last executing test programs: 6.756912889s ago: executing program 3 (id=137): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x80, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x6, 0x0, 0x34}}}}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000200000850000002c000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x426]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0x7ff, 0xf84, 0xb}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20e, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.622619795s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001180)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 5.592181046s ago: executing program 2 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.431636011s ago: executing program 2 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.391990062s ago: executing program 1 (id=152): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.214904757s ago: executing program 1 (id=153): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = dup(0xffffffffffffffff) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xc3) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xe2) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 5.214428927s ago: executing program 2 (id=154): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.545038369s ago: executing program 2 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000009000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c"], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) 4.513992079s ago: executing program 0 (id=156): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0xa) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 4.355099234s ago: executing program 3 (id=157): writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)='X', 0x1}], 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 4.136129981s ago: executing program 2 (id=158): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 4.042642364s ago: executing program 0 (id=159): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000180)) 3.83440576s ago: executing program 2 (id=160): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000835120882400001020301090269000301002000080b0101010520070904000000010120000924012e0b060900020904010000"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.606866158s ago: executing program 0 (id=161): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[], 0xfe, 0x2f3, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x100, 0x5, 0x0, 0xfffffffffffffffb, 0x3}, {0xffffffff, 0x0, 0x20009, 0x400a, 0x0, 0xfffffffffffffffc}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmmsg$inet(r1, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x88541, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8001, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000034fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000890781000080a0000e9ff2720ad973915"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)='-1', 0x2}, {&(0x7f0000000100)="2df8b4", 0x3}], 0x2, 0x4, 0xa) get_robust_list(r0, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f00000003c0)={&(0x7f0000000380)={&(0x7f0000000280)}}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000440)}}}, &(0x7f0000000900)=0x18) 3.450343733s ago: executing program 1 (id=162): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.303613897s ago: executing program 3 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.20703289s ago: executing program 3 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce1c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc3010122", 0x5a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1d, 0x4, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x289, 0xfffffffffffffffe, 0xf, 0xff, 0x1000000010000a, 0x8001, 0x10000004, 0xb, 0x7, 0xffffffff, 0xffffffffffffffc, 0x9, 0x1, 0x20000000000f8, 0x2, 0xe], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.118204263s ago: executing program 1 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.518897973s ago: executing program 1 (id=166): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r4, 0x5412, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) 1.253907361s ago: executing program 0 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000009000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c"], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) 455.256956ms ago: executing program 1 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x400005}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002e80)=""/249, 0xf9}], 0x4}, 0x81}, {{0x0, 0x0, 0x0}, 0x204}], 0x4, 0x40000130, 0x0) 450.419756ms ago: executing program 3 (id=169): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 760.24µs ago: executing program 0 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) 0s ago: executing program 3 (id=171): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r1, 0x0, 0x3b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 65.029633][ T5757] cgroup: Unknown subsys name 'net' [ 65.139656][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.520082][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.589112][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.603263][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.606021][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.611607][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.620045][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.626426][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.632550][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.646679][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.647063][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.655035][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.668641][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.669818][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.676647][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.684072][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.691601][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.697406][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.704765][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.718508][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.726884][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.734348][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.742480][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.746848][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.750092][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.765112][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.112162][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 69.206341][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 69.309036][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 69.319731][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.327853][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.335232][ T5769] bridge_slave_0: entered allmulticast mode [ 69.341917][ T5769] bridge_slave_0: entered promiscuous mode [ 69.350165][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 69.379517][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.387802][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.395704][ T5769] bridge_slave_1: entered allmulticast mode [ 69.402390][ T5769] bridge_slave_1: entered promiscuous mode [ 69.432915][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.440250][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.447561][ T5770] bridge_slave_0: entered allmulticast mode [ 69.454825][ T5770] bridge_slave_0: entered promiscuous mode [ 69.471484][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.478710][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.486159][ T5770] bridge_slave_1: entered allmulticast mode [ 69.492800][ T5770] bridge_slave_1: entered promiscuous mode [ 69.560277][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.571622][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.583754][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.619788][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.674693][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.681895][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.689276][ T5771] bridge_slave_0: entered allmulticast mode [ 69.696002][ T5771] bridge_slave_0: entered promiscuous mode [ 69.708196][ T5769] team0: Port device team_slave_0 added [ 69.725230][ T5769] team0: Port device team_slave_1 added [ 69.737444][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.744879][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.752042][ T5771] bridge_slave_1: entered allmulticast mode [ 69.759244][ T5771] bridge_slave_1: entered promiscuous mode [ 69.766690][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.773891][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.781033][ T5772] bridge_slave_0: entered allmulticast mode [ 69.788042][ T5772] bridge_slave_0: entered promiscuous mode [ 69.808028][ T5770] team0: Port device team_slave_0 added [ 69.820526][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.827930][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.835259][ T5772] bridge_slave_1: entered allmulticast mode [ 69.842114][ T5772] bridge_slave_1: entered promiscuous mode [ 69.866831][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.873986][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.900579][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.916964][ T5770] team0: Port device team_slave_1 added [ 69.942308][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.952622][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.959801][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.985977][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.018044][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.037615][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.047696][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.056897][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.083335][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.105982][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.139656][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.147854][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.174510][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.215007][ T5772] team0: Port device team_slave_0 added [ 70.227732][ T5771] team0: Port device team_slave_0 added [ 70.236776][ T5771] team0: Port device team_slave_1 added [ 70.249801][ T5769] hsr_slave_0: entered promiscuous mode [ 70.256914][ T5769] hsr_slave_1: entered promiscuous mode [ 70.265582][ T5772] team0: Port device team_slave_1 added [ 70.316195][ T5770] hsr_slave_0: entered promiscuous mode [ 70.322671][ T5770] hsr_slave_1: entered promiscuous mode [ 70.329588][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.337507][ T5770] Cannot create hsr debugfs directory [ 70.366584][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.373696][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.399743][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.423631][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.430595][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.456655][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.475860][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.482814][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.508784][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.534534][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.541493][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.567559][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.638843][ T5771] hsr_slave_0: entered promiscuous mode [ 70.645451][ T5771] hsr_slave_1: entered promiscuous mode [ 70.651467][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.659755][ T5771] Cannot create hsr debugfs directory [ 70.723887][ T5785] Bluetooth: hci1: command tx timeout [ 70.757984][ T5772] hsr_slave_0: entered promiscuous mode [ 70.764782][ T5772] hsr_slave_1: entered promiscuous mode [ 70.771042][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.778933][ T5772] Cannot create hsr debugfs directory [ 70.803167][ T5785] Bluetooth: hci3: command tx timeout [ 70.803596][ T5774] Bluetooth: hci0: command tx timeout [ 70.809077][ T5779] Bluetooth: hci2: command tx timeout [ 70.955273][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.988646][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.017807][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.028231][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.111763][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.131832][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.141556][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.152067][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.239215][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.248579][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.262318][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.272469][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.356553][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.371447][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.382781][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.393608][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.457972][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467112][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.491121][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.509585][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.548338][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.576487][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.588068][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.595417][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.631293][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.638439][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.669203][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.676368][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.698508][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.705655][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.725663][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.776161][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.809130][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.849473][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.856688][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.881692][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.899860][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.920520][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.927687][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.968752][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.975955][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.034068][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.041220][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.128901][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.232739][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.298045][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.422421][ T5769] veth0_vlan: entered promiscuous mode [ 72.432451][ T5770] veth0_vlan: entered promiscuous mode [ 72.451977][ T5769] veth1_vlan: entered promiscuous mode [ 72.471456][ T5770] veth1_vlan: entered promiscuous mode [ 72.535053][ T5769] veth0_macvtap: entered promiscuous mode [ 72.555625][ T5769] veth1_macvtap: entered promiscuous mode [ 72.567388][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.604564][ T5770] veth0_macvtap: entered promiscuous mode [ 72.619781][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.631707][ T5770] veth1_macvtap: entered promiscuous mode [ 72.642031][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.657756][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.696828][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.706253][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.715202][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.725581][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.739281][ T5772] veth0_vlan: entered promiscuous mode [ 72.774594][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.786810][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798159][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.809429][ T5772] veth1_vlan: entered promiscuous mode [ 72.816396][ T5779] Bluetooth: hci1: command tx timeout [ 72.848440][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.859547][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.871442][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.882423][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.891381][ T5779] Bluetooth: hci0: command tx timeout [ 72.891411][ T5779] Bluetooth: hci3: command tx timeout [ 72.897114][ T5779] Bluetooth: hci2: command tx timeout [ 72.908732][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.917711][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.926992][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.012030][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.020853][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.041939][ T5771] veth0_vlan: entered promiscuous mode [ 73.060394][ T5772] veth0_macvtap: entered promiscuous mode [ 73.091849][ T5771] veth1_vlan: entered promiscuous mode [ 73.101399][ T5772] veth1_macvtap: entered promiscuous mode [ 73.127064][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.136059][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.157227][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.167802][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.216270][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.227276][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.241999][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.252707][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.265406][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.293869][ T5771] veth0_macvtap: entered promiscuous mode [ 73.307681][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.318524][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.330089][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.338600][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.351451][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.362136][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.381180][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.392117][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401316][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.411109][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.419965][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.449143][ T5771] veth1_macvtap: entered promiscuous mode [ 73.549564][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.583003][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.592847][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.615138][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.623100][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.627543][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.657654][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.683854][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.755998][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.776995][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.788257][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.799247][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.809729][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.839120][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.858455][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.872173][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.897172][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.921773][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.931413][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.950019][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.959486][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006836][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.022272][ T5841] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 74.036748][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.275670][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.302630][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.972257][ T5774] Bluetooth: hci1: command tx timeout [ 74.978064][ T5774] Bluetooth: hci2: command tx timeout [ 74.983037][ T5779] Bluetooth: hci3: command tx timeout [ 74.984101][ T5774] Bluetooth: hci0: command tx timeout [ 75.197678][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.223486][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.043076][ T5774] Bluetooth: hci3: command tx timeout [ 77.043469][ T5779] Bluetooth: hci1: command tx timeout [ 77.054406][ T5779] Bluetooth: hci0: command tx timeout [ 77.060221][ T5785] Bluetooth: hci2: command tx timeout [ 77.145860][ T5866] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.154748][ T5866] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.163330][ T5866] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 77.407130][ T5869] Can't find a SQUASHFS superblock on nullb0 [ 79.914365][ T5885] syz.2.14[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.183961][ T2132] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.705568][ T5905] loop0: detected capacity change from 0 to 512 [ 82.751842][ T5905] EXT4-fs: Ignoring removed orlov option [ 87.433612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 87.843213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 87.928015][ T27] cfg80211: failed to load regulatory.db [ 88.034892][ T2132] usb 3-1: device descriptor read/all, error -71 [ 88.125232][ T5905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.138394][ T5905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.151318][ T5905] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 88.152251][ T5905] EXT4-fs: failed to create workqueue [ 88.167310][ T5905] EXT4-fs (loop0): mount failed [ 89.038029][ T5916] Zero length message leads to an empty skb [ 89.660966][ T5920] autofs4:pid:5920:autofs_fill_super: called with bogus options [ 91.616542][ T2132] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.660115][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.946687][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 92.152875][ T5812] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 92.163111][ T5812] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 92.175280][ T5812] usb 1-1: config 8 has no interface number 0 [ 92.194069][ T2132] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 92.203426][ T5812] usb 1-1: config 8 interface 223 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.216758][ T2132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.224947][ T2132] usb 4-1: Product: syz [ 92.230309][ T5812] usb 1-1: config 8 interface 223 has no altsetting 0 [ 92.237614][ T2132] usb 4-1: Manufacturer: syz [ 92.242319][ T2132] usb 4-1: SerialNumber: syz [ 92.253316][ T5812] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 92.264272][ T2132] usb 4-1: config 0 descriptor?? [ 92.270075][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.281010][ T5812] usb 1-1: Product: syz [ 92.290197][ T2132] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 92.297051][ T5812] usb 1-1: Manufacturer: syz [ 92.301772][ T5812] usb 1-1: SerialNumber: syz [ 92.597044][ T5812] usb 1-1: USB disconnect, device number 2 [ 94.078250][ T2132] gspca_sunplus: reg_w_riv err -71 [ 94.083497][ T2132] sunplus: probe of 4-1:0.0 failed with error -71 [ 94.093423][ T2132] usb 4-1: USB disconnect, device number 2 [ 96.758146][ T6030] loop2: detected capacity change from 0 to 512 [ 96.928749][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.068232][ T6030] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.452463][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.851459][ T6052] process 'syz.3.66' launched './file2' with NULL argv: empty string added [ 100.595609][ T2132] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.664354][ T6065] loop2: detected capacity change from 0 to 512 [ 100.737767][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.777574][ T6065] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.833100][ T2132] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 102.653200][ T6065] sched: RT throttling activated [ 102.724515][ T2132] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 102.744485][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.739727][ T2132] usb 1-1: can't set config #4, error -71 [ 103.746957][ T2132] usb 1-1: USB disconnect, device number 3 [ 104.121639][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.869159][ T6120] loop3: detected capacity change from 0 to 512 [ 105.874559][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.924045][ T6120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.967573][ T6120] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.245992][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.257002][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 106.269103][ T5812] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.757467][ T5812] usb 2-1: config 1 interface 0 has no altsetting 0 [ 107.820315][ T5812] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 107.859292][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 107.897037][ T5812] usb 2-1: Product: syz [ 107.930691][ T5812] usb 2-1: Manufacturer: syz [ 107.948695][ T5812] usb 2-1: SerialNumber: syz [ 108.885209][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.428398][ T5812] usb 2-1: cannot find UAC_HEADER [ 109.459299][ T9] kernel read not supported for file /video7 (pid: 9 comm: kworker/0:1) [ 109.480156][ T5812] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 109.496877][ T5812] usb 2-1: USB disconnect, device number 2 [ 109.535190][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.726736][ C1] Unknown status report in ack skb [ 112.429283][ C1] Unknown status report in ack skb [ 112.645161][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.218112][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 113.237188][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 113.440799][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 113.461624][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.469671][ T9] usb 2-1: Product: syz [ 113.473967][ T9] usb 2-1: Manufacturer: syz [ 113.478674][ T9] usb 2-1: SerialNumber: syz [ 114.352460][ T9] usb 2-1: USB disconnect, device number 3 [ 114.400458][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.033790][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.299826][ T9] usb 3-1: device descriptor read/64, error -71 [ 115.719182][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.016827][ T9] usb 3-1: device descriptor read/64, error -71 [ 116.238290][ T9] usb usb3-port1: attempt power cycle [ 116.292013][ C0] Unknown status report in ack skb [ 116.742555][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.908029][ T9] usb 3-1: device descriptor read/8, error -71 [ 117.288083][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.449318][ T9] usb 3-1: device descriptor read/8, error -71 [ 117.677934][ T9] usb usb3-port1: unable to enumerate USB device [ 119.763460][ C1] Unknown status report in ack skb [ 120.132592][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.336111][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 120.355943][ T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 120.374572][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.382193][ T27] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 120.391651][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.402974][ T27] usb 4-1: config 0 descriptor?? [ 120.432306][ T6252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.680305][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.147'. [ 121.010159][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.017457][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.024449][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.036752][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.044034][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.052413][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.144010][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.213009][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.367187][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.549486][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.749175][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.756765][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.763769][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.772266][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.779639][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.786914][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.793898][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.808421][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.815422][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.822854][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.830118][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.850894][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.864099][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.871229][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.885132][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.892177][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.904496][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.911489][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.935643][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 121.951837][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.047020][ T6295] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 122.054935][ T6295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.155'. [ 122.150930][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.193246][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.242874][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.469729][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.517080][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.548172][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.594192][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.610034][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.634889][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.661649][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.688835][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.698639][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.708483][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.715513][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.722672][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.742080][ T6314] loop0: detected capacity change from 0 to 512 [ 122.747403][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.757879][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.786781][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.820875][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.839898][ T6314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 122.852879][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.872290][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.876277][ T8] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 122.905883][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 122.919579][ T6314] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.940580][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.111436][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.122793][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.130355][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.138944][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.146180][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.151248][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.153149][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.185911][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.215339][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.321061][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.714038][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.745774][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 123.997511][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.008382][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.020448][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.027439][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.432086][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.439203][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.446258][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.453362][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.460451][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.467500][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.474566][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.493088][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.503955][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.513406][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.520500][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.531882][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.540862][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.557634][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.566431][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.573521][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.584558][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.595138][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.606508][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.615113][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.626161][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.634780][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.767239][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.780676][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.801357][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.813970][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 124.938536][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.958611][ T8] usb 3-1: string descriptor 0 read error: -22 [ 124.976288][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 124.992320][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 125.001419][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.021048][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.029410][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.037962][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.045771][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.052863][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.060744][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.073758][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.075718][ T8] usb 3-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to g@b4.vu [ 125.146228][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.272432][ T6338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.453433][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.639756][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.676362][ T8] usb 3-1: Error initialising Clarett USB Mixer Driver: -22 [ 125.704686][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 125.733426][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.757739][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.790505][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.818240][ T8] usb 3-1: USB disconnect, device number 8 [ 125.860421][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.867464][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.932514][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.939528][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 125.973743][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.101305][ T6340] netlink: 'syz.0.167': attribute type 4 has an invalid length. [ 126.109074][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.167'. [ 126.272722][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.280033][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.288397][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.295404][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x1 [ 126.310881][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.327270][ T27] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 126.342155][ T11] ------------[ cut here ]------------ [ 126.347962][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.348631][ T27] hid_mf 0003:0079:1801.0001: unexpected long global item [ 126.359331][ T11] Modules linked in: [ 126.370516][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 126.377915][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.388112][ T11] Workqueue: phy8 ieee80211_csa_finalize_work [ 126.392840][ T1136] ------------[ cut here ]------------ [ 126.394645][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.399802][ T1136] WARNING: CPU: 1 PID: 1136 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.399833][ T1136] Modules linked in: [ 126.399848][ T1136] CPU: 1 PID: 1136 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 126.399866][ T1136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.399878][ T1136] Workqueue: phy7 ieee80211_csa_finalize_work [ 126.399905][ T1136] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.399930][ T1136] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 126.399945][ T1136] RSP: 0018:ffffc90004ccf9c0 EFLAGS: 00010293 [ 126.399960][ T1136] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88802412bc00 [ 126.399971][ T1136] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.399980][ T1136] RBP: dffffc0000000000 R08: ffff88805c33562f R09: 1ffff1100b866ac5 [ 126.399990][ T1136] R10: dffffc0000000000 R11: ffffed100b866ac6 R12: 0000000000000001 [ 126.400000][ T1136] R13: ffff88805c336659 R14: ffff8880210d2cd0 R15: ffff8880210d2d48 [ 126.400011][ T1136] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 126.400027][ T1136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.400041][ T1136] CR2: 00007fbfd89ec4b8 CR3: 0000000061329000 CR4: 00000000003506e0 [ 126.400057][ T1136] Call Trace: [ 126.400071][ T1136] [ 126.400091][ T1136] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 126.400121][ T1136] ieee80211_csa_finalize+0x5a6/0xf20 [ 126.400145][ T1136] ? mutex_lock_nested+0x20/0x20 [ 126.400169][ T1136] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 126.407512][ T11] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 126.418467][ T1136] ? ieee80211_csa_finalize_work+0x140/0x140 [ 126.418498][ T1136] ? read_lock_is_recursive+0x20/0x20 [ 126.422367][ T11] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 126.429963][ T1136] ieee80211_csa_finalize_work+0xf6/0x140 [ 126.440102][ T11] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88801a673c00 [ 126.446102][ T1136] ? process_scheduled_works+0x96f/0x15d0 [ 126.454328][ C0] ------------[ cut here ]------------ [ 126.473523][ T1136] process_scheduled_works+0xa5d/0x15d0 [ 126.479496][ C0] WARNING: CPU: 0 PID: 11 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 126.479529][ C0] Modules linked in: [ 126.479542][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 126.487542][ T1136] ? worker_attach_to_pool+0x380/0x380 [ 126.495500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.495512][ C0] Workqueue: phy8 ieee80211_csa_finalize_work [ 126.495542][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 126.495569][ C0] Code: 24 4c 89 e7 e8 ae a6 be f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 db 80 f7 0f 0b e9 f6 f7 ff ff e8 ad db 80 f7 <0f> 0b e9 48 fb ff ff e8 a1 db 80 f7 48 c7 c7 a0 d0 64 8e 4c 89 e6 [ 126.503564][ T1136] ? assign_work+0x3d2/0x5d0 [ 126.511550][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 126.511571][ C0] RAX: ffffffff8a064fe3 RBX: ffffffff8a063de6 RCX: ffff88801a673c00 [ 126.519533][ T1136] worker_thread+0xa55/0xfc0 [ 126.528497][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.535086][ T1136] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 126.543079][ C0] RBP: 0000000000000000 R08: ffff88801a673c00 R09: 0000000000000003 [ 126.546342][ T1136] ? _raw_spin_unlock+0x40/0x40 [ 126.549259][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c34a440 [ 126.555763][ T1136] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 126.561114][ C0] R13: dffffc0000000000 R14: ffff88805c34a930 R15: ffff88805cebc024 [ 126.561130][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 126.561143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.561155][ C0] CR2: 00005555689eb7d0 CR3: 0000000025925000 CR4: 00000000003506f0 [ 126.561171][ C0] Call Trace: [ 126.561178][ C0] [ 126.561190][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 126.561227][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 126.561260][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 126.561297][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 126.561330][ C0] __iterate_interfaces+0x243/0x500 [ 126.561353][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 126.561380][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.561406][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 126.561433][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.561461][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 126.561489][ C0] __hrtimer_run_queues+0x520/0xc40 [ 126.566575][ T1136] kthread+0x2fa/0x390 [ 126.572403][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 126.592032][ T1136] ? pr_cont_work+0x560/0x560 [ 126.598008][ C0] ? hw_scan_work+0xf60/0xf60 [ 126.603361][ T1136] ? kthread_blkcg+0xd0/0xd0 [ 126.609435][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 126.615143][ T1136] ret_from_fork+0x48/0x80 [ 126.623121][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 126.628858][ T1136] ? kthread_blkcg+0xd0/0xd0 [ 126.634292][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 126.639834][ T1136] ret_from_fork_asm+0x11/0x20 [ 126.649668][ C0] handle_softirqs+0x280/0x820 [ 126.649693][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 126.653584][ T1136] [ 126.660949][ C0] ? do_softirq+0x1a0/0x1a0 [ 126.666381][ T1136] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.666400][ T1136] CPU: 1 PID: 1136 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 126.666416][ T1136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.666427][ T1136] Workqueue: phy7 ieee80211_csa_finalize_work [ 126.666454][ T1136] Call Trace: [ 126.666462][ T1136] [ 126.666468][ T1136] dump_stack_lvl+0x18c/0x250 [ 126.666492][ T1136] ? show_regs_print_info+0x20/0x20 [ 126.666511][ T1136] ? load_image+0x420/0x420 [ 126.666538][ T1136] panic+0x2dc/0x730 [ 126.666565][ T1136] ? bpf_jit_dump+0xd0/0xd0 [ 126.666596][ T1136] ? ret_from_fork_asm+0x11/0x20 [ 126.666621][ T1136] __warn+0x2e0/0x470 [ 126.666640][ T1136] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.666664][ T1136] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.666685][ T1136] report_bug+0x2be/0x4f0 [ 126.666704][ T1136] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.666725][ T1136] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.666746][ T1136] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 126.666767][ T1136] handle_bug+0xcf/0x120 [ 126.666786][ T1136] exc_invalid_op+0x1a/0x50 [ 126.666805][ T1136] asm_exc_invalid_op+0x1a/0x20 [ 126.666825][ T1136] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 126.666847][ T1136] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 126.666860][ T1136] RSP: 0018:ffffc90004ccf9c0 EFLAGS: 00010293 [ 126.666873][ T1136] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88802412bc00 [ 126.666885][ T1136] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.666895][ T1136] RBP: dffffc0000000000 R08: ffff88805c33562f R09: 1ffff1100b866ac5 [ 126.666906][ T1136] R10: dffffc0000000000 R11: ffffed100b866ac6 R12: 0000000000000001 [ 126.666916][ T1136] R13: ffff88805c336659 R14: ffff8880210d2cd0 R15: ffff8880210d2d48 [ 126.666935][ T1136] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 126.666976][ T1136] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 126.667003][ T1136] ieee80211_csa_finalize+0x5a6/0xf20 [ 126.667025][ T1136] ? mutex_lock_nested+0x20/0x20 [ 126.667045][ T1136] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 126.667064][ T1136] ? ieee80211_csa_finalize_work+0x140/0x140 [ 126.667088][ T1136] ? read_lock_is_recursive+0x20/0x20 [ 126.667113][ T1136] ieee80211_csa_finalize_work+0xf6/0x140 [ 126.667136][ T1136] ? process_scheduled_works+0x96f/0x15d0 [ 126.667156][ T1136] process_scheduled_works+0xa5d/0x15d0 [ 126.667203][ T1136] ? worker_attach_to_pool+0x380/0x380 [ 126.667228][ T1136] ? assign_work+0x3d2/0x5d0 [ 126.667252][ T1136] worker_thread+0xa55/0xfc0 [ 126.667273][ T1136] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 126.667295][ T1136] ? _raw_spin_unlock+0x40/0x40 [ 126.667314][ T1136] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 126.667359][ T1136] kthread+0x2fa/0x390 [ 126.667374][ T1136] ? pr_cont_work+0x560/0x560 [ 126.667393][ T1136] ? kthread_blkcg+0xd0/0xd0 [ 126.667409][ T1136] ret_from_fork+0x48/0x80 [ 126.667426][ T1136] ? kthread_blkcg+0xd0/0xd0 [ 126.667442][ T1136] ret_from_fork_asm+0x11/0x20 [ 126.667476][ T1136] [ 126.676537][ T1136] Kernel Offset: disabled