last executing test programs: 37.094650729s ago: executing program 3 (id=733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x80089203, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1aa}, @l2cap_cid_signaling={{0x1a6}, [@l2cap_conf_req={{0x4, 0x7, 0x33}, {0xa, 0x8, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x10, 0xd, 0x1b, 0x101, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x3, 0x0, 0xaa9, 0x299}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x80, 0x2, 0x3a, 0x9, 0x3fa7}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xff00, 0x9}}, @l2cap_info_rsp={{0xb, 0x5, 0xc1}, {0x3ff, 0x1, "fd9ae59d9a44d4ba3c737771f4f58b9a91f18640c827f0063d2c5adb46a9cb7dbb43758740cd3af028b539e11c73e629888afffd09146751c8350c1f1b177d7ad93a4327b74ace4d58ae5121df2fb618bf63b3f5b9d6f0c50b4f336167c3c7233c8a3644d70f4b3702c7abe2d6782d87a95b76cffa82b5d996a3dd539ab4589027401ad083f9c4ea06df0dd5a33dfd0a9c9017b34f0b7d580bf1f0e394f2542f99c415c7122b8567cfcf6dc695ca4d5dfb654eb45bb66c46ebbf6d4cf4"}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x3ff, 0xd}}, @l2cap_info_rsp={{0xb, 0x6e, 0x97}, {0x200, 0x0, "d1f62aeb5c5d4f154b716328e3f71d6ee69125386e68e9f6dcaa20752a56ab6b3f49973d7a1b350cbf828732edb250c9cd78949b7e16646657b430e753a63ad2af4ee546239f69cf4271c296088e7e564ffe230effc7d2895f27608a50df35b0e0bf2de2c6c6cf6f660cc09ab146e3296b609727dc06773e4182c879bed2d531998ec96b004b68b1b5cbd544354000bfc906fd"}}]}}, 0x1af) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000006c0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x36, 0x36, 0x78, 0x36, 0x25, 0x78]}}, {@huge_advise}, {@huge_advise}, {@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_always}], [{@uid_lt}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000280)="a1e05b667c038711d2a63dcfa2267415013170ec4c4674021f07d9c39fc1b780c0e0daab040b9ccadc02c9519fdda7a639774643beb7ab9e55e84f7f85ba476f91700cc0ff4cfa4bf84452d1d4b27913ceabd1a3ef0e255b2678541c38793520df053b17dd5b9daf29acbd8bffc3b01828b45d47335839d156aef8b1e49c9b7a76add487e08847312f3e3f61fdcb1ccfad045555d3b94579307edef6382f5b8637f533bd6e3fa3ecc043fbd816cded5a2e699b8280be535305efcf37409100c1e12aabdac3a9c13cc1dd52c788117ffd31f65fc1fb21a5", &(0x7f0000000040)=@udp, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0xfffffffd, 0xdb, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@mcast1, 0x0, 0x643ea41f35e974b6}]}, 0x38}}, 0x0) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x3c5a82, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r7, 0x0, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x0, 0x3, 0x32, @local, @loopback, 0x20, 0x80, 0x7fffffff, 0xd5c}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000024000103000001000000000001000000"], 0x14}}, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r9) socket$nl_netfilter(0x10, 0x3, 0xc) 30.098892103s ago: executing program 0 (id=755): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x5, 0x1, "baff00"}}}, 0xe) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5}}}, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x67}, "8aa4c90289febcbfdf70b1c2e1041053587f8b2a7f9fac1f1fe9fe845eff17625c579c754eb9f115e32ec9c54ff30a65aa8e9a681dd8c4d980118da19473c5498634ce0118233c9fff8881b6c325e382d448b1b6915005dfe3db580812052c0823442ce4186c21"}, 0x6b) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffffff9, 0x88b}, 0x0) 28.198086919s ago: executing program 0 (id=759): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_create1(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 25.801529625s ago: executing program 0 (id=765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x60}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000280)="3c0f9651dc77d1159d67a15145ebd4c2b640fb51128367beec1153bfa1c061ba4ed4c60b37bd1ac0f2d81a11cdcea3b20c15429adbb7572d452487f7aa7664f4ee470ee161ba9cf1a9ef5417e3af22c8c9ccc281e86ff99d34779a3a051132474cbfcebed4f0471b7e8063eae8ce2d8918fe302d753c1ef3646f1866bc1303653f28d62c6c0f7261004e5e84173f882e4cb302b63b420d7055182e25c994ca07e95e6de39b02e11d1ff3ad481fe8fd3619253a730abdeb97ede445dbb25c58f231683cbab72f2fa356bb4a8346a3c5e89e641d76949efd015c2dddbc31d571c7944e26314891535ffed9102c32232885bf95ae5c01f2f7f574e4c40dab3bcd0cab6061f9895021ba74560e266923c84bfc0360a1938dad60ee5e44ff23baf32f77f4f815c802b6dcd87bdf169f98971448da8a6612fe930e97869561b5e8576deb58b2cb4281016c541a9091829441cbb52e63917d11b1b7b9ded3a094a69d93ca9b2fef23b7d1ded63c6f25a1085f22ea2c6bd302aba68fbc32be6cf0378ea2c1fa242b9c881c9cfd95e49ae34a5ca7e2c70f6a10adb470aa601c9edb1597b97f4c486b814c5ba628d3fcf476c1cd68477aa79e2deb12f60083d7f02e95ff8c6eb3dc943e2708c055b80f6e018653157d797e87dcc5bb9db67131cbb83b4ecfd7932ea1f8f33e83fd25d661f4019f1039e97035e4059b7821b77111017a485789451e3632f5c8e08b6bbef3e19d4cb9ae6f6458fbd7275c6b2c8c8a046861681f0dc0da0f78c37971a732c18ea8c74469183a0daec6fc21b8d1ba326f5d8abf57999466e6b4557c6e9d84b6a73fb4defe48f50fcc8f639f5d9a840e0749c17eda4b7f3f094f274e1f5b2f188c686953d3c5ed41728b75bef02afb11e603c2adf6b138a3911c6b9867d6438c3a94ea9bb70394ffe2f4b661c1858d8e11483e4beef1a87025ac9e5e5ffe78ff4dfdde618542ce31da7ae9901ec30e0105a909192815387b8e74079077636dc0bf5c1f178a9ee051d05d1a6c2f6d1fcb8105eb933e53a6ea964e26bbeb14f6490b40699a83d9496ae40563949c2c4ba0f5be08886ea6cd0c37c522ba6bceff91faffb1627cc3b829f41e8cb6c5d04670503a8f7d21eb2a1c872a7b7e18b6b0d22eca51ffcd3c8455780d7a20a74f63649700705b938f49839e0126fbfbc9feec5698e34a5506f69558dea9ca6033aa2ff1744b5f3f60427f60ed4ad8f66cc0ee31d095bd823aed13ccb6af15ad645b53d28098e047ccdbb54328684e39d0409ba97d170b8780184aa2252a031ffd37f8749102d5f36acfd781e3600a7b52160f235213f47952832682d664583c339f0ca6eb91a8fdb431f2e8ac59bfcc8ee9b00a65cbf44694e93b273504c3c236d05ef84efee011aec97ddaecfa180214080215deadce5a4dbdb6984bbed11c07b3d15ea3f9e9e6cb44cab63fac8c689820c162c22750031645fbf74abc233e43bf2e27f98b1f155858f750fddee16fd53e48f7a34f0df79f7206e242c832ef4a82680d7c992892fcdd7c48b79178457db057653711a94503c52d88397a47b26cdaff679fef6c8f733c298a21be34351e278ccd3d2dfacfa4b83d56874ab50582f7c5569339b4cb4315fc8b8f3021bce025eafb9ac401f882da897c404a201ff402b0f9333d6fa51ce7fffef7a199a0a3b3df372870011ee8799b67e483bda400601e59e4d0ee40f8918c75a92584b46c4b2b740f3e656eeaf5a47d5e6b49e9c89fcfb3cd12c1a57e377a5792cd6c9a06c20af2e2e9b6e3a6aeac71904ebb9d8fa2194a54299cbf03bee26336a91ecf940700ce3c047e2bb5fc1f459fd0ca507699256b6bdc4f653c91d470feda3387ab037f8a461016bef6aa28556a6a0e4f8ea0c04ee3368d609e8a095508feb447e5938da977161c02db66c281ac4c2da4901ea6166ebf7f50120ffcf3abf4e516b2fed4fe18016b30479c314717d784057c8f77c65dbb4fe5fac03f68d206626bb555258fa79206f14f988d0906afd7702044bcea6bf557914205788ba23c45ea1de15949dc7e92759cb23fdda7c102cc4ad2a5538388b0616067d989b1bd792965ee92eeeea252292d0b5d4325bfd2e80fbf1eab0df086324aa039cde6ada4192a64484dcbd89a42bec8d9a08295ec69d2ff369cf5b7dc20b37d308fd19aca0db39fc66b5e49a2ee432940b9c78fe5516fa1adeb60e502335ca7e5cc9e5f9d583926a48b366022e44e77b80974c19d69570afccd892622c5887384154f836c225890b69efbb190db1e55225413da1bbbfab6f230a360fde747a61c012d38b4c5c45280693dbec396950e0646b0ce3229d5e025ce8a3716c4883fec2e26f9465944c5861a166ab3ef5700a2823004f6acee1e63a128d02502cfcbe0459a7ef4552178aaf3fb153b5a56708db205eaeeb2c51d48f838480d05b2c53d619cdcf721f3d6a0e2817e5854199ebe61d366c2fb212a452527a36d953e2a97ec73467bb30ef9bab86f0ee8080cd41d791707cc981cdb5d7c8a3a7eb729bdc6d1411b368f1cb1375f0df6d6c59a4fe414128f3fca6ed2f8ab3c4c899b7fcf9fe9de4b43519d9a15bd2ac554ed2800254337e84865f708d9719df806a01bc9cf4bd7e05ba42b62fddeb73f0ac97334e514630b21fcc571db0bc89771949901b859fd32aaafc3fb852e35228bb2e466ebbbd2f8882a5feabdec458d2300276a7e0421e455de2d556b6bdea0f50c6eb09457983449d5fa04136a50a3ca51796155ab81e44bdc407bc7dab844d30168914c8d91c7228574c78e18b37b654e6a536338a6eb00a1b0991c60f9a47854a1e30d543820e274b16b9dfd9ed16352155907906836d2775146b9edb82e95bc2ecb339e9c4bb79cf7cbe326aec79f2b0d845fbfb65cf1ea7975243afa1cb01a69689a6e9344e88162c105bbe8bd58372d74d896d18cb9a5b901c0e74d8f75b6a7dd12c4a9b1345210bb4522adb1f89f8e62cd0bf1db0273ca4056a549383ac469f56951e1c44a2da362fef296945fbd47a4c3b6af2d19d59b8bdd39546a86b4bed9ba80e8e284195070e6e6143755e85ac9328a1a6f50c2500375f44d68727277e074f2c6bf4dace82922f49200657e80f2c5e4da0556a165b1a30e1be17fe9a69bb569869ca0469332ab6a3bb62c1aa7859379c6458de7d7f530ccd77711fb5c719a1307d815d682d667a697106801938e12334d7f7926393785b36752c0bb53b7dc38945ee2c096b4e8e2bdde3064870f10ce1c91a0d814a1bfdf3be922f69b9b3665aaa40fb607c26e5d82072263dfa6ca364b8b65db5802a48639401271d5ebd6acfc9387dacffe27e88bba25b3e03ec9860a2464424ccb74b53196ba0473abdce512bd741e4f27bde1e0c7ef638130c7aa6c175467dfdbc10ce96c59fa0d2bb8d646eef887a793361985dd0605835dc399cc2c3421b4662e11ac69247ee97f0d6a7263d548cb2a7413ec53098e3b462c4cd32164790ee608da339ccad9b2650729effb011b1240bc6ca68d7618ea5ff5b29c304c63411961e08cc7691080934065714f6fedd295e1765afb773965da75bcf75cb6422bed4246478d1dd7b128e5ab689654732b4ca2d65731a3391ca9635d1de03b233b5e8fa12690df99f5d39ca2963f1615a0a3ba735aa0378c49fed4dd51aa46c05024226701fb5cc447edfa03572dff1647f50043579d9227cbdd7b3ee2cf0bd92189ebe0162076537f14dd66d1c2c15c0d30f2227cd1c1c889d26b924204a7ee947361b7fd90e258cc1c9f5aef5499b729e496aac941a3866ee5c28a620094b189677b83a9fa94ade296216c4a007f44ddfa89dbc2a408b2e0b78afe4674d79f8921d0be4c27187283a4980d101e4f08dc0dd89e6e935a117d761cb65608d19da7ef7910d72c4134f1a5dfdd95204a9dd428ff7518e2b0c3dab31d5bd4c211c0f148892fdecc6def19dacd3b7c45099f6c4ee1d447ad0b9dca770cc0b0bf37ba24cf5bbdb8d61b4ad5d112e9fabd27ce55e7c8cb5753ab871e894d62e72327ee0ad17092ea6b9c93fde312dbb56680c896b8caba786afdf05259204882d154394ecca867951758e5dfa715109dc58fa18e096ba9be4784fe6290e2f9f7729bd5fecd0f2d0b9fc75c63bf38153751baafb002d0e4bf20f4c2fe9653eae55430f1bace6bcfeadbb379724492be1eeada63afb050063eceae75ecac1c2c91af43cb1051afbb717ca87b5ebd9d9dbbba9326c74602b0863b8b9aa34b4f052564852fe39e1ac20ac88d673d364c62a54e907831de09ffeedd32c592b53fac09c941fe040339acdf3d609942e71d90bfaa0bdceb655b7683e85aa8364526a15de0bf1885742815701186be03d1a1fbbcb2db4afbe13b024a2eee06aaca84ae1a462168e7b7c85592c0632b1b5feebfb15711f983ec48ca8d62a4026e739f0a386ca9acb5d9fe12489542ae18370589ded7457f86f0a3ff993951748e420532f1d8e8cbff1daa923a9ee07ad1ff3279390d873c79b84069ce432b105b389d89bf7d110ad3d36ad2e01be43baff999aa18e56b77e6ba11c26c7c037e57ed83748d2ac3fbed9b906626b4212e89c912eeef520b51fb02732c8c3344324ec94fdfa163a9279a29fd0040699457b642a53e59be1baf137948e303ae4ffc4dffc1ae6339ff19e0ac61b2fa838a155bb4228aac890e1ef88edefb50e7f04151cde56405964994fdbb24a79d9b5bde4dce5336bfade89b265e1296a8ca2204341f88f7048d50823974f2122e8c63e0ac8aa819ce64e4f690e62de03842843edf39bac382c31702410d1b2697fa51bedc3baf1b50420c15fa97ad45bf54330c2625f7b64816916a4fe1ae5bd5b4842646a12cfff018a63eb3c8e802e5e525fe031f621a9d60fc910de94b2bd56bd729f46e1352f04046a8c39e8de23ddd0c3695cf411c7b6c1eba448f21a7dac562e2266cfe20391dcb520558444fadabb284bf6cc309608a280a1e0b307fcb538fa8f186de86305b135a2a6a0dbd20342b93ee0a2d8b938ab0d57d7e4932bfb728c140dfbddf993d9dafca30b29f80a8f877c178e0b339f0541e6fa8495078f9624efeee6aa11f98bd11da006babe32835fe299cd3799b45ddcb3a40201d5f36325f3b80822d46940581604374e1ef6151f695eb36b2e31062e8f9c9920c1e98dcc625fdc97a6d8d9f03689d839e0ff2a3870403dd0dfc105a928922ac1e57461236ddc721b36923608d4b8ae4f98ac4ba2ef0cb50464511818ef57b1e7bc34911405df2df1471ae5a7f7d55b4d88d7a6d459d93784cbf99ecfc81c1b1d5787f8c256e9a5820f4c0eca5aae78fbae02b3af1252b9ff0f822e9cb70b0eb7fed8e268484f1e5fc17e8c6a2c35e75ffc2f764ebe08e109e044266e72d943deed80570da8c88b54571fe02968f8f41b5afc2357fafc3534b095d398b4b5b97d954a2d78240d466cf0645415021e3d4d584bd2bb0184dcd0b05c8c0573ad800ac147780ec40cfda2d38b7f4f045822424ccae327f5ffc2fe56746aee62dc2f56e647a76adaab775e33bf12e5a76d8c5e3f30eda2e930a61cf11b7229dbe8c4521396ad0f055583a9cbbe4ab81f09cb955e9794b465666bf2540b9a699013d9d1285eea467b899e51faa29081175225c56bd4787f07a18b561d788b09b8d997c4bd3df394a814cafc98ecbafe7932f077029ac8bb34a6550a136862b3b875943656e64518092512a8f089f609d9458b3d064138d29a4e60c825d137ad48b0e894b6a99215859f4e100df4aea2986ba777acbe43c05aacea531b290b84626b1361b7b12a45cecade48d69d5af3fe38faa4584072796ee04dec75a2e505f5b5262a02913661d37f7d4fe671822ebc2489521e13f0b6ff66d5b6eb8e88d716f8eb4e3dbf56f735e1ddcc82305f67916e06276175cf238258b6bafd38f109e03c0293ddd565dd81cfdac8067cec9fd9d2a37284a6f68fa8c29d1d5e298afe5c111ba188c1bd986c7d89306ba463b06dc761f8d74d7e43a52ee4bc82f0d1202db072e7bef9a0eacee439223ef768c183910378b3d76663d4d5e5aabd9e95d3909404e5eb73be2697b6b19b9c4961376c66b52ce292992424ce39870a1892d5618b2d4761a7553eb1c83fa7d30b793f82a3fe617c5d8debeecd140a19acc466ceb378ff0fa580aaa9f03ee99f29e35632eb56b1747b503c9878b9eddaf53a11fefcf0f98d3aa8bac88d400f5b021d113bed05224988dfe46ac4796d940ce004f7f00366e27511a98f7acb3cc6cba7f1d01b04464a611741e37b269e6255c9041d5aeb9b619eedf320c8c5b71f515e03281d795adfb08077526ea09b149282603d69ed74ca0ca5ca9ca6756098dd689f568e53686c6be9b3883f6befb4c692c69c9d2e48308ea858ff1c8d186ba5e6789daa0eb2289c9c8a1b74f13a4db12144ba57e3271f60e67bc9687fb1590846a4ed6c29537d8028238cf3a915a736a3015b4647ed8bcce914bdb3102429aa99ba278750992bea166ce03d2e5d206e1532091a78abaf6ff22600b9c9acf6c4ab3da9bf2a8b99c850b5410f0a4241f1ddabcbd711ada7c9836961bb21ba67c10f03578a29f73ab61d4309294575e092af55c21481bbdbdb9e6583b8e4875242af8860af77a02536357c4669ddd655d2501a5ce38ccbf764b6d61cc1b3fd2bbd49c74d180f33dbe4084cd37ea53b5a045753b85e378bfc061263e6cfbe971ca6b13e84b6cc0b88bab3a531726d50ef11b48f8831cc9117b3632f9565fbfe10142e243492b48fbe0fa22aa1a5d78a516cbfc6a4903dec879e6a1e59f64d07b72a40fb275dda67ce15e09f4e6675dddae406a2c5f90db2253b289491163404ba0ae710c8bd3f1f2afa108e33926fa324facac76aaa7f0f82ccc4e541296f6d54892f98c31c933c8315d3c6fbf654774b8ca83bd1ae9515ff57fef86c02aa969ba3293a1270f4044040fdb8279b322bc30aa6609e74c19bae9ff4cf0b38d1188159c231f9c0860e1959c78d3297c2fe2426a97e4bd9ae8755a5d0ef6c85536cf0492892f5a3a4f13747915f5ec6af8ef265cf38b43e018c7e849ec0da237e004d67158330cd708114dbfa7d28602d4293fcabb93e881dae70aa64432ffcaf342c9703849a9c7817023f05469abbf45e43e9183b7f103e261eabf2d2f3775ce6dbaf6fd7e42dfb0d9d1805bc8d0a81619a399a7e6504d2946473d07d35c3c71eab43735d3119616a1e0eeeb0c3fcf5f8db4cc173adf6f56fadc3431faac0badb491b735861696ca7ac1f56d06a4253ad1e75ddd9e0a633b29d69819d2f6ba7ad7f92218597fb0212a6277b8bec151841cd4ea484705a5e7fc12955ab7b37cf6bc66cb4cdf7ff1ded75c50cd4fc3995f176969bdb4c627c256e0b7fd836fc44b9c2cf64532d6665384fa66b11fe66c7a56ecdf4f46a17515ccacaa1030a70811750016916c2ee354c428bc7a7fa1f996e92ecccd7a7c2894c5ca3318e361ce78f8543851c58b63842d4b616aaacfdc305068ca1607827586f7bb90512184eb9101b9da065538e541a0a26f8d641a8b2b6eb22f328262bb9e713af7bfc8c3b91ae085b781f3521106b5f281911ef9324b6305fd30b8efdba792d713e8416cfeb060cf97106065286b37f4ffdf4b5724b0c3808d227f8af45e436063da0d6b75a0ad76f70f537cb0e01c87df8dff3a54982817634e78ea5bd275dcebc0ca21029d24cb46f7d31bf798979e1a7993ddaeaf45691242f7866fe90ba4aaa5dfe6b96ea8a963f5ef7efaeff3b31d27bce8b6380366b0b3601c28c54904eaed724990d635897f817756e1b919db882c89e3c9c4421f671f79b8489d3dc374ad2e0db282ab8651eb6a82dc0a29624306415f90b1bb63eb1c0f5f73d8df8b5958320006ab35e2f2f97141d189fb71d0853e8b7ddbb85dad664a3550ad29e98f7c2f9cfa8f01e00b633e596acceb31e2ca46cb97e359ab414a6a752cf8105b36b390e9ec7514d33e47d97f714bca822c7c9400b2e3eff2534f0164488955f6212f16c125916ab97d0c655e3bcd30c3bc2cabb6818f43461edd60a0a5f7275a8fb3e93cab3e4d604d36600e01fcb364c7f80099818f52f1e280d74372f174cbcf14259e8b6240fd9f99598d50e9ab0011b14a04218a56058702ff53b923c58ccdf01e77638e31267f0a33113d5228c0bca8afc3cdadaa20d1c7861c3edeccaf363fe006d9862b0e6c469f6a9720f98d90c471c76ccaec144306b2914533eae15fc67606aa2cdeb1a81ef375b3f8d3453d783e9f7a5c981532399be6579d36a581002c469df2dcceef19952d8914d6e6640e1d2932e3becdae85e067ee30971f49c52b1443903792fd07d5cef95a4372c6e1836d1a3ddddfea45c94f0668065bd44d017f92b39cc9f8a887e7a5e82cc4838649a2ed94449aeb006e21fcac08278385ef64d06215fac8112f71a65aeaa8ebaeac1c880e444a9005263cb693d4c64c0964fe4ae15fe90143e6ffaea9e574ab1b6c4a4f4ee2ce201e234dec934a0fdb1f1cbfa4ce014d15da7eb033d6aba519cd2a72108ba69574f7f48ee4b32e148186cab161f278f018a4e37eb4d57ce628ca1d8eb51fef3e5063cc0e54a2c4a43370aa2a3615744f0a3384ac8138e708091bae2c3fae938e64093a1b3bfcfcbe33afc2cf75afe51896a98f7da07079bed20be4f60bdf1143ee69d1ddcbc7d84b94921bd0abde6a10b91808bd711892db268b24bbc6fef323ae0c6749a7d8e59dcaf9e289184f20d0d95b879ad901d9d7e112d97e5b4a11492f42ded894ced2bb40b3224331ef7450fe2a5ad8eee8deeaf2c95087482a0d564533865c6ab7b6215c7c9899919de282916a85988781160043e00917e239d3b33903a72e89049f07a3c1dc91dbba0860da857c5e1b1c57073b87d59d4fe8151f2b757b24a85a313a58030ad6b15debf3ccd506f58b9817f60c81204b41b3e45a71efe8556f29a04cfb4e68a8f1f61d8ed8a9f01df8ffa3d6567d75cbb58c1bfb5209863ed046c5b4f8279311bb71d41299981a786e64bdb966e273907c20cfb6df1dc5cd5b6c20affdb211be7c37ed7d898dd369fdc555690f0559889a97f3ae166caa4df05bfaf2a19c92cfe8a4b09c41a1821a417b1e221609985ce5b16452097441de380fa75bd80d59767138190163c57067ed6ab536ca5edc5427f0bd22d5de914809860828af1dde93177fbc0b5d1b0280b6ad297c02e0e9b2d76f7cccc85ab98b008edcea4e45609cca7e03cc5cc1ea4c17b5c9238dec64ca262054f36049a7790b2344db8c2aeca5ff64e3de305be7217f92031de9051f92e5f5a77cf9f311bd895f5f63ff717f6a2da09de69e58ee97fe559e4b676798b8f6d4c43dacfbf7ddb1430e7ff5723d199ab6da30d6d0bab9157becde82239aa39d6207480a8e26ff2b9c783e403193d483f511e75bc39b7aa2d85348791a41c7de6b763ee1569c280bc16a88d9ba2f8f9d0fe7fde19b192b85d863030e4fc9d17d7b3315a67bbdbd173d3951d2d8d80e0ccbc9fafb99f1e24fb2cd7966bc046556837b076a35a23c2ec5b649c8e62f88339100763bdd9b02619c612fb3d4d9a4920ba26a17c564a9599c4bf475e4690202f73f55284ff5928dda65bdfd28c3bce6dcc8330f3a997f1be9710ad6b03095b99b70521ebb229561ea0d36a5dcb234cf0dbb2811b7b751d835b36099819fb12fc87839e67e8b993e9f60a244098962a40054d6e94586779c9e5d420d44f97472fe349fc3285a12f9084b4a06ca108c02afd505a551f5621446b644e28cfa4b008956d31e1083b197429385bf607cd587674f82d744180ba443244f97e2c332bdfbfa4ee7d1739527ae98c0054e86e51cb80a390767dae9724b8c5c2aa1618543518dccadc0f32b21d4f6a0334568552edc82a917c1674c4f6f62cb2b777b809c430005953e9ea001832ec54f226ec920263f16e3e52b8c5e5b8e02cc46a3c24942a8e30c9adfa52577bf61fd0e414fb3664949c96a2e2ea234353ecb579e35f4ffdd2cf880a286ead01f3b69b304578576be4631af042b1b6a12bd538470cab38b19184413386eff02b2b64082347620ab954194a00a8c281b8aafe7a5a553e0a7cdb097d4929d2d65c1eb2f720e1f95c6f295e86aa166363de4d774f27010f0e58e06608d7274f518649f4a021edf41a8054fc72fce0d11f6a693f73fcba976244deddac5db1761428f8bb62f9ab9068239a749deaf25d9362e8d334368219bf7e9e10ac121ef655e290e7fc544ffe84a9a985ad3c01fc89a1336d1c719ec4a3fc3de6cb33c0a24a3b8dbe56c3f5aec1281e25b3266aa626b0c08807fb10cd9082320b2fc10b165c15e9d529518203d7c574e5fca58f7e35fc9913ad61c4d1a7c6144e2bb4c7de06fad9bfad0bcf5b8700747619abcd04ca01ae721983c38e986edf924cdb165c77c99c6912d2802d556f630dda8bd910a4af6289baa85366d5f01bd918a3398678ed988d7ab618b2fa9dadceb3154ad879e70989b5f07c7bb051910510a000350447489b327263f1eab0e9fbe18de4ba9a978fd21e9b34ea8bae2ecce53c90cad7199eb9c80a170aacafb3733613d77b5be859dcfafa40db83b21fdcfa4f1a82d2480345744cf6bd171fc8f32ff2435361ba30c9b791045883e1eb8a9de8557625c1fd2974e9ca1539ac29b2284bee04d49f24fbea89ffc55e76069b4cfc78e59fa2c11560764cec5e4422b888de682fcf11e893eb41b5b72cb48040f53f57accdafffdd6a32c4b2a9d2579054a089ced433ad91376505939b9759d86ff3bbe547a666a0a90625c5e299cd0df4f5a0fc0567f650c35ef71447e3a03cbbd4ee308c9abf436ddf9389cb7a9cb27bfb8d5cc9dcca5e076e1568b0cd5d25c8db83e7ea6d9d94b9fb78d3e794c4ac055351c6e6301c70d23f1dacb37c453b3f686dd4e5c5fb980555fd3fa3dfb768cd9e0f1283820819042d38217777b930cc5ff6bdd77a9b40fddcf39d3abd10968710a28e612fbf526c855c0515f785d1ca573194d9bbbed0eb95952ee8e8ee6e877eb964e09ef171163f812c5a1889c60fe9c2023ddd4a87e5962a57f8f8eaa4863f4a0c487875f54bf2900c5afc54ceda97d4be126009d4e83b303a50c64a3d8cf72be14df11d1c4ef8f768aee7b922c41542d3fa51f204652d03d6bbb9bd0cfecaa9d2a6082e7e9bb9d3b6582494fcdef00bfd11ef3d2fb24562ded9ccc9acd23b53242d25be5cb532b14b5fefb8c86743d99457a39c7759c6b99c69354376d195e04de988efb7188d7a1132b73701871bafd98072993f53626c730c268a2fb718890284585fb63068bcd33fbfb8c00bf71477f01c0f72cf2ce032bf25466c5607286094d10441317a58a3fedbc221368755b6c5a9caf1c4c07736c5fff3775fbf11dc3c699dcd6c208010dd07b5d39b1849908e7f48b97b3d3a3ddc1d9bbfe9e7652dea87ba35823661be1a08d5e4f390b22c445bbdfa4242bfa72c23ef74c11dfb36784329c175fc93c42c4c50d825e27d51a34b1a8206190e2114c899e16eb22a27631f4ddc9e54f2624cc244fa0967b03975672d9ee4e", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000000180)="02631066eddea836d1e710eff593d39ea1a29442d40290b5f5c045dc91"}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00', @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) 23.383707999s ago: executing program 0 (id=769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$hidraw(r0, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='\"', 0x1}], 0x1) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@updsa={0xec, 0x1a, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in=@empty, 0x66, 0x2b}, @in, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd}, {0x0, 0x0, 0x3}, {}, 0x70bd26, 0x0, 0xa}}, 0xec}, 0x1, 0x0, 0x0, 0x2000c011}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 22.446073057s ago: executing program 0 (id=771): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, 0x0) 22.057116797s ago: executing program 0 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x80089203, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1aa}, @l2cap_cid_signaling={{0x1a6}, [@l2cap_conf_req={{0x4, 0x7, 0x33}, {0xa, 0x8, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x10, 0xd, 0x1b, 0x101, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x3, 0x0, 0xaa9, 0x299}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x80, 0x2, 0x3a, 0x9, 0x3fa7}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xff00, 0x9}}, @l2cap_info_rsp={{0xb, 0x5, 0xc1}, {0x3ff, 0x1, "fd9ae59d9a44d4ba3c737771f4f58b9a91f18640c827f0063d2c5adb46a9cb7dbb43758740cd3af028b539e11c73e629888afffd09146751c8350c1f1b177d7ad93a4327b74ace4d58ae5121df2fb618bf63b3f5b9d6f0c50b4f336167c3c7233c8a3644d70f4b3702c7abe2d6782d87a95b76cffa82b5d996a3dd539ab4589027401ad083f9c4ea06df0dd5a33dfd0a9c9017b34f0b7d580bf1f0e394f2542f99c415c7122b8567cfcf6dc695ca4d5dfb654eb45bb66c46ebbf6d4cf4"}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x3ff, 0xd}}, @l2cap_info_rsp={{0xb, 0x6e, 0x97}, {0x200, 0x0, "d1f62aeb5c5d4f154b716328e3f71d6ee69125386e68e9f6dcaa20752a56ab6b3f49973d7a1b350cbf828732edb250c9cd78949b7e16646657b430e753a63ad2af4ee546239f69cf4271c296088e7e564ffe230effc7d2895f27608a50df35b0e0bf2de2c6c6cf6f660cc09ab146e3296b609727dc06773e4182c879bed2d531998ec96b004b68b1b5cbd544354000bfc906fd"}}]}}, 0x1af) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000006c0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x36, 0x36, 0x78, 0x36, 0x25, 0x78]}}, {@huge_advise}, {@huge_advise}, {@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_always}], [{@uid_lt}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000280)="a1e05b667c038711d2a63dcfa2267415013170ec4c4674021f07d9c39fc1b780c0e0daab040b9ccadc02c9519fdda7a639774643beb7ab9e55e84f7f85ba476f91700cc0ff4cfa4bf84452d1d4b27913ceabd1a3ef0e255b2678541c38793520df053b17dd5b9daf29acbd8bffc3b01828b45d47335839d156aef8b1e49c9b7a76add487e08847312f3e3f61fdcb1ccfad045555d3b94579307edef6382f5b8637f533bd6e3fa3ecc043fbd816cded5a2e699b8280be535305efcf37409100c1e12aabdac3a9c13cc1dd52c788117ffd31f65fc1fb21a5", &(0x7f0000000040)=@udp, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0xfffffffd, 0xdb, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@mcast1, 0x0, 0x643ea41f35e974b6}]}, 0x38}}, 0x0) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x3c5a82, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r7, 0x0, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x0, 0x3, 0x32, @local, @loopback, 0x20, 0x80, 0x7fffffff, 0xd5c}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000024000103000001000000000001000000"], 0x14}}, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r9) socket$nl_netfilter(0x10, 0x3, 0xc) 14.157717162s ago: executing program 4 (id=782): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2047) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001800)=[@textreal={0x8, &(0x7f0000000280)="66b92c0a00000f32660f2cda26262e0f49d50f20e03506100f22e0f3aff36eab643e0fc7b40c00baf80c66b84769688966efbafc0c66b9391001c00f32"}], 0xf, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="0f070fc7360100baf80c66b80ebe1b8166efbafc0ced260fc7aac1000f79100f001d0f320f01d1f2a766b97300004066b8b20e57b266ba000000000f30"}], 0xaaaaaaaaaaaab9e, 0x8, 0x0, 0x8) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05027a0c"], 0x7) syz_open_procfs(r1, &(0x7f0000000040)='net/sockstat\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 12.25016829s ago: executing program 4 (id=785): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 11.560180784s ago: executing program 3 (id=762): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff1}}, [{0x8, 0xb, 0x2}]}, 0x2c}}, 0x4000080) 9.591780316s ago: executing program 2 (id=792): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x168910, r1, 0xa2aa4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200c8938e999d23844fa0dbf24ae0520029a4459cd9ea5fe7000000008500000083000000bf090000000000005509010000000000950000000000000000008500000003000000000000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x100000, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req}}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="11ca00000000000000003f00000008000300", @ANYRES32=r14, @ANYBLOB="14005e800800010000fbffff070002"], 0x30}}, 0x0) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0) 9.070804449s ago: executing program 4 (id=793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fcntl$dupfd(r1, 0x406, r1) recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/124, 0x7a}], 0x1}}], 0x400000000000358, 0x0, 0x0) 8.914311434s ago: executing program 2 (id=794): unshare(0x0) r0 = socket(0x29, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x119, 0x39, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff00000000711025000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8915, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000280)="f1a87b6639bcf99f7baa8270457131fe2d0cd065cdb015cec3eb85f9c37223a835933677eebbfb316711f1af969451a9d8eab48242f98d", 0x37, 0x400c080, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) 8.839012424s ago: executing program 1 (id=795): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2047) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001800)=[@textreal={0x8, &(0x7f0000000280)="66b92c0a00000f32660f2cda26262e0f49d50f20e03506100f22e0f3aff36eab643e0fc7b40c00baf80c66b84769688966efbafc0c66b9391001c00f32"}], 0xf, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="0f070fc7360100baf80c66b80ebe1b8166efbafc0ced260fc7aac1000f79100f001d0f320f01d1f2a766b97300004066b8b20e57b266ba000000000f30"}], 0xaaaaaaaaaaaab9e, 0x8, 0x0, 0x8) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05027a0c"], 0x7) syz_open_procfs(r1, &(0x7f0000000040)='net/sockstat\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 8.507605407s ago: executing program 3 (id=796): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x5609, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}, {&(0x7f0000000080)="53000000b79269c170b9291ca3e588726b9dd721c4dc9d273d33512f6d550e973041da17c27124e49606da8454534e33d8214dd8ad644686726bfbceec85732331", 0x41}], 0x2) 7.356094123s ago: executing program 3 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 6.935570936s ago: executing program 2 (id=798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x3f8, 0x7, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000104800000020000002c000480280001800b0001006f626a72656600001800028008000140000000000900020073797a31000000000900e3c2ed49688d1532fff5bb35e45499010073797a300000002b090002007379519fc5f61216977b00001100010000000000000000000000000a87b1970217a1b981d76d5a8cfd20ace7a8fc435c321aab3f5c5f00d88579abbb85c72699bf4d91728b0d4ef262d9126643a3167b7f8b66957123bfa80cf163fd9c9e3d04f4fe96258fe115254e7d2d09502607380eb4cfe4a1de25cffbbae3a993f5a078f71b7b0b8f94eceabc94a33b4de5358b591668baadc482058a7def5a4ed377fe269e7f18ed9e1b503cc333f80396d8edb9717e1bfba32fb07460f7e51e03be5192491fab61cf77562c9ade8bac37eb2acd03e42d8b121e7a5f39ec5d6767d9b4ad8ee9502b2728619ab423160ee8cba10dcf13e6265f0765a8d4fa3f51ca8cbdda6ca93665aee5527c1e7c453b0807e4"], 0x80}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, 0x0, 0x10040041) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6.526829107s ago: executing program 4 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e9"], 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r4, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000380)='./file1\x00', r7, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009c003110c21542002f850102030109021b00010000400009045a00007874be000a2401000000020102"], 0x0) open(&(0x7f00000001c0)='./file2\x00', 0x24d40, 0x0) listen(r2, 0x0) 5.816087421s ago: executing program 1 (id=800): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 5.418824641s ago: executing program 2 (id=801): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5.410227954s ago: executing program 1 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x6030}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 4.24823546s ago: executing program 2 (id=803): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 4.142763565s ago: executing program 1 (id=804): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x0, 0x3, 0xf8}]}, 0xe}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x9, 0x10, 0xffff, 0xa}}, @void, @void, @void, @void}, 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmmsg(r0, &(0x7f0000000b80), 0x3, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) 3.249261734s ago: executing program 4 (id=805): mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000400']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x140, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x617}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x168}, 0x1, 0x0, 0x0, 0x804}, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r8, &(0x7f0000000300)="90", 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x22) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.126896562s ago: executing program 3 (id=806): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 2.726509446s ago: executing program 1 (id=807): socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744d", 0x36}, {0x0}], 0x2) socket$inet(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001a00)={0x2020}, 0x2020) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0138f677586fe1b7f0d5353435bbfd9fed66ea4d74e7bf865e41c96a487b5f6ac6d3fc89c12e95db48b6390f9d490c783a51bb46e5b3450f6db1e83790c0274372466d26a078e5f56ac2aa1383e37a935feafae89beff361b50478eb9fc879a9ec995b6d17a6f18944249f059511502a472f5ade65924ec009f91a671f01d6a0431080c1071f2865342d1868526b88c7d3b58dd1e360a5292049f3c645de6425327a631cd686ddf7ba0c37cb9aaaf50205804a19f89905b67b15507e5d34297912b1871cb4d2a548ca1d2a454d0000a1b83a6dd819a6d249c70b2e2b672702cccb97b095d10e25faf0d9d3467d32c7bafb7a5d99c737", @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) get_mempolicy(&(0x7f00000002c0), 0x0, 0x0, &(0x7f0000502000/0x1000)=nil, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) syz_emit_vhci(0x0, 0x4) 1.80732254s ago: executing program 4 (id=808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x62, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x125201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000100)) 1.584493649s ago: executing program 2 (id=809): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r2, 0xd) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9}, 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000500)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 506.543852ms ago: executing program 1 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x3f8, 0x7, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, 0x0, 0x10040041) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 3 (id=811): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x675, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000b00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323441b55cf23ecc4"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xa8, 0x0, 0x10001, 0x2040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xa}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): le returned -22 [ 224.722451][ T6701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.737026][ T6709] bond0: (slave team0): Enslaving as an active interface with an up link [ 224.757430][ T5180] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 224.781283][ T29] audit: type=1400 audit(1721447237.820:338): avc: denied { write } for pid=6708 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.781801][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 225.104048][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 225.229331][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.259545][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.334311][ T5180] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 225.409392][ T5180] usb 5-1: USB disconnect, device number 4 [ 225.746568][ T5140] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.776141][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.841429][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.864491][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.954605][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 225.964791][ T5140] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 225.989478][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.006116][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.016458][ T5140] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.036889][ T5140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.047723][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.270030][ T5140] usb 2-1: usb_control_msg returned -32 [ 226.284261][ T5140] usbtmc 2-1:16.0: can't read capabilities [ 226.322513][ T5140] usb 2-1: USB disconnect, device number 4 [ 229.393835][ T6765] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.403994][ T6765] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.412743][ T6765] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.422522][ T6765] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.758417][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.776303][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.785155][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.794498][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.802505][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.813404][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.832623][ T29] audit: type=1400 audit(1721447242.870:339): avc: denied { mounton } for pid=6775 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 230.314408][ T5140] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.471339][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 230.521357][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 230.543449][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 230.604426][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.624219][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.663984][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.696832][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.711119][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.994495][ T5140] usb 5-1: usb_control_msg returned -32 [ 231.000684][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 231.028365][ T5140] usb 5-1: USB disconnect, device number 5 [ 231.428780][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.447326][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.463316][ T6775] bridge_slave_0: entered allmulticast mode [ 231.476104][ T6775] bridge_slave_0: entered promiscuous mode [ 231.522661][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.573710][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.604416][ T6775] bridge_slave_1: entered allmulticast mode [ 231.704083][ T6775] bridge_slave_1: entered promiscuous mode [ 231.827966][ T6800] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.837344][ T6800] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.846362][ T6800] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.855885][ T6800] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.904320][ T5100] Bluetooth: hci5: command tx timeout [ 232.047994][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.112268][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.279498][ T6775] team0: Port device team_slave_0 added [ 232.330516][ T6775] team0: Port device team_slave_1 added [ 232.480730][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.518961][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.589893][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.664939][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.705873][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.829849][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.103671][ T6775] hsr_slave_0: entered promiscuous mode [ 233.133739][ T6775] hsr_slave_1: entered promiscuous mode [ 233.141995][ T6775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.150815][ T6775] Cannot create hsr debugfs directory [ 233.311244][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 233.320119][ T5149] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 233.526142][ T5149] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.585818][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.625569][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.647822][ T5149] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.664840][ T6775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.714224][ T5149] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.724024][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.743645][ T6775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.766449][ T5149] usb 2-1: config 0 descriptor?? [ 233.934761][ T6830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.984226][ T5100] Bluetooth: hci5: command tx timeout [ 234.071865][ T6775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.131501][ T6775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.270492][ T5149] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 234.305413][ T5149] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 234.363775][ T5149] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 234.400995][ T29] audit: type=1400 audit(1721447247.420:340): avc: denied { read } for pid=6831 comm="syz.3.437" laddr=fe80::b lport=59368 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.480923][ T6775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.491985][ T6775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.687340][ T6775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.717542][ T6775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.043262][ T6775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.072732][ T6775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.092356][ T6775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.108311][ T6775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.550956][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.608123][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.632924][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.640070][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.681165][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.688411][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.114067][ T5100] Bluetooth: hci5: command tx timeout [ 236.255569][ T5149] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 237.616362][ T6860] netlink: 9 bytes leftover after parsing attributes in process `syz.4.440'. [ 237.625825][ T6860] 1·: renamed from c0· (while UP) [ 237.678871][ T6860] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 237.887935][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.154360][ T5100] Bluetooth: hci5: command tx timeout [ 238.276021][ T5150] usb 2-1: USB disconnect, device number 5 [ 238.295151][ T6775] veth0_vlan: entered promiscuous mode [ 238.378071][ T6775] veth1_vlan: entered promiscuous mode [ 238.548067][ T6775] veth0_macvtap: entered promiscuous mode [ 238.614484][ T6775] veth1_macvtap: entered promiscuous mode [ 239.889926][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 239.920109][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 239.962099][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.011310][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.048820][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.083983][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.135406][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.203937][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.224178][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.283958][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.300404][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.313270][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.337199][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.403833][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.434100][ T5179] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.440865][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.487383][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.515031][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.525347][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.543998][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.559950][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.573583][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.583875][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.597783][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.612793][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.667272][ T5179] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 240.683093][ T6775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.704948][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.729980][ T5179] usb 5-1: config 0 descriptor?? [ 240.741133][ T6775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.757264][ T5179] gspca_main: spca508-2.14.0 probing 8086:0110 [ 240.765792][ T6775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.834142][ T6775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.145687][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.222439][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.255991][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.265931][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.357922][ T5179] gspca_spca508: reg_read err -110 [ 241.364572][ T5179] gspca_spca508: reg_read err -32 [ 241.371922][ T5179] gspca_spca508: reg_read err -32 [ 241.384416][ T5179] gspca_spca508: reg_read err -32 [ 241.390208][ T5179] gspca_spca508: reg_read err -32 [ 241.397477][ T5179] gspca_spca508: reg write: error -32 [ 241.403137][ T5179] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 242.136509][ T6915] vivid-007: kernel_thread() failed [ 242.590882][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.616376][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.771279][ T29] audit: type=1400 audit(1721447255.810:341): avc: denied { mount } for pid=6775 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 243.465310][ T5148] usb 5-1: USB disconnect, device number 6 [ 244.110383][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 244.301980][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 248.205120][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 252.818221][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 252.969596][ T7043] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 253.049480][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.073528][ T7043] bond0: (slave team0): Enslaving as an active interface with an up link [ 253.120553][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.476'. [ 253.262878][ T7043] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 253.303753][ T5100] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 253.318384][ T7043] bond0: (slave team0): Releasing backup interface [ 253.440851][ T7043] bridge0: port 3(team0) entered blocking state [ 253.477487][ T7043] bridge0: port 3(team0) entered disabled state [ 253.517685][ T7043] team0: entered allmulticast mode [ 253.522806][ T7043] team_slave_0: entered allmulticast mode [ 253.569568][ T7043] team_slave_1: entered allmulticast mode [ 253.605540][ T7043] team0: entered promiscuous mode [ 253.630741][ T7043] team_slave_0: entered promiscuous mode [ 253.671904][ T7043] team_slave_1: entered promiscuous mode [ 254.843145][ T7067] bio_check_eod: 2 callbacks suppressed [ 254.843194][ T7067] syz.3.480: attempt to access beyond end of device [ 254.843194][ T7067] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 254.863563][ T7067] syz.3.480: attempt to access beyond end of device [ 254.863563][ T7067] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 254.876712][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 254.888593][ T7067] syz.3.480: attempt to access beyond end of device [ 254.888593][ T7067] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 254.902578][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 254.913045][ T7067] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 254.920795][ T7067] UDF-fs: Scanning with blocksize 512 failed [ 254.933097][ T7067] syz.3.480: attempt to access beyond end of device [ 254.933097][ T7067] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 254.947765][ T7067] syz.3.480: attempt to access beyond end of device [ 254.947765][ T7067] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 254.960796][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 254.971966][ T7067] syz.3.480: attempt to access beyond end of device [ 254.971966][ T7067] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 254.985105][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 254.994810][ T7067] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 255.003441][ T7067] UDF-fs: Scanning with blocksize 1024 failed [ 255.014023][ T7067] syz.3.480: attempt to access beyond end of device [ 255.014023][ T7067] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 255.028079][ T7067] syz.3.480: attempt to access beyond end of device [ 255.028079][ T7067] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 255.041322][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 255.052022][ T7067] syz.3.480: attempt to access beyond end of device [ 255.052022][ T7067] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 255.065133][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 255.074803][ T7067] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 255.082513][ T7067] UDF-fs: Scanning with blocksize 2048 failed [ 255.091645][ T7067] syz.3.480: attempt to access beyond end of device [ 255.091645][ T7067] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 255.106246][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 255.116387][ T7067] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 255.125977][ T7067] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 255.133593][ T7067] UDF-fs: Scanning with blocksize 4096 failed [ 255.139665][ T7067] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 257.214824][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.224795][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.171732][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.191097][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.202620][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.213771][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.227664][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 258.237136][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.712389][ T7083] chnl_net:caif_netlink_parms(): no params data found [ 259.311114][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.437159][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.485377][ T7083] bridge_slave_0: entered allmulticast mode [ 259.530497][ T7083] bridge_slave_0: entered promiscuous mode [ 259.555364][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.562566][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.602270][ T7083] bridge_slave_1: entered allmulticast mode [ 259.629141][ T7083] bridge_slave_1: entered promiscuous mode [ 259.720436][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.721054][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.753141][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.800753][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.839752][ T7083] team0: Port device team_slave_0 added [ 259.844716][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.913284][ T7083] team0: Port device team_slave_1 added [ 259.992857][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.000958][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.029002][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.050072][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.057322][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.084225][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.181103][ T7083] hsr_slave_0: entered promiscuous mode [ 260.203715][ T7083] hsr_slave_1: entered promiscuous mode [ 260.238039][ T7083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.245890][ T7083] Cannot create hsr debugfs directory [ 260.304306][ T54] Bluetooth: hci6: command tx timeout [ 260.653682][ T29] audit: type=1400 audit(1721447273.690:342): avc: denied { create } for pid=7113 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.739845][ T29] audit: type=1400 audit(1721447273.770:343): avc: denied { ioctl } for pid=7113 comm="syz.2.492" path="socket:[16347]" dev="sockfs" ino=16347 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.825824][ T29] audit: type=1400 audit(1721447273.820:344): avc: denied { getopt } for pid=7113 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.850988][ T7083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.876888][ T7083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.110289][ T7083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.150178][ T7083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.310376][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 261.367564][ T7083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.473849][ T7083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.694596][ T7083] bond0: (slave netdevsim0): Releasing backup interface [ 261.761205][ T7083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.802805][ T7083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.385207][ T54] Bluetooth: hci6: command tx timeout [ 262.501886][ T7083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.564745][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 262.584465][ T7083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.610900][ T7083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.679819][ T7083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.860714][ T7142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.869900][ T7142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.878937][ T7142] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.888605][ T7142] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.933988][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 263.269804][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.316696][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.341498][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.348773][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.376127][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.383305][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.286417][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.474382][ T54] Bluetooth: hci6: command tx timeout [ 264.865148][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 264.938651][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.043743][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.082685][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.454502][ T7083] veth0_vlan: entered promiscuous mode [ 265.517272][ T7083] veth1_vlan: entered promiscuous mode [ 265.671480][ T7083] veth0_macvtap: entered promiscuous mode [ 265.715776][ T7083] veth1_macvtap: entered promiscuous mode [ 265.809078][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.886847][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.954815][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.003226][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.077763][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.112193][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.224026][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.255807][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.305275][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.442113][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.544252][ T5100] Bluetooth: hci6: command tx timeout [ 266.587074][ T5100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 266.594355][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.594379][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.596467][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.635180][ T5100] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 266.734190][ T5100] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 266.782321][ T5100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 266.795606][ T5100] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 266.805948][ T5100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 266.987382][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.013976][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.038871][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.060817][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.132207][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.158412][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.202150][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.232882][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.267946][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.337722][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.364066][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.424101][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.503612][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.911466][ T7083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.955981][ T7083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.017148][ T7083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.027090][ T7083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.540785][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.686732][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.864078][ T5100] Bluetooth: hci7: command tx timeout [ 270.962911][ T54] Bluetooth: hci7: command tx timeout [ 271.411504][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.458236][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.595397][ T7186] chnl_net:caif_netlink_parms(): no params data found [ 271.663863][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 272.203411][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.228345][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.282059][ T7186] bridge_slave_0: entered allmulticast mode [ 272.341560][ T7186] bridge_slave_0: entered promiscuous mode [ 272.435231][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.515298][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.616959][ T7186] bridge_slave_1: entered allmulticast mode [ 272.638269][ T7186] bridge_slave_1: entered promiscuous mode [ 272.925339][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.970196][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.191616][ T54] Bluetooth: hci7: command tx timeout [ 273.198791][ T7186] team0: Port device team_slave_0 added [ 273.222754][ T7186] team0: Port device team_slave_1 added [ 273.612145][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.671555][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.743543][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.788405][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.810107][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.887502][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.936251][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.092288][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.148119][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.217048][ T7186] hsr_slave_0: entered promiscuous mode [ 274.233712][ T7186] hsr_slave_1: entered promiscuous mode [ 274.270260][ T7186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.285353][ T7186] Cannot create hsr debugfs directory [ 275.158968][ T5100] Bluetooth: hci8: sending frame failed (-49) [ 275.159754][ T54] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 275.230682][ T7250] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 275.274434][ T54] Bluetooth: hci7: command tx timeout [ 275.291414][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 275.546096][ T7186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.697346][ T7186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.142292][ T7186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.176897][ T7186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.452233][ T7186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.514176][ T7186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.778842][ T7186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.834474][ T7186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.597726][ T7267] netlink: 'syz.1.522': attribute type 2 has an invalid length. [ 277.816887][ T7186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.866476][ T7186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.889427][ T7186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.959446][ T7186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.564329][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.691920][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.756620][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.763724][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.844184][ T1149] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.851506][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.858994][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.103275][ T1149] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 279.155387][ T1149] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 279.192117][ T7186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.215150][ T1149] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.266004][ T1149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.327666][ T1149] usb 2-1: config 0 descriptor?? [ 279.394457][ T1149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 279.771198][ T7285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7285 comm=syz.0.525 [ 279.807574][ T7285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7285 comm=syz.0.525 [ 279.824449][ T7285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7285 comm=syz.0.525 [ 280.644577][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.874262][ T1149] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 281.158190][ T1149] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.192795][ T7186] veth0_vlan: entered promiscuous mode [ 281.201196][ T1149] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.242585][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 281.271359][ T1149] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.279361][ T7186] veth1_vlan: entered promiscuous mode [ 281.331077][ T1149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.387140][ T54] Bluetooth: hci5: Unknown advertising packet type: 0x14 [ 281.388567][ T54] Bluetooth: hci5: Unknown advertising packet type: 0x20 [ 281.411063][ T7294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.564990][ T7186] veth0_macvtap: entered promiscuous mode [ 281.628330][ T7186] veth1_macvtap: entered promiscuous mode [ 281.757218][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.779946][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.791140][ T1149] usb 5-1: USB disconnect, device number 7 [ 281.791654][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.963998][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.035618][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.143631][ T928] usb 2-1: USB disconnect, device number 6 [ 282.153990][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.217719][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.271096][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.343513][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.392836][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.460795][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.538555][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.611217][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.722326][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.790876][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.926188][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.952189][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.002370][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.031191][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.048236][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.089003][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.169707][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.200105][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.230450][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.242995][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.262854][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.310326][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.330654][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.350818][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.368447][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.458185][ T7186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.486492][ T7186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.518565][ T7186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.547735][ T54] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 283.558385][ T7186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.787494][ T1149] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 284.844235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.884015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.995706][ T1149] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 285.021362][ T1149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.025746][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.069090][ T1149] usb 3-1: config 0 descriptor?? [ 285.091970][ T1149] gspca_main: spca508-2.14.0 probing 8086:0110 [ 285.098337][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.389098][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.402733][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.634710][ T1149] gspca_spca508: reg_read err -110 [ 285.667513][ T1149] gspca_spca508: reg_read err -32 [ 285.690176][ T1149] gspca_spca508: reg_read err -32 [ 285.741201][ T1149] gspca_spca508: reg_read err -32 [ 285.783622][ T1149] gspca_spca508: reg_read err -32 [ 285.808256][ T7337] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 285.836481][ T1149] gspca_spca508: reg write: error -32 [ 285.862626][ T1149] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 286.171826][ T5180] usb 3-1: USB disconnect, device number 3 [ 286.258149][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 286.315827][ T54] Bluetooth: hci6: Unknown advertising packet type: 0x14 [ 286.315916][ T54] Bluetooth: hci6: Unknown advertising packet type: 0x20 [ 286.420890][ T7352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.787426][ T54] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 288.760378][ C1] eth0: bad gso: type: 1, size: 1408 [ 289.180960][ T2453] Bluetooth: hci8: Frame reassembly failed (-84) [ 289.874078][ T29] audit: type=1400 audit(1721447302.500:345): avc: denied { bind } for pid=7375 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.164322][ T29] audit: type=1400 audit(1721447302.510:346): avc: denied { setopt } for pid=7375 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.224831][ T29] audit: type=1400 audit(1721447302.520:347): avc: denied { connect } for pid=7375 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.641081][ T7381] bio_check_eod: 2 callbacks suppressed [ 290.641095][ T7381] syz.2.548: attempt to access beyond end of device [ 290.641095][ T7381] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 290.659662][ T7381] syz.2.548: attempt to access beyond end of device [ 290.659662][ T7381] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 290.672568][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 290.682536][ T7381] syz.2.548: attempt to access beyond end of device [ 290.682536][ T7381] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 290.695561][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 290.705244][ T7381] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 290.712893][ T7381] UDF-fs: Scanning with blocksize 512 failed [ 290.719773][ T7381] syz.2.548: attempt to access beyond end of device [ 290.719773][ T7381] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 290.732768][ T7381] syz.2.548: attempt to access beyond end of device [ 290.732768][ T7381] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 290.747079][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 290.756819][ T7381] syz.2.548: attempt to access beyond end of device [ 290.756819][ T7381] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 290.769966][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 290.779551][ T7381] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 290.792826][ T7381] UDF-fs: Scanning with blocksize 1024 failed [ 290.799440][ T7381] syz.2.548: attempt to access beyond end of device [ 290.799440][ T7381] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 290.812381][ T7381] syz.2.548: attempt to access beyond end of device [ 290.812381][ T7381] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 290.825360][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 290.835057][ T7381] syz.2.548: attempt to access beyond end of device [ 290.835057][ T7381] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 290.849371][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 290.858934][ T7381] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 290.866606][ T7381] UDF-fs: Scanning with blocksize 2048 failed [ 290.873083][ T7381] syz.2.548: attempt to access beyond end of device [ 290.873083][ T7381] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 290.885995][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 290.895739][ T7381] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 290.905321][ T7381] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 290.912938][ T7381] UDF-fs: Scanning with blocksize 4096 failed [ 290.919032][ T7381] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 291.184777][ T54] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 291.194589][ T5100] Bluetooth: hci8: command 0xfc11 tx timeout [ 291.194968][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.361405][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.374863][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.905576][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 293.027854][ T54] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 293.027891][ T54] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 293.195511][ T7394] netlink: 'syz.1.550': attribute type 2 has an invalid length. [ 293.295352][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 293.405770][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201' [ 293.416834][ T54] CPU: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 293.426595][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.436674][ T54] Workqueue: hci7 hci_rx_work [ 293.441411][ T54] Call Trace: [ 293.444707][ T54] [ 293.447676][ T54] dump_stack_lvl+0x16c/0x1f0 [ 293.452397][ T54] sysfs_warn_dup+0x7f/0xa0 [ 293.456941][ T54] sysfs_create_dir_ns+0x24d/0x2b0 [ 293.462092][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 293.467774][ T54] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.473186][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 293.478421][ T54] kobject_add_internal+0x2c8/0x990 [ 293.483652][ T54] kobject_add+0x16f/0x240 [ 293.488098][ T54] ? __pfx_kobject_add+0x10/0x10 [ 293.493065][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 293.498304][ T54] ? kobject_put+0xbe/0x5b0 [ 293.502840][ T54] device_add+0x289/0x1a70 [ 293.507305][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 293.512374][ T54] ? __pfx_device_add+0x10/0x10 [ 293.517281][ T54] ? mgmt_send_event_skb+0x2f2/0x460 [ 293.522605][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 293.527672][ T54] le_conn_complete_evt+0x1078/0x1d80 [ 293.533086][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 293.538841][ T54] ? trace_contention_end+0xea/0x140 [ 293.544162][ T54] ? __mutex_lock+0x1a6/0x9c0 [ 293.548879][ T54] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 293.554810][ T54] ? skb_pull_data+0x166/0x210 [ 293.559612][ T54] hci_le_meta_evt+0x2e2/0x5d0 [ 293.564419][ T54] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 293.570882][ T54] hci_event_packet+0x666/0x1180 [ 293.575859][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 293.581155][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 293.586524][ T54] ? mark_held_locks+0x9f/0xe0 [ 293.591277][ T54] ? kcov_remote_start+0x3d1/0x6e0 [ 293.596400][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.601646][ T54] hci_rx_work+0x2c6/0x1610 [ 293.606206][ T54] process_one_work+0x9c5/0x1b40 [ 293.611198][ T54] ? __pfx_lock_acquire+0x10/0x10 [ 293.616242][ T54] ? __pfx_process_one_work+0x10/0x10 [ 293.621611][ T54] ? assign_work+0x1a0/0x250 [ 293.626202][ T54] worker_thread+0x6c8/0xf20 [ 293.630791][ T54] ? __pfx_worker_thread+0x10/0x10 [ 293.635895][ T54] kthread+0x2c1/0x3a0 [ 293.639967][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.645189][ T54] ? __pfx_kthread+0x10/0x10 [ 293.649777][ T54] ret_from_fork+0x45/0x80 [ 293.654191][ T54] ? __pfx_kthread+0x10/0x10 [ 293.658789][ T54] ret_from_fork_asm+0x1a/0x30 [ 293.663556][ T54] [ 293.666648][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.684353][ T54] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 293.699301][ T54] Bluetooth: hci7: failed to register connection device [ 294.306919][ C1] eth0: bad gso: type: 1, size: 1408 [ 294.517041][ T7424] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.527600][ T7424] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.537102][ T7424] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.546002][ T7424] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.722700][ T5100] Bluetooth: hci8: sending frame failed (-49) [ 294.731470][ T54] Bluetooth: hci8: Entering manufacturer mode failed (-49) [ 294.763996][ T1149] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 294.980012][ T1149] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.025436][ T1149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.051363][ T1149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.075262][ T1149] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.120371][ T1149] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.131182][ T1149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.167931][ T1149] usb 1-1: config 0 descriptor?? [ 295.735869][ T1149] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 295.797736][ T1149] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 296.064848][ T1149] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.088363][ C1] eth0: bad gso: type: 1, size: 1408 [ 296.204517][ T7450] bio_check_eod: 2 callbacks suppressed [ 296.204538][ T7450] syz.3.562: attempt to access beyond end of device [ 296.204538][ T7450] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 296.223526][ T7450] syz.3.562: attempt to access beyond end of device [ 296.223526][ T7450] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 296.236537][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.246574][ T7450] syz.3.562: attempt to access beyond end of device [ 296.246574][ T7450] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 296.259695][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 296.277964][ T7450] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 296.285851][ T7450] UDF-fs: Scanning with blocksize 512 failed [ 296.295332][ T7450] syz.3.562: attempt to access beyond end of device [ 296.295332][ T7450] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 296.309912][ T7450] syz.3.562: attempt to access beyond end of device [ 296.309912][ T7450] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 296.325126][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.336177][ T7450] syz.3.562: attempt to access beyond end of device [ 296.336177][ T7450] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 296.349365][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 296.360058][ T7450] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 296.372621][ T7450] UDF-fs: Scanning with blocksize 1024 failed [ 296.381837][ T7450] syz.3.562: attempt to access beyond end of device [ 296.381837][ T7450] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 296.398915][ T7450] syz.3.562: attempt to access beyond end of device [ 296.398915][ T7450] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 296.412087][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.422262][ T7450] syz.3.562: attempt to access beyond end of device [ 296.422262][ T7450] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 296.435493][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 296.446116][ T7450] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 296.453963][ T7450] UDF-fs: Scanning with blocksize 2048 failed [ 296.462691][ T7450] syz.3.562: attempt to access beyond end of device [ 296.462691][ T7450] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 296.485912][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.504125][ T7450] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 296.513796][ T7450] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 296.521597][ T7450] UDF-fs: Scanning with blocksize 4096 failed [ 296.527935][ T7450] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 299.034113][ T5100] Bluetooth: hci7: command 0x0405 tx timeout [ 301.285900][ T7473] 9pnet_fd: Insufficient options for proto=fd [ 301.319029][ T54] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 302.227382][ T1149] usb 1-1: USB disconnect, device number 5 [ 302.256801][ C1] eth0: bad gso: type: 1, size: 1408 [ 302.460548][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 302.551256][ T54] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 302.551302][ T54] Bluetooth: hci7: Unknown advertising packet type: 0x20 [ 304.084739][ T29] audit: type=1326 audit(1721447317.130:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.210757][ T29] audit: type=1326 audit(1721447317.220:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.273999][ T5137] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 304.323924][ T29] audit: type=1326 audit(1721447317.360:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.384273][ T29] audit: type=1326 audit(1721447317.360:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.451401][ T29] audit: type=1326 audit(1721447317.360:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.523786][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.544640][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.556360][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.569650][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 304.587847][ T29] audit: type=1326 audit(1721447317.390:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.634361][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.677966][ T5137] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.703688][ T29] audit: type=1326 audit(1721447317.390:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.743030][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.774952][ T5137] usb 3-1: config 0 descriptor?? [ 304.799181][ T29] audit: type=1326 audit(1721447317.390:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.871475][ T29] audit: type=1326 audit(1721447317.400:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 304.959824][ T29] audit: type=1326 audit(1721447317.400:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94caf75b59 code=0x7ffc0000 [ 305.231147][ T5137] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 305.297951][ T5137] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 305.338871][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 305.348230][ T5137] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 307.257835][ T52] Bluetooth: hci8: Frame reassembly failed (-84) [ 307.742162][ T7534] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 308.402265][ T5150] usb 3-1: USB disconnect, device number 4 [ 309.346928][ T5101] Bluetooth: hci8: command 0x1003 tx timeout [ 309.816305][ T5100] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 310.365045][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 310.637059][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.169004][ T54] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 312.289606][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 312.289625][ T29] audit: type=1326 audit(1721447325.330:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 312.534042][ T29] audit: type=1326 audit(1721447325.330:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.370694][ T29] audit: type=1326 audit(1721447325.440:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.479013][ T29] audit: type=1326 audit(1721447325.440:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.484599][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.544042][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.589932][ T29] audit: type=1326 audit(1721447325.440:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.603846][ T5148] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 313.646750][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.666338][ T5148] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 313.695990][ T35] wlan1: authenticated [ 313.704130][ T35] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 313.735164][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.745705][ T52] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 313.756491][ T29] audit: type=1326 audit(1721447325.540:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.804172][ T52] wlan1: associated [ 313.846707][ T29] audit: type=1326 audit(1721447325.540:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 313.959583][ T29] audit: type=1326 audit(1721447325.540:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 314.044120][ T29] audit: type=1326 audit(1721447326.400:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 314.092832][ T29] audit: type=1326 audit(1721447326.490:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed21f75b59 code=0x7ffc0000 [ 314.247743][ T35] Bluetooth: hci8: Frame reassembly failed (-84) [ 314.655481][ T5137] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 314.907122][ T5137] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.938596][ T5137] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 314.970949][ T5137] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 315.000860][ T5137] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 315.076543][ T5137] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.094059][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.113382][ T5137] usb 5-1: SerialNumber: syz [ 315.136348][ T7601] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.154204][ T7601] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.176145][ T5137] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 315.453714][ T5106] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 315.489782][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.603'. [ 315.500151][ T5106] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 315.508785][ T5106] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 315.522816][ T5106] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 315.532465][ T5106] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 315.543109][ T5106] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 315.606314][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.619928][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.686386][ T5137] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 315.713184][ T5137] usb 5-1: USB disconnect, device number 8 [ 316.051263][ T5106] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 316.304338][ T54] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 317.098293][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 317.582720][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.610216][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.673491][ T5106] Bluetooth: hci9: command tx timeout [ 317.681167][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.687772][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.702977][ T7620] bridge_slave_0: entered allmulticast mode [ 317.731719][ T7620] bridge_slave_0: entered promiscuous mode [ 317.791194][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.3.608'. [ 317.811187][ T7647] 0·: renamed from hsr_slave_1 (while UP) [ 317.838103][ T7647] 0·: entered allmulticast mode [ 317.850490][ T7647] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 317.910395][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.918151][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.940089][ T7620] bridge_slave_1: entered allmulticast mode [ 317.952131][ T7620] bridge_slave_1: entered promiscuous mode [ 318.116030][ T5106] Bluetooth: hci6: unexpected cc 0x0403 length: 65 > 1 [ 318.191288][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.209752][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.372379][ T52] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 318.417247][ T2453] Bluetooth: hci8: Frame reassembly failed (-84) [ 318.510412][ T7620] team0: Port device team_slave_0 added [ 318.547679][ T7620] team0: Port device team_slave_1 added [ 318.547981][ T54] Bluetooth: hci5: unexpected cc 0x0403 length: 65 > 1 [ 318.817844][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.849666][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.010177][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.090621][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.163933][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.206792][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.398362][ T7620] hsr_slave_0: entered promiscuous mode [ 319.408684][ T7620] hsr_slave_1: entered promiscuous mode [ 319.415497][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.423488][ T7620] Cannot create hsr debugfs directory [ 319.669466][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 319.753975][ T54] Bluetooth: hci9: command tx timeout [ 319.772284][ T54] Bluetooth: hci6: Malformed LE Event: 0x0d [ 319.966223][ T5100] Bluetooth: hci10: sending frame failed (-49) [ 319.973726][ T54] Bluetooth: hci10: Opcode 0x1003 failed: -49 [ 320.017965][ T7671] Bluetooth: hci10: Frame reassembly failed (-84) [ 320.080157][ T7620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.101606][ T7620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.221950][ T7620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.253268][ T7620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.464174][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 320.471563][ T54] Bluetooth: hci8: command 0x1003 tx timeout [ 320.628718][ T7620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.641398][ T7620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.869858][ T7620] bond0: (slave netdevsim0): Releasing backup interface [ 320.951948][ T7620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.006331][ T7620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.104753][ T5100] Bluetooth: hci8: sending frame failed (-49) [ 321.112403][ T54] Bluetooth: hci8: Entering manufacturer mode failed (-49) [ 321.309433][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 321.771263][ T7620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.825933][ T54] Bluetooth: hci9: command tx timeout [ 321.856636][ T7620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.951761][ T7620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.054672][ T7620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.145792][ T54] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 322.155288][ T54] Bluetooth: hci6: Injecting HCI hardware error event [ 322.164640][ T5100] Bluetooth: hci6: hardware error 0x00 [ 322.252634][ T54] Bluetooth: hci5: unexpected cc 0x0403 length: 65 > 1 [ 322.624543][ T54] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 322.633653][ T54] Bluetooth: hci5: Injecting HCI hardware error event [ 322.642889][ T5106] Bluetooth: hci5: hardware error 0x00 [ 322.949718][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.013677][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.078954][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 323.097851][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.105085][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.166756][ T54] Bluetooth: hci0: Malformed LE Event: 0x0d [ 323.228242][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.235426][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.412050][ T52] Bluetooth: hci8: Frame reassembly failed (-84) [ 323.522029][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.564761][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.810908][ T5101] Bluetooth: hci6: unexpected cc 0x0403 length: 65 > 1 [ 323.817943][ T5101] Bluetooth: hci6: unexpected event for opcode 0x0403 [ 323.904224][ T5101] Bluetooth: hci9: command tx timeout [ 324.047466][ T62] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 324.190534][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.224626][ T5100] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 324.615722][ T7620] veth0_vlan: entered promiscuous mode [ 324.682337][ T7620] veth1_vlan: entered promiscuous mode [ 324.705548][ T5106] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 324.828827][ T7620] veth0_macvtap: entered promiscuous mode [ 324.849881][ T7620] veth1_macvtap: entered promiscuous mode [ 324.948217][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.979095][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.008075][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.022082][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.037047][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.053832][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.065637][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.084297][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.104007][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.131874][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.181884][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.221147][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.263016][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.287456][ T62] Bluetooth: hci10: Frame reassembly failed (-84) [ 325.389100][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.418060][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.434800][ T54] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 325.441559][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.516082][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.600220][ T7752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.632'. [ 325.641641][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.702147][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.732752][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.788163][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.817619][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.844661][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.861874][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.872297][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.884738][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.898945][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.922808][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.935532][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.947463][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.958309][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.997022][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.010194][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.021527][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.056296][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.188557][ T7620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.198231][ T7620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.211656][ T7620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.220923][ T7620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.506976][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.543068][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.639649][ T7761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.684091][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.697948][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.720182][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.781397][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.020175][ T7768] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 327.060093][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 327.132959][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.192254][ T7768] bond0: (slave team0): Enslaving as an active interface with an up link [ 327.208306][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.602'. [ 327.271286][ T7768] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 327.289391][ T7768] bond0: (slave team0): Releasing backup interface [ 327.309881][ T7768] bridge0: port 3(team0) entered blocking state [ 327.317513][ T7768] bridge0: port 3(team0) entered disabled state [ 327.325330][ T7768] team0: entered allmulticast mode [ 327.335886][ T7768] team_slave_0: entered allmulticast mode [ 327.341987][ T7768] team_slave_1: entered allmulticast mode [ 327.350141][ T5106] Bluetooth: hci10: Entering manufacturer mode failed (-110) [ 327.401620][ T7768] team0: entered promiscuous mode [ 327.407198][ T7768] team_slave_0: entered promiscuous mode [ 327.430005][ T7768] team_slave_1: entered promiscuous mode [ 327.494026][ T1149] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 327.610976][ T7780] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 327.696128][ T1149] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 327.723733][ T1149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.774745][ T1149] usb 4-1: config 0 descriptor?? [ 327.831718][ T1149] gspca_main: spca508-2.14.0 probing 8086:0110 [ 327.845526][ T7786] netlink: 892 bytes leftover after parsing attributes in process `syz.1.642'. [ 328.187481][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.276464][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.421133][ T1149] gspca_spca508: reg_read err -110 [ 328.452034][ T1149] gspca_spca508: reg_read err -32 [ 328.486335][ T1149] gspca_spca508: reg_read err -32 [ 328.501049][ T1149] gspca_spca508: reg_read err -32 [ 328.524048][ T1149] gspca_spca508: reg_read err -32 [ 328.545955][ T1149] gspca_spca508: reg write: error -32 [ 328.554129][ T1149] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 329.685916][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'. [ 330.337866][ T2453] Bluetooth: hci8: Frame reassembly failed (-84) [ 330.504973][ T5180] usb 4-1: USB disconnect, device number 9 [ 330.766101][ T5106] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 331.028426][ T7825] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 331.100390][ T7825] team0: Port device netdevsim0 added [ 331.129400][ T7826] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 331.239909][ T7826] team0: Port device netdevsim0 removed [ 331.389023][ T7826] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 331.775210][ T7833] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 331.874657][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.978044][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.979702][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 332.057035][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.385213][ T5106] Bluetooth: hci8: command 0x1003 tx timeout [ 332.392320][ T54] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 332.770525][ T7844] netlink: 'syz.4.656': attribute type 10 has an invalid length. [ 332.936880][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.657'. [ 333.005521][ T7844] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.121028][ T7844] bond0: (slave team0): Enslaving as an active interface with an up link [ 333.142039][ T7856] netlink: 892 bytes leftover after parsing attributes in process `syz.3.658'. [ 333.158388][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 333.687621][ T7862] syzkaller1: entered promiscuous mode [ 333.707238][ T7862] syzkaller1: entered allmulticast mode [ 333.955385][ T5106] Bluetooth: hci8: sending frame failed (-49) [ 333.964598][ T54] Bluetooth: hci8: Entering manufacturer mode failed (-49) [ 334.007742][ T35] Bluetooth: hci10: Frame reassembly failed (-84) [ 334.201993][ T7870] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 334.417707][ T7870] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 334.449903][ T7870] bond0: (slave team0): Releasing backup interface [ 334.528033][ T7870] bridge0: port 3(team0) entered blocking state [ 334.543737][ T7870] bridge0: port 3(team0) entered disabled state [ 334.568798][ T7870] team0: entered allmulticast mode [ 334.584044][ T7870] team_slave_0: entered allmulticast mode [ 334.602468][ T7870] team_slave_1: entered allmulticast mode [ 334.612105][ T7870] team0: entered promiscuous mode [ 334.627256][ T7870] team_slave_0: entered promiscuous mode [ 334.640615][ T7870] team_slave_1: entered promiscuous mode [ 334.739233][ T5100] Bluetooth: hci8: sending frame failed (-49) [ 334.747271][ T5106] Bluetooth: hci8: Entering manufacturer mode failed (-49) [ 334.991821][ T7884] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.000906][ T7884] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.009669][ T7884] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.018400][ T7884] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.081948][ T5101] Bluetooth: hci10: command 0xfc11 tx timeout [ 336.121243][ T54] Bluetooth: hci10: Entering manufacturer mode failed (-110) [ 337.088976][ T54] Bluetooth: hci8: sending frame failed (-49) [ 337.096728][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 337.103102][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 337.285243][ T7897] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 338.674408][ T7921] bio_check_eod: 2 callbacks suppressed [ 338.674427][ T7921] syz.2.677: attempt to access beyond end of device [ 338.674427][ T7921] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 338.693277][ T7921] syz.2.677: attempt to access beyond end of device [ 338.693277][ T7921] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 338.706355][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.716420][ T7921] syz.2.677: attempt to access beyond end of device [ 338.716420][ T7921] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 338.730784][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 338.740885][ T7921] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 338.748635][ T7921] UDF-fs: Scanning with blocksize 512 failed [ 338.756093][ T7921] syz.2.677: attempt to access beyond end of device [ 338.756093][ T7921] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 338.770445][ T7921] syz.2.677: attempt to access beyond end of device [ 338.770445][ T7921] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 338.783346][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.794460][ T7921] syz.2.677: attempt to access beyond end of device [ 338.794460][ T7921] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 338.807966][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 338.817557][ T7921] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 338.825206][ T7921] UDF-fs: Scanning with blocksize 1024 failed [ 338.832089][ T7921] syz.2.677: attempt to access beyond end of device [ 338.832089][ T7921] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 338.845150][ T7921] syz.2.677: attempt to access beyond end of device [ 338.845150][ T7921] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 338.858142][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.869404][ T7921] syz.2.677: attempt to access beyond end of device [ 338.869404][ T7921] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 338.882366][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 338.891981][ T7921] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 338.899643][ T7921] UDF-fs: Scanning with blocksize 2048 failed [ 338.906180][ T7921] syz.2.677: attempt to access beyond end of device [ 338.906180][ T7921] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 338.919140][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.928894][ T7921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 338.938484][ T7921] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 338.946143][ T7921] UDF-fs: Scanning with blocksize 4096 failed [ 338.952244][ T7921] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 339.209532][ T7926] netlink: 892 bytes leftover after parsing attributes in process `syz.1.678'. [ 339.474079][ T5106] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 340.734765][ T5106] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 341.877467][ T12] Bluetooth: hci8: Frame reassembly failed (-84) [ 344.103611][ T54] Bluetooth: hci8: command 0x1003 tx timeout [ 344.414010][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 344.454061][ T7961] netlink: 'syz.2.689': attribute type 10 has an invalid length. [ 344.546620][ T5106] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 344.703707][ T5106] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 345.158691][ T7982] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 345.214377][ T5106] Bluetooth: hci9: unexpected cc 0x0403 length: 65 > 1 [ 345.221903][ T5106] Bluetooth: hci9: unexpected event for opcode 0x0403 [ 345.258188][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.392555][ T7982] bond0: (slave team0): Enslaving as an active interface with an up link [ 345.472638][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 345.530008][ T1269] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 345.560588][ T7982] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 345.572556][ T7982] bond0: (slave team0): Releasing backup interface [ 345.970694][ T7975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.183529][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.226534][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 349.296773][ T5106] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 349.305600][ T5106] Bluetooth: hci9: Injecting HCI hardware error event [ 349.320926][ T54] Bluetooth: hci9: hardware error 0x00 [ 351.590796][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 351.629882][ T62] Bluetooth: hci8: Frame reassembly failed (-84) [ 352.060296][ T8016] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 352.356409][ T5100] Bluetooth: hci7: unexpected event for opcode 0x0c7a [ 353.104497][ T54] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 353.664117][ T54] Bluetooth: hci8: command 0x1003 tx timeout [ 353.670819][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 354.183968][ T5140] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 354.365780][ T5140] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 354.377988][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.418252][ T5140] usb 1-1: config 0 descriptor?? [ 354.440459][ T5140] gspca_main: spca508-2.14.0 probing 8086:0110 [ 354.862777][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.885051][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.004249][ T5140] gspca_spca508: reg_read err -110 [ 355.025356][ T5140] gspca_spca508: reg_read err -32 [ 355.044092][ T5140] gspca_spca508: reg_read err -32 [ 355.067592][ T5140] gspca_spca508: reg_read err -32 [ 355.103888][ T5140] gspca_spca508: reg_read err -32 [ 355.109479][ T5140] gspca_spca508: reg write: error -32 [ 355.165072][ T5140] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 355.415331][ T54] Bluetooth: hci8: sending frame failed (-49) [ 355.429027][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 355.641938][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 355.706688][ T8064] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 355.957001][ T5149] usb 1-1: USB disconnect, device number 6 [ 357.383216][ T8083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.510701][ T8083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.574978][ T8091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.246135][ T1269] Bluetooth: hci8: Frame reassembly failed (-84) [ 358.272855][ T5100] Bluetooth: hci10: sending frame failed (-49) [ 358.280765][ T54] Bluetooth: hci10: Opcode 0x1003 failed: -49 [ 358.714044][ T5137] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 358.916213][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.933973][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 359.119712][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 359.161407][ T5137] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 359.189735][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.213073][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.231689][ T5137] usb 3-1: SerialNumber: syz [ 359.269332][ C1] eth0: bad gso: type: 1, size: 1408 [ 359.277539][ T8098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.311025][ T8098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.362449][ T5137] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 359.778474][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.799619][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.857036][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 359.857054][ T29] audit: type=1800 audit(1721447372.880:410): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.723" name="file2" dev="overlay" ino=881 res=0 errno=0 [ 359.973485][ T5137] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 360.044435][ T5137] usb 3-1: USB disconnect, device number 5 [ 360.224642][ T5106] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 360.963251][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 361.025838][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.077089][ T5106] Bluetooth: hci0: Malformed LE Event: 0x0d [ 361.111082][ T5106] Bluetooth: hci7: link tx timeout [ 361.117648][ T5106] Bluetooth: hci7: killing stalled connection 00:00:00:00:00:00 [ 361.192690][ T8125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.255038][ T8125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.428477][ T8138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.734'. [ 362.227776][ T8147] bio_check_eod: 2 callbacks suppressed [ 362.227799][ T8147] syz.1.735: attempt to access beyond end of device [ 362.227799][ T8147] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 362.369015][ T8147] syz.1.735: attempt to access beyond end of device [ 362.369015][ T8147] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 362.534264][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 362.680727][ T8147] syz.1.735: attempt to access beyond end of device [ 362.680727][ T8147] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 362.694353][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 362.771717][ T8147] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 362.831313][ T8147] UDF-fs: Scanning with blocksize 512 failed [ 362.843407][ T8147] syz.1.735: attempt to access beyond end of device [ 362.843407][ T8147] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 362.850468][ T8160] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 362.865359][ T8147] syz.1.735: attempt to access beyond end of device [ 362.865359][ T8147] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 362.916851][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.959316][ T8160] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.986380][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 363.048903][ T8147] syz.1.735: attempt to access beyond end of device [ 363.048903][ T8147] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 363.095274][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 363.139691][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 363.172463][ T8147] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 363.182582][ T8160] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 363.200642][ T54] Bluetooth: hci7: command 0x0405 tx timeout [ 363.231915][ C1] eth0: bad gso: type: 1, size: 1408 [ 363.242545][ T8147] UDF-fs: Scanning with blocksize 1024 failed [ 363.255023][ T8160] bond0: (slave team0): Releasing backup interface [ 363.305167][ T8147] syz.1.735: attempt to access beyond end of device [ 363.305167][ T8147] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 363.330653][ T8147] syz.1.735: attempt to access beyond end of device [ 363.330653][ T8147] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 363.352778][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 363.380734][ T8160] bridge0: port 3(team0) entered blocking state [ 363.395582][ T8160] bridge0: port 3(team0) entered disabled state [ 363.411273][ T8147] syz.1.735: attempt to access beyond end of device [ 363.411273][ T8147] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 363.425155][ T8160] team0: entered allmulticast mode [ 363.436768][ T8160] team_slave_0: entered allmulticast mode [ 363.460679][ T8160] team_slave_1: entered allmulticast mode [ 363.484000][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 363.502541][ T8160] team0: entered promiscuous mode [ 363.508380][ T8160] team_slave_0: entered promiscuous mode [ 363.517916][ T8160] team_slave_1: entered promiscuous mode [ 363.524089][ T8147] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 363.531753][ T8147] UDF-fs: Scanning with blocksize 2048 failed [ 363.652907][ T8147] syz.1.735: attempt to access beyond end of device [ 363.652907][ T8147] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 363.817601][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 363.890939][ T8147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 363.956927][ T8147] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 364.006438][ T8147] UDF-fs: Scanning with blocksize 4096 failed [ 364.014520][ T8147] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 365.328197][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 365.438944][ T1269] Bluetooth: hci8: Frame reassembly failed (-84) [ 365.455329][ T54] Bluetooth: hci0: Malformed LE Event: 0x0d [ 365.695728][ T8189] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 365.774576][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 366.204241][ T5180] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 366.406054][ T5180] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 366.439473][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.467807][ T5180] usb 1-1: config 0 descriptor?? [ 366.486103][ T5180] gspca_main: spca508-2.14.0 probing 8086:0110 [ 366.809650][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.824396][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.994693][ T5180] gspca_spca508: reg_read err -110 [ 367.018249][ T5180] gspca_spca508: reg_read err -32 [ 367.051068][ T5180] gspca_spca508: reg_read err -32 [ 367.078984][ T5180] gspca_spca508: reg_read err -32 [ 367.097763][ T5180] gspca_spca508: reg_read err -32 [ 367.110359][ T5180] gspca_spca508: reg write: error -32 [ 367.122904][ T5180] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 367.196103][ T5149] usb 1-1: USB disconnect, device number 7 [ 367.504161][ T54] Bluetooth: hci8: command 0xfc11 tx timeout [ 367.504199][ T5106] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 368.861283][ T8227] bio_check_eod: 2 callbacks suppressed [ 368.861305][ T8227] syz.4.756: attempt to access beyond end of device [ 368.861305][ T8227] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 368.932704][ T8227] syz.4.756: attempt to access beyond end of device [ 368.932704][ T8227] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 368.974125][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 369.010279][ T8227] syz.4.756: attempt to access beyond end of device [ 369.010279][ T8227] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 369.277065][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 369.413996][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 369.562100][ T8227] UDF-fs: Scanning with blocksize 512 failed [ 369.709656][ T8227] syz.4.756: attempt to access beyond end of device [ 369.709656][ T8227] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 369.944796][ T8227] syz.4.756: attempt to access beyond end of device [ 369.944796][ T8227] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 369.977806][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 370.033439][ T8227] syz.4.756: attempt to access beyond end of device [ 370.033439][ T8227] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 370.067661][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 370.078165][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 370.108975][ T8227] UDF-fs: Scanning with blocksize 1024 failed [ 370.121304][ T8227] syz.4.756: attempt to access beyond end of device [ 370.121304][ T8227] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 370.136517][ T8227] syz.4.756: attempt to access beyond end of device [ 370.136517][ T8227] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 370.156535][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 370.170027][ T8227] syz.4.756: attempt to access beyond end of device [ 370.170027][ T8227] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 370.247189][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 370.296532][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 370.320089][ T8227] UDF-fs: Scanning with blocksize 2048 failed [ 370.330874][ T8227] syz.4.756: attempt to access beyond end of device [ 370.330874][ T8227] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 370.344158][ T5137] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.394261][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 370.444324][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 370.484047][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 370.523950][ T8227] UDF-fs: Scanning with blocksize 4096 failed [ 370.544178][ T5137] usb 2-1: Using ep0 maxpacket: 8 [ 370.545173][ T8227] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 370.557900][ T5137] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 370.574336][ T5137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 370.593949][ T5137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.610934][ T5137] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.654257][ T5137] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.663386][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.744116][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 370.848974][ T5106] Bluetooth: hci0: Malformed LE Event: 0x0d [ 370.956634][ T5137] usb 2-1: usb_control_msg returned -32 [ 370.962310][ T5137] usbtmc 2-1:16.0: can't read capabilities [ 371.326960][ T29] audit: type=1400 audit(1721447384.370:411): avc: denied { write } for pid=8231 comm="syz.1.758" name="usbtmc0" dev="devtmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 371.350007][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.358505][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 371.413987][ T8247] usbtmc 2-1:16.0: Unable to send data, error -71 [ 371.666050][ T8253] netlink: 'syz.4.763': attribute type 4 has an invalid length. [ 371.799651][ T8256] netlink: 'syz.4.763': attribute type 17 has an invalid length. [ 371.912434][ T35] Bluetooth: hci8: Frame reassembly failed (-84) [ 372.092812][ T5100] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 372.109350][ T5100] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 372.117497][ T5100] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 372.127229][ T5100] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 372.135663][ T5100] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 372.145942][ T5100] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 373.022438][ T1149] usb 2-1: USB disconnect, device number 7 [ 373.143661][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 373.582337][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.633568][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.661097][ T8257] bridge_slave_0: entered allmulticast mode [ 373.716502][ T8257] bridge_slave_0: entered promiscuous mode [ 373.779396][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.821050][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.859264][ T8257] bridge_slave_1: entered allmulticast mode [ 373.904692][ T8257] bridge_slave_1: entered promiscuous mode [ 373.988442][ T5106] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 374.230152][ T54] Bluetooth: hci10: command tx timeout [ 374.357201][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.406527][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.602763][ T8257] team0: Port device team_slave_0 added [ 374.639014][ T8257] team0: Port device team_slave_1 added [ 374.801394][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.832473][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.915070][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.935203][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.946490][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.986246][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.228213][ T8257] hsr_slave_0: entered promiscuous mode [ 375.300231][ T8257] hsr_slave_1: entered promiscuous mode [ 375.404014][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.413057][ T8257] Cannot create hsr debugfs directory [ 375.864238][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 376.194889][ T8257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.304408][ T54] Bluetooth: hci10: command tx timeout [ 376.319643][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 376.623519][ T8257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.385386][ T54] Bluetooth: hci10: command tx timeout [ 379.576911][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.583326][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.483935][ T54] Bluetooth: hci10: command tx timeout [ 381.189265][ T8257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.602908][ T8257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.714084][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.818931][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.861844][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.981004][ T12] Bluetooth: hci8: Frame reassembly failed (-84) [ 383.182955][ T8257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.215943][ T8257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.235752][ T8257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.271460][ T8257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.544708][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.599358][ T8257] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.622903][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.630149][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.697802][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.705058][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.726157][ T29] audit: type=1326 audit(1721447396.770:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 383.799790][ T29] audit: type=1326 audit(1721447396.790:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 383.894773][ T29] audit: type=1326 audit(1721447396.940:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 383.974959][ T29] audit: type=1326 audit(1721447396.940:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.056180][ T29] audit: type=1326 audit(1721447396.960:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.084966][ T29] audit: type=1326 audit(1721447396.960:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.135850][ T29] audit: type=1326 audit(1721447396.960:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.192424][ T29] audit: type=1326 audit(1721447396.960:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.261007][ T29] audit: type=1326 audit(1721447396.970:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.281850][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.344647][ T29] audit: type=1326 audit(1721447396.970:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735575b59 code=0x7ffc0000 [ 384.450021][ T8257] veth0_vlan: entered promiscuous mode [ 384.491879][ T8257] veth1_vlan: entered promiscuous mode [ 384.547063][ T8257] veth0_macvtap: entered promiscuous mode [ 384.559732][ T8257] veth1_macvtap: entered promiscuous mode [ 384.593010][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.610210][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.624968][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.675197][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.697199][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.723923][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.735193][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.751286][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.777774][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.792635][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.871222][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.913036][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.953673][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.979404][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.993954][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.014276][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.040181][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.041058][ T5106] Bluetooth: hci8: command 0x1003 tx timeout [ 385.061107][ T54] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 385.066202][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.156281][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.241261][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.257432][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.277094][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.291888][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.303160][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.315410][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.332544][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.343219][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.368714][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.386882][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.408242][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.440551][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.470358][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.490594][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.515439][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.530627][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.543218][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.566445][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.589362][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.644725][ T8257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.663744][ T8257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.690085][ T8257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.718044][ T8257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.044598][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.066829][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.204191][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 386.257665][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.302909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.316611][ T54] Bluetooth: hci0: Malformed LE Event: 0x0d [ 387.852232][ T8369] 9pnet_fd: Insufficient options for proto=fd [ 387.919320][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 388.328541][ T5106] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 388.343798][ T5106] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 388.359109][ T5106] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 388.370433][ T5106] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 388.375073][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.390976][ T5106] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 388.399786][ T5106] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 388.535886][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.602925][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.981212][ T8381] netlink: 'syz.2.792': attribute type 2 has an invalid length. [ 389.097654][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 389.386844][ T8390] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 389.557481][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.581936][ T8390] bond0: (slave team0): Enslaving as an active interface with an up link [ 390.514732][ T5106] Bluetooth: hci8: command tx timeout [ 390.877127][ T8390] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 390.905830][ T8390] bond0: (slave team0): Releasing backup interface [ 391.060591][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.087718][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.135335][ T8376] bridge_slave_0: entered allmulticast mode [ 391.194162][ T8376] bridge_slave_0: entered promiscuous mode [ 391.223935][ T5180] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 391.253330][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.297451][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.345443][ T8376] bridge_slave_1: entered allmulticast mode [ 391.387881][ T8376] bridge_slave_1: entered promiscuous mode [ 391.424116][ T5106] Bluetooth: hci7: command 0x0405 tx timeout [ 391.469078][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 391.473974][ T5180] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 391.508861][ T5180] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 391.562298][ T5180] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.613901][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.659710][ T5180] usb 4-1: config 0 descriptor?? [ 391.678618][ T5180] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 391.749365][ T54] Bluetooth: hci0: Malformed LE Event: 0x0d [ 391.885151][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.995800][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.253951][ T928] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 392.401991][ T8376] team0: Port device team_slave_0 added [ 392.449232][ T8376] team0: Port device team_slave_1 added [ 392.504431][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.515941][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 392.553222][ T54] Bluetooth: hci8: command tx timeout [ 392.565085][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 392.586431][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 392.638054][ T928] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 392.745278][ T928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.764577][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.823345][ T928] usb 5-1: SerialNumber: syz [ 392.829500][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.861875][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.865647][ T8417] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 392.887814][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.966673][ T8417] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 393.029937][ T928] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 393.043891][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.290436][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.522061][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.668282][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.750353][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.814023][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.929046][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 393.929070][ T29] audit: type=1800 audit(1721447406.960:431): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.799" name="file2" dev="overlay" ino=414 res=0 errno=0 [ 394.070235][ T928] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 394.129629][ T928] usb 5-1: USB disconnect, device number 9 [ 394.227449][ T8376] hsr_slave_0: entered promiscuous mode [ 394.268181][ T8376] hsr_slave_1: entered promiscuous mode [ 394.288324][ T8376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.313956][ T8376] Cannot create hsr debugfs directory [ 394.340924][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.512196][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.569839][ T8435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.625274][ T5106] Bluetooth: hci8: command tx timeout [ 394.947724][ T5149] usb 4-1: USB disconnect, device number 10 [ 395.213040][ T8376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.229995][ T8376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.393060][ T8376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.437657][ T8376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.581524][ T8376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.603219][ T8376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.855270][ T8376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.876207][ T8376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.370168][ T8376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.483258][ T8376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.605267][ T8376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.694979][ T8376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.705041][ T5106] Bluetooth: hci8: command tx timeout [ 396.804373][ T5153] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 397.043493][ T5153] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.124011][ T5153] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.141999][ T5153] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.213555][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.304759][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.311726][ T8456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.440859][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.525372][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.532479][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.657127][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.664502][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.865278][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 398.306398][ T30] INFO: task syz.4.464:6984 blocked for more than 144 seconds. [ 398.336095][ T30] Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 398.371038][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.437535][ T30] task:syz.4.464 state:D stack:26160 pid:6984 tgid:6982 ppid:5094 flags:0x00004004 [ 398.486214][ T30] Call Trace: [ 398.495809][ T30] [ 398.515040][ T30] __schedule+0xe37/0x5490 [ 398.523149][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 398.528691][ T30] ? preempt_schedule_notrace+0x62/0xe0 [ 398.560360][ T30] ? __pfx___schedule+0x10/0x10 [ 398.585091][ T30] ? schedule+0x298/0x350 [ 398.604361][ T30] ? __pfx_lock_release+0x10/0x10 [ 398.628794][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 398.640787][ T30] ? __mutex_trylock_common+0x78/0x250 [ 398.656373][ T5153] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 398.661252][ T30] schedule+0xe7/0x350 [ 398.716696][ T30] schedule_preempt_disabled+0x13/0x30 [ 398.743114][ T30] __mutex_lock+0x5b8/0x9c0 [ 398.757565][ T30] ? stack_depot_save_flags+0x28/0x8f0 [ 398.775416][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.796491][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 398.810773][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 398.830143][ T30] ? kasan_save_stack+0x33/0x60 [ 398.841091][ T30] ? kasan_save_track+0x14/0x30 [ 398.871640][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 398.893503][ T30] ? genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 398.913636][ T30] ? genl_rcv_msg+0x470/0x800 [ 398.918817][ T30] ? netlink_rcv_skb+0x16b/0x440 [ 398.936268][ T30] ? genl_rcv+0x28/0x40 [ 398.938451][ T5153] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 398.945931][ T30] ? netlink_unicast+0x544/0x830 [ 398.971820][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.009356][ T8376] veth0_vlan: entered promiscuous mode [ 399.012270][ T30] ? netlink_sendmsg+0x8b8/0xd70 [ 399.031228][ T5153] usb 4-1: config 0 descriptor?? [ 399.049298][ T5153] gspca_main: spca508-2.14.0 probing 8086:0110 [ 399.056104][ T30] ? ____sys_sendmsg+0xab5/0xc90 [ 399.072091][ T30] ? ___sys_sendmsg+0x135/0x1e0 [ 399.072203][ T8376] veth1_vlan: entered promiscuous mode [ 399.097320][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 399.118379][ T30] nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 399.138213][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 399.159099][ T30] ? rcu_is_watching+0x12/0xc0 [ 399.172855][ T30] ? trace_kmalloc+0x2d/0xe0 [ 399.190256][ T30] ? __kmalloc_node_track_caller_noprof+0x22d/0x430 [ 399.199541][ T8376] veth0_macvtap: entered promiscuous mode [ 399.205438][ T30] ? __alloc_skb+0x164/0x380 [ 399.228205][ T30] ? __asan_memset+0x23/0x50 [ 399.244032][ T30] ? __build_skb_around+0x278/0x3b0 [ 399.253138][ T8376] veth1_macvtap: entered promiscuous mode [ 399.259552][ T30] ? __alloc_skb+0x1fe/0x380 [ 399.265276][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 399.270511][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.277033][ T30] genl_dumpit+0x11c/0x220 [ 399.283678][ T30] netlink_dump+0x552/0xcc0 [ 399.288690][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 399.298607][ T30] ? __asan_memset+0x23/0x50 [ 399.303559][ T30] ? genl_start+0x677/0x950 [ 399.308977][ T30] __netlink_dump_start+0x6d9/0x9b0 [ 399.314621][ T30] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 399.320792][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 399.342583][ T30] ? __dev_queue_xmit+0x86d/0x4300 [ 399.352404][ T30] ? __pfx_genl_get_cmd+0x10/0x10 [ 399.359059][ T30] ? __pfx_genl_start+0x10/0x10 [ 399.370936][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 399.376603][ T30] ? __pfx_genl_done+0x10/0x10 [ 399.388049][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.406460][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.431499][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 399.467265][ T5180] usb 5-1: USB disconnect, device number 10 [ 399.476304][ T30] genl_rcv_msg+0x470/0x800 [ 399.481025][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.504746][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.510545][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 399.518460][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.528592][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 399.535825][ T30] netlink_rcv_skb+0x16b/0x440 [ 399.540805][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.557209][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.562514][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.570948][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.583604][ T30] ? down_read+0xc9/0x330 [ 399.620601][ T5153] gspca_spca508: reg_read err -110 [ 399.622889][ T30] ? __pfx_down_read+0x10/0x10 [ 399.633319][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.644443][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 399.649975][ T30] genl_rcv+0x28/0x40 [ 399.651828][ T5153] gspca_spca508: reg_read err -32 [ 399.654134][ T30] netlink_unicast+0x544/0x830 [ 399.667662][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.674383][ T5153] gspca_spca508: reg_read err -32 [ 399.680296][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 399.692576][ T5153] gspca_spca508: reg_read err -32 [ 399.700427][ T5153] gspca_spca508: reg_read err -32 [ 399.705242][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.708772][ T5153] gspca_spca508: reg write: error -32 [ 399.723119][ T5153] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 399.725797][ T30] netlink_sendmsg+0x8b8/0xd70 [ 399.754584][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.775840][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.781170][ T30] ? __import_iovec+0x1fd/0x6e0 [ 399.795091][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.813157][ T30] ____sys_sendmsg+0xab5/0xc90 [ 399.818197][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 399.823678][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.823914][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.835083][ T30] ? __pfx___futex_wait+0x10/0x10 [ 399.839970][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.847346][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 399.854724][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.867314][ T30] ? try_to_wake_up+0x14b/0x13e0 [ 399.872261][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.881899][ T30] ___sys_sendmsg+0x135/0x1e0 [ 399.885308][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.890564][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.901749][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.920066][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.923978][ T30] ? __fget_light+0x173/0x210 [ 399.930372][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.945622][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.946080][ T30] __sys_sendmsg+0x117/0x1f0 [ 399.956293][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.969404][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.971945][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.982294][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 399.991039][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.007548][ T30] do_syscall_64+0xcd/0x250 [ 400.012141][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.012202][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.027168][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.031486][ T30] RIP: 0033:0x7ff23e775b59 [ 400.043097][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.053690][ T30] RSP: 002b:00007ff23f596048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.062260][ T30] RAX: ffffffffffffffda RBX: 00007ff23e905f60 RCX: 00007ff23e775b59 [ 400.062838][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.070996][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000c [ 400.088976][ T30] RBP: 00007ff23e7e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 400.092877][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.099363][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.118936][ T30] R13: 000000000000000b R14: 00007ff23e905f60 R15: 00007ffdc08a1768 [ 400.124040][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.127438][ T30] [ 400.143145][ T30] [ 400.143145][ T30] Showing all locks held in the system: [ 400.150812][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.178940][ T30] 1 lock held by khungtaskd/30: [ 400.180612][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.193729][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.193948][ T30] #0: ffffffff8dbb29a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 400.218289][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.235422][ T30] 3 locks held by kworker/u8:3/52: [ 400.235444][ T30] 3 locks held by kworker/u8:4/62: [ 400.235460][ T30] #0: ffff888029d7b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 400.235539][ T30] #1: ffffc900015d7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 400.235620][ T30] #2: ffffffff8f763ce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x1500 [ 400.235701][ T30] 3 locks held by kworker/1:2/928: [ 400.235718][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 400.235790][ T30] #1: ffffc90003c7fd80 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 400.235863][ T30] #2: ffff88802d224240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1bb/0x26e0 [ 400.262364][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.284910][ T30] 2 locks held by kworker/u8:9/2475: [ 400.323500][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.349068][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.359817][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.370003][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.370925][ T30] #0: [ 400.380843][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.394354][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.399257][ T30] ffff8880b923ec98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 400.414288][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.418750][ T30] #1: ffff8880b9228a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 400.439998][ T30] 2 locks held by getty/4849: [ 400.440659][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.445790][ T30] #0: ffff88802f1020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 400.466214][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.469145][ T30] #1: [ 400.490365][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.491056][ T30] ffffc900031232f0 [ 400.504940][ T8376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.522536][ T8376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.531951][ T8376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.541041][ T8376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.543183][ T30] (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 400.563977][ T30] 4 locks held by kworker/1:3/5137: [ 400.569274][ T30] #0: ffff8880b923ec98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 400.579411][ T30] #1: ffff8880b9328a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 400.591017][ T30] #2: ffffffff8dbb29a0 (rcu_read_lock){....}-{1:2}, at: check_lifetime+0x73/0xab0 [ 400.600579][ T30] #3: ffffffff94dea408 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x199/0x540 [ 400.614593][ T30] 2 locks held by syz.0.392/6658: [ 400.619651][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.629461][ T30] #1: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b30 [ 400.639795][ T30] 3 locks held by syz.4.464/6984: [ 400.644988][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.653246][ T30] #1: ffff888078416678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0 [ 400.664349][ T30] #2: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 400.676280][ T30] 3 locks held by syz.3.482/7069: [ 400.681329][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.689758][ T30] #1: ffff888065de7678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0 [ 400.700390][ T30] #2: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 400.712872][ T30] 3 locks held by syz.1.578/7517: [ 400.718006][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.726375][ T30] #1: ffff888063317678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0 [ 400.738647][ T30] #2: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 400.749267][ T30] 3 locks held by syz.3.733/8134: [ 400.754360][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.762590][ T30] #1: ffff888060faa678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0 [ 400.773335][ T30] #2: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 400.785687][ T30] 3 locks held by syz.0.772/8293: [ 400.790807][ T30] #0: ffffffff8f801330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 400.799275][ T30] #1: ffff88801f9c1678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0 [ 400.809963][ T30] #2: ffffffff8dfb7fe8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xb1/0x1160 [ 400.822131][ T30] 3 locks held by syz-executor/8376: [ 400.828068][ T30] #0: ffffffff8f763ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 400.837744][ T30] #1: ffff888023ff5428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x203/0x4e0 [ 400.849487][ T30] #2: ffffffff8dbbe138 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 400.859903][ T30] 1 lock held by syz.3.811/8466: [ 400.865822][ T30] #0: ffffffff8dbbe000 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6c0 [ 400.876105][ T30] [ 400.878444][ T30] ============================================= [ 400.878444][ T30] [ 400.925610][ T5179] usb 4-1: USB disconnect, device number 11 [ 400.941249][ T30] NMI backtrace for cpu 1 [ 400.945610][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 400.955181][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 400.965251][ T30] Call Trace: [ 400.968547][ T30] [ 400.971492][ T30] dump_stack_lvl+0x116/0x1f0 [ 400.976205][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 400.981172][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.987184][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 400.993198][ T30] watchdog+0xf86/0x1240 [ 400.997485][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.002199][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.007421][ T30] ? __kthread_parkme+0x148/0x220 [ 401.012466][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.017153][ T30] kthread+0x2c1/0x3a0 [ 401.021252][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.026484][ T30] ? __pfx_kthread+0x10/0x10 [ 401.031107][ T30] ret_from_fork+0x45/0x80 [ 401.035540][ T30] ? __pfx_kthread+0x10/0x10 [ 401.040155][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.044953][ T30] [ 401.049983][ T30] Sending NMI from CPU 1 to CPUs 0: [ 401.055742][ C0] NMI backtrace for cpu 0 [ 401.055755][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 401.055786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 401.055802][ C0] RIP: 0010:do_raw_spin_lock+0xe2/0x2c0 [ 401.055844][ C0] Code: 65 48 8b 05 d0 3a 9b 7e 48 39 c2 0f 84 61 01 00 00 4c 8d 63 08 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 0f b6 14 02 <4c> 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 68 01 00 00 8b [ 401.055872][ C0] RSP: 0018:ffffc90000157890 EFLAGS: 00000802 [ 401.055894][ C0] RAX: dffffc0000000000 RBX: ffff888019b44600 RCX: 0000000000000001 [ 401.055913][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cb840 RDI: ffff888019b44604 [ 401.055933][ C0] RBP: 1ffff9200002af13 R08: 0000000000000000 R09: fffffbfff2856a82 [ 401.055952][ C0] R10: ffffffff942b5417 R11: 0000000000000000 R12: ffff888019b44608 [ 401.055971][ C0] R13: ffff888019b44610 R14: ffff888019b44600 R15: 0100000000000004 [ 401.055993][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 401.056020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.056039][ C0] CR2: 0000001b2f9e2ff8 CR3: 000000007d8d6000 CR4: 00000000003506f0 [ 401.056058][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.056075][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.056093][ C0] Call Trace: [ 401.056102][ C0] [ 401.056111][ C0] ? show_regs+0x8c/0xa0 [ 401.056153][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 401.056190][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 401.056229][ C0] ? nmi_handle+0x1a9/0x5c0 [ 401.056261][ C0] ? do_raw_spin_lock+0xe2/0x2c0 [ 401.056299][ C0] ? default_do_nmi+0x6a/0x160 [ 401.056340][ C0] ? exc_nmi+0x170/0x1e0 [ 401.056380][ C0] ? end_repeat_nmi+0xf/0x53 [ 401.056425][ C0] ? do_raw_spin_lock+0xe2/0x2c0 [ 401.056462][ C0] ? do_raw_spin_lock+0xe2/0x2c0 [ 401.056498][ C0] ? do_raw_spin_lock+0xe2/0x2c0 [ 401.056535][ C0] [ 401.056543][ C0] [ 401.056552][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 401.056592][ C0] ? lock_acquire+0x1b1/0x560 [ 401.056624][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 401.056667][ C0] ? try_to_wake_up+0x9a/0x13e0 [ 401.056699][ C0] try_to_wake_up+0x9a/0x13e0 [ 401.056731][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 401.056768][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 401.056803][ C0] complete+0xb0/0x200 [ 401.056830][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 401.056867][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.056911][ C0] usb_giveback_urb_bh+0x28f/0x570 [ 401.056949][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 401.056988][ C0] process_one_work+0x9c5/0x1b40 [ 401.057025][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 401.057056][ C0] ? __pfx_process_one_work+0x10/0x10 [ 401.057093][ C0] ? assign_work+0x1a0/0x250 [ 401.057123][ C0] bh_worker+0x5a4/0x8a0 [ 401.057159][ C0] ? __pfx_bh_worker+0x10/0x10 [ 401.057193][ C0] workqueue_softirq_action+0x12c/0x190 [ 401.057238][ C0] tasklet_action+0x14/0x70 [ 401.057283][ C0] handle_softirqs+0x216/0x8f0 [ 401.057322][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 401.057362][ C0] ? rcu_is_watching+0x12/0xc0 [ 401.057396][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 401.057434][ C0] ? smpboot_thread_fn+0x59d/0xa10 [ 401.057474][ C0] run_ksoftirqd+0x3a/0x60 [ 401.057512][ C0] smpboot_thread_fn+0x661/0xa10 [ 401.057552][ C0] ? __kthread_parkme+0x148/0x220 [ 401.057593][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 401.057635][ C0] kthread+0x2c1/0x3a0 [ 401.057674][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.057716][ C0] ? __pfx_kthread+0x10/0x10 [ 401.057757][ C0] ret_from_fork+0x45/0x80 [ 401.057799][ C0] ? __pfx_kthread+0x10/0x10 [ 401.057839][ C0] ret_from_fork_asm+0x1a/0x30 [ 401.057883][ C0] [ 401.458985][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 401.465884][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 401.475444][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 401.485528][ T30] Call Trace: [ 401.488844][ T30] [ 401.491797][ T30] dump_stack_lvl+0x3d/0x1f0 [ 401.496424][ T30] panic+0x6f5/0x7a0 [ 401.500338][ T30] ? __pfx_panic+0x10/0x10 [ 401.504774][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 401.510170][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 401.516235][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 401.521630][ T30] ? watchdog+0xd3d/0x1240 [ 401.526122][ T30] ? watchdog+0xd30/0x1240 [ 401.530568][ T30] watchdog+0xd4e/0x1240 [ 401.534837][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.539542][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.544774][ T30] ? __kthread_parkme+0x148/0x220 [ 401.549829][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.554536][ T30] kthread+0x2c1/0x3a0 [ 401.558632][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.563851][ T30] ? __pfx_kthread+0x10/0x10 [ 401.568458][ T30] ret_from_fork+0x45/0x80 [ 401.572887][ T30] ? __pfx_kthread+0x10/0x10 [ 401.577486][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.582264][ T30] [ 401.585480][ T30] Kernel Offset: disabled [ 401.589794][ T30] Rebooting in 86400 seconds..