last executing test programs: 35.869697759s ago: executing program 3 (id=174): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r1, 0x1, 0x46, &(0x7f0000000140), 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x400c814}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00'}, {@in=@multicast2, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x69, 0x1, {{'xcbc(aes)\x00'}, 0x108, "447a772103d9fecc820d47a2447b8c8aba6b26da13c212773245945488dd646a6b"}}]}, 0x15c}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$EVIOCGABS3F(r0, 0x40084503, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da16", 0x3b}, {&(0x7f00000009c0)}], 0x2}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x0, 0x4, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb65}, @BATADV_ATTR_HOP_PENALTY={0x2}]}, 0x2c}}, 0x4c40) socket(0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f00000001c0)={0x6, 0xce4, 0x0, 0xc35, 0x1, "ffd2e0bf3394596ceceffb433ab917913e51db", 0x5, 0xf}) 19.88409099s ago: executing program 0 (id=203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in, 0xfffd, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa0}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x80000001}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010100, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x3}}, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x8, 0x0, r0, @link_id}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff1000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r7, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/175, 0xaf}, 0x2000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 18.748082065s ago: executing program 0 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x8, &(0x7f0000000e40)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000055}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101880, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) r6 = dup(r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x644c0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x8000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x2000}], 0x1) close(r7) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.270518174s ago: executing program 0 (id=206): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) io_uring_setup(0x1783, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRES64, @ANYRES8=r5, @ANYRES8=r0, @ANYRESOCT, @ANYRESHEX=r3], 0xc8) write$binfmt_script(r4, 0x0, 0x0) r6 = io_uring_setup(0x177f, &(0x7f0000000340)) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r9, 0x102}, 0x18) io_uring_enter(r6, 0x5624, 0xa2ba, 0x8, &(0x7f00000003c0)={[0x4, 0xfffffff9]}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r10, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6b66a7ddefa0e763382314f4baf07292"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4004800) syz_genetlink_get_family_id$ethtool(0x0, r7) close_range(r6, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f0000000ac0)=""/4136, 0x1028}], 0x3}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYRES64=r8], 0xfe33) 17.744402267s ago: executing program 0 (id=207): ftruncate(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, r2, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1}, 0x0, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/7, 0x7, 0x0, &(0x7f00000001c0)=""/206, 0xce}}, 0x10) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000440), 0x2880, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000340)={0x9}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000b000000000000000000042000002a000080130003006cc6668b78c10f0402b784941396"], 0x2c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) 11.79169514s ago: executing program 4 (id=215): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ed", 0x1}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x8, {[@noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{}]}]}}}], 0x20}}], 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000068000100000000008000200000000100"/36], 0x36}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50ff"], 0x22) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f00000019c0)={{r2}, 0x1, &(0x7f00000002c0)=[0x6], 0x579a038c, 0xd, 0x1}) syz_emit_vhci(&(0x7f00000021c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "d9e8136e5783eae7eeac28daa6899e31fb302aa434693ec6bc7a9d62b72d123b1c58a28a5adad00e752fbfcf2b94485fdee47ee1d972a8ef1e6922e34ea9916ef01da99e34345ccd3911a244400eb101bf2365fdc3f23475ade9d689f16e9f60741723e339b49be9b838c3364ce9243185afc65c79396fe100fd243eb90436014bd8604d4d27bef65addb134ec56839097949bae6f5257fdaec9d1eb"}, 0xa0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e0059"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000013006bcc9e3be05c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0004007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc1105511, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xec, @any, "11063d6a3b0540c199404981a111a524cdd584f680ee5dbbe4dcf01ab11ff0a503c960ab4654b4eb9b14a08697fd9641f340e32cdfaaa404431f84e2b0c27c8b22638fbf89d951ebbbb2f42f2e57cfbe9b478c20c0f77757784e095d98b66560764a2af192235fed0a6c773fbc8bd417943066d3cc97eccbf84a178bb7000f1a60c1d7b75fd9495fb7804ce0e69b69e5a7c24c991cda067e0f54a1a1477a1c003e5bc2947cc8cc8df91485940e1baf9c435c36f8e50ecdbd1b06cdd99db9ce69b3abef4a3b8f3567d310c904256fb406fac6a302718223f3a5a19d80c73768e7ffd74e6441c5f15d9160a3a3ca19e13993804710ea594226"}}}, 0x102) 10.724693533s ago: executing program 4 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f00000026c0)=""/109, 0x6d}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 10.236745125s ago: executing program 4 (id=219): socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add42732", 0xa}], 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) syz_open_dev$sndctrl(0x0, 0x0, 0xed4b52970fba8a35) syz_emit_ethernet(0x3a, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1'}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x48) close(r0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) 9.918423531s ago: executing program 3 (id=177): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x0) futex(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) r3 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r3, &(0x7f00000001c0), 0x0, 0xd, 0x71f3, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x4, 0x4, 0x62, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x8, 0x0, 0x1, 0x7}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bc9800000000000024080000000000008500000007000000b70000000000000095000000999b00006ffbdb865fa1d8edb59797c31f9e5463f015567926e1ed1432b0285550eaa28027b236b138223c3f9ac0c97275c84720d481a548d03b39824cb43b6a3285f7dd54e51259b01a5c12872cc46b7dd625060746466e7233ac21a38dfdabe63a812fd76fc79cc609ee40c56ca634d49a3c8f5037f57875c4049414d3608493e10a6c98b228105b237135bc2b8fbcd77e95a8f872"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x1}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) write$binfmt_misc(r6, &(0x7f0000000640)={'syz0', "65675ea25909fe85869be1d78ea7c2a1d99d139fe84463c77b65f0aece5e13db117d8d133cc2a2fe508cb23734b64c8c9df70a724bfbc8676e8c4f4e2a3ce3d1419db6718cf43aaafd514e8ca05e943ac7ad842fb513bc9b48daf5b14dd7716a8e2d0af251c16ec87f31c653d3f83891df646747c4834834b907de632fe946b5d708b208d335d5b8cab542634d84ed5aa80d081871c4f8f5c82399a99a6257bdfbb140bc36bcad5feb9c66fc0201cd55d86c14c4f9361163f02fa516a564c820453e5bd88c42d7ae436b11fec49f1ec097d4fe80475d608a4e9e1165de06b4ca002350a6e58d43b7"}, 0xec) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x28002) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000180)={'\x00', 0x0, 0x4, 0x7ff, 0x10001, 0x0, r4}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) 8.31489403s ago: executing program 4 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x3b0}}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) getpid() socket$inet_udplite(0x2, 0x2, 0x88) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRES16], 0xf) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000080), 0x24) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setns(r1, 0x66020000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 6.510741786s ago: executing program 3 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f050e000302120006001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x60c2c1, 0x0) unshare(0x0) ioctl$RTC_SET_TIME(r3, 0x7004, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f0300000000000000000300f65904000080"], 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') pread64(r5, &(0x7f0000000400)=""/255, 0xff, 0x8) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 6.466137532s ago: executing program 2 (id=225): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r3}, &(0x7f0000000080)=0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(r4, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/warn_count', 0x101200, 0x0) io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000180)=""/203, &(0x7f0000000280)=0xcb) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="a25b299dae439364eda8009da102acc0572b2611b89490af37316c8861905bbae28b45e73b872b2cffc95e1d14784dbe98f60d2cbd268e6741d3361d87fac4ecf14a977056a7fb93291070743418adbc677bc1ba4d7a2940da5e89a23f82d475ce0c4e5d6aadd366a2e3e01a784f1beb25c0088652230661250840db2db2", 0x7e}, {&(0x7f0000001500)="f186c5ae9279712d86c1b57472ed760501b957828b38019ab31f11bbc3198dbb7d79177a31dabd315d2c83e22bbb1010128fdc22b6b789eefaf5c9d0652436aa88cafe80ce0cd613f33d9e40a3cfe28c0330c89fd0a8daa8adbe6962a366bcd430144f524d99736adfe50170028d1d9937a4b3a4db4f4ac26d8c57fd50e9b9f3d89d2642e6cddad695b628708d4f3f5bf74842528c0f4cc26f22ee6870f2f7", 0x9f}, {&(0x7f00000015c0)="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", 0xffffffffffffff37}], 0x3}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r10, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) 6.221224955s ago: executing program 1 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x230, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x84b, 0x1c, 0x0, 0x0, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x85, "16e359d9464c014b0a8b79f693d858224ddc61cce482cd0995528f3eecc2510e8016bf3a9a75b9d4adbfe6cd542a39599928e4374f63273bd23cb34909af720b01be00bcfb72c4f3c3fa6026fbf974f3fc93c1ef840aadaa692c44cf6180658cf547f9fb5e1d2046659f479c4b25b68c3b98ee832480e4b13195b6b7b0a29ea2d99358252a"}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xe09) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x13) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) sendfile(r5, r6, 0x0, 0x23894) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="440000000001010400000900000000000a000000300001802c00019f1400edfffd80000000000000884e0000004000aa1600b9c2fef6f905fe5900"/68], 0x44}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYBLOB="5d95c2e79690bb45155c181a0046862b21c3dacf1ee75612233222b2ff4861ef77b6b425546924e1a9df4d3b427756090f070dfb153214aa", @ANYRESDEC=r8, @ANYRES16=r1, @ANYRESOCT=r6]) syz_emit_vhci(0x0, 0xf4) 5.81540955s ago: executing program 3 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010", @ANYBLOB, @ANYBLOB, @ANYRES32], 0x48}}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) epoll_pwait2(r9, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000580)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x15, 0x92, &(0x7f0000000180)="888c6e59fe492e21545c45ab4c546b49458e0233fb", &(0x7f0000000200)=""/146, 0x0, 0x0, 0x0, 0xe0, 0x0, &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5defe75ccc974a1e438a174d3b8a31700084d38a2999e411d22173072d8349a60d11a0be517e22f947d939b6ef3ae82493368e102bcb39bf39dedcf76fb46c4d476136c4a87303f9be09c212ece955d9c19d27558223d6741d2d4352a261c5e350f767b33dbc89f50802edc896559f28f05", 0x3}, 0x4c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15, 0x0, 0x1}, {0x4}, {0x6}]}) r11 = inotify_init1(0x0) fcntl$getownex(r11, 0x10, &(0x7f0000000140)) ftruncate(r11, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x3, 0x2, 0x7f}, {0x3, 0x1, 0x6, 0x2}, {0x5, 0x2f, 0x1f}, {0x4, 0x0, 0x4, 0x3}, {0x4, 0x6, 0x9, 0x3ff}, {0x6, 0x0, 0x2b, 0x6}]}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002800000008000300", @ANYRES32=r2, @ANYBLOB="0a00360002020202020200000a0006"], 0x44}}, 0x0) 5.088935017s ago: executing program 1 (id=228): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r0, &(0x7f0000002500), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) gettid() r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x8001, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500000000000a00060000000000fe8000000000000000000000000000aa000000000000000005000600004700000a"], 0xa0}}, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000300)=ANY=[], 0x823) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r5, &(0x7f00000000c0)='./file1\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='u', 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000440)="f8", 0x1}, {&(0x7f0000000000)="ef0f041885", 0x5}], 0x3}, 0x0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) unshare(0x6020400) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 4.336203907s ago: executing program 3 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x2a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) writev(r1, &(0x7f00000000c0), 0x1000000000000195) ioctl$TCFLSH(r1, 0x540b, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000250000002000018008000100", @ANYRES32=r9, @ANYBLOB="14000200746561"], 0x34}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @multicast1, 0x0, 0x0, 'team_slave_1\x00', 'hsr0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@icmp={{0x24}, {0x0, '8]'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x40, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_simple={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x88}}, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_udp_int(r13, 0x6b, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000180)=ANY=[@ANYRES64=r10], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.990115031s ago: executing program 1 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x8eb, "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"}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x1c) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x0, 0x0, 0x0, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib}}, 0x118) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7fffffff, 0x54f6, 0xffffff06, 0x1066, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x401, 0x1, 0x1400, r8, 0x8, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r10, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 3.806924322s ago: executing program 4 (id=231): sched_setaffinity(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x0, 0x1644, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRESHEX=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x0, 0x0, 0x1daf6}, 0x10) memfd_create(0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYBLOB="a9024916a854d489b8760e98757fbd9d3343ac031d81f8b4b9d5e122a8e3f32eb02c7ba31d6238ce9a3b84be4c40f6c726e7ff7699a7f3cec4f04c95", @ANYRES16=r4, @ANYRESDEC], 0x138}, 0x1, 0x0, 0x0, 0x2000c090}, 0x20000000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a000000a700010000000000000000000000ac1e000100"/56], 0x38}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x104) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800a00010071756565650000000c0002800600014000000000140000001100010000000000000000000000000a"], 0xd0}}, 0x8804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.255770741s ago: executing program 2 (id=232): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b5af00000000000000000100000004000300040002800c0001800800010005"], 0x28}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000427000/0x2000)=nil, 0x2000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_pidfd_open(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r4 = socket(0x25, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x6}}}) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@broadcast, @random="083c451a8fc6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {}, {}]}}}}}}, 0x0) 2.786207899s ago: executing program 1 (id=233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x4, 0x2, 0x0, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x7, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x2, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}], 0x3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) r2 = io_uring_setup(0x455c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000000}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000006c0)={0x7, 0x1, 0x0, "21681b06af9d9b13808442b4e7c3480ae5d8b7d23f312eaf6aa96fa924eaf0f6"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000380)=0x43) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x3, 0x0, 0x2}, {0x2}, {}, {0x0, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0x1c10}]}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x1, 0x200, 0x0, 0x4}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 2.506337387s ago: executing program 4 (id=234): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x0) futex(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) r3 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r3, &(0x7f00000001c0), 0x0, 0xd, 0x71f3, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x4, 0x4, 0x62, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x8, 0x0, 0x1, 0x7}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bc9800000000000024080000000000008500000007000000b70000000000000095000000999b00006ffbdb865fa1d8edb59797c31f9e5463f015567926e1ed1432b0285550eaa28027b236b138223c3f9ac0c97275c84720d481a548d03b39824cb43b6a3285f7dd54e51259b01a5c12872cc46b7dd625060746466e7233ac21a38dfdabe63a812fd76fc79cc609ee40c56ca634d49a3c8f5037f57875c4049414d3608493e10a6c98b228105b237135bc2b8fbcd77e95a8f872"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x1}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) write$binfmt_misc(r6, &(0x7f0000000640)={'syz0', "65675ea25909fe85869be1d78ea7c2a1d99d139fe84463c77b65f0aece5e13db117d8d133cc2a2fe508cb23734b64c8c9df70a724bfbc8676e8c4f4e2a3ce3d1419db6718cf43aaafd514e8ca05e943ac7ad842fb513bc9b48daf5b14dd7716a8e2d0af251c16ec87f31c653d3f83891df646747c4834834b907de632fe946b5d708b208d335d5b8cab542634d84ed5aa80d081871c4f8f5c82399a99a6257bdfbb140bc36bcad5feb9c66fc0201cd55d86c14c4f9361163f02fa516a564c820453e5bd88c42d7ae436b11fec49f1ec097d4fe80475d608a4e9e1165de06b4ca002350a6e58d43b7"}, 0xec) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x28002) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000180)={'\x00', 0x0, 0x4, 0x7ff, 0x10001, 0x0, r4}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) 1.71540379s ago: executing program 0 (id=208): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000002180)=0x4) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=':', @ANYBLOB], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) r2 = gettid() r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r3}, 0x18) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000200)) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) write$P9_RSTATu(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) unshare(0x600) timer_settime(0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x1c) r7 = socket(0x1e, 0x4, 0x0) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000502, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r2, 0x1f, &(0x7f0000000300)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.712607963s ago: executing program 1 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044"], 0x6c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff07000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "2431d0edd9b36cb74d7df7671ee3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b27a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) r6 = syz_open_dev$amidi(&(0x7f0000000240), 0x9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f00000003c0)={0x1}) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1.22795252s ago: executing program 2 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x8010000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 839.790053ms ago: executing program 2 (id=237): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000000070000000014000100fe"], 0x30}}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x82, 0xc8}}}, 0x7) r2 = syz_open_dev$loop(&(0x7f0000000dc0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x2000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000001240)={&(0x7f0000000000)={0x13, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @uid}]}]}, 0x64}}, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0xa001, 0xa0) clock_gettime(0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x3}, 0x90) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x0, @empty=0xfdfdffff}}) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0xfffffffffffffd9e, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) read$hiddev(r7, &(0x7f0000000740)=""/43, 0x2b) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 685.44921ms ago: executing program 3 (id=238): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x100000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000a80)={{}, 0x0, 0x0, @unused=[0x4, 0xb, 0x10000, 0x8], @subvolid=0x9}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000196c0)={{r0}, 0x0, 0x2, @inherit={0x60, &(0x7f0000019640)={0x0, 0x3, 0x9f, 0x1, {0x2, 0x2, 0x9, 0x8000000000000001, 0x7fffffffffffffff}, [0x8, 0x7fff, 0xff]}}, @name="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"}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x10000, 0x75, &(0x7f0000000180)=""/117}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000640)=""/102380, 0x18fec}], 0x1, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0x1b4, 0x1b4, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [], [], 'syz_tun\x00', 'vlan0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @mcast2, [], [], 'batadv_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0xf0}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r5 = dup(r4) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="85f73a29abdd6fde0200", @ANYRES32], 0x0}, 0x90) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x12, 0xa, 0x0, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c15500e8b8152682b7afe20", 0x32314d48}) 595.145287ms ago: executing program 0 (id=239): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="89"], 0x0}, 0x90) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ed9a168d}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x0) epoll_wait(r3, &(0x7f00000018c0)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x57, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d684e120080490303fa6010203010902450003000000000904fa00000e01000008000400000200f007240201000400000904000001ff041000090500000000000000080bb6798d082cf10904000000f0e11800"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000080000000000aa0802907800000000600008100000110000000000000000000000ffff00000000fc8019000000000000000000000000bb8000000000000000053a000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r5], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000400"/108], 0xb8}}, 0x0) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000380)='j', 0x1}], 0x1, 0x0, 0x0, 0x1b) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r7, 0xb0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000680)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r9, 0x6, &(0x7f0000002000)={0x0, 0x0, 0xb75}) fcntl$lock(r9, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r9, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) fcntl$lock(r9, 0x6, &(0x7f0000000000)) 580.446366ms ago: executing program 1 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110640000000000001000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0xfffffffffffffffd}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) writev(r5, &(0x7f0000000040), 0x0) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1}}], 0x1, 0x40000163, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x6) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) sendmsg$nl_route(r2, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001c80)={0x0, 0x1ff, 0x1, [0x9, 0x400, 0xffffffff, 0x1, 0xa], [0x7ff, 0x7ff, 0x100000000, 0xb, 0x5, 0x4, 0x9, 0x5, 0x0, 0x2, 0x401, 0x2, 0xfffffffffffffffc, 0x83b, 0x29d3a6ea, 0x2, 0x1, 0x5, 0x8000000000000000, 0xfffffffffffffff7, 0xaf88, 0x8000000000000001, 0x1, 0xddd, 0x1, 0xd3e, 0x7, 0x1, 0x2, 0x7ff, 0x0, 0x6, 0x1, 0x7, 0x3, 0x80, 0x83a5, 0x9, 0x80000000, 0xa, 0x81, 0x8000000000000000, 0x6, 0x2, 0x3, 0x2, 0x3, 0x1ff, 0x5, 0x23c79c7, 0x3, 0x3, 0x22725507, 0x4, 0x8, 0x4, 0x49, 0x7af, 0x9, 0x3, 0x9, 0x2, 0x1, 0x7, 0x0, 0x0, 0x80000001, 0xf66, 0x1, 0x2, 0x9, 0x0, 0x5, 0xfffffffffffffff5, 0x10000, 0x401, 0x2, 0xfffffffffffffff8, 0x3, 0x100, 0x6, 0x4, 0x5, 0x7, 0x9, 0x6, 0x7, 0xfffffffffffffffb, 0x7, 0x7c, 0x4, 0x6, 0x2, 0x42e, 0x1000, 0xa40, 0xfffffffffffffffc, 0x7, 0x8, 0x10001, 0x5e53, 0x5, 0xffffffffffffffff, 0x9, 0x3, 0x40, 0x4, 0xb8, 0x10001, 0x1, 0x5, 0x80000000, 0xd, 0x3ff, 0x6, 0x7, 0x0, 0x80000000, 0x8, 0xeb4, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000004c0)={0x17, 0x4, {0x8000000000000000, @usage=0x9, 0x0, 0x8, 0xdbab, 0x1b, 0x2, 0xffff, 0x0, @usage=0x100000000, 0x6, 0x92e8, [0x80000000, 0xfffffffffffffffc, 0x101, 0x725, 0x4, 0x1]}, {0x2, @struct={0x36, 0x7}, 0x0, 0xfffffffffffff540, 0x7, 0xc00, 0x7, 0x4, 0x48, @struct={0x40}, 0x5, 0x4, [0x1, 0x3, 0x9, 0x8, 0x2, 0xf1]}, {0x4, @struct={0xfff, 0x1800}, r8, 0x80000001, 0x9c61, 0xcf7, 0x5, 0x3ff, 0xb3, @struct={0x100, 0x7e2}, 0x2, 0x5, [0x80000000, 0xb6, 0x9, 0x3ff, 0x6, 0x800]}, {0x10001, 0xfffffbff, 0x6}}) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 360.870591ms ago: executing program 2 (id=241): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x98}}, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000500)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e"}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000080)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0xff, 0x0, 0xfe}]}) syz_open_procfs$namespace(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getresuid(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=242): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a802b8c7494f90424fc600b0000000a000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) r5 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r5, 0x0, &(0x7f0000000080)=0xfffffffffffffffb) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x9) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x2000009) epoll_create1(0x0) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000340)='./bus\x00', 0x12000b9a) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) unshare(0x600) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r8, r9, 0x3, 0x0) kernel console output (not intermixed with test programs): busy [ 86.468947][ T5251] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 86.546083][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.627919][ T5365] tipc: Started in network mode [ 86.637940][ T5365] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 86.669893][ T46] usb 1-1: selecting invalid altsetting 1 [ 86.673117][ T5365] tipc: Enabled bearer , priority 10 [ 86.675880][ T46] cdc_ncm 1-1:1.0: bind() failure [ 86.727901][ T5369] tipc: Resetting bearer [ 86.947369][ T5369] tipc: Disabling bearer [ 86.960264][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.009168][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.494575][ T5251] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 87.519728][ T5378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18'. [ 87.538012][ T29] audit: type=1326 audit(1725151122.897:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.17" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x0 [ 87.620260][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 87.651416][ T5378] netlink: 'syz.4.18': attribute type 11 has an invalid length. [ 87.666017][ T5380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.853154][ T5350] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.427854][ T5292] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.649160][ T5292] usb 5-1: Using ep0 maxpacket: 8 [ 88.662851][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.689615][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.720234][ T5292] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 88.737848][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.758111][ T5292] usb 5-1: config 0 descriptor?? [ 88.817027][ T5400] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.685656][ T5292] usbhid 5-1:0.0: can't add hid device: -71 [ 89.725189][ T5292] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 89.772310][ T5293] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.784487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 89.817158][ T5292] usb 5-1: USB disconnect, device number 3 [ 89.888454][ T5293] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.941837][ T5293] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.987191][ T5290] usb 1-1: USB disconnect, device number 6 [ 90.202550][ T5414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27'. [ 90.648232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.868190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.922006][ T5425] binder: 5422:5425 ioctl c0306201 0 returned -14 [ 90.964583][ T5429] binder: 5422:5429 ioctl c0306201 0 returned -14 [ 91.690736][ T29] audit: type=1326 audit(1725151127.057:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.4.34" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 91.930714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 92.249400][ T58] cfg80211: failed to load regulatory.db [ 92.308844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.527979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.708854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.028468][ T5300] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.057728][ T5447] netlink: 'syz.4.34': attribute type 4 has an invalid length. [ 93.228620][ T5290] usb 3-1: USB disconnect, device number 2 [ 93.275568][ T5300] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 93.324611][ T5447] syz.4.34 (5447) used greatest stack depth: 18544 bytes left [ 93.327796][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.438487][ T5300] usb 1-1: config 0 descriptor?? [ 93.486749][ T5300] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 93.658026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.808887][ T5463] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 93.834040][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 93.887245][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.917199][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.952674][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.997926][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.053854][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.073260][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.114084][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.167727][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.175239][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.271046][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.315384][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.357675][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.400723][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.426488][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.491891][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.516964][ T5312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.574233][ T5312] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 94.726991][ T5473] binder: 5454:5473 ioctl c018620c 200005c0 returned -1 [ 94.763670][ T5300] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 95.539049][ T29] audit: type=1326 audit(1725151130.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.2.41" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 96.218266][ T5300] gspca_cpia1: usb_control_msg 02, error -110 [ 96.246028][ T5300] gspca_cpia1: usb_control_msg 05, error -32 [ 96.256354][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.283111][ T5300] gspca_cpia1: usb_control_msg 05, error -32 [ 96.292961][ T5300] gspca_cpia1: usb_control_msg 05, error -32 [ 96.308197][ T5300] gspca_cpia1: usb_control_msg 05, error -32 [ 96.324731][ T5300] cpia1 1-1:0.0: unexpected systemstate: 00 [ 96.476807][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 96.510787][ T58] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 96.541557][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.579458][ T46] usb 1-1: USB disconnect, device number 7 [ 96.594731][ T58] usb 5-1: Product: syz [ 96.601574][ T58] usb 5-1: Manufacturer: syz [ 96.606329][ T58] usb 5-1: SerialNumber: syz [ 96.632481][ T58] usb 5-1: config 0 descriptor?? [ 96.670484][ T58] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 96.757942][ T5290] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.784153][ T5251] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 96.935629][ T58] gspca_sn9c2028: read1 error -32 [ 96.964292][ T58] gspca_sn9c2028: read1 error -32 [ 97.009578][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.051907][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.075215][ T5290] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 97.086819][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.105046][ T5290] usb 3-1: config 0 descriptor?? [ 97.467664][ T5292] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.697664][ T5292] usb 1-1: Using ep0 maxpacket: 16 [ 97.753175][ T5292] usb 1-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 97.782637][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.801941][ T5292] usb 1-1: Product: syz [ 97.806390][ T5292] usb 1-1: Manufacturer: syz [ 97.815841][ T5292] usb 1-1: SerialNumber: syz [ 97.842810][ T5292] usb 1-1: config 0 descriptor?? [ 97.862817][ T5292] r8712u: register rtl8712_netdev_ops to netdev_ops [ 97.872152][ T5292] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 98.109280][ T5293] usb 5-1: USB disconnect, device number 4 [ 98.391282][ T5292] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 98.405503][ T5292] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 98.426088][ T5292] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 98.760650][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.796598][ T8] usb 1-1: USB disconnect, device number 8 [ 98.857747][ T5251] Bluetooth: hci1: command tx timeout [ 98.899838][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 99.052232][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.205982][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.341786][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.510898][ T5251] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 99.519782][ T5251] Bluetooth: hci4: Injecting HCI hardware error event [ 99.528637][ T4624] Bluetooth: hci4: hardware error 0x00 [ 99.732147][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.739513][ T12] bridge_slave_1: left allmulticast mode [ 99.739636][ T12] bridge_slave_1: left promiscuous mode [ 99.741010][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.750676][ T5292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.769713][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.781059][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.791099][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.800963][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.813741][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.822606][ T5290] usbhid 3-1:0.0: can't add hid device: -71 [ 99.832829][ T5290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.850464][ T5290] usb 3-1: USB disconnect, device number 3 [ 99.932707][ T12] bridge_slave_0: left allmulticast mode [ 99.987191][ T12] bridge_slave_0: left promiscuous mode [ 100.007702][ T5292] usb 4-1: Using ep0 maxpacket: 8 [ 100.052300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.076126][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.117817][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.137686][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.173526][ T5292] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 100.193025][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.212868][ T54] Bluetooth: min 2 > max 0 [ 100.231860][ T5292] usb 4-1: config 0 descriptor?? [ 100.731791][ T5292] sunplus 0003:04FC:05D8.0004: item fetching failed at offset 5/7 [ 100.741384][ T5292] sunplus 0003:04FC:05D8.0004: probe with driver sunplus failed with error -22 [ 101.620284][ T5535] random: crng reseeded on system resumption [ 101.645526][ T5293] usb 4-1: USB disconnect, device number 2 [ 101.818090][ T4624] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 101.903508][ T4624] Bluetooth: hci2: command tx timeout [ 101.946333][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.962215][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.990665][ T12] bond0 (unregistering): Released all slaves [ 102.298113][ T4624] Bluetooth: hci0: command tx timeout [ 102.386875][ T12] tipc: Left network mode [ 102.737470][ T5555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 102.747293][ T5549] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.828669][ T5544] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 103.402820][ T12] hsr_slave_0: left promiscuous mode [ 103.433964][ T12] hsr_slave_1: left promiscuous mode [ 103.453912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.472694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.504773][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.518935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.567824][ T12] veth1_macvtap: left promiscuous mode [ 103.586422][ T12] veth0_macvtap: left promiscuous mode [ 103.600943][ T12] veth1_vlan: left promiscuous mode [ 103.606795][ T12] veth0_vlan: left promiscuous mode [ 103.687095][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.704096][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.713622][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.725325][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.734743][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.742864][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.984643][ T54] Bluetooth: hci2: command tx timeout [ 104.505692][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.576904][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.809623][ T5577] mmap: syz.0.65 (5577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.190910][ T5573] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 105.263607][ T5573] team0: Port device netdevsim0 added [ 105.371377][ T5525] chnl_net:caif_netlink_parms(): no params data found [ 105.819037][ T54] Bluetooth: hci1: command tx timeout [ 105.862279][ T5525] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.911242][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.940835][ T5525] bridge_slave_0: entered allmulticast mode [ 105.971162][ T5525] bridge_slave_0: entered promiscuous mode [ 106.058615][ T54] Bluetooth: hci2: command tx timeout [ 106.096312][ T5525] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.131140][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.147938][ T5525] bridge_slave_1: entered allmulticast mode [ 106.155986][ T5525] bridge_slave_1: entered promiscuous mode [ 106.254346][ T5525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.328777][ T5525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.450495][ T5525] team0: Port device team_slave_0 added [ 106.524634][ T5587] netlink: 412 bytes leftover after parsing attributes in process `syz.0.68'. [ 106.544585][ T5525] team0: Port device team_slave_1 added [ 106.866616][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.989576][ T5293] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.033965][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 107.095301][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.142724][ T5525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.159928][ T5525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.186789][ T5525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.213236][ T5293] usb 3-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 107.229485][ T5525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.257284][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.259968][ T5525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.280169][ T5293] usb 3-1: Product: syz [ 107.305842][ T5293] usb 3-1: Manufacturer: syz [ 107.317723][ T5293] usb 3-1: SerialNumber: syz [ 107.356937][ T5525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.369193][ T5293] usb 3-1: config 0 descriptor?? [ 107.380915][ T5293] r8712u: register rtl8712_netdev_ops to netdev_ops [ 107.441504][ T5293] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 107.476124][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.534488][ T5575] chnl_net:caif_netlink_parms(): no params data found [ 107.676003][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.884074][ T5525] hsr_slave_0: entered promiscuous mode [ 107.897887][ T54] Bluetooth: hci1: command tx timeout [ 107.940286][ T5525] hsr_slave_1: entered promiscuous mode [ 107.943158][ T5628] program syz.2.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.147185][ T54] Bluetooth: hci2: command tx timeout [ 108.150509][ T5293] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 108.192163][ T5293] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 108.197814][ T5628] bond0: entered promiscuous mode [ 108.206384][ T5628] bond_slave_0: entered promiscuous mode [ 108.215847][ T5628] bond_slave_1: entered promiscuous mode [ 108.248695][ T5293] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 108.286268][ T5601] syz.0.68 (5601) used greatest stack depth: 17680 bytes left [ 108.401977][ T5312] usb 3-1: USB disconnect, device number 4 [ 108.853203][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.879427][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.887329][ T5575] bridge_slave_0: entered allmulticast mode [ 108.897743][ T58] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.916910][ T5575] bridge_slave_0: entered promiscuous mode [ 108.965491][ T5639] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 109.004578][ T5639] team0: Failed to send options change via netlink (err -105) [ 109.017404][ T5639] team0: Port device netdevsim0 added [ 109.065120][ T12] bridge_slave_1: left allmulticast mode [ 109.074794][ T12] bridge_slave_1: left promiscuous mode [ 109.099786][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.112281][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.148116][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.159709][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.177779][ T58] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.196445][ T12] bridge_slave_0: left allmulticast mode [ 109.207859][ T12] bridge_slave_0: left promiscuous mode [ 109.213735][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.226990][ T58] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.247794][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.275406][ T58] usb 1-1: config 0 descriptor?? [ 109.387857][ T5293] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.592271][ T5293] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.615803][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.639792][ T5293] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.650563][ T5293] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.669519][ T5293] usb 5-1: Manufacturer: syz [ 109.690169][ T5293] usb 5-1: config 0 descriptor?? [ 109.780396][ T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 109.810267][ T58] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 109.860955][ T58] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.877643][ T5293] rc_core: IR keymap rc-hauppauge not found [ 109.904423][ T5293] Registered IR keymap rc-empty [ 109.959240][ T5293] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 109.983986][ T54] Bluetooth: hci1: command tx timeout [ 110.005346][ T5293] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 110.275435][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.303088][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.332953][ T12] bond0 (unregistering): Released all slaves [ 110.371103][ T5643] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 110.417404][ T5643] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 110.501084][ T5664] fuse: Unknown parameter 'grou00000000000000000000' [ 110.501877][ T5643] team0: Failed to send options change via netlink (err -105) [ 110.527252][ T5643] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 110.539541][ T5643] team0: Port device netdevsim0 removed [ 110.555384][ T5643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 110.577878][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.595705][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.608651][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.618760][ T5575] bridge_slave_1: entered allmulticast mode [ 110.626648][ T5575] bridge_slave_1: entered promiscuous mode [ 110.647109][ T5647] netlink: 'syz.4.73': attribute type 4 has an invalid length. [ 110.790158][ T46] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.805439][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.846800][ T8] usb 5-1: USB disconnect, device number 5 [ 110.856239][ T46] usb 3-1: config 0 descriptor?? [ 111.028705][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.072939][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.111966][ T12] hsr_slave_0: left promiscuous mode [ 111.122091][ T12] hsr_slave_1: left promiscuous mode [ 111.131594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.140230][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.149279][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.156933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.184666][ T12] veth1_macvtap: left promiscuous mode [ 111.198152][ T12] veth0_macvtap: left promiscuous mode [ 111.206213][ T46] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 111.214170][ T12] veth1_vlan: left promiscuous mode [ 111.216908][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 111.241555][ T12] veth0_vlan: left promiscuous mode [ 111.273395][ T46] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 111.287850][ T46] [drm] Initialized udl on minor 2 [ 111.410446][ T8] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 111.640455][ T46] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 111.686216][ T46] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 111.729062][ T5300] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.742498][ T46] usb 3-1: USB disconnect, device number 5 [ 111.750743][ T5300] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 112.060278][ T54] Bluetooth: hci1: command tx timeout [ 112.262693][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.324805][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.682530][ T5293] usb 1-1: USB disconnect, device number 9 [ 112.927940][ T5292] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.134209][ T5292] usb 3-1: New USB device found, idVendor=0913, idProduct=0001, bcdDevice=3a.08 [ 113.167998][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 113.176366][ T5292] usb 3-1: SerialNumber: syz [ 113.216920][ T5292] usb 3-1: config 0 descriptor?? [ 113.246205][ T5575] team0: Port device team_slave_0 added [ 113.266347][ T5575] team0: Port device team_slave_1 added [ 113.581375][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.628508][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.691858][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.701035][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.708704][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.725520][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.769790][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.805544][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.813426][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.836791][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.855027][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.887783][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.905694][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.917835][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.927794][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.935336][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.959511][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 113.999857][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.048780][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.063780][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.077710][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.094003][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.120080][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.128713][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.136531][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.184398][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.219895][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.229120][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.243486][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.257863][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.267250][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.284232][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.299059][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.328735][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.336566][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.344731][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.352701][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.377768][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.400604][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.409666][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.417863][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.426511][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.454415][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.465501][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.473913][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.485139][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.497792][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.525407][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.541994][ T5300] hid-generic FFFD:10001:0000.0006: unknown main item tag 0x0 [ 114.571064][ T5300] hid-generic FFFD:10001:0000.0006: hidraw0: HID vfffdff.fd Device [syz0] on syz0 [ 114.892829][ T5575] hsr_slave_0: entered promiscuous mode [ 114.920927][ T5575] hsr_slave_1: entered promiscuous mode [ 114.963092][ T5575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.002336][ T5575] Cannot create hsr debugfs directory [ 115.075245][ T5687] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 115.085444][ T5687] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 115.293109][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.304089][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.313067][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.330705][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.341466][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.349384][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.797529][ T5525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.839421][ T5235] usb 3-1: USB disconnect, device number 6 [ 115.925550][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.018835][ T5525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.043727][ T5525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.071489][ T5525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.118893][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.212446][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.341732][ T5707] netlink: 'syz.4.85': attribute type 12 has an invalid length. [ 116.362169][ T5707] netlink: 'syz.4.85': attribute type 11 has an invalid length. [ 116.371805][ T5707] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.85'. [ 116.410415][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.672973][ T5235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.804682][ T5698] chnl_net:caif_netlink_parms(): no params data found [ 116.867760][ T54] Bluetooth: hci0: command tx timeout [ 116.877688][ T5235] usb 5-1: Using ep0 maxpacket: 16 [ 116.907756][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 116.935469][ T12] bridge_slave_1: left allmulticast mode [ 116.941587][ T5235] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 116.956619][ T12] bridge_slave_1: left promiscuous mode [ 116.968742][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.981994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.012987][ T5235] usb 5-1: config 0 descriptor?? [ 117.029095][ T12] bridge_slave_0: left allmulticast mode [ 117.036311][ T12] bridge_slave_0: left promiscuous mode [ 117.042849][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.418038][ T54] Bluetooth: hci3: command tx timeout [ 117.583974][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.601954][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.652696][ T5235] usbhid 5-1:0.0: can't add hid device: -71 [ 117.669181][ T5235] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.711400][ T5235] usb 5-1: USB disconnect, device number 6 [ 117.816769][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.833657][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.845190][ T12] bond0 (unregistering): Released all slaves [ 118.036605][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.047273][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.082114][ T5698] bridge_slave_0: entered allmulticast mode [ 118.092811][ T5698] bridge_slave_0: entered promiscuous mode [ 118.183934][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.192570][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.206721][ T5698] bridge_slave_1: entered allmulticast mode [ 118.206817][ T5728] sctp: [Deprecated]: syz.2.88 (pid 5728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.206817][ T5728] Use struct sctp_sack_info instead [ 118.239959][ T5698] bridge_slave_1: entered promiscuous mode [ 118.403271][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.482317][ T5728] ip6tnl0: entered promiscuous mode [ 118.492744][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.545126][ T5726] ip6tnl0: left promiscuous mode [ 118.676472][ T12] hsr_slave_0: left promiscuous mode [ 118.690084][ T12] hsr_slave_1: left promiscuous mode [ 118.697187][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.708167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.735794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.743927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.785464][ T12] veth1_macvtap: left promiscuous mode [ 118.792614][ T12] veth0_macvtap: left promiscuous mode [ 118.800747][ T12] veth1_vlan: left promiscuous mode [ 118.806697][ T12] veth0_vlan: left promiscuous mode [ 118.881844][ T29] audit: type=1326 audit(1725151154.247:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.91" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 119.497936][ T54] Bluetooth: hci3: command tx timeout [ 119.620319][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.661018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.131870][ T5575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.144449][ T5736] netlink: 'syz.4.91': attribute type 2 has an invalid length. [ 120.170926][ T5734] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 120.194912][ T5698] team0: Port device team_slave_0 added [ 120.206552][ T5734] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 120.223094][ T5698] team0: Port device team_slave_1 added [ 120.331494][ T5575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.380216][ T5575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.454855][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.464096][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.499267][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.521709][ T5575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.571286][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.588334][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.623465][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.689487][ T5525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.845493][ T5698] hsr_slave_0: entered promiscuous mode [ 120.863942][ T5698] hsr_slave_1: entered promiscuous mode [ 120.872724][ T5698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.881811][ T5698] Cannot create hsr debugfs directory [ 120.965868][ T5525] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.112646][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.119886][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.156280][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.163517][ T2574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.375772][ T5765] input: syz1 as /devices/virtual/input/input9 [ 121.587896][ T54] Bluetooth: hci3: command tx timeout [ 121.824220][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.936029][ T5525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.965323][ T5525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.146895][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.227641][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.234808][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.262926][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.270219][ T2511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.317909][ T5292] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.333176][ T5525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.517757][ T5292] usb 3-1: Using ep0 maxpacket: 32 [ 122.541750][ T5292] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 122.578649][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.619852][ T5292] usb 3-1: config 0 descriptor?? [ 122.660515][ T5525] veth0_vlan: entered promiscuous mode [ 122.706079][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.719061][ T5798] UHID_CREATE from different security context by process 116 (syz.4.97), this is not allowed. [ 122.775603][ T5525] veth1_vlan: entered promiscuous mode [ 122.860604][ T5292] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 122.893505][ T5292] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 122.933533][ T5292] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 122.974724][ T5525] veth0_macvtap: entered promiscuous mode [ 123.024174][ T5525] veth1_macvtap: entered promiscuous mode [ 123.033318][ T5575] veth0_vlan: entered promiscuous mode [ 123.042681][ T5698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.073208][ T5698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.094585][ T5575] veth1_vlan: entered promiscuous mode [ 123.126715][ T5698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.154784][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.166332][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.178287][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.191649][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.211711][ T5525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.223155][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.236975][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.250908][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.267217][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.283176][ T5525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.294458][ T5698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.376067][ T5575] veth0_macvtap: entered promiscuous mode [ 123.393744][ T5525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.407292][ T5525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.421974][ T5525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.434854][ T5525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.497042][ T5575] veth1_macvtap: entered promiscuous mode [ 123.593274][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.605004][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.622276][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.635293][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.650142][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.661775][ T54] Bluetooth: hci3: command tx timeout [ 123.676225][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.695989][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.777685][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.800118][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.810154][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.825252][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.839660][ T5575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.859840][ T5575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.876467][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.892431][ T5822] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 123.901241][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.914240][ T8] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.937102][ T8] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 123.963381][ T5824] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 123.998901][ T5824] team0: Port device netdevsim0 removed [ 124.025131][ T5824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 124.048754][ T5824] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.189784][ T5575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.200319][ T5575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.210936][ T5575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.230335][ T5575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.251625][ T5824] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 124.404396][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.483540][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.510763][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.518038][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.552431][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.560444][ T2511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.722336][ T5698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.824896][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.912677][ T5698] veth0_vlan: entered promiscuous mode [ 124.945478][ T5698] veth1_vlan: entered promiscuous mode [ 124.989757][ T5698] veth0_macvtap: entered promiscuous mode [ 125.002579][ T5698] veth1_macvtap: entered promiscuous mode [ 125.039136][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.049946][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.060272][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.070977][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.081139][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.092056][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.102519][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.114196][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.125905][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.140449][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.152261][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.162604][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.173489][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.192740][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.203722][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.214235][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.225226][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.236904][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.264627][ T5698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.273700][ T5698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.283099][ T5698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.293279][ T5698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.379615][ T8] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 126.385764][ T8] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 126.393691][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.457931][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.458621][ T8] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 128.471474][ T8] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 130.538204][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.539219][ T8] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 130.552877][ T8] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 130.722897][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.748959][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.771780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.787693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.874078][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.899766][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.950547][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.968091][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.980276][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.991722][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.082117][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.096869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.387952][ T5940] input: syz0 as /devices/virtual/input/input10 [ 131.436373][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 131.459240][ T29] audit: type=1326 audit(1725151166.817:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.102" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 131.928783][ T5938] delete_channel: no stack [ 132.545350][ T5966] binder_alloc: 5960: binder_alloc_buf, no vma [ 132.586586][ T5966] netlink: 64 bytes leftover after parsing attributes in process `syz.4.107'. [ 132.681569][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.892248][ T5971] hsr0: entered promiscuous mode [ 132.917319][ T5971] macsec1: entered promiscuous mode [ 132.938293][ T5971] macsec1: entered allmulticast mode [ 132.948100][ T5971] hsr0: entered allmulticast mode [ 132.974152][ T5971] hsr_slave_0: entered allmulticast mode [ 132.982798][ T5971] hsr_slave_1: entered allmulticast mode [ 133.001705][ T5971] hsr0: left allmulticast mode [ 133.006802][ T5971] hsr_slave_0: left allmulticast mode [ 133.031658][ T5971] hsr_slave_1: left allmulticast mode [ 133.182513][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194639][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.278869][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.300837][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.314890][ T5981] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 133.359667][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.559646][ T46] usb 4-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 133.570897][ T29] audit: type=1326 audit(1725151168.937:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.576543][ T46] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 133.611300][ T29] audit: type=1326 audit(1725151168.977:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.650520][ T46] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 133.666454][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.689364][ T46] usb 4-1: Product: syz [ 133.693660][ T46] usb 4-1: Manufacturer: syz [ 133.710120][ T46] usb 4-1: SerialNumber: syz [ 133.718051][ T29] audit: type=1326 audit(1725151168.977:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.757300][ T29] audit: type=1326 audit(1725151168.977:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.872378][ T29] audit: type=1326 audit(1725151168.977:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.885321][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 133.921844][ T29] audit: type=1326 audit(1725151168.977:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 133.994605][ T46] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 134.030011][ T29] audit: type=1326 audit(1725151168.977:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 134.064507][ T46] usb 4-1: USB disconnect, device number 3 [ 134.111709][ T29] audit: type=1326 audit(1725151168.977:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 134.165607][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 134.178887][ T29] audit: type=1326 audit(1725151169.007:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 134.646670][ T6007] Failed to get privilege flags for destination (handle=0x0:0x0) [ 135.095864][ T6019] input: syz1 as /devices/virtual/input/input12 [ 135.937774][ T5235] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.128714][ T5235] usb 5-1: Using ep0 maxpacket: 32 [ 136.148111][ T5235] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 136.163912][ T5235] usb 5-1: config 0 has no interface number 0 [ 136.177699][ T5235] usb 5-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 136.206373][ T5235] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 136.225702][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.246101][ T5235] usb 5-1: Product: syz [ 136.256038][ T5235] usb 5-1: Manufacturer: syz [ 136.261214][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.277614][ T5235] usb 5-1: SerialNumber: syz [ 136.293347][ T5235] usb 5-1: config 0 descriptor?? [ 136.458768][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 136.480061][ T46] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 136.496429][ T46] usb 1-1: config 0 has no interface number 0 [ 136.519244][ T46] usb 1-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 136.544468][ T46] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 136.556792][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.565517][ T46] usb 1-1: Product: syz [ 136.571166][ T46] usb 1-1: Manufacturer: syz [ 136.576260][ T46] usb 1-1: SerialNumber: syz [ 136.589851][ T46] usb 1-1: config 0 descriptor?? [ 136.648110][ T5312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.880937][ T5312] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 136.938757][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.025859][ T5312] usb 2-1: config 0 descriptor?? [ 137.098617][ C1] hrtimer: interrupt took 56631 ns [ 137.288569][ T5235] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -5 [ 137.305542][ T5235] f81534a_ctrl 5-1:0.88: failed to enable ports: -5 [ 137.330999][ T5235] f81534a_ctrl 5-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 137.427241][ T5235] usb 5-1: USB disconnect, device number 7 [ 137.589665][ T5312] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 137.624788][ T5312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 137.693341][ T5312] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 137.710025][ T5312] [drm] Initialized udl on minor 2 [ 137.961092][ T46] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -5 [ 137.994760][ T46] f81534a_ctrl 1-1:0.88: failed to enable ports: -5 [ 138.021973][ T46] f81534a_ctrl 1-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 138.065302][ T5312] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 138.083681][ T46] usb 1-1: USB disconnect, device number 10 [ 138.098192][ T5312] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 138.115204][ T58] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.153532][ T5312] usb 2-1: USB disconnect, device number 4 [ 138.160297][ T58] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.180660][ T58] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 138.546190][ T6069] hsr0: entered promiscuous mode [ 138.571632][ T6069] macsec1: entered promiscuous mode [ 138.582950][ T6069] macsec1: entered allmulticast mode [ 138.590421][ T6069] hsr0: entered allmulticast mode [ 138.595858][ T6069] hsr_slave_0: entered allmulticast mode [ 138.607479][ T6069] hsr_slave_1: entered allmulticast mode [ 138.664208][ T6069] hsr0: left allmulticast mode [ 138.690670][ T6069] hsr_slave_0: left allmulticast mode [ 138.706955][ T6069] hsr_slave_1: left allmulticast mode [ 139.097729][ T5290] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.309652][ T5290] usb 5-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 139.340031][ T5290] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 139.362015][ T6090] IPVS: Error connecting to the multicast addr [ 139.365248][ T5290] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 139.385823][ T6089] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 139.390876][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.418253][ T5290] usb 5-1: Product: syz [ 139.435956][ T5290] usb 5-1: Manufacturer: syz [ 139.449913][ T5290] usb 5-1: SerialNumber: syz [ 139.470524][ T6089] team0: Failed to send options change via netlink (err -105) [ 139.487504][ T6089] team0: Port device netdevsim0 added [ 139.497044][ T6091] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 139.551714][ T6091] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 139.659189][ T6091] team0: Failed to send options change via netlink (err -105) [ 139.688581][ T6091] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 139.719940][ T6091] team0: Port device netdevsim0 removed [ 139.758093][ T6091] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.782581][ T5290] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 139.809079][ T6092] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 139.861421][ T5290] usb 5-1: USB disconnect, device number 8 [ 139.969970][ T6081] netlink: 412 bytes leftover after parsing attributes in process `syz.3.134'. [ 140.210078][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.347681][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.549918][ T46] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.565472][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.636080][ T46] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.656634][ T46] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.666724][ T46] usb 1-1: Manufacturer: syz [ 140.674543][ T46] usb 1-1: config 0 descriptor?? [ 140.861259][ T46] rc_core: IR keymap rc-hauppauge not found [ 140.883645][ T46] Registered IR keymap rc-empty [ 140.978853][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 141.022655][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 141.105034][ T46] usb 1-1: USB disconnect, device number 11 [ 141.371293][ T942] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.613239][ T942] usb 5-1: Using ep0 maxpacket: 16 [ 141.632952][ T942] usb 5-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 141.658276][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.666337][ T942] usb 5-1: Product: syz [ 141.677403][ T942] usb 5-1: Manufacturer: syz [ 141.682967][ T942] usb 5-1: SerialNumber: syz [ 141.697160][ T942] usb 5-1: config 0 descriptor?? [ 141.727435][ T942] r8712u: register rtl8712_netdev_ops to netdev_ops [ 141.746274][ T942] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 141.828551][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.041943][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 142.056619][ T8] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 142.066656][ T8] usb 4-1: config 0 has no interface number 0 [ 142.087366][ T8] usb 4-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 142.117096][ T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 142.127106][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.144774][ T8] usb 4-1: Product: syz [ 142.151842][ T8] usb 4-1: Manufacturer: syz [ 142.156712][ T8] usb 4-1: SerialNumber: syz [ 142.168898][ T8] usb 4-1: config 0 descriptor?? [ 142.279314][ T942] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 142.287478][ T942] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 142.299971][ T942] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 142.580731][ T942] usb 5-1: USB disconnect, device number 9 [ 142.894058][ T8] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -5 [ 142.906381][ T8] f81534a_ctrl 4-1:0.88: failed to enable ports: -5 [ 142.918343][ T8] f81534a_ctrl 4-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 142.944584][ T8] usb 4-1: USB disconnect, device number 4 [ 143.352686][ T6157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.160'. [ 143.588045][ T58] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.647706][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.809002][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 143.827821][ T58] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 143.863033][ T58] usb 1-1: config 0 has no interface number 0 [ 143.890675][ T58] usb 1-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 143.915716][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 143.940265][ T58] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 143.963741][ T46] usb 5-1: New USB device found, idVendor=0913, idProduct=0001, bcdDevice=3a.08 [ 143.982489][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.000077][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 144.022201][ T58] usb 1-1: Product: syz [ 144.033588][ T46] usb 5-1: SerialNumber: syz [ 144.039535][ T58] usb 1-1: Manufacturer: syz [ 144.046622][ T58] usb 1-1: SerialNumber: syz [ 144.068406][ T46] usb 5-1: config 0 descriptor?? [ 144.079304][ T58] usb 1-1: config 0 descriptor?? [ 144.557210][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.626984][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.646461][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.666983][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.675385][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.730593][ T6183] random: crng reseeded on system resumption [ 144.757030][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.813799][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.853454][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.881236][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.899443][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.921185][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.933583][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.943174][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.960015][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 144.994800][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.013508][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.049299][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.068141][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.080749][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.097015][ T6192] sctp: [Deprecated]: syz.3.152 (pid 6192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.097015][ T6192] Use struct sctp_sack_info instead [ 145.125319][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.153533][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.191674][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.204284][ T6192] ip6tnl0: entered promiscuous mode [ 145.235777][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.244373][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.256017][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.266673][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.277078][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.296885][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.314935][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.383292][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.394527][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.418245][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.439799][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.476420][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.514351][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.559077][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.579909][ T58] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -5 [ 145.601146][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.610050][ T58] f81534a_ctrl 1-1:0.88: failed to enable ports: -5 [ 145.616883][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.627075][ T58] f81534a_ctrl 1-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 145.638906][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.652219][ T58] usb 1-1: USB disconnect, device number 12 [ 145.658658][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.673731][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.701652][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.745935][ T6188] ip6tnl0: left promiscuous mode [ 145.769347][ T5312] hid-generic FFFD:10001:0000.0007: unknown main item tag 0x0 [ 145.786833][ T5312] hid-generic FFFD:10001:0000.0007: hidraw0: HID vfffdff.fd Device [syz0] on syz0 [ 147.013964][ T8] usb 5-1: USB disconnect, device number 10 [ 147.454500][ T6223] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 147.513632][ T6223] team0: Failed to send options change via netlink (err -105) [ 147.546501][ T6223] team0: Port device netdevsim0 added [ 147.561275][ T52] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 147.591051][ T6225] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 147.654107][ T6225] team0: Failed to send options change via netlink (err -105) [ 147.680927][ T6223] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q¼{t¿Ç—€5‚å4ó AGt=Y’age_pecpu_sys' [ 147.684848][ T6225] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 147.735982][ T6225] team0: Port device netdevsim0 removed [ 147.762669][ T6225] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.772051][ T6219] netlink: 412 bytes leftover after parsing attributes in process `syz.4.156'. [ 147.796543][ T6228] netlink: 'syz.3.157': attribute type 4 has an invalid length. [ 148.248018][ T942] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.378899][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.390335][ T6237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 148.397201][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.407240][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 148.423459][ T6238] usbip_core: unknown command [ 148.428303][ T6238] vhci_hcd: unknown pdu 3020988904 [ 148.437699][ T6238] usbip_core: unknown command [ 148.450383][ T11] vhci_hcd: stop threads [ 148.452128][ T942] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.455397][ T11] vhci_hcd: release socket [ 148.467631][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.469432][ T11] vhci_hcd: disconnect device [ 148.509177][ T942] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.520433][ T942] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.528796][ T942] usb 4-1: Manufacturer: syz [ 148.545957][ T942] usb 4-1: config 0 descriptor?? [ 148.577807][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 148.585102][ T8] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 148.595395][ T8] usb 1-1: config 0 has no interface number 0 [ 148.606031][ T8] usb 1-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 148.625257][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 148.635829][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.645536][ T8] usb 1-1: Product: syz [ 148.651504][ T8] usb 1-1: Manufacturer: syz [ 148.658271][ T8] usb 1-1: SerialNumber: syz [ 148.673631][ T8] usb 1-1: config 0 descriptor?? [ 148.719333][ T942] rc_core: IR keymap rc-hauppauge not found [ 148.725438][ T942] Registered IR keymap rc-empty [ 148.734461][ T942] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 148.757510][ T942] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 148.799401][ T942] usb 4-1: USB disconnect, device number 5 [ 149.064193][ T8] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -5 [ 149.073614][ T8] f81534a_ctrl 1-1:0.88: failed to enable ports: -5 [ 149.085740][ T8] f81534a_ctrl 1-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 149.134421][ T8] usb 1-1: USB disconnect, device number 13 [ 149.671461][ T6253] netlink: 'syz.4.166': attribute type 11 has an invalid length. [ 150.037699][ T5312] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 150.153784][ T2511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.237658][ T5312] usb 1-1: Using ep0 maxpacket: 32 [ 150.245088][ T5312] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 150.282421][ T5312] usb 1-1: config 0 has no interface number 0 [ 150.298192][ T5312] usb 1-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 150.331365][ T5312] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 150.358078][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.378190][ T5312] usb 1-1: Product: syz [ 150.382412][ T5312] usb 1-1: Manufacturer: syz [ 150.398111][ T5312] usb 1-1: SerialNumber: syz [ 150.419261][ T5312] usb 1-1: config 0 descriptor?? [ 150.451849][ T2511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.591854][ T2511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.822752][ T2511] bond0: (slave netdevsim0): Releasing backup interface [ 150.861809][ T2511] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 150.903904][ T2511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.153338][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.166950][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.177130][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.211721][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.230579][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.239253][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.274764][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.291795][ T5312] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -5 [ 151.327639][ T2511] bridge_slave_1: left allmulticast mode [ 151.333356][ T2511] bridge_slave_1: left promiscuous mode [ 151.334737][ T5312] f81534a_ctrl 1-1:0.88: failed to enable ports: -5 [ 151.340799][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.355061][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.368696][ T2511] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.376149][ T5312] f81534a_ctrl 1-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 151.392242][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.409028][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.426724][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.452445][ T2511] bridge_slave_0: left allmulticast mode [ 151.476922][ T5312] usb 1-1: USB disconnect, device number 14 [ 151.506793][ T2511] bridge_slave_0: left promiscuous mode [ 151.552135][ T2511] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.850063][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.869536][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.901164][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.921397][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.943994][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.951691][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.545545][ T2511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.555343][ T2511] bond_slave_0: left promiscuous mode [ 152.565734][ T2511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.575812][ T2511] bond_slave_1: left promiscuous mode [ 152.584928][ T2511] bond0 (unregistering): Released all slaves [ 152.769617][ T5312] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.977767][ T5312] usb 5-1: Using ep0 maxpacket: 32 [ 153.024696][ T5312] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 153.047770][ T5312] usb 5-1: config 0 has no interface number 0 [ 153.067742][ T5312] usb 5-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 153.093150][ T2511] hsr_slave_0: left promiscuous mode [ 153.108344][ T2511] hsr_slave_1: left promiscuous mode [ 153.116909][ T5312] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 153.134010][ T2511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.141726][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.157316][ T2511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.164746][ T5312] usb 5-1: Product: syz [ 153.169712][ T5312] usb 5-1: Manufacturer: syz [ 153.174403][ T5312] usb 5-1: SerialNumber: syz [ 153.180864][ T2511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.200779][ T2511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.218820][ T5312] usb 5-1: config 0 descriptor?? [ 153.250101][ T2511] veth1_macvtap: left promiscuous mode [ 153.255710][ T2511] veth0_macvtap: left promiscuous mode [ 153.261791][ T2511] veth1_vlan: left promiscuous mode [ 153.267338][ T2511] veth0_vlan: left promiscuous mode [ 153.498889][ T4624] Bluetooth: hci1: command tx timeout [ 153.756471][ T5312] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -5 [ 153.767230][ T5312] f81534a_ctrl 5-1:0.88: failed to enable ports: -5 [ 153.798028][ T5312] f81534a_ctrl 5-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 153.832835][ T5312] usb 5-1: USB disconnect, device number 11 [ 154.070051][ T4624] Bluetooth: hci4: command tx timeout [ 154.122597][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.162463][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.183536][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.202966][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.225883][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.233894][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.273429][ T2511] team0 (unregistering): Port device team_slave_1 removed [ 154.389845][ T2511] team0 (unregistering): Port device team_slave_0 removed [ 154.837763][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.027723][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 155.049522][ T6324] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56607 - 0 [ 155.050370][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 155.058425][ T6324] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56607 - 0 [ 155.058466][ T6324] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56607 - 0 [ 155.058498][ T6324] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56607 - 0 [ 155.058900][ T6324] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 32946 - 0 [ 155.075967][ T58] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 155.096584][ T6324] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 32946 - 0 [ 155.115808][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.134634][ T58] usb 5-1: config 0 descriptor?? [ 155.137695][ T6324] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 32946 - 0 [ 155.155701][ T6324] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 32946 - 0 [ 155.164704][ T6324] geneve2: entered promiscuous mode [ 155.170466][ T6324] geneve2: entered allmulticast mode [ 155.340698][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 155.441100][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 155.580659][ T54] Bluetooth: hci1: command tx timeout [ 155.644508][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.691285][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.724278][ T58] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 155.738897][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 155.757484][ T58] hid-generic 0003:0158:0100.0008: unexpected long global item [ 155.794498][ T58] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 155.796367][ T6340] input: syz0 as /devices/virtual/input/input15 [ 155.900931][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.901224][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.901416][ T6276] bridge_slave_0: entered allmulticast mode [ 155.903056][ T6276] bridge_slave_0: entered promiscuous mode [ 155.948921][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.993998][ T5290] usb 5-1: USB disconnect, device number 12 [ 156.043348][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.043571][ T6276] bridge_slave_1: entered allmulticast mode [ 156.045268][ T6276] bridge_slave_1: entered promiscuous mode [ 156.137674][ T54] Bluetooth: hci4: command tx timeout [ 156.277874][ T2511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.297770][ T54] Bluetooth: hci5: command tx timeout [ 156.396940][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.464555][ T2511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.496925][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.654770][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 156.755666][ T2511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.861009][ T6276] team0: Port device team_slave_0 added [ 156.897391][ T2511] bond0: (slave netdevsim0): Releasing backup interface [ 156.914291][ T2511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.978920][ T5290] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.014392][ T6276] team0: Port device team_slave_1 added [ 157.052284][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.062074][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.071404][ T6291] bridge_slave_0: entered allmulticast mode [ 157.084291][ T6291] bridge_slave_0: entered promiscuous mode [ 157.098494][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.106159][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.113850][ T6291] bridge_slave_1: entered allmulticast mode [ 157.125667][ T6291] bridge_slave_1: entered promiscuous mode [ 157.178014][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 157.202695][ T5290] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 157.211013][ T5290] usb 5-1: config 0 has no interface number 0 [ 157.217159][ T5290] usb 5-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 157.237443][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.247992][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.275742][ T5290] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 157.280500][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.291318][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.304235][ T5290] usb 5-1: Product: syz [ 157.309694][ T5290] usb 5-1: Manufacturer: syz [ 157.314514][ T5290] usb 5-1: SerialNumber: syz [ 157.335606][ T5290] usb 5-1: config 0 descriptor?? [ 157.392308][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.444163][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.459654][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.495263][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.536679][ T6375] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 35269 - 0 [ 157.556151][ T6375] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 35269 - 0 [ 157.565586][ T6375] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 35269 - 0 [ 157.586222][ T6375] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 35269 - 0 [ 157.602009][ T6375] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 57842 - 0 [ 157.620683][ T6375] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 57842 - 0 [ 157.641302][ T6375] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 57842 - 0 [ 157.668404][ T54] Bluetooth: hci1: command tx timeout [ 157.687693][ T5300] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 157.708976][ T6375] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 57842 - 0 [ 157.729520][ T6375] geneve2: entered promiscuous mode [ 157.734820][ T6375] geneve2: entered allmulticast mode [ 157.779240][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.900265][ T5300] usb 1-1: Using ep0 maxpacket: 16 [ 157.912793][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 157.927772][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.949054][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.958632][ T6322] bridge_slave_0: entered allmulticast mode [ 157.961478][ T5300] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 157.967040][ T6322] bridge_slave_0: entered promiscuous mode [ 157.983944][ T5290] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -5 [ 157.993806][ T5290] f81534a_ctrl 5-1:0.88: failed to enable ports: -5 [ 158.010938][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.016936][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.034604][ T5290] f81534a_ctrl 5-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 158.041443][ T5300] usb 1-1: config 0 descriptor?? [ 158.048868][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.074589][ T5290] usb 5-1: USB disconnect, device number 13 [ 158.085454][ T6322] bridge_slave_1: entered allmulticast mode [ 158.110275][ T6322] bridge_slave_1: entered promiscuous mode [ 158.218949][ T54] Bluetooth: hci4: command tx timeout [ 158.319026][ T6291] team0: Port device team_slave_0 added [ 158.356879][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.371323][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.380658][ T54] Bluetooth: hci5: command tx timeout [ 158.411745][ T6276] hsr_slave_0: entered promiscuous mode [ 158.418958][ T6276] hsr_slave_1: entered promiscuous mode [ 158.425570][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.433576][ T6276] Cannot create hsr debugfs directory [ 158.447164][ T6291] team0: Port device team_slave_1 added [ 158.497108][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.517838][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.538991][ T5300] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 158.578294][ T5300] hid-generic 0003:0158:0100.0009: unexpected long global item [ 158.586815][ T5300] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 158.608265][ T2511] bridge_slave_1: left allmulticast mode [ 158.613964][ T2511] bridge_slave_1: left promiscuous mode [ 158.620523][ T2511] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.654997][ T2511] bridge_slave_0: left allmulticast mode [ 158.680250][ T2511] bridge_slave_0: left promiscuous mode [ 158.686301][ T2511] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.755985][ T58] usb 1-1: USB disconnect, device number 15 [ 158.937974][ T5290] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.130837][ T2511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.141262][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 159.152182][ T5290] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 159.160655][ T2511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.169715][ T5290] usb 5-1: config 0 has no interface number 0 [ 159.176311][ T5290] usb 5-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 159.191730][ T2511] bond0 (unregistering): Released all slaves [ 159.192097][ T5290] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 159.207163][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.215388][ T5290] usb 5-1: Product: syz [ 159.220804][ T5290] usb 5-1: Manufacturer: syz [ 159.225589][ T5290] usb 5-1: SerialNumber: syz [ 159.233108][ T5290] usb 5-1: config 0 descriptor?? [ 159.349603][ T6322] team0: Port device team_slave_0 added [ 159.440864][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.448090][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.507897][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.534012][ T6322] team0: Port device team_slave_1 added [ 159.690365][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.737688][ T54] Bluetooth: hci1: command tx timeout [ 159.744785][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.831529][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.894445][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 159.970161][ T5290] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -5 [ 159.986842][ T5290] f81534a_ctrl 5-1:0.88: failed to enable ports: -5 [ 159.994159][ T5290] f81534a_ctrl 5-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 160.015003][ T5290] usb 5-1: USB disconnect, device number 14 [ 160.017944][ T5300] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.074469][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.088476][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.116171][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.164636][ T2511] hsr_slave_0: left promiscuous mode [ 160.170964][ T2511] hsr_slave_1: left promiscuous mode [ 160.177137][ T2511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.187904][ T2511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.196294][ T2511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.204188][ T2511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.226928][ T2511] veth1_macvtap: left promiscuous mode [ 160.232698][ T2511] veth0_macvtap: left promiscuous mode [ 160.238369][ T5300] usb 1-1: Using ep0 maxpacket: 32 [ 160.239359][ T2511] veth1_vlan: left promiscuous mode [ 160.255004][ T2511] veth0_vlan: left promiscuous mode [ 160.255663][ T5300] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 160.271181][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.279724][ T5300] usb 1-1: Product: syz [ 160.283937][ T5300] usb 1-1: Manufacturer: syz [ 160.290224][ T5300] usb 1-1: SerialNumber: syz [ 160.298876][ T54] Bluetooth: hci4: command tx timeout [ 160.305595][ T5300] usb 1-1: config 0 descriptor?? [ 160.315022][ T5300] cdc_mbim 1-1:0.0: CDC Union missing and no IAD found [ 160.322551][ T5300] cdc_mbim 1-1:0.0: bind() failure [ 160.329204][ T5300] option 1-1:0.0: GSM modem (1-port) converter detected [ 160.457764][ T54] Bluetooth: hci5: command tx timeout [ 160.628301][ T5290] usb 1-1: USB disconnect, device number 16 [ 160.658802][ T5290] option 1-1:0.0: device disconnected [ 161.061311][ T2511] team0 (unregistering): Port device team_slave_1 removed [ 161.114811][ T2511] team0 (unregistering): Port device team_slave_0 removed [ 162.015143][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.022523][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.048562][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.055550][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.117677][ T5290] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 162.145967][ T6291] hsr_slave_0: entered promiscuous mode [ 162.168671][ T6291] hsr_slave_1: entered promiscuous mode [ 162.193709][ T6291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.212185][ T6291] Cannot create hsr debugfs directory [ 162.319654][ T5290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.340486][ T5290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.357173][ T5290] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.377697][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.415082][ T5290] usb 1-1: SerialNumber: syz [ 162.539082][ T54] Bluetooth: hci5: command tx timeout [ 162.740060][ T6322] hsr_slave_0: entered promiscuous mode [ 162.765890][ T6322] hsr_slave_1: entered promiscuous mode [ 162.789064][ T6322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.800217][ T6322] Cannot create hsr debugfs directory [ 163.137333][ T6429] process 'syz.4.195' launched './file0' with NULL argv: empty string added [ 164.418903][ T6276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.454906][ T6276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.480691][ T6276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.570588][ T6276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.689681][ T5290] usb 1-1: 0:2 : does not exist [ 164.706388][ T5290] usb 1-1: unit 5 not found! [ 164.791777][ T5290] usb 1-1: USB disconnect, device number 17 [ 164.798341][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 164.798368][ T29] audit: type=1326 audit(1725151200.167:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.4.197" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 164.924777][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.098727][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.195313][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.262841][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.270143][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.396322][ T6322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.442492][ T6291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.463169][ T6291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.474781][ T6463] netlink: 1212 bytes leftover after parsing attributes in process `syz.0.199'. [ 165.503892][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.511145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.592221][ T6322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.628795][ T6291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.668214][ T6291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.831670][ T6322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.000125][ T6322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.293651][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.462691][ T6322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.512531][ T6322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.597325][ T6322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.673228][ T6322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.886279][ T6476] netlink: 88 bytes leftover after parsing attributes in process `syz.4.202'. [ 166.985121][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.073142][ T6276] veth0_vlan: entered promiscuous mode [ 167.199739][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.263170][ T6276] veth1_vlan: entered promiscuous mode [ 167.361892][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.369598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.420651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.427837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.498335][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.599410][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.691317][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.698654][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.722976][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.730226][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.793590][ T6276] veth0_macvtap: entered promiscuous mode [ 167.842533][ T6276] veth1_macvtap: entered promiscuous mode [ 168.024480][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.036479][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.047447][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.059780][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.093949][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.225750][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.252372][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.282006][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.293073][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.306534][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.326477][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.340669][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.360750][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.400517][ T6276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.428239][ T6276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.447297][ T6276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.467856][ T6276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.539395][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.835489][ T6291] veth0_vlan: entered promiscuous mode [ 168.956501][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.976916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.009325][ T6291] veth1_vlan: entered promiscuous mode [ 169.143776][ T2511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.169461][ T2511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35269 - 0 [ 169.210074][ T2511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 57842 - 0 [ 169.393157][ T6322] veth0_vlan: entered promiscuous mode [ 169.509549][ T2511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.525015][ T2511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35269 - 0 [ 169.536242][ T2511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 57842 - 0 [ 169.599796][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.605435][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.621365][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.630088][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.635040][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.645816][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.654706][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.665003][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.798698][ T2511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.854925][ T2511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35269 - 0 [ 169.866496][ T2511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 57842 - 0 [ 169.936435][ T6322] veth1_vlan: entered promiscuous mode [ 170.053467][ T2511] bond0: (slave netdevsim0): Releasing backup interface [ 170.070338][ T2511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.080897][ T2511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35269 - 0 [ 170.092052][ T2511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 57842 - 0 [ 170.165904][ T6291] veth0_macvtap: entered promiscuous mode [ 170.209149][ T6291] veth1_macvtap: entered promiscuous mode [ 170.389034][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.416290][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.442084][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.480117][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.520434][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.532128][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.544516][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.663770][ T6322] veth0_macvtap: entered promiscuous mode [ 170.734418][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.749341][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.759531][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.770270][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.780776][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.793881][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.808295][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.837591][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.854739][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.976687][ T6322] veth1_macvtap: entered promiscuous mode [ 170.994049][ T6291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.014931][ T6291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.033393][ T6291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.042754][ T6291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.099398][ T2511] bridge_slave_1: left allmulticast mode [ 171.105193][ T2511] bridge_slave_1: left promiscuous mode [ 171.132791][ T2511] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.173482][ T2511] bridge_slave_0: left allmulticast mode [ 171.179672][ T2511] bridge_slave_0: left promiscuous mode [ 171.186774][ T2511] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.740665][ T54] Bluetooth: hci3: command tx timeout [ 172.297324][ T2511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.319987][ T2511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.341480][ T2511] bond0 (unregistering): Released all slaves [ 172.382521][ T6585] netlink: 'syz.4.211': attribute type 21 has an invalid length. [ 172.414195][ T6585] netlink: 'syz.4.211': attribute type 20 has an invalid length. [ 172.441370][ T6585] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.632775][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.655026][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.666066][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.685528][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.695964][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.707667][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.724821][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.736006][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.770132][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.843520][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.871302][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.888072][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.899232][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.913333][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.924340][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.934742][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.946367][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.956778][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.967862][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.982175][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.123041][ T6322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.147621][ T6322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.164187][ T6322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.177259][ T6322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.225231][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 173.417098][ T2511] hsr_slave_0: left promiscuous mode [ 173.431644][ T2511] hsr_slave_1: left promiscuous mode [ 173.444510][ T2511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.462349][ T2511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.528510][ T2511] veth1_macvtap: left promiscuous mode [ 173.546928][ T2511] veth0_macvtap: left promiscuous mode [ 173.554187][ T2511] veth1_vlan: left promiscuous mode [ 173.561454][ T2511] veth0_vlan: left promiscuous mode [ 173.827987][ T54] Bluetooth: hci3: command tx timeout [ 174.658253][ T2511] team0 (unregistering): Port device team_slave_1 removed [ 174.738859][ T2511] team0 (unregistering): Port device team_slave_0 removed [ 175.377723][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 175.401817][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.409978][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.593082][ T6657] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 175.624426][ T6657] netlink: 'syz.2.216': attribute type 2 has an invalid length. [ 175.634442][ T6657] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.216'. [ 175.684393][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.697831][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.705291][ T6542] bridge_slave_0: entered allmulticast mode [ 175.715315][ T6542] bridge_slave_0: entered promiscuous mode [ 175.772504][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.807865][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.825230][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.846396][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.854995][ T6542] bridge_slave_1: entered allmulticast mode [ 175.863207][ T6542] bridge_slave_1: entered promiscuous mode [ 175.907674][ T54] Bluetooth: hci3: command tx timeout [ 176.039592][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.053854][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.076640][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.097920][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.169851][ T6542] team0: Port device team_slave_0 added [ 176.200931][ T6542] team0: Port device team_slave_1 added [ 176.389372][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.407257][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.477608][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.507037][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.519063][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.561137][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.729839][ T6675] bridge1: entered promiscuous mode [ 176.744127][ T6675] bridge1: entered allmulticast mode [ 176.815856][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.875427][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.998268][ T5312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.044235][ T6542] hsr_slave_0: entered promiscuous mode [ 177.065614][ T6542] hsr_slave_1: entered promiscuous mode [ 177.084265][ T6542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.102498][ T6542] Cannot create hsr debugfs directory [ 177.219798][ T5312] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 177.237868][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.276787][ T5312] usb 4-1: config 0 descriptor?? [ 177.394927][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.415130][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.843483][ T29] audit: type=1326 audit(1725151213.207:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 177.865278][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.925660][ T29] audit: type=1326 audit(1725151213.207:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 177.947464][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.964405][ T29] audit: type=1326 audit(1725151213.257:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 177.994727][ T54] Bluetooth: hci3: command tx timeout [ 178.006961][ T29] audit: type=1326 audit(1725151213.257:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.028752][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.056975][ T29] audit: type=1326 audit(1725151213.257:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.078771][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.097829][ T29] audit: type=1326 audit(1725151213.267:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.194758][ T29] audit: type=1326 audit(1725151213.267:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.229747][ T29] audit: type=1326 audit(1725151213.267:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.269166][ T29] audit: type=1326 audit(1725151213.277:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.321618][ T29] audit: type=1326 audit(1725151213.277:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 178.950830][ T6713] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 178.976416][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.985110][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.995545][ T6713] bridge0: entered allmulticast mode [ 179.537176][ T5312] usb 4-1: can't set first interface for hiFace device. [ 179.573859][ T5312] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 179.662787][ T5312] usb 4-1: USB disconnect, device number 6 [ 179.693270][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.780969][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.883191][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.264562][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.972463][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.084798][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.197107][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.204431][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.270867][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.278239][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.680137][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.017628][ T6542] veth0_vlan: entered promiscuous mode [ 182.087307][ T6542] veth1_vlan: entered promiscuous mode [ 182.204698][ T6821] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 182.246655][ T6821] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.225'. [ 182.281731][ T6542] veth0_macvtap: entered promiscuous mode [ 182.333607][ T6824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.225'. [ 182.348572][ T6824] netlink: 43 bytes leftover after parsing attributes in process `syz.2.225'. [ 182.364440][ T6824] netlink: 'syz.2.225': attribute type 5 has an invalid length. [ 182.374779][ T6542] veth1_macvtap: entered promiscuous mode [ 182.397483][ T6824] netlink: 43 bytes leftover after parsing attributes in process `syz.2.225'. [ 182.550343][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.597934][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.648190][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.668223][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.679157][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.707377][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.728676][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.751425][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.762009][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.788107][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.813233][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.928299][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.959620][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.989729][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.039259][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.084954][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.118737][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.170690][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.204312][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.225510][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.251283][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.287109][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 183.300795][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.343849][ T6542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.377858][ T6542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.441297][ T6542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.489331][ T6542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.884351][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 183.884371][ T29] audit: type=1326 audit(1725151219.247:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.233" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 184.044369][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.064056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.174708][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.244596][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.404577][ T5292] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 184.505406][ T5292] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 184.747955][ T5292] usb 3-1: USB disconnect, device number 7 [ 185.092800][ T6876] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.208'. [ 185.583426][ T6886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.591313][ T6886] IPv6: NLM_F_CREATE should be set when creating new route [ 185.598663][ T6886] IPv6: NLM_F_CREATE should be set when creating new route [ 185.729029][ T6888] netlink: 172 bytes leftover after parsing attributes in process `syz.0.239'. [ 185.755608][ T6886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'. [ 186.098863][ T63] bridge_slave_1: left allmulticast mode [ 186.104592][ T63] bridge_slave_1: left promiscuous mode [ 186.110679][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.117861][ T5292] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 186.146523][ T63] bridge_slave_0: left allmulticast mode [ 186.155167][ T63] bridge_slave_0: left promiscuous mode [ 186.161360][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.267810][ T5291] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.302202][ T5292] usb 1-1: Using ep0 maxpacket: 32 [ 186.317166][ T5292] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 186.348420][ T5292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.388143][ T6897] input: syz1 as /devices/virtual/input/input17 [ 186.415698][ T5292] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 186.432739][ T5292] usb 1-1: config 0 has no interface number 0 [ 186.457432][ T5292] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 186.473279][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.485898][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 186.514551][ T5292] usb 1-1: Product: syz [ 186.519201][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 186.544046][ T5292] usb 1-1: Manufacturer: syz [ 186.549215][ T5291] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 186.563143][ T5292] usb 1-1: SerialNumber: syz [ 186.569419][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.595196][ T5292] usb 1-1: config 0 descriptor?? [ 186.615057][ T5291] usb 2-1: config 0 descriptor?? [ 186.862680][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 186.876356][ T6888] netlink: 104 bytes leftover after parsing attributes in process `syz.0.239'. [ 187.064642][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.075957][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.098677][ T5291] hid (null): report_id 2838798905 is invalid [ 187.105172][ T5291] hid (null): unknown global tag 0xc [ 187.117436][ T5291] hid (null): unknown global tag 0xa5 [ 187.123606][ T5291] hid (null): unknown global tag 0xd [ 187.129208][ T5291] hid (null): unknown global tag 0xc [ 187.134661][ T5291] hid (null): global environment stack underflow [ 187.153211][ T5291] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 187.166763][ T5291] hid-generic 0003:0158:0100.000A: unexpected long global item [ 187.175546][ T5291] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 187.293015][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.305808][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.316758][ T5292] usb 2-1: USB disconnect, device number 5 [ 187.334410][ T63] bond0 (unregistering): Released all slaves [ 188.711188][ T5293] usb 1-1: USB disconnect, device number 18 [ 189.417949][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.425201][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 189.433045][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 191.497825][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 191.499481][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 191.511807][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 193.578099][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 193.579144][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.584223][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 194.622176][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.631475][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.060699][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.067117][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.503938][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.510783][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.777835][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 334.785477][ T30] Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 334.793213][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.801993][ T30] task:kworker/0:0 state:D stack:18360 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 334.812303][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 334.819585][ T30] Call Trace: [ 334.822918][ T30] [ 334.825896][ T30] __schedule+0x1800/0x4a60 [ 334.830784][ T30] ? __pfx___schedule+0x10/0x10 [ 334.835708][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.841808][ T30] ? __pfx_lock_release+0x10/0x10 [ 334.847078][ T30] ? kick_pool+0x1bd/0x620 [ 334.851898][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.857152][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 334.867109][ T30] ? schedule+0x90/0x320 [ 334.871587][ T30] schedule+0x14b/0x320 [ 334.875803][ T30] schedule_preempt_disabled+0x13/0x30 [ 334.881629][ T30] __mutex_lock+0x6a4/0xd70 [ 334.886261][ T30] ? __mutex_lock+0x527/0xd70 [ 334.891071][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 334.897385][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.902519][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.908629][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.915021][ T30] ? process_scheduled_works+0x945/0x1830 [ 334.920865][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 334.926983][ T30] ? process_scheduled_works+0x945/0x1830 [ 334.933010][ T30] process_scheduled_works+0xa2c/0x1830 [ 334.938731][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.944771][ T30] ? assign_work+0x364/0x3d0 [ 334.949563][ T30] worker_thread+0x86d/0xd10 [ 334.954219][ T30] ? __kthread_parkme+0x169/0x1d0 [ 334.959363][ T30] ? __pfx_worker_thread+0x10/0x10 [ 334.964527][ T30] kthread+0x2f0/0x390 [ 334.973635][ T30] ? __pfx_worker_thread+0x10/0x10 [ 334.978880][ T30] ? __pfx_kthread+0x10/0x10 [ 334.983537][ T30] ret_from_fork+0x4b/0x80 [ 334.988134][ T30] ? __pfx_kthread+0x10/0x10 [ 334.992798][ T30] ret_from_fork_asm+0x1a/0x30 [ 334.997677][ T30] [ 335.000766][ T30] INFO: task kworker/u8:4:63 blocked for more than 143 seconds. [ 335.008504][ T30] Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 335.016182][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.026480][ T30] task:kworker/u8:4 state:D stack:22968 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 335.037237][ T30] Workqueue: netns cleanup_net [ 335.042134][ T30] Call Trace: [ 335.045437][ T30] [ 335.048415][ T30] __schedule+0x1800/0x4a60 [ 335.052981][ T30] ? __pfx___schedule+0x10/0x10 [ 335.057925][ T30] ? __pfx_lock_release+0x10/0x10 [ 335.063084][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 335.068638][ T30] ? kthread_data+0x52/0xd0 [ 335.073168][ T30] ? schedule+0x90/0x320 [ 335.077435][ T30] ? wq_worker_sleeping+0x66/0x240 [ 335.082645][ T30] ? schedule+0x90/0x320 [ 335.086983][ T30] schedule+0x14b/0x320 [ 335.091328][ T30] schedule_preempt_disabled+0x13/0x30 [ 335.096846][ T30] __mutex_lock+0x6a4/0xd70 [ 335.102223][ T30] ? kobject_put+0x446/0x480 [ 335.106859][ T30] ? __mutex_lock+0x527/0xd70 [ 335.111597][ T30] ? rfkill_unregister+0xd0/0x230 [ 335.116652][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 335.121740][ T30] ? __pfx_device_del+0x10/0x10 [ 335.126657][ T30] rfkill_unregister+0xd0/0x230 [ 335.131640][ T30] wiphy_unregister+0x22a/0xb00 [ 335.136537][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 335.143217][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 335.148827][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 335.154529][ T30] ? kfree+0x149/0x360 [ 335.158678][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 335.164271][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 335.169955][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 335.176159][ T30] hwsim_exit_net+0x5c1/0x670 [ 335.180959][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 335.186201][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 335.192797][ T30] cleanup_net+0x802/0xcc0 [ 335.197277][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 335.202623][ T30] ? process_scheduled_works+0x945/0x1830 [ 335.208493][ T30] process_scheduled_works+0xa2c/0x1830 [ 335.214097][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.220266][ T30] ? assign_work+0x364/0x3d0 [ 335.224909][ T30] worker_thread+0x86d/0xd10 [ 335.229607][ T30] ? __kthread_parkme+0x169/0x1d0 [ 335.234673][ T30] ? __pfx_worker_thread+0x10/0x10 [ 335.239857][ T30] kthread+0x2f0/0x390 [ 335.244052][ T30] ? __pfx_worker_thread+0x10/0x10 [ 335.249404][ T30] ? __pfx_kthread+0x10/0x10 [ 335.254048][ T30] ret_from_fork+0x4b/0x80 [ 335.258741][ T30] ? __pfx_kthread+0x10/0x10 [ 335.263371][ T30] ret_from_fork_asm+0x1a/0x30 [ 335.268464][ T30] [ 335.271603][ T30] INFO: task syz-executor:6262 blocked for more than 143 seconds. [ 335.279516][ T30] Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 335.287262][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.296029][ T30] task:syz-executor state:D stack:23648 pid:6262 tgid:6262 ppid:5222 flags:0x20004002 [ 335.306301][ T30] Call Trace: [ 335.309673][ T30] [ 335.312632][ T30] __schedule+0x1800/0x4a60 [ 335.317192][ T30] ? __pfx___schedule+0x10/0x10 [ 335.322147][ T30] ? __pfx_lock_release+0x10/0x10 [ 335.327207][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 335.332958][ T30] ? schedule+0x90/0x320 [ 335.337250][ T30] schedule+0x14b/0x320 [ 335.341564][ T30] schedule_preempt_disabled+0x13/0x30 [ 335.347173][ T30] __mutex_lock+0x6a4/0xd70 [ 335.351765][ T30] ? kobject_put+0x446/0x480 [ 335.356382][ T30] ? __mutex_lock+0x527/0xd70 [ 335.361139][ T30] ? rfkill_unregister+0xd0/0x230 [ 335.366228][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 335.371370][ T30] ? __pfx_device_del+0x10/0x10 [ 335.376261][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 335.381618][ T30] rfkill_unregister+0xd0/0x230 [ 335.386531][ T30] hci_unregister_dev+0x366/0x510 [ 335.391723][ T30] vhci_release+0x83/0xd0 [ 335.396134][ T30] ? __pfx_vhci_release+0x10/0x10 [ 335.401296][ T30] __fput+0x24a/0x8a0 [ 335.405329][ T30] task_work_run+0x24f/0x310 [ 335.410126][ T30] ? __pfx_task_work_run+0x10/0x10 [ 335.415292][ T30] ? switch_task_namespaces+0xe4/0x110 [ 335.421165][ T30] do_exit+0xa2f/0x27f0 [ 335.425367][ T30] ? __pfx_do_exit+0x10/0x10 [ 335.430053][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.436074][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.442483][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.447809][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 335.453049][ T30] do_group_exit+0x207/0x2c0 [ 335.457801][ T30] __ia32_sys_exit_group+0x3f/0x40 [ 335.462944][ T30] ia32_sys_call+0x2624/0x2630 [ 335.467802][ T30] __do_fast_syscall_32+0xb4/0x110 [ 335.472949][ T30] ? exc_page_fault+0x590/0x8c0 [ 335.477909][ T30] do_fast_syscall_32+0x34/0x80 [ 335.482783][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.489249][ T30] RIP: 0023:0xf73fd579 [ 335.493353][ T30] RSP: 002b:00000000fff9f83c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 335.502037][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000004 [ 335.510148][ T30] RDX: 0000000000000000 RSI: 00000000f713dc40 RDI: 00000000f754ffc0 [ 335.518402][ T30] RBP: 0000000030000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.526410][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.534590][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.542631][ T30] [ 335.545667][ T30] INFO: task syz.4.234:6858 blocked for more than 144 seconds. [ 335.553397][ T30] Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 335.561147][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.569978][ T30] task:syz.4.234 state:D stack:24472 pid:6858 tgid:6855 ppid:5256 flags:0x20004006 [ 335.580560][ T30] Call Trace: [ 335.583871][ T30] [ 335.586805][ T30] __schedule+0x1800/0x4a60 [ 335.591431][ T30] ? __pfx___schedule+0x10/0x10 [ 335.596323][ T30] ? __pfx_lock_release+0x10/0x10 [ 335.601436][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 335.606936][ T30] ? schedule+0x90/0x320 [ 335.611264][ T30] schedule+0x14b/0x320 [ 335.615457][ T30] schedule_preempt_disabled+0x13/0x30 [ 335.621206][ T30] __mutex_lock+0x6a4/0xd70 [ 335.625838][ T30] ? kobject_put+0x446/0x480 [ 335.630515][ T30] ? __mutex_lock+0x527/0xd70 [ 335.635231][ T30] ? rfkill_unregister+0xd0/0x230 [ 335.640375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 335.645530][ T30] ? __pfx_device_del+0x10/0x10 [ 335.650461][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 335.656581][ T30] rfkill_unregister+0xd0/0x230 [ 335.661868][ T30] nfc_unregister_device+0x96/0x2a0 [ 335.667208][ T30] virtual_ncidev_close+0x59/0x90 [ 335.672367][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 335.678193][ T30] __fput+0x24a/0x8a0 [ 335.682236][ T30] task_work_run+0x24f/0x310 [ 335.686854][ T30] ? __pfx_task_work_run+0x10/0x10 [ 335.692040][ T30] ? switch_task_namespaces+0xe4/0x110 [ 335.697622][ T30] do_exit+0xa2f/0x27f0 [ 335.701825][ T30] ? __pfx_do_exit+0x10/0x10 [ 335.706432][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 335.711862][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.717958][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.724328][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 335.729543][ T30] do_group_exit+0x207/0x2c0 [ 335.734157][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.739498][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 335.744765][ T30] get_signal+0x16a1/0x1740 [ 335.749400][ T30] ? __pfx_get_signal+0x10/0x10 [ 335.754292][ T30] ? fput+0x193/0x210 [ 335.758423][ T30] arch_do_signal_or_restart+0x96/0x860 [ 335.764110][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.770389][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 335.776145][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 335.781887][ T30] __do_fast_syscall_32+0xc4/0x110 [ 335.787122][ T30] ? exc_page_fault+0x590/0x8c0 [ 335.792069][ T30] do_fast_syscall_32+0x34/0x80 [ 335.796977][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.803381][ T30] RIP: 0023:0xf73fd579 [ 335.807595][ T30] RSP: 002b:00000000f56e3494 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 335.816042][ T30] RAX: fffffffffffffffc RBX: 0000000000000009 RCX: 0000000080085502 [ 335.824517][ T30] RDX: 00000000f56e4520 RSI: 00000000f73f0ff4 RDI: 00000000f56e34f8 [ 335.832664][ T30] RBP: 00000000f73f0ff4 R08: 0000000000000000 R09: 0000000000000000 [ 335.840813][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.849018][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.857051][ T30] [ 335.860163][ T30] [ 335.860163][ T30] Showing all locks held in the system: [ 335.868058][ T30] 3 locks held by kworker/0:0/8: [ 335.873030][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 335.884202][ T30] #1: ffffc900000d7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 335.898063][ T30] #2: ffffffff8ff631c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 335.909653][ T30] 4 locks held by kworker/0:1/9: [ 335.914609][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 335.925702][ T30] #1: ffffc900000e7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 335.936954][ T30] #2: ffffffff8ff631c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x4f/0x180 [ 335.946533][ T30] #3: ffff88807ca1e100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 335.956328][ T30] 1 lock held by khungtaskd/30: [ 335.961298][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 335.971277][ T30] 4 locks held by kworker/u8:4/63: [ 335.976429][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 335.996486][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.007236][ T30] #2: ffffffff8fc7f0d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 336.016865][ T30] #3: ffffffff8ff631c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 336.027217][ T30] 2 locks held by getty/4994: [ 336.032026][ T30] #0: ffff888030e5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 336.041931][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 336.052195][ T30] 1 lock held by syz-executor/6262: [ 336.057421][ T30] #0: ffffffff8ff631c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 336.067855][ T30] 2 locks held by syz.4.234/6858: [ 336.072910][ T30] #0: ffff88807ca1e100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 336.082793][ T30] #1: ffffffff8ff631c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 336.093062][ T30] [ 336.095436][ T30] ============================================= [ 336.095436][ T30] [ 336.104011][ T30] NMI backtrace for cpu 1 [ 336.108370][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 336.118924][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 336.129076][ T30] Call Trace: [ 336.132365][ T30] [ 336.135309][ T30] dump_stack_lvl+0x241/0x360 [ 336.140002][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.145210][ T30] ? __pfx__printk+0x10/0x10 [ 336.149838][ T30] ? vprintk_emit+0x667/0x7c0 [ 336.154575][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 336.159614][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 336.164574][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.170159][ T30] ? _printk+0xd5/0x120 [ 336.174320][ T30] ? __pfx__printk+0x10/0x10 [ 336.178922][ T30] ? __wake_up_klogd+0xcc/0x110 [ 336.183785][ T30] ? __pfx__printk+0x10/0x10 [ 336.188390][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 336.193425][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.199420][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 336.205414][ T30] watchdog+0xff4/0x1040 [ 336.209692][ T30] ? watchdog+0x1ea/0x1040 [ 336.214164][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.218860][ T30] kthread+0x2f0/0x390 [ 336.223179][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.227870][ T30] ? __pfx_kthread+0x10/0x10 [ 336.232475][ T30] ret_from_fork+0x4b/0x80 [ 336.236905][ T30] ? __pfx_kthread+0x10/0x10 [ 336.241511][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.246301][ T30] [ 336.249796][ T30] Sending NMI from CPU 1 to CPUs 0: [ 336.255051][ C0] NMI backtrace for cpu 0 [ 336.255065][ C0] CPU: 0 UID: 0 PID: 6780 Comm: kworker/u8:17 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 336.255086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 336.255097][ C0] Workqueue: bat_events batadv_nc_worker [ 336.255127][ C0] RIP: 0010:__lock_acquire+0x71f/0x2040 [ 336.255154][ C0] Code: 85 1c 04 00 00 84 db 40 0f b6 c5 0f b6 cb 0f 44 c8 89 4c 24 54 48 8b 44 24 38 0f b6 04 10 84 c0 0f 85 60 13 00 00 41 8b 6d 00 <41> 89 ec ff cd 0f 88 a2 00 00 00 89 eb 83 fd 31 73 79 48 8d 04 9b [ 336.255169][ C0] RSP: 0018:ffffc900101c7850 EFLAGS: 00000046 [ 336.255183][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 336.255195][ C0] RDX: dffffc0000000000 RSI: ffff8880502cc6e0 RDI: 000000000000000a [ 336.255207][ C0] RBP: 0000000000000001 R08: ffffffff941e491f R09: 1ffffffff283c923 [ 336.255238][ C0] R10: dffffc0000000000 R11: fffffbfff283c924 R12: 0000000000000002 [ 336.255252][ C0] R13: ffff8880502cc6d8 R14: 1ffff1100a0598ea R15: ffff8880502cc750 [ 336.255266][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 336.255281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.255294][ C0] CR2: 000056103c690680 CR3: 000000000e734000 CR4: 00000000003506f0 [ 336.255310][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.255321][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 336.255333][ C0] Call Trace: [ 336.255340][ C0] [ 336.255347][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 336.255371][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.255397][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.255428][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 336.255469][ C0] ? nmi_handle+0x14f/0x5a0 [ 336.255487][ C0] ? nmi_handle+0x2a/0x5a0 [ 336.255505][ C0] ? __lock_acquire+0x71f/0x2040 [ 336.255528][ C0] ? default_do_nmi+0x63/0x160 [ 336.255552][ C0] ? exc_nmi+0x123/0x1f0 [ 336.255574][ C0] ? end_repeat_nmi+0xf/0x53 [ 336.255615][ C0] ? __lock_acquire+0x71f/0x2040 [ 336.255638][ C0] ? __lock_acquire+0x71f/0x2040 [ 336.255663][ C0] ? __lock_acquire+0x71f/0x2040 [ 336.255686][ C0] [ 336.255692][ C0] [ 336.255706][ C0] lock_acquire+0x1ed/0x550 [ 336.255729][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 336.255759][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.255781][ C0] ? __local_bh_disable_ip+0x187/0x220 [ 336.255804][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 336.255830][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 336.255856][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 336.255895][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 336.255918][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 336.255945][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.255969][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 336.255996][ C0] _raw_spin_lock_bh+0x35/0x50 [ 336.256047][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 336.256072][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 336.256099][ C0] batadv_nc_purge_paths+0xe8/0x3b0 [ 336.256131][ C0] batadv_nc_worker+0x365/0x610 [ 336.256159][ C0] ? process_scheduled_works+0x945/0x1830 [ 336.256181][ C0] process_scheduled_works+0xa2c/0x1830 [ 336.256217][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.256245][ C0] ? assign_work+0x364/0x3d0 [ 336.256268][ C0] worker_thread+0x86d/0xd10 [ 336.256299][ C0] ? __kthread_parkme+0x169/0x1d0 [ 336.256325][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.256347][ C0] kthread+0x2f0/0x390 [ 336.256373][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.256395][ C0] ? __pfx_kthread+0x10/0x10 [ 336.256421][ C0] ret_from_fork+0x4b/0x80 [ 336.256445][ C0] ? __pfx_kthread+0x10/0x10 [ 336.256470][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.256502][ C0] [ 336.628536][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 336.635432][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 336.645955][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 336.656547][ T30] Call Trace: [ 336.659838][ T30] [ 336.662803][ T30] dump_stack_lvl+0x241/0x360 [ 336.667503][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.672718][ T30] ? __pfx__printk+0x10/0x10 [ 336.677318][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.683352][ T30] ? vscnprintf+0x5d/0x90 [ 336.687709][ T30] panic+0x349/0x860 [ 336.691646][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 336.697846][ T30] ? __pfx_panic+0x10/0x10 [ 336.702296][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 336.707685][ T30] ? __irq_work_queue_local+0x137/0x410 [ 336.713246][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 336.718625][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 336.724784][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 336.730948][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 336.737136][ T30] watchdog+0x1033/0x1040 [ 336.741506][ T30] ? watchdog+0x1ea/0x1040 [ 336.745962][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.750768][ T30] kthread+0x2f0/0x390 [ 336.754865][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.759595][ T30] ? __pfx_kthread+0x10/0x10 [ 336.764216][ T30] ret_from_fork+0x4b/0x80 [ 336.768653][ T30] ? __pfx_kthread+0x10/0x10 [ 336.773263][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.778093][ T30] [ 336.781254][ T30] Kernel Offset: disabled [ 336.785665][ T30] Rebooting in 86400 seconds..