last executing test programs: 28.104224437s ago: executing program 1 (id=1229): syz_usb_connect$cdc_ncm(0x6, 0xb3, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x200}, [@mdlm_detail={0x4}, @mdlm_detail={0x41, 0x24, 0x13, 0x0, "1e5264a6000000000000000828bbfa2579388351742e333ecc72d876ac66fbbf90cba38b47b5769df285645c39d300ac22ec7b5269c75135cbf48b4a09"}]}}}}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xffff, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000305000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="14aa00ba45c522629de6ba1bb20000000000"], 0x20}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r5 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'dummy0\x00'}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x411, 0x0, 0x0, {{{@in=@local, @in6=@private1}, {@in6=@local}, @in=@empty, {0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, {0x9, 0x0, 0xbe}, {}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x11}, 0x2, 0xfdfffefe}, [@offload={0xc}]}, 0x104}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@updsa={0x160, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in6=@dev={0xfe, 0x80, '\x00', 0xfc}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "09647cfcb920c1cb091b151c49125848fd53c296569f79c1f561d5b12ef89133f2"}}]}, 0x160}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_PRIMARY={0x4c}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x6c}, 0x1, 0xba01}, 0x0) 26.469799748s ago: executing program 1 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 25.997018818s ago: executing program 1 (id=1234): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1c9e72}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r8 = epoll_create1(0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0x29, 0x0, 0x0) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0xc23, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="69860821c1e8d3182a2d735482e08bc971fddaef1678324d2279c6d4552794ee"], 0x0) socket$inet(0x2, 0x0, 0x0) 24.896914902s ago: executing program 1 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="190000001e0001ff"], 0x20}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x220400, 0x0) fcntl$setpipe(r1, 0x407, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000800)}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_METRICS={0x4}]}, 0x30}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000004c80)=ANY=[@ANYBLOB="1c0000006800000428bd7000fddbdf25000802000900000004000900df27b81e16f73ab32f1b5cfa5dba61d3eaff7e6e4da6fde430d6cc873c43650880fbe063284dc626f81a88e00a74a7733355e7879357a3338cec8ec34e"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000014) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRES32=r7, @ANYBLOB="a560403b", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32=r2, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32=r10, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) r11 = accept4(r4, 0x0, &(0x7f0000000d80), 0x400) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000004d00)={'veth1_to_bridge\x00', {0x2, 0x4e20, @local}}) r12 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x18, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0x0, 0xffffffff}}) sendmsg$nl_route_sched(r12, &(0x7f0000004c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)=@newtclass={0x3c, 0x28, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc}, {0x1, 0x8}, {0x6, 0xc}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfq={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/31, 0x1f}], 0x2, &(0x7f0000000980)=""/240, 0xf0}}, {{&(0x7f0000000a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/86, 0x56}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000b80)=""/13, 0xd}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x5, &(0x7f0000000d00)=""/50, 0x32}, 0x4}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ec0)=""/232, 0xe8}, {&(0x7f0000000fc0)=""/6, 0x6}], 0x2, &(0x7f0000001040)=""/188, 0xbc}, 0x40000000}, {{&(0x7f0000001100)=@isdn, 0x80, &(0x7f0000001180)=[{&(0x7f00000021c0)=""/230, 0xe6}, {&(0x7f00000022c0)=""/135, 0x87}, {&(0x7f0000003440)=""/152, 0x98}, {&(0x7f0000003500)=""/211, 0xd3}], 0x4, &(0x7f0000003600)=""/170, 0xaa}, 0x2}, {{&(0x7f0000002380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004900)=[{&(0x7f00000036c0)=""/101, 0x65}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/234, 0xea}, {&(0x7f0000004840)=""/145, 0x91}], 0x4, &(0x7f0000004940)=""/152, 0x98}, 0x9}], 0x5, 0x40010021, &(0x7f0000004b40)) readv(r0, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/4096, 0x1017}], 0x1) 23.92822053s ago: executing program 1 (id=1239): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074c7b4206d04f6088a810009000109021200010000000009040000000e01"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4800}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) fallocate(0xffffffffffffffff, 0x40, 0x100000000, 0x1ff) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000180)={0x1, 0x67, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577df2340fb458bd55be572ac782da8"}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000006800010000000000000000000a00000000000000180004801400010000000000000000000000040000000000a65074e952b090a39633e56ec43f7f92061145f975ce5806fcf7f594b5ee4ab5eb53497f9afb73110caf74a6ee7704dccb34fd6112dd1bd98c33fc17c967b9b5fc0d0b3e6aca662ecd77e9639513d61b2829207a9cd4e4a6bcc81e49ff56304c6305606719b96adc"], 0x30}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00'}, 0x6000000, 0xa8, 0xe8, 0x0, {0x0, 0x28e}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x48, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 22.77083023s ago: executing program 2 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x6d, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 21.997644194s ago: executing program 2 (id=1246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x7, 0xf}, {0x6, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x13d}}]}, 0x38}}, 0x4004c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000240)=0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045516, &(0x7f0000000100)) syz_usb_disconnect(r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @remote, @mcast1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @remote, @mcast1}}) 19.929840203s ago: executing program 2 (id=1252): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00a0a1451d4188b776cdc39e7bc2b99188aa71af0b86303e1d38b9278fa5282af9c5716513175331d73a88f9650acb5598e65457471ccbf6fb4b5e5593a30cb0bcb2517a7c135c2e332224f9ddee5ca097c3f1cd0578b17ca4deab5d1023e7165176a968f08066b22d6c531df8d2b718035c9a1993f2e8d34394435c65b91f2bfac422056d81cf6dcf518343e3a5e44271", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x501, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x104) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x1000000000000000, &(0x7f00000003c0)="18607609009d7b10b4024fbbdc08899b8f589df20300d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1d20f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r5 = socket$unix(0x1, 0x5, 0x0) unshare(0x26020480) unshare(0xa020480) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 16.879762183s ago: executing program 0 (id=1256): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0x44040) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x5a, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018003d"], 0x44}}, 0x0) r11 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) r13 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "c09839df"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, 0x0) 12.056158259s ago: executing program 2 (id=1263): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="000006b8de000000127f93846b27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f00000004c0)={0x20, 0x10, 0xf0, {0xf0, 0x23, "de47a6ed3a379ecc971ca378f8596e47e3561f626b34386d993f8140e235f4d19e6003c8aaf29cbfbb475205e97d8f4c6cc165083d2304ce0b7f098ab5a78fe6fe1495efb622cfca086c771b1bb5be8627db2bc8b47b44d079dfb0e833e9d420680c3a78484ed51fd4e05cce13272993eea6f0b128f6edcd289b91b6e540206a83375ff4bef00757bf75a430561473253afaf65c20f4358f20bb2d208439a177f1b9aa70a132e6dccf9145cb457861a2c067a42f745c5aec5782d5ca76596dab56e86dbad6e8c206f2a7a04559bfaf5efdc5b9f74fd1442fb6bae166d27cac8e99e84c860bcfaa340868feef1eac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x6, 0x80, 0xc, 0x0, 0x3, 0x2, 0x4d9, 0x1, 0x8000, 0x1, 0x5, 0x3ff}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) close(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x18}}, './file0\x00'}) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=ANY=[], 0x42c}}, 0x48804) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.807608969s ago: executing program 0 (id=1264): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000000000a5997b87f56bff4f4e462676e501af0a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004400000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000014000380100000800400018008000340000000011400000010"], 0xcc}}, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r9 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x47fa, 0x0, 0x0, 0x0, 0x0) r12 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000040)=r12, 0x1) io_uring_enter(r9, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r13 = userfaultfd(0x80001) read(r13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x728, 0x40, 0x2, 0x2, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0x28, 0x43, 0x0, 0xd, [0x5, 0x9, 0x1, 0x0, 0x3ad0, 0x5db, 0x4, 0x9, 0x4]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYBLOB="040028bd7000fddbdf250b000000080003000600000008000200070000001c00018008000700", @ANYRES32=r8, @ANYBLOB="080006000b000000080006000a00000024000180050002000800000008000700", @ANYRES32=r14, @ANYBLOB="0500020000000000080006000600000005000581d25d1a000800020004000000"], 0x74}, 0x1, 0x0, 0x0, 0x84014}, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_ENABLE={{}, 0x40}}}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r6, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000000)) 10.537506905s ago: executing program 0 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000001480)=""/253, 0xfd}, {&(0x7f0000001580)=""/99, 0x63}, {&(0x7f0000001600)=""/242, 0xf2}, {&(0x7f0000001740)=""/31, 0x1f}, {&(0x7f0000001780)=""/109, 0x6d}], 0x8}, 0x6}], 0x1, 0x100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="f803000011000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x3f8}}, 0xc880) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x801, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0010e19889ae8902", @ANYRES16=r5, @ANYBLOB="200027bd7000fbdbdf25030000000900030073797a30000000000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x44004) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x64}}, 0x240428c4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10.536497184s ago: executing program 2 (id=1268): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x890, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r7 = dup(r5) sendmsg$inet(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001380)="badcf513", 0x4}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x28}}, 0x0) r13 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) r14 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r14, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r14, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0xb, 0xfffffffc}], 0x18}], 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 10.053803712s ago: executing program 2 (id=1271): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) r4 = dup(r1) write$binfmt_misc(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) munlockall() bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 9.380529244s ago: executing program 0 (id=1276): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 8.321035276s ago: executing program 3 (id=1278): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}]}}}]}, 0x40}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001480)={@cgroup, 0xffffffffffffffff, 0xf, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)={0xb0000004}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x20041) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001480)=@deltclass={0xac, 0x29, 0x0, 0x0, 0x0, {}, [@c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10}}, @TCA_ATM_EXCESS={0x8}, @TCA_ATM_HDR={0x22, 0x3, "c361968f71e505f5568e384d58fd48838ff5b348c0717f06745c55033b8b"}, @TCA_ATM_HDR={0x9, 0x3, "2c4d115266"}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, @TCA_CBQ_LSSOPT={0x18}]}}]}, 0xac}}, 0x0) recvmmsg(r5, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/88, 0x1}, {&(0x7f0000000340)=""/4084, 0xff4}], 0x2, 0x0, 0x63}}], 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) shutdown(r8, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3a3ea6fc4834ea69560270a3539871d", 0x51, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', &(0x7f0000000200)=""/79, 0x50) 8.218411721s ago: executing program 0 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000190001000000000000000000"], 0x1c}}, 0x0) 8.096485126s ago: executing program 0 (id=1280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwritev(r4, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x3, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x60, r6, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0x0, 0x99, {0xa9, 0x1e}}}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{}, 0x3599d84efc05ca29, 0x0, @default, @val={0x1, 0xffffffffffffff51}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x10}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x60}}, 0x8c5) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10404}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket(0xa, 0x3, 0x3a) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r14, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 7.866767345s ago: executing program 3 (id=1281): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x43, 0x63, 0x19, 0x8, 0xeb1a, 0xa316, 0xd548, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x62, 0x5d, 0x3, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x128, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6c65}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0xd4, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x881) preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 6.21557051s ago: executing program 4 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x6d, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 5.797307616s ago: executing program 4 (id=1287): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xe0, 0x4d, 0xb7, 0x20, 0x61d, 0xc150, 0xd0dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x48, 0x10, 0x8, [{{0x9, 0x4, 0x90, 0x2, 0x0, 0x9c, 0xc5, 0xb9, 0x7}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000300)={0x2, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000140)=0xfff, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r3, 0x0, 0x3}]) close_range(r1, r3, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000380)}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) 4.677975959s ago: executing program 3 (id=1288): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 4.172752118s ago: executing program 3 (id=1289): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}]}, 0x30}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000400)={0x0, 0x2, 0x4000001f, 0xfffffffffffffffd}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5434, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x118) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000007480)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xc4, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x2, 0x1, 0x4, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "65abfb"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3, 0xe362, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe2aa, 0x1000, 0x9, 0x5, 0x9, 0x10}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0xfffb}, @mdlm_detail={0x3e, 0x24, 0x13, 0x5, "e119629abd9b4c5c7d5e0805a42d67ff674cc6c8865590ce80a80e5fcb04ccb544f1b1b183f049c6c6f06ca7c77f0f634539c58799182fa94d4c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x31, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd, 0x9b, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x210, 0x40, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x80, 0x7, 0x40, 0xa8}, 0x3a, &(0x7f0000000880)={0x5, 0xf, 0x3a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x7, 0xb9b, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x9, 0xff4}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x8166, 0xf0f, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5688f527569d90e64335074ea1d4cc02"}]}, 0x9, [{0x28, &(0x7f0000000240)=@string={0x28, 0x3, "1308ef096ff7fb4be9e54f264f78e6cda2eb116054b1f45ea6a596ba6832e42ddaba06113f0a"}}, {0x98, &(0x7f0000000280)=@string={0x98, 0x3, "6f20e888b042ba97f39dde9f409cf646af943116292e9e3d138ed86dc926a517b28af0d08441def5933ca1a3abdd136649cf5875669c510baee0b3242299788e494495505d9af71ee6e40a5f6c8eef570b7d3d3430805596451c6f991ccfa89cce69d274ce2e1abe4f65ab7dd63fa2c54894b236ec3b3a51d7f6dfa3b53fe221e95aac735444371f464c17977bc2dcfa0f219bb07267"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140a}}, {0xb4, &(0x7f00000007c0)=@string={0xb4, 0x3, "7116c95bb808bce3fe8858588398c50e49fde0542f98dcb6d35a21af1a62ee11a077fba8ed7a8b4a9e545c5a63402e33441176d821faa2f6edfe73ce1192ef52c38d26c9e6423306f5dc94c6a6adab844b7d0cfc95dcd1467398267b5896890693d817ca56ec6e6b13145d8d49e72839edcbeec2aef9f4c294bee1f2535ebedff155b79b8470f492accb33686b8209737624088108fdf5d10cdee02f14a1b040d9fdeadc53920e63cbf777ceae492eb30a1c"}}, {0x85, &(0x7f0000000440)=ANY=[@ANYBLOB="85033937421b47f0b46fc6dc78412acd9155fed9c3f00b000000f34215d5353c3dbd7d319a989189c8340f298ee79ba12080da456c42573184b9c2575f9f9021726347fe27cbb89f58954cb942358d70bafb4364c3d0079680f16117e3f574f09bda36571079dad940e172f614b446aeba8cdeda8407af891cb886b221b658900b54d18c6f"]}, {0x99, &(0x7f0000000500)=@string={0x99, 0x3, "6bdf39df819e04eaed555e416d59efcfc418ccc0a13c2c8cbeb37560c28867d33d15e25dc5f9aae721695ce8db64e20036114c6338ea020e6423143f7e0805eadce927d81065aebdecc0f4d706f5744ee5b6e5722ccb9d95d30244acaef61d3c07f312c97a8b33a397c083a241c489ad87a5089ea1edbd44a1b2b9a2f4ba124a452af9a5917d9f58de980555f57f2328821625cbcd8292"}}, {0x95, &(0x7f00000005c0)=@string={0x95, 0x3, "978d0d09179ea01116915660f77a131612d4892076875e3ad6f91ec2656b4ff2bdb6bc5887d10a0b8b1531b52819b1de081b18a34c07c0ee90086837c7589f13c942fd8eeacecd54f6694a2f2eb4cbee91cda81b3617626f77956b4e318d86917a9696163ab3062952809abb5820ad248a154a4106539f14ff86892d4bb1ed7cf7339efebd1d8dfcfa2a425efe6b0e07b342da"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x25, &(0x7f0000000680)=@string={0x25, 0x3, "8c66883f22f2fb8208a5ad1c9c66daf85c5244a35029629882e309da98b50e5ad8c81d"}}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) 2.704051368s ago: executing program 4 (id=1290): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001180)={0x10, 0xfffffff5, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2d568d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6325b4fb369c2aab53751ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001600000076000000bf9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) 1.645306394s ago: executing program 4 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './bus', [], 0xa, "e7ce8fa18d4868aaa70608082e20c4f5f57ada535b47baa83b4c1f3df0b0480d36f8e703d9ded29664079a4728d5e07ab6204e1bf3267b352457b408e354dbf8b8eaf06aee23714400b5b9b7bf755315d1b6b2a329d3fe926c3c214632e7214143ae1005981940178054187983bf81a2a78ecf7230d2aa9571aa6dee9c6a7fb0cc624da9a220b1f61229e8ff146b5d5e769d601f8b04a3f0a8bf1a832157ecd3853dc95c04a48936198caced5a7bd2833a05d0029bd480f7f09e3b30ca1265d694da92bbce77d95196799e7406c64c2c68b39bdb54947a348206f00be2765e6353ae035d027b"}, 0xef) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)={0x6c, 0x2, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xafcc}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}, 0x20) socket$inet6(0xa, 0x805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000740)={0x1, 0xfffe, 0x0, 0x5, 0xdf, 0x5, 0xf, 0x2000004, r6}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 1.434044774s ago: executing program 4 (id=1292): syz_open_dev$midi(0x0, 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1.35127903s ago: executing program 4 (id=1293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000e80)={0x0, 0x0, 0x1, "b7"}, 0x0, 0x0}) 1.007410119s ago: executing program 3 (id=1294): syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000008c0)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5"], 0x28) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x4080) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="50540cbf2faa61df6a000000000000000000000015000300686173683a61702c706f72742c6e6574959bf187bcc461cb0700000005000500050000000900020073797a3000000000050004000000"], 0x50}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x5, @private0, 0x9, 0x2}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="0a00000000000050ff8c7024edd4e2ab8a4474ab5800"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001240)=ANY=[@ANYBLOB="0402", @ANYRES16=r9, @ANYBLOB="010000000000000000000f000000180001801400020076657468315f746f5f7465616d000000"], 0x2c}}, 0x0) connect$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200000000000000000600000008000300", @ANYRES32, @ANYBLOB="e3d61ecb2d2b693a7dbf440900000000000000b2fb4c8501002bf55c5f3f8b1ef37e637831fdffafbb7f83e4c407"], 0xf}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[], 0x3c) 85.662511ms ago: executing program 1 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = dup(r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) fcntl$setpipe(r4, 0x407, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "94e087a424856f5b5026be9facabe069e79859d9c1ac372002f5ebf68e132af5dad8e6c614fa996edae027938c7140530d7ffc0ef62811cb90e5aee9dbad9e"}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "a8af03e62f144437ea3fa09330609122d058844222297400ac0d1b3dfb9373"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r10, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r10}}, 0x18) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58d04"]) 0s ago: executing program 3 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x6d, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) kernel console output (not intermixed with test programs): rface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 524.927062][ T5285] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.942056][ T5285] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.953495][ T5285] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.219808][ T5285] usb 2-1: string descriptor 0 read error: -22 [ 525.226399][ T5285] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 525.235836][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.573497][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.605790][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.184593][T11900] netem: change failed [ 526.396227][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.545385][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.674331][ T46] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 526.847272][ T46] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 526.867874][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.892499][ T46] usb 1-1: Product: syz [ 526.908945][ T46] usb 1-1: Manufacturer: syz [ 526.942744][ T46] usb 1-1: SerialNumber: syz [ 526.971965][ T46] usb 1-1: config 0 descriptor?? [ 527.139791][T11913] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1038'. [ 527.228666][T11895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.241097][T11895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.253087][ T46] viperboard 1-1:0.0: version 0.00 found at bus 001 address 051 [ 527.268727][ T46] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 527.277625][ T46] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 527.292818][ T46] usb 1-1: USB disconnect, device number 51 [ 527.637809][T11917] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1039'. [ 527.794855][ T5242] IPVS: starting estimator thread 0... [ 527.884444][T11920] IPVS: using max 24 ests per chain, 57600 per kthread [ 527.931147][T11923] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1040'. [ 527.941119][T11923] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 528.060081][T11925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1041'. [ 528.082240][T11925] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 528.114562][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 528.322000][T11927] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.1042' sets config #0 [ 528.337995][T11927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.371081][T11945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.219667][T11954] raw_sendmsg: syz.0.1049 forgot to set AF_INET. Fix it! [ 530.288689][T11957] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1051'. [ 530.372894][T11959] vivid-000: disconnect [ 530.392848][T11961] netlink: 'syz.3.1050': attribute type 2 has an invalid length. [ 532.942665][ T29] audit: type=1326 audit(1728515577.100:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.0.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da8b7dff9 code=0x0 [ 533.256289][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.297003][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.260828][ T4626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 534.294266][ T5242] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 534.322126][ T4626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 534.341560][ T4626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 534.350672][ T4626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 534.358973][ T4626] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 534.366393][ T4626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 534.485316][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 534.492267][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.505164][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 534.516392][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.547759][ T5242] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 534.568529][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.595712][ T5242] usb 1-1: Product: syz [ 534.599941][ T5242] usb 1-1: Manufacturer: syz [ 534.614487][ T5242] usb 1-1: SerialNumber: syz [ 534.656167][ T5242] usb 1-1: config 0 descriptor?? [ 534.665378][ T5242] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 535.062750][T12006] chnl_net:caif_netlink_parms(): no params data found [ 535.079012][T12001] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1064'. [ 535.146647][T12001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.269990][T12001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.278829][T12015] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1064'. [ 535.444342][ T5242] pwc: Failed to set LED on/off time (-71) [ 535.459905][ T5242] pwc: send_video_command error -71 [ 535.475594][ T5242] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 535.483237][ T5242] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 535.485969][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.494971][ T5242] usb 1-1: USB disconnect, device number 52 [ 535.534498][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.554701][T12006] bridge_slave_0: entered allmulticast mode [ 535.596290][T12006] bridge_slave_0: entered promiscuous mode [ 535.631860][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.654412][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.663654][T12006] bridge_slave_1: entered allmulticast mode [ 535.750010][T12006] bridge_slave_1: entered promiscuous mode [ 535.898139][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.168055][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.366099][T12022] [U]  [ 536.416378][T12006] team0: Port device team_slave_0 added [ 536.433560][T12006] team0: Port device team_slave_1 added [ 536.534423][ T4626] Bluetooth: hci8: command tx timeout [ 536.657742][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.667275][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.697670][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.710851][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.741031][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.783243][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.871583][T12006] hsr_slave_0: entered promiscuous mode [ 536.879233][T12006] hsr_slave_1: entered promiscuous mode [ 536.887678][T12006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.896079][T12006] Cannot create hsr debugfs directory [ 537.009033][T12051] fuse: Unknown parameter '0x000000000000000700000000000000000000Ûw' [ 537.154533][T12053] loop7: detected capacity change from 0 to 16384 [ 537.206611][T12053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.302417][T12006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.318789][T12054] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 537.333715][T12006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60979 - 0 [ 537.335572][T12054] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 537.371598][T12006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 60320 - 0 [ 537.384877][T12054] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 537.406353][T12054] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 537.432789][T12054] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 537.464898][T12054] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 537.489157][T12054] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 537.500833][T12054] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 537.511859][T12054] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 537.522093][T12054] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 537.533250][T12054] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 537.664729][T12006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.721296][T12006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60979 - 0 [ 537.759635][T12006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 60320 - 0 [ 537.989873][ T3001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.239068][T12006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.258968][T12006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60979 - 0 [ 538.271244][T12006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 60320 - 0 [ 538.436825][ T3001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.564736][ T4626] Bluetooth: hci8: command tx timeout [ 538.572656][T12006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.613075][T12066] block device autoloading is deprecated and will be removed. [ 538.624667][T12066] syz.0.1079: attempt to access beyond end of device [ 538.624667][T12066] loop41: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 538.664553][T12006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60979 - 0 [ 538.744488][T12006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 60320 - 0 [ 538.902683][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 538.914782][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 538.923382][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 538.932365][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 538.941783][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 538.949388][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 539.027368][ T3001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.176526][ T3001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.884884][T12006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.922520][ T3001] bridge_slave_1: left allmulticast mode [ 539.946954][ T3001] bridge_slave_1: left promiscuous mode [ 539.968312][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.048721][ T3001] bridge_slave_0: left allmulticast mode [ 540.069455][ T3001] bridge_slave_0: left promiscuous mode [ 540.113717][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.244357][T12090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.644403][ T4626] Bluetooth: hci8: command tx timeout [ 541.048331][ T4626] Bluetooth: hci7: command tx timeout [ 541.217503][ T4626] Bluetooth: hci0: command 0x0406 tx timeout [ 542.052623][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.131980][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.189540][ T3001] bond0 (unregistering): (slave team0): Releasing backup interface [ 542.218948][ T3001] bond0 (unregistering): Released all slaves [ 542.239058][T12006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.261940][T12089] IPv6: Can't replace route, no match found [ 542.276053][T12087] bridge_slave_0: default FDB implementation only supports local addresses [ 542.510987][T12114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.560350][T12006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.575326][T12115] usb usb8: usbfs: process 12115 (syz.4.1086) did not claim interface 1 before use [ 542.734623][ T5234] Bluetooth: hci8: command tx timeout [ 542.764489][T12071] chnl_net:caif_netlink_parms(): no params data found [ 542.826363][T12006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.131040][ T5234] Bluetooth: hci7: command tx timeout [ 543.588466][T12127] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003 [ 544.183487][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.263940][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.305202][T12071] bridge_slave_0: entered allmulticast mode [ 544.344559][T12071] bridge_slave_0: entered promiscuous mode [ 544.393982][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.424046][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.485558][T12071] bridge_slave_1: entered allmulticast mode [ 544.524553][T12071] bridge_slave_1: entered promiscuous mode [ 544.863563][ T3001] hsr_slave_0: left promiscuous mode [ 544.893392][ T3001] hsr_slave_1: left promiscuous mode [ 544.902782][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.916141][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.926293][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.934033][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.958574][T12152] binder_alloc: binder_alloc_mmap_handler: 12151 20ffd000-20fff000 already mapped failed -16 [ 544.987725][ T3001] veth1_macvtap: left promiscuous mode [ 544.993598][ T3001] veth0_macvtap: left promiscuous mode [ 545.000958][ T3001] veth1_vlan: left promiscuous mode [ 545.007748][ T3001] veth0_vlan: left promiscuous mode [ 545.206286][ T5234] Bluetooth: hci7: command tx timeout [ 545.688747][T12158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.292068][T12166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.539206][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 546.611159][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 547.284784][ T5234] Bluetooth: hci7: command tx timeout [ 547.303760][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.322621][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.340240][T12164] IPv6: Can't replace route, no match found [ 547.476012][T12071] team0: Port device team_slave_0 added [ 547.506863][T12071] team0: Port device team_slave_1 added [ 547.646414][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.674310][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.730711][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.754505][ T6179] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 547.757506][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.771303][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.798531][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.911530][T12071] hsr_slave_0: entered promiscuous mode [ 547.936915][T12071] hsr_slave_1: entered promiscuous mode [ 547.948856][ T6179] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.967873][T12071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.977135][ T6179] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 547.992610][ T6179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.002778][T12071] Cannot create hsr debugfs directory [ 548.031101][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.047040][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.062472][ T6179] usb 1-1: config 0 descriptor?? [ 548.157654][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.170400][ T3001] IPVS: stop unused estimator thread 0... [ 548.192946][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.247874][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.658064][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.696470][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.697808][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.703652][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.806333][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.813545][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.824822][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.877180][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.909490][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.977963][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1099'. [ 549.025525][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 549.171361][T12196] random: crng reseeded on system resumption [ 549.402011][T12211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1100'. [ 549.652494][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.865574][T12006] veth0_vlan: entered promiscuous mode [ 549.892809][T12071] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 549.903974][T12220] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1102'. [ 549.937333][T12071] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 549.985495][T12223] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 550.006166][T12006] veth1_vlan: entered promiscuous mode [ 550.023294][T12223] PKCS7: Only support pkcs7_signedData type [ 550.054460][T12071] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 550.229159][T12071] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 550.431027][T12006] veth0_macvtap: entered promiscuous mode [ 550.482046][T12006] veth1_macvtap: entered promiscuous mode [ 550.625610][ T5288] usb 1-1: USB disconnect, device number 53 [ 550.819294][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.876963][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.895868][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.919668][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.932954][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.951035][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.984335][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.138332][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.182516][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.267357][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.285641][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.298718][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.309045][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.319913][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.330418][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.341218][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.370769][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.677510][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.775977][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.854027][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.888858][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.944464][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.973534][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.999159][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.024323][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.045549][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.064424][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.124544][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.135772][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.136483][T12249] fuse: Bad value for 'fd' [ 552.164728][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.194311][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.214272][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.234276][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.268048][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.316437][T12006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.344311][T12006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.382068][T12006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.406114][T12006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.619644][T12071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.700228][T12071] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.785611][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.792763][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.950171][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.957308][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.119076][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.146783][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.257600][T12071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.325839][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.355972][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.460553][T12071] veth0_vlan: entered promiscuous mode [ 553.506894][T12071] veth1_vlan: entered promiscuous mode [ 553.592830][T12274] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1063'. [ 553.629619][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.657356][T12071] veth0_macvtap: entered promiscuous mode [ 553.717945][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.801949][T12071] veth1_macvtap: entered promiscuous mode [ 553.850610][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.865575][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.875597][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.886970][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.897823][ T9] IPVS: starting estimator thread 0... [ 553.897825][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.897845][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.962135][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.972932][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.983869][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.995168][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.006224][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.019391][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.060511][T12283] IPVS: using max 21 ests per chain, 50400 per kthread [ 554.081317][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.131845][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.334412][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.372633][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.403963][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.463616][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.527740][T12071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.605407][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.663818][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.690300][T12297] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1113'. [ 554.714585][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.760160][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.808163][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.850019][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.895390][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.943026][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.978818][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.010657][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.040397][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.068185][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.098518][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.127772][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.201504][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.256369][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.316852][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.391688][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.465710][T12071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.548743][T12071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.584478][T12071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.593370][T12071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.638048][T12071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.711985][T12303] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1114'. [ 556.014023][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.056275][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.105730][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.154664][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.267896][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.296897][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.412112][T12331] ip6t_srh: unknown srh invflags 7D00 [ 557.524015][T12357] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1122'. [ 557.552703][T12322] fuse: Bad value for 'fd' [ 557.592989][T12322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.756001][ T5287] IPVS: starting estimator thread 0... [ 557.804532][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.821476][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.831515][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 557.843666][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 557.855990][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 557.863416][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.885144][T12364] IPVS: using max 19 ests per chain, 45600 per kthread [ 558.051267][T12376] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1125'. [ 558.415096][T12390] input: syz0 as /devices/virtual/input/input38 [ 558.429781][T12368] chnl_net:caif_netlink_parms(): no params data found [ 558.724325][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.936290][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.962520][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.997938][T12368] bridge_slave_0: entered allmulticast mode [ 559.029841][T12368] bridge_slave_0: entered promiscuous mode [ 559.075777][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.106072][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.136854][T12368] bridge_slave_1: entered allmulticast mode [ 559.160785][T12368] bridge_slave_1: entered promiscuous mode [ 559.244667][T12407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.253755][T12407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.310236][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.325033][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.361537][T12368] team0: Port device team_slave_0 added [ 559.371519][T12368] team0: Port device team_slave_1 added [ 559.409697][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.416961][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.446269][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.469846][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.485858][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.532120][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.631903][T12368] hsr_slave_0: entered promiscuous mode [ 559.642396][T12368] hsr_slave_1: entered promiscuous mode [ 559.651893][T12416] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1128'. [ 559.662088][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.671337][T12368] Cannot create hsr debugfs directory [ 559.924723][ T5234] Bluetooth: hci2: command tx timeout [ 559.988058][T12368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.129113][T12368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.242988][T12368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.360013][T12368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.570131][T12368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 560.598686][T12368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 560.604846][T12368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 560.607739][T12368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 560.608087][ T29] audit: type=1326 audit(1728515604.760:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.1.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c17dff9 code=0x0 [ 560.810196][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.869453][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.909757][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.917022][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.006110][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.013271][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.179011][T12368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.385985][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.415385][T12451] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1133'. [ 561.963082][T12368] veth0_vlan: entered promiscuous mode [ 562.030657][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.134294][ T5234] Bluetooth: hci2: command tx timeout [ 562.193914][T12368] veth1_vlan: entered promiscuous mode [ 562.277647][T12368] veth0_macvtap: entered promiscuous mode [ 562.305159][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.368062][T12368] veth1_macvtap: entered promiscuous mode [ 562.503264][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.570329][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.627269][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.688157][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.715739][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.727502][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.738113][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.824822][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.874558][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.886729][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.897127][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.907950][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.920351][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.931417][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.941865][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.078410][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.095993][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.107276][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.125196][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.137534][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.238013][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.306404][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.373034][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.434580][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.492163][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.514003][T12472] fuse: Bad value for 'fd' [ 563.535219][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.567051][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.594468][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.632018][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.662999][ T29] audit: type=1326 audit(1728515607.710:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.744374][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.755596][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.794424][ T29] audit: type=1326 audit(1728515607.710:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.826456][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.869000][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.881384][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.887483][ T29] audit: type=1326 audit(1728515607.710:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.916763][ T29] audit: type=1326 audit(1728515607.710:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.939945][ T29] audit: type=1326 audit(1728515607.710:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.951342][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.962728][ T29] audit: type=1326 audit(1728515607.710:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 563.998124][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.009036][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.019415][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.030494][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.041204][ T29] audit: type=1326 audit(1728515607.710:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 564.063803][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.064406][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.070243][ T29] audit: type=1326 audit(1728515607.710:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 564.081179][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.105165][ T29] audit: type=1326 audit(1728515607.710:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6bd37dff9 code=0x7ffc0000 [ 564.167421][ T5234] Bluetooth: hci2: command tx timeout [ 564.303326][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.327182][T12368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.346544][T12368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.381752][T12480] SET target dimension over the limit! [ 564.547119][T12368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.574636][T12368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.732498][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.739062][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.396745][T12484] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 565.403211][T12484] PKCS7: Only support pkcs7_signedData type [ 565.689382][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.708095][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.107852][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.134606][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.244804][ T5234] Bluetooth: hci2: command tx timeout [ 566.322638][T12497] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 566.369373][T12497] team0: Port device netdevsim0 added [ 566.381135][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.432359][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.485090][T12500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.558873][T12494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.573460][T12503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.437314][T12513] netlink: 'syz.1.1146': attribute type 21 has an invalid length. [ 567.458286][T12513] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1146'. [ 567.554781][T12513] netlink: 'syz.1.1146': attribute type 5 has an invalid length. [ 567.636277][T12513] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1146'. [ 567.657823][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.669001][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.823209][ T9] IPVS: starting estimator thread 0... [ 567.842989][T12520] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 567.919970][T12521] IPVS: using max 28 ests per chain, 67200 per kthread [ 569.733915][T12545] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1154'. [ 569.743673][T12545] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 571.034429][ T5289] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 571.101808][T12571] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 571.109370][T12571] PKCS7: Only support pkcs7_signedData type [ 571.845009][ T5289] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 571.854230][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.862263][ T5289] usb 1-1: Product: syz [ 571.866533][ T5289] usb 1-1: Manufacturer: syz [ 571.871141][ T5289] usb 1-1: SerialNumber: syz [ 571.883418][ T5289] usb 1-1: config 0 descriptor?? [ 572.107397][T12559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.137433][T12559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.220851][ T5289] viperboard 1-1:0.0: version 0.00 found at bus 001 address 054 [ 572.239957][ T3001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.282191][ T5289] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 572.292391][T12585] fuse: Unknown parameter 'use00000000000000000000' [ 572.304451][ T5289] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 572.358946][ T5289] usb 1-1: USB disconnect, device number 54 [ 572.384771][T12576] netlink: 'syz.4.1163': attribute type 7 has an invalid length. [ 572.427039][T12581] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1163'. [ 572.439556][T12581] 0ªX¹¦À: renamed from caif0 [ 572.677590][T12581] 0ªX¹¦À: entered allmulticast mode [ 572.687715][T12581] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 572.830806][ T4626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 572.852571][ T4626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 572.870028][ T4626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 572.870101][ T3001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.924518][ T4626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 572.945999][ T4626] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 572.953404][ T4626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 573.277359][ T3001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.471868][ T3001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.616285][T12598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.693917][T12597] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.703011][T12597] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.711929][T12597] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.720722][T12597] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.099226][T12614] tls_set_device_offload: netdev not found [ 574.250859][T12592] chnl_net:caif_netlink_parms(): no params data found [ 574.329816][ T3001] bridge_slave_1: left allmulticast mode [ 574.349245][ T3001] bridge_slave_1: left promiscuous mode [ 574.398112][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.437221][ T3001] bridge_slave_0: left allmulticast mode [ 574.458437][ T3001] bridge_slave_0: left promiscuous mode [ 574.502590][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.521325][T12624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.055776][ T4626] Bluetooth: hci8: command tx timeout [ 575.654245][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 575.694266][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.814325][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 575.840194][ T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 575.932156][ T9] usb 1-1: can't read configurations, error -22 [ 576.006670][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.027981][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.039954][ T3001] bond0 (unregistering): Released all slaves [ 576.154789][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 576.334245][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 576.334625][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.355597][ T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 576.385678][ T9] usb 1-1: can't read configurations, error -22 [ 576.394890][ T9] usb usb1-port1: attempt power cycle [ 576.395521][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.410333][T12592] bridge_slave_0: entered allmulticast mode [ 576.420006][T12592] bridge_slave_0: entered promiscuous mode [ 576.475265][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.482342][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.503595][T12592] bridge_slave_1: entered allmulticast mode [ 576.514424][T12592] bridge_slave_1: entered promiscuous mode [ 576.597569][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.685757][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.774474][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 576.804498][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 576.874626][ T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 576.883324][ T9] usb 1-1: can't read configurations, error -22 [ 576.972613][T12592] team0: Port device team_slave_0 added [ 577.044454][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 577.050798][ T4626] Bluetooth: hci1: command 0x0406 tx timeout [ 577.125818][ T5234] Bluetooth: hci8: command tx timeout [ 577.128237][T12592] team0: Port device team_slave_1 added [ 577.144211][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 577.178467][ T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 577.251981][ T9] usb 1-1: can't read configurations, error -22 [ 577.274663][ T9] usb usb1-port1: unable to enumerate USB device [ 577.275675][T12659] fuse: Unknown parameter 'use00000000000000000000' [ 577.355551][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.394302][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.534757][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.576724][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.583722][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.707402][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.191813][ T3001] hsr_slave_0: left promiscuous mode [ 578.242401][ T3001] hsr_slave_1: left promiscuous mode [ 578.346999][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.356261][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.409527][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.475070][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.710230][ T3001] veth1_macvtap: left promiscuous mode [ 578.732309][ T3001] veth0_macvtap: left promiscuous mode [ 578.738050][ T3001] veth1_vlan: left promiscuous mode [ 578.798149][ T3001] veth0_vlan: left promiscuous mode [ 578.807908][ T4626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 578.824339][ T4626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 578.832909][ T4626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 578.844855][ T4626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 578.852578][ T4626] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 578.862247][ T4626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 578.894370][ T25] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 579.051087][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 579.071531][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 579.125829][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 579.144307][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 579.180627][ T25] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 579.189787][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.200673][ T25] usb 1-1: Product: syz [ 579.206276][ T25] usb 1-1: Manufacturer: syz [ 579.210963][ T4626] Bluetooth: hci8: command tx timeout [ 579.216553][ T25] usb 1-1: SerialNumber: syz [ 579.222786][ T25] usb 1-1: config 0 descriptor?? [ 579.256955][ T25] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 580.557879][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 580.639827][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 580.857606][T12702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.884933][ T4626] Bluetooth: hci7: command tx timeout [ 581.284485][ T4626] Bluetooth: hci8: command tx timeout [ 581.651910][ T25] scsi host1: usb-storage 1-1:0.0 [ 581.692576][ T25] usb 1-1: USB disconnect, device number 59 [ 581.958182][T12711] netlink: 'syz.4.1191': attribute type 9 has an invalid length. [ 581.966931][T12711] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1191'. [ 582.192564][T12592] hsr_slave_0: entered promiscuous mode [ 582.208417][T12592] hsr_slave_1: entered promiscuous mode [ 582.235557][T12592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.243132][T12592] Cannot create hsr debugfs directory [ 582.436443][T12712] netlink: 'syz.4.1191': attribute type 9 has an invalid length. [ 582.469614][T12712] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1191'. [ 582.965124][ T4626] Bluetooth: hci7: command tx timeout [ 583.221318][T12690] chnl_net:caif_netlink_parms(): no params data found [ 583.272630][ T3001] IPVS: stop unused estimator thread 0... [ 583.560176][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 583.571009][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 583.580315][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 583.588470][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 583.607659][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 583.615232][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 584.272175][ T3001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.305784][ T3001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.382366][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.390920][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.449119][T12690] bridge_slave_0: entered allmulticast mode [ 584.487070][T12690] bridge_slave_0: entered promiscuous mode [ 584.562558][ T3001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.574281][ T3001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.598267][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.614304][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.621676][T12690] bridge_slave_1: entered allmulticast mode [ 584.648560][T12690] bridge_slave_1: entered promiscuous mode [ 584.752899][ T3001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.771711][ T3001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.821322][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.908439][ T3001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.919588][ T3001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.943673][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.044551][ T5234] Bluetooth: hci7: command tx timeout [ 585.137588][T12690] team0: Port device team_slave_0 added [ 585.148388][T12592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.202564][T12690] team0: Port device team_slave_1 added [ 585.231647][T12592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.261909][T12592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.424689][T12592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.451264][T12690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.459234][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.487627][T12690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.507922][T12690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.516027][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.584290][T12690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.650896][T12730] chnl_net:caif_netlink_parms(): no params data found [ 585.684794][ T5234] Bluetooth: hci6: command tx timeout [ 585.807996][ T3001] bridge_slave_1: left allmulticast mode [ 585.822977][ T3001] bridge_slave_1: left promiscuous mode [ 585.840863][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.876439][ T3001] bridge_slave_0: left allmulticast mode [ 585.882158][ T3001] bridge_slave_0: left promiscuous mode [ 585.896052][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.932065][ T4626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.943601][ T4626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.964922][ T4626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.984355][ T4626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.993977][ T4626] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 586.001515][ T4626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.768460][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.791306][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.822692][ T3001] bond0 (unregistering): Released all slaves [ 586.933496][T12690] hsr_slave_0: entered promiscuous mode [ 586.980472][T12690] hsr_slave_1: entered promiscuous mode [ 586.997541][T12690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.005336][T12690] Cannot create hsr debugfs directory [ 587.138043][ T5234] Bluetooth: hci7: command tx timeout [ 587.498836][T12730] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.510724][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.520748][T12730] bridge_slave_0: entered allmulticast mode [ 587.543872][T12730] bridge_slave_0: entered promiscuous mode [ 587.631316][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.650805][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.664549][T12730] bridge_slave_1: entered allmulticast mode [ 587.682126][T12730] bridge_slave_1: entered promiscuous mode [ 587.704440][ T5242] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 587.742142][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.764911][ T5234] Bluetooth: hci6: command tx timeout [ 587.887181][ T5242] usb 1-1: Using ep0 maxpacket: 16 [ 587.898439][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.912302][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.951219][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.975085][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.028330][ T5242] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.070940][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.097422][T12730] team0: Port device team_slave_0 added [ 588.125836][ T5242] usb 1-1: config 0 descriptor?? [ 588.153210][ T3001] hsr_slave_0: left promiscuous mode [ 588.161117][ T3001] hsr_slave_1: left promiscuous mode [ 588.175231][ T4626] Bluetooth: hci1: command tx timeout [ 588.183689][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.199162][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.213526][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.222581][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.282962][ T3001] veth1_macvtap: left promiscuous mode [ 588.300044][ T3001] veth0_macvtap: left promiscuous mode [ 588.314697][ T3001] veth1_vlan: left promiscuous mode [ 588.324828][ T3001] veth0_vlan: left promiscuous mode [ 588.547222][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.561125][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.574382][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.581686][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.594178][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.601465][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.624424][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.634493][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.641767][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.661508][ T5242] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 588.714318][ T5242] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input39 [ 588.795241][ T5242] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 589.699464][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 589.776136][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 589.848808][ T4626] Bluetooth: hci6: command tx timeout [ 589.988683][ T5289] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 590.124455][ T5289] usb 1-1: device descriptor read/64, error -32 [ 590.254800][ T4626] Bluetooth: hci1: command tx timeout [ 590.390958][ T5289] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 590.553589][ T5289] usb 1-1: device descriptor read/64, error -32 [ 590.722383][T12730] team0: Port device team_slave_1 added [ 590.897858][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.910367][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.961597][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.033827][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.052297][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.127627][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.397025][T12730] hsr_slave_0: entered promiscuous mode [ 591.413545][T12730] hsr_slave_1: entered promiscuous mode [ 591.434603][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.455401][ T46] usb 1-1: USB disconnect, device number 60 [ 591.482486][T12730] Cannot create hsr debugfs directory [ 591.517410][ T3001] IPVS: stop unused estimator thread 0... [ 591.586730][T12763] chnl_net:caif_netlink_parms(): no params data found [ 591.699173][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.849814][ T3001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.924876][ T4626] Bluetooth: hci6: command tx timeout [ 591.960700][T12690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 592.096966][ T3001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.162211][T12690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 592.253834][ T3001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.289491][T12690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 592.334289][ T4626] Bluetooth: hci1: command tx timeout [ 592.348531][T12690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 592.401723][ T3001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.415008][ T4626] Bluetooth: hci5: command 0x0406 tx timeout [ 592.463016][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.516239][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.523377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.533409][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.540592][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.584862][T12763] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.592015][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.600389][T12763] bridge_slave_0: entered allmulticast mode [ 592.609857][T12763] bridge_slave_0: entered promiscuous mode [ 592.618682][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.626497][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.633883][T12763] bridge_slave_1: entered allmulticast mode [ 592.641719][T12763] bridge_slave_1: entered promiscuous mode [ 592.817938][T12763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.853905][T12763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.939505][T12730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.023676][T12763] team0: Port device team_slave_0 added [ 593.046144][T12763] team0: Port device team_slave_1 added [ 593.162836][T12730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.242581][ T3001] bridge_slave_1: left allmulticast mode [ 593.248592][ T3001] bridge_slave_1: left promiscuous mode [ 593.264660][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.274957][ T3001] bridge_slave_0: left allmulticast mode [ 593.285058][ T3001] bridge_slave_0: left promiscuous mode [ 593.291054][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.345210][ T3001] xfrm0: left allmulticast mode [ 593.350129][ T3001] xfrm0: left promiscuous mode [ 593.716157][ T3001] team0: Port device vlan2 removed [ 594.134295][ T6179] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 594.211755][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.223585][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.236670][ T3001] bond0 (unregistering): Released all slaves [ 594.279778][T12730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.294213][ T6179] usb 1-1: Using ep0 maxpacket: 16 [ 594.318961][ T6179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.334624][ T6179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.345163][ T6179] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 594.355560][T12763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.362533][T12763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.389070][ T6179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.399573][ T6179] usb 1-1: config 0 descriptor?? [ 594.405935][ T5234] Bluetooth: hci1: command tx timeout [ 594.428099][T12763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.443557][T12763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.451226][T12763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.480640][T12763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.539833][T12730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.615654][T12592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.673044][T12763] hsr_slave_0: entered promiscuous mode [ 594.681496][T12763] hsr_slave_1: entered promiscuous mode [ 594.688530][T12763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.698107][T12763] Cannot create hsr debugfs directory [ 594.841732][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.874578][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.373222][T12592] veth0_vlan: entered promiscuous mode [ 595.472741][ T6179] usbhid 1-1:0.0: can't add hid device: -71 [ 595.479971][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.487554][ T6179] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 595.518415][ T6179] usb 1-1: USB disconnect, device number 61 [ 595.568269][ T3001] hsr_slave_0: left promiscuous mode [ 595.585869][ T3001] hsr_slave_1: left promiscuous mode [ 595.592330][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.604187][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.625104][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.632634][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.666438][ T3001] veth1_macvtap: left promiscuous mode [ 595.672110][ T3001] veth0_macvtap: left promiscuous mode [ 595.678337][ T3001] veth1_vlan: left promiscuous mode [ 595.683660][ T3001] veth0_vlan: left promiscuous mode [ 596.587387][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 596.652198][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 597.502444][T12730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.569111][T12730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 597.607132][T12592] veth1_vlan: entered promiscuous mode [ 597.653525][T12730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 597.664371][T12730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.733132][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.188589][T12592] veth0_macvtap: entered promiscuous mode [ 598.549419][T12592] veth1_macvtap: entered promiscuous mode [ 598.593093][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.600295][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.633339][ T3001] IPVS: stop unused estimator thread 0... [ 598.819693][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.826914][ T8635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.286821][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.300339][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.325787][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.351528][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.375988][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.404977][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.472076][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.493607][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.506083][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.517479][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.541516][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.572639][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.587566][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.609714][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.639128][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.664827][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.690974][T12592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.716018][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.746716][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.766492][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.789700][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.820636][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.994321][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.004968][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.015933][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.026898][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.046457][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.073353][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.098583][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.124267][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.134867][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.145706][T12592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.179848][T12592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.216901][T12592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.286137][T12730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.313699][T12592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.333243][T12592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.360345][T12592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.380020][T12592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.515777][T12763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.537291][T12763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.574950][T12763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.611818][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.680355][T12763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.891031][T12730] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.030415][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.037616][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.132189][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.139421][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.311147][T12690] veth0_vlan: entered promiscuous mode [ 601.366914][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.394525][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.477677][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.505031][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.570010][T12690] veth1_vlan: entered promiscuous mode [ 601.680020][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.709180][T12763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.723658][T12763] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.738833][T12690] veth0_macvtap: entered promiscuous mode [ 601.786902][T12690] veth1_macvtap: entered promiscuous mode [ 601.807727][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.814930][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.839086][T12730] veth0_vlan: entered promiscuous mode [ 601.860270][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.867423][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.892568][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.906424][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.918090][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.930078][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.941514][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.953777][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.972458][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.016085][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.034397][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.046942][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.058137][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.068945][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.079223][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.097196][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.122244][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.134211][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.144056][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.170560][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.199592][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.220871][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.236044][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.247904][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.259313][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.269840][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.280466][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.292506][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.303584][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.314069][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.325846][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.345790][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.357241][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.367527][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.378245][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.388376][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.401523][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.411952][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.422530][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.434481][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.460220][T12690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.477469][T12690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.495414][T12690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.512907][T12690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.596213][T12730] veth1_vlan: entered promiscuous mode [ 602.612768][T12929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 602.619724][T12929] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 602.635364][T12929] vhci_hcd vhci_hcd.0: Device attached [ 602.807206][T12730] veth0_macvtap: entered promiscuous mode [ 602.867595][T12730] veth1_macvtap: entered promiscuous mode [ 602.874343][T12316] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 602.888756][ T8635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.910636][ T8635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.960147][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.987553][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.007401][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.028339][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.039185][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.051190][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.061771][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.073103][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.083531][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.094811][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.105128][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.114246][ T937] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 603.118066][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.135854][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.147701][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.158294][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.169423][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.179373][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.190000][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.199976][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.211563][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.227115][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.242152][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.253390][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.264417][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 603.265843][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.280476][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.291170][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.294354][ T937] usb 1-1: config 0 has no interfaces? [ 603.302271][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.318949][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.326204][ T937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.329651][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.348703][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.348773][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.369811][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.374226][ T937] usb 1-1: Product: syz [ 603.379974][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.384353][ T937] usb 1-1: Manufacturer: syz [ 603.399437][ T937] usb 1-1: SerialNumber: syz [ 603.402167][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.412917][ T937] usb 1-1: config 0 descriptor?? [ 603.428420][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.448889][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.461871][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.474536][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.485646][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.496196][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.506211][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.516794][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.529476][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.576656][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.592856][T12730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.601940][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.634421][T12730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.681273][T12730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.704291][T12730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.789008][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.940068][T12929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'. [ 604.065912][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 604.067608][T12763] veth0_vlan: entered promiscuous mode [ 604.089065][ T8635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.103658][T12763] veth1_vlan: entered promiscuous mode [ 604.124239][ T8635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.223585][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.251107][T12763] veth0_macvtap: entered promiscuous mode [ 604.258490][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.291633][T12763] veth1_macvtap: entered promiscuous mode [ 604.365711][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.396845][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.408720][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.419770][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.434443][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.447966][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.458134][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.469690][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.480022][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.490936][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 604.490948][ T29] audit: type=1326 audit(1728515648.650:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.524473][ T29] audit: type=1326 audit(1728515648.650:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.525052][ T5288] usb 1-1: USB disconnect, device number 62 [ 604.565126][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.575698][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.586664][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.597388][ T29] audit: type=1326 audit(1728515648.650:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.625180][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.636507][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.650061][ T29] audit: type=1326 audit(1728515648.650:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.673673][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.690182][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.707338][ T29] audit: type=1326 audit(1728515648.650:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.740818][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.775227][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.790318][ T29] audit: type=1326 audit(1728515648.650:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.823001][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.846548][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.869159][ T29] audit: type=1326 audit(1728515648.650:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.901273][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.922402][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.945239][T12763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.947832][ T29] audit: type=1326 audit(1728515648.650:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 604.978186][ T29] audit: type=1326 audit(1728515648.720:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 605.000767][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.012097][ T29] audit: type=1326 audit(1728515648.720:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe97dff9 code=0x7ffc0000 [ 605.092453][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.102506][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.121752][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.141394][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.169036][T12930] vhci_hcd: connection reset by peer [ 605.183097][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.193352][ T52] vhci_hcd: stop threads [ 605.198058][ T52] vhci_hcd: release socket [ 605.205015][ T52] vhci_hcd: disconnect device [ 605.280936][T12960] syz.1.1217 (12960): drop_caches: 2 [ 605.287218][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.318353][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.341994][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.561139][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.654042][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.736647][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.787305][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.818095][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.860676][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.904352][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.941889][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.976799][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.999676][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.032648][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.058588][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.092192][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.114475][T12763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.140857][T12763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.173296][T12763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.250626][T12763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.270194][T12763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.294812][T12763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.323435][T12763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.264411][ T8635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.274485][ T8635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.341701][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.361658][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.705913][T12991] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 608.006093][T12316] vhci_hcd: vhci_device speed not set [ 608.494997][T13005] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 608.717124][T13007] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 608.726989][T13005] program syz.3.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.745001][ T937] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 608.921623][T13011] syz.2.1227 (13011): attempted to duplicate a private mapping with mremap. This is not supported. [ 609.112284][ T937] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 609.225515][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.239502][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 609.265448][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.294652][T13013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.330623][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 609.408469][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1229'. [ 609.481797][ T937] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 609.491453][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.511832][ T937] usb 1-1: config 0 descriptor?? [ 609.986580][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.004783][ T937] wacom 0003:056A:0331.0013: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 610.168872][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.841730][T13030] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1233'. [ 610.993286][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 611.033748][T12901] IPVS: starting estimator thread 0... [ 611.090474][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.135360][T13035] IPVS: using max 17 ests per chain, 40800 per kthread [ 611.147369][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.563293][T12906] usb 1-1: USB disconnect, device number 63 [ 611.764666][ T5234] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 611.775062][ T5234] Bluetooth: hci8: Injecting HCI hardware error event [ 611.790903][ T5234] Bluetooth: hci8: hardware error 0x00 [ 612.754737][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 612.961326][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1236'. [ 613.112135][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.516542][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.778922][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.931364][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.024549][ T5234] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 614.280271][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 614.359563][ T35] bridge_slave_1: left allmulticast mode [ 614.369878][ T35] bridge_slave_1: left promiscuous mode [ 614.403911][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.454273][T12901] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 614.523453][ T35] bridge_slave_0: left allmulticast mode [ 614.534349][ T35] bridge_slave_0: left promiscuous mode [ 614.552919][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.615939][T12901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 614.658061][T12901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 204, setting to 64 [ 614.700810][T12901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 614.734040][T12901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.772532][T12901] usb 1-1: config 0 descriptor?? [ 614.795316][T13067] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 615.025892][T12901] ath6kl: Failed to submit usb control message: -71 [ 615.049513][ T4626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 615.054685][T12901] ath6kl: unable to send the bmi data to the device: -71 [ 615.066976][ T4626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 615.080319][ T4626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 615.094638][T12901] ath6kl: Unable to send get target info: -71 [ 615.094660][ T4626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 615.110185][ T4626] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 615.118495][ T4626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 615.146587][T12901] ath6kl: Failed to init ath6kl core: -71 [ 615.190662][T12901] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 615.332751][T12901] usb 1-1: USB disconnect, device number 64 [ 616.264339][T12316] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 616.494374][T12316] usb 1-1: Using ep0 maxpacket: 8 [ 616.536106][T12316] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 616.576647][T12316] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 616.604188][T12316] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.640573][T12316] usb 1-1: config 1 interface 2 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 616.672566][T12316] usb 1-1: config 1 interface 2 has no altsetting 1 [ 616.708503][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.717784][T12316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.732500][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.760820][ T35] bond0 (unregistering): Released all slaves [ 616.774242][T12316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.782281][T12316] usb 1-1: Product: syz [ 616.794795][ T35] bond1 (unregistering): Released all slaves [ 616.821290][T12316] usb 1-1: Manufacturer: syz [ 616.831505][T12316] usb 1-1: SerialNumber: syz [ 617.207724][ T4626] Bluetooth: hci8: command tx timeout [ 617.335913][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 617.401651][ T35] hsr_slave_0: left promiscuous mode [ 617.448980][ T35] hsr_slave_1: left promiscuous mode [ 617.499857][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.540168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.588600][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.629780][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.730311][ T35] veth1_macvtap: left promiscuous mode [ 617.759373][ T35] veth0_macvtap: left promiscuous mode [ 617.789210][ T35] veth1_vlan: left promiscuous mode [ 617.803186][ T35] veth0_vlan: left promiscuous mode [ 619.073617][T12316] usb 1-1: USB disconnect, device number 65 [ 619.274535][ T5231] udevd[5231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.295969][ T4626] Bluetooth: hci8: command tx timeout [ 620.011479][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 620.052112][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 620.052132][ T29] audit: type=1326 audit(1728515664.210:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1077dff9 code=0x7ffc0000 [ 620.084033][ T29] audit: type=1326 audit(1728515664.250:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1077dff9 code=0x7ffc0000 [ 621.364635][ T4626] Bluetooth: hci8: command tx timeout [ 622.283563][ T35] team0 (unregistering): Port device team_slave_1 removed [ 622.767808][ T35] team0 (unregistering): Port device team_slave_0 removed [ 623.449604][ T4626] Bluetooth: hci8: command tx timeout [ 624.848177][T13156] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1256'. [ 625.184286][T13095] chnl_net:caif_netlink_parms(): no params data found [ 625.627593][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 625.949731][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1266'. [ 626.041200][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.059261][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.094549][T13095] bridge_slave_0: entered allmulticast mode [ 626.116220][T13095] bridge_slave_0: entered promiscuous mode [ 626.144894][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.192732][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.207007][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.227879][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.274987][T13095] bridge_slave_1: entered allmulticast mode [ 626.286979][T13095] bridge_slave_1: entered promiscuous mode [ 626.416823][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.542396][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.952994][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.014852][T13095] team0: Port device team_slave_0 added [ 627.086103][T13095] team0: Port device team_slave_1 added [ 627.512483][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.577953][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.594873][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.666979][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.680573][T13260] Cannot find add_set index 0 as target [ 627.877148][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.035113][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.042145][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.124138][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.192257][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 628.219455][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 628.247757][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 628.276295][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 628.316037][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 628.332476][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 628.378926][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.493865][T13271] netlink: del zone limit has 8 unknown bytes [ 628.733254][T13095] hsr_slave_0: entered promiscuous mode [ 628.747585][T13095] hsr_slave_1: entered promiscuous mode [ 628.804949][T13095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.818797][T13095] Cannot create hsr debugfs directory [ 629.194471][ T5288] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 629.213142][ T35] bridge_slave_1: left allmulticast mode [ 629.219907][ T35] bridge_slave_1: left promiscuous mode [ 629.228278][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.250837][ T35] bridge_slave_0: left allmulticast mode [ 629.257189][ T35] bridge_slave_0: left promiscuous mode [ 629.263281][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.358582][ T5288] usb 1-1: Using ep0 maxpacket: 8 [ 629.380436][ T5288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 629.390046][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.410514][ T5288] usb 1-1: Product: syz [ 629.420671][ T5288] usb 1-1: Manufacturer: syz [ 629.436199][ T5288] usb 1-1: SerialNumber: syz [ 629.509524][T13295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.576267][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 629.846372][T13299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.092709][ T5234] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 630.105149][ T5234] Bluetooth: hci2: Injecting HCI hardware error event [ 630.127447][ T4626] Bluetooth: hci2: hardware error 0x00 [ 630.250040][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.262928][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.274289][ T35] bond0 (unregistering): Released all slaves [ 630.321122][T13301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 630.486191][ T5234] Bluetooth: hci6: command tx timeout [ 630.931729][T13272] chnl_net:caif_netlink_parms(): no params data found [ 631.161551][ T35] hsr_slave_0: left promiscuous mode [ 631.181652][ T35] hsr_slave_1: left promiscuous mode [ 631.189963][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.207403][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.224963][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.232452][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.260793][ T35] veth1_macvtap: left promiscuous mode [ 631.266557][ T35] veth0_macvtap: left promiscuous mode [ 631.273089][ T35] veth1_vlan: left promiscuous mode [ 631.279356][ T35] veth0_vlan: left promiscuous mode [ 632.248151][ T4626] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 632.410741][ T35] team0 (unregistering): Port device team_slave_1 removed [ 632.512699][ T35] team0 (unregistering): Port device team_slave_0 removed [ 632.569491][ T4626] Bluetooth: hci6: command tx timeout [ 633.398586][T13332] netlink: 'syz.3.1289': attribute type 4 has an invalid length. [ 633.414016][T13333] netlink: 'syz.3.1289': attribute type 4 has an invalid length. [ 633.623629][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.642707][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.650610][T13272] bridge_slave_0: entered allmulticast mode [ 633.658349][T13272] bridge_slave_0: entered promiscuous mode [ 633.683512][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.693706][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.701428][T13272] bridge_slave_1: entered allmulticast mode [ 633.708994][T13272] bridge_slave_1: entered promiscuous mode [ 633.771133][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.799734][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.821444][T13095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 633.837147][T13095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 633.868182][T13095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 633.891155][T13272] team0: Port device team_slave_0 added [ 633.905146][T13095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.929769][T13272] team0: Port device team_slave_1 added [ 633.972746][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.980007][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.010029][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.029639][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.039918][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.066973][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.175707][T13272] hsr_slave_0: entered promiscuous mode [ 634.196116][T13272] hsr_slave_1: entered promiscuous mode [ 634.202761][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.211040][T13272] Cannot create hsr debugfs directory [ 634.549211][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.632854][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.644854][ T4626] Bluetooth: hci6: command tx timeout [ 634.731825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.739073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.810267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.817590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.082056][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.170434][T13272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.216888][T13095] veth0_vlan: entered promiscuous mode [ 635.243579][T13272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 635.276156][T13272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 635.300040][T13272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 635.323251][T13095] veth1_vlan: entered promiscuous mode [ 635.442986][T13095] veth0_macvtap: entered promiscuous mode [ 635.483272][T13095] veth1_macvtap: entered promiscuous mode [ 635.579316][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.589957][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.605765][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.616441][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.628616][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.639416][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.650452][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.660617][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.671501][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.684047][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.696412][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.707305][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.718217][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.734855][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.750577][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.760808][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.772398][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.784712][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.795874][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.806333][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.819176][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.837722][T13095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.858083][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.881032][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.891101][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.904384][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.904633][T13370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.915030][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.937132][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.947434][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.964219][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.979811][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.991281][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.002494][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.014622][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.014652][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.014667][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.014690][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.062922][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.073310][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.087568][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.097639][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.108215][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.119990][T13095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.160174][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.172462][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.179707][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.197283][T13375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.226527][T13095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.236206][T13095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.246273][T13095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.257449][T13095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.270343][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.277541][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.528873][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.543977][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.553588][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.661651][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.678553][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.702251][T13272] veth0_vlan: entered promiscuous mode [ 636.726186][ T4626] Bluetooth: hci6: command tx timeout [ 636.742961][T13272] veth1_vlan: entered promiscuous mode [ 636.818235][T13272] veth0_macvtap: entered promiscuous mode [ 636.869932][T13272] veth1_macvtap: entered promiscuous mode [ 636.948442][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.989924][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.014238][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.035060][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.050634][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 637.064469][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.084006][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.095623][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.112661][ T30] task:kworker/0:0 state:D stack:20496 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 637.127870][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.174668][ T30] Workqueue: usb_hub_wq hub_event [ 637.180115][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.212671][ T30] Call Trace: [ 637.218961][ T30] [ 637.221940][ T30] __schedule+0x1895/0x4b30 [ 637.235222][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.245273][ T30] ? __pfx___schedule+0x10/0x10 [ 637.250259][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.274399][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.294295][ T30] ? __pfx_lock_release+0x10/0x10 [ 637.299408][ T30] ? kick_pool+0x1bd/0x620 [ 637.303873][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.309742][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.324150][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 637.335429][ T30] ? schedule+0x90/0x320 [ 637.339730][ T30] schedule+0x14b/0x320 [ 637.343908][ T30] schedule_preempt_disabled+0x13/0x30 [ 637.346994][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.374842][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.385008][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 637.390830][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 637.404348][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.406942][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 637.423876][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.429012][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 637.454160][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.454294][ T30] ? kobject_put+0x272/0x480 [ 637.474198][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.484327][ T30] down_write+0x1d7/0x220 [ 637.488704][ T30] ? __pfx_down_write+0x10/0x10 [ 637.493574][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 637.500205][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 637.504256][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.507038][ T30] usb_deregister_dev+0x88/0x210 [ 637.523261][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.533756][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.544754][ T30] usblp_disconnect+0x54/0x2d0 [ 637.549601][ T30] usb_unbind_interface+0x25e/0x940 [ 637.556817][ T30] ? kernfs_put+0x315/0x370 [ 637.561384][ T30] ? sysfs_remove_group+0x242/0x2c0 [ 637.567221][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 637.572994][ T30] device_release_driver_internal+0x503/0x7c0 [ 637.574277][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.579709][ T30] bus_remove_device+0x34f/0x420 [ 637.594596][ T30] device_del+0x57a/0x9b0 [ 637.598973][ T30] ? kobject_put+0x272/0x480 [ 637.603592][ T30] ? __pfx_device_del+0x10/0x10 [ 637.610353][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.622202][ T30] ? kobject_put+0x44d/0x480 [ 637.627425][ T30] usb_disable_device+0x3bf/0x850 [ 637.632510][ T30] usb_disconnect+0x340/0x950 [ 637.637615][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.648070][ T30] hub_event+0x1ebc/0x5150 [ 637.652561][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 637.660983][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.670087][ T30] ? __pfx_hub_event+0x10/0x10 [ 637.676149][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 637.681236][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.704227][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.714362][ T30] ? process_scheduled_works+0x976/0x1850 [ 637.720147][ T30] process_scheduled_works+0xa63/0x1850 [ 637.731122][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.738627][ T30] ? assign_work+0x364/0x3d0 [ 637.743273][ T30] worker_thread+0x870/0xd30 [ 637.748527][ T30] ? __kthread_parkme+0x169/0x1d0 [ 637.753644][ T30] ? __pfx_worker_thread+0x10/0x10 [ 637.765739][ T30] kthread+0x2f0/0x390 [ 637.770002][ T30] ? __pfx_worker_thread+0x10/0x10 [ 637.781994][ T30] ? __pfx_kthread+0x10/0x10 [ 637.786930][ T30] ret_from_fork+0x4b/0x80 [ 637.791464][ T30] ? __pfx_kthread+0x10/0x10 [ 637.796390][ T30] ret_from_fork_asm+0x1a/0x30 [ 637.801207][ T30] [ 637.804539][ T30] INFO: task kworker/1:2:1168 blocked for more than 144 seconds. [ 637.812389][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 637.841590][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.875813][ T30] task:kworker/1:2 state:D stack:19856 pid:1168 tgid:1168 ppid:2 flags:0x00004000 [ 637.901838][ T30] Workqueue: usb_hub_wq hub_event [ 637.914469][ T30] Call Trace: [ 637.917808][ T30] [ 637.920755][ T30] __schedule+0x1895/0x4b30 [ 637.944848][ T30] ? __pfx___schedule+0x10/0x10 [ 637.949779][ T30] ? __pfx_lock_release+0x10/0x10 [ 637.964358][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.970413][ T30] ? kthread_data+0x52/0xd0 [ 637.978304][ T30] ? schedule+0x90/0x320 [ 637.982610][ T30] ? wq_worker_sleeping+0x66/0x240 [ 638.037358][ T30] ? schedule+0x90/0x320 [ 638.041677][ T30] schedule+0x14b/0x320 [ 638.046127][ T30] schedule_preempt_disabled+0x13/0x30 [ 638.051644][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 638.057613][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 638.063919][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 638.070245][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 638.075432][ T30] ? usb_probe_device+0x1b8/0x380 [ 638.080495][ T30] ? really_probe+0x2b8/0xad0 [ 638.085403][ T30] ? usb_new_device+0x104a/0x19a0 [ 638.090460][ T30] ? hub_event+0x2d6d/0x5150 [ 638.095292][ T30] ? process_scheduled_works+0xa63/0x1850 [ 638.101047][ T30] ? mark_lock+0x9a/0x360 [ 638.105490][ T30] down_write+0x1d7/0x220 [ 638.109862][ T30] ? __pfx_down_write+0x10/0x10 [ 638.114848][ T30] usb_register_dev+0x13a/0x5a0 [ 638.119745][ T30] ? __pfx_usb_register_dev+0x10/0x10 [ 638.125234][ T30] ? usb_string+0x45d/0x7a0 [ 638.129776][ T30] adu_probe+0x6d9/0x8d0 [ 638.135411][ T30] usb_probe_interface+0x645/0xbb0 [ 638.140584][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 638.146422][ T30] really_probe+0x2b8/0xad0 [ 638.150977][ T30] __driver_probe_device+0x1a2/0x390 [ 638.156366][ T30] driver_probe_device+0x50/0x430 [ 638.161441][ T30] __device_attach_driver+0x2d6/0x530 [ 638.167214][ T30] bus_for_each_drv+0x24e/0x2e0 [ 638.172119][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 638.178218][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 638.183628][ T30] __device_attach+0x333/0x520 [ 638.188560][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.193675][ T30] ? __pfx___device_attach+0x10/0x10 [ 638.199271][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 638.204620][ T30] bus_probe_device+0x189/0x260 [ 638.209513][ T30] device_add+0x856/0xbf0 [ 638.213933][ T30] usb_set_configuration+0x1976/0x1fb0 [ 638.219629][ T30] usb_generic_driver_probe+0x88/0x140 [ 638.225180][ T30] usb_probe_device+0x1b8/0x380 [ 638.230083][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 638.237585][ T30] really_probe+0x2b8/0xad0 [ 638.242154][ T30] __driver_probe_device+0x1a2/0x390 [ 638.247910][ T30] driver_probe_device+0x50/0x430 [ 638.253071][ T30] __device_attach_driver+0x2d6/0x530 [ 638.258608][ T30] bus_for_each_drv+0x24e/0x2e0 [ 638.263587][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 638.269678][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 638.275163][ T30] __device_attach+0x333/0x520 [ 638.279959][ T30] ? __pfx___device_attach+0x10/0x10 [ 638.285337][ T30] bus_probe_device+0x189/0x260 [ 638.290230][ T30] device_add+0x856/0xbf0 [ 638.297655][ T30] usb_new_device+0x104a/0x19a0 [ 638.302566][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 638.307888][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.313215][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 638.318578][ T30] hub_event+0x2d6d/0x5150 [ 638.323077][ T30] ? __pfx_hub_event+0x10/0x10 [ 638.329047][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 638.334484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 638.341626][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 638.349482][ T30] ? process_scheduled_works+0x976/0x1850 [ 638.355380][ T30] process_scheduled_works+0xa63/0x1850 [ 638.360995][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.367135][ T30] ? assign_work+0x364/0x3d0 [ 638.371780][ T30] worker_thread+0x870/0xd30 [ 638.376505][ T30] ? __kthread_parkme+0x169/0x1d0 [ 638.381569][ T30] ? __pfx_worker_thread+0x10/0x10 [ 638.386840][ T30] kthread+0x2f0/0x390 [ 638.390943][ T30] ? __pfx_worker_thread+0x10/0x10 [ 638.396210][ T30] ? __pfx_kthread+0x10/0x10 [ 638.400828][ T30] ret_from_fork+0x4b/0x80 [ 638.405381][ T30] ? __pfx_kthread+0x10/0x10 [ 638.410010][ T30] ret_from_fork_asm+0x1a/0x30 [ 638.414959][ T30] [ 638.418149][ T30] INFO: task syz.2.918:11405 blocked for more than 144 seconds. [ 638.426201][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 638.433859][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.443275][ T30] task:syz.2.918 state:D stack:27320 pid:11405 tgid:11398 ppid:11181 flags:0x00000004 [ 638.454485][ T30] Call Trace: [ 638.458084][ T30] [ 638.461329][ T30] __schedule+0x1895/0x4b30 [ 638.465988][ T30] ? __pfx___schedule+0x10/0x10 [ 638.470871][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.476064][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 638.481569][ T30] ? schedule+0x90/0x320 [ 638.486106][ T30] schedule+0x14b/0x320 [ 638.490299][ T30] schedule_preempt_disabled+0x13/0x30 [ 638.495911][ T30] __mutex_lock+0x6a7/0xd70 [ 638.500447][ T30] ? __mutex_lock+0x52a/0xd70 [ 638.505245][ T30] ? chaoskey_open+0xb1/0x1b0 [ 638.509961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 638.515102][ T30] ? usb_find_interface+0xf7/0x160 [ 638.520246][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 638.526040][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 638.532997][ T30] chaoskey_open+0xb1/0x1b0 [ 638.537664][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 638.543789][ T30] usb_open+0x14b/0x1d0 [ 638.548170][ T30] chrdev_open+0x521/0x600 [ 638.552617][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 638.558309][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 638.563286][ T30] ? security_file_open+0x513/0x990 [ 638.568928][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 638.573918][ T30] do_dentry_open+0x978/0x1460 [ 638.579047][ T30] vfs_open+0x3e/0x330 [ 638.583158][ T30] path_openat+0x2c84/0x3590 [ 638.587904][ T30] ? __pfx_path_openat+0x10/0x10 [ 638.592903][ T30] do_filp_open+0x235/0x490 [ 638.601069][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 638.606268][ T30] ? _raw_spin_unlock+0x28/0x50 [ 638.611154][ T30] ? alloc_fd+0x5a1/0x640 [ 638.615621][ T30] do_sys_openat2+0x13e/0x1d0 [ 638.620341][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 638.625684][ T30] __x64_sys_openat+0x247/0x2a0 [ 638.630569][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 638.636157][ T30] ? exc_page_fault+0x590/0x8c0 [ 638.641040][ T30] ? do_syscall_64+0xb6/0x230 [ 638.646550][ T30] do_syscall_64+0xf3/0x230 [ 638.651101][ T30] ? clear_bhb_loop+0x35/0x90 [ 638.656521][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.662518][ T30] RIP: 0033:0x7fc3a897c990 [ 638.667023][ T30] RSP: 002b:00007fc3a9764b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 638.675593][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc3a897c990 [ 638.683599][ T30] RDX: 0000000000000002 RSI: 00007fc3a9764c10 RDI: 00000000ffffff9c [ 638.691771][ T30] RBP: 00007fc3a9764c10 R08: 0000000000000000 R09: 00007fc3a9764987 [ 638.704143][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 638.712172][ T30] R13: 0000000000000001 R14: 00007fc3a8b36130 R15: 00007fc3a8c5fa28 [ 638.744199][ T30] [ 638.748274][ T30] INFO: task syz.3.931:11444 blocked for more than 145 seconds. [ 638.764174][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 638.771868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.794170][ T30] task:syz.3.931 state:D stack:26816 pid:11444 tgid:11442 ppid:10261 flags:0x00000004 [ 638.814221][ T30] Call Trace: [ 638.817569][ T30] [ 638.820523][ T30] __schedule+0x1895/0x4b30 [ 638.834215][ T30] ? __pfx___schedule+0x10/0x10 [ 638.839146][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.858384][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 638.864637][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 638.871087][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 638.884484][ T30] ? schedule+0x90/0x320 [ 638.888800][ T30] schedule+0x14b/0x320 [ 638.892993][ T30] ? down_read+0x6a5/0xa40 [ 638.904200][ T30] schedule_preempt_disabled+0x13/0x30 [ 638.909736][ T30] down_read+0x705/0xa40 [ 638.914018][ T30] ? __pfx_down_read+0x10/0x10 [ 638.934480][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.939589][ T30] usb_open+0x30/0x1d0 [ 638.944522][ T30] chrdev_open+0x521/0x600 [ 638.948995][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 638.955253][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 638.960252][ T30] ? security_file_open+0x513/0x990 [ 638.966471][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 638.971450][ T30] do_dentry_open+0x978/0x1460 [ 638.976516][ T30] vfs_open+0x3e/0x330 [ 638.980623][ T30] path_openat+0x2c84/0x3590 [ 638.985377][ T30] ? __pfx_path_openat+0x10/0x10 [ 638.990369][ T30] do_filp_open+0x235/0x490 [ 638.995054][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 639.000167][ T30] ? _raw_spin_unlock+0x28/0x50 [ 639.005098][ T30] ? alloc_fd+0x5a1/0x640 [ 639.009465][ T30] do_sys_openat2+0x13e/0x1d0 [ 639.014287][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.019530][ T30] __x64_sys_openat+0x247/0x2a0 [ 639.024501][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 639.030001][ T30] ? do_syscall_64+0x100/0x230 [ 639.034963][ T30] ? do_syscall_64+0xb6/0x230 [ 639.039672][ T30] do_syscall_64+0xf3/0x230 [ 639.044440][ T30] ? clear_bhb_loop+0x35/0x90 [ 639.049152][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.055696][ T30] RIP: 0033:0x7f078837c990 [ 639.060158][ T30] RSP: 002b:00007f07881f8b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 639.069165][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f078837c990 [ 639.077486][ T30] RDX: 0000000000000002 RSI: 00007f07881f8c10 RDI: 00000000ffffff9c [ 639.085609][ T30] RBP: 00007f07881f8c10 R08: 0000000000000000 R09: 00007f07881f8987 [ 639.093623][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 639.101848][ T30] R13: 0000000000000000 R14: 00007f0788535f80 R15: 00007f078865fa28 [ 639.109993][ T30] [ 639.113127][ T30] [ 639.113127][ T30] Showing all locks held in the system: [ 639.121310][ T30] 6 locks held by kworker/0:0/8: [ 639.128395][ T30] #0: ffff8881456ae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 639.139992][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 639.152253][ T30] #2: ffff88814579b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 639.161866][ T30] #3: ffff888142790190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 639.172807][ T30] #4: ffff888070f80160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 639.183561][ T30] #5: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_deregister_dev+0x88/0x210 [ 639.193487][ T30] 3 locks held by kworker/0:1/9: [ 639.198563][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 639.210155][ T30] #1: ffffc900000e7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 639.223017][ T30] #2: ffff88806abd9240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 639.233376][ T30] 1 lock held by khungtaskd/30: [ 639.238361][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 639.248381][ T30] 6 locks held by kworker/1:2/1168: [ 639.253608][ T30] #0: ffff8881456ae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 639.265622][ T30] #1: ffffc90004397d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 639.278210][ T30] #2: ffff888027d73190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 639.288176][ T30] #3: ffff888028a02190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.297642][ T30] #4: ffff88802eaba160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.307137][ T30] #5: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 639.317007][ T30] 1 lock held by syslogd/4671: [ 639.321894][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 639.332081][ T30] 2 locks held by getty/4989: [ 639.336816][ T30] #0: ffff88814ba310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 639.346737][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 639.357046][ T30] 4 locks held by udevd/5231: [ 639.362692][ T30] #0: ffff88806d395c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 639.371988][ T30] #1: ffff88806fe7f488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 639.381640][ T30] #2: ffff88806c7cc4b8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 639.391324][ T30] #3: ffff88801c304190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 639.401048][ T30] 6 locks held by kworker/1:4/5285: [ 639.406383][ T30] #0: ffff8881456ae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 639.417867][ T30] #1: ffffc90003ff7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 639.429862][ T30] #2: ffff88814576b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 639.439689][ T30] #3: ffff88806f46e190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.449225][ T30] #4: ffff888063757160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.458657][ T30] #5: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 639.468998][ T30] 6 locks held by kworker/0:5/5288: [ 639.474756][ T30] #0: ffff8881456ae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 639.486301][ T30] #1: ffffc90004027d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 639.498287][ T30] #2: ffff888145743190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 639.507369][ T30] #3: ffff88801c304190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.516801][ T30] #4: ffff888026887160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 639.526510][ T30] #5: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 639.536287][ T30] 1 lock held by syz.2.873/11032: [ 639.541338][ T30] #0: ffff888053a7e878 (&dev->lock#6){+.+.}-{3:3}, at: chaoskey_read+0x127/0x590 [ 639.550997][ T30] 2 locks held by syz.2.918/11405: [ 639.556186][ T30] #0: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 639.565723][ T30] #1: ffff888053a7e878 (&dev->lock#6){+.+.}-{3:3}, at: chaoskey_open+0xb1/0x1b0 [ 639.575469][ T30] 1 lock held by syz.3.931/11444: [ 639.580530][ T30] #0: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 639.589539][ T30] 1 lock held by syz.1.1027/11870: [ 639.594847][ T30] #0: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 639.603771][ T30] 4 locks held by syz-executor/13272: [ 639.609849][ T30] #0: ffff8880668fcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 639.619945][ T30] #1: ffff8880668fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 639.629840][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 639.640013][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 639.652164][ T30] 1 lock held by syz.0.1280/13284: [ 639.657413][ T30] #0: ffffffff8f5ab9f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 639.666389][ T30] 3 locks held by syz.4.1293/13368: [ 639.672718][ T30] #0: ffff888047b48d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 639.682842][ T30] #1: ffff888047b48078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 639.693100][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 639.703332][ T30] 1 lock held by syz.1.1241/13389: [ 639.708597][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 639.718725][ T30] 3 locks held by syz.3.1295/13404: [ 639.723950][ T30] #0: ffff88804430cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 639.734214][ T30] #1: ffff88804430c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 639.744059][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 639.755251][ T30] 1 lock held by sed/13443: [ 639.759838][ T30] [ 639.762210][ T30] ============================================= [ 639.762210][ T30] [ 639.771565][ T30] NMI backtrace for cpu 1 [ 639.775928][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 639.786476][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.796561][ T30] Call Trace: [ 639.799868][ T30] [ 639.802835][ T30] dump_stack_lvl+0x241/0x360 [ 639.807549][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.812784][ T30] ? __pfx__printk+0x10/0x10 [ 639.817429][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 639.822426][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 639.827923][ T30] ? _printk+0xd5/0x120 [ 639.832107][ T30] ? __pfx__printk+0x10/0x10 [ 639.836726][ T30] ? __wake_up_klogd+0xcc/0x110 [ 639.841620][ T30] ? __pfx__printk+0x10/0x10 [ 639.846252][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 639.851310][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 639.857325][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 639.863435][ T30] watchdog+0xff4/0x1040 [ 639.867723][ T30] ? watchdog+0x1ea/0x1040 [ 639.872183][ T30] ? __pfx_watchdog+0x10/0x10 [ 639.876893][ T30] kthread+0x2f0/0x390 [ 639.880987][ T30] ? __pfx_watchdog+0x10/0x10 [ 639.885667][ T30] ? __pfx_kthread+0x10/0x10 [ 639.890251][ T30] ret_from_fork+0x4b/0x80 [ 639.894662][ T30] ? __pfx_kthread+0x10/0x10 [ 639.899241][ T30] ret_from_fork_asm+0x1a/0x30 [ 639.904016][ T30] [ 639.907624][ T30] Sending NMI from CPU 1 to CPUs 0: [ 639.912939][ C0] NMI backtrace for cpu 0 [ 639.912953][ C0] CPU: 0 UID: 0 PID: 13229 Comm: kworker/u8:7 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 639.912973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.912984][ C0] Workqueue: bat_events batadv_nc_worker [ 639.913020][ C0] RIP: 0010:kasan_check_range+0x4f/0x290 [ 639.913043][ C0] Code: 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 <4d> 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c [ 639.913058][ C0] RSP: 0018:ffffc9000d8bf9b8 EFLAGS: 00000092 [ 639.913072][ C0] RAX: 0000000000000001 RBX: 1ffffffff2039dc5 RCX: ffffffff819cabec [ 639.913085][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901cee28 [ 639.913096][ C0] RBP: 000000000001ffff R08: ffffffff901cee2f R09: 1ffff110049f58f8 [ 639.913109][ C0] R10: dffffc0000000000 R11: fffffbfff2039dc5 R12: dffffc0000000000 [ 639.913122][ C0] R13: 1ffff92001b17f48 R14: ffffc9000d8bfa40 R15: 0000000000000201 [ 639.913135][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 639.913149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.913161][ C0] CR2: 00007f967f6a9897 CR3: 000000000e734000 CR4: 00000000003526f0 [ 639.913175][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 639.913186][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 639.913197][ C0] Call Trace: [ 639.913204][ C0] [ 639.913211][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 639.913230][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 639.913252][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 639.913270][ C0] ? nmi_handle+0x2a/0x5a0 [ 639.913293][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 639.913312][ C0] ? nmi_handle+0x14f/0x5a0 [ 639.913328][ C0] ? nmi_handle+0x2a/0x5a0 [ 639.913345][ C0] ? kasan_check_range+0x4f/0x290 [ 639.913362][ C0] ? default_do_nmi+0x63/0x160 [ 639.913381][ C0] ? exc_nmi+0x123/0x1f0 [ 639.913398][ C0] ? end_repeat_nmi+0xf/0x53 [ 639.913417][ C0] ? trace_irq_disable+0x2c/0x120 [ 639.913438][ C0] ? kasan_check_range+0x4f/0x290 [ 639.913456][ C0] ? kasan_check_range+0x4f/0x290 [ 639.913474][ C0] ? kasan_check_range+0x4f/0x290 [ 639.913491][ C0] [ 639.913497][ C0] [ 639.913504][ C0] trace_irq_disable+0x2c/0x120 [ 639.913523][ C0] __local_bh_enable_ip+0x106/0x200 [ 639.913544][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 639.913563][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 639.913583][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 639.913602][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 639.913623][ C0] batadv_nc_purge_paths+0x312/0x3b0 [ 639.913648][ C0] batadv_nc_worker+0x365/0x610 [ 639.913668][ C0] ? process_scheduled_works+0x976/0x1850 [ 639.913688][ C0] process_scheduled_works+0xa63/0x1850 [ 639.913720][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.913743][ C0] ? assign_work+0x364/0x3d0 [ 639.913763][ C0] worker_thread+0x870/0xd30 [ 639.913786][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 639.913808][ C0] ? __kthread_parkme+0x169/0x1d0 [ 639.913830][ C0] ? __pfx_worker_thread+0x10/0x10 [ 639.913849][ C0] kthread+0x2f0/0x390 [ 639.913864][ C0] ? __pfx_worker_thread+0x10/0x10 [ 639.913887][ C0] ? __pfx_kthread+0x10/0x10 [ 639.913903][ C0] ret_from_fork+0x4b/0x80 [ 639.913923][ C0] ? __pfx_kthread+0x10/0x10 [ 639.913938][ C0] ret_from_fork_asm+0x1a/0x30 [ 639.913964][ C0] [ 639.916153][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 639.916170][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 639.916192][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.916204][ T30] Call Trace: [ 639.916211][ T30] [ 639.916219][ T30] dump_stack_lvl+0x241/0x360 [ 639.916246][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.916266][ T30] ? __pfx__printk+0x10/0x10 [ 639.916287][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 639.916318][ T30] ? vscnprintf+0x5d/0x90 [ 639.916340][ T30] panic+0x349/0x880 [ 639.916365][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 639.916387][ T30] ? __pfx_panic+0x10/0x10 [ 639.916407][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 639.916429][ T30] ? __irq_work_queue_local+0x137/0x410 [ 639.916454][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 639.916473][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 639.916493][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 639.916515][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 639.916537][ T30] watchdog+0x1033/0x1040 [ 639.916562][ T30] ? watchdog+0x1ea/0x1040 [ 639.916587][ T30] ? __pfx_watchdog+0x10/0x10 [ 639.916608][ T30] kthread+0x2f0/0x390 [ 639.916626][ T30] ? __pfx_watchdog+0x10/0x10 [ 639.916660][ T30] ? __pfx_kthread+0x10/0x10 [ 639.916678][ T30] ret_from_fork+0x4b/0x80 [ 639.916701][ T30] ? __pfx_kthread+0x10/0x10 [ 639.916718][ T30] ret_from_fork_asm+0x1a/0x30 [ 639.916751][ T30] [ 640.407543][ T30] Kernel Offset: disabled [ 640.411866][ T30] Rebooting in 86400 seconds..