 wpan1: encryption failed: -22