last executing test programs: 49.900207953s ago: executing program 2: r0 = epoll_create1(0x0) clock_gettime(0x2, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x0, 0x0, @stepwise={0x2, 0x6, 0x9}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)) dup(0xffffffffffffffff) gettid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200)="4a7c79e133aed88ad8e23a76c0db7b81ae7fec5fac266f3ec45880ed5e99f1038e7b0d4a9152971334eb395391", 0x2d, 0x20000000, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x400000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0xfff00002}, {0x16, 0x1}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x195000, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x50, 0x180000504) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x4a) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x80000, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfdfd}, 0x1, 0x0, 0x0, 0x80}, 0x40048c5) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) fanotify_init(0x2, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 49.638492468s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xa00) 49.133025121s ago: executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9}) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) mknodat$loop(r2, &(0x7f0000002440)='./file0\x00', 0x0, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020}, 0x2020) creat(&(0x7f0000002380)='./file0\x00', 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0x0, 0xf238}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_GET_SYSNAME(r9, 0x4008556c, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000b000000", 0x30) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 45.962392202s ago: executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) getpeername(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\x1b\x00m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000300)={r3, 0x0, 0x0, 0x4000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) fsmount(r8, 0x1, 0x80) 45.755592196s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r4 = accept$inet6(r2, 0x0, &(0x7f0000000100)) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000280)={0xa, 0x4e21, 0xb5fd5388, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x890}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000020a80)="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", 0x53c}, {0x0}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="480000000000000029000000390000008906000500000000fe8000000000000000000000000000bbff0100000000000000000000000000fb000200000000000000000000000000011400000000000000290000004300000000010000000000001400000000000000290000003e0000000008000000000000"], 0x78}, 0x10) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ptrace$ARCH_GET_FS(0x1e, 0xffffffffffffffff, &(0x7f0000000240), 0x1003) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.reset_stats\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0xee00, r8, 0x100, 0x4b4b}, 0x0, 0x172d, 0x0, 0x1e, 0x0, 0x0, 0x20}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "0000010000ffffff", "8c07480d7f007c58000000000200", '\x00', "006e34e400"}, 0x28) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, r1, 0xc500, 0x100000001, 0x4000000002}) 45.551926453s ago: executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x5, &(0x7f0000000340)) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x175, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x163, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xffffffff, {[@generic={0x0, 0xa, "c5606a0526c1e435"}, @cipso={0x86, 0x10, 0x0, [{0x0, 0xa, "b04de217db55bf9f"}]}, @rr={0x7, 0x17, 0x0, [@multicast2, @loopback, @multicast1, @remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@remote}]}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "bae7d0cf8971153274b0d7dc479c53f741d46d85895227fe308d4652852e92165e823fe439d30a193939bbed998bc1624c0aff4537e32e7684e4742dbe7e40b88c2c87395faa84b4121058a77c705542a9d2126afc02fadbb77c48566c856c9dad86ab99d1db35e04325ad8bea8d34a4c70c4ce3974fa23c6a3104c2c7551758e6fcb7661b26abc585a77ef8e532be2b0fa98cb8e67d6c9ec39a22da9b244d681ccd13dd2efde4c0f8ec8a091a331e5102a367f949a3ce1481ce01c4b9e006287d0a7566b78e63e6e89cd1"}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0xd8}}, 0x40040c0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 45.22249964s ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x2, 0x6}}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000173cc09c130003006861739e24beeba9d21ce561636500a200000400000000000900020073797a30000000000c000780080006400000000005000500020000000500010006000000"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) 44.720926248s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x30) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001680)="08957b6c09842a93011599d481bbb5f90183e83b6a8dd04c7faa739e5d4f4dd5793e90edb662bafce7ad3fdb97d3938a452c68d61e821aaf17e6d57089808bd1434ecfd454179f4645dfcafcbd2c85c95a679ce310ba8381ad05288770d18dba3035b43d158a1b7f4644453e932ec2bf5107d3ede9366173cfe5927855d1af8e45637d9b8eadcd97c0ed81caf777d9c7989b8a650aa4d1444088da98", 0x9c}, {&(0x7f0000000540)="37ef90ed3abf1b4a2e6e32556e02f41a28fb7c4b263b6822a9dd242976008c9fc4a2e6dcf9c0b5d9beeab994f84c86288cf647be6e3591ccc7ab67e554084dbaeead900480622dd1093be61a3a955488140b5a87d45c439adcc70ca11fe794f3492a2584348e34fb2fa7955766af13d33e406be230e01088c504cd960cd6c5252c0fa01fc2ad73d754c9149cdd42ce3484ab9deee76860a1ecfcb658ea7483c5972bb0fc2ea0d2ea9dc0d41c94f528df803bf87bdcaa7b0ff0854b1fa991704eac983c3ac1704fa16a8f62", 0xcb}, {&(0x7f0000000500)="1d4a", 0x2}], 0x3, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x48811}], 0x1, 0x4040040) 44.51990914s ago: executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9}) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) mknodat$loop(r2, &(0x7f0000002440)='./file0\x00', 0x0, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020}, 0x2020) creat(&(0x7f0000002380)='./file0\x00', 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0x0, 0xf238}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_GET_SYSNAME(r9, 0x4008556c, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000b000000", 0x30) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 41.378406584s ago: executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x4020940d, &(0x7f0000000340)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}) 40.583865397s ago: executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = epoll_create1(0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r1 = open(0x0, 0xa0ff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0xb0000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) r4 = semget$private(0x0, 0x2, 0x8) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff, 0x800}, {0x3, 0x1f, 0x1800}, {0x6, 0x222, 0x1400}, {0x0, 0x8, 0x1800}, {}], 0x5) semop(r4, &(0x7f0000000200), 0x53) semop(r4, &(0x7f0000000380)=[{0x0, 0x7d12, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) r5 = semget(0x2, 0x1, 0x142) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002d0010"], 0x44}}, 0x0) semctl$GETZCNT(r5, 0x3, 0xf, &(0x7f00000003c0)=""/236) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x3c}}, 0x0) 40.141286342s ago: executing program 3: close(0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x15b060}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x2fc, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 38.760943681s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000450000/0x2000)=nil, 0x2000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000429000/0x2000)=nil, 0x2000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400c00}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x50, r7, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x20}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff01}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8c0010ad3148b22000", @ANYRES16=r7, @ANYBLOB="08002bbd7000fedbdf25420000000c009900000000004a0000000a000600ffffffffffff00000a00060090828022d98000000a00060050505050505000000a00060008021100000000000a000600ec8065effc3000000a000600ffffffffffff00000a00060050505050505000000a00060050505050505000000a0006000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008012}, 0x20040050) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex, 0xffffffffffffffff, 0x13, 0x2004}, 0x20) recvmsg$can_bcm(r8, &(0x7f0000000680)={&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/181, 0xb5}, {&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000000a00)=""/130, 0x82}], 0x6, &(0x7f0000000b40)=""/202, 0xca}, 0x2) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000440)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x24, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x1, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000094000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/255, 0xff, 0x0, &(0x7f0000000100)=""/211, 0xd3}, &(0x7f0000000240)=0x40) 37.685082373s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000440)={0x152, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000f46220"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x19, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x707, 0x7800, 0x7, 0x8000, {{0x1f, 0x4, 0x0, 0x2d, 0x7c, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xec, 0x1, 0x2, [{@multicast1, 0x1c817bab}, {@broadcast, 0x8}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x800}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa0ea}]}, @rr={0x7, 0xf, 0x20, [@rand_addr=0x64010102, @broadcast, @multicast2]}, @ssrr={0x89, 0xf, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @noop, @generic={0x0, 0x3, "f6"}, @rr={0x7, 0x7, 0xbd, [@loopback]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x3c, 0x6a, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x800) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 36.760161383s ago: executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="030114006863c3000e358000ad000114000000320600ac141412e0000003808a8972bd0b72e410820c520f061fe4fd004b889430ebb52997e36e039b1c59f733b3e44929297d9250e4646d67d50261a67a34a09ed84b38fd1c2bd942fb1cf8a4a6999e"], 0x65dd}], 0x1}, 0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x1b81b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000e80)={'#! ', './file0'}, 0xb) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0xfffffffffffffdbf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000400)={0x0, 0x0, {0x7, 0x8, 0x1011, 0x0, 0x5, 0x0, 0x2, 0x6}}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 36.622073324s ago: executing program 4: socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0), &(0x7f0000000300)) prctl$PR_SET_TIMERSLACK(0x1d, 0xe4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 36.412659027s ago: executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) execve(0x0, 0x0, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x6, 0x0, 0x0, 0x0) 36.179194412s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x72, 0x0, &(0x7f0000001800)="baf3c5dae64928d1effff57f3b56d939332e238e06db22f30b0545a7aef423413d89a0d006bd213ea45b22c9c2e4d68c8ca759cb0f880ecc52e0966b31fbbd8be3ec355e16fb9c394d9d2fc300fe4f75a19da308dde5b99c546cbc13269c1835e98951abbe58bb2ba4e4fe2af92939c3eec7", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x72, 0x0, &(0x7f0000001800)="baf3c5dae64928d1effff57f3b56d939332e238e06db22f30b0545a7aef423413d89a0d006bd213ea45b22c9c2e4d68c8ca759cb0f880ecc52e0966b31fbbd8be3ec355e16fb9c394d9d2fc300fe4f75a19da308dde5b99c546cbc13269c1835e98951abbe58bb2ba4e4fe2af92939c3eec7", 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mknodat$null(r0, &(0x7f00000007c0)='./cgroup\x00', 0x8000, 0x103) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000001780)) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000016d3e00000000000100000850000007d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000016d3e00000000000100000850000007d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0xfffffffffffffffe) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c) close(r1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c00080001000220"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@none, 0x3f, 0x81, "ea4894", 0x400, 0x1, "eb919cddf70f514c04c61968e1aa121d89b5e7120a0dfe9d91665ba46ccbae013cd59487be81c2533d6f2fce00037ff495cdba628771dbc339a673fc1068e4dda0838386ffcf950b5e72273ad9c43af5534e606252f3307fec0036cff5c8c8b38e591a8fcfd33199fc4c15553fc58bffeb30339ccb70f2a5e27b2befb86df1c86d461e6d22875dbb62360bf7034b8db9b41ce7b43d8cb1d486197311ecb08cfa26290b994c2b3fcf775a365dcc0d8d53dc8b53879331b4ed26809574041cdb862d2df093f747cfbaecfe5be74e977bcf0a08083e4cf974a9fa3677415dd0a042a4509826e26a3916a1921109da640f7a"}, {@none, 0x8, 0xc0, "d93cbf", 0xe90, 0x6, "0180210654916bb4b9bffba0deeb6a8fe69a81d08d07262e3e7b6cfc925a2f9a2e98408f62c5f4aa67c2041575458a2851cab196af7dde774ba73991c6fd9b711e55b4abe7761d84a2a140bd3ed5c6db4d2358ad19628ecfaaf893f63df261c488db1b04121ca4c4a7edf146ba911f943c661699d0635621567dc9d743bc4bda785a1d60c55ddfcbf9f6cbe189e900a35649f8aeaedbc57953c08ce679f592139ec79b765cd4875daac596298a787764cc992de127d520f0d10b2a356657b1a95fc3bd10d0f4f16a54e007404835158b533273fb88ba7acb13a34e100403329ea5048745d7127b8c0e5021e3c078d72c"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x48, "1fe6a9", 0x1, 0x2, "f587bac33e44b08d4a4681d05fbad8729a078ee0460c978ebd65673cf055be56462bd88bef5d097770317c8073c38cb7681335a6252362da93806fa1b87100defe2eb4bfca7225e8d0e94cc1e9137407fa9a59facfccd17920454a2e587342eba4c827e1871375f4a605172a4f40436067893a5a695ac7434ba90d667bd2ec98b99033eb1f30e94c529787c9e5afe5aabb421c741b40938561e6d06198c27129c62236c4825abe1442d4bf3f105c52c4d85ec3d4987c84c5d431bd7e2047dcebf4b6e29abc5c30ea52170407fa15fccb667b9f9e74390f9d7fcae4d3ffa00e7047999ca4fd6e14ff6a5d1c8e54f76f32"}, {@any, 0x0, 0x3, "ee340e", 0x8, 0x5, "95b7a5828f85c528fd678fddd66fb57f9772f2cbe14dff1608b50bfdcda302fdcfe3e1802860ad6c3cc1aa16e3b3306f2b0b28216850cb6c37faa33229db13a175f64adcb598be2a549eb5dcb5ce6a6a1c4ef039a3457607558d2afb6ca7b986d9911d68ec5366cd3c57cc9d9e4570b7aed9cd1ebbac0ec3cc2066f63861a15db94df2f0703a5bd0f12af5f7c49976ef34e2483db455b3d512b20da2570d3c01d474b56635d1b4137c7f147a5250a8eb580f73b3741a55279b1755c85f3e2e4e1e437d27a7e4eb81c323a55dd4409c10b3b6d5db751f270886176acb233c46655b30d3276b1b0c30c52e75e678cc048b"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0xff, "bea1c2", 0xff, 0x9, "1338016bc27b7b743cc56f856e58f09e20f9c92de32934433074a9a1c3e0f2a9241ea32cbb88130f525f0432b4414ef9189fc0b5c618f6c7d110804473d13c538269994e4327fb4f3bcad62763d3aad4564d6225b9b8d20ef5762f4f73af182bf1bc9961440ecfc1f12a71668586cee1b4e8ef834189b9d043162a4dd1ef9fee1b9a634fddc8ade537d848574f384faeaea5de8386c39d586b5948b6a00afdf8969b8ff408205868d23a9853d41afd55b091f5df9813084b94caf13015e13818d6a1f40cf2b06cc765f5629b8096b73b9c24c7abef2d090ca8fd1da1fdee8d51d1b320ec89284d8b449b5a08eef0bec7"}, {@none, 0x1, 0x40, 'DUz', 0x0, 0x8, "86c942c788721109414560473b657df5b5f28c421d68dd2d4e8750d1846b19d3aa5d9878c8fdfb2bc4411225624e39408ef8b0736eda52ae35f8385c88b503d4f8976550eaf97624b3dc7be7aebda209b1d3c1dc0b595ff25cbacfded858af78d45d8467b266b044f83f3fedfd5293ced5523b18af8b22ac1c9d5b463960070269aeca43b9504005ac33180286c981fa95af57043bcfd9f02e7c2332fc77b0a3f471ca34ed682d924d910f16ac08b70e8029c021d0f8ec17f9b56505e2bce1a1503c08090196ecd18c265cfc483da050d5498d4d4e316902fd6a0be11cb284d7cea3a1cd50c79a3fdad138e4540f0d7c"}, {@any, 0x0, 0x0, "6ad3bf", 0x4, 0x8, "222d8f5caed1c9def33e344588aabc770e8de810c2225271924e56fa52124e86ae8379d79c0473aec38dfc8a90b7220b652ed8a349b75235fa2b6ffbd84b757bfad5517721ab9d5256bbf1a027194156332bfaf94ff3bba6393c89269feb4387791c906a7d81a20adf22385707929ff12f07d41dce6adad964523ba3e36f6bc77ed3d93fbc3134dc07946700fc6ee3d8ae2c55a56905a566608991c23d719a624ceb5fbb1f6287ce4eac3c620f833a88128d3ddd61dda811533976d1caf87b2f308dd1413e57a36c5074b47e715e35449f8dd9a083f7322cd2b82ca056d56529d3538ed5c6393c5d45d0bb9843a3737d"}]}}}, 0x6f6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@none, 0x3f, 0x81, "ea4894", 0x400, 0x1, "eb919cddf70f514c04c61968e1aa121d89b5e7120a0dfe9d91665ba46ccbae013cd59487be81c2533d6f2fce00037ff495cdba628771dbc339a673fc1068e4dda0838386ffcf950b5e72273ad9c43af5534e606252f3307fec0036cff5c8c8b38e591a8fcfd33199fc4c15553fc58bffeb30339ccb70f2a5e27b2befb86df1c86d461e6d22875dbb62360bf7034b8db9b41ce7b43d8cb1d486197311ecb08cfa26290b994c2b3fcf775a365dcc0d8d53dc8b53879331b4ed26809574041cdb862d2df093f747cfbaecfe5be74e977bcf0a08083e4cf974a9fa3677415dd0a042a4509826e26a3916a1921109da640f7a"}, {@none, 0x8, 0xc0, "d93cbf", 0xe90, 0x6, "0180210654916bb4b9bffba0deeb6a8fe69a81d08d07262e3e7b6cfc925a2f9a2e98408f62c5f4aa67c2041575458a2851cab196af7dde774ba73991c6fd9b711e55b4abe7761d84a2a140bd3ed5c6db4d2358ad19628ecfaaf893f63df261c488db1b04121ca4c4a7edf146ba911f943c661699d0635621567dc9d743bc4bda785a1d60c55ddfcbf9f6cbe189e900a35649f8aeaedbc57953c08ce679f592139ec79b765cd4875daac596298a787764cc992de127d520f0d10b2a356657b1a95fc3bd10d0f4f16a54e007404835158b533273fb88ba7acb13a34e100403329ea5048745d7127b8c0e5021e3c078d72c"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x48, "1fe6a9", 0x1, 0x2, "f587bac33e44b08d4a4681d05fbad8729a078ee0460c978ebd65673cf055be56462bd88bef5d097770317c8073c38cb7681335a6252362da93806fa1b87100defe2eb4bfca7225e8d0e94cc1e9137407fa9a59facfccd17920454a2e587342eba4c827e1871375f4a605172a4f40436067893a5a695ac7434ba90d667bd2ec98b99033eb1f30e94c529787c9e5afe5aabb421c741b40938561e6d06198c27129c62236c4825abe1442d4bf3f105c52c4d85ec3d4987c84c5d431bd7e2047dcebf4b6e29abc5c30ea52170407fa15fccb667b9f9e74390f9d7fcae4d3ffa00e7047999ca4fd6e14ff6a5d1c8e54f76f32"}, {@any, 0x0, 0x3, "ee340e", 0x8, 0x5, "95b7a5828f85c528fd678fddd66fb57f9772f2cbe14dff1608b50bfdcda302fdcfe3e1802860ad6c3cc1aa16e3b3306f2b0b28216850cb6c37faa33229db13a175f64adcb598be2a549eb5dcb5ce6a6a1c4ef039a3457607558d2afb6ca7b986d9911d68ec5366cd3c57cc9d9e4570b7aed9cd1ebbac0ec3cc2066f63861a15db94df2f0703a5bd0f12af5f7c49976ef34e2483db455b3d512b20da2570d3c01d474b56635d1b4137c7f147a5250a8eb580f73b3741a55279b1755c85f3e2e4e1e437d27a7e4eb81c323a55dd4409c10b3b6d5db751f270886176acb233c46655b30d3276b1b0c30c52e75e678cc048b"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0xff, "bea1c2", 0xff, 0x9, "1338016bc27b7b743cc56f856e58f09e20f9c92de32934433074a9a1c3e0f2a9241ea32cbb88130f525f0432b4414ef9189fc0b5c618f6c7d110804473d13c538269994e4327fb4f3bcad62763d3aad4564d6225b9b8d20ef5762f4f73af182bf1bc9961440ecfc1f12a71668586cee1b4e8ef834189b9d043162a4dd1ef9fee1b9a634fddc8ade537d848574f384faeaea5de8386c39d586b5948b6a00afdf8969b8ff408205868d23a9853d41afd55b091f5df9813084b94caf13015e13818d6a1f40cf2b06cc765f5629b8096b73b9c24c7abef2d090ca8fd1da1fdee8d51d1b320ec89284d8b449b5a08eef0bec7"}, {@none, 0x1, 0x40, 'DUz', 0x0, 0x8, "86c942c788721109414560473b657df5b5f28c421d68dd2d4e8750d1846b19d3aa5d9878c8fdfb2bc4411225624e39408ef8b0736eda52ae35f8385c88b503d4f8976550eaf97624b3dc7be7aebda209b1d3c1dc0b595ff25cbacfded858af78d45d8467b266b044f83f3fedfd5293ced5523b18af8b22ac1c9d5b463960070269aeca43b9504005ac33180286c981fa95af57043bcfd9f02e7c2332fc77b0a3f471ca34ed682d924d910f16ac08b70e8029c021d0f8ec17f9b56505e2bce1a1503c08090196ecd18c265cfc483da050d5498d4d4e316902fd6a0be11cb284d7cea3a1cd50c79a3fdad138e4540f0d7c"}, {@any, 0x0, 0x0, "6ad3bf", 0x4, 0x8, "222d8f5caed1c9def33e344588aabc770e8de810c2225271924e56fa52124e86ae8379d79c0473aec38dfc8a90b7220b652ed8a349b75235fa2b6ffbd84b757bfad5517721ab9d5256bbf1a027194156332bfaf94ff3bba6393c89269feb4387791c906a7d81a20adf22385707929ff12f07d41dce6adad964523ba3e36f6bc77ed3d93fbc3134dc07946700fc6ee3d8ae2c55a56905a566608991c23d719a624ceb5fbb1f6287ce4eac3c620f833a88128d3ddd61dda811533976d1caf87b2f308dd1413e57a36c5074b47e715e35449f8dd9a083f7322cd2b82ca056d56529d3538ed5c6393c5d45d0bb9843a3737d"}]}}}, 0x6f6) r2 = syz_open_dev$vcsu(&(0x7f0000000740), 0x795a, 0x24001) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000780), 0x4) (async) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000780), 0x4) 35.814459376s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) 35.609322645s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)={0x1, 0x2, [{}]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x84, 0x8}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x2) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x80, 0x1f4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x200) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newpolicy={0x2f8, 0x13, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x800, 0x4e22, 0x2, 0xa, 0x20, 0x10, 0x73}, {0x5, 0x2, 0x80000001, 0x5, 0x3c, 0x8000000000000001, 0xfffffffffffffff9, 0x6}, {0x9, 0x3, 0x401, 0x8000000000000000}, 0x4, 0x6e6bb0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x350759, 0x9}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@rand_addr=0x64010102, @in=@empty, @in6=@remote, 0x3c, 0x2, 0x0, 0x3502, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010102, @in6=@local, 0xff, 0x1, 0x0, 0x3503, 0xa, 0x2}]}, @sec_ctx={0x99, 0x8, {0x95, 0x8, 0x1, 0x9, 0x8d, "c17d95a75581e30bc3b3d7a459ee341b77b2f9e2bdab771aa40240d0689aa048d904b3e0df521b9b54dd1c4c884e65f11f1c6f0a28d28ff72f7155786b2c22cba0dd89ca3c8ce3617bd27571b03c7e4d87dbf59eedec633a645cd04f0b09537fa215d7d7b9e18558f9044afc0f52425de234375cecc409943f8c3e99fb2a85be014789a83c4bb3e538792e463c"}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @algo_crypt={0xe5, 0x2, {{'pcbc(fcrypt-generic)\x00'}, 0x4e8, "3edcdec1b3aca19564ab9be3e7246c2e554fdd6ad6a205a29be452eb9499c4d9cedb10ab70f7b5093a929cb78c17d9ac0c2f8e903f86d8b607c7d564c4fc9ac5bc797e37871e5991d96266476d60a0ea6206c68d52ee42061aa23a36bffe68f4b9352667531a2f3741d9ef740d5f394be291e7435ecd456bc3ab862cc28f155b6716441753ac1ff38a2af2f57d358a99c7e394b0e25a20ee8fdcb63aaa"}}]}, 0x2f8}}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x3, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x9c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fcntl$getflags(r7, 0x401) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r8, &(0x7f0000000640)=[{&(0x7f0000000000)="87", 0x1}, {0x0}], 0x2) 35.580728819s ago: executing program 0: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') lseek(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="4e84e5679f60"}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000001100)={'syz1\x00'}, 0x45c) r4 = dup(r1) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r5, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB], 0xe4}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3f022bbf"}, 0x0, 0x1, {0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x40000007}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) 35.349485709s ago: executing program 0: syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/bus/hdaudio', 0x48300, 0x100) fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x1b, &(0x7f00000001c0)={r4, 0x0, 0x2}, &(0x7f0000000200)=0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$MON_IOCH_MFLUSH(r10, 0x9205, 0x0) io_submit(r7, 0x2, &(0x7f0000000180)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x12}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x200, r6, &(0x7f00000003c0)="0267895d12e95b78f3e01499a1ce9834cb750638c0883dee6571c5d03ca3c186c4b5fd49bb74b1a4e3f652ac195cde9464666751324d5983bae5f18a59deb7e1931a261817ef843b51366e9f97d1f82dfc14a4c950f2d03208046edf2e1287d2da160bedc742b470c06420e7467ffc6db8b0751c44c6f899ee4d4afb393b8503c92d3075467f81012749a1b43d4a132b30e21b76d7d40b171b366b441845316804e77f7a7a2c51b66e6ca770dd040d57c02d0eb154024584133a2e988bedde5e5709713c305e999eadb0f15a4cf4bf1f8de30d863e94595f98d3c0895284f35e0583869f73d50d5ab13c817bb3876da7b48102b1", 0xf4, 0xffffffff, 0x0, 0x3, r10}]) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x9) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r5, 0x0, 0x0) 34.167176315s ago: executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000040c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x2}, {0xd}, {0x6}, [@mbim={0xc}]}}}}}]}}, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x4edf, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c03f92c0000000000000000000000000000000000000000000000000000000000000000000069d9bf8d8d908fa8f9c9fc0000000000000000000000000000000000000000000000000009000000000000000000000000000008"], 0xb8}}, 0x0) 33.864591766s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140020c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) fanotify_init(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000f40)={0x0, 0x0, 0x4, "dd304766"}, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000001380)={0x0, 0x2, 0x667}) madvise(&(0x7f000054a000/0x3000)=nil, 0x3000, 0x0) 31.073434858s ago: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_open_dev$vim2m(0x0, 0x40000000000c1, 0x2) (async) r0 = io_uring_setup(0x17c3, &(0x7f00000002c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) listen(0xffffffffffffffff, 0x7ffc) close_range(r0, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 30.09920018s ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28}, {0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f0000000440)=""/193, 0xc1}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x21, 0x6, "81e9887d1a240e519216f26f0c5d1957ea642cb58f7b4bae91a3623fd9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x128, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x100, 0x7, 0x1, 0x0, "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"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1c0}}, 0x0) 30.015062286s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) r3 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000080)=""/98) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x3, 0x2, 0x9, 0x20, 0x1, 0x80000001, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x8}, 0x48) 5.595905387s ago: executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000100)=@framed={{0x18, 0xa}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800058004"], 0x2c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000002c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x4c00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)="239124651f3f6e3130186e916428e49daf4075651fd900da0b568436263eff9a9b6cf51ce2946770995a285a2bd857ae507c88eb19dc37066932b963da40530368f3ceb74ec9100616eaedb023bdde77a3fe283bfda5a78858741fb6d2b23a9d7eaf93d6ebc82c243e96ae9f92b456e8e6a13659a7771e3f99d5cc965138ebf2a636f9a7451e0088b9914bfb5f21607c5136b75ba071fc8cf9537a061c484d55aedcf0b545f65279a5adf8a24c7abedc3e8cf95dba946414c74a1e0ffb3b7262c35ebb8baa4a43d597f1c5d27aac5e5899b809d0e0e5af6ce6e1692341e2c34743443269a81e4c8b58f3f02850345f30bebcb2157140a1e2", &(0x7f0000000340), 0xa7c, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'veth1_to_team\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x41, 0x41, 0xa, [@func, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "af"}, @var, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x66}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.055563783s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_seq', 0x161a82, 0xce) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000ac0)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b08346c060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a03000000000018001b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b412435139000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810ba2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e8134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b000000807ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2ca8378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed004000000b53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d050000002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54edc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a3b89f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d3560aba573bd16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22005b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db239dfe785b54c34a0a5db4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf4c807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9edbaaadaea56765404e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50b00", 0x1000}}, 0x1006) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x4, 0x1090, r1, 0x1ff, '\x00', 0x0, r3, 0x4, 0x80000000, 0x2, 0xb}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="e37a1ec806d6978ab9cdea7fad6938a8f22756d6c9ccf2397ddc3fb07cd9a7166f46304c9a2f81c81c39e58a64c3284cb04aa14cb9d4f5442f1f2f972e3425a16051d1a8319224d4f92f1868ba860123dd309d3150343447a71be9f11e2453fa59de9abcdd0ac7fb840c4b", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x267b}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000200)=0x1, 0x4) r7 = dup(r6) (async, rerun: 32) lseek(r6, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x8, 0x400007f, 0x20000000, 0x0, 0x3, "f06fc539471398450104773ea5b3e92dad434f", 0x4}) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c7a0dfcb9e367dd7440c7e286b5fc09b26cb9eecab35e9f103e4ebc6af1e190e303901f22888eebe61819812bfb0b073", @ANYRESOCT=r5, @ANYRES8], 0xb4}, 0x1, 0x0, 0x0, 0x44040015}, 0x4004) (async) sendto$inet(r8, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) write$UHID_INPUT(r7, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x4040ae79, 0x0) (async, rerun: 64) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x470) 0s ago: executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0), &(0x7f0000000300)) prctl$PR_SET_TIMERSLACK(0x1d, 0xe4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): imeout [ 1313.693638][T25852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.707612][T25852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.741223][T19247] Bluetooth: hci5: command tx timeout [ 1313.758630][T25854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.779568][T25881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.790613][T25881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.822691][T25852] team0: Port device team_slave_0 added [ 1313.886605][T25854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.928923][T25852] team0: Port device team_slave_1 added [ 1313.938946][T25851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.948601][ T5170] usb 2-1: USB disconnect, device number 31 [ 1313.956401][T25851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.965745][T25851] bridge_slave_0: entered allmulticast mode [ 1313.979075][T25851] bridge_slave_0: entered promiscuous mode [ 1313.996310][T25851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.010511][T25851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.020745][T25851] bridge_slave_1: entered allmulticast mode [ 1314.034158][T25851] bridge_slave_1: entered promiscuous mode [ 1314.188636][T25854] team0: Port device team_slave_0 added [ 1314.208784][T25852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.218067][T25852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.249184][T25852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.425114][T15899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.482453][T25854] team0: Port device team_slave_1 added [ 1314.538934][T25852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.558126][T25852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.597394][T25852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.642578][T25851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.734822][T25918] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1314.777725][T15899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.824660][T25854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.835227][T25854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.871871][T25854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.892041][T25851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.940702][T25854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.960779][T25854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.997095][T25854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.083047][T15899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.187244][T25852] hsr_slave_0: entered promiscuous mode [ 1315.204414][T25852] hsr_slave_1: entered promiscuous mode [ 1315.219951][T25852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.229003][T25852] Cannot create hsr debugfs directory [ 1315.272148][T15899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.294158][T25851] team0: Port device team_slave_0 added [ 1315.304346][T25851] team0: Port device team_slave_1 added [ 1315.403016][T25851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.410131][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.437157][T25851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.519515][T25851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.550837][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.595181][T25851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.661387][T19247] Bluetooth: hci2: command tx timeout [ 1315.665652][T25854] hsr_slave_0: entered promiscuous mode [ 1315.682822][T25854] hsr_slave_1: entered promiscuous mode [ 1315.690668][T25854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.708441][T25854] Cannot create hsr debugfs directory [ 1315.714623][T25847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1315.731961][T25847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1315.740483][T25847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1315.747822][T19207] Bluetooth: hci0: command tx timeout [ 1315.762022][T19207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1315.769892][T19207] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1315.778207][T19207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1315.822240][T19207] Bluetooth: hci5: command tx timeout [ 1315.892198][T25937] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1316.032789][T25935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1316.052664][T25851] hsr_slave_0: entered promiscuous mode [ 1316.060750][T25851] hsr_slave_1: entered promiscuous mode [ 1316.078267][T25851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1316.087317][T25851] Cannot create hsr debugfs directory [ 1316.255880][T15899] bridge_slave_1: left allmulticast mode [ 1316.265226][T15899] bridge_slave_1: left promiscuous mode [ 1316.272313][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.281703][T15899] bridge_slave_0: left allmulticast mode [ 1316.287377][T15899] bridge_slave_0: left promiscuous mode [ 1316.294040][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.309159][T15899] bridge_slave_1: left allmulticast mode [ 1316.315298][T15899] bridge_slave_1: left promiscuous mode [ 1316.321314][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.330369][T15899] bridge_slave_0: left allmulticast mode [ 1316.336315][T15899] bridge_slave_0: left promiscuous mode [ 1316.342286][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.902952][ T5161] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1317.071033][ T5161] usb 2-1: device descriptor read/64, error -71 [ 1317.267822][T15899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.292115][T15899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.313996][T15899] bond0 (unregistering): Released all slaves [ 1317.351222][ T5161] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1317.523771][ T5161] usb 2-1: device descriptor read/64, error -71 [ 1317.569372][T15899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.599909][T15899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.621628][T15899] bond0 (unregistering): Released all slaves [ 1317.649935][ T5161] usb usb2-port1: attempt power cycle [ 1317.742646][T19207] Bluetooth: hci2: command tx timeout [ 1317.821111][T19207] Bluetooth: hci3: command tx timeout [ 1317.837335][T19247] Bluetooth: hci0: command tx timeout [ 1317.901260][T19247] Bluetooth: hci5: command tx timeout [ 1318.071531][ T5161] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1318.132452][ T5161] usb 2-1: device descriptor read/8, error -71 [ 1318.412287][ T5161] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1318.460638][ T5161] usb 2-1: device descriptor read/8, error -71 [ 1318.591242][ T5161] usb usb2-port1: unable to enumerate USB device [ 1318.960506][T15899] hsr_slave_0: left promiscuous mode [ 1319.000288][T15899] hsr_slave_1: left promiscuous mode [ 1319.007538][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.028209][T15899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.037355][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.051340][T15899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.073592][T15899] hsr_slave_0: left promiscuous mode [ 1319.079612][T15899] hsr_slave_1: left promiscuous mode [ 1319.086296][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.102870][T15899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.121395][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.128997][T15899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.191595][T15899] veth1_macvtap: left promiscuous mode [ 1319.197283][T15899] veth0_macvtap: left promiscuous mode [ 1319.203606][T15899] veth1_vlan: left promiscuous mode [ 1319.208988][T15899] veth0_vlan: left promiscuous mode [ 1319.216215][T15899] veth1_macvtap: left promiscuous mode [ 1319.222214][T15899] veth0_macvtap: left promiscuous mode [ 1319.228471][T15899] veth1_vlan: left promiscuous mode [ 1319.237094][T15899] veth0_vlan: left promiscuous mode [ 1319.901298][T19247] Bluetooth: hci3: command tx timeout [ 1320.134285][T15899] team0 (unregistering): Port device team_slave_1 removed [ 1320.204716][T15899] team0 (unregistering): Port device team_slave_0 removed [ 1321.526139][T15899] team0 (unregistering): Port device team_slave_1 removed [ 1321.577306][T15899] team0 (unregistering): Port device team_slave_0 removed [ 1321.987685][T19247] Bluetooth: hci3: command tx timeout [ 1322.138782][T25933] chnl_net:caif_netlink_parms(): no params data found [ 1322.159687][T25984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1322.540712][T25933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.562532][T25933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.569867][T25933] bridge_slave_0: entered allmulticast mode [ 1322.580699][T25933] bridge_slave_0: entered promiscuous mode [ 1322.598984][T25933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.614326][T25933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.631197][T25933] bridge_slave_1: entered allmulticast mode [ 1322.661508][T25933] bridge_slave_1: entered promiscuous mode [ 1322.692509][T25852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1322.713344][T25852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1322.836639][T25933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.855501][T25852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1322.885860][T25933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.897175][T25852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1322.935453][ T5161] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1323.037325][T25933] team0: Port device team_slave_0 added [ 1323.056505][T25933] team0: Port device team_slave_1 added [ 1323.147720][ T5161] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1323.167904][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.200717][ T5161] usb 2-1: config 0 descriptor?? [ 1323.292575][T25933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.303634][T25933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.333797][T25933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.376847][T25933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.408332][T25933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.464556][T25933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.608780][T25933] hsr_slave_0: entered promiscuous mode [ 1323.622808][T25933] hsr_slave_1: entered promiscuous mode [ 1323.629372][T25933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.641045][T25933] Cannot create hsr debugfs directory [ 1323.895647][ T5161] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1323.916629][ T5161] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1323.943713][ T5161] usb 2-1: USB disconnect, device number 36 [ 1323.977249][T15899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.071108][T19247] Bluetooth: hci3: command tx timeout [ 1324.134541][T25854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1324.185389][T15899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.226606][T25854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1324.327888][T25854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1324.363920][T15899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.398210][T25854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1324.605101][T15899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.615234][T26026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.643410][T26025] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1324.827583][T25852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.953621][T25852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.023498][T21640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.030668][T21640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.051962][T15899] bridge_slave_1: left allmulticast mode [ 1325.057773][T15899] bridge_slave_1: left promiscuous mode [ 1325.063916][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.074473][T15899] bridge_slave_0: left allmulticast mode [ 1325.080134][T15899] bridge_slave_0: left promiscuous mode [ 1325.088821][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.598500][T15899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.619330][T15899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.631235][T15899] bond0 (unregistering): Released all slaves [ 1325.644136][T26036] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1325.709070][T21640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.716291][T21640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.931911][T25851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1326.004289][T25851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1326.059982][T25851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1326.149460][T25851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1326.188476][T25854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.235766][T15899] hsr_slave_0: left promiscuous mode [ 1326.249504][T15899] hsr_slave_1: left promiscuous mode [ 1326.257852][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.269704][T15899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.284053][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.292799][T15899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.327468][T15899] veth1_macvtap: left promiscuous mode [ 1326.333441][T15899] veth0_macvtap: left promiscuous mode [ 1326.339217][T15899] veth1_vlan: left promiscuous mode [ 1326.346888][T15899] veth0_vlan: left promiscuous mode [ 1326.456828][T26039] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1326.987718][T15899] team0 (unregistering): Port device team_slave_1 removed [ 1327.033655][T15899] team0 (unregistering): Port device team_slave_0 removed [ 1327.287604][T26038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.700625][T25854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.746408][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.753649][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.770207][T25852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.853098][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.860404][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.043743][T25851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.189472][T25852] veth0_vlan: entered promiscuous mode [ 1328.195669][ T5164] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1328.261904][T25933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.302217][T25933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1328.330071][T25851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.358290][T25933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1328.389039][T25852] veth1_vlan: entered promiscuous mode [ 1328.409891][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 1328.424200][T25933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.427195][ T5164] usb 2-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 1328.453630][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.460839][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.487618][ T5164] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1328.517960][ T5164] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1328.538270][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.583771][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.591057][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.774194][T25852] veth0_macvtap: entered promiscuous mode [ 1328.797066][ T5166] usb 2-1: USB disconnect, device number 37 [ 1328.837299][T25851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1328.859039][T25854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.881061][T25852] veth1_macvtap: entered promiscuous mode [ 1329.020263][T25852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.035491][T25852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.045869][T25852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.056405][T25852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.068369][T25852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.122223][T25852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.134639][T25852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.145896][T25852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.157799][T25852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.169582][T25852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.216368][T25851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.235011][T25933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.249113][T25852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.259532][T25852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.275980][T25852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.286600][T25852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.359155][T25854] veth0_vlan: entered promiscuous mode [ 1329.416054][T25933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.465962][T25854] veth1_vlan: entered promiscuous mode [ 1329.496815][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.504092][T17694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.547961][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.555169][T17694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.698449][T15887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.718923][T15887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.781998][T25851] veth0_vlan: entered promiscuous mode [ 1329.896976][T15899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.932190][T15899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.955763][T25851] veth1_vlan: entered promiscuous mode [ 1330.095981][T25854] veth0_macvtap: entered promiscuous mode [ 1330.142390][T25854] veth1_macvtap: entered promiscuous mode [ 1330.258249][T25933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.315960][T25851] veth0_macvtap: entered promiscuous mode [ 1330.349370][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.373053][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.384456][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.422440][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.456172][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.489322][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.508943][T25854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.526726][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.537663][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.549870][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.560680][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.570777][T25854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.585155][T25854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.598931][T25854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.623133][T25851] veth1_macvtap: entered promiscuous mode [ 1330.677887][T25854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.712689][T25854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.735105][T25854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.758201][T25854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.003727][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.024533][ T5166] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 1331.031010][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.050934][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.060826][T26104] ucma_write: process 124 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. [ 1331.071735][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.091104][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.111216][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.132031][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.160925][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.179571][T25851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.209923][T26103] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1331.259396][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.284497][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.313030][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.330275][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.348240][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.359662][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.375740][T25851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.389400][T25851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.410240][T25851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.426930][T26118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.426989][T25933] veth0_vlan: entered promiscuous mode [ 1331.461468][T26114] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1331.462976][T25851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.484921][T25851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.497395][T25851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.522236][T25851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.593183][T25933] veth1_vlan: entered promiscuous mode [ 1331.606373][T15887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.639868][T15887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.736547][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.765400][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.796267][T25933] veth0_macvtap: entered promiscuous mode [ 1331.865559][T25933] veth1_macvtap: entered promiscuous mode [ 1331.901319][ T5170] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1331.936798][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.958979][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.977147][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.011704][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.030984][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.051032][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.070967][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.088309][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.109778][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.122860][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.133115][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.141727][ T5170] usb 2-1: Using ep0 maxpacket: 32 [ 1332.144300][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.167170][T25933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.175089][ T5170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1332.217436][ T5170] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1332.259759][ T5170] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1332.264324][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.274574][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.311076][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.330254][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.330544][ T5170] usb 2-1: Product: syz [ 1332.357453][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.360773][ T5170] usb 2-1: Manufacturer: syz [ 1332.381992][ T5170] usb 2-1: SerialNumber: syz [ 1332.384515][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.420603][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.430622][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.441195][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.451087][T25933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.477870][T25933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.503060][T25933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.542072][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.581011][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.615312][ T5170] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1332.620009][T25933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.657450][T25933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.671038][ T5229] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1332.707705][T25933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.735316][T25933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.901119][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 1332.925568][ T5229] usb 3-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 1332.990390][ T5229] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1333.059274][ T5229] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1333.095547][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.226016][ T5170] usb 2-1: USB disconnect, device number 38 [ 1333.288470][ T5170] usblp0: removed [ 1333.359323][ T8] usb 3-1: USB disconnect, device number 84 [ 1333.570084][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.597977][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.782254][T15899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.968888][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.012056][T26176] sg_write: data in/out 875837202/120 bytes for SCSI command 0x0-- guessing data in; [ 1334.012056][T26176] program syz-executor.4 not setting count and/or reply_len properly [ 1334.040438][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.106563][T26182] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1334.147190][T15899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.211792][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1334.232112][T26176] nlmon0: entered promiscuous mode [ 1334.251048][T26176] nlmon0: entered allmulticast mode [ 1334.295604][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1334.308622][T26178] nlmon0: left promiscuous mode [ 1334.323758][T26178] nlmon0: left allmulticast mode [ 1334.433639][T15899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.597815][T15899] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.735321][T19207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1334.750145][T19207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1334.759238][T19207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1334.770415][T19207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1334.780227][T19207] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1334.813569][T19207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1334.865897][T12231] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 1335.012833][ T29] audit: type=1326 audit(1719130602.551:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.039141][T26206] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1335.165139][ T29] audit: type=1326 audit(1719130602.571:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0f3e7bca0 code=0x7ffc0000 [ 1335.216188][T15899] bridge_slave_1: left allmulticast mode [ 1335.242136][T15899] bridge_slave_1: left promiscuous mode [ 1335.248013][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.269585][ T29] audit: type=1326 audit(1719130602.571:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.315279][ T29] audit: type=1326 audit(1719130602.571:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.320925][T15899] bridge_slave_0: left allmulticast mode [ 1335.339133][ T29] audit: type=1326 audit(1719130602.571:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.387610][ T29] audit: type=1326 audit(1719130602.571:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.437203][ T29] audit: type=1326 audit(1719130602.601:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.460587][ T5170] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1335.501352][T15899] bridge_slave_0: left promiscuous mode [ 1335.503171][ T29] audit: type=1326 audit(1719130602.601:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.536954][ T29] audit: type=1326 audit(1719130602.601:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.544189][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.604789][ T29] audit: type=1326 audit(1719130602.601:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa0f3e7d0a9 code=0x7ffc0000 [ 1335.692607][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 1335.713161][ T5170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.733283][ T5170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1335.755720][ T5170] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1335.814572][ T5170] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1335.840845][ T5170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.869447][ T5170] usb 3-1: Product: syz [ 1335.892445][ T5170] usb 3-1: Manufacturer: syz [ 1335.897161][ T5170] usb 3-1: SerialNumber: syz [ 1335.934743][ T5170] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 1335.953095][ T5170] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1335.964618][ T5170] cdc_ncm 3-1:1.0: bind() failure [ 1336.145367][T26210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.234300][T26210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.493887][ T7957] usb 3-1: USB disconnect, device number 85 [ 1336.891058][T12231] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1336.942267][T19207] Bluetooth: hci2: command tx timeout [ 1337.102400][T12231] usb 5-1: Using ep0 maxpacket: 8 [ 1337.152199][T12231] usb 5-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 1337.170189][T15899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.171577][T12231] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1337.212522][T12231] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1337.224278][T12231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.245392][T15899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.292204][T15899] bond0 (unregistering): Released all slaves [ 1337.335798][T26215] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1337.355745][T26215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1337.455444][ T7957] usb 5-1: USB disconnect, device number 66 [ 1337.481029][T12231] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1337.635361][T26263] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1337.724026][T12231] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1337.753741][T12231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.782243][T12231] usb 3-1: Product: syz [ 1337.789610][T12231] usb 3-1: Manufacturer: syz [ 1337.806018][T12231] usb 3-1: SerialNumber: syz [ 1337.822820][T26270] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1337.841977][T12231] usb 3-1: config 0 descriptor?? [ 1338.093367][T12231] usb 3-1: USB disconnect, device number 86 [ 1338.218579][T15899] hsr_slave_0: left promiscuous mode [ 1338.259963][T15899] hsr_slave_1: left promiscuous mode [ 1338.279716][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.292210][T15899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.311005][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.324714][T15899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.363823][T15899] veth1_macvtap: left promiscuous mode [ 1338.374017][T15899] veth0_macvtap: left promiscuous mode [ 1338.386522][T15899] veth1_vlan: left promiscuous mode [ 1338.401189][T15899] veth0_vlan: left promiscuous mode [ 1339.023678][T19207] Bluetooth: hci2: command tx timeout [ 1339.081608][T17694] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1339.376837][T15899] team0 (unregistering): Port device team_slave_1 removed [ 1339.429812][T15899] team0 (unregistering): Port device team_slave_0 removed [ 1339.821340][T12231] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1340.039358][T12231] usb 5-1: Using ep0 maxpacket: 32 [ 1340.058827][T12231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.078701][T12231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1340.089326][T12231] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.169766][T12231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.181066][T12231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.195244][T12231] usb 5-1: Product: syz [ 1340.208358][T12231] usb 5-1: Manufacturer: syz [ 1340.219915][T12231] usb 5-1: SerialNumber: syz [ 1340.246698][T12231] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 1340.253802][T12231] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1340.269707][T12231] cdc_ncm 5-1:1.0: bind() failure [ 1340.488377][T26307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.532203][T26307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.804432][T26333] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1340.845199][T26203] chnl_net:caif_netlink_parms(): no params data found [ 1340.944356][ T8] usb 5-1: USB disconnect, device number 67 [ 1340.964602][T26340] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1341.101380][T19207] Bluetooth: hci2: command tx timeout [ 1341.409255][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1341.409276][ T29] audit: type=1326 audit(1719130608.931:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26342 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0c647d0a9 code=0x0 [ 1341.561501][T26359] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1341.638706][T26359] gretap0: entered promiscuous mode [ 1341.688671][T26361] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1341.730795][T26361] 0猉功D: renamed from gretap0 [ 1341.740709][T26367] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1341.766399][T26361] 0猉功D: left promiscuous mode [ 1341.776425][T26361] 0猉功D: entered allmulticast mode [ 1341.789397][T26361] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1341.813417][T26203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.828800][T26203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.864277][T26203] bridge_slave_0: entered allmulticast mode [ 1341.911585][T26203] bridge_slave_0: entered promiscuous mode [ 1341.959688][T26203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.987614][T26203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.011594][T26203] bridge_slave_1: entered allmulticast mode [ 1342.043547][T26203] bridge_slave_1: entered promiscuous mode [ 1342.198403][T26203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.211578][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1342.240221][T26203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.555102][T26203] team0: Port device team_slave_0 added [ 1342.620284][T26203] team0: Port device team_slave_1 added [ 1342.810696][T26203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.878639][T26203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.911353][T26203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.988364][T26203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.018432][T26203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.056713][T26203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.181745][T19207] Bluetooth: hci2: command tx timeout [ 1343.235674][T26203] hsr_slave_0: entered promiscuous mode [ 1343.243577][T26203] hsr_slave_1: entered promiscuous mode [ 1343.262460][T26203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1343.270146][T26203] Cannot create hsr debugfs directory [ 1343.959219][T26423] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1343.978066][T26427] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1344.628715][T26203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1344.684607][T26203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1344.717241][T26203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1344.751184][T26203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1344.781922][ T29] audit: type=1326 audit(1719130612.311:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26441 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0c647d0a9 code=0x0 [ 1345.063031][T26457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.095949][T26457] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1345.197442][T26203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.270528][T26203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.348467][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.355652][T17694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.411514][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.418725][T17694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.445557][ T29] audit: type=1800 audit(1719130612.981:1300): pid=26470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1345.738796][T26203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.952080][T26203] veth0_vlan: entered promiscuous mode [ 1345.992633][T26203] veth1_vlan: entered promiscuous mode [ 1346.082273][T26203] veth0_macvtap: entered promiscuous mode [ 1346.125104][T26203] veth1_macvtap: entered promiscuous mode [ 1346.191130][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.228180][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.261296][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.293696][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.304266][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.316144][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.328802][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.345159][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.359024][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.376026][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.407171][T26203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.465054][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.506585][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.539956][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.599745][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.658292][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.713073][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.738059][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.754153][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.764695][T26203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.775421][T26203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.811681][T26203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.884007][T26203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.913466][T26203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.958246][T26203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.995962][T26203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.141942][T26504] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1347.275171][ T8] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1347.448424][T15895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.472074][T15895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.561227][ T8] usb 2-1: config 0 has no interfaces? [ 1347.605476][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1347.638877][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1347.642724][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.674963][ T8] usb 2-1: SerialNumber: syz [ 1347.680219][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.704692][ T8] usb 2-1: config 0 descriptor?? [ 1347.718438][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1348.767916][T15885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.192786][T15885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.220688][T26545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1349.443635][T15885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.698805][T15885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.878614][T17694] usb 2-1: USB disconnect, device number 39 [ 1350.051120][T19247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1350.063016][T19247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1350.075451][T19247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1350.093118][T19247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1350.102115][T19247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1350.112141][T19247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1350.371831][ T5229] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1350.416676][T15885] bridge_slave_1: left allmulticast mode [ 1350.451134][T15885] bridge_slave_1: left promiscuous mode [ 1350.465013][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.502747][T15885] bridge_slave_0: left allmulticast mode [ 1350.530461][T15885] bridge_slave_0: left promiscuous mode [ 1350.547250][T26578] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1350.547453][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.603327][ T5229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.628430][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1350.658003][ T5229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1350.725889][ T5229] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1350.754477][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.791344][T26562] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.819847][ T5229] hub 5-1:1.0: bad descriptor, ignoring hub [ 1350.841855][ T5229] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1350.870480][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 1350.894650][ T5229] cdc_wdm 5-1:1.0: skipping garbage [ 1350.919381][ T5229] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1350.962817][ T5229] cdc_wdm 5-1:1.0: Unknown control protocol [ 1351.081170][T17694] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1351.228372][ C1] wdm_int_callback: 4 callbacks suppressed [ 1351.228400][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.240868][ C1] wdm_int_callback: 4 callbacks suppressed [ 1351.240886][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.253031][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.259653][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.266025][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.272624][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.278907][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.281174][T17694] usb 4-1: device descriptor read/64, error -71 [ 1351.285505][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.285762][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.304490][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.310924][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.317537][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.323872][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.330506][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.336780][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.343384][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.349676][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.356284][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.362679][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1351.369272][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1351.510629][T26562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.546666][T26562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.739182][ T5170] usb 5-1: USB disconnect, device number 68 [ 1351.762030][T17694] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1351.949982][T17694] usb 4-1: device descriptor read/64, error -71 [ 1352.071883][T17694] usb usb4-port1: attempt power cycle [ 1352.302965][T19247] Bluetooth: hci5: command tx timeout [ 1352.437827][T15885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.467943][T15885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.489156][T15885] bond0 (unregistering): Released all slaves [ 1352.511050][T17694] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1352.571323][T17694] usb 4-1: device descriptor read/8, error -71 [ 1352.881270][T17694] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1352.923207][T17694] usb 4-1: device descriptor read/8, error -71 [ 1353.051456][T17694] usb usb4-port1: unable to enumerate USB device [ 1353.439685][T15885] hsr_slave_0: left promiscuous mode [ 1353.475314][T15885] hsr_slave_1: left promiscuous mode [ 1353.500578][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.527098][T15885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.556422][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.592467][T15885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.766571][T15885] veth1_macvtap: left promiscuous mode [ 1353.788215][T15885] veth0_macvtap: left promiscuous mode [ 1353.822127][T15885] veth1_vlan: left promiscuous mode [ 1353.870735][T15885] veth0_vlan: left promiscuous mode [ 1354.041252][ T5170] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1354.111791][ T5168] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1354.261601][ T5170] usb 4-1: config 0 has no interfaces? [ 1354.282838][ T5170] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1354.317548][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1354.324399][ T5168] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1354.363434][ T5170] usb 4-1: SerialNumber: syz [ 1354.371262][ T5168] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1354.386032][ T5170] usb 4-1: config 0 descriptor?? [ 1354.391336][T19247] Bluetooth: hci5: command tx timeout [ 1354.404746][ T5168] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1354.426503][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.488681][T26648] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1354.881053][ T5168] usb 5-1: USB disconnect, device number 69 [ 1355.689997][T26654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1355.783766][T15885] team0 (unregistering): Port device team_slave_1 removed [ 1355.872812][T26658] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1355.940990][T15885] team0 (unregistering): Port device team_slave_0 removed [ 1356.463944][T19247] Bluetooth: hci5: command tx timeout [ 1356.605754][T17694] usb 4-1: USB disconnect, device number 46 [ 1356.819203][T26664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.132761][T26642] pimreg: entered allmulticast mode [ 1357.138223][T26642] pimreg: left allmulticast mode [ 1357.343022][T26565] chnl_net:caif_netlink_parms(): no params data found [ 1357.802204][T26565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.824707][T26565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.832087][ T7957] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1357.857955][T26565] bridge_slave_0: entered allmulticast mode [ 1357.880283][T26565] bridge_slave_0: entered promiscuous mode [ 1357.908592][T26565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.926955][T26565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.956758][T26565] bridge_slave_1: entered allmulticast mode [ 1357.977428][T26565] bridge_slave_1: entered promiscuous mode [ 1358.001290][ T7957] usb 2-1: device descriptor read/64, error -71 [ 1358.096911][T26565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.167528][T26565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.272476][ T29] audit: type=1326 audit(1719130625.811:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.311354][ T7957] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1358.361842][T26565] team0: Port device team_slave_0 added [ 1358.381684][ T29] audit: type=1326 audit(1719130625.811:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.409188][T26565] team0: Port device team_slave_1 added [ 1358.486266][ T29] audit: type=1326 audit(1719130625.861:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.501237][ T7957] usb 2-1: device descriptor read/64, error -71 [ 1358.541561][T19247] Bluetooth: hci5: command tx timeout [ 1358.569323][ T29] audit: type=1326 audit(1719130625.861:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.662723][T26565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.690959][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.708852][ T29] audit: type=1326 audit(1719130625.861:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.753352][ T7957] usb usb2-port1: attempt power cycle [ 1358.841219][ T29] audit: type=1326 audit(1719130625.901:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.872046][T26565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.878114][ T29] audit: type=1326 audit(1719130625.901:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.975730][T26565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.981307][ T29] audit: type=1326 audit(1719130625.901:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1358.991093][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.081759][T26565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.090768][ T29] audit: type=1326 audit(1719130625.901:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1359.193471][ T29] audit: type=1326 audit(1719130625.901:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f135a67d0a9 code=0x7ffc0000 [ 1359.221793][ T7957] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1359.264427][ T7957] usb 2-1: device descriptor read/8, error -71 [ 1359.317553][T26565] hsr_slave_0: entered promiscuous mode [ 1359.338229][T26565] hsr_slave_1: entered promiscuous mode [ 1359.366318][T26565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.375019][T26565] Cannot create hsr debugfs directory [ 1359.561033][ T7957] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1359.603556][ T7957] usb 2-1: device descriptor read/8, error -71 [ 1359.741013][T19247] Bluetooth: hci2: command 0x0406 tx timeout [ 1359.756536][ T7957] usb usb2-port1: unable to enumerate USB device [ 1360.039242][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1360.865778][T26565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1360.957338][T26565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1361.048735][T26742] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1361.073775][T26565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1361.150982][ T7957] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1361.189467][T26565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.390586][ T7957] usb 2-1: config 0 has no interfaces? [ 1361.454522][ T7957] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1361.478871][T26744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1361.501430][ T7957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1361.537344][ T7957] usb 2-1: SerialNumber: syz [ 1361.566629][ T7957] usb 2-1: config 0 descriptor?? [ 1361.727396][T26565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.810509][T26565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.847499][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.854825][T17694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.937162][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.944362][T17694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.308940][T26565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.591840][T26565] veth0_vlan: entered promiscuous mode [ 1362.662052][T26565] veth1_vlan: entered promiscuous mode [ 1362.721286][T12231] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1362.759786][T26565] veth0_macvtap: entered promiscuous mode [ 1362.792689][T26565] veth1_macvtap: entered promiscuous mode [ 1362.855143][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.867972][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.896292][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.908861][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.919517][T12231] usb 5-1: Using ep0 maxpacket: 8 [ 1362.928858][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.945359][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.956345][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.968089][T12231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1362.978736][T12231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1362.990379][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.002046][T12231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1363.015904][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.031259][T12231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.045899][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.062249][T12231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1363.077265][T26565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.085975][T12231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.115178][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.141677][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.157811][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.203516][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.215760][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.228154][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.238704][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.251300][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.267811][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.279149][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.292392][T26565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.305866][T12231] usb 5-1: GET_CAPABILITIES returned 0 [ 1363.330077][T12231] usbtmc 5-1:16.0: can't read capabilities [ 1363.353600][T26565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.397579][T26565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.416123][T26565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.427854][T26565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.461300][ T5168] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1363.531243][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.544951][T26781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.568199][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.576712][T26781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.617297][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.635089][T26781] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1363.659917][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.667900][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 1363.683327][ T5168] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1363.718417][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.734687][ T5168] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1363.766712][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.766889][T26784] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1363.792621][ T5168] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1363.805301][ T5170] usb 2-1: USB disconnect, device number 44 [ 1363.823340][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.884218][ T5168] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.899929][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.916891][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.933329][ T5168] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1363.943345][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1363.957361][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.975737][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.991681][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.000098][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.015956][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.046171][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.072676][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.089240][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.097534][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.108574][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.159194][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.165686][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.185738][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.221458][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.261422][ T5168] usb 4-1: GET_CAPABILITIES returned 0 [ 1364.271045][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.279813][ T5168] usbtmc 4-1:16.0: can't read capabilities [ 1364.299179][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.333793][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.358977][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.388265][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.425727][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.481134][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.511201][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.531773][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.546508][T26783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.561495][T26783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.580436][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.584322][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.619779][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.643555][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.657979][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.677517][T26783] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1364.681948][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.712111][T12231] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1364.725775][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.746126][T12231] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1364.767404][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.786590][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1364.819707][T26798] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1364.834315][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.860576][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.888062][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.913748][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.927918][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.936506][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.944568][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.963932][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1364.986163][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.050740][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.069742][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.094548][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.114173][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.124856][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.136221][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.144238][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.153593][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.188718][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.197199][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.204885][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.222076][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.229843][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.242223][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.270575][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.301956][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.339915][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.399030][ T5166] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1365.411011][ T5166] hid-generic 0000:0000:0000.0042: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1365.828594][T26815] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1366.421930][ T5170] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1366.480476][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1366.631260][ T5170] usb 2-1: Using ep0 maxpacket: 32 [ 1366.649835][ T5170] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 38, changing to 9 [ 1366.671312][ T5170] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1366.681670][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.721994][ T5170] hub 2-1:4.0: bad descriptor, ignoring hub [ 1366.734601][ T5170] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1366.744328][ T5170] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1367.003643][T26820] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1367.071124][ T7957] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1367.092953][T26820] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1367.272933][ T7957] usb 3-1: Using ep0 maxpacket: 8 [ 1367.282055][ T7957] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1367.301019][ T7957] usb 3-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 1367.331815][ T7957] usb 3-1: config 179 has no interface number 0 [ 1367.338857][ T7957] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1367.355672][ T7957] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1367.368613][ T7957] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1367.382962][ T7957] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1367.392620][ T7957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.413295][T26831] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1367.741867][ T5229] usb 3-1: USB disconnect, device number 88 [ 1367.775657][ T7957] usb 2-1: USB disconnect, device number 45 [ 1368.942871][T26781] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 1369.042864][ T8] usb 5-1: USB disconnect, device number 70 [ 1369.121345][ T785] usb 4-1: USB disconnect, device number 47 [ 1369.286879][T26862] netlink: 828 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1370.191114][ T5229] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1370.425154][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 1370.468772][ T5229] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1370.499761][ T5229] usb 3-1: config 179 has no interface number 0 [ 1370.521938][ T5229] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1370.564638][ T5229] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1370.608073][ T5229] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1370.636091][ T5229] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1370.648903][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.666343][T26881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1370.804871][T17694] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1370.916144][ T5229] usb 3-1: USB disconnect, device number 89 [ 1370.918625][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1370.989368][T26898] macvlan0: entered allmulticast mode [ 1371.005000][T26898] veth1_vlan: entered allmulticast mode [ 1371.041856][T17694] usb 5-1: Using ep0 maxpacket: 8 [ 1371.059709][T17694] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1371.079557][T17694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1371.104976][T17694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1371.125834][T17694] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.159567][T17694] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1371.181476][T17694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.415481][T17694] usb 5-1: GET_CAPABILITIES returned 0 [ 1371.437787][T17694] usbtmc 5-1:16.0: can't read capabilities [ 1371.607265][T26917] batadv0: entered allmulticast mode [ 1371.615665][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1371.653665][T26917] syzkaller0: entered allmulticast mode [ 1371.655903][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.668079][T26891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.715295][T26891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.718584][T26917] syzkaller0 (unregistering): left allmulticast mode [ 1371.737966][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.756919][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.780992][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.803552][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.847411][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.888580][T26928] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1371.899106][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.935265][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.970791][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1371.988855][T26929] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1372.025550][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.056801][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.085692][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.101316][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.115566][T26916] batadv0: left allmulticast mode [ 1372.136108][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.147963][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.154620][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.213525][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.236750][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.254054][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.272408][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.290804][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.309866][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.335180][T26937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.354995][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.387130][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.425168][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.466855][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.491980][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.509897][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.545047][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.569750][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.595128][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.625855][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.657414][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.671841][T17694] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1372.688793][T26944] fuse: Invalid rootmode [ 1372.695408][T17694] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1373.365290][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1373.365321][ T29] audit: type=1326 audit(1719130640.901:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453687d0a9 code=0x0 [ 1373.711333][T26966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.167249][T26982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.182513][T26982] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1374.612160][ T785] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1374.835346][ T785] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1374.851131][ T785] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1374.872907][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1374.884019][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1374.898019][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 1374.920387][ T785] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1374.930624][ T785] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1374.953630][ T785] usb 3-1: Product: syz [ 1374.958239][ T785] usb 3-1: Manufacturer: syz [ 1374.996077][T26984] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1375.019652][ T785] cdc_wdm 3-1:1.0: skipping garbage [ 1375.030768][ T785] cdc_wdm 3-1:1.0: skipping garbage [ 1375.057754][ T785] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1375.071281][ T785] cdc_wdm 3-1:1.0: Unknown control protocol [ 1375.269128][T26998] fuse: Invalid rootmode [ 1375.367540][T26999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.382620][T26999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.768436][ T29] audit: type=1326 audit(1719130643.301:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1375.829275][ T29] audit: type=1326 audit(1719130643.301:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1375.900537][ T29] audit: type=1326 audit(1719130643.331:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1375.976197][ T29] audit: type=1326 audit(1719130643.331:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1376.089277][ T29] audit: type=1326 audit(1719130643.331:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1376.164374][ T29] audit: type=1326 audit(1719130643.331:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1376.197737][ T29] audit: type=1326 audit(1719130643.331:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1376.298844][ T29] audit: type=1326 audit(1719130643.331:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1376.381654][ T29] audit: type=1326 audit(1719130643.341:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ef927d0a9 code=0x7ffc0000 [ 1377.051471][T27018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.077483][T27018] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1377.101852][T26891] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 1377.155700][ T7957] usb 5-1: USB disconnect, device number 71 [ 1377.250758][ T785] usb 3-1: USB disconnect, device number 90 [ 1378.132285][T27053] fuse: Bad value for 'rootmode' [ 1378.750397][T27061] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1378.855898][T27059] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1378.866390][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1379.029624][T17694] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1379.141170][ T5168] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1379.266784][T17694] usb 3-1: Using ep0 maxpacket: 8 [ 1379.302171][T17694] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.337431][T17694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.360967][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 1379.375349][T17694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.394873][T17694] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.419186][T17694] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1379.432014][T17694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.440406][ T5168] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1379.467642][ T5168] usb 2-1: config 179 has no interface number 0 [ 1379.490947][ T5168] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1379.529308][ T5168] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1379.551608][ T5168] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1379.588677][ T5168] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1379.625149][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.655571][T27065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1379.679041][T17694] usb 3-1: GET_CAPABILITIES returned 0 [ 1379.712263][T17694] usbtmc 3-1:16.0: can't read capabilities [ 1379.816168][T27088] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 1379.897843][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.907367][T27063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.922201][T27063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.933966][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.959331][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.977514][T27063] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1379.985793][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985830][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985859][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985887][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985916][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985944][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.985985][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.986012][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1379.986099][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.076364][T17694] usb 2-1: USB disconnect, device number 46 [ 1380.085208][T27092] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1380.103695][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.114500][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.123820][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.133876][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.143967][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.156004][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.165532][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.194604][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.205526][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.217454][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.232792][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.242153][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.256019][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.265046][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.274221][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.286135][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.296522][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.317488][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.328016][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.336010][ T8] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1380.371022][ T8] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1381.828589][T27113] fuse: Invalid rootmode [ 1383.442942][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1383.609055][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1384.031809][T27135] bridge0: entered promiscuous mode [ 1384.077306][T27152] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 1384.178016][T27133] bridge0: left promiscuous mode [ 1384.563055][T27173] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1384.666072][T27177] fuse: Invalid rootmode [ 1384.787047][T27180] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1384.928210][T27183] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1385.181251][T27063] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -110 [ 1385.258029][ T785] usb 3-1: USB disconnect, device number 91 [ 1386.564645][T27209] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1386.616085][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1386.737954][T27217] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1386.837089][T27217] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1386.921015][ T5229] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1387.067721][T27223] fuse: Invalid rootmode [ 1387.110935][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 1387.120140][ T5229] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1387.138093][ T5229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1387.184410][ T5229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1387.208667][ T5229] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.238133][ T5229] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1387.260193][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.375731][T27227] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1387.407391][T27227] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 1387.424258][T27227] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1387.434357][T27227] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1387.498187][T27227] sctp: [Deprecated]: syz-executor.0 (pid 27227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1387.498187][T27227] Use struct sctp_sack_info instead [ 1387.521788][ T5229] usb 5-1: GET_CAPABILITIES returned 0 [ 1387.531136][ T5229] usbtmc 5-1:16.0: can't read capabilities [ 1387.722462][T27216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.738125][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1387.773132][T27216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.796615][T27216] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1387.849352][T27240] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1387.919047][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1387.936666][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1387.953502][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1387.969219][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1387.998462][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.012095][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.020457][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.036538][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.049867][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.097297][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.163834][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.202987][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.246236][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.307370][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.326269][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.350594][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.371248][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.406064][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.435212][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.464107][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.464380][T27259] bridge0: port 3(30猉功D) entered blocking state [ 1388.479036][T27259] bridge0: port 3(30猉功D) entered disabled state [ 1388.510044][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.514458][T27259] 0猉功D: entered promiscuous mode [ 1388.531992][T27259] bridge0: port 3(30猉功D) entered blocking state [ 1388.538757][T27259] bridge0: port 3(30猉功D) entered forwarding state [ 1388.573696][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.600736][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.614473][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.627104][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.636856][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.648233][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.659186][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.678323][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.722778][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.760765][ T785] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1388.799810][ T785] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1388.891393][T27263] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1389.895902][T27289] fuse: Invalid rootmode [ 1390.476499][T27277] bridge0: entered promiscuous mode [ 1390.633808][T27273] bridge0: left promiscuous mode [ 1390.941038][ T5166] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1391.149522][ T5166] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1391.167329][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.170149][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1391.188075][ T5166] usb 3-1: config 0 descriptor?? [ 1391.485006][T27321] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1391.622511][T27295] input: syz1 as /devices/virtual/input/input120 [ 1392.493562][T27349] xt_hashlimit: overflow, try lower: 0/0 [ 1392.552195][ T7957] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1392.585670][T27350] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1392.615926][T27350] team0: Device ipvlan2 is already an upper device of the team interface [ 1392.784018][ T7957] usb 2-1: config 0 has an invalid interface number: 122 but max is 8 [ 1392.810682][ T7957] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.827068][ T7957] usb 2-1: config 0 has no interface number 0 [ 1392.834961][ T7957] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1392.844809][ T7957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.868958][ T7957] usb 2-1: config 0 descriptor?? [ 1392.875507][ T5166] pegasus 3-1:0.0: probe with driver pegasus failed with error -110 [ 1392.881224][ T7957] smsusb:smsusb_probe: board id=8, interface number 122 [ 1392.944193][T27216] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 1392.972909][ T7957] usb 5-1: USB disconnect, device number 72 [ 1393.096141][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1393.186723][ T5168] usb 2-1: USB disconnect, device number 47 [ 1393.407216][ T785] usb 3-1: USB disconnect, device number 92 [ 1393.553156][T26565] bond0: (slave syz_tun): Releasing backup interface [ 1393.847200][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.150359][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.238559][T27376] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1394.265669][T27376] team0: Device ipvlan2 is already an upper device of the team interface [ 1394.550825][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.006712][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.071154][T19247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1395.082983][T19247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1395.092657][T19247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1395.102219][T19247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1395.112298][T19247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1395.120922][T27399] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1395.136097][T19247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1395.216878][T27399] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1395.355589][ T11] bridge_slave_1: left allmulticast mode [ 1395.378543][ T11] bridge_slave_1: left promiscuous mode [ 1395.431953][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.513611][ T11] bridge_slave_0: left allmulticast mode [ 1395.526259][ T11] bridge_slave_0: left promiscuous mode [ 1395.537182][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.768598][ T7957] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1395.942927][ T7957] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1395.954109][ T7957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.966094][ T7957] usb 4-1: config 0 descriptor?? [ 1396.165905][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.194414][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.211900][ T11] bond0 (unregistering): Released all slaves [ 1396.237837][T27411] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 1396.246253][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1396.274560][T27423] vlan2: entered promiscuous mode [ 1396.418049][T27396] input: syz1 as /devices/virtual/input/input121 [ 1396.821828][ T11] hsr_slave_0: left promiscuous mode [ 1396.849687][T27448] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 1396.871592][ T11] hsr_slave_1: left promiscuous mode [ 1396.918495][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.972071][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.980707][T27448] kvm: pic: non byte write [ 1397.008366][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.055145][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.108632][ T11] veth1_macvtap: left promiscuous mode [ 1397.114474][ T11] veth0_macvtap: left promiscuous mode [ 1397.120175][ T11] veth1_vlan: left promiscuous mode [ 1397.126593][ T11] veth0_vlan: left promiscuous mode [ 1397.181378][T19247] Bluetooth: hci5: command tx timeout [ 1397.745054][ T7957] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 1397.998635][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1398.008316][ T7957] usb 4-1: USB disconnect, device number 48 [ 1398.096249][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1398.611283][T27463] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 1398.738752][T27460] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1399.226644][T27404] chnl_net:caif_netlink_parms(): no params data found [ 1399.252599][ T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1399.272444][T19247] Bluetooth: hci5: command tx timeout [ 1399.493341][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1399.510938][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1399.552115][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1399.601041][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1399.662895][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.675291][T27404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.704713][T27404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.732044][ T8] usb 2-1: config 0 descriptor?? [ 1399.737378][T27404] bridge_slave_0: entered allmulticast mode [ 1399.776611][T27404] bridge_slave_0: entered promiscuous mode [ 1399.783251][T27493] fuse: Invalid rootmode [ 1399.806895][T27404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.837819][T27404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.858167][T27404] bridge_slave_1: entered allmulticast mode [ 1399.884956][T27404] bridge_slave_1: entered promiscuous mode [ 1400.112660][T19207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1400.128747][T19207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1400.145968][T19207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1400.149123][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.195355][T19207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1400.203826][T19207] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1400.219774][T19207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1400.235975][ T8] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x4 [ 1400.300919][ T8] plantronics 0003:047F:FFFF.0046: item fetching failed at offset 11/15 [ 1400.326452][ T8] plantronics 0003:047F:FFFF.0046: parse failed [ 1400.335255][ T8] plantronics 0003:047F:FFFF.0046: probe with driver plantronics failed with error -22 [ 1400.426166][ T8] usb 2-1: USB disconnect, device number 48 [ 1400.575217][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.677760][T27404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.705346][T27404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.765833][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.947363][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.065545][T27513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.072055][T27404] team0: Port device team_slave_0 added [ 1401.140179][T27404] team0: Port device team_slave_1 added [ 1401.206268][T27404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.222305][T27404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.250077][T27404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.263609][T27404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.270585][T27404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.296896][T12231] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1401.298361][T27404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.341043][T19247] Bluetooth: hci5: command tx timeout [ 1401.442884][T27404] hsr_slave_0: entered promiscuous mode [ 1401.449753][T27404] hsr_slave_1: entered promiscuous mode [ 1401.457061][T27404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.465648][T27404] Cannot create hsr debugfs directory [ 1401.482014][T12231] usb 2-1: Using ep0 maxpacket: 32 [ 1401.489814][T12231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.500511][T12231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1401.511260][T12231] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.537284][T12231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.563354][T12231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.594898][T12231] usb 2-1: Product: syz [ 1401.599130][T12231] usb 2-1: Manufacturer: syz [ 1401.641165][T12231] usb 2-1: SerialNumber: syz [ 1401.700503][T12231] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 1401.733894][T12231] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1401.740781][T12231] cdc_ncm 2-1:1.0: bind() failure [ 1401.797748][T27500] chnl_net:caif_netlink_parms(): no params data found [ 1401.833611][ T11] bridge_slave_1: left allmulticast mode [ 1401.839308][ T11] bridge_slave_1: left promiscuous mode [ 1401.850504][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.868779][ T11] bridge_slave_0: left allmulticast mode [ 1401.874964][ T11] bridge_slave_0: left promiscuous mode [ 1401.888013][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.941141][T27517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.949839][T27517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.117600][ T5166] usb 2-1: USB disconnect, device number 49 [ 1402.304523][T19247] Bluetooth: hci2: command tx timeout [ 1402.484033][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.497183][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.509179][ T11] bond0 (unregistering): Released all slaves [ 1402.745422][T27552] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1402.887231][T27560] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1402.899792][T27560] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1403.431141][T19247] Bluetooth: hci5: command tx timeout [ 1403.450360][ T11] hsr_slave_0: left promiscuous mode [ 1403.465899][ T11] hsr_slave_1: left promiscuous mode [ 1403.483811][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.498228][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.543490][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.565613][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.620629][ T11] veth1_macvtap: left promiscuous mode [ 1403.630127][ T11] veth0_macvtap: left promiscuous mode [ 1403.644138][ T11] veth1_vlan: left promiscuous mode [ 1403.657238][ T11] veth0_vlan: left promiscuous mode [ 1403.938688][T27586] input: syz1 as /devices/virtual/input/input122 [ 1404.202653][T27590] random: crng reseeded on system resumption [ 1404.384191][T19247] Bluetooth: hci2: command tx timeout [ 1404.594183][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1404.652360][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1405.207228][T27500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.218124][T27500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.236711][T27500] bridge_slave_0: entered allmulticast mode [ 1405.267316][T27500] bridge_slave_0: entered promiscuous mode [ 1405.284307][T27500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.292034][T27500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.310266][T27500] bridge_slave_1: entered allmulticast mode [ 1405.320515][T27500] bridge_slave_1: entered promiscuous mode [ 1405.518021][T27500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.559385][T27500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.778587][T27500] team0: Port device team_slave_0 added [ 1405.817059][T27500] team0: Port device team_slave_1 added [ 1405.921158][T17693] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1405.939433][T27500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.947511][T27500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.974449][T27500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.091798][T27500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.102631][T27500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.129238][T27500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.140633][T17693] usb 2-1: Using ep0 maxpacket: 32 [ 1406.158532][T17693] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.180243][T17693] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.221482][T17693] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1406.230610][T17693] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1406.242428][T17693] usb 2-1: Product: syz [ 1406.250508][T27500] hsr_slave_0: entered promiscuous mode [ 1406.258082][T17693] usb 2-1: Manufacturer: syz [ 1406.265509][T27500] hsr_slave_1: entered promiscuous mode [ 1406.273173][T27500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.281841][T27500] Cannot create hsr debugfs directory [ 1406.295235][T17693] hub 2-1:4.0: USB hub found [ 1406.427296][T27404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1406.461396][T19247] Bluetooth: hci2: command tx timeout [ 1406.472087][T27404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1406.484931][T27404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1406.509850][T27404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1406.516911][T17693] hub 2-1:4.0: 2 ports detected [ 1406.800586][T27404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.888244][T27404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.927004][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.934350][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.971882][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.979155][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.169985][T27500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1407.201405][T27500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1407.232946][T27500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1407.255500][T27404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.278125][T27500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1407.341735][T19247] Bluetooth: hci0: command 0x0c1a tx timeout [ 1407.352667][ T785] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1407.358886][ T785] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1407.448993][T27404] veth0_vlan: entered promiscuous mode [ 1407.477799][T27404] veth1_vlan: entered promiscuous mode [ 1407.574275][T27404] veth0_macvtap: entered promiscuous mode [ 1407.590652][T27500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.604871][T27404] veth1_macvtap: entered promiscuous mode [ 1407.648121][T27500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.691352][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.706329][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.718593][ T5170] hub 2-1:4.0: activate --> -90 [ 1407.729781][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.741188][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.752239][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.764386][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.780356][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.800198][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.813899][T27404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.834003][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.841256][T17693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.881345][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.892301][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.905592][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.916879][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.927230][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.941679][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.952620][T27404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.967303][T27404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.995887][T27404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.008850][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.016125][T17693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.056827][T27404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.083478][T27404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.100892][T27404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.117372][T27404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.274551][T27500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1408.405716][T27500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.519323][T27500] veth0_vlan: entered promiscuous mode [ 1408.553672][T19247] Bluetooth: hci2: command tx timeout [ 1408.569947][T27500] veth1_vlan: entered promiscuous mode [ 1408.653771][T27500] veth0_macvtap: entered promiscuous mode [ 1408.668572][T27500] veth1_macvtap: entered promiscuous mode [ 1408.702747][T27622] usb 2-1: USB disconnect, device number 50 [ 1408.733105][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.744156][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.761199][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.778880][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.793972][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.810721][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.821321][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.832951][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.843386][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.854840][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.868414][T27500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.885937][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.898027][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.923774][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.942330][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.960818][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.978841][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.990768][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.003961][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.014407][T27500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.030011][T27500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.045242][T27500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.064597][T27500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.080365][T27500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.091947][T27500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.100689][T27500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.431434][T19247] Bluetooth: hci3: command 0x0c1a tx timeout [ 1409.437756][ T785] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1409.445407][ T785] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1410.001189][T27680] bridge0: entered promiscuous mode [ 1410.245072][T27675] bridge0: left promiscuous mode [ 1411.661428][ T785] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1411.667596][ T785] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1411.667972][T19247] Bluetooth: hci5: command 0x0c1a tx timeout [ 1413.741154][T19247] Bluetooth: hci2: command 0x0c1a tx timeout [ 1413.748010][ T785] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1413.756869][ T785] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1433.593362][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.599745][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.025977][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.040931][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.468597][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.475066][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.483176][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 1556.490667][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 1556.499338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/23 08:20:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1556.513091][ T30] task:kworker/0:0 state:D stack:20528 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 1556.523635][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1556.531588][ T30] Call Trace: [ 1556.534957][ T30] [ 1556.537913][ T30] __schedule+0x17e8/0x4a20 [ 1556.544060][ T30] ? __pfx___schedule+0x10/0x10 [ 1556.548962][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1556.558319][ T30] ? __pfx_lock_release+0x10/0x10 [ 1556.563652][ T30] ? kick_pool+0x1bd/0x620 [ 1556.568135][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1556.573738][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1556.579034][ T30] ? schedule+0x90/0x320 [ 1556.583646][ T30] schedule+0x14b/0x320 [ 1556.587846][ T30] schedule_preempt_disabled+0x13/0x30 [ 1556.593639][ T30] __mutex_lock+0x6a4/0xd70 [ 1556.598186][ T30] ? __mutex_lock+0x527/0xd70 [ 1556.603346][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1556.609629][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1556.615117][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1556.623220][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1556.629599][ T30] ? process_scheduled_works+0x945/0x1830 [ 1556.635869][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1556.642322][ T30] ? process_scheduled_works+0x945/0x1830 [ 1556.648081][ T30] process_scheduled_works+0xa2c/0x1830 [ 1556.654149][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1556.660172][ T30] ? assign_work+0x364/0x3d0 [ 1556.669289][ T30] worker_thread+0x86d/0xd70 [ 1556.680860][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1556.685946][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1556.701475][ T30] kthread+0x2f0/0x390 [ 1556.705588][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1556.710725][ T30] ? __pfx_kthread+0x10/0x10 [ 1556.720831][ T30] ret_from_fork+0x4b/0x80 [ 1556.725331][ T30] ? __pfx_kthread+0x10/0x10 [ 1556.729944][ T30] ret_from_fork_asm+0x1a/0x30 [ 1556.750851][ T30] [ 1556.754035][ T30] INFO: task syz-executor.2:27404 blocked for more than 143 seconds. [ 1556.780925][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 1556.788588][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1556.810809][ T30] task:syz-executor.2 state:D stack:20288 pid:27404 tgid:27404 ppid:1 flags:0x00000006 [ 1556.830832][ T30] Call Trace: [ 1556.834147][ T30] [ 1556.837098][ T30] __schedule+0x17e8/0x4a20 [ 1556.852745][ T30] ? __pfx___schedule+0x10/0x10 [ 1556.857641][ T30] ? __pfx_lock_release+0x10/0x10 [ 1556.888259][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1556.894254][ T30] ? schedule+0x90/0x320 [ 1556.898535][ T30] schedule+0x14b/0x320 [ 1556.910891][ T30] schedule_preempt_disabled+0x13/0x30 [ 1556.916390][ T30] __mutex_lock+0x6a4/0xd70 [ 1556.930864][ T30] ? __mutex_lock+0x527/0xd70 [ 1556.935671][ T30] ? rfkill_fop_open+0x131/0x850 [ 1556.940630][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1556.966516][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1556.980831][ T30] rfkill_fop_open+0x131/0x850 [ 1556.985656][ T30] ? module_put+0x13a/0x2d0 [ 1556.990236][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1557.010865][ T30] misc_open+0x313/0x390 [ 1557.015263][ T30] chrdev_open+0x5b0/0x630 [ 1557.019745][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1557.040866][ T30] ? security_file_open+0x5bc/0x730 [ 1557.046202][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1557.060811][ T30] do_dentry_open+0x95a/0x1720 [ 1557.065639][ T30] path_openat+0x289f/0x3280 [ 1557.070292][ T30] ? mark_lock+0x9a/0x350 [ 155