last executing test programs: 21.308409484s ago: executing program 4 (id=122): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 21.108028879s ago: executing program 4 (id=123): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_getroute={0x4c, 0x1a, 0x4, 0x70bd25, 0x25dfdbff, {0x1c, 0x10, 0x80, 0xc, 0xff, 0x2, 0xfd, 0x2, 0x2000}, [@RTA_VIA={0x14, 0x12, {0xb, "c9c9ee8bba43e30cd74e26032c31"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x34}, @RTA_VIA={0x14, 0x12, {0x3, "cee97e08d834656cc8be91ece15b"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}, 0x0, 0x0, 0x3}}, @TCA_TBF_PTAB={0x404, 0x3, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7677, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1]}, @TCA_TBF_PBURST={0x8, 0x7, 0x12dc}]}}]}, 0x464}}, 0x0) 20.9155229s ago: executing program 4 (id=124): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x8, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18090000001f000000000000000000008400000000000000660000000000000095000000000000006e0d8f0093925fee638a20d16c7dcbc5ab8caabe5b3932be5b0ad65b494836e86ee67c71821390840b3b1ba08a3bb314cbb24ace99396d7e95496dcfce04943f44950270c918ac080503552859a2c4c5ae34a8ebcff899c0ec32cd43386ee76d233ba9d2b747ead525dc6de1566a7dbd871aff4cc717"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0xe40, 0xc, 0x9, 0x9, 0x8}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc5574b65c5fe217a88000009059a32"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401000905"], 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.279294801s ago: executing program 1 (id=126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x90100, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @private0, 0x5}, 0x1c) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_emit_ethernet(0x2af, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}}, 0x40000000) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x9}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401, 0x0, 0x0, r6}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079105800000000000700000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x90e40) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) 17.451047123s ago: executing program 4 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x595, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x203, 0x4, 0x2, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.267109398s ago: executing program 4 (id=139): socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='\xacshU\xd6\r\x872\bn\xd7\xc3W\xfe\x1ex\xd4\xbf\xffZ-\xf7\xadN\x8d\xc3\x96\ve\x05\x00\x00\x00@\xff!\x18m\xfc\xfe\x9bA\xe7\x9a\xc3\xf5\x8f\x89\xab\xf6\xaerxr\xeerk\x03\xed`\xd8\xb6\xf7\v\xa2\xef\xc8\xd7\x88o\n\x01\x00\xe4sGokD\x9d\t\xd9\x11\x91\xae\x01\xa1\x7f\xaa\xbc]\xcb\xae;\xd5\x1b\xaa}\'>\a\xeaL\xbf\x15\xcf\xbe\xa6\xc0\x7f\xcdkwj', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 17.146107028s ago: executing program 1 (id=140): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0x0, 0x25, 0x4, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a01010000000000000000020000000900020073797a30000000000900010073797a3000000000400003800800014000c40000080002"], 0x94}}, 0x400c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x2eeb, 0x0, 0x101}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x4cc341, 0x0) 16.45162947s ago: executing program 3 (id=143): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000400005d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000d4b7030000000000aa8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0xc00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 16.277796196s ago: executing program 0 (id=144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 16.275683614s ago: executing program 3 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000001000000000000000080000000000000", @ANYRES64, @ANYBLOB="0000000000000000000000000000000000000004a91705fd2ddfad508afc921409e578f1ee6a8f65c03f428db54fb24cd1a07627c33e8a329e921b954cc5ef4fbb8b361803cb3fdc450d2aaf43b796dd", @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x6a041) ioctl$EVIOCGPROP(r4, 0x80004507, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xd, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000308000000000000000000000004000480000000"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xb, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x8, 0x3, 0x9, 0x8, 0x2e6}, @ldst={0x3, 0x2, 0x1, 0x1, 0x1, 0xffffffffffffffc0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0x5, '\x00', 0x0, @fallback=0x9, r3, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xd, 0x7, 0x9}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f0000000540)=[r3, r3, r3, 0xffffffffffffffff, r3, r3, r3, r1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x10, 0x3}], 0x10, 0x4f3, @void, @value}, 0x94) sendmmsg$unix(r8, &(0x7f0000000140), 0x0, 0x8004) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3) 16.259244055s ago: executing program 4 (id=146): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x202, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff800000}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4011) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e220500160000000000080017004e224e24"], 0x34}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002400030000000000"], 0x1c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0xfffffe6c, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="08010000160004002abd7000ffdbdf25ac1e0101000000000000000014757c4a9c001dec3af9de0d521300000000fe8000000000000000000000000000aa4e2300054e2300000200206067000000f741daa35d058ccbfd25375ade960afd1d8b4612bdf2079566acae51ccab0a6bcbbe442c57e0061b04fca1fa35fcb8ee5d1115d7013f45852d2fb2535c1f946e173e65350376", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d632000000ac1414aa000000000000000000000000ff0100000000000000000000180000000180000000000000d10000000000000004000000000000000500000000000000000800000000000001000000000000000700000000000000010400000000000008000000000000000a000000000000000800000009000000030000002dbd70000235000002000005db00000000000000070000000100000008001800008000000800180000000000"], 0x108}}, 0x4040040) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744f1a5779b19a198a16ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d97ffffffff6770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad6253aed9525e1b181ac9ebf", "9fef7affaecae7ed08f4c36330801327cabc8491b2a7e8063de5a51f02b8cb3a", [0x0, 0x800000b]}}) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x1, 0x7fffffff) sendfile(r4, r3, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x62040200) unshare(0x62040200) socket$igmp(0x2, 0x3, 0x2) 16.184409188s ago: executing program 1 (id=147): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fd00000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfb, {0x11}, [@typed={0x8, 0xff, 0x0, 0x0, @u32=0x9f4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040017}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 16.023405531s ago: executing program 0 (id=148): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) tee(r2, r0, 0xfffffffffffffff9, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.832907072s ago: executing program 1 (id=149): syz_usb_disconnect(0xffffffffffffffff) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004002000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000001140)=ANY=[], 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (async, rerun: 64) syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bb"], 0x0) (rerun: 64) 15.167430479s ago: executing program 1 (id=150): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000019480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000019680)={&(0x7f0000019440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000019640)={&(0x7f00000194c0)={0x170, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40048e0}, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)="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", 0x581, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000000000001"]) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000300)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x150, 0x1170, 0x1398, 0x0, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private0, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x0, 0x0, 0x20, 0x0, 0x0, 0x5, 0x21fab6f3}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendto$inet(r0, &(0x7f00000026c0)='?', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000240)=0x40) 14.613753244s ago: executing program 0 (id=151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1d0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x2, 0x800, 0x2, 0x5}}) read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x3, &(0x7f0000002200)) r4 = socket$l2tp(0x2, 0x2, 0x73) chdir(&(0x7f0000002240)='./file0\x00') openat$sndseq(0xffffff9c, &(0x7f0000002280), 0x105000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000022c0)={0x0, 0x6e, "dc3351e838861d8092f03c7400e64ae0fd2b7601de36538af89826b8545fb557f6a34671732daa8843ea9c020d27d3d7b13d3aa0e636c7bc932ddb77fe8e496453c997209cc876b579b8aca1ff41d7cd599e82edc53c5e9daca58e87471b7014315376ff269ec132e7eee526867d"}, &(0x7f0000002340)=0x76) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002380)={r5}, &(0x7f00000023c0)=0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x0) r7 = openat$vsock(0xffffff9c, &(0x7f0000002400), 0x400000, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000002440)={r6, 0x7}, 0x8) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000002480)={@rand_addr=0x64010102, @multicast1}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x608000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x4041800) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000026c0)={r3, r9, r2}, 0xc) lstat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f00000027c0)=0xfffffff0, 0x4) futex(&(0x7f0000002800)=0x2, 0x100, 0x0, &(0x7f0000002840)={0x77359400}, &(0x7f0000002880), 0x2) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f00000028c0)=""/219) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r11, 0x0, 0x41, &(0x7f00000029c0)={'filter\x00', 0x90, "d136738f2f933b03b073eb747ceb695225a0ab7e878d9923295257fed45d1fc1bcd5201e76858eac15b5aacf76d02ef15a1955716bc69fc9088ab81322a15e94287ff723dc452333af2c40632b022f1f6b46a42fe3b17b91614532e6cdc63da51c5d14bcc88cea9cc53d8e25373d1dee9a3743b888a249c7ead80627c21e48d26eb078e5dce0999186ddda791c83618d"}, &(0x7f0000002a80)=0xb4) r12 = openat$hwrng(0xffffff9c, &(0x7f0000002ac0), 0x101000, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x54, 0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) 14.092626484s ago: executing program 0 (id=153): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140015ed6f08e2c0cbb79e7033fcdc573e00001000010000000000000000000000000a1400000011"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2409c1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd60479b0c00090001fe8800570000000000000000000001fc000000000000000000000000000001ad801152de258aa7c400"], 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f0000004040)='./file0\x00', 0x2000080, 0x0, 0xfd, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x3, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xffffffa8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000040)='./file0\x00') syz_fuse_handle_req(r5, &(0x7f0000004080)="d17a5a96606e5239ddbaa10d85097a4763580ef59b0984f908fe33dbf0d1f0a67839f31c21c695ced0f64f7381c772fc649c97926037760a0a8501d479bd3f48eb925a588cc489a57395206eabe972703b0ad54291668cd7efb99c5fc76e644a530e510152dd250dd9ae58117eef9b8c00fdc1fcbb689a46f22982c243373dbac95d0607458dcb42aed9e749be7e2be4ee7961780a129360b838e732b5dde31cf0374ec29f0e65c137c2622c0af23d738e1430e40e349eb7e3dce3782198f84f1aa0918dae1445bf112515e0cd4942e3e1c0fe355633bb753838e2f2549640f130421415257df8a9c93fd9b82c433bce2611b23393df9708d2d49f992bd150ddaa77a7d3865319d19e41dd28060782be3ba6bd4ee6c53f79200f7d109d49f478518c0438b9f458e45adbacb6ca77e7cfdc5b8a26b1ce0c1235741cade16bc6cdd7016bab1b049f6a6995564699a57b8c2925062442928efd4fb76d2397ff12a044f294630c5585a5a47865b88f90041e399e113c86e1e93fc08cbce239c28fc65114f6963249695be80aedd3d8cce745659d50106371974a94c263a8e02453cc0aee9161d6c725d035c4c10318a1c5dd7ebea661d33a68d0ab3919e49d97415a8eb2c0d7f0830d1265a55f9617592ddc7a827c2e4dcea85c384eea3af7401be049c709b2e8133329e69dab7727e69be31f8455809d1a67de8f13dc668d7e744ba70127d7744b3fa651c3a8086603fe6a90595e94ae0789ca4b34e2d35e5dac8f1f2a6eefa28675adb9139453746783e0805119fda2d72cf51250a84abc952a23ba21c6514c249b0e57182c9e0221f54383efbc79e782293ad6aab062897f304d0784bc669295cc6cb7f0c4f32d114775f953e8306c914f8ea4d854568a7f377c582dba32031bb0b93510ff3da9abbef362e8a756cda95474e0eade66901815d3d7bff6ddd4ed160be0b5310e9253948ed7e03023c7639e158ad12488727cec19eccfbff83ff848417f044b97d3382341584fae7c408bcaff3be768a2ce5513f6398089c1bb181156361f97a9b92224095aab3f13c47c74ec61cdd060540a028b1a6e46f58f02db9fa0f240e658cbf20260d7e6360b12032282343cc9a15e53180a21e60da8f4c79bef6114af1da0418d4f1d5fc4225efbaee69b06e9eab558b32295673e7a9a80f635ec08d48ef76350346c545930e42c6de2f6b1587053ffa0ba2ac342cd0154c87bb4d2b7690b3e6cf3c4d3a22bd20eec7b3501613c218a9802fd8ca125c476a96a508e1ecd714e13d8e3546c010f2ee62e51bde0a9707895f4ce93c35b6d13bd093730770c0ca53ef8dde3386f63ea65c24dd9c90da5f3d9816c433d784d08438def8ab319779b25b8fd0c46da283809ce3be6845a62ff75554fe5e0c6aae6b30a29ba416eb69a79948a90ed325363a61999c878cd0cef2ef8ec0c15dbe94ca9b122d1e8021ae88149c1cf1a30f7d386d9b9d6dd7e992580b421afd6ba192568c8e2cb5323ce3bcd9a875034dc5151ffe9da9b0cf038808a5458cf47d85587e14b91132dcf8598783878150458e178100a1152965302430a525c44c9a56f8a7e318aff185b6ebe8ff918bf724a56cc9ffd5e873015159a5d9662b37628a17fc7000f8875c8c0010be91bfa2e7851ba89fa139b4ab3f89409349f34a1909c1e85fe5bf0c0029eb3fb85b0477b4585a7ea68ba99baf73d59acc3b44376cd3ccfa156864106da541bed2d6a9cb0cfc7dbac1be146143350f4f45372300f618ae26d19cd79902f1956615dfca6b38a1a1ec79de9904b5a838972398a6765da485e435c4aa85bcb629bc60f290fd4787afed67ad5ab4365ee34d45009b90f127839528a2451aa16a1da7ed0629eef6284186150308499a937c5744e24480b4ceea8871f8183552e1442db35946c93c34c42e9af1bf26837d211b3e67f6ea406338119024af8ab624504a4e1399250dba9910db26d54a076ae87c9b1e025686612f2bc00120ea5d156a2ea7af527d5d4234f656306f9732b217424a0505975c8f948ef7503e829421749c97589f86486bd09007cafb36114013e6d2648f3157d994e239e3a7203c535a94d7096566f48db284bd657e87e2865ed1deaba0cc174457146fca90014868264ccd8a7df311f907010bfd7ae2200a7af4a2ff1bf01209dd828fece619c57ffc281501cc2d7c9c4ae20913513b500bf3c1d325366872180be8cc60488c5ba0014ecd15c4f94374a81078e71a8ab0c151630cdb643649a4838238a0b71f34f43b059ffdf117a5fb095c121e7f951621e433ac742a9477d10f6f30b8004f58320535b74b6999e9cd9ba5ad3d928764588c6b8c590104d6900125aef7dc1776fb17c2250011402b9b711dc979c1efede52e1f7434a3d002b5c059bf77733c9f8c39aac9db654b15741095201c89a3b2b85229b25b9529ed4113b3b8b7bc70ecfd3903786e5ba3e6c49394b82266b881860923fb0240c7f10c8a3295b5fcdb13e2a70d638e5e885132fce6b5997f3b40c1b8b996b0c4870cd3d166e6baf97b0c0b3a334fb776d0587c88840e3988858d9b1ab863693939013996604a7d33cee0a1bac6a87cf03364ffd2dd96e0c19bc15aef5675f016bb11e19b89bd40801d7c46377742d736acd7eb90fd50c1a56cb76d9b6eae46745ecc3bdf4f10cc943c5b4fde45263d61622c27ce670c8b6c469e3b7f4a4642ec5ac16d52c457e24833e182006971b638072d28261628a74176aaf3426ca46980d61f0613f305d1af24d12202d178bafde004d6e45b4b7eae06b9b0a77812b0b5a5be4d85b0c9dfa74fc812f2904d4b80a2e47661eeda8df1b3ebd579c4217ac4e21505e063a5d90cb3cdebb4b0d35d7fae1a25f2d072f54d2f8d3b34e1027915ab17e5b1f446e41c135cb55e500236471ce2dd73d921e1e10acb1ff21ca7def8cea9fd5ec267b569b4e8e83fe1b1c8d03db6c3ce43c5c8f516454f73897249491787bc0432a836e20a03e7a7bcd0f3e338a418f2a7772822a017f73aea665ed758b6b56e10ea46db7aeca395b0606a63f0eb072de8627207f4484f11a17a5ca5e37a38008ac75517b7f6af8a3c601b3c2fdf798ddbbb626d090542f50d34d5fc71bba0aa5ec6dfc6767ae608e26a958136c1185236118576c546b555af45934f75b1043615135bbdf648bef65eb38c5a9f7349f322ee5c571b98447e8ef95e506732f5ac00e6b6a578af03979ed432bae08d8623a9dd67b8ea98ec0b28e5872d8253ea8fa257e631dcbbc6d60ecc67b43b1f388ae210d087cecbbeef00bba750346df6813c80de62de07f4236a8b0372ef834d8216e4de6deb4af21c2ae3f290c13a40f653f9c2940908ec4ce717d0d19a4a74a2c9cc277232cbcc913e6da57ae01c857fe95270a32ebb523a8a91ed2f2fc54f497c5a72cc6916076bf919a9a3752a716768559630f8a5f315ba2e6a800ae35d05a76b88f0d912e5f6003c86c65e116af33b2c3b7fe94f3cba37e46b82d46d4cae0b107c4c8de40644a728dee44d62a0576302b5c1c215150a8becb7057bad7f7b42a08f925c31b8094c91afd71c0cc61e4b053680489d98bde03531557d8f590bc4b8283d506bf1703bf85518d9e69189398b7c9c9a1cabcd73e3e36722694845db20f5fceb9d533ee8cf821d728894f944c1b8105fd1ce5f2c5c4c4a44bacfe56bba72924ea371b844e54fe587f573a127efe1823bd70fa2ff7863a0aaf73d21695946f211343ddd5f502d8bf9800c68e9bde83adef81a1ca374b4c26dcd905e91cb437b6e4ead7ed2599abbd92d1401b121b427a54145e91dc1e9d76a38f8b53d315aac7638298c9803677207c6f78fadde5d92f4b0ca92d6f41fcf7a6704126a534eeb87d08a172096bbb44989db5d9841fbe7393179b6b5119ccfcf548098c9e50aba0a0126c674e882aa8fa3ae0a42a7c847990bbbf47957ddcfb6859aa1c9ad623f958b92a5e2c621b3012e29b7d2a47e9ea83674d3dad1898bd9e248d7aacef241d34f725b0317336918369f5d5926deec35aa93b1f2751a1180bc7bc7d7a128c3b8a4504d487aaca38d3a56c0dc226ffb31524b109c87a030631e191d7e9fa8dc2b17d2288876a5f6048576ef795f9b13ade80a3c99c714589b220afe79ca45b6f69dd72ac85ac4e920644eccdf702e2183627217f9d5dc7a4f16af3ae68f9faf72976d70dd1052bb11ab2f5cbf0fc553a56285109468d4f1cc8c69b15bc550905ec15209007c6f0fdc0fe6ed64db067d96ea0b04b90dc5db8988d347b80b0e550d409d72d06eb501fa40bbf8ee5015f3600d26e0e4df689d8ddca94575cb98a16a7f01bc20f02e2bd12178c5ce052d5b8ec245ca8a5e58f6104ddc24d84ef0fc72be8b1c0ca9b5c6fe8a49abda5080b466f849fe37ca1caf0697a1e20de8c93b1dfdb3d043924c262e56dab6cd1e3161615152407289d02a22e6461b78f45fb05732c27708e1907a1704a752a8fb3c32e8c6d5560c7bddc85f4cdb42006f4c86b10116f2fc2be486d1301b5fb031da9598b4ecf38714a51993e049ba8752027cd5052ab70d49cb646fb2c7d71ad801cb76724a5cf940b0fda24ecc98b5f5f1e687e33fd470c1e4ce71d8e5536f33f02f8868ddf57db54edccd6c5e88b8b85664cc4458ed6e43c99ef8ad8a84797c32b3a64339bb34ba361f4ae2f5f92a38fc9c2b9989cef45c517054756c5723d36e9d622501d8a040bfa892d533e3291ce0b52c18e966613612928ffbab6466c4363a2dfc75402d9979851b7f130380e51a9ac58dbeced6ca649c42a491e489d6205236d9f22d38215202bbc90894643f4dc6fcf3f73516a43cd1484c9e18cff79307e6dc169d48927d7a6c5fec42119b4d0f826b11e86d3fd4e60efeaa2478ef5b822144b30978163d65434d07f2f0e9058339e8f2356e33b82243eab115dce74d43cf1015b74ebd7a2e7288d03676c3b43cd348aad2c39f36b583293e35f84119afce921fd9ab952a8ff08cc76f1db4eaf6bd5f93a64042ae6f311c393df8e6e9e9c73e5c52b33abe08b5a7d87104091ba55b03c406cb877557ca7a4fb4f8ff9ca1feb0aa2e27d94e1dfcce36b81c7463bd5eb42e02551f509ba879c298be3f9a779f372d927427119c1b5343637f7529337abb6f45aee2ab63c5d7680153a6d87a97ec7ea3ae4f57e278fbfa07b022778ac13886232d565d3324249ec699818adc9932ce71936f9a4d2f14716667b0f415c671e813470e596bf4a60bb6a2a24fa3f7dc6959a289eedb7db0d0a81d421a797fd52506abc44c6bcc1e03c501224a76d48c3974bf3e5deb089a063a1a3c97a47681972e98ef27913329db7921a306acf3b8aeb74e916796025e7b3ea544c7cab0e5951bf5802bfbc01bdc87a0f84a73bbaa431acae55c325f7ac6b09ffb53beeee1f5699c7eaf2dbb7d8ef35915c482179560cd578c7517a68702f5aafad624853e951af01c97cfe6e211a5fc1c93ec263cb9abc793ec2e0806f27b51149456cbf8148bd63dc61a49a5d7bcdfa228df86a476940fe4f1e656cbd0923a5033040411ab72ffffcfac67d5431ddb1ecfd9bfd3113663dcfee0185817b7d37a46b6e572993fb7a6022a48da88e83aadfb12023bb215acb09374db17b99cabbd3d0531b69b4014171621801fa56a7e3d94514372025d37fdc6f824c4b278045ef9377adbc14018ec1f9627a6b2c621ad348e708d2eefb1165993f11f7bfd046eb2990815a10bf723876684ac82f42e00c6f90f63ef0d3232f56f48c80edd60b67b846cbddfb14e7317a01d1090a397ed3f22cf0499441716ad11a68ba405b70d42a7dab268245c9e420840d4cd0b46b4aaa4b6a51830a01aac984cbe512f5ae713513bb9e309ee66031d3a3134eb523afe6b95285ad7c694368bc21216ebb5fb4783e35abb321b753ccc50a670d981d70231c4be4fd34c4e1dcc6a9e9d6f923edc1e9dddd56655c478a769daf0d5f76df1e5fe03050d66c9422d8d8c4df85d63e165dd717150f85824595c43191d438437c4f1a05a398f7bf99f2d8a17658cf5c86599d9952fa38520eb2cb39b4c099f3b826a495d54bfb3394ebaa91d1a8715c30b00689065ee1a725e4a0cc61e9f4402aa65616f5385d5fef52765549036387a46de247a8ac17eaec18d5c9d100fbb2d501096228effac5e203a234aaad03f91a5b4662332234eb7d04b81f4d5b8cdaa46607969b6b5c4244456bc1372400e8f5b8a5bc10db0cc167ca429360217a56acefb8ed4adef3a98529800e1d4e6b5e9ed5d8a81f75665c1e1f941056ff18a7d6f19441802ce908cd343639c2bc467fb876059c93fffe40df4be8c34998c262af25b4779ad0a31e270ae6c4641ea9bc4bdde129eeb3b2ce38bc355391d9a8633780a44157135fa3e8b252cd5537d76984be6ad134a395f1861647097f2845ccf7838ab10090ca2753933347b6ec6404610f50379050ab1dd7229338147c87237d536b27e4d26719f5d65f39971dbdc59446100a1836aac078f04cccfd2cdda89cdb8d071a2889876d3863fd4917ef8e2983be1d64b7b1f3285c6ecf96c5814be0232d345d4587cd2a8efb77f09446b56a25c018550da3d2aa8f0d9b0317307078ecf7968f340b63b6f44b30696b89329d77cdb40232106eab56328a489b215d8b8e1f6ce990df387687dad46cc7d34325811716874911098ddb8106ee2e07f0cb23c788a794aac7c5aa30fab8f809f8756bc4e4168130d5f1cb1e357a88ce90759d638ea558f71b8a59dea30ff08d21a16c2b58630e672b68f219606572a7fa85cfa36806f98471b82f001e02a21506b5d561e1165cd7559df14240a62dcc82634240a00dfde4cdf5afe672beeaba9e81546b81376954adaeba07f10ecf613a15ae4bb4a30ff643b25092c225cc8963013974df02537b9739387118bde20aa8b5cd1893685feb46dfd2ed40770821b1fbe7ad33923fecacb1ca5b5d61e5d5715cc13cb650b26d932421e4579e679fd5dd5b34a043a71ef77c8bbd1d30651d5f34a6daf6a3fcf7f2714e8bdd384b943cb8d1f1538f1d7b5d3c2fa7282ff9a178a92d18b382e38c564ff99cb82aee16fca870dfd864b4551292083e911c324eb6e82e590ec3092bb6ff72d93b83e5e76d654e4682040bb4153b1f6a35a32898641236aeac854c1734609f2cdc1cabf160718a6b3668043964bca0f249b6c504c52c6a4dfcb1b97aff5f84b5a75f50ea1760456b2e54c0cb1c892b03784b674ef11e2695c295970d3d6001875d28e538e5f98080805839017c5af95a11ea6a9980e78cea7470cd7acf2b6d80280522e76bb70505a8e4147dc268720b02bcff2b9e05670f9205fa58e2831004f27b1fab69b76dcb55ecfb72e58471ede2847b103bb06a634ec8cc2e8c30e089073420f347e3f2c43ead54f0204fe01d21a2b9977560e5054f9816eba6eb38a697bd76ae0b9e6a456ec026b636e55c94a0d05b5e8fe89f076f0c6f170c06de38a8fca665eb2db5e25b41d378d60d31fc22d6a54273fb85bb2f13e4442a9d15f4d7fc776bbee52a4c35f69656a40fe1a51a0a239cbc83381213cb12cbff0fed9bab41c0be7a31f04e637de28f6cca7db930302de060b5c3d410864bdc567668cf1268d988ef5e4a7ff9d1fcc2762f7a61edcfcfe0bdb59ce88679dcaabaac5a185db4ff714f55496d00d0472218c06dad2756d1a54baef8a613a6c8e173724fe4caec779dadf370e946fb5aa8079c8b0212c2dc59c01803226f64e33e2536173313ae0ddf1275244a65a2446468c5a2f846ea3ec8a915fb862d9d989acff33c20952ac36b935c0d19988e85c39c714795087c92e70bccdb2096212db9db57cab332076f303cea1d404b162b679397c4fb680d1a069a9208ab865739c6e925980f356d6ae2fb44ecd84a4d8f418159443e24d09def15ebfeddce1882eca59eac9ad0092020452d621177c721255e084d7eb8de9077a6a98aff116da8998edea4b93d15179b45aefb46d81c3a611775e19d723a013d9a250cf70446e83123155c567e99c02f514821d3518bb340675b9fa4ce23b9c59eb9a2451fba4b47829d76150c7740e905901926fbd471e46b9f75c730313a68bcd388337edd0997080924e82af8fac2524099837aa86660991f91281d7e478dc69e6099ba331d138fd545cafe68d2aa80af1ba46a411b5b0341fe3fdd94566270fb6b9f1f93e76847ad753a102727fc9f7998300d9294133e4c45ac38ae18abe0a74d6b081845b7977321cc2f890162e98d564659db485915ca42bab1ee05e042e14a3b716138352db900dbfb9a7fa98d7f316c9df4cfb9d202324c6a2b68af09e535d21ee7de2d2b3c40f67b5f447ca55c8be540e5e57fa6c0dbc68fe3578a96cb6a2b59bd6065fe2c69b899eaa6bf23c57241ed9b9c8d4105bb7760a2357db38a5b349e6357b34f55f74ae68fe134f68e0805c20249b7110056a6453a57a09fc9642aad47b0c75bd36e883009b92ac6065282047ba07fc7826a12b8fad8b877ef2920fc5653200cf337eedd1def97e3100c606a025535d4fd826d21d00e1d5878562e4a32238fce5226c82c54310355e1e4b29b7a3cee05d2af88fced80e814a29b0795f1d1b949557f585a458d2a2005f1b30e4c7cad7c3a6c67b76e51aa78e41384e4f276174d52ead7e47559983d4ffae3caf624d5a6754f08588d828b7569a0c88dcaaeaa119cb66554da5ca49a262580e84a4e72c5f038a9039665df0fad08113d79abcea43fcf1033fac553cf83a4b579e8fee2bf436b8d8936d9bbab22a2415a6f88422cee9f8b8081c27aab159cd2fbc088b5bb9dd4af29760688dd808e1a726a9bd896b5b994bc5dd59d4f9a103d46e8a9c73c3c71e1c331475450d2fe57c8edadc49424d9e8ac782a2a0098c37aabb097bb7bab97061296e28d5086552c1bb549d8d24b128fe461b914ae729f5102bb178e2e441a56fa66bceed7de146390a41245f729bbd981f6b0d329ad2516b0fb516ad8db7d9dd6a2d354c9809face62b600b83c2056bd08919d15993887ec5ff4e79594c91c86b3bd7ca93a8ee1a77b15e6b821caf602f808921040e99ae5a21deecf65648ee136c853c4be8922d982e02e6e6e6bc683204f84e6c66f361ed85d3c098e6fa80ff38da07341abf1516b21e2c9bc01f662808e0673bdc8e403629295a445e3a0ab6e831cb5fe0e7bab9daedb4f2fb93500f6ef3ace46965cfff58e94298727c497713e86c68b9c669faa74ea7f4a6f50acc69f16a1ac314ebf2657beec9509b398be2f6ddb55bcc61de0263e71072f67d96f3cbd91c588b172e656d5bd829f158ca3c0259dd139c4c99b28373629dcc4a5fb49183f42a6018df3123dac8623c73d45aaf27c352cd226d031b5d5d10c95bbbc639b664d5e109af3c613408052f263bdea77249b0c2d3b1e98e1ccc7f14bd1c9d3e2cab785b8995b3a0643e31a5ab4db0699ec39f162ea02bdb274176afa233a197a5423d9ba07a14dc7f21524e73d784af70337fead754639c201283bedef659d117572ffd8a0c3b87c5a1eac877f4aa9355d0dca41c0be4d43af6fbc38fe4138dccf28460d004084cb2a42aa597e6744d0259ec7ba248aa268e816783b0433c67b8f00c6f3f52f9890eeb5f337e41a5259c8dbc046f5b7aa7a7dd68db1cbb4d5ca1f3512dc82167b81e84e52220f49d7ca859ab73fe82ca3d041191beadb6a0da51f4ed50e335427ac0afd37f907ca708e256f28128068cf5b8fea14be8ebfe84afc086cd79d204be9609f516dbf29e548a3cba02fcbff914337f1b951488f5f255e4e901c48ec977bd60e6d50f24d98b150abfdbeb2ea7f8988df90b26a2fd84924ce9b6c629f195b402bf13864506f66026e2e982cbda205f4126be1efdf0550904bcfeafd7a2dcf66ca44b2a1acd2364c04549753c6ba70ae1514bf8f87ecb97646a8bfe3ee9d1ca913ee9d6fb694fd8b484b2f9fe07ef33996192d89cdfc3b9684c4e68281c6bbf757ce883e91e449bd2b02285f2702525ce0ac55b86210d61781bfd3a9984d5ec0617729204ec19bc81da0ce7a20f1baa1a1835318ee8496012bf7a72566c0cd5778dda35c19e0d420bba574b8a83ea6e66a4de4bfa6d1222a56bde748d817bbe0899dbd6cae2db3a0a8ce8ab7b35eccf09ff73accfbd7771e3c8d130612d54ed5d717460518a4ed06880359a77123cda5a2d3135c3b65d803f6ad8ba1d5281c1faca6cdf80512547e51a0b23ca454ff3c4cc1bce4d7fbd5b3607ec99bf2c0f2964714cf9fda4639fb9c68faf9865bfa975816168c758f9cfdd1ccfde28dccfe53b86fc98a9611c8f377a982b291911134040e11d78920f921550252c0dda861085e7d56a5c4b50f7395224a2cbc53c7e43335bdedcba369bcad03a2ec17935c70f9782ba061a77de3d1c38081f6dbecbe7c9a757a591b80c41e2ab11f0efc2c0d5bfaf1ba6dbeaa24d8d62c31d7dfa8e3dfb3d1e722856fd4f7afaaa441491d5cd9a2220f11f099fdfa9da39ef34295827e4b696242783ce8c38550a13335471b42b1f68494b66d11c56c754fb9f32667f1b1f2a002bdc42beb9646bdcf1d2ebaed9beaddccc98b373c193de46120a7f6246b358dd0500e5ceb293de2789dc58e8daa80d6ca10af9153804ab92d4608f45fa86d5eff0fa4788bb8b1e781022208f4b908642536e048fb808fe8621745dde47ad9f962df46978ed41c21dbfcd14d354c727246ef33674ffd2f0072e39c8374305d35ab15554b43702fb45a8bba9228f5d75ac001ff6e114457699688317185a907a38d1b2dc48c91b76f2f1384f0ad1a0a2c1f56a6d90f4dbaa18e0225b2268974bfb699553ef9bf58adf893d6f0a267e263cb6c329ae7200ec1b6a3960df93f6a942ff8181badde473bec4212f709a76bb833ee405a99820f8192fde6e89ea5cae5092ac789096c91ec00774a9f45a51e1c90e6ee8fd1604eeeec66039908d25b81aeeef3d1e52352060c2d113193d1c7d3ab93f0b72b65e0e141359e5585c8778cbe412edc2e76966d9e6c1be00b95bd85f3dc163c8be560331b4eb7d4dc181543c9fd4ae6f6872255007e26f274b262df0bc75d98384100c076cb291e0ee2315a6e1ca293e6198911d17579e3a843d0377bd510e1b43e79b610451312a84f725cda5d0fc13b1f26e53694ebf9e15f339dc5561ea56e1f4458f03047890ecee1835d0887fbdb521e9859ef0a842f8d2f4974b61cea5133ec04f1c0780a265045be172528ef9e8a0c166513149f7614dfcc3baddbf9ef3e604e17c9009f917f11c4c3c4a26e754a910e7dbefb32e3905028a3a35fa05f359e69bba96b2a43278c309200cbe62f7c04903809c2dd4b3ad16d8248dcee7f98b25558a1af8f8cfd441a5be87cb43c7c0724268840d1178c4d1c432b52f44893b64050b4d40d920e45b033c807f1c2c2932f503a09a560b6e5d20d45248700246b9375b8745b5daa30432f1a1438c16623895e4c59a6c89fc90b6b0dbdf61420c2a657ea69c99c0592cf37205dacaa6625fac8424e17dbb0a39793caa5fb41baf7990c8c62c074bb48a67d0bedad798a312045c17d8", 0x2000, &(0x7f0000003ec0)={&(0x7f00000003c0)={0x50, 0xfffffffffffffff5, 0x2, {0x7, 0x28, 0x4, 0x40080, 0xffff, 0xffff, 0xa64, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffa, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGMASK(r6, 0x40044581, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x7c}}, 0x8040) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) writev(r7, &(0x7f0000000040), 0x2) close(r7) openat(r4, &(0x7f0000000380)='./file0\x00', 0x42401, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="01"]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2]) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80) r9 = socket$inet6(0xa, 0x3, 0xff) r10 = dup2(r9, r9) sendmmsg$unix(r10, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="2649f172ce5051d17d982233f1e80d1cc06b1f9e0689ddd3bd7be698bfad741dc05a7e3245960000", 0x28}], 0x1}}, {{&(0x7f0000000180)=@abs={0x98d763aed8d36177, 0x0, 0x4e23}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000440)={0x18, 0x4, 0x2}) 13.919663936s ago: executing program 1 (id=154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x1, 0x4, 0xff, 0x1}, 0x2a, &(0x7f0000000080)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ad2bdec6ab6491a0fa613aed4b796a16"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x7, 0x7}]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000000c0)={r4, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4c142, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000e3b500004000"]) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0) gettid() r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r9, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r9, &(0x7f00000000c0)="8f2a3065bd8c001d0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 10.623264017s ago: executing program 3 (id=155): syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r3, r4, r5, r6, r7, 0x0], 0x8}) r8 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@in={0x2, 0x0, @empty}, &(0x7f0000000300)=0x80, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) (async) setregid(r10, r11) r12 = socket$inet6(0xa, 0x5, 0xffffffff) syz_clone(0x4c040000, &(0x7f0000000440)="8dc938ebec52a82f58847594497dfd2ff674bbbf2e09a0c5ab443257a51e21be1b1ab21942b48d6f1e5864a45eda3ffca4cd5a897cb87eeb0ea2362376b3f41060f3e62890b1c778204a1a31ad930bd01460e193b2d7da69a0bb5cff15e0570a114c6a4539e1e98eda5e3d5ea59b488323356f8b58d100fbf94035615a12dd0bc29a394da1e0567ab65c6e272c90f0e4a7da1348552779e513ddeb4f32804c481476121d3ff267f77478f536b9aa6dfe48e988f2e5f0c529ecc908f61a8369e28eed771f34040807c36fe8e958eac324dc3e640a030b1b2591e008ac2617841005617e6f6f25f51771689888f7340a41c917a55d30", 0xf5, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="19cbf3cfdcac84cc217a65f0293169495f7d937860e9a2d228de4995b9f3b8a184f93fb53eddc24254e278c9f9bdebb097a9998d96fe116090341a31ccc5ba003a9741a1c7dfd3760f2a1622fa4f5047c41d20fb0756b93431cbdd2c08bdaf73e9b2482802b9986c0fce01f7a28c8928edf70eee57acab147aff201d4c7dab162d83d0c6a8144b59fca68c66278433a71120ad2da0804882c702c8eabe3b1fb79dc55df09284735dd0d0") (async) r13 = syz_clone(0x4c040000, &(0x7f0000000440)="8dc938ebec52a82f58847594497dfd2ff674bbbf2e09a0c5ab443257a51e21be1b1ab21942b48d6f1e5864a45eda3ffca4cd5a897cb87eeb0ea2362376b3f41060f3e62890b1c778204a1a31ad930bd01460e193b2d7da69a0bb5cff15e0570a114c6a4539e1e98eda5e3d5ea59b488323356f8b58d100fbf94035615a12dd0bc29a394da1e0567ab65c6e272c90f0e4a7da1348552779e513ddeb4f32804c481476121d3ff267f77478f536b9aa6dfe48e988f2e5f0c529ecc908f61a8369e28eed771f34040807c36fe8e958eac324dc3e640a030b1b2591e008ac2617841005617e6f6f25f51771689888f7340a41c917a55d30", 0xf5, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="19cbf3cfdcac84cc217a65f0293169495f7d937860e9a2d228de4995b9f3b8a184f93fb53eddc24254e278c9f9bdebb097a9998d96fe116090341a31ccc5ba003a9741a1c7dfd3760f2a1622fa4f5047c41d20fb0756b93431cbdd2c08bdaf73e9b2482802b9986c0fce01f7a28c8928edf70eee57acab147aff201d4c7dab162d83d0c6a8144b59fca68c66278433a71120ad2da0804882c702c8eabe3b1fb79dc55df09284735dd0d0") r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r14, 0xc208ae62, &(0x7f0000000680)) setsockopt$inet6_int(r12, 0x29, 0x48, &(0x7f00000008c0)=0x7, 0x4) mq_timedreceive(r0, &(0x7f0000000900)=""/136, 0x88, 0x6, &(0x7f00000009c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a00), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a00), 0x4) ioctl$EXT4_IOC_GETSTATE(r14, 0x40046629, &(0x7f0000000a40)) (async) ioctl$EXT4_IOC_GETSTATE(r14, 0x40046629, &(0x7f0000000a40)) r15 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r15, 0x891a, &(0x7f0000000a80)={'veth1\x00', {0x2, 0x4e23, @remote}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r15, 0x891a, &(0x7f0000000a80)={'veth1\x00', {0x2, 0x4e23, @remote}}) chown(&(0x7f0000000ac0)='./file0\x00', r9, r10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbe}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000c00), 0x4) ptrace$ARCH_MAP_VDSO_64(0x1e, r13, 0x2, 0x2003) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r13, 0x2, 0x2003) accept$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x14) (async) r16 = accept$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x14) getpeername$packet(r16, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d00)=0x14) (async) getpeername$packet(r16, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d00)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000d40)={@private0, 0x401, 0x0, 0x1, 0x3, 0x3, 0x5}, 0x20) 10.50287725s ago: executing program 0 (id=156): socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='\xacshU\xd6\r\x872\bn\xd7\xc3W\xfe\x1ex\xd4\xbf\xffZ-\xf7\xadN\x8d\xc3\x96\ve\x05\x00\x00\x00@\xff!\x18m\xfc\xfe\x9bA\xe7\x9a\xc3\xf5\x8f\x89\xab\xf6\xaerxr\xeerk\x03\xed`\xd8\xb6\xf7\v\xa2\xef\xc8\xd7\x88o\n\x01\x00\xe4sGokD\x9d\t\xd9\x11\x91\xae\x01\xa1\x7f\xaa\xbc]\xcb\xae;\xd5\x1b\xaa}\'>\a\xeaL\xbf\x15\xcf\xbe\xa6\xc0\x7f\xcdkwj', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 10.115585877s ago: executing program 2 (id=158): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 9.916192893s ago: executing program 3 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="0bd905ef33ee288dc4ef47", 0xb}, {&(0x7f00000001c0)="75bbf8406512d05b5f0d20e228166f9c4e9e6b75da2316", 0x17}], 0x2}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/30, 0xf}, {&(0x7f0000000540)=""/4096, 0x12}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000300), 0x48) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="53049b0e2f51791b2e3ab0b08c20b42b8061cfd778e09168b2b81445b72a025dc779c7f9", 0x0, 0x0, 0x0, 0xfffffffd}, 0x38) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000010c0)=ANY=[], 0x1a3) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xe09) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 9.726325786s ago: executing program 2 (id=160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 8.348520342s ago: executing program 0 (id=161): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x4, 0x8000]}, @timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0x0, [{@empty}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0xff}, 0x659}, {@multicast2}, {@empty, 0x71}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffd203}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xfc}}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@multicast2, 0x3}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@remote, 0x4}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0x17, 0x2, [@dev={0xac, 0x14, 0x14, 0xf}, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000a80), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r4) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000003900)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/183, 0xb7}], 0x1, &(0x7f00000005c0)=""/169, 0xa9}, 0x80000001}, {{&(0x7f0000003a80)=@un=@abs, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/56, 0x38}], 0x1, &(0x7f0000000740)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/115, 0x73}, {&(0x7f0000001f80)=""/83, 0x53}, {&(0x7f0000002000)=""/39, 0x27}, {&(0x7f0000002040)=""/145, 0x91}], 0x7, &(0x7f0000002180)=""/105, 0x69}, 0x6}, {{&(0x7f0000002200)=@nfc, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002280)=""/27, 0x1b}, {&(0x7f00000022c0)=""/17, 0x11}, {&(0x7f0000002300)=""/52, 0x34}, {&(0x7f0000002340)=""/33, 0x21}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/195, 0xc3}, {&(0x7f0000003480)=""/31, 0x1f}], 0x7, &(0x7f0000003540)=""/74, 0x4a}, 0x8}, {{&(0x7f00000035c0)=@pppoe, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)=""/126, 0x7e}], 0x1}, 0x3}, {{&(0x7f0000003700)=@caif=@util, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/11, 0xb}], 0x1, &(0x7f0000003800)=""/206, 0xce}, 0x800}], 0x6, 0x10122, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b4f8493f7023ddff00", @ANYRES16=0x0, @ANYBLOB="000225bd7004fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00190000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0007000000000001007063690000000200303030303a30303a31302e300000000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0xffffffffffffffbe}, 0x1, 0x0, 0x0, 0x5}, 0x20004800) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000004c0)}, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r6 = dup(r1) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000704000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAME(r8, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) 8.183326503s ago: executing program 3 (id=162): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000340)=0x1) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000007c9c0e2f50b71b9a7abb31000090e53f30418c169b20618889953856f789fbf91fd4167e1eab6bfa95ef58b18449a14fc0a7b3916cf43eaaeb7ef680cf7b9bd5b2cd9c95b0baf79661aa7275b2708a3b9339b1b17ed2ecc95e6788300e4742d896d0a8635c389fcdf7de079fb22fac089f38f90"], 0x0}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000200)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') fchdir(r3) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe62}}]}, 0x38}}, 0x0) (async) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3ff}, {}, {0x4}, {0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x6, 0x200}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r12, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) 7.820181527s ago: executing program 2 (id=163): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async) r1 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000000c0)) (async) r2 = dup3(r1, r0, 0x0) r3 = getpgrp(0x0) fcntl$lock(r2, 0x4d61760a561df14, &(0x7f0000000100)={0x0, 0x3, 0x8b99, 0x4, r3}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x4, 0xb, 0x1, 0x401, 0x7, 0x2, 0x8001, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r4, 0xc7, "2fcfe1399741b036a23b51897123278f4b2873e0d2018fd5dbf74820a739cec7a145908bd4dbc6422fa9a639058769cffc121393ebbc53a5b9980435baf19ac40fd0d0182cce98a9affcd95e7b0a1616e6ec55498f97204b35500325de985945e362b5b078afb03b62788f6d2e9aa62de60a1730ffdccb3295367c51903fee59ccc3e856be0baaa50f617695d9897397d960f7ca8b74fb0f11e891868d50b79d619e2e70e62377588a6dcba61c58ad058140332352164576970182008ecbd1186a6f13afae4152"}, &(0x7f00000002c0)=0xcf) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) openat$nullb(0xffffff9c, &(0x7f0000000380), 0x40202, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x0, 0x6, 0x4, r4}, 0x10) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x50, r2, 0x5224d000) (async) openat$kvm(0xffffff9c, &(0x7f0000000400), 0x44000, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x7, 0x2, 0x3, 0x1}) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000600)={r4, 0x2}, &(0x7f0000000640)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000680)={0x10000, 0x5, 0x1, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000006c0)={r4, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000700)={r4, 0x9}, 0x8) (async) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000740)) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) r6 = accept4$vsock_stream(r2, &(0x7f0000000800)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'bridge_slave_0\x00'}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000880)={r2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000008c0)=@x86={0x9, 0x97, 0x7f, 0x0, 0x6, 0x7f, 0x9, 0x0, 0xc0, 0x29, 0x4, 0x4, 0x0, 0x400, 0xc074, 0x0, 0xbb, 0x6, 0x4, '\x00', 0xfe}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000900)={0x0, "c26f1695e7deb402a814c4b2b886654e664dd16c7be17648352910c8e9ba51c5"}) socket$inet6(0xa, 0x80000, 0x6) 7.694046794s ago: executing program 2 (id=164): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8000, 0x6, 0x0, 0x6, {{0x1b, 0x4, 0x1, 0x7, 0x6c, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x23, 0x74, [@multicast2, @private=0xa010102, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@remote, 0xfffffff9}]}, @generic={0x83, 0x11, "4cf82d4bdd01686453f39b28e9cabe"}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x404, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x33c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "54bc6777d1eccd2b0047c0b62980070e0e673de7b65bcaa352d1c0bad28fa38c505170f6b6f3a3f03604005ad0669b77aacd6bd008d508e69a008f49d01fba925ae3b0b93ff88a182d0b9ea4e5033db54200027c42bba54378e40367a1d0a6227858436940e7e67a0fb2118a13e02103b314ed4f8016d44134f30a688cab1f96ee64b1f6ab690b048e69513569981a6790f091826162a243ca756df431f5054b06"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']:#.]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+^/:\'})\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')::+#&(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',+-.(-)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "d5497370aab32f28886e48cf63466a8453649d7bd810d25de359d6a6dcbd5b"}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf02}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf659}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*[*5#@:\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\\\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')--.-]#.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(:{).\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\xf8%(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}]}]}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "76b0a1f02b810aacb303f113487c07d9bdeaf7a51d2c31973d04b6a58d4217831c3af2cd496ad4880a4c5e77c25fce4a4f107dbfa56c298345fce37b5b6a3d7d2c4fea248d59ea96a55d6e7e8d38b45eefd631c0153c11455e04d5e5f9bac0a78f4b816d0b04723cbd9ceba9adb64d02e1dc"}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x84840}, 0x4011) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x1c) bind$inet6(r5, &(0x7f0000000a00)={0xa, 0x4e24, 0x8, @remote, 0x10001}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000a40)={0xd, 0x3, 0x9, 0x9}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8008000) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000c00), 0x200000, 0x0) r8 = openat$dir(0xffffff9c, &(0x7f0000000c80)='./file0\x00', 0x400180, 0x180) renameat2(r7, &(0x7f0000000c40)='./file0\x00', r8, &(0x7f0000000cc0)='./file0\x00', 0x0) sendmsg$kcm(r7, &(0x7f0000002380)={&(0x7f0000000d00)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)="3733901c1f09aad1e6557b53725f63cacf1a2c3bdf5b777fbc34e859718f3f196490f962e23d186626e57636aa049b65532044d9f82c838e8d8a6bdb18a3bda4687649a1b8dbe1dc62ba3a5304cb2c20552bf7faf3d98f4f7650b30df197ab1822ac0f04be66647a61d231b5c13b53e1cea959b09435e1917c0a500d871388f2653eee012b998819c9c1425eef262c66dea90736635193e839c7e793", 0x9c}, {&(0x7f0000000e40)="1f09cfbd18946e074958189e2331581275cff9978e991b9c6397b4fe18b58b38da64009348ed2fcb", 0x28}], 0x2, &(0x7f0000000ec0)=[{0xf8, 0x10f, 0x5, "95d3ac7470b191c971c394dcdcc7c5f413a59d003ecc5cd3e05f3b3228404b57fc6d1fe8a97649418f2d9165eaa2b3d518519b36b69285e0b484a34a77be6bcb6a2c79eeb79a736cd7e6e63eaf7736517d4bd972e7b53c0293c1ddcab2ded3f43a5f2d33eef42803f3fd888945b228c6f0cf71762ee63b0d8b35875b3c90cde03db8a5690a62cba7cc6ce760f6f932cba6b133893a12d677a7ba78d473776d478bcb8c1f02163a3395a4960e9baec757266ebf90ec100e2a5d4b1e8ffe4c3187b70c49b60c64d1bd3c3b797135b1f7c867d9b53f666d1230ae42b26fb52864c4fcad4c67045e37"}, {0xa0, 0x10c, 0x10001, "cef6bb436b837cbfe08b62748843c4e10a1028f1a08c41a0e6d1e10fb3b81e3e290cf407334b24a3e054f877b89ff3c1377112139058fc449e24596ce866275075f6ebfa14652d814c9a2ebafda74895e7ee1457ae9a84097266c26994ca284f279da4f0488c378c98f77ac57df0d2565329629546a4e39214ca86df73ab41db4ba11d007860e167d9b0ee2097688eac"}, {0xc0, 0x10b, 0x4, "ede9e8898bbe85b63d063036b77a223512271e30f0be226c4706e7d3dd656dda5084a431b204784de538300aea2edf88bf83aafd4c1b58ec26cd1af0870647edea6299e9ac7046b8d689685bce9c2daceba1f6292c90197b04c85a5ad51cc52d232b6128ad3a3614f9249d73e9b9742c30ee073f0dd947c8ca7f0c6f251f7a639f22ccdeaacc5287e1c6b9a87e8fd91772044c0677f1f388db957444adb012110c27a63c1a500f3545e86b72"}, {0x1010, 0x10a, 0x43, "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"}, {0x18, 0x10b, 0x8, 'vG'}, {0x100, 0x88, 0x7, "06f56ee7b665262600827604f68d7a7ce5223ae70118aae00811278a6c74a8fbde5d5414077b15181e33f18a8493059e1da6dd95afc0580ab4fac48a1d58fa023c9e94c6759833c346121e964c4f13c6cd1055e216dd371c1a48bf6d3533efd7fd6e8f0d2d650521aa8d75b54240778b2b830417dfd079eb1bb97d31850064c62c9e4e26b1d4c55023b163e6171fffa15512885e0aa22886bc84cd2005ab1edbdca2d660a66ad7a71246bb85dc2bc4742cf747d5a108bd4d5433050252063e3fffbe1d662b64e8eb323ebd6f6a4209e6309e0894644288c622925bff45d7040c00c28f19d7be366aa7b874"}, {0xb0, 0x11, 0xc6, "1b9da25e0d87ac972bf5bc08b85f62acc672bba6f710d13cdde6dd647e3c0ada71c9f68652b3c6fab9f95afb6d3a2101d1de29d5369f67d10ada3df7c0d9ff63209e6e852e25bdce62e8f69a67cca7d54de2e7a552de7e217f84655c15857c519fbd18cb73e8227330fc7de17e2b6e8acf1e483824063359e7bc5e6d22c0178c9a4f2f89447c51bed5293b16acc8f448552677d5dc6efce21f506cd86d961ebc"}, {0x48, 0x188, 0x0, "c114ae5df93adc76e5167f2c07c494f18cdcba0af22242ec0b00755dacfb3986f38dea51be90beb4ee6aad3d14a42b244ee2ac2947926c4d"}, {0x48, 0x29, 0x1, "5f60c4038780afe5a4522d44d54a6b8ac902fe02d6a143e8844e904427dd8141faba744c3b8a698b671009236630e6d7e78b5f7653694362"}], 0x14c0}, 0x48090) ioctl$KVM_CAP_HYPERV_SEND_IPI(r7, 0x4068aea3, &(0x7f00000023c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000002440)={0x0, 0x6, [0x5, 0x80, 0x79bd, 0x0, 0x5, 0x423bb215]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000002480)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}], 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000002500)={0x0, 0x9, 0x9}, 0x10) read$char_usb(r7, &(0x7f0000002540)=""/17, 0x11) write(r8, &(0x7f0000002580)="d46d9267f03814b19308ef6c9905cb9baa9ac76b6a807df1b80142b3606b0abc4f2ad448ebd654ce83279c9ea8251f5d386ec827fbd152120996ceee6b4bcee73d75fc9e62e1f248526ced8d678d857003465d62e116ee820c0369f3aa77391b027f477e84266a1f1511bb7efd59735bb179517e9a658caca74f05d970891d551d6d49a786d087fb1c99b34ea4a00498a62dbdb67c", 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000002780)=@buf={0xe1, &(0x7f0000002680)="7055e782841afab8c958699f1b4b152f26491d455b985010339c02d75ddb03e5883822cc1cf0602c3f2c7ce8be2d385e9bc4e2a6f3766beac63b11fd9e8fcefc2eddbd9c8c04a60d8d21f188c3d397feaed4d141a6a36883ee2feff4e0b1133b71d6c54166e9a6757cb0b12ac7ce30ff7209cd720b34d6a25715bcc5878143255c475c6d785a2f66d90ec7e5acddcb26f5a1f5b5bf1681d8997ff5d7452f08f5981e96e9a54cee2c900cf1b32c02b40e5ac3cc788e32f5a8790fbd4568cbcd146a92fd9752b53971a5afe51b05b88ea389f2dc8d26ed64d00071be60cfe5c2cb17"}) syz_open_dev$char_usb(0xc, 0xb4, 0xb) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000003640)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003600)={&(0x7f0000002840)={0xd98, r9, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x7c}}}}, [@NL80211_ATTR_TX_RATES={0x300, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x30, 0x36, 0x6, 0x6, 0x6, 0x48, 0x18, 0x3, 0x30, 0x48, 0x3, 0x16, 0x3, 0x48, 0x48, 0xc, 0x1b, 0x30, 0x1e, 0x36, 0x60, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0xff67, 0x9, 0x813, 0x5, 0x1e2, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x9, 0x1, 0x8001, 0x4, 0x1, 0xc, 0x2]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x8}, {0x7, 0x7}, {0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x1, 0x3}, {0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x6}, {0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x5}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x8}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x0, 0xa}, {0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x6}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xec0, 0x90, 0x6, 0x6, 0x5, 0x3ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x3, 0x1}, {0x6}, {0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x60, 0x2b, 0x3, 0x6, 0x18, 0x18, 0x9, 0x60, 0x36, 0x6, 0x12, 0x1b, 0x6c, 0x12, 0x1b, 0x48, 0x24, 0x1, 0x107cd3a3f5445b87, 0x9, 0x6]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x7}, {0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x5}, {0x0, 0x9}, {0x3}, {0x5, 0x8}, {0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x14}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0xc}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x2, 0x8, 0x9, 0x7, 0x7ff, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x81, 0x7ff, 0x5, 0x4, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x4, 0x3, 0x3, 0xa1f, 0x80, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x9cca, 0xe441, 0x8000, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x5, 0x0, 0x401, 0x38, 0x8001, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x2, 0x7965, 0x3, 0x4, 0x5, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xca5b, 0x2, 0x5, 0x0, 0x6, 0x6, 0x549]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x5, 0x6, 0x8, 0x401, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x30, 0x48, 0x18, 0x16, 0x2, 0x60, 0x5, 0x16, 0x48, 0x3, 0x9, 0x36, 0x1b, 0x3, 0x12, 0x2, 0x0, 0x3387188795653af9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x8000, 0x1, 0x8, 0x2, 0xe, 0xe]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x36, 0x1, 0x18, 0x30, 0x60, 0x48, 0x5, 0x4, 0x5, 0x16, 0x60, 0x30, 0x3, 0x12, 0xb, 0xc, 0x16, 0xb, 0x60, 0x3, 0x48, 0x36, 0x6, 0x1c]}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x8001, 0x9, 0x8, 0x4, 0xfff, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x5, 0x6, 0x60, 0x9, 0x30, 0x0, 0x6, 0x6c, 0x1b, 0x0, 0x4, 0x36, 0x12, 0x30, 0x4, 0x9, 0x12, 0x3, 0x0, 0x30, 0xb, 0x2, 0x12, 0x2]}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0xb, 0x1, 0x6c, 0x60, 0x18, 0x6, 0x48, 0x5, 0x30, 0x4, 0x12, 0x18, 0x2b, 0x8, 0x69, 0x1, 0x30, 0x2, 0x60, 0x4, 0xc, 0x60, 0x9, 0xc, 0x1, 0x48]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x1b, 0x1b, 0x1, 0x18, 0x1, 0x18, 0x24, 0x9, 0x3, 0x24, 0x6c, 0x12, 0x3, 0xc, 0x9, 0xb, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x100, 0x3, 0x7f, 0x1, 0x0, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x4, 0x0, 0x5, 0x8000, 0xfffc, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x1b]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x6, 0x3000, 0x7, 0x2d98, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x0, 0x4, 0x2, 0xa, 0x3, 0xf158]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x41, 0x1b, 0x4, 0x36, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0xc, 0x6, 0x5, 0xb3d, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xfffd, 0x8, 0x401, 0x0, 0x3acc, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xaa40, 0x8, 0x5cc8, 0x9e, 0xfffc, 0x1, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa54, 0x3, 0x7, 0x4, 0xb, 0x7, 0x1000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x1}, {0x0, 0x4}, {0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {}, {0x3, 0x2}, {0x7}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x1}, {0x3, 0x4}, {0x1, 0x4}, {0x5}, {0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x5}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0x8}, {0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb8, 0x2, 0x4, 0x6dbd, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0xd5, 0xfff9, 0x6b, 0xffff, 0x5, 0x9]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x4}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x8}, {0x2, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xffff, 0x3, 0x1, 0x8000, 0x2c, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x6, 0x5, 0xe, 0xfff8, 0x8001, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x1}, {0x6, 0x7}, {}, {0x0, 0x7}, {0x4}, {0x2, 0x3}, {0x2, 0x4}, {}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x4}, {0x5, 0x1}, {0x7}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x5, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x9}, {0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0e8, 0x100, 0x6, 0x7, 0x2, 0xfff5, 0xd86a, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x2}, {0x1, 0x2}, {0x6}, {0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xef2, 0x1000, 0x95, 0x5, 0x8, 0x7800, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x800]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x48, 0x6c, 0x60, 0x1b, 0x6, 0x1b, 0x4, 0x12, 0x30, 0x1, 0x4, 0x6, 0x36, 0x16, 0x4, 0x4, 0x0, 0x5, 0x18, 0x48, 0x6c, 0x0, 0x1, 0x3, 0x36, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x3, 0x6, 0x2, 0x2, 0x4, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0x9}, {0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x7}, {0x2, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x4, 0x7, 0x5, 0xffff, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x8}, {0x7, 0x8}, {0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x5}, {0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x6}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x3def, 0x4, 0x340f, 0x5, 0x1, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x4, 0x1b, 0x6, 0x18, 0x2, 0x0, 0x9, 0x6, 0x60, 0x1b, 0x3, 0x2, 0x4, 0x3, 0x16, 0x3, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x38, 0x2, 0x9, 0x100, 0xf, 0x7f, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xe2, 0x6, 0x2, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x9, 0x3, 0x8001, 0x1ff, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x1, 0xf5, 0x96d, 0x8, 0x4, 0xd6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x6, 0x4, 0x24, 0x18, 0x48, 0x6c, 0x30, 0x0, 0x5, 0x5a, 0x48, 0x30, 0x1b, 0x12, 0xc, 0x6, 0x0, 0x4, 0x5, 0xc, 0x1, 0x9, 0x30, 0x1e]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0xc, 0x2d, 0x60, 0x1b, 0x24, 0x1, 0x1, 0xc, 0x0, 0x4, 0x24, 0x1, 0x3b, 0x30, 0x4, 0x6, 0x30, 0x6, 0x36, 0x24, 0x36, 0x24, 0x2, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x6}, {0x2, 0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x5, 0x12, 0x1b, 0x12, 0x36, 0xc, 0x1, 0x48, 0x30, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xb06, 0x7, 0x4, 0xc, 0x7fff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x6}, {0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x6, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0xb, 0x2, 0x6c, 0x5, 0x60, 0x18, 0x5, 0x60, 0x1b, 0x24, 0x6c, 0xb, 0x0, 0x48, 0x2, 0x18, 0x9, 0x18, 0x18, 0x60, 0x4, 0x5, 0x18, 0x6c, 0x60, 0x3, 0xe4, 0x4, 0x64]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x24, 0x30, 0x5, 0x18, 0x6c, 0x48, 0x3, 0x48, 0x1b, 0x6e, 0xb, 0x48]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x2, 0x1b, 0x4, 0x24, 0x16, 0x24, 0x7d, 0x6, 0x24, 0x30, 0xd276dcb15ae8079f, 0x36, 0x18, 0x18, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x0, 0x4, 0x3a8, 0x7, 0x0, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0xe7ec, 0x8001, 0x81, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x6c, 0x9e, 0x24, 0x1, 0x18, 0x3, 0x18, 0x30, 0x60, 0x36, 0x6, 0x48, 0x60, 0xc, 0x30, 0x16, 0x6, 0x18, 0x16, 0x60, 0x48, 0x2, 0x0, 0xb, 0x16, 0x12, 0x6c, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x57, 0x0, 0x8, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x36, 0x57, 0x9, 0xb, 0x4, 0x30, 0x9, 0x14, 0x43, 0x12, 0x2, 0x4, 0x48, 0x12, 0x3, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x7, 0xf03e, 0xeb, 0xa, 0xff80, 0x5]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0xa}, {0x6, 0x19}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x2, 0x4b, 0x2e, 0x12, 0x44, 0x5, 0x16, 0xc, 0x0, 0x36, 0x6c, 0x53, 0x2, 0x60, 0x24, 0xc, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x2c, 0x33, 0x12, 0x5, 0x30, 0x2b, 0x16, 0x12, 0x48, 0xb, 0x60, 0x48, 0x9, 0x36, 0xc, 0x9, 0x6c, 0x3, 0x16, 0x36, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x7fff, 0x7, 0x5, 0x3ff, 0x7, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {}, {0x0, 0xa}, {}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x9}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {}, {0x1}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x1}, {0x4, 0xa}, {0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x7}, {0x2}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x5, 0xc8, 0x8, 0x4, 0x9]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa, 0x19e, 0xad, 0x3, 0x8001, 0x9, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8d33, 0x1, 0xc4, 0x3ff, 0x5, 0x101, 0xea]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x7, 0x8001, 0x3db, 0x0, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb, 0x5e, 0x94e, 0x5, 0x7, 0xbe0d, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x5, 0x800, 0x0, 0x10, 0x54c1, 0x73fd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x9, 0x4, 0x72ed, 0x2, 0x6]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x10}, {0x3, 0x7}, {0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x30, 0x7, 0x0, 0x8, 0x9, 0xbcbb]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2fe1, 0x1, 0x3, 0x6, 0x2, 0xd215, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0xfff8, 0x1, 0x798f, 0xfff, 0x80, 0xe92]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x4, 0x800, 0x40, 0xd2f7, 0x8001, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x5, 0x5, 0x2, 0x4, 0x3, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x93, 0x4, 0xfc00, 0x2, 0x0, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xf, 0xd, 0x2, 0x6, 0x6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2f3, 0x4, 0x5, 0x9, 0x0, 0x1, 0xb6a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x0, 0x3, 0xf12, 0xfff7, 0x1, 0x80, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0xfff8, 0x3, 0x3, 0x4, 0x101, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x2}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x6}]}]}]}]}, 0xd98}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003680)={'ip6gretap0\x00'}) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000036c0)={@rand_addr=0x64010101, @rand_addr=0x64010102}, 0x8) 7.523560609s ago: executing program 2 (id=165): unshare(0x42000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) 7.18301102s ago: executing program 2 (id=166): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) accept4$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x9}, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x9, "5660359c3245d1c4230200000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000000021b0000000000000000000000000004000a80dbda404e125632ca3dd19dd0a49a13a7cefa253bba6db4d9ffa5911c5a8681409436fe6e0c4093cee6cab93c670074f8db49892fe80575a8c92e395df48db6dad5dffe620505139da67f32"], 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=169): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6009fc1f00288c24e7eb694ead09575bb70697153afffe80000000000000f4000000000000bbff020000000000000000000000000001890090780000000000000000000000000000ffffac1414aa0000"], 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x100}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}], 0x1, 0x400c0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_open_dev$video(&(0x7f00000002c0), 0x7, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x2c020400) pselect6(0x40, &(0x7f0000004580)={0x8001}, &(0x7f0000004e00)={0x3ff, 0x0, 0x48913775, 0x101}, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 51.530575][ T5216] cgroup: Unknown subsys name 'net' [ 51.660148][ T5216] cgroup: Unknown subsys name 'cpuset' [ 51.668011][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.923604][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.998576][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.001568][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.014519][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.022460][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.025055][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.031330][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.038886][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.045750][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.061261][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.067310][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.077563][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.086732][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.095580][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.096173][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.109638][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.115486][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.117165][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.126234][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.140209][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.140593][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.147809][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.155344][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.161939][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.168518][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.176949][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.183178][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.197389][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.205441][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.213528][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.234598][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.701376][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 56.732491][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 56.743664][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 56.810318][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 56.822496][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 56.867029][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.874507][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.882133][ T5246] bridge_slave_0: entered allmulticast mode [ 56.889834][ T5246] bridge_slave_0: entered promiscuous mode [ 56.899102][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.906203][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.913494][ T5246] bridge_slave_1: entered allmulticast mode [ 56.920504][ T5246] bridge_slave_1: entered promiscuous mode [ 57.002798][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.010188][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.017783][ T5244] bridge_slave_0: entered allmulticast mode [ 57.024292][ T5244] bridge_slave_0: entered promiscuous mode [ 57.033162][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.040430][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.047777][ T5244] bridge_slave_1: entered allmulticast mode [ 57.054292][ T5244] bridge_slave_1: entered promiscuous mode [ 57.077162][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.128766][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.135894][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.143363][ T5248] bridge_slave_0: entered allmulticast mode [ 57.150765][ T5248] bridge_slave_0: entered promiscuous mode [ 57.158642][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.165692][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.173076][ T5248] bridge_slave_1: entered allmulticast mode [ 57.180209][ T5248] bridge_slave_1: entered promiscuous mode [ 57.188581][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.250167][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.258122][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.265274][ T5245] bridge_slave_0: entered allmulticast mode [ 57.272776][ T5245] bridge_slave_0: entered promiscuous mode [ 57.280061][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.288035][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.295242][ T5249] bridge_slave_0: entered allmulticast mode [ 57.302544][ T5249] bridge_slave_0: entered promiscuous mode [ 57.311303][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.318647][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.325807][ T5249] bridge_slave_1: entered allmulticast mode [ 57.333016][ T5249] bridge_slave_1: entered promiscuous mode [ 57.342207][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.353909][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.372395][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.384281][ T5246] team0: Port device team_slave_0 added [ 57.392585][ T5246] team0: Port device team_slave_1 added [ 57.398849][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.406929][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.414081][ T5245] bridge_slave_1: entered allmulticast mode [ 57.420945][ T5245] bridge_slave_1: entered promiscuous mode [ 57.450079][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.489657][ T5244] team0: Port device team_slave_0 added [ 57.497414][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.523090][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.530295][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.557120][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.570192][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.577298][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.603811][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.624707][ T5244] team0: Port device team_slave_1 added [ 57.640839][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.652881][ T5248] team0: Port device team_slave_0 added [ 57.662735][ T5248] team0: Port device team_slave_1 added [ 57.681627][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.694146][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.711114][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.718885][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.744976][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.789456][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.796437][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.822868][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.850712][ T5249] team0: Port device team_slave_0 added [ 57.857509][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.864471][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.891228][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.904051][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.911282][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.937406][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.971525][ T5245] team0: Port device team_slave_0 added [ 57.979925][ T5249] team0: Port device team_slave_1 added [ 57.992273][ T5246] hsr_slave_0: entered promiscuous mode [ 57.999036][ T5246] hsr_slave_1: entered promiscuous mode [ 58.008457][ T5245] team0: Port device team_slave_1 added [ 58.076036][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.083446][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.110070][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.122009][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.129081][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.155841][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.169047][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.175996][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.202407][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.215108][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.222221][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.248800][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.265945][ T5244] hsr_slave_0: entered promiscuous mode [ 58.272688][ T5244] hsr_slave_1: entered promiscuous mode [ 58.279238][ T5228] Bluetooth: hci0: command tx timeout [ 58.284900][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.292722][ T5228] Bluetooth: hci4: command tx timeout [ 58.292911][ T5228] Bluetooth: hci2: command tx timeout [ 58.293005][ T5231] Bluetooth: hci1: command tx timeout [ 58.298471][ T5241] Bluetooth: hci3: command tx timeout [ 58.298983][ T5244] Cannot create hsr debugfs directory [ 58.354091][ T5248] hsr_slave_0: entered promiscuous mode [ 58.361024][ T5248] hsr_slave_1: entered promiscuous mode [ 58.368466][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.376717][ T5248] Cannot create hsr debugfs directory [ 58.449608][ T5249] hsr_slave_0: entered promiscuous mode [ 58.455712][ T5249] hsr_slave_1: entered promiscuous mode [ 58.462568][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.470460][ T5249] Cannot create hsr debugfs directory [ 58.479284][ T5245] hsr_slave_0: entered promiscuous mode [ 58.485583][ T5245] hsr_slave_1: entered promiscuous mode [ 58.492413][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.500542][ T5245] Cannot create hsr debugfs directory [ 58.794657][ T5246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.804800][ T5246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.814658][ T5246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.827220][ T5246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.882149][ T5244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.891232][ T5244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.908215][ T5244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.925110][ T5244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.988365][ T5245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.000181][ T5245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.031323][ T5245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.050208][ T5245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.091742][ T5249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.124710][ T5249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.139578][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.150624][ T5249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.184525][ T5249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.223144][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.242700][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.257872][ T5248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.268081][ T5248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.278333][ T5248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.291732][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.298965][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.314969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.322111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.348314][ T5248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.393746][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.428182][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.435306][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.460587][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.467707][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.573400][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.586031][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.632928][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.644003][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.656154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.663314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.695358][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.702537][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.760488][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.781871][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.793727][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.800900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.814413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.821552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.849715][ T5246] veth0_vlan: entered promiscuous mode [ 59.860506][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.910376][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.923817][ T5246] veth1_vlan: entered promiscuous mode [ 59.953688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.960835][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.995559][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.004294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.011441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.058381][ T5244] veth0_vlan: entered promiscuous mode [ 60.070184][ T5244] veth1_vlan: entered promiscuous mode [ 60.092428][ T5246] veth0_macvtap: entered promiscuous mode [ 60.105791][ T5246] veth1_macvtap: entered promiscuous mode [ 60.142016][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.151811][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.174264][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.185246][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.194787][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205737][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.214807][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.253323][ T5244] veth0_macvtap: entered promiscuous mode [ 60.265607][ T5245] veth0_vlan: entered promiscuous mode [ 60.279052][ T5244] veth1_macvtap: entered promiscuous mode [ 60.299662][ T5245] veth1_vlan: entered promiscuous mode [ 60.358183][ T5231] Bluetooth: hci2: command tx timeout [ 60.358247][ T5240] Bluetooth: hci3: command tx timeout [ 60.363602][ T5231] Bluetooth: hci4: command tx timeout [ 60.369672][ T5240] Bluetooth: hci0: command tx timeout [ 60.374850][ T5228] Bluetooth: hci1: command tx timeout [ 60.392296][ T5249] veth0_vlan: entered promiscuous mode [ 60.401298][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.412906][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.424786][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.454903][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.479912][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.490635][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.502833][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.513165][ T5249] veth1_vlan: entered promiscuous mode [ 60.530476][ T5245] veth0_macvtap: entered promiscuous mode [ 60.552738][ T5244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.562119][ T5244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.574475][ T5244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.583348][ T5244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.609051][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.626313][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.628780][ T5245] veth1_macvtap: entered promiscuous mode [ 60.670207][ T5248] veth0_vlan: entered promiscuous mode [ 60.712783][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.723892][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.736487][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.747276][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.759204][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.793494][ T5249] veth0_macvtap: entered promiscuous mode [ 60.799522][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.808965][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.814953][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.827626][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.840025][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.850824][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.862218][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.893048][ T5248] veth1_vlan: entered promiscuous mode [ 60.904033][ T5245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.913597][ T5245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.923413][ T5245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.926252][ T5246] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.942500][ T5245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.963429][ T5249] veth1_macvtap: entered promiscuous mode [ 60.968402][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.977649][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.977885][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.995658][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.005751][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.016420][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.026323][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.036815][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.048254][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.078208][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.088915][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.099901][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.110546][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.120510][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.131106][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.143318][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.234787][ T5249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.254521][ T5249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.266025][ T5249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.275315][ T5249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299729][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.321084][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.357515][ T5248] veth0_macvtap: entered promiscuous mode [ 61.402238][ T5248] veth1_macvtap: entered promiscuous mode [ 61.443228][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.455146][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.528661][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 61.538088][ T5288] Zero length message leads to an empty skb [ 61.586021][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.599886][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.611099][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.628281][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.649842][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.682160][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.716585][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.794313][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.843910][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.925490][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.937158][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 61.946950][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.963224][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.999572][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.027985][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.055854][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.081923][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.128281][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.156860][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.169805][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.187800][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.212861][ T5248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.237133][ T5248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.247131][ T5248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.259895][ T5248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.288417][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.300499][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.376173][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.406719][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.432267][ T5284] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 62.443228][ T5231] Bluetooth: hci4: command tx timeout [ 62.449301][ T5228] Bluetooth: hci1: command tx timeout [ 62.449718][ T4622] Bluetooth: hci3: command tx timeout [ 62.454723][ T5228] Bluetooth: hci2: command tx timeout [ 62.460978][ T5240] Bluetooth: hci0: command tx timeout [ 62.477996][ T5304] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.529163][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.532906][ T5308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10'. [ 62.551798][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.586952][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.595023][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.635600][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.644402][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.683669][ T5284] usb 2-1: not running at top speed; connect to a high speed hub [ 62.700212][ T5284] usb 2-1: config 72 has an invalid interface number: 234 but max is 1 [ 62.722458][ T5284] usb 2-1: config 72 has an invalid interface number: 146 but max is 1 [ 62.736909][ T5284] usb 2-1: config 72 has no interface number 0 [ 62.743673][ T5284] usb 2-1: config 72 has no interface number 1 [ 62.750033][ T5284] usb 2-1: config 72 interface 234 altsetting 15 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 62.761538][ T5284] usb 2-1: config 72 interface 146 altsetting 249 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 62.772901][ T5284] usb 2-1: config 72 interface 146 altsetting 249 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 62.784215][ T5284] usb 2-1: config 72 interface 146 altsetting 249 has a duplicate endpoint with address 0xC, skipping [ 62.796484][ T5284] usb 2-1: config 72 interface 234 has no altsetting 0 [ 62.803725][ T5284] usb 2-1: config 72 interface 146 has no altsetting 0 [ 62.823324][ T5284] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=62.e8 [ 62.836684][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.855004][ T5284] usb 2-1: Product: syz [ 62.861137][ T5284] usb 2-1: Manufacturer: syz [ 62.872330][ T5284] usb 2-1: SerialNumber: syz [ 62.877515][ T5302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.968699][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.995150][ T5320] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 63.023384][ T5320] loop2: detected capacity change from 0 to 7 [ 63.034447][ T5320] Dev loop2: unable to read RDB block 7 [ 63.042301][ T5320] loop2: unable to read partition table [ 63.047031][ T5302] usb 5-1: Using ep0 maxpacket: 8 [ 63.053631][ T5320] loop2: partition table beyond EOD, truncated [ 63.057569][ T5302] usb 5-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=91.94 [ 63.061868][ T5320] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 63.076631][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.095834][ T5302] usb 5-1: Product: syz [ 63.114101][ T5320] syz.3.4 (5320) used greatest stack depth: 19312 bytes left [ 63.114223][ T5302] usb 5-1: Manufacturer: syz [ 63.126844][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 63.133098][ T47] usb 3-1: too many configurations: 84, using maximum allowed: 8 [ 63.152590][ T5302] usb 5-1: SerialNumber: syz [ 63.155859][ T47] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 63.168160][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.194588][ T47] usb 3-1: Product: syz [ 63.198905][ T5302] usb 5-1: config 0 descriptor?? [ 63.213176][ T5302] usb 5-1: bad CDC descriptors [ 63.226321][ T47] usb 3-1: Manufacturer: syz [ 63.243837][ T47] usb 3-1: SerialNumber: syz [ 63.261551][ T47] r8152-cfgselector 3-1: Unknown version 0x0000 [ 63.268559][ T47] r8152-cfgselector 3-1: config 0 descriptor?? [ 63.355756][ T5331] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.375160][ T5284] usb 2-1: USB disconnect, device number 2 [ 63.393652][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.405422][ T47] usb 5-1: USB disconnect, device number 2 [ 63.417356][ T5331] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 63.425117][ T5331] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 63.448401][ T5331] xt_nfacct: accounting object `syz1' does not exists [ 63.787034][ T5323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.937426][ T5323] usb 1-1: Using ep0 maxpacket: 32 [ 63.951739][ T5323] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0 [ 63.974813][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.003469][ T5323] usb 1-1: Product: syz [ 64.024340][ T25] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 64.035095][ T5323] usb 1-1: Manufacturer: syz [ 64.047719][ T5323] usb 1-1: SerialNumber: syz [ 64.057692][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.077922][ T5323] usb 1-1: config 0 descriptor?? [ 64.100356][ T29] audit: type=1326 audit(1728196103.854:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.3.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b8797dff9 code=0x0 [ 64.152905][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.155408][ T5323] pwc: Visionite VCS-UC300 USB webcam detected. [ 64.287186][ T937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.294867][ T5302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.303147][ T5323] pwc: Failed to set LED on/off time (-71) [ 64.336503][ T5323] pwc: send_video_command error -71 [ 64.354834][ T5323] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 64.384955][ T5323] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 64.413678][ T5323] usb 1-1: USB disconnect, device number 2 [ 64.490184][ T5302] usb 2-1: Using ep0 maxpacket: 32 [ 64.496067][ T937] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 64.511029][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.523674][ T937] usb 5-1: config 0 descriptor?? [ 64.527589][ T5240] Bluetooth: hci2: command tx timeout [ 64.534099][ T5240] Bluetooth: hci0: command tx timeout [ 64.537355][ T4622] Bluetooth: hci3: command tx timeout [ 64.540187][ T5228] Bluetooth: hci1: command tx timeout [ 64.560324][ T5302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.585381][ T5302] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.595242][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.606223][ T5302] usb 2-1: Product: syz [ 64.625333][ T5302] usb 2-1: Manufacturer: syz [ 64.630472][ T5302] usb 2-1: SerialNumber: syz [ 64.648121][ T5302] usb 2-1: config 0 descriptor?? [ 64.655218][ T5344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.782965][ T937] ath6kl: Failed to submit usb control message: -71 [ 64.798017][ T937] ath6kl: unable to send the bmi data to the device: -71 [ 64.815979][ T937] ath6kl: Unable to send get target info: -71 [ 64.854139][ T937] ath6kl: Failed to init ath6kl core: -71 [ 64.883882][ T937] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 64.935598][ T937] usb 5-1: USB disconnect, device number 3 [ 64.995210][ T5380] netlink: 'syz.0.25': attribute type 7 has an invalid length. [ 65.007925][ T5380] netlink: 'syz.0.25': attribute type 39 has an invalid length. [ 65.087522][ T5377] hsr0: entered promiscuous mode [ 65.116109][ T5377] hsr0: left promiscuous mode [ 65.147765][ T5234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.266744][ T5282] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.309800][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.338691][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.380456][ T5234] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 65.410314][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.437500][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 65.458885][ T5234] usb 4-1: config 0 descriptor?? [ 65.471519][ T5282] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 65.477798][ T5392] block device autoloading is deprecated and will be removed. [ 65.489555][ T5282] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 65.505312][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 65.514833][ T5282] usb 3-1: config 1 has no interface number 0 [ 65.527564][ T5282] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.537690][ T5392] syz.4.31: attempt to access beyond end of device [ 65.537690][ T5392] md63: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 65.558610][ T5282] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.571349][ T5282] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 65.585970][ T5282] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 65.607804][ T5398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.32'. [ 65.632766][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.663328][ T5398] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 65.718224][ T5282] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 65.898245][ T5282] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 65.905643][ T5282] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 65.916673][ T5282] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 65.941892][ T5234] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 65.949781][ T5234] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 65.960928][ T5234] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 65.977862][ T5234] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 65.992624][ T5234] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 66.013509][ T5234] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 66.120140][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.150797][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.162588][ T5302] usb 3-1: USB disconnect, device number 3 [ 66.197420][ T5234] usb 4-1: USB disconnect, device number 2 [ 66.246879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.334879][ T5404] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.348384][ T5404] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 66.357487][ T5228] Bluetooth: hci4: command tx timeout [ 66.606947][ T5282] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.767568][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 66.803386][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 66.831372][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.838624][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.858253][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.874688][ T5282] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.888762][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.909952][ T5282] usb 5-1: config 0 descriptor?? [ 66.915598][ T5404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.996230][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.003541][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.019792][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.026981][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.066733][ T5234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.104740][ T5323] usb 2-1: USB disconnect, device number 3 [ 67.117295][ T5302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 67.218717][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 67.256750][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.276464][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.292986][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 67.297449][ T5302] usb 3-1: Using ep0 maxpacket: 16 [ 67.316502][ T5234] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 67.342032][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.352346][ T5302] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 67.352832][ T5234] usb 4-1: Product: syz [ 67.372449][ T5234] usb 4-1: Manufacturer: syz [ 67.376790][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.377430][ T5234] usb 4-1: SerialNumber: syz [ 67.404112][ T5234] usb 4-1: config 0 descriptor?? [ 67.428776][ T5302] usb 3-1: Product: syz [ 67.442705][ T5302] usb 3-1: Manufacturer: syz [ 67.455483][ T5302] usb 3-1: SerialNumber: syz [ 67.467894][ T5302] usb 3-1: config 0 descriptor?? [ 67.506875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.528410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.537411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.545928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.555257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.565190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.591077][ T127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.624385][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 67.635678][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 67.656257][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 67.671819][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 67.682143][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 67.698758][ T5302] appledisplay 3-1:0.0: Could not find int-in endpoint [ 67.705294][ T5234] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 67.706445][ T5302] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 67.731844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.752446][ T5234] usb 4-1: USB disconnect, device number 3 [ 67.791790][ T127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.806969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.815303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.949842][ T127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.985900][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 67.994569][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 68.057539][ T5282] usb 5-1: USB disconnect, device number 4 [ 68.179242][ T127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.196289][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.209522][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.235673][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.251782][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.264972][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.274025][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.304019][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.313579][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.386357][ T127] bridge_slave_1: left allmulticast mode [ 68.399222][ T127] bridge_slave_1: left promiscuous mode [ 68.417858][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.460170][ T127] bridge_slave_0: left allmulticast mode [ 68.466142][ T127] bridge_slave_0: left promiscuous mode [ 68.472591][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.487602][ T5323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.512131][ T25] usb 3-1: USB disconnect, device number 4 [ 68.526695][ T5282] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.678978][ T5438] input: syz0 as /devices/virtual/input/input5 [ 68.685702][ T5323] usb 2-1: Using ep0 maxpacket: 8 [ 68.704219][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 68.726363][ T5282] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 68.744742][ T5282] usb 5-1: config 0 has no interface number 0 [ 68.753308][ T5323] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 68.789629][ T5282] usb 5-1: config 0 interface 52 has no altsetting 0 [ 68.812767][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 68.838111][ T5282] usb 5-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=f2.cf [ 68.856688][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 68.868195][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.888084][ T5282] usb 5-1: Product: syz [ 68.897697][ T5282] usb 5-1: Manufacturer: syz [ 68.904004][ T5323] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 68.917653][ T5282] usb 5-1: SerialNumber: syz [ 68.925411][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.953722][ T5282] usb 5-1: config 0 descriptor?? [ 68.958905][ T5323] usb 2-1: Product: syz [ 68.964566][ T5323] usb 2-1: Manufacturer: syz [ 68.976998][ T5323] usb 2-1: SerialNumber: syz [ 69.009877][ T5323] usb 2-1: config 0 descriptor?? [ 69.019901][ T5448] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.035713][ T5424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.063355][ T5323] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 69.077902][ T5323] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 69.261794][ T5323] usb 2-1: USB disconnect, device number 4 [ 69.783141][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.802777][ T5455] kvm: emulating exchange as write [ 69.813492][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.837982][ T127] bond0 (unregistering): Released all slaves [ 69.922284][ T29] audit: type=1326 audit(1728196109.684:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 69.979107][ T29] audit: type=1326 audit(1728196109.684:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.043896][ T29] audit: type=1326 audit(1728196109.704:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.046003][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078634][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.092698][ T5234] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 70.117033][ T29] audit: type=1326 audit(1728196109.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.134069][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.146273][ T5470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.159817][ T29] audit: type=1326 audit(1728196109.704:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.184326][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.191534][ T5470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.203321][ T29] audit: type=1326 audit(1728196109.724:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.248089][ T29] audit: type=1326 audit(1728196109.724:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.317019][ T29] audit: type=1326 audit(1728196109.724:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.348125][ T5234] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.382044][ T5234] usb 3-1: not running at top speed; connect to a high speed hub [ 70.385357][ T29] audit: type=1326 audit(1728196109.724:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.407280][ T5234] usb 3-1: config 6 has an invalid interface number: 30 but max is 0 [ 70.432393][ T29] audit: type=1326 audit(1728196109.724:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a4b7dff9 code=0x7ffc0000 [ 70.440264][ T5234] usb 3-1: config 6 has no interface number 0 [ 70.463491][ T5228] Bluetooth: hci2: command tx timeout [ 70.469687][ T5234] usb 3-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 70.481868][ T5234] usb 3-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 70.493893][ T5234] usb 3-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 70.506037][ T5234] usb 3-1: config 6 interface 30 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 70.523180][ T5234] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 70.533566][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.542288][ T5234] usb 3-1: Product: syz [ 70.556972][ T5234] usb 3-1: Manufacturer: syz [ 70.561647][ T5234] usb 3-1: SerialNumber: syz [ 70.594775][ T5469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 70.866305][ T127] hsr_slave_0: left promiscuous mode [ 70.898024][ T127] hsr_slave_1: left promiscuous mode [ 70.929412][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.948993][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.983928][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.020478][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.051846][ T127] veth1_macvtap: left promiscuous mode [ 71.058519][ T127] veth0_macvtap: left promiscuous mode [ 71.064345][ T127] veth1_vlan: left promiscuous mode [ 71.072135][ T127] veth0_vlan: left promiscuous mode [ 71.453468][ T5282] qmi_wwan 5-1:0.52: More than one union descriptor, skipping ... [ 71.495863][ T5282] qmi_wwan 5-1:0.52: probe with driver qmi_wwan failed with error -22 [ 71.588704][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.595382][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.597793][ T5282] usb 5-1: USB disconnect, device number 5 [ 71.928206][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.937114][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.945104][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.953092][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.962680][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.970117][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.138905][ T5234] usbtest 3-1:6.30: usb test device [ 72.144169][ T5234] usbtest 3-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 72.221671][ T5234] usb 3-1: USB disconnect, device number 5 [ 72.263627][ T5501] syz.4.56 (5501): drop_caches: 2 [ 72.306036][ T5527] netlink: 'syz.1.57': attribute type 9 has an invalid length. [ 72.313905][ T5527] netlink: 391 bytes leftover after parsing attributes in process `syz.1.57'. [ 72.520543][ T5228] Bluetooth: hci2: command tx timeout [ 72.893351][ T127] team0 (unregistering): Port device team_slave_1 removed [ 72.999495][ T127] team0 (unregistering): Port device team_slave_0 removed [ 73.259896][ T5281] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 73.448450][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 73.464655][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.479650][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.496679][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 73.512017][ T5281] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 73.523400][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.537612][ T5281] usb 3-1: config 0 descriptor?? [ 73.715306][ T5426] chnl_net:caif_netlink_parms(): no params data found [ 73.832066][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 73.959669][ T5281] sony 0003:054C:0268.0002: collection stack underflow [ 73.986848][ T5281] sony 0003:054C:0268.0002: item 0 4 0 12 parsing failed [ 73.994444][ T5281] sony 0003:054C:0268.0002: parse failed [ 74.026729][ T5281] sony 0003:054C:0268.0002: probe with driver sony failed with error -22 [ 74.125314][ T5228] Bluetooth: hci4: command tx timeout [ 74.213642][ T5549] vlan2: entered promiscuous mode [ 74.245468][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.278236][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.285654][ T5426] bridge_slave_0: entered allmulticast mode [ 74.314022][ T5284] usb 3-1: USB disconnect, device number 6 [ 74.343602][ T5426] bridge_slave_0: entered promiscuous mode [ 74.378558][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.392765][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.412771][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.422383][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.431843][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.443016][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.455036][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.466927][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.474274][ T5426] bridge_slave_1: entered allmulticast mode [ 74.492479][ T5426] bridge_slave_1: entered promiscuous mode [ 74.571356][ T5426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.584868][ T5426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.596829][ T5240] Bluetooth: hci2: command tx timeout [ 74.628565][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.635715][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.643327][ T5524] bridge_slave_0: entered allmulticast mode [ 74.650446][ T5524] bridge_slave_0: entered promiscuous mode [ 74.670880][ T5426] team0: Port device team_slave_0 added [ 74.692297][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.702382][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.710509][ T5524] bridge_slave_1: entered allmulticast mode [ 74.717932][ T5524] bridge_slave_1: entered promiscuous mode [ 74.730451][ T5426] team0: Port device team_slave_1 added [ 74.825832][ T127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.901211][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.915176][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.948221][ T5426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.965338][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.972490][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.999297][ T5426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.020114][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.032469][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.079607][ T127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.261752][ T127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.304282][ T5426] hsr_slave_0: entered promiscuous mode [ 75.311549][ T5426] hsr_slave_1: entered promiscuous mode [ 75.319597][ T5426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.328521][ T5426] Cannot create hsr debugfs directory [ 75.369979][ T127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.387014][ T5281] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.417850][ T5524] team0: Port device team_slave_0 added [ 75.469558][ T5284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 75.479637][ T5524] team0: Port device team_slave_1 added [ 75.546947][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 75.554945][ T5281] usb 2-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 75.567530][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.588795][ T5281] usb 2-1: config 0 descriptor?? [ 75.604102][ T5281] smsc75xx v1.0.0 [ 75.612809][ T5281] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 75.623671][ T5281] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 75.650875][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.657951][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.684967][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.695605][ T5284] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 75.697530][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.713335][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.718950][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.747686][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.774425][ T5284] usb 3-1: Product: syz [ 75.779025][ T5284] usb 3-1: Manufacturer: syz [ 75.783764][ T5284] usb 3-1: SerialNumber: syz [ 75.822853][ T5284] usb 3-1: config 0 descriptor?? [ 75.947862][ T127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.042467][ T5589] chnl_net:caif_netlink_parms(): no params data found [ 76.070949][ T5524] hsr_slave_0: entered promiscuous mode [ 76.085620][ T5524] hsr_slave_1: entered promiscuous mode [ 76.095252][ T5524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.108213][ T5524] Cannot create hsr debugfs directory [ 76.157382][ T127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.196694][ T5240] Bluetooth: hci4: command tx timeout [ 76.516995][ T5240] Bluetooth: hci0: command tx timeout [ 76.683119][ T1166] cfg80211: failed to load regulatory.db [ 76.689651][ T5240] Bluetooth: hci2: command tx timeout [ 76.735672][ T127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.735999][ T5284] usb 3-1: Firmware version (0.0) predates our first public release. [ 76.833527][ T937] usb 2-1: USB disconnect, device number 5 [ 76.839779][ T5284] usb 3-1: Please update to version 0.2 or newer [ 76.921962][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 76.941674][ T127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.066752][ T5284] usb 3-1: USB disconnect, device number 7 [ 77.248886][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.284555][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.295338][ T5589] bridge_slave_0: entered allmulticast mode [ 77.310936][ T5589] bridge_slave_0: entered promiscuous mode [ 77.390457][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.420854][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.429620][ T5589] bridge_slave_1: entered allmulticast mode [ 77.436150][ T5589] bridge_slave_1: entered promiscuous mode [ 77.732111][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.779807][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.865125][ T5426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.886347][ T5426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.904117][ T127] bridge_slave_1: left allmulticast mode [ 77.927770][ T127] bridge_slave_1: left promiscuous mode [ 77.943849][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.967910][ T127] bridge_slave_0: left allmulticast mode [ 77.973598][ T127] bridge_slave_0: left promiscuous mode [ 78.001175][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.065847][ T127] bridge_slave_1: left allmulticast mode [ 78.126596][ T127] bridge_slave_1: left promiscuous mode [ 78.132363][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.179499][ T127] bridge_slave_0: left allmulticast mode [ 78.185280][ T127] bridge_slave_0: left promiscuous mode [ 78.202500][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.276999][ T5240] Bluetooth: hci4: command tx timeout [ 78.447045][ T937] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 78.605363][ T5240] Bluetooth: hci0: command tx timeout [ 78.612464][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 78.618974][ T937] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 78.631787][ T937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 78.639679][ T937] usb 3-1: can't read configurations, error -61 [ 78.741305][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.752747][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.764566][ T127] bond0 (unregistering): Released all slaves [ 78.780979][ T937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 78.870203][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.881816][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.892918][ T127] bond0 (unregistering): Released all slaves [ 78.942029][ T5426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.978839][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 78.985864][ T937] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 78.991170][ T5426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.008024][ T937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 79.036643][ T937] usb 3-1: can't read configurations, error -61 [ 79.051489][ T937] usb usb3-port1: attempt power cycle [ 79.070862][ T5589] team0: Port device team_slave_0 added [ 79.168841][ T5589] team0: Port device team_slave_1 added [ 79.211769][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.220304][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.248201][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.275041][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.282268][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.309635][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.397772][ T937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 79.409961][ T5589] hsr_slave_0: entered promiscuous mode [ 79.425142][ T5589] hsr_slave_1: entered promiscuous mode [ 79.431563][ T5589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.439859][ T5589] Cannot create hsr debugfs directory [ 79.445697][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 79.451758][ T937] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 79.473768][ T937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 79.481992][ T5281] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 79.506187][ T937] usb 3-1: can't read configurations, error -61 [ 79.659569][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 79.665148][ T937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 79.677026][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.697398][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.707497][ T5281] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 79.717092][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.726244][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 79.733025][ T937] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 79.742457][ T5281] usb 2-1: config 0 descriptor?? [ 79.761032][ T937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 79.771352][ T937] usb 3-1: can't read configurations, error -61 [ 79.778582][ T937] usb usb3-port1: unable to enumerate USB device [ 79.830546][ T5524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.847767][ T5524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.863691][ T127] hsr_slave_0: left promiscuous mode [ 79.873937][ T127] hsr_slave_1: left promiscuous mode [ 79.882100][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.889843][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.898514][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.906047][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.918665][ T127] hsr_slave_0: left promiscuous mode [ 79.924449][ T127] hsr_slave_1: left promiscuous mode [ 79.931415][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.939372][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.948011][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.955504][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.996784][ T127] veth1_macvtap: left promiscuous mode [ 80.002382][ T127] veth0_macvtap: left promiscuous mode [ 80.008135][ T127] veth1_vlan: left promiscuous mode [ 80.014228][ T127] veth0_vlan: left promiscuous mode [ 80.020924][ T127] veth1_macvtap: left promiscuous mode [ 80.026437][ T127] veth0_macvtap: left promiscuous mode [ 80.033572][ T127] veth1_vlan: left promiscuous mode [ 80.038991][ T127] veth0_vlan: left promiscuous mode [ 80.304568][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.324748][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.359757][ T5240] Bluetooth: hci4: command tx timeout [ 80.369491][ T5281] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 80.376783][ T5281] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 80.383705][ T5281] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 80.390802][ T5281] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 80.399564][ T5281] ortek 0003:05A4:1700.0003: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.1-1/input0 [ 80.586362][ T127] team0 (unregistering): Port device team_slave_1 removed [ 80.648620][ T127] team0 (unregistering): Port device team_slave_0 removed [ 80.686692][ T5240] Bluetooth: hci0: command tx timeout [ 81.406303][ T127] team0 (unregistering): Port device team_slave_1 removed [ 81.462391][ T127] team0 (unregistering): Port device team_slave_0 removed [ 81.903153][ T5524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.937257][ T5234] usb 2-1: USB disconnect, device number 6 [ 81.971598][ T5426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.985773][ T5524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.074346][ T5426] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.129114][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.137107][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.176269][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.183542][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.336167][ T5426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.433134][ T5426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.534984][ T5589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.574959][ T5589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.611568][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.622737][ T5681] warning: `syz.1.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.637551][ T5589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.657618][ T5589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.703524][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.744276][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.757546][ T5228] Bluetooth: hci0: command tx timeout [ 82.762007][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.772295][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.774170][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.786566][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.787993][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.807687][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.815107][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.858487][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.865895][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.923550][ T5426] veth0_vlan: entered promiscuous mode [ 82.929833][ T5234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.979036][ T127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.036474][ T5426] veth1_vlan: entered promiscuous mode [ 83.098205][ T5234] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 83.106416][ T5234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.127644][ T127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.137541][ T5234] usb 2-1: config 0 has no interface number 0 [ 83.144037][ T5234] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 83.155623][ T5234] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.173299][ T5234] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 83.182560][ T5234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.190844][ T5234] usb 2-1: Product: syz [ 83.195077][ T5234] usb 2-1: Manufacturer: syz [ 83.199802][ T5234] usb 2-1: SerialNumber: syz [ 83.213310][ T5234] usb 2-1: config 0 descriptor?? [ 83.214435][ T127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.260222][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.336093][ T127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.401919][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.459841][ T5426] veth0_macvtap: entered promiscuous mode [ 83.480062][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.495154][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.502339][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.539495][ T5426] veth1_macvtap: entered promiscuous mode [ 83.628567][ T5683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.638010][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.645157][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.653660][ T5683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.708806][ T5234] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 83.740662][ T5234] usb 2-1: USB disconnect, device number 7 [ 83.745587][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.789216][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.808776][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.819982][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.854837][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.941533][ T5524] veth0_vlan: entered promiscuous mode [ 83.966133][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.986597][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.007527][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.018638][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.067238][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.136059][ T5685] chnl_net:caif_netlink_parms(): no params data found [ 84.161125][ T127] bridge_slave_1: left allmulticast mode [ 84.167056][ T127] bridge_slave_1: left promiscuous mode [ 84.176904][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.185927][ T127] bridge_slave_0: left allmulticast mode [ 84.192050][ T127] bridge_slave_0: left promiscuous mode [ 84.198963][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.902776][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.926817][ T5231] Bluetooth: hci1: command tx timeout [ 84.971859][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.028219][ T127] bond0 (unregistering): Released all slaves [ 85.082317][ T5426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095868][ T5426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.114146][ T5426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123385][ T5426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.179914][ T5524] veth1_vlan: entered promiscuous mode [ 85.198412][ T5748] netpci0: tun_chr_ioctl cmd 2148553947 [ 85.234837][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.312664][ T5750] geneve0: entered promiscuous mode [ 85.318401][ T5750] macvlan2: entered promiscuous mode [ 85.324194][ T5750] macvlan2: entered allmulticast mode [ 85.346605][ T5750] geneve0: entered allmulticast mode [ 85.354078][ T5750] geneve0: left allmulticast mode [ 85.359582][ T5750] geneve0: left promiscuous mode [ 85.653177][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.693620][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.709823][ T5685] bridge_slave_0: entered allmulticast mode [ 85.719204][ T5685] bridge_slave_0: entered promiscuous mode [ 85.732468][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.740004][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.747972][ T5685] bridge_slave_1: entered allmulticast mode [ 85.754584][ T5685] bridge_slave_1: entered promiscuous mode [ 85.809782][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.862960][ T127] hsr_slave_0: left promiscuous mode [ 85.872231][ T127] hsr_slave_1: left promiscuous mode [ 85.878895][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.886371][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.897516][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.904952][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.923927][ T127] veth1_macvtap: left promiscuous mode [ 85.929501][ T127] veth0_macvtap: left promiscuous mode [ 85.935078][ T127] veth1_vlan: left promiscuous mode [ 85.940530][ T127] veth0_vlan: left promiscuous mode [ 86.116963][ T1166] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 86.287115][ T1166] usb 2-1: Using ep0 maxpacket: 32 [ 86.302806][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 86.314112][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 86.315050][ T127] team0 (unregistering): Port device team_slave_1 removed [ 86.324339][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 86.344214][ T1166] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 86.355060][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.365402][ T1166] usb 2-1: Product: syz [ 86.369695][ T1166] usb 2-1: Manufacturer: syz [ 86.374330][ T1166] usb 2-1: SerialNumber: syz [ 86.387991][ T1166] usb 2-1: config 0 descriptor?? [ 86.404517][ T127] team0 (unregistering): Port device team_slave_0 removed [ 86.699160][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.722798][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.783367][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.797904][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.805506][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.813179][ T5524] veth0_macvtap: entered promiscuous mode [ 86.863935][ T5524] veth1_macvtap: entered promiscuous mode [ 86.872334][ T5589] veth0_vlan: entered promiscuous mode [ 86.935014][ T5685] team0: Port device team_slave_0 added [ 86.959776][ T5685] team0: Port device team_slave_1 added [ 86.988612][ T5589] veth1_vlan: entered promiscuous mode [ 86.996824][ T5231] Bluetooth: hci1: command tx timeout [ 87.005173][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.032386][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.047705][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.066284][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.079245][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.123083][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.132884][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.164120][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.188488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.188518][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.196326][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.231983][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.243226][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.263663][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.281770][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.308087][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.315368][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.342046][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.372872][ T5524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.382589][ T5524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.392112][ T5524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.402008][ T5524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.416906][ T5285] usb 2-1: USB disconnect, device number 8 [ 87.599830][ T5685] hsr_slave_0: entered promiscuous mode [ 87.617231][ T5685] hsr_slave_1: entered promiscuous mode [ 87.627791][ T5795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.92'. [ 87.648094][ T5589] veth0_macvtap: entered promiscuous mode [ 87.726898][ T5589] veth1_macvtap: entered promiscuous mode [ 87.892295][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.923781][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.945505][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.966303][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.998004][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.016836][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.031484][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.042065][ T5281] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.089224][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.098603][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.115994][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.128357][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.140491][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.151366][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.163751][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.178633][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.193706][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.218155][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 88.238347][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.267540][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.296913][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 88.317016][ T5589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.325963][ T5589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.341315][ T5281] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 88.350553][ T5589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.365951][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.374354][ T5589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.391408][ T5281] usb 1-1: config 0 descriptor?? [ 88.445128][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.474061][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.680692][ T3925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.723137][ T3925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.815641][ T5281] sony 0003:054C:0268.0004: collection stack underflow [ 88.825483][ T3925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.849498][ T5281] sony 0003:054C:0268.0004: item 0 4 0 12 parsing failed [ 88.863849][ T3925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.896724][ T5281] sony 0003:054C:0268.0004: parse failed [ 88.911237][ T5281] sony 0003:054C:0268.0004: probe with driver sony failed with error -22 [ 89.078679][ T5803] vlan2: entered promiscuous mode [ 89.081370][ T5231] Bluetooth: hci1: command tx timeout [ 89.083988][ T5803] bridge0: entered promiscuous mode [ 89.108532][ T5803] team0: Port device vlan2 added [ 89.374624][ T5685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.419007][ T5685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.483990][ T5685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.505051][ T5285] usb 1-1: USB disconnect, device number 3 [ 89.538079][ T5685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.712778][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.729689][ T5685] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.762965][ T5685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.773583][ T5685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.801549][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.838286][ T5685] veth0_vlan: entered promiscuous mode [ 89.849821][ T5685] veth1_vlan: entered promiscuous mode [ 89.873589][ T5685] veth0_macvtap: entered promiscuous mode [ 89.882874][ T5685] veth1_macvtap: entered promiscuous mode [ 89.898112][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.908651][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.920596][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.931587][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.941611][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.952121][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.962104][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.972589][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.983948][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.994438][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.005013][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.015006][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.026244][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.036660][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.047229][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.057158][ T5685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.067833][ T5685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.079991][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.090229][ T5685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099035][ T5685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107828][ T5685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.116692][ T5685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.220855][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.228057][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.244401][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.251582][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.483222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.501847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.640968][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.669805][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.773351][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 90.810702][ T5866] pimreg: entered allmulticast mode [ 90.910521][ T5870] fuse: Bad value for 'fd' [ 91.111622][ T5866] pimreg: left allmulticast mode [ 91.157563][ T5240] Bluetooth: hci1: command tx timeout [ 91.425299][ T5893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.110'. [ 91.458527][ T5893] veth0_macvtap: left promiscuous mode [ 91.482887][ T5893] macvtap0: entered promiscuous mode [ 91.532649][ T5893] macvtap0: refused to change device tx_queue_len [ 91.547301][ T5894] netlink: 52 bytes leftover after parsing attributes in process `syz.2.110'. [ 91.573648][ T5894] macvtap0: refused to change device tx_queue_len [ 92.037737][ T5907] tipc: Enabling of bearer rejected, failed to enable media [ 92.092374][ T5905] input: syz1 as /devices/virtual/input/input8 [ 92.378974][ T5920] fuse: Unknown parameter '0x0000000000000004' [ 92.416952][ T5302] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 92.546695][ T5285] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.556799][ T25] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 92.588595][ T5302] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.601819][ T5302] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.626577][ T5302] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.626952][ T1166] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 92.637919][ T5302] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 92.637949][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.648887][ T5909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.699451][ T5285] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 92.716606][ T25] usb 1-1: device descriptor read/64, error -71 [ 92.725347][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.747281][ T5285] usb 4-1: config 0 descriptor?? [ 92.764860][ T5285] gspca_main: spca508-2.14.0 probing 8086:0110 [ 92.816725][ T1166] usb 3-1: Using ep0 maxpacket: 16 [ 92.826270][ T1166] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 92.852872][ T1166] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 92.862557][ T1166] usb 3-1: config 0 has no interface number 1 [ 92.875912][ T1166] usb 3-1: config 0 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.890087][ T5302] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 92.897160][ T1166] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 198, using maximum allowed: 30 [ 92.897225][ T1166] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 92.899839][ T1166] usb 3-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.01 [ 92.940030][ T1166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.946868][ T5302] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9 [ 92.948753][ T1166] usb 3-1: Product: syz [ 92.962024][ T1166] usb 3-1: Manufacturer: syz [ 92.968469][ T1166] usb 3-1: SerialNumber: syz [ 92.992118][ T1166] usb 3-1: config 0 descriptor?? [ 92.997484][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 93.021599][ T5302] usb 2-1: USB disconnect, device number 9 [ 93.027542][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 93.069168][ T1166] usb-storage 3-1:0.216: USB Mass Storage device detected [ 93.106155][ T1166] usb-storage 3-1:0.216: Quirks match for vid 07af pid 0004: 4 [ 93.146921][ T25] usb 1-1: device descriptor read/64, error -71 [ 93.175803][ T5285] gspca_spca508: reg_read err -71 [ 93.185587][ T5285] gspca_spca508: reg_read err -71 [ 93.194641][ T5285] gspca_spca508: reg_read err -71 [ 93.207906][ T5285] gspca_spca508: reg_read err -71 [ 93.214096][ T5285] gspca_spca508: reg write: error -71 [ 93.225375][ T5285] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 93.237604][ T5240] Bluetooth: hci1: command 0x0405 tx timeout [ 93.253153][ T5285] usb 4-1: USB disconnect, device number 4 [ 93.259610][ T25] usb usb1-port1: attempt power cycle [ 93.276342][ T1166] usb-storage 3-1:0.0: USB Mass Storage device detected [ 93.297576][ T1166] usb-storage 3-1:0.0: Quirks match for vid 07af pid 0004: 4 [ 93.381102][ T1166] usb 3-1: USB disconnect, device number 12 [ 93.596714][ T25] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 93.617116][ T25] usb 1-1: device descriptor read/8, error -71 [ 93.646679][ T5282] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.801905][ T5282] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 93.817520][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.833902][ T5282] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 93.845007][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.853408][ T5944] usb usb8: usbfs: process 5944 (syz.1.126) did not claim interface 0 before use [ 93.866652][ T25] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 93.874446][ T5282] usb 5-1: Product: syz [ 93.897264][ T5282] usb 5-1: Manufacturer: syz [ 93.902777][ T5282] usb 5-1: SerialNumber: syz [ 93.907892][ T25] usb 1-1: device descriptor read/8, error -71 [ 93.930137][ T5282] usb 5-1: config 0 descriptor?? [ 94.017620][ T25] usb usb1-port1: unable to enumerate USB device [ 94.118923][ T5285] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 94.156863][ T5282] redrat3 5-1:0.0: Couldn't find all endpoints [ 94.180797][ T5282] usb 5-1: USB disconnect, device number 6 [ 94.266688][ T5285] usb 2-1: device descriptor read/64, error -71 [ 94.506733][ T5285] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 94.576015][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 94.576034][ T29] audit: type=1326 audit(1728196134.334:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.604819][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.610956][ T29] audit: type=1326 audit(1728196134.334:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.656792][ T29] audit: type=1326 audit(1728196134.334:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.680576][ T29] audit: type=1326 audit(1728196134.404:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.703035][ T29] audit: type=1326 audit(1728196134.404:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.781109][ T29] audit: type=1326 audit(1728196134.544:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.803540][ T29] audit: type=1326 audit(1728196134.544:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.825761][ T29] audit: type=1326 audit(1728196134.544:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.848663][ T29] audit: type=1326 audit(1728196134.544:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.879974][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.887723][ T5285] usb 2-1: device descriptor read/64, error -71 [ 94.894208][ T29] audit: type=1326 audit(1728196134.644:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd14f37dff9 code=0x7ffc0000 [ 94.996897][ T5285] usb usb2-port1: attempt power cycle [ 95.086755][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 95.096302][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 95.117894][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31265, setting to 1024 [ 95.134024][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.146194][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 95.160910][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 95.170783][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 95.188616][ T5282] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 95.203552][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 95.212042][ T5282] usb 5-1: Product: syz [ 95.216396][ T5282] usb 5-1: Manufacturer: syz [ 95.230323][ T5282] usb 5-1: SerialNumber: syz [ 95.239755][ T5282] usb 5-1: config 0 descriptor?? [ 95.256235][ T5282] usb 5-1: NFC: intf ffff88807d111000 id ffffffff8f31a140 [ 95.324788][ T5948] syz.2.127: vmalloc error: size 3919872, failed to allocated page array size 7656, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.345448][ T5285] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 95.368899][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.2.127 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 95.379548][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.389640][ T5948] Call Trace: [ 95.392952][ T5948] [ 95.395907][ T5948] dump_stack_lvl+0x241/0x360 [ 95.400646][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.405982][ T5948] ? __pfx__printk+0x10/0x10 [ 95.410624][ T5948] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 95.417078][ T5948] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 95.423625][ T5948] warn_alloc+0x278/0x410 [ 95.428086][ T5948] ? __pfx_warn_alloc+0x10/0x10 [ 95.432984][ T5948] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 95.439177][ T5948] ? __get_vm_area_node+0x23d/0x270 [ 95.444503][ T5948] __vmalloc_node_range_noprof+0x691/0x13f0 [ 95.450462][ T5948] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 95.456482][ T5948] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.462838][ T5948] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 95.469040][ T5948] ? __get_vm_area_node+0x23d/0x270 [ 95.474453][ T5948] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 95.480380][ T5948] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 95.486574][ T5948] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 95.492349][ T5948] ? rcu_is_watching+0x15/0xb0 [ 95.497147][ T5948] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.503595][ T5948] ? rcu_is_watching+0x15/0xb0 [ 95.508397][ T5948] ? trace_kmalloc+0x1f/0xd0 [ 95.513019][ T5948] ? __kmalloc_node_noprof+0x247/0x440 [ 95.518513][ T5948] ? __kvmalloc_node_noprof+0x72/0x190 [ 95.524007][ T5948] __kvmalloc_node_noprof+0x142/0x190 [ 95.529422][ T5948] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 95.535664][ T5948] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 95.541694][ T5948] ? tpg_update_mv_step+0x361/0x4f0 [ 95.546935][ T5948] vivid_update_format_cap+0x133c/0x2090 [ 95.552604][ T5948] ? v4l2_valid_dv_timings+0x81f/0xf60 [ 95.558109][ T5948] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 95.564144][ T5948] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 95.570006][ T5948] __video_do_ioctl+0xc23/0xdd0 [ 95.574912][ T5948] ? __pfx___video_do_ioctl+0x10/0x10 [ 95.580324][ T5948] ? __might_fault+0xc6/0x120 [ 95.585044][ T5948] video_usercopy+0x89b/0x1180 [ 95.589863][ T5948] ? __pfx___video_do_ioctl+0x10/0x10 [ 95.595279][ T5948] ? __pfx_video_usercopy+0x10/0x10 [ 95.600615][ T5948] ? __fget_files+0x29/0x470 [ 95.605238][ T5948] ? __fget_files+0x3f3/0x470 [ 95.609953][ T5948] v4l2_ioctl+0x189/0x1e0 [ 95.614317][ T5948] ? __pfx_v4l2_ioctl+0x10/0x10 [ 95.619215][ T5948] __se_sys_ioctl+0xf9/0x170 [ 95.623854][ T5948] do_syscall_64+0xf3/0x230 [ 95.628392][ T5948] ? clear_bhb_loop+0x35/0x90 [ 95.633109][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.639038][ T5948] RIP: 0033:0x7fb379f7dff9 [ 95.643452][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.664125][ T5948] RSP: 002b:00007fb37ad26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.664170][ T5948] RAX: ffffffffffffffda RBX: 00007fb37a135f80 RCX: 00007fb379f7dff9 [ 95.664184][ T5948] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 95.664197][ T5948] RBP: 00007fb379ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 95.664209][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.664222][ T5948] R13: 0000000000000000 R14: 00007fb37a135f80 R15: 00007fb37a25fa28 [ 95.664251][ T5948] [ 95.729115][ T5948] Mem-Info: [ 95.732390][ T5948] active_anon:6838 inactive_anon:0 isolated_anon:0 [ 95.732390][ T5948] active_file:11050 inactive_file:38255 isolated_file:0 [ 95.732390][ T5948] unevictable:768 dirty:181 writeback:0 [ 95.732390][ T5948] slab_reclaimable:8915 slab_unreclaimable:96640 [ 95.732390][ T5948] mapped:23782 shmem:3321 pagetables:894 [ 95.732390][ T5948] sec_pagetables:0 bounce:0 [ 95.732390][ T5948] kernel_misc_reclaimable:0 [ 95.732390][ T5948] free:1290998 free_pcp:489 free_cma:0 [ 95.744888][ T5285] usb 2-1: device descriptor read/8, error -71 [ 95.777476][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.805795][ T5948] Node 0 active_anon:27152kB inactive_anon:0kB active_file:44200kB inactive_file:152944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95128kB dirty:724kB writeback:0kB shmem:11548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10428kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no [ 95.838184][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.862628][ T5282] usb 5-1: USB disconnect, device number 7 [ 95.868842][ T5948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 95.917117][ T5948] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.944699][ T5948] lowmem_reserve[]: 0 2465 2466 0 0 [ 95.956266][ T5948] Node 0 DMA32 free:1217964kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:27116kB inactive_anon:0kB active_file:44200kB inactive_file:152112kB unevictable:1536kB writepending:720kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:520kB local_pcp:128kB free_cma:0kB [ 96.001494][ T5948] lowmem_reserve[]: 0 0 0 0 0 [ 96.006317][ T5948] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.035891][ T5948] lowmem_reserve[]: 0 0 0 0 0 [ 96.041278][ T5948] Node 1 Normal free:3934396kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.046813][ T5285] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.071373][ T5948] lowmem_reserve[]: 0 0 0 0 0 [ 96.083313][ T5948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.096847][ T5948] Node 0 DMA32: 86*4kB (UM) 80*8kB (UME) 152*16kB (UME) 346*32kB (UME) 302*64kB (UME) 38*128kB (UME) 22*256kB (UM) 14*512kB (UM) 9*1024kB (UM) 1*2048kB (E) 282*4096kB (M) = 1217816kB [ 96.118757][ T5948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.130661][ T5948] Node 1 Normal: 187*4kB (UE) 46*8kB (UME) 36*16kB (UME) 177*32kB (UME) 86*64kB (UME) 31*128kB (UME) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 953*4096kB (ME) = 3934396kB [ 96.150153][ T5285] usb 2-1: device descriptor read/8, error -71 [ 96.156418][ T5948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.167580][ T5948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.177028][ T5948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.187511][ T5948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.197371][ T5948] 52579 total pagecache pages [ 96.202220][ T5948] 0 pages in swap cache [ 96.206404][ T5948] Free swap = 124984kB [ 96.210623][ T5948] Total swap = 124996kB [ 96.214875][ T5948] 2097051 pages RAM [ 96.219140][ T5948] 0 pages HighMem/MovableOnly [ 96.223874][ T5948] 427076 pages reserved [ 96.228168][ T5948] 0 pages cma reserved [ 96.246633][ T5302] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.256914][ T5285] usb usb2-port1: unable to enumerate USB device [ 96.358849][ T5976] mmap: syz.0.137 (5976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.409195][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.426569][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.436458][ T5302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.453631][ T5302] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.462878][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.474845][ T5302] usb 4-1: config 0 descriptor?? [ 96.891099][ T5974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.965438][ T5983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.140'. [ 97.020873][ T5302] usbhid 4-1:0.0: can't add hid device: -71 [ 97.033147][ T5302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.075460][ T5302] usb 4-1: USB disconnect, device number 5 [ 98.000031][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 99.578272][ T29] kauditd_printk_skb: 911 callbacks suppressed [ 99.578290][ T29] audit: type=1326 audit(1728196139.344:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14f319959 code=0x7ffc0000 [ 99.657217][ T29] audit: type=1326 audit(1728196139.374:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd14f374fa7 code=0x7ffc0000 [ 99.846792][ T29] audit: type=1326 audit(1728196139.374:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14f319959 code=0x7ffc0000 [ 99.903620][ T29] audit: type=1326 audit(1728196139.374:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd14f374fa7 code=0x7ffc0000 [ 100.048541][ T29] audit: type=1326 audit(1728196139.584:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14f319959 code=0x7ffc0000 [ 100.125937][ T6030] fuse: Invalid rootmode [ 103.046701][ T29] audit: type=1326 audit(1728196139.584:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd14f374fa7 code=0x7ffc0000 [ 103.117253][ T29] audit: type=1326 audit(1728196139.584:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14f319959 code=0x7ffc0000 [ 103.208604][ T6034] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 103.312671][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.333360][ T29] audit: type=1326 audit(1728196139.584:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd14f374fa7 code=0x7ffc0000 [ 103.359706][ T6034] team0: Port device batadv0 added [ 103.365411][ T6032] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 103.396922][ T6032] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 103.487458][ T29] audit: type=1326 audit(1728196139.584:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14f319959 code=0x7ffc0000 [ 103.509984][ T5314] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 103.689746][ T5314] usb 2-1: Using ep0 maxpacket: 32 [ 103.707005][ T29] audit: type=1326 audit(1728196139.584:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd14f374fa7 code=0x7ffc0000 [ 103.740570][ T5314] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 103.771545][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.895133][ T5314] usb 2-1: config 0 descriptor?? [ 103.961664][ T5314] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 104.014247][ T5314] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 104.067465][ T5314] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 106.316784][ T5302] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.509129][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.549389][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.580026][ T5302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.616964][ T5302] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.642984][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.674768][ T5302] usb 4-1: config 0 descriptor?? [ 111.437507][ T6088] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(15201290523898) <= P.seqno(0) <= S.SWH(15201290523972)) and (P.ackno exists or LAWL(81161107021095) <= P.ackno(81161107021096) <= S.AWH(81161107021096), sending SYNC... [ 111.546942][ T5302] usbhid 4-1:0.0: can't add hid device: -71 [ 111.560434][ T5302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.610635][ T5302] usb 4-1: USB disconnect, device number 6 [ 112.124925][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.134488][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.143982][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.154805][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.164207][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.174350][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.260985][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.276945][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.297587][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.305680][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.314083][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 112.322496][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.277030][ T5231] Bluetooth: hci5: command tx timeout [ 114.356778][ T5231] Bluetooth: hci6: command tx timeout [ 117.776781][ T5231] Bluetooth: hci5: command tx timeout [ 117.782305][ T5231] Bluetooth: hci6: command tx timeout [ 117.831281][ T24] sched: DL replenish lagged too much [ 118.714246][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.736879][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.744982][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.753046][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.760865][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 118.768423][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.951938][ T5228] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 118.962047][ T5228] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 118.970453][ T5228] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 118.983494][ T5228] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 118.992500][ T5228] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 119.003382][ T5228] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 119.345922][ T5314] usb 2-1: USB disconnect, device number 14 [ 119.802224][ T4622] Bluetooth: hci5: command tx timeout [ 119.809720][ T5240] Bluetooth: hci6: command tx timeout [ 121.876661][ T4622] Bluetooth: hci5: command tx timeout [ 121.882151][ T5240] Bluetooth: hci6: command tx timeout [ 125.082449][ T4622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 125.106720][ T4622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 125.115489][ T4622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 125.123738][ T4622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 125.131681][ T4622] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 125.139159][ T4622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 132.998867][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005206][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.647129][ T5228] Bluetooth: hci7: command tx timeout [ 180.653534][ T5228] Bluetooth: hci8: command tx timeout [ 180.659305][ T5240] Bluetooth: hci9: command tx timeout [ 182.706866][ T5228] Bluetooth: hci9: command tx timeout [ 182.776853][ T5228] Bluetooth: hci8: command tx timeout [ 182.782333][ T5228] Bluetooth: hci7: command tx timeout [ 185.196589][ T5228] Bluetooth: hci9: command tx timeout [ 185.202065][ T5228] Bluetooth: hci7: command tx timeout [ 185.207670][ T5240] Bluetooth: hci8: command tx timeout [ 188.486205][ T5231] Bluetooth: hci7: command tx timeout [ 188.491726][ T5231] Bluetooth: hci8: command tx timeout [ 188.497267][ T5231] Bluetooth: hci9: command tx timeout [ 192.318986][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 194.448005][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.454343][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.640291][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.648239][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.660598][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.677438][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.685733][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.694211][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.702111][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.710474][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.722857][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.730344][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.737757][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.746050][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.753526][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.764509][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.773206][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.780941][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.791282][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.812837][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.047999][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.057709][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.066076][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.075184][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.096675][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.105502][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.274409][ T4622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.290610][ T4622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.307914][ T4622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.322636][ T4622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.330444][ T4622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.347212][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.741277][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 199.918452][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.925719][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.937059][ T6125] bridge_slave_0: entered allmulticast mode [ 199.946080][ T6125] bridge_slave_0: entered promiscuous mode [ 199.962972][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.974244][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.985533][ T6125] bridge_slave_1: entered allmulticast mode [ 200.001402][ T6125] bridge_slave_1: entered promiscuous mode [ 200.123093][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.143200][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.244787][ T6125] team0: Port device team_slave_0 added [ 200.259925][ T6125] team0: Port device team_slave_1 added [ 200.339278][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.346352][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.381497][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.401279][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.413049][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.449389][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.553891][ T6125] hsr_slave_0: entered promiscuous mode [ 200.589233][ T6125] hsr_slave_1: entered promiscuous mode [ 200.615591][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.630433][ T6125] Cannot create hsr debugfs directory [ 200.836676][ T4622] Bluetooth: hci1: command tx timeout [ 200.916919][ T4622] Bluetooth: hci0: command tx timeout [ 200.923885][ T4622] Bluetooth: hci2: command tx timeout [ 200.959757][ T6125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.156722][ T4622] Bluetooth: hci3: command tx timeout [ 201.259276][ T6125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.396717][ T4622] Bluetooth: hci4: command tx timeout [ 202.916772][ T4622] Bluetooth: hci1: command tx timeout [ 203.000631][ T5231] Bluetooth: hci0: command tx timeout [ 203.007632][ T4622] Bluetooth: hci2: command tx timeout [ 203.236811][ T4622] Bluetooth: hci3: command tx timeout [ 203.476641][ T4622] Bluetooth: hci4: command tx timeout [ 204.996714][ T4622] Bluetooth: hci1: command tx timeout [ 205.076930][ T5231] Bluetooth: hci0: command tx timeout [ 205.085305][ T4622] Bluetooth: hci2: command tx timeout [ 205.316660][ T4622] Bluetooth: hci3: command tx timeout [ 205.556805][ T4622] Bluetooth: hci4: command tx timeout [ 207.076783][ T4622] Bluetooth: hci1: command tx timeout [ 207.156694][ T5231] Bluetooth: hci0: command tx timeout [ 207.162238][ T4622] Bluetooth: hci2: command tx timeout [ 207.396929][ T4622] Bluetooth: hci3: command tx timeout [ 207.636852][ T4622] Bluetooth: hci4: command tx timeout [ 237.476833][ T5240] Bluetooth: hci6: command 0x0406 tx timeout [ 237.482962][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 255.858286][ T4622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 255.868365][ T4622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 255.876315][ T4622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 255.885089][ T30] INFO: task syz.2.166:6085 blocked for more than 143 seconds. [ 255.893691][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.902425][ T4622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 255.926605][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.934355][ T4622] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 255.942857][ T4622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 255.980588][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 256.066714][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.075433][ T30] task:syz.2.166 state:D stack:27360 pid:6085 tgid:6084 ppid:5685 flags:0x00000004 [ 256.203455][ T30] Call Trace: [ 256.214349][ T30] [ 256.226478][ T30] __schedule+0x1895/0x4b30 [ 256.231064][ T30] ? __pfx___schedule+0x10/0x10 [ 256.266948][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.272041][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.306503][ T30] ? schedule+0x90/0x320 [ 256.310821][ T30] schedule+0x14b/0x320 [ 256.315013][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.405085][ T30] __mutex_lock+0x6a7/0xd70 [ 256.416744][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.422328][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 256.475807][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.493203][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 256.515918][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 256.526817][ T30] ? aa_sk_perm+0x96d/0xab0 [ 256.531384][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.566257][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 256.583551][ T30] ip_setsockopt+0x63/0x100 [ 256.604756][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.616647][ T30] do_sock_setsockopt+0x3af/0x720 [ 256.621737][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.646493][ T30] ? __fget_files+0x29/0x470 [ 256.651157][ T30] ? __fget_files+0x3f3/0x470 [ 256.655854][ T30] ? __fget_files+0x29/0x470 [ 256.676866][ T30] __sys_setsockopt+0x1a2/0x250 [ 256.681854][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 256.694406][ T30] do_syscall_64+0xf3/0x230 [ 256.699099][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.703806][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.718673][ T30] RIP: 0033:0x7fb379f7dff9 [ 256.723135][ T30] RSP: 002b:00007fb37ad26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.737866][ T30] RAX: ffffffffffffffda RBX: 00007fb37a135f80 RCX: 00007fb379f7dff9 [ 256.746267][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 256.760575][ T30] RBP: 00007fb379ff0296 R08: 000000000000000c R09: 0000000000000000 [ 256.772498][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 256.784158][ T30] R13: 0000000000000000 R14: 00007fb37a135f80 R15: 00007fb37a25fa28 [ 256.797326][ T30] [ 256.802506][ T30] INFO: task syz.2.166:6087 blocked for more than 144 seconds. [ 256.818168][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 256.833493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.850737][ T30] task:syz.2.166 state:D stack:27392 pid:6087 tgid:6084 ppid:5685 flags:0x00000004 [ 256.864755][ T30] Call Trace: [ 256.871705][ T30] [ 256.874674][ T30] __schedule+0x1895/0x4b30 [ 256.883049][ T30] ? __pfx___schedule+0x10/0x10 [ 256.891528][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.901405][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.910594][ T30] ? schedule+0x90/0x320 [ 256.914881][ T30] schedule+0x14b/0x320 [ 256.923187][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.933433][ T30] __mutex_lock+0x6a7/0xd70 [ 256.942974][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.951502][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 256.960430][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.965511][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 256.974297][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 256.983417][ T30] ? aa_sk_perm+0x96d/0xab0 [ 256.993064][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 257.001627][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 257.010348][ T30] ip_setsockopt+0x63/0x100 [ 257.014891][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 257.024585][ T30] do_sock_setsockopt+0x3af/0x720 [ 257.036067][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 257.045347][ T30] ? __fget_files+0x29/0x470 [ 257.054867][ T30] ? __fget_files+0x3f3/0x470 [ 257.063443][ T30] ? __fget_files+0x29/0x470 [ 257.071882][ T30] __sys_setsockopt+0x1a2/0x250 [ 257.082066][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 257.091858][ T30] do_syscall_64+0xf3/0x230 [ 257.096395][ T30] ? clear_bhb_loop+0x35/0x90 [ 257.105020][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.114588][ T30] RIP: 0033:0x7fb379f7dff9 [ 257.122804][ T30] RSP: 002b:00007fb37ad05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.137347][ T30] RAX: ffffffffffffffda RBX: 00007fb37a136058 RCX: 00007fb379f7dff9 [ 257.145358][ T30] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000005 [ 257.161744][ T30] RBP: 00007fb379ff0296 R08: 000000000000001c R09: 0000000000000000 [ 257.184762][ T30] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 257.195242][ T30] R13: 0000000000000001 R14: 00007fb37a136058 R15: 00007fb37a25fa28 [ 257.206485][ T30] [ 257.213561][ T30] INFO: task syz-executor:6091 blocked for more than 144 seconds. [ 257.224143][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 257.266789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.275510][ T30] task:syz-executor state:D stack:26816 pid:6091 tgid:6091 ppid:1 flags:0x00004004 [ 257.295229][ T30] Call Trace: [ 257.298942][ T30] [ 257.301902][ T30] __schedule+0x1895/0x4b30 [ 257.313355][ T30] ? __pfx___schedule+0x10/0x10 [ 257.319610][ T30] ? __pfx_lock_release+0x10/0x10 [ 257.324681][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 257.338542][ T30] ? schedule+0x90/0x320 [ 257.344029][ T30] schedule+0x14b/0x320 [ 257.353210][ T30] schedule_preempt_disabled+0x13/0x30 [ 257.361596][ T30] __mutex_lock+0x6a7/0xd70 [ 257.366155][ T30] ? __mutex_lock+0x52a/0xd70 [ 257.376081][ T30] ? register_nexthop_notifier+0x84/0x290 [ 257.385491][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 257.395415][ T30] ? __asan_memset+0x23/0x50 [ 257.415179][ T30] register_nexthop_notifier+0x84/0x290 [ 257.421095][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 257.433846][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 257.441658][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 257.456200][ T30] ? __asan_memset+0x23/0x50 [ 257.461405][ T30] ops_init+0x31e/0x590 [ 257.465639][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 257.477564][ T30] setup_net+0x287/0x9e0 [ 257.481853][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 257.500428][ T30] ? __pfx_setup_net+0x10/0x10 [ 257.505256][ T30] copy_net_ns+0x33f/0x570 [ 257.513672][ T30] create_new_namespaces+0x425/0x7b0 [ 257.522626][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 257.532399][ T30] ksys_unshare+0x57d/0xa70 [ 257.542558][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 257.552440][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.564705][ T30] ? do_syscall_64+0x100/0x230 [ 257.573545][ T30] __x64_sys_unshare+0x38/0x40 [ 257.581948][ T30] do_syscall_64+0xf3/0x230 [ 257.592771][ T30] ? clear_bhb_loop+0x35/0x90 [ 257.601165][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.610815][ T30] RIP: 0033:0x7f81ce97f7f7 [ 257.615269][ T30] RSP: 002b:00007f81cec5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 257.630954][ T30] RAX: ffffffffffffffda RBX: 00007f81ce9f1a85 RCX: 00007f81ce97f7f7 [ 257.645382][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 257.661468][ T30] RBP: 0000000000000000 R08: 00007f81cf667d60 R09: 0000000000000000 [ 257.671232][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 257.686222][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 257.695711][ T30] [ 257.713113][ T30] INFO: task syz-executor:6093 blocked for more than 145 seconds. [ 257.726912][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 257.734597][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.754195][ T30] task:syz-executor state:D stack:26528 pid:6093 tgid:6093 ppid:1 flags:0x00004004 [ 257.766094][ T30] Call Trace: [ 257.775521][ T30] [ 257.781165][ T30] __schedule+0x1895/0x4b30 [ 257.785816][ T30] ? __pfx___schedule+0x10/0x10 [ 257.796982][ T30] ? __pfx_lock_release+0x10/0x10 [ 257.802063][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 257.814987][ T30] ? schedule+0x90/0x320 [ 257.819608][ T30] schedule+0x14b/0x320 [ 257.823897][ T30] schedule_preempt_disabled+0x13/0x30 [ 257.837591][ T30] __mutex_lock+0x6a7/0xd70 [ 257.842148][ T30] ? __mutex_lock+0x52a/0xd70 [ 257.855027][ T30] ? register_nexthop_notifier+0x84/0x290 [ 257.861110][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 257.866176][ T30] ? __asan_memset+0x23/0x50 [ 257.874206][ T30] register_nexthop_notifier+0x84/0x290 [ 257.883986][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 257.893679][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 257.904586][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 257.913282][ T30] ? __asan_memset+0x23/0x50 [ 257.922945][ T30] ops_init+0x31e/0x590 [ 257.929743][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 257.935160][ T30] setup_net+0x287/0x9e0 [ 257.946003][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 257.954831][ T30] ? __pfx_setup_net+0x10/0x10 [ 257.964918][ T30] copy_net_ns+0x33f/0x570 [ 257.970809][ T30] create_new_namespaces+0x425/0x7b0 [ 257.976193][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 257.991324][ T30] ksys_unshare+0x57d/0xa70 [ 257.995884][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 258.004618][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.015831][ T30] ? do_syscall_64+0x100/0x230 [ 258.025491][ T30] __x64_sys_unshare+0x38/0x40 [ 258.034316][ T30] do_syscall_64+0xf3/0x230 [ 258.042709][ T30] ? clear_bhb_loop+0x35/0x90 [ 258.050993][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.061678][ T30] RIP: 0033:0x7f1cde57f7f7 [ 258.066128][ T30] RSP: 002b:00007f1cde85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 258.080161][ T30] RAX: ffffffffffffffda RBX: 00007f1cde5f1a85 RCX: 00007f1cde57f7f7 [ 258.092976][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 258.103494][ T30] RBP: 0000000000000000 R08: 00007f1cdf267d60 R09: 0000000000000000 [ 258.116468][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 258.124474][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 258.138924][ T30] [ 258.142130][ T30] [ 258.142130][ T30] Showing all locks held in the system: [ 258.154995][ T30] 3 locks held by kworker/u8:0/11: [ 258.167484][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.186472][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.205508][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 258.216373][ T30] 1 lock held by khungtaskd/30: [ 258.226500][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 258.236415][ T30] 3 locks held by kworker/u8:3/36: [ 258.248836][ T30] #0: ffff88814b070948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.269969][ T30] #1: ffffc90000ac7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.286741][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 258.296324][ T30] 5 locks held by kworker/1:2/1166: [ 258.309962][ T30] 2 locks held by getty/4981: [ 258.314676][ T30] #0: ffff8880331ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.331674][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 258.343337][ T30] 3 locks held by kworker/1:3/5234: [ 258.354272][ T30] 3 locks held by kworker/1:5/5285: [ 258.364670][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.384269][ T30] #1: ffffc900044f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.395983][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 258.413900][ T30] 3 locks held by kworker/0:6/5302: [ 258.419598][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.444368][ T30] #1: ffffc90004517d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.464244][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 258.483264][ T30] 1 lock held by syz-executor/5426: [ 258.489075][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.506748][ T30] 1 lock held by syz-executor/5524: [ 258.512063][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.526525][ T30] 1 lock held by syz-executor/5685: [ 258.531753][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.549785][ T30] 1 lock held by syz.1.98/5852: [ 258.554664][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.569709][ T30] 1 lock held by syz.4.146/6009: [ 258.574673][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.586654][ T30] 1 lock held by syz.2.166/6085: [ 258.591620][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 258.611372][ T30] 1 lock held by syz.2.166/6087: [ 258.616347][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 258.633078][ T30] 2 locks held by syz-executor/6091: [ 258.644511][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.656574][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.673553][ T30] 2 locks held by syz-executor/6093: [ 258.680816][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.699616][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.714428][ T30] 2 locks held by syz-executor/6101: [ 258.722263][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.740900][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.752378][ T30] 2 locks held by syz-executor/6103: [ 258.763527][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.782217][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.792841][ T30] 2 locks held by syz-executor/6108: [ 258.805631][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.815486][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.833954][ T30] 2 locks held by syz-executor/6122: [ 258.839823][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.856303][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.874364][ T30] 2 locks held by syz-executor/6123: [ 258.881110][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.896487][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 258.913984][ T30] 8 locks held by syz-executor/6125: [ 258.919636][ T30] #0: ffff88802ecd6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 258.935447][ T30] #1: ffff888032144c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 258.945648][ T30] #2: ffff888027307968 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 258.962812][ T30] #3: ffffffff8f56fb28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 258.974688][ T30] #4: ffff88807be0d0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 258.993397][ T30] #5: ffff88807be09250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 259.004128][ T30] #6: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 259.021738][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 259.036101][ T30] 2 locks held by syz-executor/6127: [ 259.046384][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.065222][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.085197][ T30] 2 locks held by syz-executor/6130: [ 259.090867][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.110352][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.127061][ T30] [ 259.129420][ T30] ============================================= [ 259.129420][ T30] [ 259.145989][ T30] NMI backtrace for cpu 0 [ 259.150346][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 259.160861][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.170934][ T30] Call Trace: [ 259.174226][ T30] [ 259.177166][ T30] dump_stack_lvl+0x241/0x360 [ 259.181868][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.187082][ T30] ? __pfx__printk+0x10/0x10 [ 259.191705][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 259.196669][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.202150][ T30] ? _printk+0xd5/0x120 [ 259.206333][ T30] ? __pfx__printk+0x10/0x10 [ 259.210948][ T30] ? __wake_up_klogd+0xcc/0x110 [ 259.215820][ T30] ? __pfx__printk+0x10/0x10 [ 259.220433][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 259.225482][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.231483][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 259.237489][ T30] watchdog+0xff4/0x1040 [ 259.241750][ T30] ? watchdog+0x1ea/0x1040 [ 259.246185][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.250877][ T30] kthread+0x2f0/0x390 [ 259.254962][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.259657][ T30] ? __pfx_kthread+0x10/0x10 [ 259.264263][ T30] ret_from_fork+0x4b/0x80 [ 259.268702][ T30] ? __pfx_kthread+0x10/0x10 [ 259.273312][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.278118][ T30] [ 259.282102][ T30] Sending NMI from CPU 0 to CPUs 1: [ 259.288340][ C1] NMI backtrace for cpu 1 [ 259.288358][ C1] CPU: 1 UID: 0 PID: 1166 Comm: kworker/1:2 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 259.288378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.288388][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 259.288412][ C1] RIP: 0010:ip_finish_output2+0xa0f/0x1390 [ 259.288436][ C1] Code: ff 4c 21 f6 31 ff e8 20 83 72 f7 4c 21 f3 0f 84 19 01 00 00 e8 32 7e 72 f7 49 83 c4 f0 ba 10 00 00 00 4c 89 e7 48 8b 74 24 18 7c 33 dc f7 bb 10 00 00 00 4c 8b 64 24 28 4c 8b 74 24 50 48 b8 [ 259.288449][ C1] RSP: 0018:ffffc90000a17f00 EFLAGS: 00000287 [ 259.288462][ C1] RAX: ffffffff8a22583e RBX: 0000000000000140 RCX: ffff888027b61e00 [ 259.288474][ C1] RDX: 0000000000000010 RSI: ffff88807be72a48 RDI: ffff88804a009930 [ 259.288485][ C1] RBP: ffffc90000a18040 R08: ffffffff8a225830 R09: 1ffffffff2858b1e [ 259.288497][ C1] R10: dffffc0000000000 R11: fffffbfff2858b1f R12: ffff88804a009930 [ 259.288509][ C1] R13: 0000000000000000 R14: 00000000fffffff0 R15: 1ffff1100f7ce53a [ 259.288520][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 259.288534][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.288546][ C1] CR2: 00007fb37ad05d58 CR3: 000000000e734000 CR4: 00000000003526f0 [ 259.288560][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.288569][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.288580][ C1] Call Trace: [ 259.288586][ C1] [ 259.288593][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 259.288611][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.288633][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.288650][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.288673][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.288692][ C1] ? nmi_handle+0x14f/0x5a0 [ 259.288707][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.288723][ C1] ? ip_finish_output2+0xa0f/0x1390 [ 259.288743][ C1] ? default_do_nmi+0x63/0x160 [ 259.288762][ C1] ? exc_nmi+0x123/0x1f0 [ 259.288778][ C1] ? end_repeat_nmi+0xf/0x53 [ 259.288795][ C1] ? ip_finish_output2+0x9f0/0x1390 [ 259.288814][ C1] ? ip_finish_output2+0x9fe/0x1390 [ 259.288834][ C1] ? ip_finish_output2+0xa0f/0x1390 [ 259.288855][ C1] ? ip_finish_output2+0xa0f/0x1390 [ 259.288875][ C1] ? ip_finish_output2+0xa0f/0x1390 [ 259.288895][ C1] [ 259.288901][ C1] [ 259.288907][ C1] ? ip_finish_output2+0x45f/0x1390 [ 259.288931][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 259.288951][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 259.288971][ C1] ? __ip_finish_output+0x349/0x400 [ 259.288993][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 259.289019][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 259.289039][ C1] ? synproxy_pernet+0x45/0x270 [ 259.289061][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 259.289083][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 259.289104][ C1] ? nf_ip_checksum+0x13a/0x500 [ 259.289126][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 259.289148][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 259.289168][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 259.289188][ C1] ? __pfx_validate_chain+0x10/0x10 [ 259.289204][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 259.289227][ C1] nft_do_chain+0x4ad/0x1da0 [ 259.289246][ C1] ? wg_packet_receive+0x11f3/0x2570 [ 259.289270][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 259.289289][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 259.289319][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 259.289337][ C1] nft_do_chain_inet+0x418/0x6b0 [ 259.289364][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.289382][ C1] ? ipt_do_table+0x312/0x1860 [ 259.289409][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.289428][ C1] nf_hook_slow+0xc3/0x220 [ 259.289446][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.289462][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.289479][ C1] NF_HOOK+0x29e/0x450 [ 259.289496][ C1] ? NF_HOOK+0x9a/0x450 [ 259.289511][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 259.289528][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.289547][ C1] ? ip_rcv_finish+0x406/0x560 [ 259.289564][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.289580][ C1] NF_HOOK+0x3a4/0x450 [ 259.289595][ C1] ? __lock_acquire+0x1384/0x2050 [ 259.289615][ C1] ? NF_HOOK+0x9a/0x450 [ 259.289630][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 259.289645][ C1] ? ip_rcv_core+0x801/0xd10 [ 259.289662][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.289682][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 259.289698][ C1] __netif_receive_skb+0x2bf/0x650 [ 259.289717][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.289737][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 259.289753][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.289774][ C1] ? __pfx_lock_release+0x10/0x10 [ 259.289794][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 259.289819][ C1] process_backlog+0x662/0x15b0 [ 259.289840][ C1] ? process_backlog+0x33b/0x15b0 [ 259.289861][ C1] ? __pfx_process_backlog+0x10/0x10 [ 259.289879][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.289901][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.289923][ C1] __napi_poll+0xcb/0x490 [ 259.289943][ C1] net_rx_action+0x89b/0x1240 [ 259.289967][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 259.289987][ C1] ? sched_clock+0x4a/0x70 [ 259.290012][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.290037][ C1] handle_softirqs+0x2c5/0x980 [ 259.290058][ C1] ? do_softirq+0x11b/0x1e0 [ 259.290077][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 259.290101][ C1] do_softirq+0x11b/0x1e0 [ 259.290118][ C1] [ 259.290123][ C1] [ 259.290129][ C1] ? __pfx_do_softirq+0x10/0x10 [ 259.290147][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 259.290170][ C1] ? rcu_is_watching+0x15/0xb0 [ 259.290187][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 259.290206][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 259.290226][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.290245][ C1] ? mod_peer_timer+0x21/0x260 [ 259.290265][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 259.290286][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 259.290307][ C1] ? process_scheduled_works+0x976/0x1850 [ 259.290327][ C1] process_scheduled_works+0xa63/0x1850 [ 259.290363][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.290386][ C1] ? assign_work+0x364/0x3d0 [ 259.290407][ C1] worker_thread+0x870/0xd30 [ 259.290430][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 259.290451][ C1] ? __kthread_parkme+0x169/0x1d0 [ 259.290473][ C1] ? __pfx_worker_thread+0x10/0x10 [ 259.290492][ C1] kthread+0x2f0/0x390 [ 259.290507][ C1] ? __pfx_worker_thread+0x10/0x10 [ 259.290525][ C1] ? __pfx_kthread+0x10/0x10 [ 259.290540][ C1] ret_from_fork+0x4b/0x80 [ 259.290559][ C1] ? __pfx_kthread+0x10/0x10 [ 259.290574][ C1] ret_from_fork_asm+0x1a/0x30 [ 259.290600][ C1] [ 260.011701][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 260.018689][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 260.029210][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.039281][ T30] Call Trace: [ 260.042571][ T30] [ 260.045515][ T30] dump_stack_lvl+0x241/0x360 [ 260.050212][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.055432][ T30] ? __pfx__printk+0x10/0x10 [ 260.060041][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.066056][ T30] ? vscnprintf+0x5d/0x90 [ 260.070405][ T30] panic+0x349/0x880 [ 260.074325][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 260.080499][ T30] ? __pfx_panic+0x10/0x10 [ 260.084935][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 260.090327][ T30] ? __irq_work_queue_local+0x137/0x410 [ 260.095890][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 260.101274][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 260.107443][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 260.113617][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 260.119796][ T30] watchdog+0x1033/0x1040 [ 260.124153][ T30] ? watchdog+0x1ea/0x1040 [ 260.128603][ T30] ? __pfx_watchdog+0x10/0x10 [ 260.133303][ T30] kthread+0x2f0/0x390 [ 260.137388][ T30] ? __pfx_watchdog+0x10/0x10 [ 260.142116][ T30] ? __pfx_kthread+0x10/0x10 [ 260.146729][ T30] ret_from_fork+0x4b/0x80 [ 260.151182][ T30] ? __pfx_kthread+0x10/0x10 [ 260.155785][ T30] ret_from_fork_asm+0x1a/0x30 [ 260.160580][ T30] [ 260.163747][ T30] Kernel Offset: disabled [ 260.168070][ T30] Rebooting in 86400 seconds..