last executing test programs: 51.353309608s ago: executing program 4 (id=1099): r0 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f0000000180)={0xffff8000}) 50.85246058s ago: executing program 4 (id=1100): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x71}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x5c}}]}, 0x3c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)) 41.137308486s ago: executing program 4 (id=1110): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000a3b2116132cec0f06891ed63a3c2434e5c10d59d1023e8cc286219835af8a87b5699ba91b66ebea20903a7a860", @ANYRES16=0x0, @ANYBLOB="080004000000000000001900000018000180140002006e657470636930000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) eventfd2(0x8000, 0x100800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x2000, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0x8, 0x4) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)={0x2d}) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="042f0400409fe4"], 0x7) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}, {&(0x7f0000000380)="2e366579122caadad5ea87cdf911fad54335743c229698d388acd26f06f53de8570ec9b96cfab0b8077fb555fa02e7d9abd2c39ed7df65c0621daf7c917b60c36d78ca17a26fd01332d021919028", 0x4e}, {&(0x7f0000000400)="edc0917db1de40eb6e3045afa811cd74f75c43130475daee681e075cb53650023f1b29cef6b7d521957d53820ad34e3f50481b51068b78ce78eeca97268470697f05781777714f221e77a4257c00740d9d05dafe41cff7358097ba33bcfdb4b64550c3a02a118646532c5c14d157c45f1be36a43366a49b0ede0af96693f86a96308aeab5cc98934a94668825992a57af7eab3b44e5a4073d57067fc66f7887f1eb1092ac13e", 0xa6}, {&(0x7f0000000580)}], 0x4, 0x0, 0x0, 0xc00e}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000f40), 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f0000000140)={0x7}}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f004ae35e492466c08800000f7d89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) 39.591919065s ago: executing program 4 (id=1112): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040), 0x2) sched_setaffinity(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000099c0)={0x2020}, 0x2020) 39.036947787s ago: executing program 4 (id=1115): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b00"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.483269944s ago: executing program 4 (id=1118): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet(0x2, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x45}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000000d50022b11d22a8736b35cfde9cbfe4b1529cd1b65ef7a43a455c4efa81cac5c4851eac715e9d39314b037bda7f79548e8d6108ecf6e662a812269b2a0460e33e13234b76e4b1dbc08575e0c94b58690bc359db78f13f"]) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x0, 0x7f}) socket$inet6_sctp(0xa, 0x801, 0x84) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x4000010, r2, 0x8032c000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0x0, 0x77, &(0x7f0000000680)=""/119}, {0x0, 0x1000, &(0x7f0000001600)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18}, 0x18) 14.40959297s ago: executing program 0 (id=1163): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x2}}]}}}]}, 0x78}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0x0, 0x6, @random="1518fb89afa7"}, 0x14) socket$kcm(0x2, 0x0, 0x2) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 13.931840897s ago: executing program 2 (id=1164): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000a0002000080c200000000"], 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x80, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1b) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000002c0)="aa1d484e24000a000000f7c08bfcd111fbdf23ea32db0ebd8063067a0689fff2a41cfbf0e9d85e447511703da71cf505d4c54203", 0x34}], 0x2) 13.177995776s ago: executing program 0 (id=1165): socket$igmp(0x2, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/78, 0x4e}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc240, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x979e) finit_module(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0x14}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000093"]) 12.83579295s ago: executing program 2 (id=1168): socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x17}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x20000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}, {0x81}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x39, 0x107, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @typed={0x9, 0x2, 0x0, 0x0, @binary="e55272fb64"}]}, 0x30}}, 0x0) 11.462068218s ago: executing program 2 (id=1169): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x28) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x84, 0x2}, {0x300}}}}, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x67b}, {0x7, 0x5, 0x6, 0x53}, {0x8, 0xd0, 0x4, 0x3}, {0x20, 0x5b, 0x8, 0x71}]}, 0x10) io_setup(0x9, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x320000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) 11.188351097s ago: executing program 0 (id=1170): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x48) r4 = syz_io_uring_complete(0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300008a000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/129, 0x81}], 0x1, 0x14a, 0x0) r9 = signalfd(r0, &(0x7f0000000000)={[0xfff]}, 0x8) ioctl$TUNSETOFFLOAD(r9, 0x4004743b, 0x20000008) 10.439771088s ago: executing program 0 (id=1172): r0 = socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf2ffffff, 0x0, 0xb9, 0x0, 0x0, 0x2, 0x0, 0x7fffe}, 0x50) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c00000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e00180002800800010002"], 0x7c}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f000000a8c0)=[{&(0x7f0000000f40)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000f80)='+', 0x1}], 0x1, &(0x7f0000002300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xb}}], 0x30}], 0x1, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000600)={'#! ', './file0', [{0x20, '# x\xe4\xd2%\xe6\xe4\xfe&\xcb\xbes\xc1oh\x05e\x1e\x96c=\xb3\xdd\xc8nt\x11\x90\xb77%\x97)1H\xa3\xc9\xaa\xe4\xba\xd01!\xb2:5%%\xfc\x01\x05\xd4E\xb6\a\xec;Y-hO\xfcsq\xf7u\x0em\xe2\x86\t\x7fh\x97\x1a,w;\x95u\xed\xab\xc9\xdf\x87_Mg\x18\x8fU\xc1\xcfO<\xc4jl\x00\xf1\x8a\xf07\xa6\x8c\xdc\xc1!0\x8c\x1e\x10M\x8e\xc1\x12\xa0\x89\xca\xd7\xbd\b\vc\xb7z\xd7~q6\xf7\x8d\xb8\x90-\x12\x8e#\xe5/\x00\xd9\xa5\xa6\x15\xc7\xba\xd0Ro; \"\x9agp\x1d\x1a\x82.Ik\x9d\x80\x1d\x04\xd1}K\xbd\x96\xbdQ\x84\x87\x19\xe9\xbd\x98\xd9_k5K\x8a#c\x01\xa4;\x88\x01\xa8?\x81=\x99\x93\xea\xdbi\xe39T\x10\xe5z\xc3j\x95><\x9f\xf9-\x98\xf1\xec\xae\xb6\\\xab\xec\x04\x90\v\xbf\x82\x13\xe9\xc52\xf1 d\xc0~i\xec\x0e\xd76\xf8\x14\x19\xbd<\xe7:B,\xac\xc2f^\x95\xeb\xf9\r\x00\x83\xfd\x99\xc6\xb7\xb4\x93<\r\xe5\xcf\x8a\x11\xd5\xc2\xf92n\x9b6\xfd\xa0G\x93\xc2Pf+\x1b\xe0\xb6c\xddd\xd7A-\xd1\xe9\xdc\xf2EZ\x01b\v\x82\xd4\\R\xfa\x96,\xc0\x97\xc2\xed'}, {0x20, '\x92[%$'}], 0xa, "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"}, 0x401) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) memfd_secret(0x80000) close_range(0xffffffffffffffff, r1, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a9b893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729a40000dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c5452f42e09b388a14b22bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66cf8aeb1f98bd67bfd38ec2beac3ca99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94d81150c68ab27987655e1dd676ceef54ad4d663f88b6f82a65f7c94a0e40cbb782ff536bd67ba81125f8e0af199094b407f630dc6eb3b79615a4e63f75ab30b1e475748cb5dce6581dc92f740a21fb8dec725b4f2a0b0972f852504245d5ce11cfdead09c9b6e094261084cd20c2294525061a4638c0bfd08dfa70d24bf85d9cfd940e1a4f1509bed8233f22506e5b000000000000862a01def6c9e879a87688ad151c14ae7ff8a090aebe7e4f936c26e565ae96d38ee5f794468caa17419e22ff13df60a95596490358a3b8121511e427d619ad87fe998702ea0b659eff3f5cd8f4094fdd6b1d45facfe6629846170d99de670a9e72e21ed7363876612bf58a17142abccbf5354f432ed1df74f8168d05de528f63a98bca22820439c567973de0077c068d1b70b6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="000463", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=subj_type,smackfsdef=none\x00,\x00']) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$BPF_GET_MAP_INFO(0x22, &(0x7f0000000140)={r12, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f00000000c0)=0x300) 9.066147755s ago: executing program 2 (id=1174): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x2}}]}}}]}, 0x78}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0x0, 0x6, @random="1518fb89afa7"}, 0x14) socket$kcm(0x2, 0x0, 0x2) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 8.574196517s ago: executing program 3 (id=1177): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x158, r4, 0x400, 0x70bd2d, 0x25dfd9fc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0x7b, 0x45, "cb20d08ca8b1e9ba9749fd060e6667ec0e0c09a14896e4372f0892b7c1ba6626f6aa4e962d452008e540a3fc04e58d26fac207ad8b2e34d4ef9bcba31ef65b80c883a67e19832d9511276a6a87305ed483c6b5f910cbf4b5b523d7c8386c030d602744a1867187effdcd6f48d499dae7139e46dedb3aa3"}, @NL80211_ATTR_TESTDATA={0x30, 0x45, "ef97e4bd500da1e3a4d3cbe87ad1a674de573403fd55f82eb15434b8c0c8d4660904ff4fee0bbf57786c5741"}, @NL80211_ATTR_TESTDATA={0x8b, 0x45, "292c9fad365d1f01895016a01c03973c8cf4e635bf6f24f91ddb0b1302a5a12aefee6809073cc88686a1ba1bc04a8bab2380f15b39d265e4113da2319649c05bcbe697b8b50a2113ab8e4e62714fc1b518fe0f296cd83b0715b9025ad940952a52eb5ef9eca1ccdccd9b77a192a4beb822ac4a0b327c57fe9f792eb114aa7b77f7b02dd9011b86"}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="03a0bbbbbb0800450000380000000000019078ac1e0001ac140baa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0300000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/239, 0xef, 0x5) 7.831096743s ago: executing program 3 (id=1178): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="0286887f299f398f52474233ee5155e1ae7bcc3fbdb064e2b5a54287fecaedfe068fc6d447603a5ea4406685adc9194f0c84cb29ff5413db17f7c7573b717360d80ebda85493109e2c14a3cef705a942c3c1112f2cb290d7936da4c3fae61aaf1bfb5881642a0617da780e10466f5c265049c4e4beeac3eb401e7fdf81d9adba4841418843c31c09b0ca28e0567c2e613357e6ba03216c6a429aa7250ba48db5decc98f004aaaca161dcd524f13b4c8ee6818ede5423dabaf409fb2b8269b349f66e49da47a8aac3"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500", 0x1e}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc601000050d0a000200053582c137153e37000c0180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x200000, 0x106, 0x12}, 0x18) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 7.038842398s ago: executing program 2 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) shutdown(0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vcan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x72, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x3c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000706010200000000000000000000000005000100070000000800064000000004"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100000008004500002c00006000002f"], 0xfdef) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$rxrpc(0x21, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 5.072571831s ago: executing program 1 (id=1181): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x48) r4 = syz_io_uring_complete(0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300008a000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/129, 0x81}], 0x1, 0x14a, 0x0) r9 = signalfd(r0, &(0x7f0000000000)={[0xfff]}, 0x8) ioctl$TUNSETOFFLOAD(r9, 0x4004743b, 0x20000008) 4.968748712s ago: executing program 3 (id=1182): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000004100000041000000dd29e85de27cd1348b87070000000b0000000200000604000005622d86b8e83c00000900000001962e7da2fdca84fbc3f8d38229b900000a0000000100d5b8f764f35c000f010000000500000000000000040000005d100000001000000a02000000000000002e6100306100c84eae1e7e5cbf851e5ec47dc8574b094c3ae69d4d4c9932064d0e63f21d8d1658306a6a03a17d0c832ed190bdc9f2b06d7c7e9156315b9da1d61f2f4c2ec9f399b450287827b52da12c6deabc4acbb5a2a8a369550485b4392f73e1e1cdf96222f7e2"], &(0x7f00000004c0)=""/38, 0x63, 0x26, 0x0, 0x5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="0000000004000000b7430000850000001b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="32abe2ebc768c7b0ec42a9c2b613e344fde5bfae26dbea84a7d05c39a2dff4a72812372e4b0829ebcd8fe01c0429061814f2204b817f2c806c02372a9d49ddb870b8b5d0c6c1e1ed8d8d7c20ef585fd24dc9f6dfe15b967770e41cd4c45444b0d929f50df954dab617d5403ec52da755cd2fcb97e14be09adb37ec34c6f2a98a066a7fc54df6ebcc97c8c2e781cd0d1c166d69e3d6e7297e5bc4756af4150ab29a5ec9525362d151900fb4eebd623d972ad9a22d259c1c"], &(0x7f0000003ff6)='GPL\x00', 0xfffffffe, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) close(r7) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000005c0)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000200)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000240)={r11, 0x1, r9, 0x3, 0x80000}) r12 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x80800) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20180, 0x0) accept4$inet6(r12, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000080)=r11) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000280)={r11}) socket$nl_route(0x10, 0x3, 0x0) 4.52467297s ago: executing program 1 (id=1183): mq_unlink(&(0x7f0000000040)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\xb7\xd7\x887\f\xb81\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x14sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d*\xe1\xa3\xe5*\xd1\xf2\xb8\'R\xaaW\x03V>-\x01\xc9\x1d75\xba\x03r\x99\x82\x13\v\xc9Z\xe3\xfaL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x11\xf3\x14\xbe\xf5\xc0\b\x1f\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92R\xe1w\"\xd9\xa0^|\x90\v\xdfe\x03\xcf\n\xcb>\xd0\x04D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xdcB\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13O\x84\x0ea,j\xce\xaew\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94,:\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I=\x89d\x17\fM\xba\a\xea\x04\xe3hQS\xe0\xd0\xeb\xfa\xaa\x93z!\xf6\xd0y\xb2') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000340000000"], 0x84}}, 0x0) 3.932930204s ago: executing program 1 (id=1184): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140), 0x4) ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="231800006f0100020040030000000322860000"], 0x23) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x54b000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 3.700558621s ago: executing program 3 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002200000c0000000000fee300760000000f8a49dc75000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r2, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x39, 0x36, 0x0, 0x0, 0x37, 0x30, 0x61, 0x65, 0x54, 0x0, 0x38, 0x31, 0x66]}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000400000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) 2.610659722s ago: executing program 1 (id=1186): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="aa1d484e24000a000000f7c08bfcd111fbdf23ea32db0ebd8063067a0689fff2a41cfbf0", 0x24}], 0x1) 2.44114471s ago: executing program 1 (id=1187): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x158, r4, 0x400, 0x70bd2d, 0x25dfd9fc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0x7b, 0x45, "cb20d08ca8b1e9ba9749fd060e6667ec0e0c09a14896e4372f0892b7c1ba6626f6aa4e962d452008e540a3fc04e58d26fac207ad8b2e34d4ef9bcba31ef65b80c883a67e19832d9511276a6a87305ed483c6b5f910cbf4b5b523d7c8386c030d602744a1867187effdcd6f48d499dae7139e46dedb3aa3"}, @NL80211_ATTR_TESTDATA={0x30, 0x45, "ef97e4bd500da1e3a4d3cbe87ad1a674de573403fd55f82eb15434b8c0c8d4660904ff4fee0bbf57786c5741"}, @NL80211_ATTR_TESTDATA={0x8b, 0x45, "292c9fad365d1f01895016a01c03973c8cf4e635bf6f24f91ddb0b1302a5a12aefee6809073cc88686a1ba1bc04a8bab2380f15b39d265e4113da2319649c05bcbe697b8b50a2113ab8e4e62714fc1b518fe0f296cd83b0715b9025ad940952a52eb5ef9eca1ccdccd9b77a192a4beb822ac4a0b327c57fe9f792eb114aa7b77f7b02dd9011b86"}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="03a0bbbbbb0800450000380000000000019078ac1e0001ac140baa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0300000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/239, 0xef, 0x5) 2.232538866s ago: executing program 3 (id=1188): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001f80)=""/4108, 0x100c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0080007f0000c10000000800000000005000"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.88607015s ago: executing program 1 (id=1189): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syncfs(r8) write$FUSE_DIRENTPLUS(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r9, &(0x7f0000000080)='./file0\x00') llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x8}]}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001b80)=""/114, 0x4}], 0x1, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 1.535072132s ago: executing program 2 (id=1190): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x28) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x84, 0x2}, {0x300}}}}, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x67b}, {0x0, 0x5, 0x3, 0x8000}, {0x7, 0x5, 0x6, 0x53}, {0x8, 0xd0, 0x4, 0x3}, {0x20, 0x5b, 0x8, 0x71}]}, 0x8) io_setup(0x9, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x320000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) 1.468490017s ago: executing program 3 (id=1191): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="0286887f299f398f52474233ee5155e1ae7bcc3fbdb064e2b5a54287fecaedfe068fc6d447603a5ea4406685adc9194f0c84cb29ff5413db17f7c7573b717360d80ebda85493109e2c14a3cef705a942c3c1112f2cb290d7936da4c3fae61aaf1bfb5881642a0617da780e10466f5c265049c4e4beeac3eb401e7fdf81d9adba4841418843c31c09b0ca28e0567c2e613357e6ba03216c6a429aa7250ba48db5decc98f004aaaca161dcd524f13b4c8ee6818ede5423dabaf409fb2b8269b349f66e49da47a8aac3"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500", 0x1e}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc601000050d0a000200053582c137153e37000c0180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x200000, 0x106, 0x12}, 0x18) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 1.356530989s ago: executing program 0 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x3, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4a, 0x7, 0x9, '\x00', 0x40}, {0xfe, 0x1, 0x76}, {0x80, 0x6, 0x7, '\x00', 0x8}, {0x0, 0x9, 0x80, '\x00', 0x2}, {0x8, 0x3, 0x4, '\x00', 0x70}, {0x7a, 0x3, 0x9, '\x00', 0x3}, {0x6, 0x0, 0x2, '\x00', 0x40}, {0x37, 0x7f, 0x4, '\x00', 0x4}, {0x2, 0x8b, 0x3, '\x00', 0x9}, {0x1, 0xd5, 0xe}, {0x3, 0x4, 0x3, '\x00', 0xa9}, {0x7f, 0x5, 0x0, '\x00', 0x2}, {0x4, 0xf0, 0x34, '\x00', 0x4}, {0x7, 0x7, 0xd, '\x00', 0xe}, {0x0, 0x4, 0x32, '\x00', 0x46}, {0x2, 0x3, 0x8, '\x00', 0x1}, {0x8c, 0x6b, 0x5, '\x00', 0xba}, {0x8, 0x4, 0x2e, '\x00', 0x6}, {0xcb, 0x6, 0xc4, '\x00', 0x9}, {0x1, 0x2, 0x4, '\x00', 0x6}, {0x5, 0x0, 0x7d, '\x00', 0x7f}, {0x0, 0x7, 0xfc, '\x00', 0x6e}]}}) 0s ago: executing program 0 (id=1193): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x2}}]}}}]}, 0x78}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0x0, 0x6, @random="1518fb89afa7"}, 0x14) socket$kcm(0x2, 0x0, 0x2) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): get a fully working HSR network [ 302.261371][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.012825][ T8474] fuse: Invalid rootmode [ 305.334895][ T8019] veth0_vlan: entered promiscuous mode [ 305.353400][ T8019] veth1_vlan: entered promiscuous mode [ 305.438249][ T8019] veth0_macvtap: entered promiscuous mode [ 305.478325][ T8019] veth1_macvtap: entered promiscuous mode [ 305.535264][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.598041][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.619768][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.642688][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.654364][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.674414][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.695165][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.735167][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.764134][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.807659][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.836554][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.865657][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.894444][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.921122][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.957067][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.982246][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.024246][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.077148][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.105421][ T8019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.135999][ T8019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.154982][ T8019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.179428][ T8019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.347692][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.383027][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.448098][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.563158][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.938636][ T8512] kAFS: No cell specified [ 307.203063][ T5132] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 307.764068][ T5132] usb 5-1: Using ep0 maxpacket: 8 [ 307.833888][ T8518] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.866'. [ 307.855640][ T8518] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 307.888887][ T5132] usb 5-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d5.78 [ 307.940098][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.000248][ T5132] usb 5-1: Product: syz [ 308.004481][ T5132] usb 5-1: Manufacturer: syz [ 308.008798][ T8524] mkiss: ax0: crc mode is auto. [ 308.009080][ T5132] usb 5-1: SerialNumber: syz [ 308.025935][ T5132] usb 5-1: config 0 descriptor?? [ 308.041193][ T5132] usbtest 5-1:0.0: EZ-USB device [ 308.046195][ T5132] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 308.169944][ T5199] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 308.307639][ T5078] usb 5-1: USB disconnect, device number 13 [ 308.600590][ T5199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.612225][ T5199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.627030][ T5199] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.643353][ T5199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.651868][ T5199] usb 1-1: SerialNumber: syz [ 309.395615][ T5199] usb 1-1: 0:2 : does not exist [ 309.431741][ T5199] usb 1-1: USB disconnect, device number 19 [ 309.492604][ T5132] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 309.675975][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.680052][ T8544] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 309.704470][ T5132] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 309.716025][ T5132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.727933][ T5132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 309.748096][ T5132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.790762][ T8544] batman_adv: batadv0: Adding interface: team0 [ 309.808189][ T8544] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.840093][ T8544] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 309.842284][ T5132] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 309.861315][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 309.870338][ T8546] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 309.887153][ T5132] usb 2-1: Product: syz [ 309.894896][ T5132] usb 2-1: Manufacturer: syz [ 309.896893][ T8546] netlink: 2 bytes leftover after parsing attributes in process `syz.4.872'. [ 309.915245][ T5132] cdc_wdm 2-1:1.0: skipping garbage [ 309.920548][ T5132] cdc_wdm 2-1:1.0: skipping garbage [ 309.931581][ T5132] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 309.939088][ T8546] team0: entered promiscuous mode [ 309.954856][ T8546] team_slave_0: entered promiscuous mode [ 309.959919][ T5132] cdc_wdm 2-1:1.0: Unknown control protocol [ 310.035537][ T8546] team_slave_1: entered promiscuous mode [ 310.076721][ T8546] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.105396][ T8546] batman_adv: batadv0: Interface activated: team0 [ 310.117382][ T8546] batman_adv: batadv0: Interface deactivated: team0 [ 310.136005][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.142715][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.148991][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.155575][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.161831][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.168417][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.174773][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.181475][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.187756][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.194343][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.200745][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.207449][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.213887][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.220471][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.226714][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.233293][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.239594][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.246270][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.252533][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 310.259303][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 310.293254][ T5132] usb 2-1: USB disconnect, device number 25 [ 310.293390][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 310.330035][ T8546] batman_adv: batadv0: Removing interface: team0 [ 310.346459][ T8546] bridge0: port 3(team0) entered blocking state [ 310.373539][ T8546] bridge0: port 3(team0) entered disabled state [ 310.390880][ T8546] team0: entered allmulticast mode [ 310.425523][ T8546] team_slave_0: entered allmulticast mode [ 310.447640][ T8546] team_slave_1: entered allmulticast mode [ 310.487750][ T8546] bridge0: port 3(team0) entered blocking state [ 310.494212][ T8546] bridge0: port 3(team0) entered forwarding state [ 310.602515][ T8555] kAFS: No cell specified [ 311.551597][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 311.860156][ T5132] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 312.027228][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 312.165346][ T5132] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.175800][ T5132] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.202048][ T5132] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.211259][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.219255][ T5132] usb 1-1: SerialNumber: syz [ 312.308256][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.883'. [ 312.482889][ T5132] usb 1-1: 0:2 : does not exist [ 312.565212][ T5132] usb 1-1: USB disconnect, device number 20 [ 312.600895][ T8534] udevd[8534]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 312.644737][ T8534] udevd[8534]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 312.925780][ T8593] udevd[8593]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.116152][ T8610] kAFS: No cell specified [ 313.452484][ T5128] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 313.541163][ T8596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.671697][ T5128] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.777637][ T5128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.882210][ T5128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.004968][ T5128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.064850][ T5128] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.085902][ T5128] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.114515][ T5128] usb 2-1: Product: syz [ 314.277716][ T5128] usb 2-1: Manufacturer: syz [ 315.502130][ T5128] cdc_wdm 2-1:1.0: skipping garbage [ 315.507409][ T5128] cdc_wdm 2-1:1.0: skipping garbage [ 315.533230][ T5128] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 315.549991][ T5128] cdc_wdm 2-1:1.0: Unknown control protocol [ 315.748408][ C0] wdm_int_callback: 159 callbacks suppressed [ 315.748430][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.761191][ C0] wdm_int_callback: 159 callbacks suppressed [ 315.761203][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.773587][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.780368][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.787313][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.793953][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.800239][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.807114][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.813500][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.820110][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.826914][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.833634][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.839902][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.846499][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.852739][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.859431][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.865917][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.872799][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.879222][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 315.885979][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 315.894152][ T8] usb 2-1: USB disconnect, device number 26 [ 315.900800][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 315.967690][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 316.060192][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.078142][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.108256][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.121942][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.129742][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.139315][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.198874][ T8647] kAFS: No cell specified [ 316.605274][ T8650] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 316.780484][ T8650] batman_adv: batadv0: Adding interface: team0 [ 316.786979][ T8650] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.840092][ T8650] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 317.008746][ T8657] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 317.053077][ T8657] netlink: 2 bytes leftover after parsing attributes in process `syz.0.899'. [ 317.108374][ T8657] team0: entered promiscuous mode [ 317.320013][ T8657] team_slave_0: entered promiscuous mode [ 317.327155][ T8657] team_slave_1: entered promiscuous mode [ 317.337943][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.345924][ T8657] batman_adv: batadv0: Interface activated: team0 [ 317.353042][ T8657] batman_adv: batadv0: Interface deactivated: team0 [ 317.360607][ T8657] batman_adv: batadv0: Removing interface: team0 [ 317.385730][ T8657] bridge0: port 3(team0) entered blocking state [ 317.403976][ T8657] bridge0: port 3(team0) entered disabled state [ 317.423145][ T8657] team0: entered allmulticast mode [ 317.435124][ T8657] team_slave_0: entered allmulticast mode [ 317.441984][ T8657] team_slave_1: entered allmulticast mode [ 317.454370][ T8657] bridge0: port 3(team0) entered blocking state [ 317.461110][ T8657] bridge0: port 3(team0) entered forwarding state [ 317.757900][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.769927][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.083486][ T8638] chnl_net:caif_netlink_parms(): no params data found [ 319.003443][ T5079] Bluetooth: hci1: command tx timeout [ 319.640182][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 319.941165][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.970741][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.978254][ T8638] bridge_slave_0: entered allmulticast mode [ 320.004571][ T8704] kAFS: No cell specified [ 320.044897][ T8638] bridge_slave_0: entered promiscuous mode [ 320.110123][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.130079][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.180206][ T8638] bridge_slave_1: entered allmulticast mode [ 320.192327][ T8638] bridge_slave_1: entered promiscuous mode [ 320.199568][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 320.510116][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.579052][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.797416][ T8638] team0: Port device team_slave_0 added [ 320.821382][ T8638] team0: Port device team_slave_1 added [ 321.052461][ T5079] Bluetooth: hci1: command tx timeout [ 321.159396][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.204705][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.510121][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.526065][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.533969][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.595299][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.816666][ T8711] kexec: Could not allocate control_code_buffer [ 322.087522][ T8638] hsr_slave_0: entered promiscuous mode [ 322.290875][ T8638] hsr_slave_1: entered promiscuous mode [ 322.300029][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.312168][ T8638] Cannot create hsr debugfs directory [ 322.756069][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'. [ 323.310209][ T5079] Bluetooth: hci1: command tx timeout [ 324.133518][ T8638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.241934][ T8638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.561094][ T8638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.607956][ T8638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.707234][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 325.033898][ T8638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.100603][ T8638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.350118][ T5079] Bluetooth: hci1: command tx timeout [ 325.381823][ T8638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.484865][ T8638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.879586][ T8784] kexec: Could not allocate control_code_buffer [ 326.650889][ T8798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.715006][ T8638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.811129][ T8638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.919195][ T8638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.037582][ T8638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.484584][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.626226][ T8638] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.694327][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.701559][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.806027][ T5089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.863836][ T5089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.885927][ T5089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.895552][ T5089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.916781][ T5089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 327.924441][ T5089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.413204][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.420662][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.598211][ T8638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.609608][ T8638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.228652][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 329.228665][ T29] audit: type=1326 audit(1720684153.886:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 329.815418][ T8870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.944'. [ 329.858842][ T29] audit: type=1326 audit(1720684154.496:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 329.895472][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.997425][ T5079] Bluetooth: hci5: command tx timeout [ 330.006185][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 330.022000][ T29] audit: type=1326 audit(1720684154.496:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.179463][ T29] audit: type=1326 audit(1720684154.496:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.280554][ T29] audit: type=1326 audit(1720684154.496:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.389807][ T29] audit: type=1326 audit(1720684154.496:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.558570][ T29] audit: type=1326 audit(1720684154.496:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.680609][ T29] audit: type=1326 audit(1720684154.496:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.747443][ T29] audit: type=1326 audit(1720684154.496:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.819461][ T29] audit: type=1326 audit(1720684154.496:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9f75bd9 code=0x7fc00000 [ 330.860712][ T8638] veth0_vlan: entered promiscuous mode [ 331.105083][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.130180][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.214058][ T8824] bridge_slave_0: entered allmulticast mode [ 331.248065][ T8824] bridge_slave_0: entered promiscuous mode [ 331.307940][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.386636][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.410211][ T8824] bridge_slave_1: entered allmulticast mode [ 331.475734][ T8824] bridge_slave_1: entered promiscuous mode [ 331.550580][ T8638] veth1_vlan: entered promiscuous mode [ 331.705155][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.818332][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.882783][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 331.918116][ T8824] team0: Port device team_slave_0 added [ 331.948036][ T8638] veth0_macvtap: entered promiscuous mode [ 332.069980][ T5079] Bluetooth: hci5: command tx timeout [ 332.089149][ T8824] team0: Port device team_slave_1 added [ 332.227818][ T8638] veth1_macvtap: entered promiscuous mode [ 333.557289][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.576860][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.832635][ T8905] netlink: 'syz.3.948': attribute type 2 has an invalid length. [ 333.840477][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.944695][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.960512][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.079101][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.150376][ T5079] Bluetooth: hci5: command tx timeout [ 334.512283][ T8824] hsr_slave_0: entered promiscuous mode [ 334.519768][ T8913] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.953'. [ 334.554320][ T8824] hsr_slave_1: entered promiscuous mode [ 334.650343][ T8824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.658024][ T8824] Cannot create hsr debugfs directory [ 334.705236][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.777480][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.857762][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.907665][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.979977][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.016101][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.069941][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.120071][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.161081][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.198630][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.224522][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.320061][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.357411][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.416474][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.459038][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.519909][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.579916][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.629904][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.704080][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.764954][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.809967][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.847833][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.901448][ T8638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.938838][ T8638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.989957][ T8638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.039989][ T8638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.230257][ T5079] Bluetooth: hci5: command tx timeout [ 337.670969][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 337.872102][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.899147][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.925523][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.945761][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.988291][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.014682][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.052479][ T25] usb 4-1: Product: syz [ 338.077619][ T25] usb 4-1: Manufacturer: syz [ 338.107571][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 338.116387][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 338.131569][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 338.137657][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 338.275109][ T8824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.722329][ T8824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.017442][ T8943] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.960'. [ 339.059693][ T8943] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 339.099459][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.121857][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.267579][ T8824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.343804][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.373548][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.435339][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 339.483853][ T8824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.654471][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.721740][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.773003][ T9] usb 4-1: USB disconnect, device number 19 [ 339.851086][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.890645][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.944730][ T8] usb 1-1: SerialNumber: syz [ 340.038524][ T8824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.100962][ T8824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.147630][ T8824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.202495][ T8] usb 1-1: 0:2 : does not exist [ 340.288344][ T8] usb 1-1: USB disconnect, device number 21 [ 340.318026][ T8824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.776853][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.799364][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 341.410781][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.549438][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.602579][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.610044][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.655385][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.662725][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.776602][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 342.618021][ T5089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.635269][ T5089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.643964][ T5089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.657782][ T5089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.665448][ T5089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.673289][ T5089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.801089][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 342.817795][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.033352][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.056243][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.092692][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.126306][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.280714][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.320176][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.328224][ T25] usb 1-1: Product: syz [ 343.353735][ T25] usb 1-1: Manufacturer: syz [ 343.479036][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 344.305631][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 344.314617][ T25] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 344.352485][ T25] cdc_wdm 1-1:1.0: Unknown control protocol [ 344.703311][ T5078] usb 1-1: USB disconnect, device number 22 [ 344.712034][ T5079] Bluetooth: hci6: command tx timeout [ 346.216835][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 346.251426][ T9003] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.790879][ T5079] Bluetooth: hci6: command tx timeout [ 347.024676][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.080029][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.217226][ T8983] bridge_slave_0: entered allmulticast mode [ 347.320521][ T8983] bridge_slave_0: entered promiscuous mode [ 347.355053][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.415445][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.440909][ T8983] bridge_slave_1: entered allmulticast mode [ 347.448287][ T8983] bridge_slave_1: entered promiscuous mode [ 347.659705][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.748132][ T8824] veth0_vlan: entered promiscuous mode [ 347.767828][ T8824] veth1_vlan: entered promiscuous mode [ 347.845635][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.126625][ T8983] team0: Port device team_slave_0 added [ 348.240974][ T8983] team0: Port device team_slave_1 added [ 348.380105][ T9031] hugetlbfs: Unknown parameter '000000000000000000040x0000000000000003' [ 348.663995][ T8824] veth0_macvtap: entered promiscuous mode [ 348.827452][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.870240][ T5079] Bluetooth: hci6: command tx timeout [ 348.938816][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.000015][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.069935][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.146076][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.205667][ T9043] FAULT_INJECTION: forcing a failure. [ 349.205667][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 349.250061][ T9043] CPU: 1 PID: 9043 Comm: syz.0.980 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 349.260097][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.270192][ T9043] Call Trace: [ 349.273468][ T9043] [ 349.276381][ T9043] dump_stack_lvl+0x241/0x360 [ 349.281059][ T9043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.286248][ T9043] ? __pfx__printk+0x10/0x10 [ 349.290829][ T9043] ? __pfx___might_resched+0x10/0x10 [ 349.296102][ T9043] ? do_syscall_64+0xf3/0x230 [ 349.300804][ T9043] should_fail_ex+0x3b0/0x4e0 [ 349.305492][ T9043] should_failslab+0x9/0x20 [ 349.309997][ T9043] kmalloc_node_track_caller_noprof+0xda/0x440 [ 349.316149][ T9043] ? kobject_set_name_vargs+0x61/0x120 [ 349.321616][ T9043] kstrdup+0x3a/0x80 [ 349.325503][ T9043] kobject_set_name_vargs+0x61/0x120 [ 349.330787][ T9043] dev_set_name+0xd5/0x120 [ 349.335297][ T9043] ? __pfx_dev_set_name+0x10/0x10 [ 349.340421][ T9043] ? __kasan_kmalloc+0x98/0xb0 [ 349.345176][ T9043] ? tty_register_device_attr+0x311/0x960 [ 349.350888][ T9043] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 349.356338][ T9043] tty_register_device_attr+0x3cc/0x960 [ 349.361883][ T9043] ? __pfx_tty_register_device_attr+0x10/0x10 [ 349.368038][ T9043] ? tty_port_register_device+0x5b/0x100 [ 349.373906][ T9043] rfcomm_dev_ioctl+0x19fe/0x21b0 [ 349.378978][ T9043] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 349.384460][ T9043] ? __local_bh_enable_ip+0x168/0x200 [ 349.389844][ T9043] ? lockdep_hardirqs_on+0x99/0x150 [ 349.395057][ T9043] ? __local_bh_enable_ip+0x168/0x200 [ 349.400446][ T9043] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 349.406161][ T9043] ? do_raw_spin_unlock+0x13c/0x8b0 [ 349.411396][ T9043] rfcomm_sock_ioctl+0x86/0xd0 [ 349.416198][ T9043] sock_do_ioctl+0x158/0x460 [ 349.420824][ T9043] ? __pfx_smack_log+0x10/0x10 [ 349.425582][ T9043] ? __pfx_sock_do_ioctl+0x10/0x10 [ 349.430690][ T9043] ? smk_tskacc+0x300/0x370 [ 349.435230][ T9043] ? smack_file_ioctl+0x2a1/0x3a0 [ 349.440337][ T9043] sock_ioctl+0x629/0x8e0 [ 349.444672][ T9043] ? __pfx_sock_ioctl+0x10/0x10 [ 349.449538][ T9043] ? __fget_files+0x3f6/0x470 [ 349.454213][ T9043] ? __fget_files+0x29/0x470 [ 349.458794][ T9043] ? bpf_lsm_file_ioctl+0x9/0x10 [ 349.463843][ T9043] ? security_file_ioctl+0x87/0xb0 [ 349.468990][ T9043] ? __pfx_sock_ioctl+0x10/0x10 [ 349.473852][ T9043] __se_sys_ioctl+0xfc/0x170 [ 349.478456][ T9043] do_syscall_64+0xf3/0x230 [ 349.483001][ T9043] ? clear_bhb_loop+0x35/0x90 [ 349.487675][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.493751][ T9043] RIP: 0033:0x7ffacdd75bd9 [ 349.498369][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.518355][ T9043] RSP: 002b:00007ffaceb0a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.527392][ T9043] RAX: ffffffffffffffda RBX: 00007ffacdf03f60 RCX: 00007ffacdd75bd9 [ 349.535542][ T9043] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 349.543512][ T9043] RBP: 00007ffaceb0a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.551484][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.559630][ T9043] R13: 000000000000000b R14: 00007ffacdf03f60 R15: 00007fffdfb9a1d8 [ 349.567609][ T9043] [ 349.580285][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.650339][ T8824] veth1_macvtap: entered promiscuous mode [ 349.734191][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.820123][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.890018][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.954138][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.082246][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.144379][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.246543][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.299590][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.367883][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.425868][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.466405][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.555462][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.661414][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.899656][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.942097][ T9054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 350.948934][ T9054] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.950264][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.956757][ T5079] Bluetooth: hci6: command tx timeout [ 350.970236][ T9054] vhci_hcd vhci_hcd.0: Device attached [ 351.024339][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.035180][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.054035][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.064643][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.080211][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.130348][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.140567][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.151794][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.162147][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.173399][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.189605][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.255514][ T9059] netlink: 'syz.0.983': attribute type 2 has an invalid length. [ 351.300074][ T9] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 351.348018][ T8824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.416217][ T8824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.456601][ T8824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.510516][ T8824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.553205][ T9055] vhci_hcd: connection reset by peer [ 351.558790][ T2414] vhci_hcd: stop threads [ 351.563612][ T2414] vhci_hcd: release socket [ 351.590004][ T2414] vhci_hcd: disconnect device [ 351.641178][ T8983] hsr_slave_0: entered promiscuous mode [ 351.710505][ T8983] hsr_slave_1: entered promiscuous mode [ 351.779957][ T8983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.830975][ T8983] Cannot create hsr debugfs directory [ 353.274967][ T9076] dccp_invalid_packet: P.Data Offset(172) too large [ 353.586394][ T8983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.895010][ T9078] batadv_slave_1: entered promiscuous mode [ 353.936051][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.950602][ T9085] batadv_slave_1: left promiscuous mode [ 354.001137][ T9081] syz.3.988 (9081) used greatest stack depth: 18744 bytes left [ 354.010894][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.110051][ T5133] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 354.218497][ T8983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.536820][ T5133] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 355.351698][ T5133] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 355.422589][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.583996][ T5133] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 355.652657][ T8983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.716611][ T9104] netlink: 209572 bytes leftover after parsing attributes in process `syz.0.993'. [ 355.802296][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.846888][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.040125][ T8983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.124986][ T9106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 356.131551][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 356.199966][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 356.327857][ T9107] vhci_hcd: connection closed [ 356.328166][ T2809] vhci_hcd: stop threads [ 356.344907][ T9114] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 356.352219][ T2809] vhci_hcd: release socket [ 356.383029][ T2809] vhci_hcd: disconnect device [ 356.521274][ T9] vhci_hcd: vhci_device speed not set [ 356.755096][ T5133] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 356.767163][ T8983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.798975][ T5133] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 356.855989][ T5133] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 356.856158][ T8983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.938084][ T5133] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 356.973305][ T8983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.020878][ T8983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.064138][ T5133] usb 3-1: USB disconnect, device number 22 [ 357.619636][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.705947][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.099999][ T9139] batadv_slave_1: entered promiscuous mode [ 358.235666][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.243032][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.306356][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.313746][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.341522][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 358.376369][ T9135] batadv_slave_1: left promiscuous mode [ 358.508172][ T9153] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 358.573784][ T8983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.652302][ T8983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.710217][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.090093][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 359.099197][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.112119][ T9] usb 3-1: config 0 descriptor?? [ 359.154311][ T9156] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1002'. [ 359.230097][ T929] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 359.482730][ T929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.695163][ T929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.925241][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 359.953845][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input11 [ 360.060162][ T929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.076710][ T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 360.335607][ T929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.571854][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.580473][ T929] usb 5-1: Product: syz [ 360.585350][ T929] usb 5-1: Manufacturer: syz [ 360.600027][ T929] usb 5-1: SerialNumber: syz [ 361.304476][ T929] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 361.327522][ T929] cdc_ncm 5-1:1.0: bind() failure [ 362.339489][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 362.354449][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 362.997736][ T9174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 363.004410][ T9174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 363.035005][ T9174] vhci_hcd vhci_hcd.0: Device attached [ 363.123786][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.150404][ T25] usb 3-1: USB disconnect, device number 23 [ 363.513831][ T8] usb 5-1: USB disconnect, device number 14 [ 363.517618][ T8983] veth0_vlan: entered promiscuous mode [ 363.525793][ T9175] vhci_hcd: connection closed [ 363.562369][ T2809] vhci_hcd: stop threads [ 363.619968][ T2809] vhci_hcd: release socket [ 363.620513][ T8983] veth1_vlan: entered promiscuous mode [ 363.636157][ T2809] vhci_hcd: disconnect device [ 363.756683][ T8983] veth0_macvtap: entered promiscuous mode [ 363.818812][ T8983] veth1_macvtap: entered promiscuous mode [ 363.924158][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.000157][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.090134][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.125345][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.227232][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.304580][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.345805][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.382919][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.435764][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.511995][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.574876][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.636423][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.700666][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.729455][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.776447][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.826874][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.891703][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.959977][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.979931][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.990354][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.001374][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.027769][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.062553][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.295358][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.020911][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.059923][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.101358][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.136062][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.188311][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.273862][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.436325][ T8983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.567990][ T8983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.726110][ T8983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.948627][ T8983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.680203][ T9234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 368.686775][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.763196][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 368.835131][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.895102][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.084535][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.161593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.370490][ T9235] vhci_hcd: connection closed [ 369.379970][ T2809] vhci_hcd: stop threads [ 369.422133][ T2809] vhci_hcd: release socket [ 369.455363][ T2809] vhci_hcd: disconnect device [ 372.085089][ T9281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1027'. [ 372.438938][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 372.659950][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 372.673148][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 372.699900][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.741383][ T8] usb 1-1: config 0 descriptor?? [ 372.770593][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 373.117613][ T9287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 373.124190][ T9287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.203313][ T9287] vhci_hcd vhci_hcd.0: Device attached [ 373.268450][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 373.382248][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.435476][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.486342][ T929] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 373.537052][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.645584][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.690275][ T8] gspca_sunplus: reg_w_riv err -110 [ 373.695866][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 373.832115][ T8] usb 1-1: USB disconnect, device number 23 [ 373.930461][ T9290] vhci_hcd: connection reset by peer [ 373.961723][ T51] vhci_hcd: stop threads [ 374.007377][ T51] vhci_hcd: release socket [ 374.030569][ T51] vhci_hcd: disconnect device [ 374.720215][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 374.720237][ T29] audit: type=1326 audit(1720684199.376:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 374.772239][ T29] audit: type=1326 audit(1720684199.416:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.180269][ T29] audit: type=1326 audit(1720684199.836:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.304569][ T9330] xt_TCPMSS: Only works on TCP SYN packets [ 375.359413][ T29] audit: type=1326 audit(1720684199.866:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.474634][ T29] audit: type=1326 audit(1720684199.866:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.574227][ T29] audit: type=1326 audit(1720684199.866:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.719983][ T5128] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 375.729928][ T29] audit: type=1326 audit(1720684199.866:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.840618][ T29] audit: type=1326 audit(1720684199.866:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.929940][ T29] audit: type=1326 audit(1720684199.866:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 375.958302][ T5128] usb 1-1: Using ep0 maxpacket: 8 [ 376.011093][ T5128] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 376.042430][ T5128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.073191][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 376.092542][ T29] audit: type=1326 audit(1720684199.866:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9315 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 376.123027][ T5128] usb 1-1: config 0 descriptor?? [ 376.147345][ T5128] ums-alauda 1-1:0.0: USB Mass Storage device detected [ 376.187381][ T9344] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1042'. [ 376.450891][ T5128] usb 1-1: USB disconnect, device number 24 [ 378.223364][ T9365] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 378.229919][ T9365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 378.374032][ T9365] vhci_hcd vhci_hcd.0: Device attached [ 378.692166][ T9366] vhci_hcd: connection reset by peer [ 378.692615][ T9375] netlink: 'syz.0.1046': attribute type 2 has an invalid length. [ 378.709730][ T12] vhci_hcd: stop threads [ 378.758789][ T12] vhci_hcd: release socket [ 378.779138][ T12] vhci_hcd: disconnect device [ 378.860119][ T929] vhci_hcd: vhci_device speed not set [ 379.033375][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.045098][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.118185][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 380.118203][ T29] audit: type=1326 audit(1720684204.746:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.349889][ T29] audit: type=1326 audit(1720684204.756:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.450236][ T29] audit: type=1326 audit(1720684204.766:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.569958][ T29] audit: type=1326 audit(1720684204.766:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.694211][ T29] audit: type=1326 audit(1720684204.766:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.799883][ T29] audit: type=1326 audit(1720684204.766:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 380.909980][ T29] audit: type=1326 audit(1720684204.766:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 381.039976][ T29] audit: type=1326 audit(1720684204.766:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 381.159335][ T29] audit: type=1326 audit(1720684204.766:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 381.305174][ T29] audit: type=1326 audit(1720684204.766:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78d775bd9 code=0x7fc00000 [ 383.388196][ T9408] 9pnet_fd: Insufficient options for proto=fd [ 383.560055][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 383.799954][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 383.814086][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 383.849945][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.919580][ T9] usb 5-1: Product: syz [ 383.965328][ T9] usb 5-1: Manufacturer: syz [ 384.009986][ T9] usb 5-1: SerialNumber: syz [ 384.106272][ T9] usb 5-1: config 0 descriptor?? [ 384.159727][ T9] usb 5-1: bad CDC descriptors [ 384.186816][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 384.228230][ T9] usb-storage 5-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 384.250513][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.261952][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.340197][ T9419] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 384.346796][ T9419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 384.354921][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.415088][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.428591][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 384.465312][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.701626][ T9419] vhci_hcd vhci_hcd.0: Device attached [ 384.998457][ T9] usb 5-1: USB disconnect, device number 15 [ 385.009953][ T5128] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 385.348771][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 385.459962][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 385.560691][ T9422] vhci_hcd: connection reset by peer [ 385.573560][ T51] vhci_hcd: stop threads [ 385.582139][ T51] vhci_hcd: release socket [ 385.609621][ T51] vhci_hcd: disconnect device [ 385.773028][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 386.550328][ T5089] Bluetooth: hci3: command tx timeout [ 386.575405][ T5079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.585333][ T5079] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.593279][ T5079] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.602116][ T5079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.611694][ T5079] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 386.619093][ T5079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.682567][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 386.758967][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.830113][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.885272][ T9421] bridge_slave_0: entered allmulticast mode [ 386.901232][ T9421] bridge_slave_0: entered promiscuous mode [ 386.953420][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.992067][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.999373][ T9421] bridge_slave_1: entered allmulticast mode [ 387.102064][ T9421] bridge_slave_1: entered promiscuous mode [ 387.448703][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.504314][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.928643][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 387.987720][ T9421] team0: Port device team_slave_0 added [ 388.171576][ T9421] team0: Port device team_slave_1 added [ 388.181033][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 388.181046][ T29] audit: type=1326 audit(1720684212.846:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.1.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x0 [ 388.632296][ T5089] Bluetooth: hci3: command tx timeout [ 388.710249][ T5089] Bluetooth: hci7: command tx timeout [ 389.002056][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.034596][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.230510][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.282882][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.311149][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.423203][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.957996][ T9421] hsr_slave_0: entered promiscuous mode [ 390.012978][ T9421] hsr_slave_1: entered promiscuous mode [ 390.122094][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.129702][ T9421] Cannot create hsr debugfs directory [ 390.150019][ T5128] vhci_hcd: vhci_device speed not set [ 390.720648][ T5089] Bluetooth: hci3: command tx timeout [ 390.800307][ T5089] Bluetooth: hci7: command tx timeout [ 391.224959][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 391.249666][ T9452] chnl_net:caif_netlink_parms(): no params data found [ 391.315480][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1072'. [ 392.277971][ T9505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 392.284635][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.293468][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 392.378156][ T9506] vhci_hcd: cannot find the pending unlink 5 [ 392.560168][ T5199] usb 11-1: new high-speed USB device number 6 using vhci_hcd [ 392.800341][ T5089] Bluetooth: hci3: command tx timeout [ 392.869981][ T5089] Bluetooth: hci7: command tx timeout [ 393.273179][ T9421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.574589][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.672517][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.713553][ T9452] bridge_slave_0: entered allmulticast mode [ 393.781019][ T9452] bridge_slave_0: entered promiscuous mode [ 394.030108][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 394.233058][ T9506] vhci_hcd: connection reset by peer [ 394.310700][ T11] vhci_hcd: stop threads [ 394.321647][ T11] vhci_hcd: release socket [ 394.360007][ T11] vhci_hcd: disconnect device [ 394.408135][ T9421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.490413][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.497515][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.543962][ T9452] bridge_slave_1: entered allmulticast mode [ 394.616237][ T9452] bridge_slave_1: entered promiscuous mode [ 394.809929][ T5133] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 394.949970][ T5089] Bluetooth: hci7: command tx timeout [ 395.053589][ T9421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.109012][ T5133] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 395.139998][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.210617][ T5133] usb 5-1: config 0 descriptor?? [ 395.373130][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.781607][ T9421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.941038][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.206023][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 396.410220][ T9452] team0: Port device team_slave_0 added [ 396.472226][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 396.522009][ T9452] team0: Port device team_slave_1 added [ 396.820169][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 396.922589][ T9519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 397.432329][ T9519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 397.692510][ T5199] vhci_hcd: vhci_device speed not set [ 397.760037][ T5128] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 398.011154][ T5128] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 398.085081][ T5128] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 398.140108][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.141574][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.192452][ T5128] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 398.225425][ T5079] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 398.252902][ T5079] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 398.269927][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.270565][ T5079] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 398.309582][ T5079] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 398.317497][ T5079] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 398.327686][ T5079] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 398.411857][ T5128] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.597507][ T5128] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.689978][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.691198][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.782754][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.845268][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.130036][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.450135][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 399.800124][ T5128] usb 2-1: can't set config #27, error -71 [ 399.880245][ T5128] usb 2-1: USB disconnect, device number 27 [ 400.139942][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 400.470101][ T5079] Bluetooth: hci8: command tx timeout [ 400.646899][ T9452] hsr_slave_0: entered promiscuous mode [ 401.274447][ T9452] hsr_slave_1: entered promiscuous mode [ 401.470117][ T9452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.531478][ T9452] Cannot create hsr debugfs directory [ 401.583884][ T9421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.599925][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 401.713614][ T9421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.921178][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 401.930879][ T9526] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.009593][ T9421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.092285][ T9421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.300673][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.411351][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.530578][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.549958][ T5079] Bluetooth: hci8: command tx timeout [ 402.913229][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 403.169901][ T9519] ip6gretap0 speed is unknown, defaulting to 1000 [ 403.610254][ T25] usb 5-1: USB disconnect, device number 16 [ 403.842555][ T9452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.634344][ T5089] Bluetooth: hci8: command tx timeout [ 405.564861][ T9551] Bluetooth: MGMT ver 1.22 [ 405.584505][ T9551] Bluetooth: hci3: invalid length 0, exp 2 for type 30 [ 405.790429][ T9452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.887529][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.002751][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 406.050165][ T9563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 406.056814][ T9563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 406.220079][ T9563] vhci_hcd vhci_hcd.0: Device attached [ 406.404588][ T9452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.500008][ T5128] usb 17-1: new high-speed USB device number 4 using vhci_hcd [ 406.700595][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 406.719030][ T5089] Bluetooth: hci8: command tx timeout [ 407.329985][ T9564] vhci_hcd: connection reset by peer [ 407.342480][ T2802] vhci_hcd: stop threads [ 407.346745][ T2802] vhci_hcd: release socket [ 407.459900][ T2802] vhci_hcd: disconnect device [ 407.798825][ T9452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.012545][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.764025][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.816667][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.880217][ T9526] bridge_slave_0: entered allmulticast mode [ 408.931157][ T9526] bridge_slave_0: entered promiscuous mode [ 408.976959][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.032524][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.039766][ T9526] bridge_slave_1: entered allmulticast mode [ 409.101138][ T9526] bridge_slave_1: entered promiscuous mode [ 409.281928][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.289032][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.968517][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.073501][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.532046][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.539153][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.712377][ T9594] FAULT_INJECTION: forcing a failure. [ 410.712377][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 410.801425][ T9594] CPU: 1 PID: 9594 Comm: syz.4.1090 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 410.811563][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 410.821642][ T9594] Call Trace: [ 410.824940][ T9594] [ 410.827886][ T9594] dump_stack_lvl+0x241/0x360 [ 410.832688][ T9594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.838013][ T9594] ? __pfx__printk+0x10/0x10 [ 410.842660][ T9594] should_fail_ex+0x3b0/0x4e0 [ 410.847374][ T9594] ? rtnl_newlink+0xf2/0x20a0 [ 410.852079][ T9594] should_failslab+0x9/0x20 [ 410.856620][ T9594] kmalloc_trace_noprof+0x6c/0x2c0 [ 410.861763][ T9594] ? __pfx_rtnl_newlink+0x10/0x10 [ 410.866807][ T9594] rtnl_newlink+0xf2/0x20a0 [ 410.871346][ T9594] ? __pfx_lock_acquire+0x10/0x10 [ 410.876395][ T9594] ? __mutex_lock+0x99b/0xd70 [ 410.881126][ T9594] ? __pfx_lock_release+0x10/0x10 [ 410.886170][ T9594] ? do_raw_spin_lock+0x14f/0x370 [ 410.891222][ T9594] ? __pfx_rtnl_newlink+0x10/0x10 [ 410.896315][ T9594] ? do_raw_spin_unlock+0x13c/0x8b0 [ 410.901571][ T9594] ? __mutex_lock+0x9a5/0xd70 [ 410.906298][ T9594] ? __mutex_lock+0x527/0xd70 [ 410.911009][ T9594] ? rtnetlink_rcv_msg+0x842/0x1180 [ 410.916239][ T9594] ? __pfx___mutex_lock+0x10/0x10 [ 410.921300][ T9594] ? __pfx_rtnl_newlink+0x10/0x10 [ 410.926385][ T9594] rtnetlink_rcv_msg+0x89b/0x1180 [ 410.931444][ T9594] ? rtnetlink_rcv_msg+0x208/0x1180 [ 410.936697][ T9594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.942238][ T9594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.948253][ T9594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.954627][ T9594] ? __local_bh_enable_ip+0x168/0x200 [ 410.960027][ T9594] ? lockdep_hardirqs_on+0x99/0x150 [ 410.965271][ T9594] ? __local_bh_enable_ip+0x168/0x200 [ 410.970753][ T9594] ? dev_hard_start_xmit+0x773/0x7e0 [ 410.976065][ T9594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.981212][ T9594] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 410.986963][ T9594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.992133][ T9594] ? __dev_queue_xmit+0x16c9/0x3d30 [ 410.997372][ T9594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 411.002522][ T9594] ? ref_tracker_free+0x643/0x7e0 [ 411.007583][ T9594] netlink_rcv_skb+0x1e3/0x430 [ 411.012384][ T9594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.017867][ T9594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.023286][ T9594] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.028537][ T9594] netlink_unicast+0x7ea/0x980 [ 411.033424][ T9594] ? __pfx_netlink_unicast+0x10/0x10 [ 411.038729][ T9594] ? __virt_addr_valid+0x183/0x520 [ 411.044038][ T9594] ? __check_object_size+0x49c/0x900 [ 411.049345][ T9594] ? bpf_lsm_netlink_send+0x9/0x10 [ 411.054531][ T9594] netlink_sendmsg+0x8db/0xcb0 [ 411.059429][ T9594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.064739][ T9594] ? __import_iovec+0x536/0x820 [ 411.069618][ T9594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 411.074926][ T9594] ? security_socket_sendmsg+0x87/0xb0 [ 411.080419][ T9594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.085813][ T9594] __sock_sendmsg+0x221/0x270 [ 411.091049][ T9594] ____sys_sendmsg+0x525/0x7d0 [ 411.096044][ T9594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.101481][ T9594] __sys_sendmsg+0x2b0/0x3a0 [ 411.106110][ T9594] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.111255][ T9594] ? vfs_write+0x7c4/0xc90 [ 411.115767][ T9594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.122136][ T9594] ? do_syscall_64+0x100/0x230 [ 411.126933][ T9594] ? do_syscall_64+0xb6/0x230 [ 411.131638][ T9594] do_syscall_64+0xf3/0x230 [ 411.136251][ T9594] ? clear_bhb_loop+0x35/0x90 [ 411.140966][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.146890][ T9594] RIP: 0033:0x7ff78d775bd9 [ 411.151329][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.170958][ T9594] RSP: 002b:00007ff78e5c4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.179399][ T9594] RAX: ffffffffffffffda RBX: 00007ff78d904110 RCX: 00007ff78d775bd9 [ 411.187491][ T9594] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 411.195660][ T9594] RBP: 00007ff78e5c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.203682][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.211675][ T9594] R13: 000000000000006e R14: 00007ff78d904110 R15: 00007ffc68fc89a8 [ 411.219683][ T9594] [ 411.567498][ T9526] team0: Port device team_slave_0 added [ 411.730035][ T5128] vhci_hcd: vhci_device speed not set [ 411.758272][ T9452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.204940][ T9526] team0: Port device team_slave_1 added [ 412.395372][ T9452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.632589][ T9452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.862867][ T9600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.948439][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.990303][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.280092][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.342575][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.349573][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.514640][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.250021][ T9452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.481018][ T9603] sp0: Synchronizing with TNC [ 414.590383][ T9604] [U] è` [ 414.759129][ T9605] bridge0: port 3(vlan2) entered blocking state [ 414.853658][ T9605] bridge0: port 3(vlan2) entered disabled state [ 414.940217][ T9605] vlan2: entered allmulticast mode [ 415.037379][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 415.037943][ T9605] vlan2: left allmulticast mode [ 415.270008][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1093'. [ 415.411157][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 415.439880][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 415.448124][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.509155][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.570594][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.620328][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.711546][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.776150][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.134174][ T9526] hsr_slave_0: entered promiscuous mode [ 416.390460][ T9526] hsr_slave_1: entered promiscuous mode [ 416.490101][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.529928][ T9526] Cannot create hsr debugfs directory [ 416.750039][ T9] usb 5-1: usb_control_msg returned -32 [ 416.765873][ T9] usbtmc 5-1:16.0: can't read capabilities [ 417.004768][ T9615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 417.011521][ T9615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 417.039990][ T9615] vhci_hcd vhci_hcd.0: Device attached [ 417.126799][ T9611] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 417.309950][ T5133] usb 11-1: new high-speed USB device number 7 using vhci_hcd [ 417.885333][ T25] usb 5-1: USB disconnect, device number 17 [ 418.159257][ T9616] vhci_hcd: connection reset by peer [ 418.173830][ T12] vhci_hcd: stop threads [ 418.178125][ T12] vhci_hcd: release socket [ 418.269410][ T12] vhci_hcd: disconnect device [ 418.658010][ T9526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.127522][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.368916][ T9632] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1097'. [ 419.444163][ T9526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.516204][ T9632] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 419.820119][ T9526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.831612][ T5128] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 420.050173][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.155170][ T5128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.210295][ T5128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.249691][ T5128] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 420.295774][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 420.346319][ T5128] usb 2-1: SerialNumber: syz [ 420.622050][ T5128] usb 2-1: 0:2 : does not exist [ 420.683195][ T5128] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 420.795596][ T5128] usb 2-1: USB disconnect, device number 28 [ 420.887287][ T9526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.080203][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.161421][ T9517] udevd[9517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.233797][ T9421] veth0_vlan: entered promiscuous mode [ 421.261801][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.269019][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.422275][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.429539][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.603741][ T9421] veth1_vlan: entered promiscuous mode [ 421.854541][ T9421] veth0_macvtap: entered promiscuous mode [ 421.900955][ T9421] veth1_macvtap: entered promiscuous mode [ 421.965778][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.979870][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.030134][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.084029][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.129220][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.139993][ T5199] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 422.186737][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.229971][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.257987][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.321718][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.353602][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.368751][ T5199] usb 2-1: Using ep0 maxpacket: 16 [ 422.449640][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.510108][ T5133] vhci_hcd: vhci_device speed not set [ 422.520491][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.598015][ T5199] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 422.640030][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.650832][ T5199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.688133][ T5199] usb 2-1: Product: syz [ 422.693169][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.710590][ T5199] usb 2-1: Manufacturer: syz [ 422.749407][ T5199] usb 2-1: SerialNumber: syz [ 422.754186][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.782021][ T5199] r8152-cfgselector 2-1: Unknown version 0x0000 [ 422.788284][ T5199] r8152-cfgselector 2-1: config 0 descriptor?? [ 422.825202][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.920736][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.975477][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.049840][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.060708][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.108593][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.179694][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.289922][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.331085][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.381545][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.450043][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.520282][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.598026][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.703910][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.780131][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.842279][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.930040][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.965833][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.033683][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.114614][ T9421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.154098][ T5128] r8152-cfgselector 2-1: USB disconnect, device number 29 [ 424.169944][ T9421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.203105][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 424.223210][ T9421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.243693][ T9421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.306478][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.837926][ T9651] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.050928][ T9654] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1101'. [ 425.841380][ T9651] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.541405][ T9651] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.862593][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.905081][ T9526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.913482][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.053194][ T9526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.196431][ T9526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.645333][ T5128] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 427.826259][ T9651] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.920780][ T5128] usb 2-1: Using ep0 maxpacket: 8 [ 427.977172][ T5128] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 428.006229][ T5128] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.069850][ T5128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.120146][ T5128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.198594][ T5128] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.198627][ T9526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.310659][ T5128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.389908][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.504174][ T9452] veth0_vlan: entered promiscuous mode [ 428.535608][ T2809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.589984][ T2809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.752709][ T9452] veth1_vlan: entered promiscuous mode [ 428.880253][ T9452] veth0_macvtap: entered promiscuous mode [ 428.891640][ T9452] veth1_macvtap: entered promiscuous mode [ 429.250294][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.335102][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.389111][ T5128] usb 2-1: usb_control_msg returned -32 [ 429.417696][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.436634][ T5128] usbtmc 2-1:16.0: can't read capabilities [ 429.513272][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.559849][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.606401][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.639969][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.722004][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.779930][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.791034][ T9665] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 429.879075][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.928541][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.997087][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.100253][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.154784][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.210047][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.278935][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.329882][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.369238][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.432201][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.544129][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.597105][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.659037][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.737818][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.809869][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.031615][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.078245][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.109512][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.151312][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.206440][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.269737][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.336675][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.440969][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.510748][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.588641][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.659890][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.760546][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.830520][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.911002][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.982807][ T5167] usb 2-1: USB disconnect, device number 30 [ 432.015207][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.241823][ T9452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.289884][ T9452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.298695][ T9452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.353108][ T9452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.501263][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.596090][ T9651] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.841202][ T9651] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.980290][ T9651] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.234626][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.241808][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.323229][ T9651] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.379516][ T9691] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1109'. [ 433.595287][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.602464][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.073643][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.110964][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.331721][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 434.340871][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.380545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.478594][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 434.519558][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 435.046362][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.387320][ T9526] veth0_vlan: entered promiscuous mode [ 435.501661][ T9526] veth1_vlan: entered promiscuous mode [ 435.660165][ T9712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1063'. [ 435.838638][ T9526] veth0_macvtap: entered promiscuous mode [ 435.911617][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 436.039952][ T5167] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 436.055852][ T9526] veth1_macvtap: entered promiscuous mode [ 436.247579][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.310016][ T5167] usb 2-1: Using ep0 maxpacket: 8 [ 436.331740][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.360722][ T5167] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 436.369105][ T5167] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.390070][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.460026][ T5167] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.470210][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.553126][ T5167] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.571651][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.611563][ T5167] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.632688][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.673185][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.689870][ T5167] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.749848][ T5167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.759927][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.814685][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.909835][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.967880][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.039680][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.106072][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.186822][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.304005][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.314832][ T5167] usb 2-1: usb_control_msg returned -32 [ 437.349380][ T5167] usbtmc 2-1:16.0: can't read capabilities [ 437.419929][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.511133][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.515022][ T9730] 9pnet_fd: Insufficient options for proto=fd [ 437.636921][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.732475][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.822467][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.849978][ T9717] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 437.909620][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.996828][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.091148][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.172263][ T8] usb 2-1: USB disconnect, device number 31 [ 438.190111][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.246883][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.294063][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.346110][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.419446][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.480815][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.519899][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.590102][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.649844][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.694752][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.730963][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 438.759897][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.844103][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.890386][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.915561][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.969958][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.027918][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.110115][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.161644][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.196024][ T9742] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1119'. [ 439.241186][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.352325][ T9526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.418787][ T9526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.497613][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.516401][ T9526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.539958][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.565612][ T9526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.304375][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.399844][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.611849][ T2809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.632600][ T2809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.314218][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 442.579927][ T5079] Bluetooth: hci1: command 0x0406 tx timeout [ 443.419934][ T5128] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.679902][ T5128] usb 2-1: Using ep0 maxpacket: 8 [ 443.752137][ T5128] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 443.760505][ T5128] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.773348][ T5128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.789977][ T5128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.801507][ T5128] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.814959][ T5128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.839929][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.956725][ T9784] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1130'. [ 444.618000][ T5128] usb 2-1: usb_control_msg returned -32 [ 444.634578][ T5128] usbtmc 2-1:16.0: can't read capabilities [ 445.010529][ T9793] 9pnet_fd: Insufficient options for proto=fd [ 445.143593][ T9778] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 445.398007][ T5128] usb 2-1: USB disconnect, device number 32 [ 446.422428][ T9801] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 446.700685][ T9801] batman_adv: batadv0: Adding interface: team0 [ 446.706900][ T9801] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.943642][ T9801] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 447.141976][ T9803] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 447.166795][ T29] audit: type=1326 audit(1720684271.826:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 447.227621][ T9803] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1135'. [ 447.323383][ T29] audit: type=1326 audit(1720684271.826:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 447.428499][ T9803] team0: entered promiscuous mode [ 447.489138][ T9803] team_slave_0: entered promiscuous mode [ 447.570299][ T9803] team_slave_1: entered promiscuous mode [ 447.661682][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.753744][ T29] audit: type=1326 audit(1720684272.416:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 447.780654][ T9803] batman_adv: batadv0: Interface activated: team0 [ 447.844454][ T9803] batman_adv: batadv0: Interface deactivated: team0 [ 447.854498][ T29] audit: type=1326 audit(1720684272.416:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 447.973066][ T9803] batman_adv: batadv0: Removing interface: team0 [ 448.041005][ T29] audit: type=1326 audit(1720684272.416:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 448.127336][ T9803] bridge0: port 3(team0) entered blocking state [ 448.148520][ T29] audit: type=1326 audit(1720684272.416:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 448.200079][ T9803] bridge0: port 3(team0) entered disabled state [ 448.270122][ T29] audit: type=1326 audit(1720684272.416:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 448.304865][ T9803] team0: entered allmulticast mode [ 448.345216][ T9803] team_slave_0: entered allmulticast mode [ 448.430888][ T9803] team_slave_1: entered allmulticast mode [ 448.467408][ T29] audit: type=1326 audit(1720684272.416:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 448.616545][ T9803] bridge0: port 3(team0) entered blocking state [ 448.623021][ T9803] bridge0: port 3(team0) entered forwarding state [ 448.700034][ T29] audit: type=1326 audit(1720684272.416:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 448.900027][ T29] audit: type=1326 audit(1720684272.416:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 449.890325][ T5079] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 449.913703][ T5079] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 449.923334][ T5079] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 449.932062][ T5079] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 449.941071][ T5079] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 449.948326][ T5079] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 450.148873][ T9829] ip6gretap0 speed is unknown, defaulting to 1000 [ 451.092383][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 451.210209][ T5132] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 451.490902][ T5132] usb 2-1: Using ep0 maxpacket: 8 [ 451.543760][ T9852] 9pnet_fd: Insufficient options for proto=fd [ 451.640499][ T5132] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 451.648742][ T5132] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.745961][ T5132] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.849529][ T5132] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.859664][ T5132] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.879927][ T5132] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.889133][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.074301][ T5089] Bluetooth: hci9: command tx timeout [ 452.390106][ T5132] usb 2-1: usb_control_msg returned -32 [ 452.395979][ T5132] usbtmc 2-1:16.0: can't read capabilities [ 452.790933][ T5089] Bluetooth: hci5: command 0x0406 tx timeout [ 452.970741][ T9866] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 453.088280][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 453.204199][ T5133] usb 2-1: USB disconnect, device number 33 [ 454.150155][ T5079] Bluetooth: hci9: command tx timeout [ 454.690233][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 455.018203][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.728656][ T5079] Bluetooth: hci9: command tx timeout [ 456.763220][ T9885] sctp: [Deprecated]: syz.1.1153 (pid 9885) Use of int in maxseg socket option. [ 456.763220][ T9885] Use struct sctp_assoc_value instead [ 456.932319][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.003091][ T9829] bridge_slave_0: entered allmulticast mode [ 457.061513][ T9829] bridge_slave_0: entered promiscuous mode [ 457.141145][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.160020][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.176432][ T9829] bridge_slave_1: entered allmulticast mode [ 457.228860][ T9829] bridge_slave_1: entered promiscuous mode [ 457.335169][ T9880] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1152'. [ 457.514651][ T9880] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 457.625421][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.712850][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.962277][ T9904] netlink: 'syz.1.1156': attribute type 2 has an invalid length. [ 458.040020][ T5078] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 458.810028][ T5079] Bluetooth: hci9: command tx timeout [ 459.201446][ T9911] 9pnet_fd: Insufficient options for proto=fd [ 459.507764][ T9829] team0: Port device team_slave_0 added [ 460.742076][ T9829] team0: Port device team_slave_1 added [ 461.602344][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.654213][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.680110][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.777082][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.832432][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.839432][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.865427][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.962102][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.067330][ T9938] overlayfs: failed to resolve './file0': -2 [ 462.218075][ T9943] Invalid ELF header magic: != ELF [ 462.591151][ T9951] netlink: 'syz.2.1168': attribute type 2 has an invalid length. [ 463.140047][ T9948] program syz.0.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.992573][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.307582][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 464.307599][ T29] audit: type=1326 audit(1720684288.966:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 464.474814][ T29] audit: type=1326 audit(1720684289.136:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 464.539115][ T9829] hsr_slave_0: entered promiscuous mode [ 464.561474][ T9829] hsr_slave_1: entered promiscuous mode [ 464.601030][ T9829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.626469][ T9829] Cannot create hsr debugfs directory [ 464.869384][ T29] audit: type=1326 audit(1720684289.526:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 464.909957][ T29] audit: type=1326 audit(1720684289.526:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 464.979927][ T29] audit: type=1326 audit(1720684289.526:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 465.091165][ T29] audit: type=1326 audit(1720684289.526:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 465.194296][ T29] audit: type=1326 audit(1720684289.526:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 465.330040][ T9969] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1172'. [ 465.359898][ T29] audit: type=1326 audit(1720684289.526:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 465.467767][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 465.480255][ T29] audit: type=1326 audit(1720684289.526:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 465.626206][ T29] audit: type=1326 audit(1720684289.526:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9960 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca175bd9 code=0x7fc00000 [ 466.150079][ T9978] 9pnet_fd: Insufficient options for proto=fd [ 466.374085][ T9829] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.440862][ T9990] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1178'. [ 467.541627][ T9990] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 467.774838][ T9829] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.921286][ T5167] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 468.151734][ T5089] Bluetooth: hci6: command 0x0406 tx timeout [ 468.160994][ T5167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.193335][ T5167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.211404][ T5167] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.236334][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.247601][ T5167] usb 4-1: SerialNumber: syz [ 468.290985][ T9829] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.624867][ T9994] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1180'. [ 468.713119][ T5167] usb 4-1: 0:2 : does not exist [ 468.773508][ T5167] usb 4-1: USB disconnect, device number 20 [ 468.950326][T10001] syz.2.1179 uses obsolete (PF_INET,SOCK_PACKET) [ 469.297539][ T9824] udevd[9824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.348024][ T9829] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.340051][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 470.340074][ T29] audit: type=1326 audit(1720684294.986:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 470.376306][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1183'. [ 470.509397][ T29] audit: type=1326 audit(1720684294.986:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 470.761978][ T29] audit: type=1326 audit(1720684295.386:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d8575bd9 code=0x7fc00000 [ 471.964903][ T9829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.213230][ T9829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.349755][ T9829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.620919][ T9829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.261331][T10028] 9pnet_fd: Insufficient options for proto=fd [ 473.521631][T10030] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1191'. [ 473.523725][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.567603][T10030] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 473.699842][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.760763][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.768205][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.844003][T10033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.890316][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.897467][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.972391][ T5167] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 474.212321][ T5167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.393520][ T5167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.464561][ T5167] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 474.519937][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 474.555510][ T5167] usb 4-1: SerialNumber: syz [ 474.832013][ T5167] usb 4-1: 0:2 : does not exist [ 474.930161][ T5167] usb 4-1: USB disconnect, device number 21 [ 475.031153][ T30] INFO: task syz.4.901:8667 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 475.112136][ T30] Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 475.157644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.287427][ T30] task:syz.4.901 state:D stack:23680 pid:8667 tgid:8658 ppid:8019 flags:0x00004006 [ 475.290191][ T9824] udevd[9824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.412473][ T30] Call Trace: [ 475.430003][ T30] [ 475.433087][ T30] __schedule+0x1796/0x49d0 [ 475.475151][ T30] ? __pfx___schedule+0x10/0x10 [ 475.499906][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.517942][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 475.560147][ T30] ? schedule+0x90/0x320 [ 475.629861][ T30] schedule+0x14b/0x320 [ 475.634057][ T30] schedule_preempt_disabled+0x13/0x30 [ 475.639587][ T30] __mutex_lock+0x6a4/0xd70 [ 475.689895][ T30] ? __mutex_lock+0x527/0xd70 [ 475.694637][ T30] ? vhost_vsock_dev_release+0x1e8/0x410 [ 475.723515][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 475.728667][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 475.810155][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 475.815952][ T30] ? vhost_vsock_dev_release+0x18b/0x410 [ 475.908479][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 475.931861][ T30] vhost_vsock_dev_release+0x1e8/0x410 [ 475.937397][ T30] ? evm_file_release+0x140/0x1d0 [ 476.009874][ T30] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 476.015930][ T30] __fput+0x24a/0x8a0 [ 476.070933][ T30] task_work_run+0x24f/0x310 [ 476.075610][ T30] ? __pfx_task_work_run+0x10/0x10 [ 476.169899][ T30] ? switch_task_namespaces+0xe1/0x110 [ 476.175424][ T30] do_exit+0xa27/0x27e0 [ 476.179613][ T30] ? __pfx_do_exit+0x10/0x10 [ 476.280084][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 476.361175][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.367500][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 476.482915][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 476.488154][ T30] do_group_exit+0x207/0x2c0 [ 476.520104][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.525348][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 476.614927][ T30] get_signal+0x16a1/0x1740 [ 476.619520][ T30] ? __pfx_get_signal+0x10/0x10 [ 476.699985][ T30] arch_do_signal_or_restart+0x96/0x860 [ 476.705566][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.746194][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.800492][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 476.806618][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 476.889995][ T30] do_syscall_64+0x100/0x230 [ 476.919872][ T30] ? clear_bhb_loop+0x35/0x90 [ 476.924617][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.989923][ T30] RIP: 0033:0x7fc4f4b75bd9 [ 476.994376][ T30] RSP: 002b:00007fc4f5a100f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 477.119864][ T30] RAX: fffffffffffffe00 RBX: 00007fc4f4d04040 RCX: 00007fc4f4b75bd9 [ 477.189974][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc4f4d04040 [ 477.219862][ T30] RBP: 00007fc4f4d04038 R08: 00007fc4f5a106c0 R09: 00007fc4f5a106c0 [ 477.227928][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4f4d04044 [ 477.380940][ T30] R13: 000000000000006e R14: 00007fff532b4280 R15: 00007fff532b4368 [ 477.388958][ T30] [ 477.464488][ T30] [ 477.464488][ T30] Showing all locks held in the system: [ 477.519872][ T30] 1 lock held by khungtaskd/30: [ 477.524784][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 477.649873][ T30] 2 locks held by kswapd0/88: [ 477.654631][ T30] 3 locks held by kworker/u8:8/2802: [ 477.741111][ T30] #0: ffff88802a0d2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 477.839986][ T30] #1: ffffc90009f37d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 477.930002][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 477.979862][ T30] 2 locks held by kworker/u8:11/2912: [ 477.985287][ T30] 2 locks held by getty/4843: [ 478.049880][ T30] #0: ffff88802fad80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 478.059720][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 478.269894][ T30] 3 locks held by kworker/1:7/5199: [ 478.275146][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 478.442158][ T30] #1: ffffc90004af7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 478.535557][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 478.591059][ T30] 2 locks held by syz.2.850/8458: [ 478.596224][ T30] 2 locks held by vhost-8473/8475: [ 478.680745][ T30] 2 locks held by syz.4.901/8667: [ 478.685836][ T30] #0: ffff888043140070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 478.791920][ T30] #1: ffff888043144c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 478.828270][ T30] 2 locks held by vhost-8667/8668: [ 478.889309][ T30] 2 locks held by syz.1.950/8892: [ 478.919949][ T30] #0: ffff88804eca0070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 478.980138][ T30] #1: ffff88804eca4c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 479.058984][ T30] 3 locks held by vhost-8893/8895: [ 479.069855][ T30] 3 locks held by syz-executor/8983: [ 479.075180][ T30] #0: ffff8880306d0d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 479.199961][ T30] #1: ffff8880306d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 479.229874][ T30] #2: ffffffff8f73f008 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 479.299971][ T30] 2 locks held by syz.3.1029/9296: [ 479.329897][ T30] #0: ffff88808b810070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 479.429984][ T30] #1: ffff88808b814c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 479.469871][ T30] 2 locks held by vhost-9301/9305: [ 479.475019][ T30] 2 locks held by syz.2.1041/9334: [ 479.539862][ T30] #0: ffff888098f90070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 479.609914][ T30] #1: ffff888098f94c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 479.672122][ T30] 2 locks held by vhost-9340/9350: [ 479.677255][ T30] 2 locks held by syz.0.1066/9451: [ 479.739815][ T30] #0: ffff888089940070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 479.797990][ T30] #1: ffff888089944c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 479.949934][ T30] 2 locks held by vhost-9456/9461: [ 479.955113][ T30] 2 locks held by syz.4.1118/9735: [ 480.000263][ T30] #0: ffff888078140070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x199/0x410 [ 480.089853][ T30] #1: ffff888078144c70 (&vq->mutex){+.+.}-{3:3}, at: vhost_vsock_dev_release+0x1e8/0x410 [ 480.134224][ T30] 2 locks held by vhost-9736/9740: [ 480.139381][ T30] 3 locks held by syz-executor/9829: [ 480.228485][ T30] #0: ffff8880236c4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 480.291337][ T30] #1: ffff8880236c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 480.389824][ T30] #2: ffffffff8f73f008 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 480.429887][ T30] 5 locks held by kworker/u8:5/9921: [ 480.469909][ T30] 3 locks held by syz.3.1191/10038: [ 480.493648][ T30] #0: ffff88802d5c4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 480.549861][ T30] #1: ffff88802d5c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 480.559605][ T30] #2: ffffffff8f73f008 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 480.670123][ T30] 2 locks held by syz.0.1193/10044: [ 480.675821][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 480.806438][ T30] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 480.866823][ T30] [ 480.869196][ T30] ============================================= [ 480.869196][ T30] [ 480.961070][ T30] NMI backtrace for cpu 0 [ 480.965435][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 480.975419][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 480.985592][ T30] Call Trace: [ 480.989074][ T30] [ 480.992028][ T30] dump_stack_lvl+0x241/0x360 [ 480.996835][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.002063][ T30] ? __pfx__printk+0x10/0x10 [ 481.006665][ T30] ? vprintk_emit+0x631/0x770 [ 481.011363][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 481.016419][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 481.021385][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 481.026835][ T30] ? _printk+0xd5/0x120 [ 481.031000][ T30] ? __pfx__printk+0x10/0x10 [ 481.035656][ T30] ? __wake_up_klogd+0xcc/0x110 [ 481.040623][ T30] ? __pfx__printk+0x10/0x10 [ 481.045304][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 481.050369][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 481.056356][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 481.062349][ T30] watchdog+0xfde/0x1020 [ 481.066616][ T30] ? watchdog+0x1ea/0x1020 [ 481.071034][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.075717][ T30] kthread+0x2f0/0x390 [ 481.079817][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.084594][ T30] ? __pfx_kthread+0x10/0x10 [ 481.089176][ T30] ret_from_fork+0x4b/0x80 [ 481.093633][ T30] ? __pfx_kthread+0x10/0x10 [ 481.098223][ T30] ret_from_fork_asm+0x1a/0x30 [ 481.103087][ T30] [ 481.106985][ T30] Sending NMI from CPU 0 to CPUs 1: [ 481.112780][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 481.910218][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 481.917123][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 481.927014][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 481.937086][ T30] Call Trace: [ 481.940368][ T30] [ 481.943293][ T30] dump_stack_lvl+0x241/0x360 [ 481.947978][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.953268][ T30] ? __pfx__printk+0x10/0x10 [ 481.957850][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.963833][ T30] ? vscnprintf+0x5d/0x90 [ 481.968166][ T30] panic+0x349/0x860 [ 481.972077][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 481.978233][ T30] ? __pfx_panic+0x10/0x10 [ 481.982732][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 481.988131][ T30] ? __irq_work_queue_local+0x137/0x410 [ 481.993669][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 481.999031][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 482.005260][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 482.011414][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 482.017645][ T30] watchdog+0x101d/0x1020 [ 482.021979][ T30] ? watchdog+0x1ea/0x1020 [ 482.026474][ T30] ? __pfx_watchdog+0x10/0x10 [ 482.031141][ T30] kthread+0x2f0/0x390 [ 482.035202][ T30] ? __pfx_watchdog+0x10/0x10 [ 482.039871][ T30] ? __pfx_kthread+0x10/0x10 [ 482.044464][ T30] ret_from_fork+0x4b/0x80 [ 482.049047][ T30] ? __pfx_kthread+0x10/0x10 [ 482.053635][ T30] ret_from_fork_asm+0x1a/0x30 [ 482.058400][ T30] [ 482.061850][ T30] Kernel Offset: disabled [ 482.066193][ T30] Rebooting in 86400 seconds..