last executing test programs: 27.111905654s ago: executing program 3 (id=57): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000df5ad2d02faea80fdec1776603b82e8a00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_io_uring_setup(0x5ddc, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x400000}}, 0x1c) 27.014174232s ago: executing program 3 (id=58): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd2", 0x42}], 0x1, 0x0, 0x0, 0x4040}], 0x1, 0x4000000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/92, 0x5c}], 0x2}, 0x1}], 0x1, 0x2022, 0x0) 26.719101289s ago: executing program 3 (id=60): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0xe68, 0x32, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe37, 0x3, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {0x0, 0x5}, {0x0, 0x4}, {0x200000}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0xa2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 26.698283549s ago: executing program 3 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1a4, 0xffffffff, 0xffffffff, 0x1a4, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@rand_addr=0x64010102, @multicast2, 0xffffff00, 0x6d76c5bcde614954, 'xfrm0\x00', 'bridge0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x94, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xd}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffa, 0xf, [0x32, 0x10, 0x35, 0x22, 0x1b, 0x31, 0x30, 0x21, 0x3a, 0x23, 0x1b, 0x2d, 0x23, 0x29, 0x2e, 0x21], 0x2, 0x2, 0xc}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0x1fe0000ff, 'hsr0\x00', 'ip_vti0\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x294) r1 = socket$inet6(0xa, 0x806, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) landlock_restrict_self(r2, 0x0) (async) getresgid(&(0x7f0000000540), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) (async) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r1, 0xfffffffd) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000d01008e5dba702c510f654ce791eb3bdf5cd00000040000"], 0x10}}], 0x2, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000dc0)={0x2fc, r10, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x153, 0x2a, [@random={0x2, 0x4d, "063c8bc5e52a7ab15c88a8bfc7e27d2929086a2d64099a2353536acc14d0ba3eb8968357e006255d55d994fb112e4173d54da3eee0e9333c379734fda5fa4261fac8cc3a187894549ae66df7b8"}, @measure_req={0x26, 0xd1, {0x4, 0x2, 0x6, "776f0566ff60c4a38f6e112a36a25cd1bd175084319199ed4b98eaf16bf860018b630947eeece8c11edb999150e5345ddd5ae8d4076f17da15086c85f840d15eaec89429cd03c1d3d5fb7f025a3dbecee9870d9c7d7dbd0e3bc7800012523e95e9a63ee0700b544da97fe50abf3c59e0358c122408827ec6cdff129456a5478b55cd067d8ef4b9bbef248d4e5feef4acb4fb25780bffb43ff54772fee91d9ee3d08430eb948bce8319b2aa655db4fae8e17406072c482193e698060b2057ddd964905501e9bf2cb3e5c6a56d3a45"}}, @link_id={0x65, 0x12, {@random="51758a52cc8e", @broadcast}}, @chsw_timing={0x68, 0x4, {0x3ff, 0x42f0}}, @tim={0x5, 0x11, {0x2, 0x74, 0xe, "5af4b912c800ea53285e0b67d023"}}]}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_KEYS={0x150, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "893b13cd3f"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "148b7fcd65a6a8c80613258fd7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "334059aad6"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xf60417cb9d9b5aac}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "89e4996d93"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3032dfb13a3232e3c1d8350de7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0f0d2d11b2b4e6ac14cc80912"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x9e, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ef800f534c"}, @NL80211_KEY_SEQ={0x10, 0x4, "93878f5e125ac1817e774515"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "10eead0a9381d9ffbd84c4b5f15bd7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "20060300"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2fc}}, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r12, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @multicast1}, @nl=@unspec}) (async) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) 26.606000278s ago: executing program 3 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x2000000}, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}}, 0x0) 26.287461629s ago: executing program 3 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x2e, 0x0, 0x9}, {0xa4, 0xfe}, {0x6}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x13) 18.075483757s ago: executing program 0 (id=123): syz_usb_disconnect(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000400)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000240)={0x40, 0x21, 0x3a, {0x3a, 0x8, "a911a1d54a977cba168b45501626fa081471daab04543d35d86149a1870aa4790a8761c55f1ef379b50bfb2c0bc5b74facd6da67a394271b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x34, @string={0x34, 0x3, "85e9371cbebc8a071fff9052633e1bb368d52278c3f0c955db917590564ed3571c701b41529dfdd9880bf97cf4b2e1a14fe7"}}, &(0x7f0000000a80)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "06cb7bb9c16aa671cbfd7af2c74902c5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xe, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x7, 0x95d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x3, 0x400, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x5, 0x9, 0x440b, 0x6}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x0, 0x6, 0x0, "2c20a208", "db5c6953"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x1, 0x3, 0x0, 0x2, 0x2}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000b40)={0x20, 0x1, 0x94, "1d7417104c2ba3dc12d0af2f405423f166eb97bd4a788201a5d2c56b7b997516bb85610b36f4089bfdf6d1f03bd1283cbc08a6f9f4187df0aa129b44f2a1999d8a000efa42b55f2ac74a405e7270a7fe6d66af2a1ad9d23b90335dbc0be8432b103dba2ed8bc01ccc9d818589cf249ad27c21ab9494a69a7161ee10c66d40c1e8a76295572f7d40ccad3f15724cd4fbb0dddcb0d"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b91e"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2}, &(0x7f0000000e00)={0x40, 0x13, 0x6}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "49ef"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x9}}) syz_usb_connect(0x0, 0xe8, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xea, 0x4b, 0xda, 0xff, 0x4971, 0x8024, 0x7fc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x2, 0x7f, 0xff, 0xa0, 0x2, [{{0x9, 0x4, 0x87, 0x43, 0x0, 0xbd, 0x9a, 0xfe, 0xf9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9a5b683d"}, {0x5, 0x24, 0x0, 0x1e0}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x3, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x70}}]}}, {{0x9, 0x4, 0xda, 0x19, 0x3, 0xa6, 0x4b, 0x67, 0x0, [], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0x1, 0x9, 0xfd}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x2, 0x9, 0x6, [@generic={0x7f, 0x8, "ffa185034820f0161cd79da13b8e43c735422a2690665e37c1d5fa5dc7eae9ef7f16724fc1b7585534d4af6fae4d8bdaafdb4f9fd85349041ac84ab362e52245e3f266e8d65822d56655b2fc35cf70ce0030a8e5111f62c0b40d2161405ef8fd6d5635d85bee993b53e8e872130a34e89772a40eb037807e56787db649"}]}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x3f, &(0x7f0000000300)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e6f05f7ef5e3ab6c75b62fbf84b90e79"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "65cb5251e71e8c5886b3854350769f2d"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe5, 0x2, 0x2, 0x5400, 0x4}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x410}}, {0xde, &(0x7f0000000980)=@string={0xde, 0x3, "4fc20be60eb91719a4f93d7c6a7d52efb36f752b1c58a8a0bd5100f427a8e55bc4736ce5f21fb97c99034cfd9d27ae0b24b76e169179d3cca755142fbf60186146d80910bd9c4daeec7683ebc250ee55e0973b5c939500ae1d521e09ddc93a63103ec230ecb41eb686e8f038f4c376a1838fc5b0a86721c002634249fbfbbb4eeabdb0fa21c0bd1e28c72a70e975a1301b952aa8d1d3ec1e47986f42235e376d6c6a00a0388e16bc830c18e778101f148cd0916b36fd2c42b7d8e70852f333dc2543ce546783bc94ecb34065f0f42ca1f46694af279c966c0cc4a41d"}}]}) r1 = socket$alg(0x26, 0x5, 0x0) getpeername(r1, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000000c0)=0x80) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_usb_ep_read(r0, 0x0, 0x1a, &(0x7f0000001040)=""/26) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/223, 0xdf}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000500)=""/255, 0xff}], 0x3}}], 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110c000000000000000005000000180001801400020073797a5f74756e0000000000000000001800038014000380"], 0x44}}, 0x0) 16.714514199s ago: executing program 1 (id=127): r0 = syz_clone(0x6832091, 0x0, 0x48, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000400)={@my=0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_io_uring_setup(0xed0, &(0x7f0000000080)={0x0, 0xfffffffc, 0x10300, 0x0, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x13f9, 0x10100, 0x0, 0x30b, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000202010100000000000000000a00000006000740000000004400028006000340000000002c00018014000300fc00000000000000000000000000000014000400fc0000000000000000000000000000000c0002", @ANYRES8=r8, @ANYRES8=r3], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r6}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) io_setup(0x9, &(0x7f00000002c0)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00000000000000e4ffffff00"], 0x24}}, 0x0) r14 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r14) r15 = syz_usb_connect(0x4, 0x4a, &(0x7f00000004c0)=ANY=[@ANYRES8=r11, @ANYRESDEC=r9], 0x0) syz_usb_control_io(r14, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r15, 0x82, 0x88, &(0x7f00000005c0)=ANY=[]) r16 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r15) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, &(0x7f0000000300)) ptrace(0x13, r0) 13.642663634s ago: executing program 0 (id=142): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x7, 0x800, 0x0, 0x800, {0x4, 0x0, 0x4, 0x69, 0x200, 0x3, 0x2, 0x5, 0x4cab, 0xe154, 0x81, 0x4, 0x10, 0xf9, "fe1d00003413000000ddffffff0caa000000090000000000000004b427180010"}}) 13.266351687s ago: executing program 0 (id=134): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000e8ffffff7b0a0c0500000000070000000003080095264c0000640000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 12.892068708s ago: executing program 0 (id=136): syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x9, 0x81, 0x8, 0xff, 0x6}, 0x5, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000edffffff0100000000", @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004000000050006"], 0x44}}, 0x0) 12.891476183s ago: executing program 1 (id=137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x4bc, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f4, 0x3d8, 0x3d8, 0x3f4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x1bc, 0x2e4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x2f, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x518) 12.512184544s ago: executing program 1 (id=138): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000017000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x0) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0xffffffff, 0x2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000480)=@newtaction={0xd4, 0x30, 0x216822a75a8bdd29, 0x0, 0xffffffff, {}, [{0xc0, 0x1, [@m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7b, 0x3, '!:\x00$\xa7\xadn\xee\xdbx\x9c\xf4\x19(\xd8\xdb\xbbP\xe1zP\xc2=8\\9\aB\xb56\xa9\x84~\xf80f\xc4u\x8c\x99\xc1b[\xd2zB+ \vs\x83p\xb4\x16a\xf8\x7f?\r\xb2[\x1fJ\xde\x8a\xd6^\xc7K\xcbS\xda\xfeT4\xe8\x84\nMo\x81\xcd/\xde\xe8\xca Z5>TO\x10\xef\x00)x\xb2\x9dc\xe4\x1b\n\xf9\xae\xe3\xfb\xfe\xe9\xf3\f,*xms\xc5\b\f'}, @TCA_DEF_DATA={0x5, 0x3, '\x04'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_submit(r4, 0x0, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r5, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000a00)={r7, r5, r6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10, 0x76}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x44}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 6.359916807s ago: executing program 0 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) 6.173921692s ago: executing program 0 (id=143): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008001"], 0x26}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r4) 6.061756958s ago: executing program 1 (id=144): r0 = socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700000000000000000000000000dd80d18a", 0x48}], 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe92f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40005) 5.873393772s ago: executing program 1 (id=146): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80081) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x20, 0x20}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioprio_set$uid(0x3, r4, 0x2004) ioprio_set$pid(0x2, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x8001100) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="2000000010003b08000000000000000000e60000d6a0a57d042fdded5c1981c352b8b0b91fe1eb6b50d7979d601e06c1133c046e180e9a0fbab7558e00", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001500)) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000080)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x40585414) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x20, &(0x7f00000012c0)={&(0x7f00000002c0)=""/4096, 0x1000, 0x0, &(0x7f0000000240)=""/46, 0x2e}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000010000000500"/27], 0x48) 5.271233406s ago: executing program 1 (id=150): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0xe68, 0x32, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe37, 0x3, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {0x0, 0x5}, {0x0, 0x4}, {0x200000}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0xa2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.607856449s ago: executing program 4 (id=155): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000001500)="adf5bd04f01eccec95c1c5ca7fba623735df51cf89844d9bad7429917e03ad4b4cc6ae623ad8c0924b316f0e6d195479b75186ca55315366ef5d0b491b1811e932fb16a15906cab57fa112718bef35405bee39435abc9aa27f44c0fb7d15e1d8dd4b7a59deae296177fe9316e72cbc89f7e7e7c83d3ffae7d847a21894888b3de40826e54e7a0fc7b552c388637004dc3ea210d2c6dfc6283f690afa5b85b25939464a350dcdf1c38d97854aba19593fc884caec78d9c0a80c", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x4e0}], 0x1}}], 0x2, 0x400c804) sendto$inet6(r1, &(0x7f0000000000)="3db5a134393df8c80a9892fb", 0xc, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1b}, 0x8) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0200000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)='(\x00', 0x2, 0x0) 3.568740775s ago: executing program 2 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0xc, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 3.43286727s ago: executing program 4 (id=157): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xb7, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902a50003010640020904000000010100000a240104000602010209240306ff01050429090401000001020000da0401010101020000072401010702000924020207000104070a2402ea0c2402014904065fe01be97b0c240201080401535dd5ee7209050109000229023c072501020401000904020000010200000904020101010200000b2402010302719a526cc809058209200001920107250100ac0300000000000000"], &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x6, 0x8, 0x20, 0x1}, 0xc6, &(0x7f0000000140)={0x5, 0xf, 0xc6, 0x6, [@generic={0x62, 0x10, 0xb, "ca180bc4516a171f10f8ac8ef6a216dc17ae63dc389e45cebc9cef51d55914eabdf8a3ae62dc7ca571b994f147695b766c47ab48c232fcd137337f75b6f84dad874ed44fb08c1211167b6cf47d17c01d2165dc81503161a6cdf15134dad95e"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1a, 0x4, 0xfff, 0xf00, 0x3, [0xffc000, 0xc000, 0x140f0, 0xff3fcf]}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x6, 0xff0f, 0x799, [0x0, 0xff005f, 0x30]}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x5, 0xff0f}, @ss_container_id={0x14, 0x10, 0x4, 0x63, "3847c6d4a16dce7a85abb3e7228e35a1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x33, 0x1c, 0x6, 0xe, 0xb4}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x447}}, {0x81, &(0x7f0000000280)=ANY=[@ANYRES32=r0]}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="400f010000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xba}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="001700bb6ba4"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.290310902s ago: executing program 2 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000009000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.080330368s ago: executing program 2 (id=159): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x104e408, 0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) dup(r1) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r3, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0xdfbf, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3bc, 0x1ac, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f4, 0x20a, 0x278, 0x2f4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1ac, 0x0, {0x0, 0x400000000000000}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x1}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x3c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x418) 2.532319002s ago: executing program 2 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x1c}], 0x1}, 0x5865) 2.385557766s ago: executing program 2 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 2.212027629s ago: executing program 2 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a0006000802110000002100040067000400cc0004000801060066003e88000004001e010a0034"], 0x5c}}, 0x0) 606.684207ms ago: executing program 4 (id=163): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf80", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) (async, rerun: 64) r0 = syz_io_uring_setup(0x238, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000006c0)=0x0, &(0x7f0000000300)=0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0xac041, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) exit(0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) 339.682208ms ago: executing program 4 (id=164): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000042e3efd6c9f5138276241e70ea", @ANYRES16=r0, @ANYBLOB="330300000000040000001c000000"], 0x14}, 0x1, 0xa60d000000000000, 0x0, 0x4c080}, 0x4) 210.369802ms ago: executing program 4 (id=165): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000120000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000"], 0xec}}, 0x0) 0s ago: executing program 4 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x6f, 0x3, 0x2, 0xfa, 0x8, 0x7, 0x1, 0x81, 0x5, 0xff, 0x1e, 0x9, 0xff, 0x38, 0x0, 0xf}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x0, 0xff}}) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0x100}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 52.108449][ T5217] cgroup: Unknown subsys name 'net' [ 52.217560][ T5217] cgroup: Unknown subsys name 'cpuset' [ 52.225408][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.492645][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.175780][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.192854][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.200724][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.205632][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.216336][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.216659][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.223781][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.232164][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.239995][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.246335][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.253649][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.259823][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.266703][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.273282][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.282184][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.287971][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.301998][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.310498][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.310807][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.318041][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.333779][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.333964][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.341560][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.353571][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.362974][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.364304][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.377914][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.424429][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.434455][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.442148][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.863460][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 57.894578][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 57.931405][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 57.995905][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 58.182964][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.190529][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.198516][ T5248] bridge_slave_0: entered allmulticast mode [ 58.206183][ T5248] bridge_slave_0: entered promiscuous mode [ 58.220385][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.227642][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.235290][ T5246] bridge_slave_0: entered allmulticast mode [ 58.241884][ T5246] bridge_slave_0: entered promiscuous mode [ 58.248819][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 58.272318][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.279718][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.286958][ T5248] bridge_slave_1: entered allmulticast mode [ 58.293524][ T5248] bridge_slave_1: entered promiscuous mode [ 58.308192][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.315488][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.322666][ T5244] bridge_slave_0: entered allmulticast mode [ 58.329928][ T5244] bridge_slave_0: entered promiscuous mode [ 58.336938][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.344634][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.351844][ T5246] bridge_slave_1: entered allmulticast mode [ 58.358866][ T5246] bridge_slave_1: entered promiscuous mode [ 58.377983][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.385389][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.392570][ T5243] bridge_slave_0: entered allmulticast mode [ 58.399905][ T5243] bridge_slave_0: entered promiscuous mode [ 58.408125][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.415962][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.423159][ T5243] bridge_slave_1: entered allmulticast mode [ 58.430129][ T5243] bridge_slave_1: entered promiscuous mode [ 58.442780][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.450421][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.457948][ T5244] bridge_slave_1: entered allmulticast mode [ 58.465328][ T5244] bridge_slave_1: entered promiscuous mode [ 58.493467][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.522583][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.543127][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.572569][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.593545][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.614850][ T5248] team0: Port device team_slave_0 added [ 58.622884][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.636756][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.657516][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.676446][ T5248] team0: Port device team_slave_1 added [ 58.696643][ T5246] team0: Port device team_slave_0 added [ 58.738628][ T5246] team0: Port device team_slave_1 added [ 58.759151][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.767191][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.774456][ T5247] bridge_slave_0: entered allmulticast mode [ 58.781062][ T5247] bridge_slave_0: entered promiscuous mode [ 58.792287][ T5243] team0: Port device team_slave_0 added [ 58.798833][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.806393][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.832607][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.854410][ T5244] team0: Port device team_slave_0 added [ 58.869094][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.876363][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.902622][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.914953][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.922086][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.930225][ T5247] bridge_slave_1: entered allmulticast mode [ 58.940015][ T5247] bridge_slave_1: entered promiscuous mode [ 58.947828][ T5243] team0: Port device team_slave_1 added [ 58.963136][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.970136][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.996236][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.015182][ T5244] team0: Port device team_slave_1 added [ 59.021810][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.029026][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.055053][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.091838][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.119920][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.129531][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.155973][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.176975][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.183956][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.210455][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.225532][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.244051][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.251211][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.277391][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.301690][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.308805][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.335236][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.380393][ T5248] hsr_slave_0: entered promiscuous mode [ 59.387425][ T5248] hsr_slave_1: entered promiscuous mode [ 59.395075][ T4622] Bluetooth: hci3: command tx timeout [ 59.395080][ T54] Bluetooth: hci4: command tx timeout [ 59.395346][ T4622] Bluetooth: hci1: command tx timeout [ 59.400739][ T54] Bluetooth: hci2: command tx timeout [ 59.420986][ T5247] team0: Port device team_slave_0 added [ 59.452415][ T5244] hsr_slave_0: entered promiscuous mode [ 59.460414][ T5244] hsr_slave_1: entered promiscuous mode [ 59.467533][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.475463][ T54] Bluetooth: hci0: command tx timeout [ 59.481215][ T5244] Cannot create hsr debugfs directory [ 59.496114][ T5247] team0: Port device team_slave_1 added [ 59.504056][ T5246] hsr_slave_0: entered promiscuous mode [ 59.510294][ T5246] hsr_slave_1: entered promiscuous mode [ 59.517478][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.525585][ T5246] Cannot create hsr debugfs directory [ 59.546654][ T5243] hsr_slave_0: entered promiscuous mode [ 59.552745][ T5243] hsr_slave_1: entered promiscuous mode [ 59.559186][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.567072][ T5243] Cannot create hsr debugfs directory [ 59.628379][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.636229][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.662258][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.702159][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.709283][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.736061][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.873725][ T5247] hsr_slave_0: entered promiscuous mode [ 59.881679][ T5247] hsr_slave_1: entered promiscuous mode [ 59.888424][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.896303][ T5247] Cannot create hsr debugfs directory [ 60.049832][ T5248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.062606][ T5248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.090715][ T5248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.114027][ T5248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.164984][ T5246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.173789][ T5246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.191613][ T5246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.201373][ T5246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.253288][ T5244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.262228][ T5244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.283192][ T5244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.293413][ T5244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.368863][ T5243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.381810][ T5243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.394006][ T5243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.408596][ T5243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.489114][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.509030][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.536561][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.546690][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.558828][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.569990][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.583448][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.590813][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.634578][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.641703][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.668613][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.685819][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.718927][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.762992][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.770141][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.788380][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.810006][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.817128][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.852165][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.859355][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.880531][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.907464][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.935630][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.942738][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.980647][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.006272][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013354][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.030520][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.057087][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.064237][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.096999][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.140119][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.185648][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.192809][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.203329][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.210499][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.237991][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.261629][ T5248] veth0_vlan: entered promiscuous mode [ 61.273164][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.332014][ T5248] veth1_vlan: entered promiscuous mode [ 61.369142][ T5246] veth0_vlan: entered promiscuous mode [ 61.390823][ T5244] veth0_vlan: entered promiscuous mode [ 61.410723][ T5246] veth1_vlan: entered promiscuous mode [ 61.438253][ T5248] veth0_macvtap: entered promiscuous mode [ 61.448060][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.475647][ T5235] Bluetooth: hci1: command tx timeout [ 61.475671][ T4622] Bluetooth: hci4: command tx timeout [ 61.481075][ T5235] Bluetooth: hci3: command tx timeout [ 61.492989][ T54] Bluetooth: hci2: command tx timeout [ 61.498393][ T5248] veth1_macvtap: entered promiscuous mode [ 61.507090][ T5244] veth1_vlan: entered promiscuous mode [ 61.538650][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.553011][ T5246] veth0_macvtap: entered promiscuous mode [ 61.565009][ T54] Bluetooth: hci0: command tx timeout [ 61.576529][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.590399][ T5243] veth0_vlan: entered promiscuous mode [ 61.605956][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.619887][ T5246] veth1_macvtap: entered promiscuous mode [ 61.629282][ T5248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639489][ T5248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.648787][ T5248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.657859][ T5248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.677241][ T5243] veth1_vlan: entered promiscuous mode [ 61.707729][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.718959][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.732318][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.742168][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.753263][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.765674][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.805758][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.820002][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.830139][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.838939][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.851468][ T5244] veth0_macvtap: entered promiscuous mode [ 61.861227][ T5244] veth1_macvtap: entered promiscuous mode [ 61.889257][ T5243] veth0_macvtap: entered promiscuous mode [ 61.920736][ T5243] veth1_macvtap: entered promiscuous mode [ 61.957697][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.968582][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.978976][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.989523][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.001362][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.019840][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.036021][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.047028][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.058369][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.068404][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.079192][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.090094][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.124726][ T5244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.133503][ T5244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.143662][ T5244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.152585][ T5244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.187555][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.198702][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.208937][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.219907][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.232208][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.242708][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.253619][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.266513][ T5247] veth0_vlan: entered promiscuous mode [ 62.280243][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.293603][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.309094][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.311200][ T5247] veth1_vlan: entered promiscuous mode [ 62.320155][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.376208][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.389277][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.399319][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.410115][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.420136][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.430617][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.443024][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.452433][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.468393][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.487514][ T5248] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.563107][ T5247] veth0_macvtap: entered promiscuous mode [ 62.572763][ T5247] veth1_macvtap: entered promiscuous mode [ 62.589321][ T5243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609119][ T5243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.620200][ T5243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.622098][ T5293] xt_hashlimit: Unknown mode mask FF0, kernel too old? [ 62.629034][ T5243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.656149][ T5293] fuseblk: Bad value for 'user_id' [ 62.661322][ T5293] fuseblk: Bad value for 'user_id' [ 62.687296][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.699406][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.709975][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.721679][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.731857][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.742691][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.753048][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.763882][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.776723][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.863636][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.875741][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.887728][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.898311][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.908204][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.918942][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.924476][ T1790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.928801][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.946968][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.958430][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.969353][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.978313][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.987227][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.996540][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.054809][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.062819][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.067062][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.084027][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.121133][ T1790] usb 2-1: Using ep0 maxpacket: 8 [ 63.141131][ T1790] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 63.151556][ T1790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.153911][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.168174][ T1790] usb 2-1: Product: syz [ 63.173063][ T1790] usb 2-1: Manufacturer: syz [ 63.189377][ T1790] usb 2-1: SerialNumber: syz [ 63.195375][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.222627][ T1790] usb 2-1: config 0 descriptor?? [ 63.257374][ T1790] gspca_main: sq905-2.14.0 probing 2770:9120 [ 63.289452][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.311540][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.375337][ T5298] team0: Port device veth0_to_team added [ 63.406665][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.425442][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.523070][ T5298] team0: Port device veth0_to_team removed [ 63.559491][ T5235] Bluetooth: hci3: command tx timeout [ 63.565323][ T5238] Bluetooth: hci4: command tx timeout [ 63.570511][ T4622] Bluetooth: hci1: command tx timeout [ 63.570930][ T54] Bluetooth: hci2: command tx timeout [ 63.590220][ T5298] team0: Port device team_slave_0 removed [ 63.634409][ T54] Bluetooth: hci0: command tx timeout [ 63.643850][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.690685][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.942862][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 63.954562][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 63.962662][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 63.971619][ T1790] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 63.982051][ T1790] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 63.999279][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.008922][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.026766][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.040632][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.051692][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.075648][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.083439][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.099411][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.109834][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.145314][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.149072][ T5322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.167461][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.180340][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.193009][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.219925][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.229246][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.239303][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.249251][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.274981][ T1790] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.318042][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.349830][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.363677][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.373419][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.383568][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.398083][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.408963][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.420838][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.429938][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.430571][ T5328] openvswitch: netlink: Missing key (keys=40, expected=80) [ 64.448010][ T1790] usb 1-1: config 0 has no interfaces? [ 64.457462][ T1790] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 64.470783][ T1790] usb 1-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 64.489599][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.515751][ T1790] usb 1-1: Product: syz [ 64.524810][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.535123][ T1790] usb 1-1: Manufacturer: syz [ 64.539970][ T1790] usb 1-1: SerialNumber: syz [ 64.545991][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.557398][ T1790] usb 1-1: config 0 descriptor?? [ 64.571533][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.598530][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.615335][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.623211][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.634076][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.642240][ T5285] hid-generic 0001:0009:0000.0001: unknown main item tag 0x0 [ 64.666955][ T5285] hid-generic 0001:0009:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 64.774454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.814353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 64.907353][ T5342] fuse: Bad value for 'fd' [ 65.044871][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 65.621217][ T5290] usb 2-1: USB disconnect, device number 2 [ 65.634669][ T54] Bluetooth: hci2: command tx timeout [ 65.634746][ T4622] Bluetooth: hci3: command tx timeout [ 65.640135][ T5235] Bluetooth: hci4: command tx timeout [ 65.646495][ T5238] Bluetooth: hci1: command tx timeout [ 65.659232][ T5365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.718599][ T5238] Bluetooth: hci0: command tx timeout [ 65.802000][ T5371] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 65.810954][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.837341][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.973867][ T5371] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 66.244247][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.298071][ T5387] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 66.405897][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 66.437607][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.471673][ T5285] usb 2-1: config 0 descriptor?? [ 66.479402][ T5389] openvswitch: netlink: Missing key (keys=40, expected=80) [ 66.498864][ T5285] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 66.864855][ T5287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.068262][ T5290] usb 1-1: USB disconnect, device number 2 [ 67.084708][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 67.086972][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 67.087045][ T5287] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 67.087069][ T5287] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 67.087094][ T5287] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 67.087115][ T5287] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 67.087140][ T5287] usb 5-1: config 1 interface 0 has no altsetting 0 [ 67.087196][ T5287] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 67.087219][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.100230][ T5287] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 67.155215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 67.164185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.321815][ T5287] scsi host1: usb-storage 5-1:1.0 [ 67.424403][ T1790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.511734][ T5290] usb 5-1: USB disconnect, device number 2 [ 67.576940][ T1790] usb 3-1: Using ep0 maxpacket: 32 [ 67.604685][ T1790] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 67.604752][ T1790] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 67.604787][ T1790] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 67.604811][ T1790] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 67.604835][ T1790] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 67.604890][ T1790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.612051][ T1790] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 67.612084][ T1790] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 67.612144][ T1790] usb 3-1: Product: syz [ 67.612161][ T1790] usb 3-1: Manufacturer: syz [ 67.612177][ T1790] usb 3-1: SerialNumber: syz [ 67.622778][ T1790] usb 3-1: config 0 descriptor?? [ 67.623693][ T5401] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 67.641236][ T1790] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 67.667675][ T1790] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 67.971770][ T5420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 68.154283][ T5287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.169798][ T5285] usb 2-1: USB disconnect, device number 3 [ 68.273247][ T5427] syz_tun: entered promiscuous mode [ 68.292843][ T5427] syz_tun: left promiscuous mode [ 68.309225][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 68.340365][ T5287] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 68.340397][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.340418][ T5287] usb 1-1: Product: syz [ 68.340434][ T5287] usb 1-1: Manufacturer: syz [ 68.340450][ T5287] usb 1-1: SerialNumber: syz [ 68.342940][ T5287] usb 1-1: config 0 descriptor?? [ 68.346325][ T5287] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 68.347014][ T1790] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.513181][ T1790] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 68.513257][ T1790] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 68.513282][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.521042][ T1790] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 68.633588][ T5431] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.966185][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.123499][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 69.148023][ T5442] netlink: 284 bytes leftover after parsing attributes in process `syz.1.48'. [ 69.164437][ T8] usb 5-1: device descriptor read/64, error -71 [ 69.240086][ T5290] usb 3-1: USB disconnect, device number 2 [ 69.252009][ T5290] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 69.397717][ T5447] netlink: 284 bytes leftover after parsing attributes in process `syz.2.49'. [ 69.403375][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 69.439369][ T5448] bond1: entered allmulticast mode [ 69.445031][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.453993][ T5448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.557653][ T1790] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 69.604272][ T8] usb 5-1: device descriptor read/64, error -71 [ 69.725484][ T8] usb usb5-port1: attempt power cycle [ 69.762933][ T1790] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 69.771862][ T1790] stv0680 4-1:4.0: last error: 81, command = 0xcb [ 69.783104][ T1790] usb 4-1: USB disconnect, device number 2 [ 69.806870][ T5457] veth1_macvtap: left promiscuous mode [ 69.959633][ T5290] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.074364][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.111482][ T8] usb 5-1: device descriptor read/8, error -71 [ 70.147601][ T5290] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.161741][ T5290] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.174213][ T5290] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.183288][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.205352][ T5455] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 70.216975][ T5290] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.364326][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.384697][ T8] usb 5-1: device descriptor read/8, error -71 [ 70.514739][ T8] usb usb5-port1: unable to enumerate USB device [ 70.580486][ T46] usb 3-1: USB disconnect, device number 3 [ 70.716602][ T5287] gspca_stk1135: reg_w 0x203 err -110 [ 70.723359][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.730082][ T5287] gspca_stk1135: Sensor write failed [ 70.736061][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.742501][ T5287] gspca_stk1135: Sensor write failed [ 70.749766][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.757438][ T5287] gspca_stk1135: Sensor read failed [ 70.772024][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.794212][ T5287] gspca_stk1135: Sensor read failed [ 70.799463][ T5287] gspca_stk1135: Detected sensor type unknown (0x0) [ 70.803975][ T5479] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 70.823191][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.834536][ T5287] gspca_stk1135: Sensor read failed [ 70.839789][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.852953][ T5287] gspca_stk1135: Sensor read failed [ 70.861342][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.873532][ T5287] gspca_stk1135: Sensor write failed [ 70.899599][ T5287] gspca_stk1135: serial bus timeout: status=0x00 [ 70.906188][ T5287] gspca_stk1135: Sensor write failed [ 70.911523][ T5287] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 71.023825][ T5487] netlink: 284 bytes leftover after parsing attributes in process `syz.1.59'. [ 71.041012][ T5489] netlink: 'syz.3.60': attribute type 3 has an invalid length. [ 71.048827][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 71.210304][ T46] usb 1-1: USB disconnect, device number 3 [ 71.589368][ T5509] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 71.602949][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.641197][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.647880][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.729767][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.857600][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 71.900997][ T5514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 72.065952][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.310900][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.400907][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.410168][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.426975][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.446191][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.461079][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 72.477176][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.490916][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.585921][ T5530] netlink: 211388 bytes leftover after parsing attributes in process `syz.2.78'. [ 72.732948][ T5535] fuse: Bad value for 'fd' [ 72.792868][ T35] bridge_slave_1: left allmulticast mode [ 72.799508][ T35] bridge_slave_1: left promiscuous mode [ 72.810293][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.858938][ T35] bridge_slave_0: left allmulticast mode [ 72.874195][ T35] bridge_slave_0: left promiscuous mode [ 72.879980][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.440109][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.451781][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.462511][ T35] bond0 (unregistering): Released all slaves [ 73.497844][ T5545] netlink: 'syz.0.81': attribute type 6 has an invalid length. [ 73.516288][ T5546] netlink: 'syz.0.81': attribute type 4 has an invalid length. [ 73.843083][ T5558] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 73.878734][ T5560] netlink: 284 bytes leftover after parsing attributes in process `syz.0.86'. [ 73.951191][ T29] audit: type=1326 audit(1727598297.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.033524][ T29] audit: type=1326 audit(1727598297.333:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.087076][ T29] audit: type=1326 audit(1727598297.333:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.139106][ T29] audit: type=1326 audit(1727598297.333:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.208230][ T29] audit: type=1326 audit(1727598297.333:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.286629][ T29] audit: type=1326 audit(1727598297.343:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.289639][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 74.323445][ T35] hsr_slave_0: left promiscuous mode [ 74.327246][ T5578] netlink: 115 bytes leftover after parsing attributes in process `syz.2.89'. [ 74.336805][ T29] audit: type=1326 audit(1727598297.343:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.339083][ T5578] netlink: 115 bytes leftover after parsing attributes in process `syz.2.89'. [ 74.375367][ T29] audit: type=1326 audit(1727598297.343:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.397334][ T35] hsr_slave_1: left promiscuous mode [ 74.403764][ T29] audit: type=1326 audit(1727598297.343:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.427538][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.438168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.447287][ T29] audit: type=1326 audit(1727598297.343:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 74.481500][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.489172][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.514520][ T5238] Bluetooth: hci2: command tx timeout [ 74.549912][ T5582] netlink: set zone limit has 4 unknown bytes [ 74.566693][ T35] veth1_macvtap: left promiscuous mode [ 74.605075][ T35] veth0_macvtap: left promiscuous mode [ 74.620156][ T35] veth1_vlan: left promiscuous mode [ 74.627446][ T35] veth0_vlan: left promiscuous mode [ 74.644672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 74.724507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.770488][ T5594] ======================================================= [ 74.770488][ T5594] WARNING: The mand mount option has been deprecated and [ 74.770488][ T5594] and is ignored by this kernel. Remove the mand [ 74.770488][ T5594] option from the mount to silence this warning. [ 74.770488][ T5594] ======================================================= [ 74.837064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.095185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.360634][ T35] team0 (unregistering): Port device team_slave_1 removed [ 75.408736][ T35] team0 (unregistering): Port device team_slave_0 removed [ 75.964855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.024750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.213490][ T5536] chnl_net:caif_netlink_parms(): no params data found [ 76.367327][ T5623] __nla_validate_parse: 2 callbacks suppressed [ 76.367348][ T5623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 76.549641][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 76.594328][ T5238] Bluetooth: hci2: command tx timeout [ 76.777203][ T937] cfg80211: failed to load regulatory.db [ 77.119274][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.138147][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.145799][ T5536] bridge_slave_0: entered allmulticast mode [ 77.152850][ T5536] bridge_slave_0: entered promiscuous mode [ 77.162126][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.169991][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.177402][ T5536] bridge_slave_1: entered allmulticast mode [ 77.184809][ T5536] bridge_slave_1: entered promiscuous mode [ 77.214865][ T1790] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.226253][ T5536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.239070][ T5536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.318096][ T5536] team0: Port device team_slave_0 added [ 77.348848][ T5536] team0: Port device team_slave_1 added [ 77.364504][ T1790] usb 3-1: device descriptor read/64, error -71 [ 77.427521][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.445948][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.499510][ T5536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.519709][ T5665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 77.532725][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.540932][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.585230][ T5536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.624285][ T1790] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.638566][ T5670] netlink: 284 bytes leftover after parsing attributes in process `syz.4.109'. [ 77.708253][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 77.755544][ T1790] usb 3-1: device descriptor read/64, error -71 [ 77.770374][ T5536] hsr_slave_0: entered promiscuous mode [ 77.804687][ T5536] hsr_slave_1: entered promiscuous mode [ 77.825840][ T5536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.834345][ T5536] Cannot create hsr debugfs directory [ 77.864534][ T1790] usb usb3-port1: attempt power cycle [ 77.951836][ T5684] process 'syz.1.114' launched './file0' with NULL argv: empty string added [ 78.019559][ T5685] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 78.075871][ T5685] batman_adv: batadv0: Adding interface: team0 [ 78.082616][ T5685] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.110750][ T5685] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.131934][ T5689] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 78.139931][ T5689] netlink: 2 bytes leftover after parsing attributes in process `syz.0.113'. [ 78.149602][ T5689] team0: entered promiscuous mode [ 78.157106][ T5689] team_slave_0: entered promiscuous mode [ 78.165320][ T5689] team_slave_1: entered promiscuous mode [ 78.180422][ T5689] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.191330][ T5689] batman_adv: batadv0: Interface activated: team0 [ 78.198259][ T5689] batman_adv: batadv0: Interface deactivated: team0 [ 78.205181][ T1790] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 78.214781][ T5689] batman_adv: batadv0: Removing interface: team0 [ 78.226996][ T1790] usb 3-1: device descriptor read/8, error -71 [ 78.235869][ T5689] bridge0: port 3(team0) entered blocking state [ 78.247416][ T5689] bridge0: port 3(team0) entered disabled state [ 78.254036][ T5689] team0: entered allmulticast mode [ 78.259897][ T5689] team_slave_0: entered allmulticast mode [ 78.266208][ T5689] team_slave_1: entered allmulticast mode [ 78.286156][ T5689] bridge0: port 3(team0) entered blocking state [ 78.293777][ T5689] bridge0: port 3(team0) entered forwarding state [ 78.301946][ T5684] @ÿ: renamed from veth0_vlan (while UP) [ 78.474505][ T1790] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 78.505359][ T1790] usb 3-1: device descriptor read/8, error -71 [ 78.626309][ T1790] usb usb3-port1: unable to enumerate USB device [ 78.675745][ T5238] Bluetooth: hci2: command tx timeout [ 78.794295][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.984511][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 79.034717][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.076206][ T46] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 79.104224][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.146809][ T46] usb 2-1: Product: syz [ 79.177207][ T46] usb 2-1: Manufacturer: syz [ 79.181857][ T46] usb 2-1: SerialNumber: syz [ 79.235086][ T46] usb 2-1: config 0 descriptor?? [ 79.276077][ T46] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 79.528916][ T5720] netlink: 284 bytes leftover after parsing attributes in process `syz.0.121'. [ 80.091067][ T5731] xt_hashlimit: Unknown mode mask FF0, kernel too old? [ 80.112386][ T5731] fuseblk: Bad value for 'user_id' [ 80.120286][ T5731] fuseblk: Bad value for 'user_id' [ 80.224440][ T5287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.374404][ T1790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 80.395888][ T5287] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 80.411454][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.432428][ T5287] usb 1-1: config 0 descriptor?? [ 80.554374][ T1790] usb 3-1: Using ep0 maxpacket: 8 [ 80.577172][ T1790] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 80.595169][ T1790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.603550][ T1790] usb 3-1: Product: syz [ 80.615173][ T1790] usb 3-1: Manufacturer: syz [ 80.623089][ T1790] usb 3-1: SerialNumber: syz [ 80.643408][ T1790] usb 3-1: config 0 descriptor?? [ 80.677967][ T1790] gspca_main: sq905-2.14.0 probing 2770:9120 [ 80.756137][ T5238] Bluetooth: hci2: command tx timeout [ 80.879308][ T5724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.901582][ T46] gspca_sunplus: reg_r err -32 [ 80.908752][ T46] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 80.936519][ T5724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.975628][ T46] usb 2-1: USB disconnect, device number 4 [ 81.026728][ T5724] trusted_key: syz.0.123 sent an empty control message without MSG_MORE. [ 81.201667][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 81.390459][ T1790] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 81.405022][ T1790] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 81.524339][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.694351][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 81.712684][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.747849][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.773428][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.790675][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.803501][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.821808][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.844049][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.861500][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.881049][ T46] usb 2-1: config 0 descriptor?? [ 82.127577][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.189436][ T46] usb 2-1: USB disconnect, device number 5 [ 82.223675][ T46] usblp0: removed [ 83.112027][ T46] usb 3-1: USB disconnect, device number 8 [ 83.764562][ T5728] netlink: 'syz.4.125': attribute type 6 has an invalid length. [ 83.796676][ T5729] netlink: 'syz.4.125': attribute type 4 has an invalid length. [ 83.888655][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 83.996386][ T5729] syz.4.125 (5729) used greatest stack depth: 18864 bytes left [ 84.036869][ T5287] [drm:udl_init] *ERROR* Selecting channel failed [ 84.162445][ T5287] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 84.218989][ T5287] [drm] Initialized udl on minor 2 [ 84.324496][ T5752] netlink: 284 bytes leftover after parsing attributes in process `syz.4.132'. [ 84.341181][ T5287] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 84.393428][ T5287] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 84.440379][ T5755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.133'. [ 84.455084][ T1790] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 84.483451][ T5287] usb 1-1: USB disconnect, device number 4 [ 84.548126][ T1790] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 85.115158][ T5771] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.293726][ T5769] bond0: option use_carrier: invalid value (10) [ 91.315254][ T5779] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 91.440210][ T5779] team0: Port device wlan1 added [ 91.539259][ T5781] veth1_macvtap: left promiscuous mode [ 91.974599][ T5797] netlink: 284 bytes leftover after parsing attributes in process `syz.2.145'. [ 92.643340][ T5806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.717268][ T5806] xt_CT: No such helper "netbios-ns" [ 94.075841][ T5820] xt_connbytes: Forcing CT accounting to be enabled [ 94.101100][ T5820] SET target dimension over the limit! [ 94.669927][ T5831] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 94.679509][ T5288] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.844442][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 94.859906][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 94.879830][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.893809][ T5288] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.909359][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.918013][ T5288] usb 5-1: Product: syz [ 94.922964][ T5288] usb 5-1: Manufacturer: syz [ 94.935525][ T5288] usb 5-1: SerialNumber: syz [ 94.953794][ T5288] usb 5-1: config 0 descriptor?? [ 94.968416][ T5288] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.987739][ T5288] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 95.472676][ T5835] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 95.588691][ T5288] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 95.610241][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.619035][ T5288] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 95.663793][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 95.675725][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.550942][ T5288] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 96.577928][ T5288] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 96.591319][ T5288] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 96.610517][ T5288] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 96.621990][ T5288] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 96.633103][ T5288] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 96.654088][ T5288] usb 5-1: USB disconnect, device number 7 [ 97.668098][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 97.680058][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 102.113766][ T4622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.128082][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.136272][ T4622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.144951][ T4622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.153491][ T4622] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.161019][ T4622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.219286][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 103.234560][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 103.243812][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 103.252157][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 103.264023][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 103.271577][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.194506][ T4622] Bluetooth: hci5: command tx timeout [ 105.314423][ T4622] Bluetooth: hci6: command tx timeout [ 106.141428][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.155981][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.163775][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.174097][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.182049][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.189965][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.274386][ T5238] Bluetooth: hci5: command tx timeout [ 107.394414][ T5238] Bluetooth: hci6: command tx timeout [ 108.273519][ T4622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 108.284238][ T54] Bluetooth: hci7: command tx timeout [ 108.291874][ T4622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 108.300118][ T4622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 108.314910][ T4622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 108.322800][ T4622] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 108.330347][ T4622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 108.354662][ T5238] Bluetooth: hci5: command tx timeout [ 109.474425][ T5238] Bluetooth: hci6: command tx timeout [ 110.354452][ T4622] Bluetooth: hci7: command tx timeout [ 110.361970][ T5238] Bluetooth: hci8: command tx timeout [ 110.434492][ T5238] Bluetooth: hci5: command tx timeout [ 111.554665][ T5238] Bluetooth: hci6: command tx timeout [ 112.435595][ T5238] Bluetooth: hci8: command tx timeout [ 112.441131][ T4622] Bluetooth: hci7: command tx timeout [ 114.514490][ T4622] Bluetooth: hci7: command tx timeout [ 114.519950][ T4622] Bluetooth: hci8: command tx timeout [ 116.596992][ T4622] Bluetooth: hci8: command tx timeout [ 120.244144][ C0] sched: DL replenish lagged too much [ 133.084084][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090493][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.410037][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 133.427804][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 133.436047][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 133.443909][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 133.451865][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 133.459419][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 135.555462][ T5238] Bluetooth: hci9: command tx timeout [ 137.634352][ T5238] Bluetooth: hci9: command tx timeout [ 139.714365][ T5238] Bluetooth: hci9: command tx timeout [ 141.794444][ T5238] Bluetooth: hci9: command tx timeout [ 162.978183][ T4622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 162.994591][ T4622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 163.003507][ T4622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 163.011666][ T4622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 163.019907][ T4622] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 163.029575][ T4622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 163.553849][ T4622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 163.572458][ T4622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 163.580774][ T4622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 163.589020][ T4622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 163.596818][ T4622] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 163.606205][ T4622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 165.074510][ T5238] Bluetooth: hci10: command tx timeout [ 165.634411][ T5238] Bluetooth: hci11: command tx timeout [ 166.742353][ T4622] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 166.759504][ T4622] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 166.767934][ T4622] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 166.776379][ T4622] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 166.784674][ T4622] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 166.797213][ T4622] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 167.154384][ T4622] Bluetooth: hci10: command tx timeout [ 167.714349][ T4622] Bluetooth: hci11: command tx timeout [ 168.780572][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 168.797777][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 168.806319][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 168.815508][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 168.823237][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 168.834417][ T5238] Bluetooth: hci12: command tx timeout [ 168.843030][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 169.239834][ T5238] Bluetooth: hci10: command tx timeout [ 169.794439][ T5238] Bluetooth: hci11: command tx timeout [ 170.914408][ T4622] Bluetooth: hci12: command tx timeout [ 170.920833][ T5238] Bluetooth: hci13: command tx timeout [ 171.314288][ T5238] Bluetooth: hci10: command tx timeout [ 171.874423][ T5238] Bluetooth: hci11: command tx timeout [ 172.994434][ T4622] Bluetooth: hci12: command tx timeout [ 173.001999][ T5238] Bluetooth: hci13: command tx timeout [ 175.074551][ T4622] Bluetooth: hci12: command tx timeout [ 175.080132][ T5238] Bluetooth: hci13: command tx timeout [ 177.154479][ T5238] Bluetooth: hci13: command tx timeout [ 181.255704][ T5231] Bluetooth: hci4: command 0x0406 tx timeout [ 181.261838][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 181.270973][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 181.280865][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 193.562420][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 193.571589][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 193.581987][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 193.590069][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 193.598468][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 193.611838][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 194.534566][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540904][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.714586][ T54] Bluetooth: hci14: command tx timeout [ 196.601551][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 197.804549][ T5238] Bluetooth: hci14: command tx timeout [ 199.874502][ T5238] Bluetooth: hci14: command tx timeout [ 201.954372][ T5238] Bluetooth: hci14: command tx timeout [ 216.596250][ T5808] netlink: 'syz.1.150': attribute type 3 has an invalid length. [ 216.603951][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 222.884508][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.893162][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.903724][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.914693][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.922974][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.930882][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.965130][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.974664][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.982412][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.993506][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.002381][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.009832][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.994320][ T54] Bluetooth: hci0: command tx timeout [ 226.039837][ T54] Bluetooth: hci1: command tx timeout [ 227.069687][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.082795][ T4622] Bluetooth: hci0: command tx timeout [ 227.091860][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.107388][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.115582][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.124747][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.135653][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.319617][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 227.326317][ T4622] Bluetooth: hci5: command 0x0406 tx timeout [ 228.118923][ T5238] Bluetooth: hci1: command tx timeout [ 229.141699][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.157452][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.164791][ T54] Bluetooth: hci3: command tx timeout [ 229.171133][ T54] Bluetooth: hci0: command tx timeout [ 229.179938][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.194384][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.203398][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.213427][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.194325][ T54] Bluetooth: hci1: command tx timeout [ 231.236967][ T4622] Bluetooth: hci0: command tx timeout [ 231.242429][ T4622] Bluetooth: hci3: command tx timeout [ 231.249393][ T54] Bluetooth: hci4: command tx timeout [ 232.280628][ T54] Bluetooth: hci1: command tx timeout [ 232.438351][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 232.445957][ T4622] Bluetooth: hci7: command 0x0406 tx timeout [ 233.314425][ T5238] Bluetooth: hci4: command tx timeout [ 233.319970][ T5238] Bluetooth: hci3: command tx timeout [ 235.394429][ T5235] Bluetooth: hci4: command tx timeout [ 235.401347][ T5238] Bluetooth: hci3: command tx timeout [ 237.474349][ T5238] Bluetooth: hci4: command tx timeout [ 254.536088][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 254.544825][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 254.552684][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 254.560654][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 254.570669][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 254.578076][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 255.956094][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962541][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.594378][ T5235] Bluetooth: hci9: command tx timeout [ 258.674328][ T5235] Bluetooth: hci9: command tx timeout [ 260.754310][ T5235] Bluetooth: hci9: command tx timeout [ 262.834296][ T5235] Bluetooth: hci9: command tx timeout [ 285.167692][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 285.183253][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 285.194902][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 285.205180][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 285.212956][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 285.220693][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 285.566883][ T5235] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 285.584465][ T5235] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 285.593225][ T5235] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 285.605137][ T5235] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 285.614297][ T5235] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 285.623161][ T5235] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 287.314733][ T5235] Bluetooth: hci15: command tx timeout [ 287.715613][ T5235] Bluetooth: hci16: command tx timeout [ 287.875401][ T4622] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 287.891402][ T4622] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 287.903807][ T4622] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 287.919766][ T4622] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 287.927645][ T4622] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 287.935825][ T4622] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 288.764371][ T5235] Bluetooth: hci10: command 0x0406 tx timeout [ 288.770600][ T4622] Bluetooth: hci11: command 0x0406 tx timeout [ 289.323040][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 289.333037][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 289.346337][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 289.355997][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 289.365449][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 289.373886][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 289.400116][ T54] Bluetooth: hci15: command tx timeout [ 289.794271][ T54] Bluetooth: hci16: command tx timeout [ 290.034371][ T54] Bluetooth: hci17: command tx timeout [ 291.477639][ T4622] Bluetooth: hci18: command tx timeout [ 291.485366][ T54] Bluetooth: hci15: command tx timeout [ 291.880110][ T4622] Bluetooth: hci16: command tx timeout [ 292.114628][ T4622] Bluetooth: hci17: command tx timeout [ 293.554468][ T5235] Bluetooth: hci18: command tx timeout [ 293.562039][ T4622] Bluetooth: hci15: command tx timeout [ 293.879665][ T4622] Bluetooth: hci13: command 0x0406 tx timeout [ 293.886384][ T5235] Bluetooth: hci12: command 0x0406 tx timeout [ 293.954285][ T5238] Bluetooth: hci16: command tx timeout [ 294.194373][ T54] Bluetooth: hci17: command tx timeout [ 295.634274][ T54] Bluetooth: hci18: command tx timeout [ 296.275106][ T54] Bluetooth: hci17: command tx timeout [ 297.554873][ T30] INFO: task syz-executor:5536 blocked for more than 143 seconds. [ 297.563230][ T30] Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.604314][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.653784][ T30] task:syz-executor state:D stack:20016 pid:5536 tgid:5536 ppid:1 flags:0x20004006 [ 297.759923][ T54] Bluetooth: hci18: command tx timeout [ 297.765618][ T30] Call Trace: [ 297.768923][ T30] [ 297.771879][ T30] __schedule+0x1895/0x4b30 [ 297.823713][ T30] ? __pfx___schedule+0x10/0x10 [ 297.836273][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.841380][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.850950][ T30] ? schedule+0x90/0x320 [ 297.857846][ T30] schedule+0x14b/0x320 [ 297.862062][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.871813][ T30] __mutex_lock+0x6a7/0xd70 [ 297.882633][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.891187][ T30] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 297.900946][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.909882][ T30] unregister_netdevice_notifier_net+0x89/0x3a0 [ 297.918846][ T30] ? _raw_spin_unlock+0x28/0x50 [ 297.923747][ T30] ? mntput_no_expire+0x2da/0x850 [ 297.934433][ T30] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 297.941358][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 297.952374][ T30] ? _raw_spin_unlock+0x28/0x50 [ 297.958966][ T30] ? simple_release_fs+0x9c/0xd0 [ 297.963964][ T30] nsim_dev_hwstats_exit+0x81/0x290 [ 297.975777][ T30] ? devl_port_unregister+0x19d/0x290 [ 297.982695][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 297.993336][ T30] nsim_dev_reload_destroy+0x2ad/0x490 [ 298.000465][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 298.011139][ T30] nsim_drv_remove+0x58/0x160 [ 298.017341][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 298.023461][ T30] bus_remove_device+0x34f/0x420 [ 298.038832][ T30] device_del+0x57a/0x9b0 [ 298.043240][ T30] ? __pfx_device_del+0x10/0x10 [ 298.053318][ T30] device_unregister+0x20/0xc0 [ 298.059656][ T30] del_device_store+0x363/0x480 [ 298.070782][ T30] ? __pfx_del_device_store+0x10/0x10 [ 298.077856][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 298.083318][ T30] ? bus_attr_store+0x4f/0xb0 [ 298.093147][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 298.100023][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 298.110361][ T30] vfs_write+0xa6d/0xc90 [ 298.117949][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 298.123827][ T30] ? __pfx_vfs_write+0x10/0x10 [ 298.133704][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 298.140068][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.150167][ T30] ? fdget_pos+0x265/0x320 [ 298.156200][ T30] ksys_write+0x183/0x2b0 [ 298.160572][ T30] ? __pfx_ksys_write+0x10/0x10 [ 298.174158][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 298.180813][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 298.193170][ T30] __do_fast_syscall_32+0xb4/0x110 [ 298.201278][ T30] ? exc_page_fault+0x590/0x8c0 [ 298.213525][ T30] do_fast_syscall_32+0x34/0x80 [ 298.218767][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.231467][ T30] RIP: 0023:0xf7f07579 [ 298.235898][ T30] RSP: 002b:00000000f74ef490 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 298.250323][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f74ef4d0 [ 298.259819][ T30] RDX: 0000000000000001 RSI: 00000000f738bff4 RDI: 0000000000000000 [ 298.273856][ T30] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 298.282348][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.297040][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.309547][ T30] [ 298.312718][ T30] [ 298.312718][ T30] Showing all locks held in the system: [ 298.324518][ T30] 6 locks held by kworker/0:0/8: [ 298.329508][ T30] 1 lock held by khungtaskd/30: [ 298.341083][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 298.351360][ T30] 3 locks held by kworker/u8:2/35: [ 298.365111][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 298.383317][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 298.400947][ T30] #2: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 298.412330][ T30] 3 locks held by kworker/0:2/937: [ 298.423469][ T30] 4 locks held by kworker/u8:7/1081: [ 298.429124][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 298.451287][ T30] #1: ffffc90004447d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 298.465974][ T30] #2: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 298.481443][ T30] #3: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 298.491372][ T30] 2 locks held by dhcpcd/4899: [ 298.502241][ T30] #0: ffff88807ccdf6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 298.513816][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 298.530020][ T30] 2 locks held by getty/4990: [ 298.535223][ T30] #0: ffff88803288a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 298.552965][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 298.563645][ T30] 3 locks held by kworker/0:4/5286: [ 298.574469][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 298.591671][ T30] #1: ffffc90003b5fd00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 298.603581][ T30] #2: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 298.618340][ T30] 7 locks held by syz-executor/5536: [ 298.623666][ T30] #0: ffff8880320c6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 298.640166][ T30] #1: ffff88803069d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 298.651941][ T30] #2: ffff88802552ca58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 298.667047][ T30] #3: ffffffff8f56f548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 298.681362][ T30] #4: ffff88805f0260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 298.697894][ T30] #5: ffff88805f027250 (&devlink->lock_key#5){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 298.712257][ T30] #6: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 298.725974][ T30] 1 lock held by syz.0.143/5792: [ 298.731045][ T30] #0: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 298.747545][ T30] 1 lock held by syz.1.150/5808: [ 298.752533][ T30] #0: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 298.767990][ T30] 1 lock held by syz.2.162/5837: [ 298.772971][ T30] #0: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 298.789866][ T30] 3 locks held by kworker/u8:13/5847: [ 298.796994][ T30] #0: ffff88814bc09148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 298.815791][ T30] #1: ffffc9000315fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 298.835733][ T30] #2: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 298.851128][ T30] 2 locks held by syz.4.166/5899: [ 298.857861][ T30] #0: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 298.871770][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 298.885791][ T30] 2 locks held by syz-executor/5902: [ 298.891109][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 298.904557][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 298.913436][ T30] 2 locks held by syz-executor/5905: [ 298.926724][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 298.941382][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 298.953643][ T30] 2 locks held by syz-executor/5908: [ 298.962819][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 298.974921][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 298.989667][ T30] 2 locks held by syz-executor/5911: [ 298.997765][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.013214][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 299.025084][ T30] 2 locks held by syz-executor/5924: [ 299.030409][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.046526][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.060452][ T30] 2 locks held by syz-executor/5927: [ 299.068422][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.084223][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.099599][ T30] 2 locks held by syz-executor/5932: [ 299.105834][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.123147][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.133600][ T30] 2 locks held by syz-executor/5935: [ 299.145121][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.159493][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.172570][ T30] 2 locks held by syz-executor/5943: [ 299.182832][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.193995][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.210728][ T30] 2 locks held by syz-executor/5952: [ 299.217202][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.233297][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.243812][ T30] 2 locks held by syz-executor/5957: [ 299.255554][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.270817][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.282449][ T30] 2 locks held by syz-executor/5960: [ 299.292602][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.303577][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.320222][ T30] 2 locks held by syz-executor/5963: [ 299.327586][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.342372][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.354997][ T30] 2 locks held by syz-executor/5969: [ 299.360313][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.376105][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.390060][ T30] 2 locks held by syz-executor/5975: [ 299.400554][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.416772][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.430717][ T30] 2 locks held by syz-executor/5979: [ 299.438765][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.453631][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.470247][ T30] 2 locks held by syz-executor/5982: [ 299.478950][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.494702][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.512254][ T30] 2 locks held by syz-executor/5985: [ 299.519592][ T30] #0: ffffffff8fcc49d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.534179][ T30] #1: ffffffff8fcd14c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 299.552450][ T30] [ 299.556773][ T30] ============================================= [ 299.556773][ T30] [ 299.571373][ T30] NMI backtrace for cpu 1 [ 299.575747][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 299.585939][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.596014][ T30] Call Trace: [ 299.599307][ T30] [ 299.602249][ T30] dump_stack_lvl+0x241/0x360 [ 299.606957][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.612265][ T30] ? __pfx__printk+0x10/0x10 [ 299.616915][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 299.621885][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 299.627369][ T30] ? _printk+0xd5/0x120 [ 299.631546][ T30] ? __pfx__printk+0x10/0x10 [ 299.636161][ T30] ? __wake_up_klogd+0xcc/0x110 [ 299.641039][ T30] ? __pfx__printk+0x10/0x10 [ 299.645660][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 299.650710][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.656731][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 299.662742][ T30] watchdog+0xff4/0x1040 [ 299.667011][ T30] ? watchdog+0x1ea/0x1040 [ 299.671457][ T30] ? __pfx_watchdog+0x10/0x10 [ 299.676161][ T30] kthread+0x2f0/0x390 [ 299.680268][ T30] ? __pfx_watchdog+0x10/0x10 [ 299.685059][ T30] ? __pfx_kthread+0x10/0x10 [ 299.689673][ T30] ret_from_fork+0x4b/0x80 [ 299.694112][ T30] ? __pfx_kthread+0x10/0x10 [ 299.698721][ T30] ret_from_fork_asm+0x1a/0x30 [ 299.703608][ T30] [ 299.707392][ T30] Sending NMI from CPU 1 to CPUs 0: [ 299.712640][ C0] NMI backtrace for cpu 0 [ 299.712654][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 299.712673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.712684][ C0] Workqueue: events nsim_dev_trap_report_work [ 299.712707][ C0] RIP: 0010:debug_check_no_locks_freed+0x171/0x4b0 [ 299.712727][ C0] Code: 48 05 e0 0a 00 00 48 89 44 24 20 48 8b 44 24 08 48 01 44 24 10 45 31 ff 4d 63 e7 41 83 fc 31 73 77 4f 8d 24 a4 48 8b 44 24 20 <4a> 8d 5c e0 10 48 89 d8 48 c1 e8 03 80 3c 10 00 74 12 48 89 df e8 [ 299.712745][ C0] RSP: 0018:ffffc900000079a0 EFLAGS: 00000087 [ 299.712759][ C0] RAX: ffff88801bef64e0 RBX: ffff88801bef6540 RCX: ffffea0000000000 [ 299.712771][ C0] RDX: dffffc0000000000 RSI: 0000000000000020 RDI: ffff88809d7f0f00 [ 299.712783][ C0] RBP: ffffc90000007a90 R08: 0000000000000000 R09: 1ffffffff284eb15 [ 299.712794][ C0] R10: dffffc0000000000 R11: fffffbfff284eb16 R12: 000000000000000f [ 299.712806][ C0] R13: 1ffff110037dec9b R14: ffff88801bef64d8 R15: 0000000000000003 [ 299.712817][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 299.712830][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.712842][ C0] CR2: 000000000c340702 CR3: 000000000e734000 CR4: 00000000003526f0 [ 299.712856][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.712865][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.712875][ C0] Call Trace: [ 299.712881][ C0] [ 299.712888][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 299.712908][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 299.712931][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 299.712949][ C0] ? nmi_handle+0x2a/0x5a0 [ 299.712972][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 299.712993][ C0] ? nmi_handle+0x14f/0x5a0 [ 299.713008][ C0] ? nmi_handle+0x2a/0x5a0 [ 299.713025][ C0] ? debug_check_no_locks_freed+0x171/0x4b0 [ 299.713041][ C0] ? default_do_nmi+0x63/0x160 [ 299.713061][ C0] ? exc_nmi+0x123/0x1f0 [ 299.713079][ C0] ? end_repeat_nmi+0xf/0x53 [ 299.713099][ C0] ? debug_check_no_locks_freed+0x171/0x4b0 [ 299.713116][ C0] ? debug_check_no_locks_freed+0x171/0x4b0 [ 299.713138][ C0] ? debug_check_no_locks_freed+0x171/0x4b0 [ 299.713155][ C0] [ 299.713160][ C0] [ 299.713168][ C0] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 299.713186][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 299.713208][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 299.713224][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 299.713239][ C0] kfree+0x109/0x440 [ 299.713261][ C0] ref_tracker_free+0x4ef/0x7e0 [ 299.713277][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.713292][ C0] ? dst_destroy+0x171/0x460 [ 299.713307][ C0] ? rcu_core+0xaaa/0x17a0 [ 299.713323][ C0] ? handle_softirqs+0x2c5/0x980 [ 299.713343][ C0] ? do_softirq+0x11b/0x1e0 [ 299.713361][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 299.713380][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 299.713397][ C0] ? process_scheduled_works+0xa63/0x1850 [ 299.713418][ C0] ? worker_thread+0x870/0xd30 [ 299.713438][ C0] ? kthread+0x2f0/0x390 [ 299.713452][ C0] ? ret_from_fork+0x4b/0x80 [ 299.713473][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 299.713495][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.713517][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 299.713541][ C0] dst_destroy+0x171/0x460 [ 299.713557][ C0] ? rcu_core+0xa37/0x17a0 [ 299.713572][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 299.713587][ C0] rcu_core+0xaaa/0x17a0 [ 299.713610][ C0] ? __pfx_rcu_core+0x10/0x10 [ 299.713641][ C0] handle_softirqs+0x2c5/0x980 [ 299.713663][ C0] ? do_softirq+0x11b/0x1e0 [ 299.713684][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 299.713708][ C0] do_softirq+0x11b/0x1e0 [ 299.713726][ C0] [ 299.713731][ C0] [ 299.713737][ C0] ? __pfx_do_softirq+0x10/0x10 [ 299.713757][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 299.713781][ C0] ? rcu_is_watching+0x15/0xb0 [ 299.713800][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 299.713820][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 299.713838][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 299.713858][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.713879][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 299.713899][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 299.713923][ C0] ? process_scheduled_works+0x976/0x1850 [ 299.713945][ C0] process_scheduled_works+0xa63/0x1850 [ 299.713978][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.714003][ C0] ? assign_work+0x364/0x3d0 [ 299.714025][ C0] worker_thread+0x870/0xd30 [ 299.714052][ C0] ? __kthread_parkme+0x169/0x1d0 [ 299.714075][ C0] ? __pfx_worker_thread+0x10/0x10 [ 299.714096][ C0] kthread+0x2f0/0x390 [ 299.714112][ C0] ? __pfx_worker_thread+0x10/0x10 [ 299.714136][ C0] ? __pfx_kthread+0x10/0x10 [ 299.714150][ C0] ret_from_fork+0x4b/0x80 [ 299.714169][ C0] ? __pfx_kthread+0x10/0x10 [ 299.714183][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.714209][ C0] [ 300.236575][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 300.243567][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 300.253753][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.264016][ T30] Call Trace: [ 300.267329][ T30] [ 300.270279][ T30] dump_stack_lvl+0x241/0x360 [ 300.274987][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.280215][ T30] ? __pfx__printk+0x10/0x10 [ 300.284835][ T30] ? vscnprintf+0x5d/0x90 [ 300.289186][ T30] panic+0x349/0x880 [ 300.293116][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 300.299389][ T30] ? __pfx_panic+0x10/0x10 [ 300.303834][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 300.309320][ T30] ? __irq_work_queue_local+0x137/0x410 [ 300.314895][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 300.320294][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 300.326472][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 300.332654][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 300.338866][ T30] watchdog+0x1033/0x1040 [ 300.343225][ T30] ? watchdog+0x1ea/0x1040 [ 300.347679][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.352468][ T30] kthread+0x2f0/0x390 [ 300.356570][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.361272][ T30] ? __pfx_kthread+0x10/0x10 [ 300.365893][ T30] ret_from_fork+0x4b/0x80 [ 300.370333][ T30] ? __pfx_kthread+0x10/0x10 [ 300.374954][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.379766][ T30] [ 300.383084][ T30] Kernel Offset: disabled [ 300.387425][ T30] Rebooting in 86400 seconds..