last executing test programs: 3m31.79805409s ago: executing program 2 (id=3): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000012c0), 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000001b680)={0x2020, 0x0, 0x0}, 0xfffffffc) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0xc291, 0xd1aba0bb6b80044c, 0x0, 0xffff, 0x20}}, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x88c64d537be67eeb) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000006c0)="7c8b", 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="031e75", 0x3}], 0x1}}], 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="20e906000000a26f272eef068daf5bccbefe4afc67d9319631878d6235d3b9ba59de52c7fb40910b44652ad9402012bca719f41b8f6d11aa0b219ccd3bd6c39c55edfcc5402013ddc5b361d8a9ad8a38539b29a111b60a132959f548cdcb2f611e2cbb20d91310cb0eb0d4c08fc12ad1914619bb442ed6964053c3546cbeca5a0f13d5c30c9612797db4fb90a5700c601103bee8badbdfe8e5ecd3b81408f264e016fb61a3f4920af93034b918d3b0730390234ac6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029d0003010100000904000000010100000a24010000000201020e06cb0256ceb91200000800fb0c24020302020205000909050c240200030200000000000e0724060001000009240346050200050009240605000106"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) 3m29.324284121s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x424044, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x33}, @in=@rand_addr=0x64010100, {0xfffffffffffffffd}, {0x0, 0x0, 0xb6a}, {0x0, 0xbcc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x6}, [@replay_thresh={0x8, 0xb, 0x6}, @etimer_thresh={0x8, 0xc, 0x9206}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe9) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e23, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0xb, {0x33}}}], 0x18}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0xffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r5, 0x10, 0x70bd2c, 0xe, {{}, {@void, @val={0xc, 0x99, {0x9b15, 0x38}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040055) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x8040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x66}}}}, [@NL80211_ATTR_IE={0x1d, 0x2a, [@cf={0x4, 0x6, {0x1, 0x9, 0xb, 0x400}}, @random={0x81, 0xf, "9e1c0e47c408b6aa4daf2a539edbff"}]}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x881) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) shutdown(r10, 0x1) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02f8d90d682f37000000000000000000f09c62b2cd8728718e92514766645cfec7a19fb6261d40bc65d6"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/13], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020b00000300020000000000000000000100160000000000fae1f75f64277010d98ddee1f8c3e57551978c51a78b245ae49e20a6792edc07c4b912306f5cb322e3d8a0a4b369b388c424e524eaf7be650248a504e7e6603534902c1809bc6d9c0764a96aaf73ab2d3b5b86c5119716b132c4ea1b0b55f1cc4713b04de6fe49991f4e06746930073fbf28e1cbb6"], 0x18}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f041}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0) 3m29.15614748s ago: executing program 2 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x40}}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x4000000) 3m28.916642737s ago: executing program 32 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x40}}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x4000000) 3m21.781325279s ago: executing program 1 (id=56): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xb1, &(0x7f0000000080)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0xd0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x2, 0x1, 0xda, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'h'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7e51, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xb9}, @mbim={0xc, 0x24, 0x1b, 0x100, 0xd, 0xcb, 0x5, 0x1ff, 0xf8}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x3, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xf, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x6, 0x2}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x4, 0x4, 0x40, 0x4}, 0x174, &(0x7f0000000180)=ANY=[@ANYBLOB="050f7401050b1001080800b00402007f03100b8e1002deeaf6540fc78daded232cf8114c87677e8e2c06e422913fc79cde104f626946369bff118d5c159c943eedc6d33c562d21c8a4ea1af7bd04d19e803af70d1c9765d0ec71dc45b0ca00000000000000b191bab45b51988fc2b8d4c711224f27344c0785fb9d4b85d8463059b0b1275fcfe01614a989ae9e0b6b47abc1f27fa9f5b689c3e0f2f7f82dec21032910039c0e8fab9ffdeebfdf8720ccb7833aa7ac81dc025bbcf6f413b024116e517a28d3ab8927a891aa1003876b40930e1f5d69bf6ec5837322810ecbf295d2d8112274a676c07ab556b89dcc437386a17e97da8367fce9ff0f609c587a5505c4cfab15bf05729ee3a24626afe5395e2ce6a3923ffc2b1231b3a4d507f91ae2cfe5ccf355eda9d1b0123369662acdae230930cad5934cde9f18239785c2e3fb1f341945b49595eeb49702e157f1e630ce2674ff9a3e525a088d24cc8e57bf681d9df213c5880889da29b106e42eed382a0028"], 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4c0a}}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @random="b4dc3151d24f", @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "74ba16", 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {0x4e24, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) 3m21.155824277s ago: executing program 1 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0x60, 0x8, 0xffb5, 0x2, 0x1, 0x4}, &(0x7f0000000240)={0x1, 0xf, 0xffffffffffffff37, 0x6, 0x4, 0xe, 0x56d4, 0x6265}, &(0x7f0000000280)={0x1, 0x8, 0x2ee, 0xe000, 0x7, 0x4, 0xfff, 0xfffffffffffffff7}, &(0x7f00000002c0), &(0x7f0000000380)={&(0x7f0000000300)={[0x8]}, 0x8}) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000002dc0)="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", 0x1000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x9a}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x200}}]}}}]}, 0x64}}, 0x8000) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001c40)=""/4105, 0x1009}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/209, 0xd1}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000340)=""/44, 0x2c}], 0x7}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 3m20.379008014s ago: executing program 1 (id=63): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8, 0xe6de12a3e0d6c253}}, 0x20}}, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r11}, &(0x7f0000000140)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0x17, 0x2f, 0x20, 0x1557, 0x8150, 0x29ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0x7a, 0x61}}]}}]}}, 0x0) r12 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r13 = fcntl$dupfd(r12, 0x0, r12) write$binfmt_script(r13, &(0x7f0000000100), 0xfffffd9d) bind$packet(r13, &(0x7f00000003c0)={0x11, 0x16, r3, 0x1, 0x5, 0x6, @link_local}, 0x14) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x490000, 0x0) 3m18.039987922s ago: executing program 1 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000100)='.\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0xe15e4842dca2cf4a, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240)=0xd241, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x90, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x33}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}]}, 0x90}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x107600) write$binfmt_aout(r6, &(0x7f0000000c00)={{0x10b, 0x5, 0x2, 0x116, 0xb, 0x9, 0x136}, "84609873ee6ade5291999a53c1918d122bb3bf4f8ca831b29744948d362454523fda3bdb17ce54c2bfae18ec0a7131495afe3eaa729bab54d1cbc32868facc737f7f029ba6928b54718f5e91b26cc2a31ba779fc278a6a0f97e6a60c88d8f2a61c05cecdc71523a0d35fce5f80c1d0ecca76163bc84be4c6002dfd33f91e27c87e794130", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a4) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xc, 0x401, 0xcb9, 0x6, 0x3}) ptrace$peeksig(0x4209, r7, &(0x7f0000000180)={0xfffffffe}, &(0x7f0000000500)) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$MON_IOCG_STATS(r10, 0xc0109207, &(0x7f0000001400)) r11 = gettid() tkill(r11, 0xb) ioprio_set$pid(0x2, r11, 0x517d0a2bc4ef2f8d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r2, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$HIDIOCSREPORT(r10, 0x400c4808, &(0x7f0000000200)={0x2, 0xffffffff, 0x8}) 3m17.881408935s ago: executing program 1 (id=75): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xff010000) 3m17.477471593s ago: executing program 1 (id=78): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x3, 0x5}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random='\x00\x00\x00 \x00'}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0xfffffffd}, &(0x7f0000000180), &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000080)=0x101, 0x12) dup(r0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 3m17.081175655s ago: executing program 33 (id=78): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x3, 0x5}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random='\x00\x00\x00 \x00'}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0xfffffffd}, &(0x7f0000000180), &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000080)=0x101, 0x12) dup(r0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 2m59.537458251s ago: executing program 5 (id=167): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf252100110008000300", @ANYRES32=r3, @ANYBLOB="54002d800a00000002eb0102020200000a"], 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)={0x100, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xe7, 0xea, 0x0, 0x1, [@generic="190f19dee8654f0e23a4dfc9f15531a4998eea98ef36e3b7eb96b6b9ce789056433afe3016244633e89c833572acdbae1a29cca111669ddb053951406b26ed180f2a0fcaf0ca2075294b389d18b03ef271ee08cfb32b8a3fadda89dd34dfa8058ba8a6fe04cf42c40fc3885354de8eb6a4e31fe914027b68381bf3fee6e99626a348ab9fb7ccb554c5f1e3ebb24944f9d06e91e3530a3562b7a474c69a050a58c149725bf8cc1ec36e09eb37dd0c", @typed={0x8, 0x2e, 0x0, 0x0, @uid=r7}, @generic="11ea48022cd54043055ff91780072bb8b3b70842739c3a8a7f640837d0bc228984630fde93", @typed={0x8, 0xf6, 0x0, 0x0, @fd=r1}]}]}, 0x100}], 0x1}, 0x0) 2m54.127283614s ago: executing program 5 (id=170): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) userfaultfd(0x80001) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x12000, 0x20, &(0x7f0000fee000/0x12000)=nil) r1 = shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xb59633e9a4a037f2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c4b000/0x2000)=nil) shmdt(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000002010400000000000000000a0000030600074000010000240002801400018008000100e000000208000200ffffffff0c000280050000000400018000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x0) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) sendto$inet6(r2, 0x0, 0x4, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000007, 0x38011, r9, 0x3000) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x9517, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"}) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xedd) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) 2m54.053271901s ago: executing program 3 (id=172): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201fb00e066e040810705000500000000010902120001000000000904000000e106"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000280)='net/ip_mr_vif\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) 2m53.805799743s ago: executing program 6 (id=173): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008fcc0920e804b72865fb0010000904810000ffef9800"/36], 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac14141900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000802000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) 2m53.660587871s ago: executing program 0 (id=174): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}, 0xe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x4}, 0x8) 2m53.348898013s ago: executing program 0 (id=175): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async, rerun: 32) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x80, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2m53.228148536s ago: executing program 4 (id=176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x9}, &(0x7f0000000380)=0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x800, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x18, 0x110, 0xa, "1e6b"}], 0x28}, 0x20000840) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0x6, 0x2, 0x53, @mcast2, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x1000, 0xcf}}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) shutdown(r2, 0x1) syz_usb_control_io(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800008, 0x4010, r6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x35, 0x0, 0xe, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r5, r6, 0x2f, 0x2008, 0x0, @value=r8, @void, @void, @void, r7}, 0x20) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x45, {0x45, 0x22, "61639c545d2ce9daa7d45dd3f71b62845befa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb442c0e7159125fa4bff9ebab19ba6613600e553d7b274"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m52.327189671s ago: executing program 3 (id=177): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c0ec000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/ip_mr_cache\x00') getdents(r2, 0xfffffffffffffffd, 0x3b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6304}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0xe8) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x10d, 0x10, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0), &(0x7f0000000100)) 2m51.91475753s ago: executing program 5 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b70200000000e6ccbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe02000000850000001a000000b7000000100000009500000000000000455781a5fee65e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde43a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d1106fb0289ce67a66afd92c3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a060000009b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece6d311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da326018362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f707777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee23483508818b897e3b677d3d342640e328504ae2dbf8fe1d704765de74891f7c8dae85739c50409c62040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c1b7d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5f001000000100008000000000ed6f6663677df37de0ec0d0f548b273940be5d1fe0aae14d1a76e0741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ce0000000000000000000000000000000064d3210f806a4877e73c19072e358da1cdbef27967e918e6f2bab4a78ce0103a91789340b00db45df429d650e2f6acfbf9bf2f1b23064f3e60a9ded23b652f110940813a14c97abc84ab3cf728efd94ba2895a0884e7f7c53bc60d1b9768a979929055be8565b8a15dffc8692476ff03963b626afbc18750629666d1f449f02271064768c0731aeccb2c342ae3fa9956354e847f086eee8cd78617ad6ae28f121b23c1128b78f521eea8c487ae31f9112db0e671dd47d95ea9653e51da8c99a996656149a65f8e88032ddf35717407"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000800)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="40014e0000004e24b598521e920b8d8fb55d84404b4e8a718a267fcef69ca199c7430b9807226900b0394b5d31c09d57ddbee0d9c91897c36d8742240cb2464ccb0575bdf1764ccc363f27992ff69a53217e3da8efca49b92e660ff0e7f5caf32a7f08217e5ff9d4e3786f55d373d484baeaac6eba8b4a2eec9b1bc3b6e11e278a2423953b86d0d58f78417295abf3062053"], 0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000083000040"]) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x6040802) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000001940)=""/4112, 0x1010}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f00000001c0)=""/253, 0xfd}], 0x6}, 0x7}], 0x62, 0x40000002, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000001000058009000100707042d1af"], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r9, 0x2) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xac, &(0x7f0000000580)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0xf7, @mcast1, 0x3}, @in6={0xa, 0x4e24, 0xfffffff8, @mcast2, 0x9}, @in6={0xa, 0x7, 0x4, @empty, 0xff}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0x421, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, @in6={0xa, 0x4e23, 0x7, @private2, 0x1000}]}, &(0x7f0000000640)=0x10) close_range(r11, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000006c0)={0x2, &(0x7f0000000680)=[{0x7, 0x5, 0x5, 0x9}, {0x9, 0xf, 0xf7, 0x2}]}, 0x10) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x31) 2m50.541312334s ago: executing program 6 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x430100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x111082, 0x0) fcntl$dupfd(r1, 0x0, r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = memfd_secret(0x80000) close(r4) getpeername$tipc(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2m50.40895191s ago: executing program 6 (id=180): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x9, 0xef, {0xef, 0x8, "e6cb283b4b188739927c6193d97221a1d6d9b263f3b03d8ef34a2b90cd2a7956ab2d571665e708ecb39ff246e5471c67d38dacc3add54aa5be078d157629a462ed5d02551f60ee8a0227595ae56bd07bb808efbaa2f9ddb4bf2e343b77915693a3ec8b45f4769c48c81dedf7b4786c1f1ab54f92bebaedb2f5bc3f689572b401d66304cc9d6e4cc5f0ef4c65da262369c96592cf80681d0a2abcdd29d171ccd047b14d6d51519e6969a6aaacfd73034a41be2eefe2a49eaa6c7e0ea034241186f9bfd2445e53ae595a9cbd2d38e6828ea524bcc3244cf37a3e1acdfee5eb673ad1dc6d3f5f6228bb840067fd36"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0x68, "2de89d46b31f2eead97cb5c3e560a5c941dea6f278ed9825e283d29c774f59ba8fef5f99dcc91e8495477881e5c78a29031a0033f33e00897ac0034a141697e189cc5d44c5a8cb7c2b48632f9e738ebbc6a79565277e9e93e14d922c441d800e472381f14ef7d506"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "5be6c0"}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'U'}, &(0x7f0000000380)={0x20, 0x84, 0x1, 'h'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "dbb282"}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="d7b1b09646e0f9a42820d4c24023eda9441fd77355222b54dee384e1492bd586008061544f95d62ecbab46d14f309781e315424882ad62b471da4aeeb37bac3e882570a03e734f5cfe925b0e26d2b18790639deaf1e0bdd25e00bb0a6627920194db93c9c3159be173e0c571787021372d5f793f7209bcf436e87644ee959f4e9241009d68c29b740af2255060781dadc1f3a39a31df36cc17be957813c9fe480dd4f6fe580c221d12138c6ae98c16f55824f7f800f1bf35b726448f38cebd9d3b6ead811b214e5d6b1940c66ae85c513bb119c6a481f5371d20241e9496db537497e3375f7e90ca1f5cc32efb1371c7"], 0x0) 2m49.404147718s ago: executing program 0 (id=181): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (fail_nth: 15) 2m49.364217164s ago: executing program 5 (id=182): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1, 0x3a, ')%\\&%}:', 0x3a, 'exfat\x00', 0x3a, './file0/file0'}, 0x3a) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001090"], 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r5, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x10000001}) 2m49.363829647s ago: executing program 4 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002c0012800b00010062726964676500001c00028005000700000000f50600060000070000080004"], 0x4c}}, 0x0) 2m48.323961374s ago: executing program 3 (id=184): syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xd7, 0xc, 0xf4, 0x20, 0xc45, 0x6024, 0x1c45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0xa2, 0x18, 0x2, 0x93, 0x47, 0x8c, 0x4, [@generic={0x7, 0x5, "d55f66cde5"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x8, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xfc, 0x0, 0x4a}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_newroute={0x140, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_MULTIPATH={0xc}, @RTA_NEWDST={0x3b}, @RTA_NEWDST={0x84}, @RTA_TTL_PROPAGATE={0x5}]}, 0x140}}, 0x0) 2m48.323528563s ago: executing program 4 (id=185): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet(0x2, 0x2000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000000], 0x2, &(0x7f0000000080), 0x0, [{}, {}]}, 0x98) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100ac34141a08000200ac1414000c000280050001000000000022000380140001800800010008000200000000000c0002800500010000000000300001802c0001"], 0x8c}}, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x4e8002, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f00000003c0)) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) 2m48.03576593s ago: executing program 5 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80000) accept4$packet(r3, 0x0, &(0x7f0000000180), 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 2m48.029042794s ago: executing program 4 (id=187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0xb}, 0x3}}, 0x7fffffff, 0x4, 0x8, 0x1000, 0x8, 0x2, 0x10}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0x85, 0x8, 0x9, 0xffff, 0x3, 0x7, 0xf, r1}, &(0x7f0000000200)=0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c0ec000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m47.396434564s ago: executing program 0 (id=188): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) ftruncate(0xffffffffffffffff, 0xc17a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new u'], 0x2a, 0xfffffffffffffffc) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffffffffd) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x40001, 0x1, 0x0, 0x0, 0x0, 0x2, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x1, 0x7, 0x0, 0x8, 0x0, 0xe8}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) 2m47.141390924s ago: executing program 6 (id=189): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xe0}}], 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9", 0x2, 0x4014, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r5, @ANYBLOB="0517"], 0x0) shutdown(r4, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0xb) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7fff}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000580)={r6, 0x200, 0xd1, "eaadd2cbdac7954ce66dbb74f8727aae722e68100d33fae0f148e164b20fa352ac105e97a794e70f8db4ebb4a646d111e394f5ffeb39291d7cc6e89d1879c1ea41306cee3479d2163680f0c2a0dadfbc3711aa02c131702661c46303aff0931f64c665f5f456a6747e2558d361019abd16b3a37dae54ee5b85cdba27b2c0e776a8f4fe2f27d4dd20a5c3984f39cf900667230386c5cbbc485eb98b0331146247cc061f0a90d2ba800502dc9ede6bd46f61b718c862c634ec937ee8bf4f4ed0af536cf1c9e28271b43d3a1ab7da23f28f0f"}, 0xd9) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000000000000700000044150511"], 0x30}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="47eac63b09b7549b35580943c57300170780612dc59b9c8510dea58ec1a4b1afd46920ce3fb05c7996583962bdf9d967f4f6a9217e46a518f28308bc0f7bb6c08abe780ff6261a", 0x47}], 0x1, &(0x7f0000000300)=[{0x90, 0x115, 0x4, "689aa24671ed24b76abe4aa52879652b126b868c4bbee48ddd22994e4a84d2320a2e03c48950bfd4620a631636603468b697ee57e66b708d18528039dac37af9c1cb883a1048d74e75c66c90df4b6f7e822409519c330af8f306c01303cab4ec050af2c200aa651667d750576fdccc302c61c2fb42b659afa404"}, {0x100, 0x0, 0xfffffffd, "b6ca836d889fd66ed8e37da5c11b2ae3affebfa9935841c4de240041a85ea02d25c80c72149871ad73ba153387c3096619447170afc646abd7f00acee4ec07639f2a151413ebe204db61f53f704b2e2dbdeb9c766c56156225c86ea389307dface47048e28cfd105566bbedfd202d5f10c7c7fb5df5a20d42f01e7827d04c460c8aea53ba5de62d9f8ed2af9144d70fc7fed71f2c3788d0f6b4496fa634a5997e3c3df547826586a986e1c4708fc66c7806baffc75fc9652d9e33a304a5cc7aa55c6b0c4f655edfbdd0e99a1c6c9d6a4b14b9233a7ada6e04f12c4369b8b7b50afdd0f4e861f86166dad"}, {0x30, 0x110, 0x2, "38d3a2009bc8eca89ead58f4e077221ed37bcf56c213e6000945ee1fac66"}], 0x1c0}, 0x4040800) 2m46.565173639s ago: executing program 5 (id=190): r0 = eventfd2(0x0, 0x80800) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="ed77ed9453376826", 0x8}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1, r0}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000aa5ab8f008f5af1ec4a47bda9cf70faae7070000000000000072e7e0ccfaecbe444bb5e0ed92f3f9f248ad96f96ea04e25957514ad4f44ddc8769254487471a938662612cbe3eaa45eecced0e6cdd9c9c27f0b79e34d3025ef4f3ad26323b55f45ade33a4c8d49666e616d317e35c488361747c4bab5e83bce41756ae046276ce323742f4bbb4bdd9e6b2fa56b3f7c38ffff2fb4f5fea966d8b966ee722924048f92951758d46205b48616513e67", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25170000001c00068015000300efab13afc9f79aa9ba07fb754d144abe6e000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)={0x0, 0x16, 0x3, "f9616e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1dff014000010203010902930003010000000904000000010100000a2401000000020102132406000006060000000000000000000000000924030006030000000924060303010500b70924030000030004110624050400"], 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2m46.39235156s ago: executing program 0 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000100000a0000000000000700e1000008001e0001000000"], 0x24}}, 0x28000) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="558c250b017f238595c7206c8987619021a49de70c827a664a71589befe9274daa42606bcadb48a9f02f6ef1109fe63fd1712f102878012b3d35767b4170c7895cfc95310983cf928a05be3ad03cef2723c40a0931effa38d8a32799261593464116e3ba66dd76e1b334b5b7674a6118f588a55776d79549a5ad63e13f8c7ef97a41159dd86df2391299b4a6a2b0feaee80c7bd421ffeac233281a03b8b171ff10a447374b47af932cde490c203a8849c0f2", @ANYRES32=0x0, @ANYBLOB="00000000002200004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012000000030007000000"], 0x9e}}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3}}) r10 = getpgid(0x0) timer_create(0x1, &(0x7f0000000300)={0x0, 0x1e, 0x0, @tid=r10}, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x5420) recvmsg$kcm(r8, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001c40)=""/4105, 0x1009}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/44, 0x2c}], 0x7}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 2m45.853135973s ago: executing program 0 (id=192): syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003da377207205feca01254c6c166bc1548b1df156be33550102030109023d000100000000090400000496dba8000905000000000000000705e37e1b82e609050b0200000000000905010000000000000905020410"], 0x0) 2m45.673013455s ago: executing program 4 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x8000) sendfile(r4, r3, 0x0, 0x84000e3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000954f422913082fe5817c9ebe745658185c4f7de0d6a0395596607a935564be19fdf38778fd2a5cc52e16514f758196d7dfebea65590ee4e96dd5ece66c0a624c66847bd2216973c568e12fdbd9180c0930bff8afa9afc8b973c95be67e1e1f38f22e6bdf457c2b5d88b148fd2e8fc37d4c9ec44ee5b01a534dc1a424417ca925c3cf9c7531d623f3a16147b7e1320983e6bb61fea8377d7ce95f3a91393a4c190bbc5542620ae577372b961afd8e0295a848873347087c313e817a58fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000300), 0x20000000}, 0x20) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000480)=[@request_death={0x4008630a}], 0x0, 0x0, 0x0}) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r12 = dup(r7) sendto$inet6(r12, &(0x7f0000000140)='E', 0x1, 0x0, 0x0, 0x0) preadv(r11, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x17d, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r14, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x4) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) 2m45.671820087s ago: executing program 3 (id=194): shutdown(0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r3, r2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0xfffd, @broadcast}}, 0x0, 0x6}, 0x90) getsockopt(0xffffffffffffffff, 0x8a, 0xda, &(0x7f0000000400)=""/186, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000064c0)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x6a1, @private0, 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x9c) openat$rfkill(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}}, 0x0) 2m45.005516034s ago: executing program 6 (id=195): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@bridge_dellink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'bridge0\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0x4}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 2m44.710370717s ago: executing program 6 (id=196): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r3, 0x0) statx(r3, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1000, 0x400, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$midi(&(0x7f00000000c0), 0x0, 0x1) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 2m44.575936134s ago: executing program 3 (id=197): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x50000014}) 2m44.546715791s ago: executing program 4 (id=198): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r1) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2m44.324541145s ago: executing program 3 (id=199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x40, 0xd, 0xbd, {0xbd, 0x31, "4392eece4a2a77ced6a58054c2acdffb64606cabdd29a2a3891f6ccc49a92175059553160f9248a6846eb4282d63bb87026bca604dc238569259daaa1633050562b9139a2fa0f60e1060a28155061f2cb1f82c289892ee6cef2c0020bd2df7a1ae0f1e8d632685f9aee3880f2b45d868d2ed9bfa6f0e859e08045fe1c6c0cab2ba0b2396bdece9b6bbda1eb3931e000c137d7a5656d27b85a0c60995aa2ba35c11657d899a58f504fb6f0eed8b36caa2a1010e925530bd55879f29"}}, &(0x7f00000003c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "b54a3ef1394d9c7f9a"}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x20, 0x7, 0x42, "50fde0684d643ba1e5fad241de4679fae79158b08465a6ddf98e5166886c4b8d61a8249ff77a0f42f2b85ddc007dc936435741fda5bb8621a2df845dfd9dc8b1d191"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "db9f"}, &(0x7f0000000800)={0x20, 0x82, 0x2, "ccd1"}, &(0x7f0000000840)={0x20, 0x83, 0x2, "2c9a"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "7e91fab5"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "515190"}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x188}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x44}}, 0x0) (async, rerun: 32) sigaltstack(0x0, 0x0) (async, rerun: 32) r5 = open(0x0, 0x141042, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) (async, rerun: 64) r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) memfd_secret(0x0) (async, rerun: 64) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x40, 0x11, 0x4f, {0x4f, 0x1, "fe146f929dfd55c53a468884435d4447b92d4e3c42af27995934422f7086cc4d4b6d5346409361cc093762fe37fb1bfad1546a9d77f670652ffa0963405df91fe1166acb69d4acba921fea2b62"}}, &(0x7f0000000100)={0x0, 0x3, 0x68, @string={0x68, 0x3, "d167da3840c979a0b67f8a319a48d4d52aa8668f47978ee192d61cf6d9635e560ad62fd456bc40a2885f70c250ec20a17c09b83d0fa2665cd8ab7a8921a96a0324633c4d7d407c4e508513aadc602286a48ca0aebaaf5d44ac9fb7b21927b45f48a676a87017"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000480)={0x20, 0x8, 0xc1, "7785179520ed797a53215d69cb545a86ac36550daa2073e1774a622223dba8196baffa67a7196422d313bf1d3c71b2a7b642be8de91bb9517f838fcb63aa5b3448094f1c073d22cef5ca68cc51bf7a420c86f143de4c9e95371b83c3d70b89207dcb5396c9fa4adfc5a792c7453e34a967f9b64a4be35432f5572c43d874740c22624dcbf136b613bed01e8aada58f19c43ef4f94e11207dc7f6c2563a1fba65ec7086874412571401c0de984f2c23f03594b770d4322fcc52907fab3da9ee9359"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x0, 0x74, {0x72, "602914cf26f459ef7a7941aaf6076d5e8521914ade69769a7ccbe5ec74c3fb5f8fc762aa3ea0547387bba93ce611f98541ab83ed4b0f2c1165925fa7357c8542cc65f5be30a3475e9c3709c1a2e8c789d4be8747ef5a996d44a90c0ddc0808984bc7409905f2fb6f51622afb69a3b661cc9c"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0x67}, &(0x7f0000000340)={0x20, 0x0, 0x1}}) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) 1m39.31432021s ago: executing program 34 (id=192): syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003da377207205feca01254c6c166bc1548b1df156be33550102030109023d000100000000090400000496dba8000905000000000000000705e37e1b82e609050b0200000000000905010000000000000905020410"], 0x0) 17.952337243s ago: executing program 35 (id=196): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r3, 0x0) statx(r3, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1000, 0x400, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$midi(&(0x7f00000000c0), 0x0, 0x1) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 7.068902443s ago: executing program 36 (id=190): r0 = eventfd2(0x0, 0x80800) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="ed77ed9453376826", 0x8}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1, r0}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000aa5ab8f008f5af1ec4a47bda9cf70faae7070000000000000072e7e0ccfaecbe444bb5e0ed92f3f9f248ad96f96ea04e25957514ad4f44ddc8769254487471a938662612cbe3eaa45eecced0e6cdd9c9c27f0b79e34d3025ef4f3ad26323b55f45ade33a4c8d49666e616d317e35c488361747c4bab5e83bce41756ae046276ce323742f4bbb4bdd9e6b2fa56b3f7c38ffff2fb4f5fea966d8b966ee722924048f92951758d46205b48616513e67", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25170000001c00068015000300efab13afc9f79aa9ba07fb754d144abe6e000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)={0x0, 0x16, 0x3, "f9616e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1dff014000010203010902930003010000000904000000010100000a2401000000020102132406000006060000000000000000000000000924030006030000000924060303010500b70924030000030004110624050400"], 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 5.617182534s ago: executing program 37 (id=199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x40, 0xd, 0xbd, {0xbd, 0x31, "4392eece4a2a77ced6a58054c2acdffb64606cabdd29a2a3891f6ccc49a92175059553160f9248a6846eb4282d63bb87026bca604dc238569259daaa1633050562b9139a2fa0f60e1060a28155061f2cb1f82c289892ee6cef2c0020bd2df7a1ae0f1e8d632685f9aee3880f2b45d868d2ed9bfa6f0e859e08045fe1c6c0cab2ba0b2396bdece9b6bbda1eb3931e000c137d7a5656d27b85a0c60995aa2ba35c11657d899a58f504fb6f0eed8b36caa2a1010e925530bd55879f29"}}, &(0x7f00000003c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "b54a3ef1394d9c7f9a"}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x20, 0x7, 0x42, "50fde0684d643ba1e5fad241de4679fae79158b08465a6ddf98e5166886c4b8d61a8249ff77a0f42f2b85ddc007dc936435741fda5bb8621a2df845dfd9dc8b1d191"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "db9f"}, &(0x7f0000000800)={0x20, 0x82, 0x2, "ccd1"}, &(0x7f0000000840)={0x20, 0x83, 0x2, "2c9a"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "7e91fab5"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "515190"}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x188}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x44}}, 0x0) (async, rerun: 32) sigaltstack(0x0, 0x0) (async, rerun: 32) r5 = open(0x0, 0x141042, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) (async, rerun: 64) r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) memfd_secret(0x0) (async, rerun: 64) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x40, 0x11, 0x4f, {0x4f, 0x1, "fe146f929dfd55c53a468884435d4447b92d4e3c42af27995934422f7086cc4d4b6d5346409361cc093762fe37fb1bfad1546a9d77f670652ffa0963405df91fe1166acb69d4acba921fea2b62"}}, &(0x7f0000000100)={0x0, 0x3, 0x68, @string={0x68, 0x3, "d167da3840c979a0b67f8a319a48d4d52aa8668f47978ee192d61cf6d9635e560ad62fd456bc40a2885f70c250ec20a17c09b83d0fa2665cd8ab7a8921a96a0324633c4d7d407c4e508513aadc602286a48ca0aebaaf5d44ac9fb7b21927b45f48a676a87017"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000480)={0x20, 0x8, 0xc1, "7785179520ed797a53215d69cb545a86ac36550daa2073e1774a622223dba8196baffa67a7196422d313bf1d3c71b2a7b642be8de91bb9517f838fcb63aa5b3448094f1c073d22cef5ca68cc51bf7a420c86f143de4c9e95371b83c3d70b89207dcb5396c9fa4adfc5a792c7453e34a967f9b64a4be35432f5572c43d874740c22624dcbf136b613bed01e8aada58f19c43ef4f94e11207dc7f6c2563a1fba65ec7086874412571401c0de984f2c23f03594b770d4322fcc52907fab3da9ee9359"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x0, 0x74, {0x72, "602914cf26f459ef7a7941aaf6076d5e8521914ade69769a7ccbe5ec74c3fb5f8fc762aa3ea0547387bba93ce611f98541ab83ed4b0f2c1165925fa7357c8542cc65f5be30a3475e9c3709c1a2e8c789d4be8747ef5a996d44a90c0ddc0808984bc7409905f2fb6f51622afb69a3b661cc9c"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0x67}, &(0x7f0000000340)={0x20, 0x0, 0x1}}) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) 0s ago: executing program 38 (id=198): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r1) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 51.247832][ T5826] cgroup: Unknown subsys name 'net' [ 51.367141][ T5826] cgroup: Unknown subsys name 'cpuset' [ 51.375938][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.677631][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.516960][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.533831][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.541930][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.574025][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.581749][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.589255][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.625465][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.663106][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.684102][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.695182][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.702852][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.710254][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.719293][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.720526][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.737991][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.745540][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.746693][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.756060][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.767420][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.774949][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.775908][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.784810][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.797061][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.806171][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.813563][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.817882][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.821608][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.828149][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.835452][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.842087][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.022265][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 55.137254][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.145337][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.152765][ T5846] bridge_slave_0: entered allmulticast mode [ 55.159957][ T5846] bridge_slave_0: entered promiscuous mode [ 55.181820][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.189217][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.196509][ T5846] bridge_slave_1: entered allmulticast mode [ 55.203119][ T5846] bridge_slave_1: entered promiscuous mode [ 55.273274][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.312121][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.378805][ T5846] team0: Port device team_slave_0 added [ 55.409984][ T5846] team0: Port device team_slave_1 added [ 55.423342][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 55.465892][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 55.477737][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 55.497661][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.504898][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.531385][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.548372][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.555440][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.581488][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.723370][ T5846] hsr_slave_0: entered promiscuous mode [ 55.730457][ T5846] hsr_slave_1: entered promiscuous mode [ 55.750912][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 55.762663][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.769895][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.777146][ T5854] bridge_slave_0: entered allmulticast mode [ 55.783664][ T5854] bridge_slave_0: entered promiscuous mode [ 55.828888][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.836805][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.844038][ T5854] bridge_slave_1: entered allmulticast mode [ 55.850609][ T5854] bridge_slave_1: entered promiscuous mode [ 55.874671][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.881763][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.889488][ T5852] bridge_slave_0: entered allmulticast mode [ 55.896839][ T5852] bridge_slave_0: entered promiscuous mode [ 55.912791][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.920318][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.927610][ T5855] bridge_slave_0: entered allmulticast mode [ 55.934630][ T5855] bridge_slave_0: entered promiscuous mode [ 55.951276][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.958534][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.965844][ T5852] bridge_slave_1: entered allmulticast mode [ 55.972415][ T5852] bridge_slave_1: entered promiscuous mode [ 56.000288][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.010771][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.018319][ T5855] bridge_slave_1: entered allmulticast mode [ 56.025342][ T5855] bridge_slave_1: entered promiscuous mode [ 56.041489][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.108947][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.119952][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.131591][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.148437][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.197031][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.215045][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.222609][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.229870][ T5853] bridge_slave_0: entered allmulticast mode [ 56.236865][ T5853] bridge_slave_0: entered promiscuous mode [ 56.245487][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.252567][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.260227][ T5853] bridge_slave_1: entered allmulticast mode [ 56.266788][ T5853] bridge_slave_1: entered promiscuous mode [ 56.283593][ T5854] team0: Port device team_slave_0 added [ 56.302758][ T5852] team0: Port device team_slave_0 added [ 56.325897][ T5855] team0: Port device team_slave_0 added [ 56.333639][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.346418][ T5854] team0: Port device team_slave_1 added [ 56.358550][ T5852] team0: Port device team_slave_1 added [ 56.365775][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.385417][ T5855] team0: Port device team_slave_1 added [ 56.432721][ T5853] team0: Port device team_slave_0 added [ 56.449854][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.460455][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.486996][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.499511][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.506580][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.532845][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.552867][ T5853] team0: Port device team_slave_1 added [ 56.559261][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.566412][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.593121][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.605565][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.612523][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.638530][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.656738][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.664596][ T5847] Bluetooth: hci0: command tx timeout [ 56.670075][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.696153][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.723043][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.730044][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.756115][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.781267][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.788440][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.814484][ T5847] Bluetooth: hci1: command tx timeout [ 56.815002][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.857766][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.864906][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.891230][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.902208][ T5152] Bluetooth: hci3: command tx timeout [ 56.902242][ T5841] Bluetooth: hci4: command tx timeout [ 56.913566][ T5847] Bluetooth: hci2: command tx timeout [ 56.968139][ T5854] hsr_slave_0: entered promiscuous mode [ 56.978284][ T5854] hsr_slave_1: entered promiscuous mode [ 56.984600][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.992398][ T5854] Cannot create hsr debugfs directory [ 57.019985][ T5855] hsr_slave_0: entered promiscuous mode [ 57.026753][ T5855] hsr_slave_1: entered promiscuous mode [ 57.033125][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.044404][ T5855] Cannot create hsr debugfs directory [ 57.070970][ T5852] hsr_slave_0: entered promiscuous mode [ 57.077496][ T5852] hsr_slave_1: entered promiscuous mode [ 57.083497][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.091321][ T5852] Cannot create hsr debugfs directory [ 57.101184][ T5853] hsr_slave_0: entered promiscuous mode [ 57.107626][ T5853] hsr_slave_1: entered promiscuous mode [ 57.113676][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.121308][ T5853] Cannot create hsr debugfs directory [ 57.127361][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.139431][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.183524][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.220870][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.481068][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.490885][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.503404][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.512589][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.578012][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.588391][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.599227][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.610470][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.626527][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.687093][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.699598][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.706933][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.747222][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.754388][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.784491][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.801704][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.811506][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.836930][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.897456][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.924019][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.947192][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.956272][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.987636][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.008810][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.034531][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.044503][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.072837][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.095629][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.102774][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.114375][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.121481][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.131149][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.138343][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.164741][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.171874][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.196419][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.267325][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.300687][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.307835][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.321511][ T5846] veth0_vlan: entered promiscuous mode [ 58.338845][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.345984][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.374859][ T5846] veth1_vlan: entered promiscuous mode [ 58.455234][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.488167][ T5846] veth0_macvtap: entered promiscuous mode [ 58.502654][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.512868][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.545019][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.552129][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.578929][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.588700][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.595865][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.609430][ T5846] veth1_macvtap: entered promiscuous mode [ 58.662623][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.700239][ T5852] veth0_vlan: entered promiscuous mode [ 58.710530][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.732324][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.734489][ T5847] Bluetooth: hci0: command tx timeout [ 58.742995][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.754831][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.763556][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.773072][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.787519][ T5852] veth1_vlan: entered promiscuous mode [ 58.801123][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.871081][ T5854] veth0_vlan: entered promiscuous mode [ 58.889514][ T5852] veth0_macvtap: entered promiscuous mode [ 58.896375][ T5847] Bluetooth: hci1: command tx timeout [ 58.923337][ T5853] veth0_vlan: entered promiscuous mode [ 58.932069][ T5854] veth1_vlan: entered promiscuous mode [ 58.948340][ T5852] veth1_macvtap: entered promiscuous mode [ 58.974117][ T5847] Bluetooth: hci2: command tx timeout [ 58.975166][ T5841] Bluetooth: hci4: command tx timeout [ 58.979540][ T5847] Bluetooth: hci3: command tx timeout [ 58.995400][ T5855] veth0_vlan: entered promiscuous mode [ 59.024247][ T5853] veth1_vlan: entered promiscuous mode [ 59.032245][ T5855] veth1_vlan: entered promiscuous mode [ 59.043199][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.055126][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.067013][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.111102][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.122160][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.136378][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.157936][ T5854] veth0_macvtap: entered promiscuous mode [ 59.171398][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.176013][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.190546][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.195404][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.207531][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.217179][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.243180][ T5854] veth1_macvtap: entered promiscuous mode [ 59.256691][ T5855] veth0_macvtap: entered promiscuous mode [ 59.285810][ T5855] veth1_macvtap: entered promiscuous mode [ 59.301760][ T5853] veth0_macvtap: entered promiscuous mode [ 59.311566][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.320882][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.337487][ T5853] veth1_macvtap: entered promiscuous mode [ 59.352163][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.369590][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.380400][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.391970][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.411978][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.429178][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.467045][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.477709][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490004][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.500652][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.511630][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.530206][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.542624][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.552797][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.563340][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.573490][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.584222][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.595428][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.610025][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620351][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.629415][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.638469][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.679696][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.692348][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.702284][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.720951][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.731756][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.742168][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.752630][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.762593][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.774829][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.786802][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.795368][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.806156][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.816747][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.831439][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.844103][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.854951][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.866347][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.886306][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.895250][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.904343][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.913046][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.922989][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.938232][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.963059][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.973861][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.990244][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.001016][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.019579][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.030807][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.043048][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.053656][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.064908][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.089991][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.099286][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.108196][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.117519][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.157430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.169525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.270005][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.284156][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.292019][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.348929][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.363007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.398024][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.409614][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.430431][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.439163][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.455360][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 60.472603][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.481140][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.492658][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 60.568240][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 60.579709][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.588914][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.611219][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.634938][ T25] usb 1-1: Product: syz [ 60.639155][ T25] usb 1-1: Manufacturer: syz [ 60.648989][ T25] usb 1-1: SerialNumber: syz [ 60.676905][ T25] usb 1-1: config 0 descriptor?? [ 60.702871][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 60.838167][ T5847] Bluetooth: hci0: command tx timeout [ 60.964428][ T5911] netlink: 'syz.4.8': attribute type 10 has an invalid length. [ 60.974318][ T5847] Bluetooth: hci1: command tx timeout [ 61.020470][ T5911] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8'. [ 61.034795][ T5911] ipvlan1: entered promiscuous mode [ 61.040137][ T5911] ipvlan1: entered allmulticast mode [ 61.046286][ T5911] veth0_vlan: entered allmulticast mode [ 61.053869][ T5847] Bluetooth: hci3: command tx timeout [ 61.062138][ T5911] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 61.080902][ T5841] Bluetooth: hci2: command tx timeout [ 61.086854][ T5847] Bluetooth: hci4: command tx timeout [ 61.297445][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 61.308500][ T5896] netlink: 'syz.0.6': attribute type 30 has an invalid length. [ 61.323041][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 61.397542][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.463880][ T5385] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.591173][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 61.591560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.612996][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.633617][ T5888] usb 3-1: Product: syz [ 61.641682][ T5888] usb 3-1: Manufacturer: syz [ 61.653338][ T5888] usb 3-1: SerialNumber: syz [ 61.663049][ T5888] usb 3-1: config 0 descriptor?? [ 61.688138][ T5385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.699534][ T5385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.709707][ T5385] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 61.719280][ T5385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.740892][ T5385] usb 4-1: config 0 descriptor?? [ 61.755402][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.767988][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.780934][ T25] gspca_zc3xx: reg_w_i err -71 [ 61.803848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.813999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.822305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.831149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.839928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 61.849584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 61.875620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.923799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 61.994794][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.073874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.240810][ T5385] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 62.257709][ T5902] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 62.276867][ T5385] hid-led 0003:1D34:000A.0001: probe with driver hid-led failed with error -71 [ 62.285271][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.294173][ T5902] usb 2-1: Product: syz [ 62.299156][ T5902] usb 2-1: Manufacturer: syz [ 62.303820][ T5902] usb 2-1: SerialNumber: syz [ 62.318036][ T5902] usb 2-1: config 0 descriptor?? [ 62.374025][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 62.380598][ T25] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 62.393067][ T25] usb 1-1: USB disconnect, device number 2 [ 62.395777][ T5385] usb 4-1: USB disconnect, device number 2 [ 62.440512][ T5931] process 'syz.3.13' launched './file1' with NULL argv: empty string added [ 62.458211][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.559648][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.593469][ T5888] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 62.603911][ T5888] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 62.630633][ T5888] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 62.636701][ T5931] support for cryptoloop has been removed. Use dm-crypt instead. [ 62.682372][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 62.694771][ T5888] usb 3-1: USB disconnect, device number 2 [ 62.812583][ T5902] hso 2-1:0.0: Failed to find BULK IN ep [ 62.814749][ T5902] usb-storage 2-1:0.0: USB Mass Storage device detected [ 62.902109][ T5847] Bluetooth: hci0: command tx timeout [ 63.064744][ T5847] Bluetooth: hci1: command tx timeout [ 63.073846][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.100684][ T5898] usb 2-1: USB disconnect, device number 2 [ 63.134887][ T5847] Bluetooth: hci4: command tx timeout [ 63.140908][ T5841] Bluetooth: hci2: command tx timeout [ 63.146450][ T5152] Bluetooth: hci3: command tx timeout [ 63.224447][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 63.238842][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.250413][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.265317][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.275456][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.287555][ T25] usb 1-1: config 0 descriptor?? [ 63.296342][ T25] hub 1-1:0.0: USB hub found [ 63.417924][ T2945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.510473][ T25] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 63.528237][ T2945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.767842][ T2945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.864106][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.864396][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.908289][ T5963] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 63.912451][ T2945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.957986][ T5962] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 63.964134][ T5962] macvlan0: entered promiscuous mode [ 63.964157][ T5962] macvlan0: entered allmulticast mode [ 63.968547][ T5962] veth1_vlan: entered allmulticast mode [ 63.970780][ T5962] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 64.090831][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.143541][ T2945] bridge_slave_1: left allmulticast mode [ 64.143677][ T2945] bridge_slave_1: left promiscuous mode [ 64.144380][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.179557][ T2945] bridge_slave_0: left allmulticast mode [ 64.179613][ T2945] bridge_slave_0: left promiscuous mode [ 64.180191][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.280323][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 64.280355][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 64.280378][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 64.280435][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 64.280486][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 64.280509][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.283104][ T5898] usb 2-1: config 0 descriptor?? [ 64.294694][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.295984][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.296724][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.297895][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.298596][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.299094][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.491702][ T5898] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 64.491799][ T5898] hdpvr 2-1:0.0: device init failed [ 64.491849][ T5898] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 64.495474][ T5898] usb 2-1: USB disconnect, device number 3 [ 64.545249][ T5897] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.749026][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 64.777745][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 64.793983][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 64.803166][ T5897] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 64.815756][ T25] usb 1-1: USB disconnect, device number 3 [ 64.823016][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.837039][ T5897] usb 5-1: Product: syz [ 64.841671][ T5897] usb 5-1: Manufacturer: syz [ 64.847088][ T5897] usb 5-1: SerialNumber: syz [ 64.864861][ T5897] usb 5-1: config 0 descriptor?? [ 65.083866][ T5897] speedtch 5-1:0.0: speedtch_bind: wrong device class 68 [ 65.099073][ T5897] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 65.150039][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.162088][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.174424][ T2945] bond0 (unregistering): Released all slaves [ 65.187928][ T5967] gretap0: entered promiscuous mode [ 65.197521][ T5967] erspan0: entered promiscuous mode [ 65.363947][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 65.523942][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 65.538050][ T5897] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 65.548169][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.561645][ T5897] usb 2-1: Product: syz [ 65.566102][ T5897] usb 2-1: Manufacturer: syz [ 65.573904][ T5897] usb 2-1: SerialNumber: syz [ 65.580365][ T5897] usb 2-1: config 0 descriptor?? [ 65.583879][ T5385] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.667424][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.691770][ T6002] ip6t_srh: unknown srh match flags 5040 [ 65.720982][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 65.765540][ T5385] usb 4-1: Using ep0 maxpacket: 8 [ 65.789229][ T5385] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 65.811208][ T5385] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 65.831261][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.838956][ T5385] usb 4-1: config 135 has no interface number 0 [ 65.868331][ T5385] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 65.898076][ T2945] hsr_slave_0: left promiscuous mode [ 65.905769][ T2945] hsr_slave_1: left promiscuous mode [ 65.911705][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.919794][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.928218][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.936327][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.969731][ T5385] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 65.995351][ T5385] usb 4-1: config 135 interface 230 has no altsetting 0 [ 66.008882][ T5385] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 66.022343][ T5385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.040820][ T5385] usb 4-1: Product: syz [ 66.049172][ T2945] veth1_macvtap: left promiscuous mode [ 66.050277][ T5385] usb 4-1: Manufacturer: syz [ 66.070212][ T5385] usb 4-1: SerialNumber: syz [ 66.097309][ T2945] veth0_macvtap: left promiscuous mode [ 66.111108][ T2945] veth1_vlan: left promiscuous mode [ 66.112634][ T5385] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 66.137847][ T5385] usb 4-1: No valid video chain found. [ 66.144312][ T2945] veth0_vlan: left promiscuous mode [ 66.344532][ T5841] Bluetooth: hci3: command tx timeout [ 67.114127][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 67.170996][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 67.294228][ T5385] usb 5-1: USB disconnect, device number 2 [ 67.873082][ T6034] kAFS: unparsable volume name [ 67.890409][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.899894][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.908854][ T5972] bridge_slave_0: entered allmulticast mode [ 67.918522][ T5972] bridge_slave_0: entered promiscuous mode [ 67.958032][ T6033] gretap0: entered promiscuous mode [ 67.973368][ T6033] erspan0: entered promiscuous mode [ 67.989229][ T6033] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 67.998587][ T6033] Cannot create hsr debugfs directory [ 68.012230][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.028447][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.036873][ T5972] bridge_slave_1: entered allmulticast mode [ 68.046424][ T5972] bridge_slave_1: entered promiscuous mode [ 68.119824][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.166712][ T5385] usb 2-1: USB disconnect, device number 4 [ 68.170553][ T6038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 68.197041][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.331007][ T5972] team0: Port device team_slave_0 added [ 68.350270][ T5972] team0: Port device team_slave_1 added [ 68.424240][ T5841] Bluetooth: hci3: command tx timeout [ 68.488721][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.517645][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.543545][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.679871][ T6060] ======================================================= [ 68.679871][ T6060] WARNING: The mand mount option has been deprecated and [ 68.679871][ T6060] and is ignored by this kernel. Remove the mand [ 68.679871][ T6060] option from the mount to silence this warning. [ 68.679871][ T6060] ======================================================= [ 68.729780][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.773545][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.792813][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.856136][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.098095][ T5897] usb 4-1: USB disconnect, device number 3 [ 69.266908][ T5972] hsr_slave_0: entered promiscuous mode [ 69.408662][ T5972] hsr_slave_1: entered promiscuous mode [ 69.440896][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.474055][ T5972] Cannot create hsr debugfs directory [ 69.959700][ T6095] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 70.004222][ T6095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'. [ 70.024123][ T6095] ipvlan1: entered promiscuous mode [ 70.034205][ T6095] ipvlan1: entered allmulticast mode [ 70.045163][ T6095] veth0_vlan: entered allmulticast mode [ 70.064058][ T6095] FAULT_INJECTION: forcing a failure. [ 70.064058][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 70.090299][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.0.54 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 70.100884][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 70.110978][ T6095] Call Trace: [ 70.114285][ T6095] [ 70.117239][ T6095] dump_stack_lvl+0x241/0x360 [ 70.121969][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.127203][ T6095] ? __pfx__printk+0x10/0x10 [ 70.131819][ T6095] ? __kmalloc_noprof+0xb0/0x400 [ 70.136794][ T6095] ? __pfx___might_resched+0x10/0x10 [ 70.142116][ T6095] should_fail_ex+0x3b0/0x4e0 [ 70.146827][ T6095] ? fib_create_info+0xa49/0x24e0 [ 70.151877][ T6095] should_failslab+0xac/0x100 [ 70.156588][ T6095] ? fib_create_info+0xa49/0x24e0 [ 70.161816][ T6095] __kmalloc_noprof+0xd8/0x400 [ 70.166618][ T6095] fib_create_info+0xa49/0x24e0 [ 70.171512][ T6095] fib_table_insert+0x1f6/0x1f30 [ 70.176474][ T6095] ? __pfx_lock_acquire+0x10/0x10 [ 70.181506][ T6095] ? l3mdev_fib_table+0x18/0x160 [ 70.186469][ T6095] ? __pfx_fib_table_insert+0x10/0x10 [ 70.191851][ T6095] ? fib_new_table+0x120/0x2d0 [ 70.196630][ T6095] fib_magic+0x3d8/0x620 [ 70.200877][ T6095] ? __pfx_fib_magic+0x10/0x10 [ 70.205649][ T6095] ? lockdep_rtnl_is_held+0x26/0x40 [ 70.210845][ T6095] ? ip_mc_up+0x287/0x300 [ 70.215175][ T6095] fib_add_ifaddr+0x14c/0x5e0 [ 70.219851][ T6095] fib_netdev_event+0x375/0x490 [ 70.224698][ T6095] notifier_call_chain+0x19f/0x3e0 [ 70.229902][ T6095] __dev_notify_flags+0x207/0x400 [ 70.234948][ T6095] ? __pfx___dev_notify_flags+0x10/0x10 [ 70.240489][ T6095] ? __dev_change_flags+0x579/0x6f0 [ 70.245689][ T6095] ? __pfx___dev_change_flags+0x10/0x10 [ 70.251232][ T6095] ? vprintk_emit+0x7ed/0xa10 [ 70.255908][ T6095] ? __pfx_vprintk_emit+0x10/0x10 [ 70.260931][ T6095] dev_change_flags+0xf0/0x1a0 [ 70.265786][ T6095] do_setlink+0xcd0/0x41f0 [ 70.270203][ T6095] ? _printk+0xd5/0x120 [ 70.274352][ T6095] ? mark_lock+0x9a/0x360 [ 70.278676][ T6095] ? __nla_validate_parse+0x2660/0x3090 [ 70.284224][ T6095] ? __pfx__printk+0x10/0x10 [ 70.288839][ T6095] ? __pfx_do_setlink+0x10/0x10 [ 70.293687][ T6095] ? rcu_is_watching+0x15/0xb0 [ 70.298472][ T6095] ? do_trace_netlink_extack+0x8b/0x1f0 [ 70.304035][ T6095] ? __nla_validate_parse+0x27eb/0x3090 [ 70.309601][ T6095] ? __pfx___nla_validate_parse+0x10/0x10 [ 70.315354][ T6095] ? mark_lock+0x9a/0x360 [ 70.319775][ T6095] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.325858][ T6095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.332191][ T6095] ? do_raw_spin_unlock+0x13c/0x8b0 [ 70.337396][ T6095] ? validate_linkmsg+0x71e/0x900 [ 70.342426][ T6095] rtnl_setlink+0x40d/0x5a0 [ 70.346931][ T6095] ? __lock_acquire+0x1384/0x2050 [ 70.351955][ T6095] ? __pfx_rtnl_setlink+0x10/0x10 [ 70.357026][ T6095] ? __pfx___mutex_lock+0x10/0x10 [ 70.362059][ T6095] ? __pfx_rtnl_setlink+0x10/0x10 [ 70.367084][ T6095] rtnetlink_rcv_msg+0x73f/0xcf0 [ 70.372029][ T6095] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 70.377166][ T6095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.382629][ T6095] ? ref_tracker_free+0x643/0x7e0 [ 70.387663][ T6095] netlink_rcv_skb+0x1e3/0x430 [ 70.392433][ T6095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.397896][ T6095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.403193][ T6095] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.408387][ T6095] netlink_unicast+0x7f6/0x990 [ 70.413155][ T6095] ? __pfx_netlink_unicast+0x10/0x10 [ 70.418438][ T6095] ? __virt_addr_valid+0x183/0x530 [ 70.423566][ T6095] ? __check_object_size+0x48e/0x900 [ 70.428883][ T6095] netlink_sendmsg+0x8e4/0xcb0 [ 70.433668][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.438963][ T6095] ? aa_sock_msg_perm+0x91/0x160 [ 70.443914][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.449208][ T6095] __sock_sendmsg+0x221/0x270 [ 70.453891][ T6095] ____sys_sendmsg+0x52a/0x7e0 [ 70.458659][ T6095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.463962][ T6095] __sys_sendmsg+0x292/0x380 [ 70.468551][ T6095] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.473668][ T6095] ? __pfx_vfs_write+0x10/0x10 [ 70.478488][ T6095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.484817][ T6095] ? do_syscall_64+0x100/0x230 [ 70.489594][ T6095] ? do_syscall_64+0xb6/0x230 [ 70.494280][ T6095] do_syscall_64+0xf3/0x230 [ 70.498784][ T6095] ? clear_bhb_loop+0x35/0x90 [ 70.503457][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.509356][ T6095] RIP: 0033:0x7f9a0bd7e719 [ 70.513775][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.533388][ T6095] RSP: 002b:00007f9a0cb30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.541802][ T6095] RAX: ffffffffffffffda RBX: 00007f9a0bf35f80 RCX: 00007f9a0bd7e719 [ 70.549791][ T6095] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 70.557768][ T6095] RBP: 00007f9a0cb30090 R08: 0000000000000000 R09: 0000000000000000 [ 70.565736][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.573720][ T6095] R13: 0000000000000000 R14: 00007f9a0bf35f80 R15: 00007f9a0c05fa28 [ 70.581702][ T6095] [ 70.615161][ T5841] Bluetooth: hci3: command tx timeout [ 70.618101][ T6095] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 70.767158][ T5897] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.899766][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.940234][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.984462][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 70.995412][ T5897] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 71.006279][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.016015][ T29] audit: type=1326 audit(1731224885.757:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.033775][ T5897] usb 4-1: can't read configurations, error -22 [ 71.039516][ T29] audit: type=1326 audit(1731224885.757:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.077614][ T29] audit: type=1326 audit(1731224885.767:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.077937][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.126318][ T29] audit: type=1326 audit(1731224885.767:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.195458][ T29] audit: type=1326 audit(1731224885.767:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.238639][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.254667][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.254893][ T29] audit: type=1326 audit(1731224885.767:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.286233][ T5972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.296919][ T5972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.324282][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.362737][ T5972] veth0_vlan: entered promiscuous mode [ 71.376756][ T5972] veth1_vlan: entered promiscuous mode [ 71.405698][ T5972] veth0_macvtap: entered promiscuous mode [ 71.416128][ T5972] veth1_macvtap: entered promiscuous mode [ 71.443112][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.450316][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.465322][ T29] audit: type=1326 audit(1731224885.767:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.520368][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.527574][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.545604][ T29] audit: type=1326 audit(1731224885.767:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.552651][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 71.633809][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.640607][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.656520][ T29] audit: type=1326 audit(1731224885.767:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.678833][ T29] audit: type=1326 audit(1731224885.797:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f43d5f7e719 code=0x7ffc0000 [ 71.724020][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 71.748208][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.762816][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.784666][ T5897] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 71.792605][ T5897] usb 4-1: can't read configurations, error -22 [ 71.810128][ T5897] usb usb4-port1: attempt power cycle [ 71.824665][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.852243][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.896635][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.939145][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.962126][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.999298][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.039319][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.108982][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.135107][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.157944][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.178836][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.193800][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 72.215951][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.234235][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 72.243886][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.263675][ T5897] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 72.282046][ T5897] usb 4-1: can't read configurations, error -22 [ 72.303289][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.320597][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.344900][ T6150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.361942][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.379415][ T5972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.469417][ T5972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.480467][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 72.510030][ T5972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527325][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 72.534607][ T5897] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 72.543267][ T5897] usb 4-1: can't read configurations, error -22 [ 72.552675][ T5897] usb usb4-port1: unable to enumerate USB device [ 72.583797][ T5972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656499][ T5841] Bluetooth: hci3: command tx timeout [ 72.750942][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.813997][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 72.820563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.834055][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.848347][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.112754][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 73.131438][ T5898] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 73.151925][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.184619][ T5898] usb 2-1: Product: syz [ 73.205725][ T5898] usb 2-1: Manufacturer: syz [ 73.210604][ T5898] usb 2-1: SerialNumber: syz [ 73.235649][ T5898] usb 2-1: config 0 descriptor?? [ 73.616601][ T5898] rtl8150 2-1:0.0: couldn't reset the device [ 73.623115][ T5898] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 73.664949][ T5898] usb 2-1: USB disconnect, device number 5 [ 73.726074][ T6182] netlink: 'syz.5.69': attribute type 10 has an invalid length. [ 73.766483][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.69'. [ 73.786777][ T6182] ipvlan1: entered promiscuous mode [ 73.799979][ T6182] ipvlan1: entered allmulticast mode [ 73.811202][ T6182] veth0_vlan: entered allmulticast mode [ 73.819150][ T6182] FAULT_INJECTION: forcing a failure. [ 73.819150][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 73.859094][ T6182] CPU: 1 UID: 0 PID: 6182 Comm: syz.5.69 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 73.869650][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.879729][ T6182] Call Trace: [ 73.883026][ T6182] [ 73.885972][ T6182] dump_stack_lvl+0x241/0x360 [ 73.890670][ T6182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.895882][ T6182] ? __pfx__printk+0x10/0x10 [ 73.900487][ T6182] ? __kmalloc_noprof+0xb0/0x400 [ 73.905438][ T6182] ? __pfx___might_resched+0x10/0x10 [ 73.910743][ T6182] should_fail_ex+0x3b0/0x4e0 [ 73.915438][ T6182] ? fib_create_info+0xa49/0x24e0 [ 73.920483][ T6182] should_failslab+0xac/0x100 [ 73.925188][ T6182] ? fib_create_info+0xa49/0x24e0 [ 73.930228][ T6182] __kmalloc_noprof+0xd8/0x400 [ 73.935015][ T6182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.941381][ T6182] fib_create_info+0xa49/0x24e0 [ 73.946278][ T6182] fib_table_insert+0x1f6/0x1f30 [ 73.951244][ T6182] ? __pfx_lock_acquire+0x10/0x10 [ 73.956295][ T6182] ? l3mdev_fib_table+0x18/0x160 [ 73.961264][ T6182] ? __pfx_fib_table_insert+0x10/0x10 [ 73.966661][ T6182] ? fib_new_table+0x120/0x2d0 [ 73.971452][ T6182] fib_magic+0x3d8/0x620 [ 73.975717][ T6182] ? __pfx_fib_magic+0x10/0x10 [ 73.980509][ T6182] ? lockdep_rtnl_is_held+0x26/0x40 [ 73.985727][ T6182] ? ip_mc_up+0x287/0x300 [ 73.990081][ T6182] fib_add_ifaddr+0x398/0x5e0 [ 73.994794][ T6182] fib_netdev_event+0x375/0x490 [ 73.999665][ T6182] notifier_call_chain+0x19f/0x3e0 [ 74.003827][ T5385] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 74.004783][ T6182] __dev_notify_flags+0x207/0x400 [ 74.017268][ T6182] ? __pfx___dev_notify_flags+0x10/0x10 [ 74.022836][ T6182] ? __dev_change_flags+0x579/0x6f0 [ 74.028061][ T6182] ? __pfx___dev_change_flags+0x10/0x10 [ 74.033629][ T6182] ? vprintk_emit+0x7ed/0xa10 [ 74.038419][ T6182] ? __pfx_vprintk_emit+0x10/0x10 [ 74.043466][ T6182] dev_change_flags+0xf0/0x1a0 [ 74.048266][ T6182] do_setlink+0xcd0/0x41f0 [ 74.052710][ T6182] ? _printk+0xd5/0x120 [ 74.056891][ T6182] ? __nla_validate_parse+0x2660/0x3090 [ 74.062462][ T6182] ? __pfx__printk+0x10/0x10 [ 74.067076][ T6182] ? __pfx_do_setlink+0x10/0x10 [ 74.072647][ T6182] ? rcu_is_watching+0x15/0xb0 [ 74.077452][ T6182] ? do_trace_netlink_extack+0x8b/0x1f0 [ 74.083030][ T6182] ? __nla_validate_parse+0x27eb/0x3090 [ 74.088601][ T6182] ? kernel_text_address+0xa7/0xe0 [ 74.093749][ T6182] ? __pfx___nla_validate_parse+0x10/0x10 [ 74.099497][ T6182] ? __pfx_validate_chain+0x10/0x10 [ 74.104718][ T6182] ? stack_trace_save+0x118/0x1d0 [ 74.109774][ T6182] ? __pfx_stack_trace_save+0x10/0x10 [ 74.115174][ T6182] ? stack_depot_save_flags+0x29/0x830 [ 74.120659][ T6182] ? kasan_save_track+0x51/0x80 [ 74.125523][ T6182] ? kasan_save_free_info+0x40/0x50 [ 74.130747][ T6182] ? kmem_cache_free+0x1a2/0x420 [ 74.135704][ T6182] ? nlmon_xmit+0xaf/0x100 [ 74.140149][ T6182] ? validate_linkmsg+0x71e/0x900 [ 74.145210][ T6182] rtnl_setlink+0x40d/0x5a0 [ 74.149733][ T6182] ? mark_lock+0x9a/0x360 [ 74.154886][ T6182] ? __pfx_rtnl_setlink+0x10/0x10 [ 74.154980][ T6182] ? __pfx_lock_release+0x10/0x10 [ 74.155007][ T6182] ? __pfx___mutex_lock+0x10/0x10 [ 74.155042][ T6182] ? __pfx_rtnl_setlink+0x10/0x10 [ 74.155067][ T6182] rtnetlink_rcv_msg+0x73f/0xcf0 [ 74.155092][ T6182] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 74.155122][ T6182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.155155][ T6182] ? ref_tracker_free+0x643/0x7e0 [ 74.155183][ T6182] netlink_rcv_skb+0x1e3/0x430 [ 74.155206][ T6182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.155234][ T6182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.155273][ T6182] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.155294][ T6182] netlink_unicast+0x7f6/0x990 [ 74.155320][ T6182] ? __pfx_netlink_unicast+0x10/0x10 [ 74.155337][ T6182] ? __virt_addr_valid+0x183/0x530 [ 74.155359][ T6182] ? __check_object_size+0x48e/0x900 [ 74.155386][ T6182] netlink_sendmsg+0x8e4/0xcb0 [ 74.155419][ T6182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.155445][ T6182] ? aa_sock_msg_perm+0x91/0x160 [ 74.155473][ T6182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.155493][ T6182] __sock_sendmsg+0x221/0x270 [ 74.155522][ T6182] ____sys_sendmsg+0x52a/0x7e0 [ 74.155562][ T6182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.155601][ T6182] __sys_sendmsg+0x292/0x380 [ 74.155626][ T6182] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.155661][ T6182] ? __pfx_vfs_write+0x10/0x10 [ 74.155706][ T6182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.155733][ T6182] ? do_syscall_64+0x100/0x230 [ 74.155758][ T6182] ? do_syscall_64+0xb6/0x230 [ 74.155782][ T6182] do_syscall_64+0xf3/0x230 [ 74.155804][ T6182] ? clear_bhb_loop+0x35/0x90 [ 74.155829][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.155850][ T6182] RIP: 0033:0x7f68f277e719 [ 74.155869][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.155885][ T6182] RSP: 002b:00007f68f350e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.155908][ T6182] RAX: ffffffffffffffda RBX: 00007f68f2935f80 RCX: 00007f68f277e719 [ 74.155923][ T6182] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 74.155936][ T6182] RBP: 00007f68f350e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.155949][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.155962][ T6182] R13: 0000000000000000 R14: 00007f68f2935f80 R15: 00007f68f2a5fa28 [ 74.155991][ T6182] [ 74.180610][ T5385] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.180653][ T5385] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 74.180679][ T5385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 74.180705][ T5385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 74.180727][ T5385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.182566][ T5385] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 74.182595][ T5385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 74.182618][ T5385] usb 4-1: Product: syz [ 74.182634][ T5385] usb 4-1: Manufacturer: syz [ 74.182651][ T5385] usb 4-1: SerialNumber: syz [ 74.199897][ T6182] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 74.221630][ T5385] usb 4-1: config 0 descriptor?? [ 74.283852][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.408207][ T6190] sctp: [Deprecated]: syz.5.71 (pid 6190) Use of int in maxseg socket option. [ 74.408207][ T6190] Use struct sctp_assoc_value instead [ 74.428707][ T6172] Sensor A: ================= START STATUS ================= [ 74.428730][ T6172] Sensor A: Test Pattern: 75% Colorbar [ 74.428795][ T6172] Sensor A: Show Information: All [ 74.428808][ T6172] Sensor A: Vertical Flip: false [ 74.428821][ T6172] Sensor A: Horizontal Flip: false [ 74.428833][ T6172] Sensor A: Brightness: 128 [ 74.428846][ T6172] Sensor A: Contrast: 128 [ 74.428858][ T6172] Sensor A: Hue: 0 [ 74.428870][ T6172] Sensor A: Saturation: 128 [ 74.428882][ T6172] Sensor A: ================== END STATUS ================== [ 74.444753][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 74.454162][ T5385] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 74.454200][ T5385] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 74.492746][ T5889] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 10 [ 74.492793][ T5889] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 74.492816][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.517128][ T6194] xt_addrtype: ipv6 does not support BROADCAST matching [ 74.656787][ T5385] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 74.656816][ T5385] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 74.657651][ T5385] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 74.711610][ T5385] usb 4-1: USB disconnect, device number 8 [ 74.768979][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.74'. [ 74.967047][ T6187] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 75.156163][ T2945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.383303][ T2945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.560476][ T2945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.709420][ T2945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.907325][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.911311][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.233346][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.242929][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.251162][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.265825][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.817295][ T2945] bridge_slave_1: left allmulticast mode [ 76.833308][ T2945] bridge_slave_1: left promiscuous mode [ 76.859320][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.066016][ T2945] bridge_slave_0: left allmulticast mode [ 77.095111][ T8] cfg80211: failed to load regulatory.db [ 77.102371][ T2945] bridge_slave_0: left promiscuous mode [ 77.123888][ T5889] usb 5-1: string descriptor 0 read error: -71 [ 77.130733][ T5889] hub 5-1:32.0: USB hub found [ 77.132832][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.260023][ T5889] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 77.435253][ T5889] usb 5-1: USB disconnect, device number 3 [ 78.238526][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.249394][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.260863][ T2945] bond0 (unregistering): Released all slaves [ 78.274854][ T6237] netlink: 'syz.5.84': attribute type 4 has an invalid length. [ 78.282558][ T6237] netlink: 140 bytes leftover after parsing attributes in process `syz.5.84'. [ 78.291769][ T6234] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 78.299572][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.83'. [ 78.309796][ T6234] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 78.325525][ T6234] FAULT_INJECTION: forcing a failure. [ 78.325525][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 78.338983][ T6234] CPU: 1 UID: 0 PID: 6234 Comm: syz.0.83 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 78.339622][ T5841] Bluetooth: hci4: command tx timeout [ 78.349507][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.349521][ T6234] Call Trace: [ 78.349529][ T6234] [ 78.349537][ T6234] dump_stack_lvl+0x241/0x360 [ 78.349565][ T6234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.349586][ T6234] ? __pfx__printk+0x10/0x10 [ 78.349607][ T6234] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 78.349630][ T6234] ? __pfx___might_resched+0x10/0x10 [ 78.349657][ T6234] should_fail_ex+0x3b0/0x4e0 [ 78.349678][ T6234] should_failslab+0xac/0x100 [ 78.349698][ T6234] ? __alloc_skb+0x1c3/0x440 [ 78.411115][ T6234] kmem_cache_alloc_node_noprof+0x71/0x320 [ 78.416960][ T6234] __alloc_skb+0x1c3/0x440 [ 78.421408][ T6234] ? __pfx___alloc_skb+0x10/0x10 [ 78.426463][ T6234] ? netlink_ack_tlv_len+0x6e/0x200 [ 78.431690][ T6234] netlink_ack+0x13f/0xa30 [ 78.436127][ T6234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.441626][ T6234] netlink_rcv_skb+0x262/0x430 [ 78.446415][ T6234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.451900][ T6234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.457214][ T6234] ? netlink_deliver_tap+0x2e/0x1b0 [ 78.462433][ T6234] netlink_unicast+0x7f6/0x990 [ 78.467225][ T6234] ? __pfx_netlink_unicast+0x10/0x10 [ 78.472543][ T6234] ? __virt_addr_valid+0x183/0x530 [ 78.478030][ T6234] ? __check_object_size+0x48e/0x900 [ 78.483356][ T6234] netlink_sendmsg+0x8e4/0xcb0 [ 78.488160][ T6234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.493472][ T6234] ? aa_sock_msg_perm+0x91/0x160 [ 78.498439][ T6234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.503746][ T6234] __sock_sendmsg+0x221/0x270 [ 78.508440][ T6234] ____sys_sendmsg+0x52a/0x7e0 [ 78.513200][ T6234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.518501][ T6234] __sys_sendmsg+0x292/0x380 [ 78.523119][ T6234] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.528266][ T6234] ? __pfx_vfs_write+0x10/0x10 [ 78.533081][ T6234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.539435][ T6234] ? do_syscall_64+0x100/0x230 [ 78.544223][ T6234] ? do_syscall_64+0xb6/0x230 [ 78.548921][ T6234] do_syscall_64+0xf3/0x230 [ 78.553449][ T6234] ? clear_bhb_loop+0x35/0x90 [ 78.558151][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.564071][ T6234] RIP: 0033:0x7f9a0bd7e719 [ 78.568502][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.588129][ T6234] RSP: 002b:00007f9a0cb30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.589675][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 78.596549][ T6234] RAX: ffffffffffffffda RBX: 00007f9a0bf35f80 RCX: 00007f9a0bd7e719 [ 78.596568][ T6234] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 78.596581][ T6234] RBP: 00007f9a0cb30090 R08: 0000000000000000 R09: 0000000000000000 [ 78.596592][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.596603][ T6234] R13: 0000000000000000 R14: 00007f9a0bf35f80 R15: 00007f9a0c05fa28 [ 78.596629][ T6234] [ 78.704402][ T5385] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.854277][ T5385] usb 6-1: Using ep0 maxpacket: 16 [ 78.870958][ T5385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.897339][ T5385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.943453][ T5385] usb 6-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 78.960272][ T6271] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 78.983672][ T5385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.015783][ T5385] usb 6-1: config 0 descriptor?? [ 79.022949][ T6271] macvlan0: entered promiscuous mode [ 79.029584][ T6271] macvlan0: entered allmulticast mode [ 79.046912][ T6271] veth1_vlan: entered allmulticast mode [ 79.059920][ T6271] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 79.114209][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.214154][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 79.249544][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.263235][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.330627][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.339281][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.352335][ T25] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 79.360645][ T25] usb 5-1: config 0 has no interface number 0 [ 79.366900][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=4e.e0 [ 79.376182][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.398425][ T25] usb 5-1: config 0 descriptor?? [ 79.403532][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.410822][ T5897] usb 4-1: device descriptor read/64, error -71 [ 79.425901][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.433152][ T6232] bridge_slave_0: entered allmulticast mode [ 79.450428][ T25] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 79.481585][ T6232] bridge_slave_0: entered promiscuous mode [ 79.515544][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.522692][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.530418][ T6232] bridge_slave_1: entered allmulticast mode [ 79.541639][ T6232] bridge_slave_1: entered promiscuous mode [ 79.556979][ T6264] bridge2: entered promiscuous mode [ 79.562333][ T6264] bridge2: entered allmulticast mode [ 79.606632][ T2945] hsr_slave_0: left promiscuous mode [ 79.612822][ T2945] hsr_slave_1: left promiscuous mode [ 79.630321][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.641446][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.653360][ T5385] wacom 0003:056A:010D.0002: hidraw0: USB HID v0.00 Device [HID 056a:010d] on usb-dummy_hcd.5-1/input0 [ 79.656547][ T25] gspca_sn9c20x: Write register 1000 failed -71 [ 79.702508][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 79.714968][ T25] gspca_sn9c20x: Device initialization failed [ 79.721125][ T25] gspca_sn9c20x 5-1:0.59: probe with driver gspca_sn9c20x failed with error -71 [ 79.732710][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.734734][ T25] usb 5-1: USB disconnect, device number 4 [ 79.749844][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.792829][ T2945] veth1_macvtap: left promiscuous mode [ 79.798673][ T2945] veth0_macvtap: left promiscuous mode [ 79.804648][ T2945] veth1_vlan: left promiscuous mode [ 79.810699][ T2945] veth0_vlan: left promiscuous mode [ 79.851112][ T5887] usb 6-1: USB disconnect, device number 2 [ 79.863967][ T5897] usb 4-1: device descriptor read/64, error -71 [ 79.984149][ T5897] usb usb4-port1: attempt power cycle [ 80.168051][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 80.230099][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 80.258754][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 80.291272][ T6306] program syz.4.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.374062][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 80.415920][ T5841] Bluetooth: hci4: command tx timeout [ 80.425073][ T5897] usb 4-1: device descriptor read/8, error -71 [ 80.638049][ T6314] Cannot find del_set index 0 as target [ 80.694118][ T5897] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 80.727333][ T5897] usb 4-1: device descriptor read/8, error -71 [ 80.761058][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.765747][ T5385] hid-generic 002B:0003:0101.0003: item fetching failed at offset 15/32 [ 80.779957][ T5385] hid-generic 002B:0003:0101.0003: probe with driver hid-generic failed with error -22 [ 80.781953][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.862509][ T6232] team0: Port device team_slave_0 added [ 80.871776][ T5897] usb usb4-port1: unable to enumerate USB device [ 80.894673][ T6232] team0: Port device team_slave_1 added [ 80.965665][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.003894][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.031758][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.049923][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.059582][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.097628][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.123872][ T5385] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.207108][ T6232] hsr_slave_0: entered promiscuous mode [ 81.215331][ T6232] hsr_slave_1: entered promiscuous mode [ 81.228163][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.239799][ T6232] Cannot create hsr debugfs directory [ 81.251241][ T6327] netlink: 'syz.4.99': attribute type 10 has an invalid length. [ 81.294118][ T5385] usb 1-1: Using ep0 maxpacket: 32 [ 81.310574][ T5385] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 81.331943][ T5385] usb 1-1: config 0 has no interface number 0 [ 81.356019][ T5385] usb 1-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 81.406052][ T5385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.423914][ T5385] usb 1-1: Product: syz [ 81.428129][ T5385] usb 1-1: Manufacturer: syz [ 81.432747][ T5385] usb 1-1: SerialNumber: syz [ 81.447358][ T5385] usb 1-1: config 0 descriptor?? [ 81.461693][ T5385] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 81.637641][ T6232] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.670721][ T6232] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.717515][ T6232] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.749102][ T6232] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.894609][ T5385] gspca_sunplus: reg_w_riv err -71 [ 81.899901][ T5385] sunplus 1-1:0.250: probe with driver sunplus failed with error -71 [ 81.935936][ T5385] usb 1-1: USB disconnect, device number 4 [ 82.019440][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.088535][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.136022][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.143201][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.206349][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.213487][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.356035][ T6358] netlink: 'syz.4.107': attribute type 4 has an invalid length. [ 82.373921][ T6358] netlink: 140 bytes leftover after parsing attributes in process `syz.4.107'. [ 82.401566][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.496039][ T5841] Bluetooth: hci4: command tx timeout [ 82.661858][ T6367] vxcan1: tx address claim with dlc 1 [ 82.663906][ T6232] veth0_vlan: entered promiscuous mode [ 82.696516][ T6232] veth1_vlan: entered promiscuous mode [ 82.770606][ T6367] Zero length message leads to an empty skb [ 82.780197][ T6232] veth0_macvtap: entered promiscuous mode [ 82.814239][ T6232] veth1_macvtap: entered promiscuous mode [ 82.915929][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.974396][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.022420][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.056088][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.109451][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.129504][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.172417][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.192072][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.211522][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.261717][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.275974][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.287089][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.300019][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.333109][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.360571][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.381008][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.403128][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.413675][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.430236][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.487745][ T6232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487786][ T6232] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487814][ T6232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487842][ T6232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.573869][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 83.577543][ T8] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.577579][ T8] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.577604][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.577634][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 83.577659][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.583537][ T8] usb 1-1: config 0 descriptor?? [ 83.668142][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.668167][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.740774][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.740798][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.791755][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.791980][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.792671][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.792964][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.796185][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.796464][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.797157][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.798017][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.798778][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.799070][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.937337][ T8] logitech-djreceiver 0003:046D:C71F.0004: hidraw0: USB HID v80.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 84.474592][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.575372][ T5841] Bluetooth: hci4: command tx timeout [ 84.645533][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.659920][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.670565][ T5902] usb 7-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 84.686186][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.712238][ T5902] usb 7-1: config 0 descriptor?? [ 85.153994][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 85.165586][ T8] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 85.171267][ T5902] usbhid 7-1:0.0: can't add hid device: -71 [ 85.193530][ T5902] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 85.231581][ T5902] usb 7-1: USB disconnect, device number 2 [ 85.323950][ T8] usb 1-1: device descriptor read/64, error -32 [ 85.574056][ T8] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 85.592995][ T6445] netlink: 104 bytes leftover after parsing attributes in process `syz.4.122'. [ 85.660612][ T29] audit: type=1326 audit(1731224900.407:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.4.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43d5f7e719 code=0x0 [ 85.714335][ T8] usb 1-1: device descriptor read/64, error -32 [ 85.954539][ T8] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 85.996135][ T8] usb 1-1: device descriptor read/8, error -32 [ 86.227970][ T6474] netlink: 'syz.6.129': attribute type 10 has an invalid length. [ 86.235933][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.129'. [ 86.246355][ T6474] ipvlan1: entered promiscuous mode [ 86.251572][ T6474] ipvlan1: entered allmulticast mode [ 86.257346][ T6474] veth0_vlan: entered allmulticast mode [ 86.265680][ T6474] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 86.354680][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.514669][ T6492] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 86.554527][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 86.573112][ T5889] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 86.573842][ T6492] macvlan0: entered promiscuous mode [ 86.588263][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.597726][ T5889] usb 6-1: Product: syz [ 86.606970][ T5889] usb 6-1: Manufacturer: syz [ 86.611608][ T5889] usb 6-1: SerialNumber: syz [ 86.612272][ T6492] macvlan0: entered allmulticast mode [ 86.628339][ T5889] usb 6-1: config 0 descriptor?? [ 86.633494][ T6492] veth1_vlan: entered allmulticast mode [ 86.876007][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.983961][ T8] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 87.004817][ T8] usb 1-1: device reset changed ep0 maxpacket size! [ 87.038333][ T5887] usb 1-1: USB disconnect, device number 5 [ 87.224157][ T5887] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.375719][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.142'. [ 87.395862][ T5887] usb 1-1: config 1 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 87.451381][ T5887] usb 1-1: config 1 interface 0 altsetting 251 endpoint 0x2 has an invalid bInterval 215, changing to 11 [ 87.568375][ T6527] sctp: [Deprecated]: syz.3.141 (pid 6527) Use of int in maxseg socket option. [ 87.568375][ T6527] Use struct sctp_assoc_value instead [ 87.572255][ T5887] usb 1-1: config 1 interface 0 has no altsetting 0 [ 87.624192][ T5887] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.40 [ 87.633619][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.666849][ T5887] usb 1-1: Product: ቓ䞲 [ 87.671705][ T5887] usb 1-1: Manufacturer: А [ 87.681822][ T5887] usb 1-1: SerialNumber: syz [ 87.715711][ T6487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.949902][ T6487] random: crng reseeded on system resumption [ 88.428606][ T5887] usbhid 1-1:1.0: can't add hid device: -71 [ 88.434780][ T5887] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 88.446902][ T5887] usb 1-1: USB disconnect, device number 6 [ 88.644028][ T3067] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 88.654134][ T5385] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.806347][ T5385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.817198][ T5385] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.833081][ T5385] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 88.842234][ T3067] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.856812][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.868569][ T3067] usb 5-1: not running at top speed; connect to a high speed hub [ 88.868708][ T5385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.885723][ T3067] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.885999][ T5385] usb 7-1: Product: syz [ 88.903393][ T5385] usb 7-1: Manufacturer: syz [ 88.908562][ T5385] usb 7-1: SerialNumber: syz [ 88.913811][ T3067] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.915934][ T5385] usb 7-1: config 0 descriptor?? [ 88.946424][ T3067] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.000460][ T3067] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.029541][ T3067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.033866][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 89.049041][ T3067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.050901][ T6574] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 89.074431][ T6574] veth1_vlan: left allmulticast mode [ 89.079924][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.088583][ T8] usb 4-1: config 0 has no interface number 0 [ 89.091140][ T3067] usb 5-1: Product: syz [ 89.103374][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.103974][ T3067] usb 5-1: Manufacturer: syz [ 89.123219][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.144400][ T8] usb 4-1: Product: syz [ 89.146516][ T3067] usb 5-1: SerialNumber: syz [ 89.148590][ T8] usb 4-1: Manufacturer: syz [ 89.148610][ T8] usb 4-1: SerialNumber: syz [ 89.150484][ T8] usb 4-1: config 0 descriptor?? [ 89.175368][ T5887] usb 6-1: USB disconnect, device number 3 [ 89.236900][ T8] smsc95xx v2.0.0 [ 89.244020][ T6530] netlink: 'syz.6.143': attribute type 10 has an invalid length. [ 89.251812][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.143'. [ 89.266459][ T6530] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 89.315890][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.333105][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.385053][ T5887] usb 7-1: USB disconnect, device number 3 [ 89.471253][ T3067] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 89.524032][ T3067] usb 5-1: USB disconnect, device number 5 [ 89.657071][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.668169][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.703851][ T5385] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 89.751958][ T29] audit: type=1326 audit(1731224904.497:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 89.800081][ T29] audit: type=1326 audit(1731224904.497:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 89.851968][ T29] audit: type=1326 audit(1731224904.497:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 89.863904][ T5385] usb 1-1: Using ep0 maxpacket: 8 [ 89.882571][ T29] audit: type=1326 audit(1731224904.497:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 89.900466][ T5385] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.932875][ T29] audit: type=1326 audit(1731224904.497:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 89.946805][ T5385] usb 1-1: config 7 has an invalid interface number: 93 but max is 0 [ 89.963499][ T5385] usb 1-1: config 7 has no interface number 0 [ 89.969755][ T5385] usb 1-1: config 7 interface 93 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 89.987368][ T29] audit: type=1326 audit(1731224904.497:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 90.012985][ T5385] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=32.f2 [ 90.027498][ T5385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.045594][ T5385] usb 1-1: Product: syz [ 90.051807][ T5385] usb 1-1: Manufacturer: syz [ 90.062080][ T5385] usb 1-1: SerialNumber: syz [ 90.072219][ T29] audit: type=1326 audit(1731224904.497:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 90.162555][ T29] audit: type=1326 audit(1731224904.497:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f277e31b code=0x7ffc0000 [ 90.258676][ T29] audit: type=1326 audit(1731224904.497:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.5.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f277e31b code=0x7ffc0000 [ 90.289795][ T6606] netlink: 'syz.6.155': attribute type 32 has an invalid length. [ 90.303805][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.385695][ T5385] s2255 1-1:7.93: Could not find bulk-in endpoint [ 90.392224][ T5385] Sensoray 2255 driver load failed: 0xfffffff4 [ 90.417323][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.490356][ T5385] s2255 1-1:7.93: probe with driver s2255 failed with error -12 [ 90.626962][ T5385] usb 1-1: USB disconnect, device number 7 [ 90.703890][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.809836][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 90.853900][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 90.862657][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 90.931350][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c [ 91.017485][ T8] usb 4-1: USB disconnect, device number 13 [ 91.028379][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.127163][ T9] usb 5-1: Product: syz [ 91.183950][ T9] usb 5-1: Manufacturer: syz [ 91.188638][ T9] usb 5-1: SerialNumber: syz [ 91.259791][ T9] usb 5-1: config 0 descriptor?? [ 91.333917][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.527649][ T9] usb 5-1: USB disconnect, device number 6 [ 91.544331][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 91.584302][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.667469][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.708222][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.743320][ T5889] usb 6-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 91.760544][ T5889] usb 6-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 91.820462][ T5889] usb 6-1: Manufacturer: syz [ 91.853612][ T5889] usb 6-1: config 0 descriptor?? [ 92.304047][ T5889] wacom 0003:056A:2A22.0005: Unknown device_type for 'syz'. Ignoring. [ 92.500164][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.549767][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.620049][ T5385] usb 6-1: USB disconnect, device number 4 [ 92.656147][ T6654] syz.3.164 uses obsolete (PF_INET,SOCK_PACKET) [ 92.783895][ T5889] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 92.831853][ T6656] netlink: 32 bytes leftover after parsing attributes in process `syz.5.166'. [ 92.945876][ T5889] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 92.976580][ T5889] usb 7-1: config 0 has no interface number 0 [ 93.000043][ T5889] usb 7-1: config 0 interface 29 has no altsetting 0 [ 93.029263][ T5889] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 93.042277][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.071148][ T5889] usb 7-1: Product: syz [ 93.086913][ T5889] usb 7-1: Manufacturer: syz [ 93.103081][ T5889] usb 7-1: SerialNumber: syz [ 93.139711][ T5889] usb 7-1: config 0 descriptor?? [ 95.259430][ T5889] peak_usb 7-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 95.287786][ T5889] peak_usb 7-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 98.145499][ T6661] netlink: 228 bytes leftover after parsing attributes in process `syz.5.167'. [ 98.388707][ T6664] team0: entered promiscuous mode [ 98.444071][ T6664] team_slave_0: entered promiscuous mode [ 98.477006][ T6664] team_slave_1: entered promiscuous mode [ 98.518972][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 98.518989][ T29] audit: type=1326 audit(1731224913.267:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 98.579569][ T6674] program syz.4.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.591123][ T6664] dummy0: entered promiscuous mode [ 98.694112][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.170'. [ 98.753753][ T29] audit: type=1326 audit(1731224913.307:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 98.864872][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 98.935231][ T29] audit: type=1326 audit(1731224913.327:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.034167][ T29] audit: type=1326 audit(1731224913.327:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.081271][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 99.123841][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.131679][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.168882][ T29] audit: type=1326 audit(1731224913.347:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.203059][ T9] usb 4-1: config 0 descriptor?? [ 99.235715][ T9] ums-usbat 4-1:0.0: USB Mass Storage device detected [ 99.276336][ T9] ums-usbat 4-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 99.303924][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 99.313194][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.337590][ T9] ums-usbat 4-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.0-rc6-syzkaller-00279-gde2f378f2b77) [ 99.337590][ T9] Please send a copy of this message to and [ 99.377448][ T29] audit: type=1326 audit(1731224913.347:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.406400][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.441503][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.460087][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.487943][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.500140][ T29] audit: type=1326 audit(1731224913.347:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.530669][ T5887] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.565675][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.592494][ T29] audit: type=1326 audit(1731224913.347:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.638111][ T5887] usb 6-1: config 0 descriptor?? [ 99.711545][ T29] audit: type=1326 audit(1731224913.347:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.823526][ T9] usb 4-1: USB disconnect, device number 14 [ 99.845285][ T29] audit: type=1326 audit(1731224913.347:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f277e719 code=0x7ffc0000 [ 99.873860][ T5385] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.895168][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 99.922053][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 99.953606][ T5887] usb 6-1: USB disconnect, device number 5 [ 100.076415][ T5385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.109285][ T5385] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.167441][ T5385] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 100.202684][ T5385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.242596][ T5385] usb 5-1: config 0 descriptor?? [ 100.698114][ T5385] ortek 0003:1223:3F07.0006: unknown main item tag 0x6 [ 100.729316][ T5385] ortek 0003:1223:3F07.0006: bogus close delimiter [ 100.758040][ T5385] ortek 0003:1223:3F07.0006: item 0 0 2 10 parsing failed [ 100.800512][ T5385] ortek 0003:1223:3F07.0006: probe with driver ortek failed with error -22 [ 103.004627][ T5889] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 103.044253][ T5385] usb 5-1: USB disconnect, device number 7 [ 103.123896][ T5889] usb 7-1: USB disconnect, device number 4 [ 103.303113][ T6714] FAULT_INJECTION: forcing a failure. [ 103.303113][ T6714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.469370][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.0.181 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 103.480025][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.490104][ T6714] Call Trace: [ 103.493430][ T6714] [ 103.496393][ T6714] dump_stack_lvl+0x241/0x360 [ 103.501099][ T6714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.506326][ T6714] ? __pfx__printk+0x10/0x10 [ 103.510939][ T6714] ? __lock_acquire+0x1384/0x2050 [ 103.515998][ T6714] should_fail_ex+0x3b0/0x4e0 [ 103.520699][ T6714] prepare_alloc_pages+0x1da/0x5b0 [ 103.525840][ T6714] __alloc_pages_noprof+0x16f/0x710 [ 103.531064][ T6714] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 103.536827][ T6714] alloc_pages_mpol_noprof+0x3e8/0x680 [ 103.542318][ T6714] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 103.548371][ T6714] vma_alloc_folio_noprof+0x12e/0x230 [ 103.553775][ T6714] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 103.559693][ T6714] ? do_raw_spin_unlock+0x13c/0x8b0 [ 103.564923][ T6714] folio_prealloc+0x31/0x170 [ 103.569533][ T6714] do_wp_page+0x11c4/0x52d0 [ 103.574088][ T6714] ? __pfx_do_wp_page+0x10/0x10 [ 103.578972][ T6714] ? __pfx_lock_acquire+0x10/0x10 [ 103.584033][ T6714] ? do_raw_spin_lock+0x14f/0x370 [ 103.589186][ T6714] handle_pte_fault+0x10e3/0x6820 [ 103.594246][ T6714] ? mark_lock+0x9a/0x360 [ 103.598603][ T6714] ? __pfx_handle_pte_fault+0x10/0x10 [ 103.603993][ T6714] ? __lock_acquire+0x1384/0x2050 [ 103.609078][ T6714] ? mt_find+0x2a9/0x920 [ 103.613342][ T6714] ? __pfx_lock_release+0x10/0x10 [ 103.618404][ T6714] handle_mm_fault+0x1106/0x1bb0 [ 103.623375][ T6714] ? mt_find+0x2a9/0x920 [ 103.627663][ T6714] ? __pfx_handle_mm_fault+0x10/0x10 [ 103.632992][ T6714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.639360][ T6714] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 103.644675][ T6714] exc_page_fault+0x2b9/0x8c0 [ 103.649382][ T6714] asm_exc_page_fault+0x26/0x30 [ 103.654265][ T6714] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 103.660107][ T6714] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 103.679741][ T6714] RSP: 0018:ffffc9000344f638 EFLAGS: 00050202 [ 103.685841][ T6714] RAX: ffffffff84bad901 RBX: 0000000000000d50 RCX: 0000000000000784 [ 103.693840][ T6714] RDX: 0000000000000000 RSI: ffff8880543386c4 RDI: 0000000020008000 [ 103.701838][ T6714] RBP: ffffc9000344f7b8 R08: ffff888054338e47 R09: 1ffff1100a8671c8 [ 103.709936][ T6714] R10: dffffc0000000000 R11: ffffed100a8671c9 R12: ffffc9000344fe18 [ 103.717939][ T6714] R13: 0000000020007a34 R14: ffff8880543380f8 R15: 1ffff92000689fc3 [ 103.725942][ T6714] ? _copy_to_iter+0x1d1/0x1e70 [ 103.730831][ T6714] _copy_to_iter+0x29a/0x1e70 [ 103.735533][ T6714] ? __virt_addr_valid+0x183/0x530 [ 103.740671][ T6714] ? __pfx_lock_release+0x10/0x10 [ 103.745719][ T6714] ? _copy_to_iter+0x1d1/0x1e70 [ 103.750604][ T6714] ? _copy_to_iter+0x29a/0x1e70 [ 103.755480][ T6714] ? __pfx__copy_to_iter+0x10/0x10 [ 103.760615][ T6714] ? __virt_addr_valid+0x183/0x530 [ 103.765750][ T6714] ? __virt_addr_valid+0x183/0x530 [ 103.770898][ T6714] ? __virt_addr_valid+0x45f/0x530 [ 103.776033][ T6714] ? __phys_addr_symbol+0x2f/0x70 [ 103.781078][ T6714] ? __check_object_size+0x48e/0x900 [ 103.786400][ T6714] __skb_datagram_iter+0x107/0x900 [ 103.791541][ T6714] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 103.797209][ T6714] ? __check_object_size+0x48e/0x900 [ 103.802522][ T6714] __skb_datagram_iter+0x6e4/0x900 [ 103.807668][ T6714] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 103.813331][ T6714] skb_copy_datagram_iter+0xd1/0x250 [ 103.818644][ T6714] tipc_recvmsg+0x7ec/0x13c0 [ 103.823281][ T6714] ? __pfx_tipc_recvmsg+0x10/0x10 [ 103.828347][ T6714] ? __pfx___might_resched+0x10/0x10 [ 103.833658][ T6714] ? aa_sock_msg_perm+0x91/0x160 [ 103.838623][ T6714] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 103.843940][ T6714] ? __pfx_tipc_recvmsg+0x10/0x10 [ 103.848989][ T6714] sock_recvmsg+0x22f/0x280 [ 103.853514][ T6714] ____sys_recvmsg+0x1c6/0x480 [ 103.858315][ T6714] ? __pfx_____sys_recvmsg+0x10/0x10 [ 103.863638][ T6714] __sys_recvmsg+0x2e6/0x3d0 [ 103.868255][ T6714] ? __pfx___sys_recvmsg+0x10/0x10 [ 103.873394][ T6714] ? __mutex_unlock_slowpath+0x21d/0x750 [ 103.879081][ T6714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.885442][ T6714] ? do_syscall_64+0x100/0x230 [ 103.890235][ T6714] ? do_syscall_64+0xb6/0x230 [ 103.894938][ T6714] do_syscall_64+0xf3/0x230 [ 103.899567][ T6714] ? clear_bhb_loop+0x35/0x90 [ 103.904271][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.910188][ T6714] RIP: 0033:0x7f9a0bd7e719 [ 103.914632][ T6714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.934265][ T6714] RSP: 002b:00007f9a0cb30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 103.942711][ T6714] RAX: ffffffffffffffda RBX: 00007f9a0bf35f80 RCX: 00007f9a0bd7e719 [ 103.950705][ T6714] RDX: 0000000000010021 RSI: 0000000020000300 RDI: 0000000000000004 [ 103.958703][ T6714] RBP: 00007f9a0cb30090 R08: 0000000000000000 R09: 0000000000000000 [ 103.966694][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.974688][ T6714] R13: 0000000000000000 R14: 00007f9a0bf35f80 R15: 00007f9a0c05fa28 [ 103.982698][ T6714] [ 104.258885][ T6727] netlink: 212 bytes leftover after parsing attributes in process `syz.3.184'. [ 104.286883][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 104.461792][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 104.609519][ T6733] team0: entered promiscuous mode [ 104.622293][ T6733] team_slave_0: entered promiscuous mode [ 104.628671][ T6733] team_slave_1: entered promiscuous mode [ 104.703874][ T6733] team0: left promiscuous mode [ 104.708696][ T6733] team_slave_0: left promiscuous mode [ 104.741747][ T6733] team_slave_1: left promiscuous mode [ 104.753964][ T5889] usb 7-1: device descriptor read/64, error -71 [ 104.825225][ T5385] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 105.001026][ T5385] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.009709][ T5889] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 105.019521][ T5385] usb 4-1: not running at top speed; connect to a high speed hub [ 105.041377][ T5385] usb 4-1: config 129 has an invalid interface number: 162 but max is 0 [ 105.081250][ T5385] usb 4-1: config 129 has no interface number 0 [ 105.118101][ T5385] usb 4-1: config 129 interface 162 altsetting 24 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 105.154627][ T5889] usb 7-1: device descriptor read/64, error -71 [ 105.188877][ T5385] usb 4-1: config 129 interface 162 altsetting 24 endpoint 0x85 has invalid maxpacket 52582, setting to 64 [ 105.262935][ T5385] usb 4-1: config 129 interface 162 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 105.291777][ T5889] usb usb7-port1: attempt power cycle [ 105.376254][ T5385] usb 4-1: config 129 interface 162 altsetting 24 has a duplicate endpoint with address 0x5, skipping [ 105.474456][ T5385] usb 4-1: config 129 interface 162 altsetting 24 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.525076][ T6747] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 105.585291][ T5385] usb 4-1: config 129 interface 162 has no altsetting 0 [ 105.658981][ T5385] usb 4-1: New USB device found, idVendor=0c45, idProduct=6024, bcdDevice=1c.45 [ 105.715258][ T5385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.779214][ T5385] usb 4-1: Product: syz [ 105.839178][ T5385] usb 4-1: Manufacturer: syz [ 105.872539][ T5385] usb 4-1: SerialNumber: syz [ 105.931484][ T6726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.974047][ T5889] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 106.067765][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.183428][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.228195][ T5385] gspca_main: sonixb-2.14.0 probing 0c45:6024 [ 106.270155][ T5889] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.287010][ T5385] sonixb 4-1:129.162: Error reading register 00: -71 [ 106.339521][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.376240][ T5385] usb 4-1: USB disconnect, device number 15 [ 106.416615][ T5889] usb 7-1: SerialNumber: syz [ 106.583953][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 106.698434][ T5889] usb 7-1: 0:2 : does not exist [ 106.772550][ T5889] usb 7-1: unit 5: unexpected type 0x0c [ 106.782484][ T8] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.863163][ T8] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.884722][ T5889] usb 7-1: USB disconnect, device number 7 [ 106.954465][ T8] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.973874][ T5385] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.057299][ T8] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.115787][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.173867][ T5385] usb 1-1: Using ep0 maxpacket: 32 [ 107.183480][ T6769] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.204432][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.230042][ T5385] usb 1-1: too many configurations: 107, using maximum allowed: 8 [ 107.272810][ T5385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 107.298751][ T5385] usb 1-1: can't read configurations, error -61 [ 107.476466][ T5385] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.626948][ T6787] xt_l2tp: invalid flags combination: 0 [ 107.653953][ T5385] usb 1-1: Using ep0 maxpacket: 32 [ 107.690010][ T5385] usb 1-1: too many configurations: 107, using maximum allowed: 8 [ 107.719303][ T5385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 107.740915][ T5385] usb 1-1: can't read configurations, error -61 [ 107.773462][ T5385] usb usb1-port1: attempt power cycle [ 108.073841][ T5887] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 108.154643][ T5385] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.305460][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.057332][ T8] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 115.090413][ T8] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input11 [ 125.429263][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.593712][ C0] sched: DL replenish lagged too much [ 137.734670][ T5385] usb 1-1: device descriptor read/8, error -71 [ 138.032799][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.338776][ T5887] usb 7-1: unable to read config index 0 descriptor/all [ 159.740370][ T5887] usb 7-1: can't read configurations, error -71 [ 243.813859][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.824479][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.830936][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.094316][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 246.101558][ T5838] Bluetooth: hci1: command tx timeout [ 246.174036][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 247.063860][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 247.070208][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 255.961331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.983973][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.814458][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.876949][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.940213][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.948845][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.996105][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.009701][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.024276][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.035599][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.078026][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.088074][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.100126][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.109193][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.707328][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.745788][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.784267][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.810038][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.826901][ T5850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.844896][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.070175][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.115214][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.124447][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.134591][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.168951][ T5848] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.199514][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.224004][ T5850] Bluetooth: hci4: command tx timeout [ 273.294226][ T5850] Bluetooth: hci5: command tx timeout [ 274.414305][ T5850] Bluetooth: hci6: command tx timeout [ 274.420608][ T5850] Bluetooth: hci7: command tx timeout [ 275.294056][ T5850] Bluetooth: hci4: command tx timeout [ 275.375166][ T5850] Bluetooth: hci5: command tx timeout [ 275.461710][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.476513][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.485676][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.500710][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.516711][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.525129][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.501927][ T5152] Bluetooth: hci7: command tx timeout [ 276.507952][ T5850] Bluetooth: hci6: command tx timeout [ 277.374130][ T5152] Bluetooth: hci4: command tx timeout [ 277.453945][ T5152] Bluetooth: hci5: command tx timeout [ 277.615849][ T5152] Bluetooth: hci1: command tx timeout [ 278.574159][ T5152] Bluetooth: hci7: command tx timeout [ 278.579719][ T5152] Bluetooth: hci6: command tx timeout [ 279.454041][ T5152] Bluetooth: hci4: command tx timeout [ 279.535229][ T5152] Bluetooth: hci5: command tx timeout [ 279.694167][ T5152] Bluetooth: hci1: command tx timeout [ 280.654607][ T5152] Bluetooth: hci6: command tx timeout [ 280.660155][ T5152] Bluetooth: hci7: command tx timeout [ 281.774040][ T5152] Bluetooth: hci1: command tx timeout [ 283.856724][ T5152] Bluetooth: hci1: command tx timeout [ 284.734104][ T30] INFO: task syz.5.190:6768 blocked for more than 142 seconds. [ 284.741884][ T30] Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 284.775254][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.841571][ T30] task:syz.5.190 state:D stack:24128 pid:6768 tgid:6768 ppid:5972 flags:0x00004006 [ 284.889572][ T30] Call Trace: [ 284.892989][ T30] [ 284.999200][ T30] __schedule+0x184f/0x4c30 [ 285.059846][ T30] ? __pfx___schedule+0x10/0x10 [ 285.105023][ T30] ? __pfx_lock_release+0x10/0x10 [ 285.110220][ T30] ? schedule+0x90/0x320 [ 285.130514][ T30] schedule+0x14b/0x320 [ 285.152188][ T30] schedule_timeout+0xb0/0x310 [ 285.157942][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 285.163462][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.179150][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.188395][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.213277][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.234066][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 285.239478][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.252227][ T30] wait_for_completion+0x355/0x620 [ 285.262987][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 285.277750][ T30] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 285.287647][ T30] ? kill_ioctx+0x229/0x2c0 [ 285.292283][ T30] exit_aio+0x2bd/0x3b0 [ 285.309361][ T30] ? __pfx_exit_aio+0x10/0x10 [ 285.330350][ T30] ? uprobe_clear_state+0x271/0x290 [ 285.343791][ T30] ? mm_update_next_owner+0xa4/0x810 [ 285.349219][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 285.362372][ T30] __mmput+0x67/0x390 [ 285.367516][ T30] exit_mm+0x220/0x310 [ 285.371778][ T30] ? __pfx_exit_mm+0x10/0x10 [ 285.388754][ T30] ? taskstats_exit+0x326/0xa60 [ 285.397912][ T30] do_exit+0x9b2/0x28e0 [ 285.402325][ T30] ? __pfx_do_exit+0x10/0x10 [ 285.429209][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.442410][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.450384][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.470298][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 285.483798][ T30] do_group_exit+0x207/0x2c0 [ 285.488530][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.501841][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 285.507675][ T30] get_signal+0x16a3/0x1740 [ 285.512369][ T30] ? __pfx_get_signal+0x10/0x10 [ 285.531639][ T30] ? __pfx___se_sys_clone3+0x10/0x10 [ 285.548081][ T30] arch_do_signal_or_restart+0x96/0x860 [ 285.570052][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 285.581051][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.592873][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 285.602829][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 285.614175][ T30] do_syscall_64+0x100/0x230 [ 285.619146][ T30] ? clear_bhb_loop+0x35/0x90 [ 285.643016][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.662495][ T30] RIP: 0033:0x7f68f27b2779 [ 285.671164][ T30] RSP: 002b:00007f68f2a5f8f8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 285.683753][ T30] RAX: fffffffffffffffc RBX: 00007f68f27350a0 RCX: 00007f68f27b2779 [ 285.691871][ T30] RDX: 00007f68f27350a0 RSI: 0000000000000058 RDI: 00007f68f2a5f940 [ 285.709538][ T30] RBP: 00007f68f34cb6c0 R08: 00007f68f34cb6c0 R09: 00007f68f2a5fa27 [ 285.723081][ T30] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 285.741801][ T30] R13: 000000000000006e R14: 00007f68f2a5f940 R15: 00007f68f2a5fa28 [ 285.770291][ T30] [ 285.780909][ T30] [ 285.780909][ T30] Showing all locks held in the system: [ 285.793184][ T30] 2 locks held by ksoftirqd/1/24: [ 285.834381][ T30] 1 lock held by khungtaskd/30: [ 285.839288][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 285.884811][ T30] 3 locks held by kworker/u8:8/3553: [ 285.890293][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 285.912501][ T30] #1: ffffc9000ccffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 285.932483][ T30] #2: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 285.953681][ T30] 1 lock held by dhcpcd/5510: [ 285.958499][ T30] #0: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 285.991466][ T30] 2 locks held by getty/5591: [ 286.002963][ T30] #0: ffff8880308770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.021968][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 286.033183][ T30] 1 lock held by syz-executor/5852: [ 286.043974][ T30] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 286.064006][ T30] 1 lock held by syz-executor/5854: [ 286.069340][ T30] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 286.107166][ T30] 3 locks held by kworker/0:6/5889: [ 286.112527][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.136166][ T30] #1: ffffc900040efd00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.153899][ T30] #2: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 286.163374][ T30] 2 locks held by syz.0.40/6049: [ 286.179551][ T30] #0: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 286.215228][ T30] #1: ffffffff8e7d1d90 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 286.234824][ T30] 1 lock held by syz-executor/6232: [ 286.240171][ T30] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 286.270237][ T30] 2 locks held by syz-executor/6805: [ 286.282982][ T30] #0: ffffffff8fcc6e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 286.322454][ T30] #1: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 286.349861][ T30] 2 locks held by syz-executor/6807: [ 286.362200][ T30] #0: ffffffff8fcc6e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 286.380889][ T30] #1: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 286.392089][ T30] 2 locks held by syz-executor/6809: [ 286.423993][ T30] #0: ffffffff8fcc6e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 286.445978][ T30] #1: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 286.464010][ T30] 2 locks held by syz-executor/6810: [ 286.469434][ T30] #0: ffffffff8fcc6e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 286.489885][ T30] #1: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 286.509282][ T30] 2 locks held by syz-executor/6813: [ 286.522265][ T30] #0: ffffffff8fcc6e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 286.544465][ T30] #1: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 286.569038][ T30] [ 286.571481][ T30] ============================================= [ 286.571481][ T30] [ 286.589749][ T30] NMI backtrace for cpu 0 [ 286.594130][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 286.604657][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.614739][ T30] Call Trace: [ 286.618037][ T30] [ 286.621001][ T30] dump_stack_lvl+0x241/0x360 [ 286.625712][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.630938][ T30] ? __pfx__printk+0x10/0x10 [ 286.635564][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 286.640539][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.646029][ T30] ? _printk+0xd5/0x120 [ 286.650213][ T30] ? __pfx__printk+0x10/0x10 [ 286.654823][ T30] ? __wake_up_klogd+0xcc/0x110 [ 286.659703][ T30] ? __pfx__printk+0x10/0x10 [ 286.664320][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 286.669370][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.675380][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 286.681389][ T30] watchdog+0xff4/0x1040 [ 286.685657][ T30] ? watchdog+0x1ea/0x1040 [ 286.690110][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.694811][ T30] kthread+0x2f0/0x390 [ 286.698899][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.703598][ T30] ? __pfx_kthread+0x10/0x10 [ 286.708205][ T30] ret_from_fork+0x4b/0x80 [ 286.712648][ T30] ? __pfx_kthread+0x10/0x10 [ 286.717264][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.722087][ T30] [ 286.726815][ T30] Sending NMI from CPU 0 to CPUs 1: [ 286.732078][ C1] NMI backtrace for cpu 1 [ 286.732092][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 286.732112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.732123][ C1] RIP: 0010:__lock_acquire+0x98d/0x2050 [ 286.732153][ C1] Code: 81 c3 c6 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 a8 00 00 00 80 3b 02 74 31 49 ff c6 48 8b 44 24 38 0f b6 04 10 <84> c0 75 6b 48 8b 44 24 48 48 63 00 49 83 c7 28 49 83 c5 28 41 ff [ 286.732173][ C1] RSP: 0018:ffffc900001e6490 EFLAGS: 00000003 [ 286.732188][ C1] RAX: 0000000000000000 RBX: ffffffff93c47216 RCX: 0000000000000002 [ 286.732201][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942cd800 [ 286.732213][ C1] RBP: 0000000000000002 R08: ffffffff942cd807 R09: 1ffffffff2859b00 [ 286.732225][ C1] R10: dffffc0000000000 R11: fffffbfff2859b01 R12: 0000000000000000 [ 286.732237][ C1] R13: ffff88801d2f0b00 R14: 0000000000000001 R15: ffff88801d2f0b00 [ 286.732257][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 286.732271][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.732283][ C1] CR2: 000055555ec105c8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 286.732298][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.732308][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.732319][ C1] Call Trace: [ 286.732325][ C1] [ 286.732332][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 286.732356][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 286.732380][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.732408][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 286.732430][ C1] ? nmi_handle+0x14f/0x5a0 [ 286.732446][ C1] ? nmi_handle+0x2a/0x5a0 [ 286.732463][ C1] ? __lock_acquire+0x98d/0x2050 [ 286.732485][ C1] ? default_do_nmi+0x63/0x160 [ 286.732508][ C1] ? exc_nmi+0x123/0x1f0 [ 286.732530][ C1] ? end_repeat_nmi+0xf/0x53 [ 286.732553][ C1] ? __lock_acquire+0x98d/0x2050 [ 286.732576][ C1] ? __lock_acquire+0x98d/0x2050 [ 286.732598][ C1] ? __lock_acquire+0x98d/0x2050 [ 286.732621][ C1] [ 286.732626][ C1] [ 286.732638][ C1] lock_acquire+0x1ed/0x550 [ 286.732660][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 286.732677][ C1] ? __pfx_nf_l4proto_log_invalid+0x10/0x10 [ 286.732699][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 286.732724][ C1] ? tcp_new+0x4c1/0x750 [ 286.732743][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 286.732760][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 286.732777][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 286.732797][ C1] debug_check_no_obj_freed+0x234/0x580 [ 286.732814][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.732834][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 286.732852][ C1] ? init_conntrack+0xd8d/0x1310 [ 286.732873][ C1] ? nf_conntrack_free+0x2fd/0x390 [ 286.732889][ C1] kmem_cache_free+0x11f/0x420 [ 286.732910][ C1] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 286.732929][ C1] nf_conntrack_free+0x2fd/0x390 [ 286.732946][ C1] nf_conntrack_in+0xb51/0x1890 [ 286.732972][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 286.732992][ C1] ? ipt_do_table+0x312/0x1860 [ 286.733010][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 286.733029][ C1] ? ip_route_me_harder+0xc98/0x1300 [ 286.733051][ C1] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 286.733075][ C1] ? ipv4_conntrack_local+0x120/0x200 [ 286.733091][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 286.733106][ C1] nf_hook_slow+0xc3/0x220 [ 286.733129][ C1] ? __pfx_dst_output+0x10/0x10 [ 286.733145][ C1] nf_hook+0x2c4/0x450 [ 286.733160][ C1] ? nf_hook+0x9e/0x450 [ 286.733175][ C1] ? __pfx_nf_hook+0x10/0x10 [ 286.733190][ C1] ? __pfx_dst_output+0x10/0x10 [ 286.733207][ C1] ? ip_fast_csum+0x1f0/0x2b0 [ 286.733228][ C1] __ip_local_out+0x3d9/0x4e0 [ 286.733243][ C1] ? __pfx_dst_output+0x10/0x10 [ 286.733265][ C1] ip_local_out+0x26/0x70 [ 286.733280][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 286.733310][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 286.733337][ C1] ? synproxy_pernet+0x45/0x270 [ 286.733355][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 286.733375][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 286.733391][ C1] ? NF_HOOK+0x29e/0x450 [ 286.733412][ C1] ? nf_ip_checksum+0x13a/0x500 [ 286.733430][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 286.733449][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 286.733468][ C1] ? __lock_acquire+0x1384/0x2050 [ 286.733491][ C1] ? __pfx_validate_chain+0x10/0x10 [ 286.733512][ C1] nft_do_chain+0x4ad/0x1da0 [ 286.733535][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 286.733552][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 286.733585][ C1] nft_do_chain_inet+0x418/0x6b0 [ 286.733606][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 286.733620][ C1] ? ipt_do_table+0x312/0x1860 [ 286.733640][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 286.733655][ C1] nf_hook_slow+0xc3/0x220 [ 286.733674][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 286.733694][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 286.733714][ C1] NF_HOOK+0x29e/0x450 [ 286.733733][ C1] ? NF_HOOK+0x9a/0x450 [ 286.733752][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 286.733770][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 286.733791][ C1] ? ip_rcv_finish+0x406/0x560 [ 286.733810][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 286.733829][ C1] NF_HOOK+0x3a4/0x450 [ 286.733847][ C1] ? __lock_acquire+0x1384/0x2050 [ 286.733867][ C1] ? NF_HOOK+0x9a/0x450 [ 286.733885][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 286.733903][ C1] ? ip_rcv_core+0x801/0xd10 [ 286.733922][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 286.733943][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 286.733962][ C1] __netif_receive_skb+0x2bf/0x650 [ 286.733983][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 286.734005][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 286.734024][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.734044][ C1] ? __pfx_lock_release+0x10/0x10 [ 286.734068][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.734090][ C1] process_backlog+0x662/0x15b0 [ 286.734113][ C1] ? process_backlog+0x33b/0x15b0 [ 286.734138][ C1] ? __pfx_process_backlog+0x10/0x10 [ 286.734161][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.734187][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.734210][ C1] __napi_poll+0xcb/0x490 [ 286.734234][ C1] net_rx_action+0x89b/0x1240 [ 286.734271][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 286.734296][ C1] ? sched_clock+0x4a/0x70 [ 286.734319][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.734342][ C1] handle_softirqs+0x2c5/0x980 [ 286.734364][ C1] ? run_ksoftirqd+0xca/0x130 [ 286.734386][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.734406][ C1] ? preempt_schedule+0xe1/0xf0 [ 286.734427][ C1] run_ksoftirqd+0xca/0x130 [ 286.734448][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.734470][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.734493][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 286.734517][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 286.734539][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 286.734564][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 286.734586][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.734607][ C1] smpboot_thread_fn+0x544/0xa30 [ 286.734629][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 286.734652][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.734675][ C1] kthread+0x2f0/0x390 [ 286.734691][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.734712][ C1] ? __pfx_kthread+0x10/0x10 [ 286.734728][ C1] ret_from_fork+0x4b/0x80 [ 286.734749][ C1] ? __pfx_kthread+0x10/0x10 [ 286.734764][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.734792][ C1] [ 287.549397][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.556390][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 287.566917][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 287.577001][ T30] Call Trace: [ 287.580299][ T30] [ 287.583254][ T30] dump_stack_lvl+0x241/0x360 [ 287.587973][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.593202][ T30] ? __pfx__printk+0x10/0x10 [ 287.597836][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.603859][ T30] ? vscnprintf+0x5d/0x90 [ 287.608225][ T30] panic+0x349/0x880 [ 287.612153][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.618343][ T30] ? __pfx_panic+0x10/0x10 [ 287.622795][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.628292][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.633874][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.639292][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.645573][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.651781][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.658148][ T30] watchdog+0x1033/0x1040 [ 287.662512][ T30] ? watchdog+0x1ea/0x1040 [ 287.666968][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.671673][ T30] kthread+0x2f0/0x390 [ 287.675766][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.680472][ T30] ? __pfx_kthread+0x10/0x10 [ 287.685091][ T30] ret_from_fork+0x4b/0x80 [ 287.689536][ T30] ? __pfx_kthread+0x10/0x10 [ 287.694154][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.698956][ T30] [ 287.702145][ T30] Kernel Offset: disabled [ 287.706462][ T30] Rebooting in 86400 seconds..