last executing test programs: 38.183881216s ago: executing program 4 (id=5): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2000046, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x8000000000000000, 0x5, 0x5}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0xee01, &(0x7f0000000080)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r5, 0x5, 0x71bd27, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000340), 0x14) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 36.27104048s ago: executing program 4 (id=15): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x20002, 0x48, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000d40)={0x515, 0x7d, 0x0, {{0x500, 0x1ff, 0x0, 0x40, {0x0, 0x0, 0x2}, 0xae070000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|<Pq\x8c\xc3', 0x32, 'p\x02\x80}\xfag>\xff\xeb\t\xb55\x1f\xcb\xf6M\x84\xc68$[\xde\x05@\x00\x00\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1\x1b\xa1\x8f\xbcB\x1c\x84\x02\xdb\x9e\xe6', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xfb\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00Gg\xe1\'\xa1\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x515) r4 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0) getsockname$packet(r5, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000005c0)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c"], 0x0) 36.107542042s ago: executing program 4 (id=16): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x24, &(0x7f0000001180)={0x40, 0x22, 0x1e, {0x1e, 0xf, "c973705fc93cef6f043ede3abcfe5aa79ba176713336a24212b6443d"}}, 0x0, &(0x7f00000011c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x2, "a6e71bba"}, @local=@item_4={0x3, 0x2, 0x1, "96537c7f"}, @main=@item_4={0x3, 0x0, 0xb, "e0eb88b7"}]}}, 0x0}, 0x0) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ftruncate(0xffffffffffffffff, 0xc17a) r7 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x1, 0x46, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="1000002800000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x101d, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) 33.043085306s ago: executing program 4 (id=28): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x3, 0x2, 0x7, 0x5, 0x81, 0x9, "1bfe0d1e"}, 0x5, 0x1, {0x0}}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0xff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x2, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x0, 0x0}}}) ppoll(&(0x7f0000000240)=[{r1, 0xa0e4}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x0, 0x0, 0xac, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) syz_usb_control_io(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x2102008, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x60600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x210) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="40260f000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000001440)=ANY=[@ANYBLOB="2003e7000000641013e08112de0b8ae44d"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x5}}) 32.958587141s ago: executing program 1 (id=29): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828000002ea6e11ca00"/50, 0x32}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d9cd06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d3dc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797fb547547ab2b0252ee48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c8bd4bbc538e95aa8dac48e0bbb2af55a35efca697fe5435b19f", 0xdd}, {&(0x7f0000000000)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}, {&(0x7f0000000040)='z', 0xff14}], 0x4) 30.418219721s ago: executing program 4 (id=37): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2581, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000c40)={0x2000000b}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0xfffffffa, 0xb, 0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) pread64(r6, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="290027bdfff5ffdbdf250f00000008000300da4884a89a438e95464f36c6bd549a22fd7c5522696b875ec391e3e499d1eea9ac499a3e55ce74d943cbaa3a0addf5feeb0f3e73e0141ef81a369be5e7fecad10158b5e13f024b4004e30d6583376f4307058d2fa71a21a9ac82b0403734db67e875d87998b2abfed537ace5ad447754fd9ff4c75a55c5cee7e3ad8d51", @ANYRES32=r9, @ANYBLOB="08002c0093ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x12, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0x10}}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) close_range(r0, r0, 0x2) r10 = openat$nullb(0xffffff9c, &(0x7f0000000080), 0xddadcbc93dafb8ab, 0x0) ftruncate(0xffffffffffffffff, 0xee72) sendfile(r10, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 29.902731648s ago: executing program 4 (id=38): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 29.291388417s ago: executing program 32 (id=38): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 29.173495666s ago: executing program 1 (id=41): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x3, 0x59) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x28, 0x111, 0x7fffffff, "658ff03f455d5256bc39d5d5b5dbc391cd9f"}], 0x28}, 0x20040040) 28.866745811s ago: executing program 1 (id=42): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) (fail_nth: 7) 28.196601787s ago: executing program 1 (id=43): r0 = socket(0x2, 0x80000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) socket$packet(0x11, 0x3, 0x300) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000047c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008680)="b4b53918b2d3e41567caaf4a40bd0070fa730e5c4fb724862048e7f4565a6d7dd766badb0d4f446a32abffbaf736e8009c4633a0be35241f034b99e605c78212f62dccd38e0d148642585a0c519c2625af11e22a47958358b1d1e629f07d8a952d0d38407a20da1f5ead78ee41ca83173efa1406a286d3516b16b7b3261c6e4ff607d43b0d3cd60b7200322b83e1b5c8a63abcd8449aebc454d41c870a5018bb4f482b4d12a1572c2030a20de882f08183df9b17d05710c58e6905303f83f1832ea6badd66602a51b2701480f255dfe99e654b921a46838767704e6684e340567a91baf56e22198ceb2fd40e8a6089807f95f60da4aa4fb16ea127417b6be58ff57e794230f355cc207398463f727e4c18a748ccaf483f6d8b17c6b8b0a808768a03bfc932da5f1cb146ba2f4031c9ed3c6fb3442ee11976a0985a0220ba4ca51e2ed01c0bb76f37871651c9810c49bc8b8ce840649d0317a9a6e2d0c0593374141f09c03db906489bf42c55d81ef58ac1e574b0610b83aea7ea5384e02a8634de887ad5bab898b4e3a0a9c00c33c00fb8d6d54f89875b6ee5cfeb7286bee2af13c39a0fc09f7f96dce4e2d1195ea656772c9fc5a83f5616f88663f2ff95af70f530b8af78450ebd667ad4afb6577688d4eb05840947a6765a82852e0f96f5a670ab450beec5a9ea7ea0e58e05b20a572c0356df64829e948fb6f56b3359a09889b6b6222d0daa37505036165eb46781c63d4e3abbf2a89fc86c6dafe6d26e551d849b5564aa7b926b66b8be9256061aff88831c4f2b3f31ef25e7abe2621cd646a34f7bfb60badac46e368ce46396fdceab56a817a340a9a361e8d3cfccd5fe72c5a49a1349b26ae159f0228ec1ca2de8237c59776140269082e883af459ccdf07cc182ffa675b559a6a54bbac92b227b1229390aded89c007d87af878f46b63c84a9635d9e0d9ec640dc3d0eace492c0f6ede1a544f83067c30dd34fa3f3d464af6d19e5835eb4c47075a5bc82adee6b09375a364c9779d31d2efbcb25a76c90a92712c1df5218778dad0810c45e9ce02c8489a5da8afdbf9a28efdf1d6e5aa058506981bcafbfc532c4deee23da247825cd86793ed338a05681759a50379627801ab59ae5445b10dced5f05c5bc0dba6917b69be731e203b9cd3da1d2ad81abb97df13e68b72a61c434720c6ce29b6c3cb1f4264a12297becb0b2f7c9f28b7c47ee869c6d70611d3ca727454e18eea5ba9154e352b63d81a811a1ca97375531a8ecaf34d77df16d4bb229b57933d93ca4c0ef63191c164eb4a8c505076f49504c2f35f17a1660b3524609bcd14cd14324c50d0060b5b744a8119d964121f8b2cab72b9bac8c93249418e5f2452db5bad960cf256832069f17f556cf42b78c76e5dff113cf017a1a7ddd3a2f8c345f4265f8b19a1d4e38e862ff34c7f273725f7b3c4529247067e2a16c414d8674e5873f1ef9a8d7d2a7452824c3739d93cf5430d546cc88fb39b3750538cd10d80c822c0423fc405c9fde960bfcf5fa6c2cb9ff75067b45d2b082e848d2efab29da850298e274dcfd47e1572f67cbad056c52225fdf01d182627ab2030f675e4ab8c8cb81a978440d38cd8aec8dfab4a436724110f5fe5ee522a43a66a3f7d1b137ddb4c43cda73096d1655f7948cd14f797d8b20bb501ef3e18585408d299c053df5a6f447d93124bac19b2516d591cfbe97e7bfd856b2ca961035cba05e616f0a1b2e242e8cdbd31d160d18c72b8f121e317c5b5f759a1e8bad4462b020fa65339e9f1eead0ec6b01f7a12d65ca764370e3ecc8564fa7bb1479c49f0de1ab8434684d5de2892155d82af075bce5415ad995f459037d078c9617bbcde146218bfed98b8b0b926301ce57e171d15d747d68b5a93fc5034e59d32c8b9e1cc054974d593e891ae00642914babd727f05e06ca32d56b1a9e249bc279a5351e8aa6d17d911fa9d91dd50a22b9fc279d5f9ef47238e3801c8ebda01d15baeaf153b6c25f9f8af7abdd3040e8db71780876a5535cf05aa602a4929d6a314ac704016e6dbcb52e7f460662476fcd353738571c278284e32d90b4499242f668c36b64ed7f7478283ba22b0df04c3f22d6963796b6a0b208dd580609cc4068c837cd405e684ec3f26cbe7992b06c40550a68b78f44b67fcdd50f65e64c1e533eaae93616478695a8f9c9b6045f00bd8b61364f03a336fe1f78f88e16b57a6d43d5670113f715b2f6c37e6caf0d2cae0d129d24fdad02e4b87d9eda94de1c4c351ca15e92d3c0ceae5bd9e2518741362cbf650f33c6f6c89583b23f516d2533b7ec25ad64448d0a51cf13f170cbe1eb9e68a9bb1e7525ad67667561180fbd97bf34f4ad37ab769f3d077c5cea5d7eb320b6e0ecbfe27b5f159073f0b0e0c3d1244467b3a07fd85e893d1bdfa2d97fc161b293b106dbbfdf140d811788c5c221d0449e97a1d4f04d068da6d5c18260cce2f6bd1f0923f2b5881e3a00112f9486a6c6ce67e9cd93547644b8cb1077e395605dc39e90d7e5dae3aebcdc6c7335f181e33304bdcc3a5c7414ae4189a00dba7954807a06d4df6e5481507b809b7035892bc097be0dbf65224e04d36233cb88850a01f6133129920d5639188b3bbb7010bd329889314ca203a34d8a4695d6bd799be617a203b7ac9704aa819e660005d53aa01194682e4326770dd494299815a873d267083ed98163544c1b7e07e39db980afca471d4fb13872f9d863e7679f099192692ba06120df030acbb6be8a09523d7634830d3cb9e82f707933412c6ea84c34c5ba6ab2aecaa3db3f7a655324f77f3c3983836ddf88ee2b5621ab7ebe486ea33d8c140dd4cd221b6375df971ab7d34a73e168c37cad34fb6a41fa0b05feae3c73bb45bdeefb79e94a697aa82e5d655e310b4d8c145a29b41e24db416a29b93a4f2c3f501d8905c9f7d4cb97767de4b86dfa7b4d07aaf7ac5e6bcdda920b1f63564d5fbfc7437b540da0a29c93bf534b5f5f62f51bfecccfcbc9f77b117a7975c1dd3fb01977120834d765e9146862d2fd5f299960a660bbafe19e248b670b89a3b5ca674ebb1e0623890f97dbeb0f75e55e1ef0d045e1c1fc29aab5f0af56a5ac784a01082ed74d8db77f339cbcaaef253ceb6f107bb8e55c52f7f4b6c9b84caafb79d5d13d9b6fc1e75875e45bcef999094774037dde954b0a5c50f28da03b5aafa830d445fe4f4366df423df23d1cdbe902b44bdb4a7f06c1f392b8d097bf09565dc7d80c2024ab4b05cb2f496662dcf293a4472b16588b24e83c0ae0f016640dca2ca122dc413de3e6fd12afc850dc241c8d57ab2fda8a793498796c3a03c191ec31d625e4f8bd8eff538058da874c24e1b4350cfb4664848438fcf082f2db36443cd8c9bba93b3ffee8fdf4ad7d338d179c252e255491d4e41f6268e9ddd8d13e97eee1f7db3c4b51d3adb727a348b174308a9cbff2685654971de6ec06881787b0fe267ffa4c37e41bc6aee1ef2fdec4ed04ab7b6193228d3cac38a2c19228f3970615263a84c253fdc9f16ac9e0122abdfb494a6f04eb806d1d582d3502d7e3c9d758caf91453eef909723c6b8378fe5a69473ed7b22acd7e4cce84a6477c4a23934ee61535c44bfde5f547cc43179217b0087d9a57ed7874737b7e2c1c46a4426fea0655d3f0770d338a1d2999e77aaab58f4d3263e862a446805205ddf032f15a79c6935069114f4f4db6ade52a5569de0a214f3ab79905522f954d4292e2cfafaef546afdf2db396624eb3fd28c35996017edacd17816911b62efdaa72dd35262af71d285d6c5a9c462156d8531e4641e58e55470926e4dfcc1a7ef1a7703c7405f1cd920bf3e85670314b65ea0ca2afcaf54bc344b3f5953f24a2cc6f8ede6417b3af39f90ba1a50f0ba020bbc1543d66d0d61b22e7df64d57b0e7eab7a78781a506df813825b592dcd139321c7b30fb919c623be09dea86018e9e3ce7907894094cb8e315e6a3af6bdaae332eb5b9f4c3442682cb802c79d41f2c7bcec64544b783e81b0625cd04275173663bba8c04d7f52602f41699ad4c677d942184fefb3df9099422b9f97839c2eefdfa47dcca5f9cc5444fcca20e70dc00443f12d76fe2fcd9b4082c94fb8917140d63729fbc507816a981c37938678b3c1c855657b7243bcbdb4149318d9070a22c70035e0560582975df6e5c7d64ae3e8c484f46b26dd4be3475ca63db95366a2d25ba648704b56521744f0d8d8620c82aa26e46c6a73308bc22cb0e943bd572fe30cb40c8a6b45841d186e0a8eede3715f52b03534420c216df694968c78c3bff3dc0414380cb9c44daba0414533552a1bd2c5d98fb466fe07dacf8d894f47c7a8bb7eb204a228ee1b6e0aa2ddb750d2d7c9f270c686b805bc2a81f332672205f17ae8ae9eba7c2a011e80b4fd7778ee1a2d93008a4793a64e294bdcd73f4af0d89d81962d8a91bb66c1776d1c2ae3aa390337cbb2bb2e90a042e1bf67b350d7965aa136f39886bb14b4f645cde5adb7e518a613021bdb72e2a54fc2b1b0129a3b720af5c9a5a6a420585a146bdfe4fb54b85aafa7ea55eba8ac46337e84300d3d2e63ff8d7618037d4dafd5d20796f984a20a553eb6fb3580cada52278c60354604bde6eb4441480c2b3e67184167ca0d1933de04a794a3f178b4b42be5c53790a59495c38a8a164751d661b00a6a6b2f30500905069fc4b73501107291994036be8190cfda78aab1fd6f0eb12c1cb656871f9566b4db21fabc141aad7dd80b942b0758419ca2daec9b8e576e40e6cd7f6af203fe0cb390ad5d77ad82110a99b6ce3d4c1a516a52af2dd1abf4c1231869df26c12af918c319d0fb6e2bc60e159695a284fff4235b49a2097f015a7b0cc4fbafedae3219371e708438bae51b11738dd9f393557b0ab34c3f2488298955b38a62bdd45a3ee8d0bfefdeb099cec4a0d28400a8743f9ae873cc2d403f8873ff6ba4612e5a125886469c676743476c30ae9dd05cbf219352b85e60cada4d298aab7f3029a702f65da044186f23632eca42f989e4863ff299d6408bff0fce8abc8411bb730f6ed173ee8e8fb417ad3cc6d679c0555b59b608a70eda737f1444671b2aec0400663ad761e7b3cc095bffc30b94aa01ac39f93968c7a20891ef385e44613c9b4ebd0fd180311bd03200daa9837e2b10b7d1003b4d9ebde1d83b256b7ca8cc01804f722d7eba5bfb3c88cbd3e8922b6453e734322473d9267b98e5df8806680bb7f9df85cb963ce6245f6c87ada94ea72b5c1b559e2582af33d4353f068d633a27fbc933fe281763d21961f2342190486615a5a9482c0c09944308c8d89d37bbd705dfdcca3334e190171fcea1a297f9b516260c7c8c6a4c14fb2d85d6c2a0ec37310338a27a0f11dd75899c95a149d5cf4c224eb7b4aff8531fb7e625f1a0743a72e89edf09be0f2f1d0bb91f839e328b12ec1e22c460964b1032ded12bb7775091d981e2fa3566d3b55a48250115304548726615c800f433d36918f6e99852964f2a71ee1df288cdc97fddf2da25c625640561a7e1e2263a9d300af98d8432af7c89363d5d114f7b1872e3ed0c77a7792b006f9c8d6c8717f3df53f37df8df3f74e1f1463f2057ff862d11e7e14705ad92e57b1422057ccdf1ded779b1a85b5bbb0978cd4ca793bacc8b037c52a7b5a47aaaf605aa1dd886ea824118f64b89602a2f75a5b658d217aada9d6a5c9d2bdf324e82e649358e5c9ddc1a7d8e50c913ec349791b5475068256eba5ec955f56742e54f78c602389a322814fe5276a314b81ce13e966548c618bf896a259914b3d45a5b6b0d4afd98a31c775d80b2f944e39932bb8a2ba3deb740e07ca2877798e3e391df43c410b4fd4006c8552bbd333ba513aa2e382357619dab1280cd1e9188e801b1791c0256588503eeae4d3435f7d7f3ef3696f9d377640684bae2e08b6685314517d19163bf808e0ed910770db3026257505975e317b6eae79d7fa41938ae49b8e947b24637e57273237d95c3bd6466ac30f3377da79b6255a5c1602c5cf756178b2d7fcfe03807ac4854280417a728b160a6596152be6ad3435a9f70955c54e87fdcd36afd8a62a4d3675525bfb81919223059eec92489c4cc367c252f42d3bc14657a249d657448c2047df03176e4788f29d551fc245d358e9addb9b962640e4a9ff98ccfe09727a2e0711a93b1258ea0eeda14b872be19f57a670f6bf016bf26d63f9f0b3d17a31c8ebfa89c1c850bee54a2853d99d5a7112bfa09558a5dc759268c420f48c29db3f407917927c80b70894c1f6211a4878de0d9472116fab84fcde109065535313c31337164e7682b7b7da546be08a58f240a56c0801a182b57448c484c30acd47ff015f443a99d67aa71157bc514d84c98eaa2fac81e0b488e562dd5adb195f0dad871dcb69334b428daa99842c4251423f0cd53058744b61de8bd4c41a5b2e8cc239a145286a39309d6db5a980f7144ebd915e80b3acd3b1e9ffd4bcca09e3b6c2792372fa7101f64a81f47afa1e1c7f077a9f89a287b8e9668b0c0d43d3c548117fb07e92f081b671cb6a4666d4bf4c5cdc0a36816986ec32f4a77f0d3f04d6abe8e54440282cb06763f650dc59be1f912f6018dec954b0e26efd4ae5298271eb53fb32537c9f32da1eda40299b3e737c8a8dcebd493d5556d22ef3bda6f253a8725bde154d184e3f3ac994ae7d2d7b9b3ca1755f6c6abf08b32a286c5d0fabbe13d926693c446637b9ceee6f8422ca29e819edc455b1683acc86e00c903869acd1f9ad2bc0d42de882aa439b4364fd2ba63d762e7d84b85b93e6818d0d3ff259afd815668de940f93ccd4022c8c4f68713cd2c39c3e8cdbbb1c133f0a8294c1819cd24c71e6fd2e561da4e62ff644fccd54ee2f86bf9b4de378007fb74d2a1b187cc09fc3d9dc34f0c9027e3f1180af208890643d1787f73a87b42ec9111f5b1af37f5c812fbb9f1d1d149b7a97bc83e7e4bd9617bf9630809bddca820e5de57602277871652475e478ecf80c8726c2fb6ef9158a461493262ebd8599c155c8a8e23c8d106234c32f82db61faf464a0a19690aef713f75b2393b7d6618aef66785c6733da01b50092116f3b5b6de225b6eb931dc35b1e6defbeac36a896f621aa2ffac5a550cba0cfcc2b7fa5519167741540b0cc745d10c09130fa6ee57281062cc8bfca1353c92a00fd70bd60f7097c5b7d9b6e9436d99cdc1805af010c407e65807c6003e9fef137e22717571b7e647b65f057b975545c2bca567b1fd01c6da90a81633ae776f67bbac5a5cb711ae86c8248e479f7c5f23c0aa83028dda34935da1607d1215dd39520c39f0dfdf87002feb929bd4d5b9d68eab43ab604e3161f1465a736233f50c74b7eac49fed58e6f9d50f400fb8d25a44c293560093ebe0258281da5ad314aca942ad18d8622884c4a52267f26630ea773ae51475e222ef5db9330c2196e9a89a07d724283015c7aea53c82610dcef66bfc2d3838b97656911cbe7b788bf5a94c045e990cdbec9861bce597aa639c3bf0705eecb8b188c32f69582505751bc5adc17cd469e254c1d81be867603defbcd87c241b81bd9460fc11160b5f7b1768ac21147dba3aac11c42c5d7778696c75f37ab2b9ef2e89efe4d21fe9998fd7e01647e8ccbf28b7f450cf259afc0a1b55e948a98a5f10c1769c2eb2679898b91c73f373480904fe01bf8765594addd7ae6d52b4534cf7e95424f70a027eca378414e1aaa7eb2d138044e9a24428307b7514702ccd66417524f0e602ad035eb5628238b3bb50f2ac74e679540a49de8b9fef95e3cf1e9a01608a8cb82e11f43812243ee460ecb4607ec8cf252c7f39a097754228bcf28f90484f25cb8ed9cf454db5fcb49fa4686065e7f9b11fc4bafed171a59063e5976a006142c318d3ed5bb9e2002f9536b2caf1de0eda879ac7be473303ea1bdad1782b3515cc03b7695f06b08e32f23ded1c4da2c856c7e22e76f22c16aa83dfc4ed9bbe2e716a2175662f2dfddfcbd0566fddfae19955ca9598faffcd264fe4df8b74804d605ac79eba2b3cf52ea90ae6d679505317f5d522567aaccef3840c00fb4609758793e939e145c0eed8261b233f9fa33a62a167b48ce4398ca3a7b9a207b4286b2d50cb979837116edce3df04d84d497f3da2196272861d054b31959585fa1656e676102717ed9c1986c39e95aa314c2d289cf3cbcab6cd77da44bf1e1651b5134297607436154f6006b8aa5b768a1d4e65cb47ac199a005942c533904895e879c41bf2d957a8242ebe78c61e1c3eb583bac58f14d7d2f4d724958759a228ab111afc2e8460485f1a28125be09916c071a83d01766fcb02edc66bbba443bd5a5143cf43d7d7c3068aafb75fcc6d4f48a3b61bcdcdb156af7cea988d59299f474306aedad66b36cc6c9190324991639068a4c098b75b82975100a0669f57c28a765e6770fc8b029bc13cadbeb822cf6256fcf00d45afe4c083a8c75495132471b3240c213fa4a32c224962c061a658735df6195ae6fd817fcaf92bf4a08b747bfbe6c63ad28ee689805d5446839745718ba03143f7d57530407cc3bb77f9df28562f97573b5fefa8782fb571d2ae6b3b57576ad7dbe95a957c3d7d0a2f7067702feb792a0d1eabc2b414a3b7d0053f0f4c741dfa8e79373e07edcd12d77ea6bb7db1ccb9b736fc01e9380149e7d86af7d03d8a35cf1be59a77d72a91fc38d84c8c0071fc56b425b7b78d7ac41c1a2ba71b71087a32b9596896ee954ec9dcce920bcc9a0929779366cf12115b485b079e11daa176991dae4aa6887c61ba64d6795c7c5c29e7be1c10ca533e9d82ecfa9ad13e3095e7feb71946451c729c43e0ede3b12e757364ddd2a05f791dc4730e061b18eea1ca3a946052623e325be62695e3a8cdb805022a769e73f412cb19ebc783f1bbf8814d2bb57d14696531d990cb092f996b253da664187697f6fb079d099af7975be42f896c4c1fd9577986c6c658a8230260030ab962501c71e26cc9e6bdc204eb9c833ba10df5aa394dda1b95f5b29445126c0550c4db7c62bd08cac3e40aa598747e0473ec2de72f60399d8e3a67adfe7be46b559130818608864626b257482e15e0b48f0a8cb10b1cb1f2a56b3763e1d1daed78271fb4b36af882524cc14baed0fc7c6a8b54997afd70f618a91e0925d6e16cb872b8d45d0ad1254821998dd299b2b0f9e7360ee2d130375bdea082186dbaf531c8fda4d8dfeb9c84a40f7eec26ca044acd38dcd24753ca511cb9f3b50cf0f6f101f2a477d3cf769f4aa431850397997b874eda836a9d945225fb62b88393e8fce22ac31187f13bf7b8092cdf0b1a0e2a0cdfcb2d1a1f79502d9728d6f0875baba5aee04afdc20a14cc720309fff182c5a29e54bd0d56d8b5cd73fcd76a831ccc0e623c3dc0935ba74636f68c1a97ac55dd9886f45c8c3110f37b51e0e864167c93919fb9cdcb74f4e5a53f89e7c689d7831e4aa0f66ff666022b71453cb1b37893ae4491004bc13f198921f25b0918f565e4228c3201b3f004198b02d5dd0e55a29cae81536878d6563343c841cc7be49fad4ac095d31db1489385d486bf7a7877520a2b0d0cd752cce72ac4d1b7139c205e4c6eb59e8da8514e08a863ca30d36cee84252d4ee1dc2bce208cd2ab4b9d897e545edcaa48d30ba6de29331fb863dec5dc6d706528758066815aa73aad2f320e9d6f6568ef2fb8d67e9043d8fcae8985fd8fa0182584791c48e30184f7ae1de3e14c311467edcd9a2a180c1a781149a6a12fc6e92e6ca7897c8e24963889d067c77e07615e64c6df922bc9b0fbc4cc659f81fbf985cc188ad7460071c0628c7cf909409491cdad08b7af9ce28ffc379f902d1dc046b42807071dd87852c16e4de7826b2bd1c6f1adce346e6069ddc0e256df950cc5980ab9b20f80da40ea8399bc1ebae0e6b34df431bfbcbd121d2511235346dc09c00890c19bc54b3e74f5286d16dcffa2328a30c8fcafcf3f3aabd511a76737f0da79acecd994d034bc38066981a613679afa24f4076e4f63be566ddb5f2001f26a6c897967ebf4099f99ddb8bd9db7b0f716127eef059c7c662cd6e76d5af1fd932f37c2a56a5823b9d7565844e36a79424e6cc145e40885f990b25bb50ba7b3a2920f1f2dafa595ff50243a1bbd6b3b54581a31f0120d832aa4a3794f6f4359066df3bead35c7eb08949792a9a17559b3633151d7cd5c1d76117cb7e6db5ab95e4fa002a7911fb8328a8c4c9d83f676143824ee61a0e5346123aa8bb815c6c317fdf839e8cc0ab6476657d6b35bd62db9136c9aaa63a756e47c135389ea2fd5cc587d8e19864694952b6fb229c34d420bfb89e60e4d88b3d22339c96d52ae3ecbcbbc231405b8b4a52ede6143b91b37f4e3f4bfc2b69335d758e687bcea1ef9bdce4dfd45c3ea33f35b913e61324db34b0df26e0017566c80e193f8b5ca650a8dde30d750a619289cc469459d0be89a4ed127d0267f9b2b90a86b8b7593c546a5007ef9a3f12f961f77f511386f448abf496028424d680964c53c81aa80d5d0cbbad964d93acf3cb5394202dea85e6311ecec93f2863266748e922742c1c709c2cfac24535cc50a3b59f2b8e90b333876e869b81ec21930f1d93bac1386a2532d9da4b302f7e97f04c8eb188319642b89e78013f3a9c7df82bcf5d9d2ace1923633eaa2ab1c2409e351752c941e7bfd72d5002d1b0c0632cc34bb8ccfea1a017a130297be76a04a22201acc34993465306989f081747f96858785ae06407eb332aea5f430ad078db97114f5429dd0c237b2000db9f2e5f759048ef4754d3c1dcbebcf9e235b55db61b94ebad5b57ca784bea73d771fe553c461e610acd4fcb303ebce016506a457539701ed2198fb6040da048667e364ddfc7d5354314a61bef738c2c8044656f793427dfa1f5241dcf6de39c86a65a735598c10bf6dd095f18249af81fe4ab9fc4ddae6d70aad3b19583f90f2086be2ceaaedb5b7b490bee5ca76079767c4680891260357697eb206bb47cfa4d5007b0423a8423a87d6727a897d963d59bb84c0641a4faf8b5806a4f57795b2700739aa2b50195c07fec7da4d22e7b7ce3ac438cd58715910c6602e399ef16448a3ab117dccabc2e1fb5c5c6328a362cc9c3ab70cdd6e3909dc6e37c69f394067d7f3ec09dcc49edf6273ad2ab5301983f0877b22b8c6a8b7c28f480945c1dddbbc1f37feab72bc0d73e4386340d1bb333fd48a82a2d329c9c80cf1a708ab90b8083c8ba03a1eced74082a93e8ec74a5a421758399dabb4968f0dacbce996c2ef6aa2d7e9374b23b4746ccfbb37b58a6e839e43f9c2d1bdbb466ae4d2ba19d5f199764a94a9565c6adff3d029d73934f32801f236affefe17092b7e3f3aae59e4cfcddccddda7bdd83f4f8db184aca8df943d304d65bb20d2d6498467661198b38c22095ef63182615261d974919bf91f350165042e0902673b373eb2b6daf689d76bb611f90484dfc3199dcbde51f46c2222afda68d53edc5626e643e34c970c846bbd63f2b730e5fb6ea47bb141e45c9be1d73d7ef968ad4b6", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0x0, 0x40000000000000, {0x8000000400, 0x8, 0x0, {0x0, 0xb, 0x80000000, 0x8e1, 0x5, 0x6, 0x2, 0xfffffffe, 0xfffffc01, 0x1000, 0x1, r6, r7, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r9, 0x0, 0x0, 0x3}) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) fstat(r8, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x92405a, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x7fffffff}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@permit_directio}, {@appraise}, {@appraise_type}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'dctcp\x00'}}, {@context={'context', 0x3d, 'user_u'}}]}}, 0x0, 0x0, &(0x7f0000000480)="b7eeca8b337007488367b1e4d439c3bb83155c6301ab03b07f4508cd71ff696fbdd185d10bd05fb367b9e0309c63d1317ed03daf46a1c6476b19dd45ad99c749") r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401000000f4ffffffffff0700"], 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x204c040) 27.231848149s ago: executing program 1 (id=45): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0xc4d, 0x0, 0x2, 0xff, 0x6, "af56c12312c93d655006c6bc321e346aa15180", 0x4, 0x3}) flock(r6, 0x2) 26.012758193s ago: executing program 1 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001180)={0x1, 0x0, @ioapic={0xf000, 0xffffffff, 0x8, 0x9, 0x0, [{0x7, 0x3, 0x3, '\x00', 0x1}, {0x0, 0x8, 0x6, '\x00', 0xf8}, {0x7, 0xd, 0xe7, '\x00', 0x9f}, {0x3b, 0x88, 0x4}, {0x9, 0x1, 0x2, '\x00', 0x7}, {0x8, 0x7, 0x9, '\x00', 0x7}, {0xf, 0x0, 0x6, '\x00', 0x4}, {0xd5, 0x9, 0x9, '\x00', 0x70}, {0x0, 0x3, 0x9, '\x00', 0x8}, {0x8, 0x5, 0x5, '\x00', 0x8}, {0x4, 0x5a, 0x5, '\x00', 0x6}, {0x2, 0x5, 0x2, '\x00', 0x80}, {0xf8, 0x1, 0x3, '\x00', 0x9}, {0x10, 0x6, 0x9, '\x00', 0xfb}, {0x9, 0x9, 0xfc, '\x00', 0xc7}, {0x0, 0x81, 0x4, '\x00', 0x92}, {0x2, 0x3, 0x4, '\x00', 0x2}, {0x4, 0x4a, 0x1, '\x00', 0x5}, {0x6, 0x69, 0x3, '\x00', 0x3}, {0xf5, 0x8, 0x2, '\x00', 0x3}, {0x1, 0x2, 0xc, '\x00', 0xf9}, {0xa, 0xf9, 0x40, '\x00', 0xba}, {0x9, 0x1a, 0x80, '\x00', 0x7}, {0x0, 0x9c, 0x8}]}}) 25.696544491s ago: executing program 33 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001180)={0x1, 0x0, @ioapic={0xf000, 0xffffffff, 0x8, 0x9, 0x0, [{0x7, 0x3, 0x3, '\x00', 0x1}, {0x0, 0x8, 0x6, '\x00', 0xf8}, {0x7, 0xd, 0xe7, '\x00', 0x9f}, {0x3b, 0x88, 0x4}, {0x9, 0x1, 0x2, '\x00', 0x7}, {0x8, 0x7, 0x9, '\x00', 0x7}, {0xf, 0x0, 0x6, '\x00', 0x4}, {0xd5, 0x9, 0x9, '\x00', 0x70}, {0x0, 0x3, 0x9, '\x00', 0x8}, {0x8, 0x5, 0x5, '\x00', 0x8}, {0x4, 0x5a, 0x5, '\x00', 0x6}, {0x2, 0x5, 0x2, '\x00', 0x80}, {0xf8, 0x1, 0x3, '\x00', 0x9}, {0x10, 0x6, 0x9, '\x00', 0xfb}, {0x9, 0x9, 0xfc, '\x00', 0xc7}, {0x0, 0x81, 0x4, '\x00', 0x92}, {0x2, 0x3, 0x4, '\x00', 0x2}, {0x4, 0x4a, 0x1, '\x00', 0x5}, {0x6, 0x69, 0x3, '\x00', 0x3}, {0xf5, 0x8, 0x2, '\x00', 0x3}, {0x1, 0x2, 0xc, '\x00', 0xf9}, {0xa, 0xf9, 0x40, '\x00', 0xba}, {0x9, 0x1a, 0x80, '\x00', 0x7}, {0x0, 0x9c, 0x8}]}}) 16.138980298s ago: executing program 0 (id=70): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c0050904230001030000000905"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0x1, 0x96, {0x96, 0xe, "a6051ad2a4550939501673c990a01beb9a3f6da5c8d3034bfe28af7b4fe6709daddb3cae5c809fd0556b1a143478c95bfa319881fb08ab35cf7cba3c728b58d86e2df9b04abd01050a15f4fe7c25d9d122b7864824c23a349b3423bfbc73b9809f971833af1c0a5281ee6b7cd83aac3313ef5570a0a2a87b846a7d51f3b93c2b20715d1136c953b11cb93693a5a25b13852c5a74"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000140)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfc, 0x9, 0x5}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x0, 0x4, "f0163d18", "5550b62f"}}, 0x0}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0xa5, "22a855198e1f9e8f7f28b587692aff7f985dac765205aaf0ba511d2e5d8bc7df122716e0530444003e4319e90203f572ad7ef15b51730269f07a93be6254c4991a002dec991668b730d3682e4a79b1ebc14ccfdf0783434cdd5117a88b43f4d0dcc127ed9a75370689940fc02b3784b2e19d163459bb8d9f8a6a9615215703bb12997902067b7c01a4df54bbd6ad1d08214321362421f8e748408f8fc160fe89e0c39c6bf9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0xe0}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e8cb"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "a23a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'erspan0\x00', <r3=>0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x10, 0xd}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x800, 0x4c44, 0x8000}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', <r10=>0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x80, 0x4, 0x0, 0x40, 0x1}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xc}, 0x8) sendto$packet(r2, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xfdbc, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @multicast}, 0x14) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, &(0x7f0000000780)={0x40, 0xb, 0x2, {0x2, 0x9}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000840)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xa, "5210c535"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x60d}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x40, 0x0, 0x1d, "38114e57e8e2380b46ca7cdbd37cd8961aa2d6211cbe9fa45ed02f816f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000009c0)={0x20, 0x1, 0xb5, "e5629a2a1a67d09378760af549fcb6cfd5abeb87f6b07801e77712bd77e7f53395c6fabd9e6b1a6d2ab70bb8980cfe22debb32c95a17747a1c2ca89fe17bf5cedb9c102cd96d16425279b9693bdd89d6d6367f546d51524311d1dcfc8655f44403561c96fc1055dd76741943190833ec13d05e33107c233af6d98d921a37cefcde24fe226292347a78fdb420599f1c698375bd28d671ce1b14bd32fe1f7d29ac6c189fe5f26f2cea07b74ea53ad2d5232fa0840a09"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x81}}) 13.502511969s ago: executing program 3 (id=74): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000471000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0xffffd000) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00'], 0x14) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000580)=0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f3bfde51b257f403b6c66989dae0846e3dc91bda3f1f97f0e05544ad3b208a99e32514b70abf8af589635a6109fa9e85483d3a1aa39c14bf93fa1957844952fa624c2186882917fd468c58e478d32d7ec1ad81e1718432745bd0f7d15", 0x5d}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r4, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x8}}, {0x2, 0x44, @private=0xa010101}, {0x2, 0x4e22, @multicast2}, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3}) 13.00354879s ago: executing program 0 (id=75): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828000002ea6e11ca00"/50, 0x32}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d9cd06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d3dc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797fb547547ab2b0252ee48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c8bd4bbc538e95aa8dac48e0bbb2af55a35efca697fe5435b19f", 0xdd}, {&(0x7f0000000000)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}, {&(0x7f0000000040)='z', 0xff14}], 0x4) 12.329859806s ago: executing program 3 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb8, 0x3e, 0x93, 0x40, 0x2058, 0x1005, 0x975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa0, 0x92, 0xd1, 0x0, [], [{{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800f600", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0c0050800500020044000000"], 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34c04ca}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) 10.318805009s ago: executing program 3 (id=79): r0 = socket$netlink(0x10, 0x3, 0x4) userfaultfd(0x80001) syz_open_dev$sg(0x0, 0x0, 0x103001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r6) sysfs$1(0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f0200c00e7f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 8.968138952s ago: executing program 0 (id=81): syz_open_procfs(0x0, &(0x7f0000001600)='smaps\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x4, {0x4, 0x4, 'TQ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1528a31da4308861, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) 8.100794139s ago: executing program 5 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000101010200000000000000000a008000300002802c00018014000300fc02000000000000000000000000ecff13000400fc0000000000000000000000000000010c0019800800020099"], 0x50}}, 0x0) 7.778543076s ago: executing program 5 (id=82): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x1, 0xf5, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x9, 0x10, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x12, 0x9, 0x2, 0x7, 0xb3}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x1, 0x5, [0x4, 0x7, 0x6, 0x3, 0x5], 0xff}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x5, 0x8, "21c6da5d4b16"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x401, 0x3, 0x0, "40db9faa"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xed, 0x3, 0x4, 0x81, "8c53", "1ca1"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2, 0x3}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0xf8, "61227878a3b8392644"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8e05, 0x6, 0x0, "254a850175839a3a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0xf, 0xe, {0x7, 0x25, 0x1, 0x80, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0xd, "c4d20e"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0xa7, 0x7, "3b21a6c09e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x8, 0x6, {0x7, 0x25, 0x1, 0x2, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x91, 0x6d, 0xa, 0x20, 0x6}, 0x5e, &(0x7f00000000c0)={0x5, 0xf, 0x5e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "08f7df50546c95359b326a326d23de78"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x58, 0x3, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x3, 0xcc8e}, @generic={0x1f, 0x10, 0xa, "0600fcb87679b4f12429cd7c207b32559cd9caf7fd95d13200a97305"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x2, 0x8001}]}, 0x9, [{0x3a, &(0x7f0000000040)=@string={0x3a, 0x3, "fec31f1bda2ecaaa64ffe4db82118a65503e80915b841827606df6f20213df48167853b975c28f045521353e9a0a35f625c040a68898321b"}}, {0x29, &(0x7f0000000180)=@string={0x29, 0x3, "f4d6ff297cf1e0e93b92ada3c74f02359713974963cba61c074f569910183ca8dc32bf0d4047fe"}}, {0x7d, &(0x7f0000000340)=ANY=[@ANYBLOB="7d030ab9d49dd1ba491bde0d62d892c9585b606493fa73a0429cf6f89f2bbf0a4dfc4acc655b878815cd7a9c7e040220ca023ed253946adae2105153cb2ec9e52d1004feee3a1344314346b7b90f73f4ed95e53c2d8e2b2b0139f143f3efc8e757671e170be10e593486f8568b87d95e6b8f7ad1c8cdbe2d8d666dff75"]}, {0xb, &(0x7f00000003c0)=@string={0xb, 0x3, "b3d62f7762ee93ace9"}}, {0x72, &(0x7f0000000400)=@string={0x72, 0x3, "878f438a417395dc386401ac9a16fc8e11773cc42205bb979009fe6def41839746b59ae3906f4eeb97e5d2ad1a9df8072238578674e8a5558fecb64b0e8000e2a4afac4cd04f410c797af441fdd1d586c39224ac50368794df8b94f104c3c3ad176b6727cdf41603ce3e00ee41838457"}}, {0xe5, &(0x7f0000000480)=@string={0xe5, 0x3, "d1151d7eea910eb373756080c270e4a010667d37108da4688fc43fba2882c72b5b73296c203165ed6b311a46eb5d89080791f9161f12a8c907b1e5c7729e0ff50a73defa61019f0d5f1500b414d76dd38a5c625de0c70a67c4c73e2a60208de29c4fa459f9a55b1f7bd1ecf770c1273059ff0547e1af3b3c7dd8a6dff36e9406c2e40435f09ca583535bedbaff70ae21721fc7d7c94ab083f26f3afaf6560c5e1295a5bb91858a18b095485792bfe202b362be3bd6e32ea52b8258278c52dbcd07a2550057e8849887b847bce092e72f52598fee8141875f4a1ae517ad8b37e6ba68b4"}}, {0x8b, &(0x7f0000000880)=@string={0x8b, 0x3, "02fdaca700b82ccbc781461057353d374d6c393303362836b148e3a36bab477bcbf978800ec34c61b4ed37fc2709117620f6b1dcc2e059101e7ad90d9d7c20ff7756a8154a0f9e65b1901810b4bcfc7e694743938b384a872e737ee561e4c11afc712e7de2147f2b50b37b956ed082edc138d96c06748a171d013f2f1749b079619c17a8c70f0eed21"}}, {0xd7, &(0x7f0000000780)=@string={0xd7, 0x3, "abec5fa1cccc68dd31b8558bef9994f5aec0df6cc17b7b6e509f3e0ba6c5cc02faa8026611102d6ad111e23e5bc752aacd0a28859fd38599123e584fcc8ea91b3c3a0d2d7b9af3bbc8a5498c4dd9280c48ff3dd21f80e4b38ce1a1ad1e29e724627cd4051bcbb48583f933bbfc154aacc6a7bd778d5ffa3418975fe97427a0d1f4b97bee46304918fa3b4151181bfcab02bebe72fdbf5b8ccff77db6d8fcdda9ffbe70d3d916786e0fd2adf7d71e89b79f2c81b31f605adb1bfb8ef63aac7fadefe3ecf19a3f23d0e793bf7b5ba484113ee9260119"}}, {0x64, &(0x7f00000005c0)=@string={0x64, 0x3, "0a6a27fcb6093186f8e1559fd06f132de44ff298fc341c692445be5ecabc7e822d2b389ada886ca6f016785a5044ec61142611c3b405973de8b181a68763f8e62f2645cd7231daab49a36fdb10671253234d58a89eccef3b512f774eb766bd57885c"}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000009c0)={0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="0005d0000000d021a2156cad61e65e63022ed3465c964d4f11874078af260ac63583b3f18ccfe231a280ceb6ae56a51a39499e1692aca6315c960c1cab48cede0a960bc1bcffefadb4e1c854bbe5d761709c6a495f29ad833261e8088bc7c603f7d57a9e78c08567bec44f480eb37b47b710d970afe00c0cd8d39e8f0d000c1082be3aa2266253be79d6dfce7dc689403fb9207763d69b74991c7642b33b4d479cf4d3661a7f011e06267dcf46e800a295fda01affa43aa30560b0d368a34d86b7338d1845b7de26a285c932b01ea8d4d57ec3b24e280dff0bd672eb2c"], &(0x7f0000000e00)=ANY=[@ANYBLOB="5821fe399b1f1aa89bff47df168e44516b1e57acc6e1af84110954a915e9a40de87fee7a84ae18e584babfe96933e5c8164ca441a9080e0d86faaa8ab28bcf00b22cb64ab60aff66634dbe24bedfa14916b49a72e48f2eb2946404f531be28438eba17eb738fba9a081e54ea3d465bc0ff858b1d81ee4dd117b7cf08"]}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x20, 0xd, 0x12, "123010befbd8bcd511ef5aad81238182d1de"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa4}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200900000000dc"], &(0x7f0000000b00)={0x20, 0x82, 0x3, "37cca6"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "02b2"}, &(0x7f0000000b80)={0x20, 0x84, 0x4, "8b9ce886"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "00571c"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001940)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private1}, @jumbo]}], {0x2, 0x0, 0x8}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x38, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={0x1}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xfffffffffffffff7, 0x8000000000000001}) r4 = open(&(0x7f0000000480)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) pipe(&(0x7f0000002480)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x3, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 7.472011619s ago: executing program 3 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r10, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000f0fc13b7d4106ddb400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000a00000000000000aaaaaaaaaa0bbbbbbbbbaaaaaaaaaaaa680447aeb6c0bbbbbbbbbbbb0180c2000001aaaaaaaaaaaa0180c2000003aaaaaaaaaa1d0000"]) syz_emit_ethernet(0xa2, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x20, 0x4, 0x0, 0x0, 0x94, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote, @multicast2]}, @timestamp={0x44, 0x1c, 0xf2, 0x0, 0x6, [0xffffc7f2, 0xcc, 0x7fff, 0x5, 0x4, 0xc21]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x2, 0xb, "a26c7a5621471ddc69"}, {0x5, 0x8, "b57d991a2268"}, {0x6, 0x6, "27db8fcd"}, {0x6, 0x12, "d8bc618d37c8973baee9a0b546a23913"}, {0x7, 0xc, "f98f4c49e77ae710e4ab"}]}]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', 0x100}) 6.986582576s ago: executing program 2 (id=84): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x200, 0x0, 'queue1\x00'}) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x9d) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x400, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000300), &(0x7f00000000c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0xffffff81}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000c0004"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 6.810179682s ago: executing program 0 (id=85): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040d118305000000000000109022704b503e7161fbe76c7991afc1b8406d8e68bdd2400010000000809040000010300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f000000008000000e"], 0x24}}, 0x0) read(r1, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) dup(r3) syz_usb_connect$uac1(0x4, 0xb0, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000e2106b1d010140000102030109029e0003018170030904000000010100000a24010800010201020924030307030206050924030606030505070904010000010200000904010101010200000a240201000301080913090501090002090202072501023301000904020000010200000904020101010200000a2402018003f802ce67072401073205000b2402013b0407fbaf7c2b0724010708050009058209400076070d07250100040900"], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x240, 0x9, 0x6, 0x6, 0x8, 0x8}, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="050f460005141004020a8c84d1123cc6beeed9da17ba9f9ca20710020e9001000b10011c26003bfff7ff091410040b9646c7c27270304ae17a0202451f00a35cbbc53c74fd3692c33329091510b1354ada5b35bfc9d94ff8f5d953aee39d00ce"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x5202}}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f00000004c0)=""/198, 0xc6) 5.895446434s ago: executing program 2 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1/../file0', [], 0xa, "b5a4be350e761cb133a663b4ab379afe4b31e6783348b29e914224431b1f7740ca9a249fc145a1b6b32fe51de473baa1fa13e42d0d"}, 0x49) write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2ff) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x29, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x50}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) tee(r0, r3, 0x101, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000ab0c00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000000000b5080000000000007b8af0ff00000000bfa10000000000000701bfa4000000000000070407000000ffffb702000008001820182300000000000000fe283f8e2b11db2190010414f6b4b3bb", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500000069000000953c01583b0175d2f8cafe151f2b2162fa81faa1cabcd7"], &(0x7f0000000300)='GPL\x00', 0x100, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.434433444s ago: executing program 2 (id=89): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) (fail_nth: 17) 5.19816791s ago: executing program 5 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4a22, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) socket(0x2c, 0x0, 0x3f1a63b6) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000800)={r7, 0x3, 0x13e}, 0x8) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r12=>0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x103, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40043}, 0x20000040) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x30058, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) flock(r9, 0x2) 4.280134918s ago: executing program 2 (id=91): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000400)={0x5, 0x0, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002980)=ANY=[@ANYBLOB="242600003b0007010000000000000000017c00000400fc80100001800c00060081a456b59abfc10afc2502"], 0x2624}}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, 0x0, 0x0, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) r4 = syz_io_uring_setup(0x2ce0, &(0x7f0000000380)={0x0, 0x4b5d, 0x4000, 0x207, 0x10}, &(0x7f0000000200), &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101a00, 0x0) io_uring_enter(r4, 0x783f, 0xb395, 0x2, &(0x7f0000000280)={[0x3]}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'macvlan1\x00', @broadcast}) 4.089794142s ago: executing program 6 (id=92): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB="a5000000", @ANYRES32, @ANYRES32=r0], 0x64}}, 0x0) 3.872891925s ago: executing program 0 (id=93): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='net/raw6\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) lseek(r1, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000280)=""/223) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x5, 0x6}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00008f4000/0x1000)=nil, 0x3) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x7) sendmmsg$inet_sctp(r5, &(0x7f0000007c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}], 0x18, 0x4}], 0x1, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.422698784s ago: executing program 5 (id=94): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 3.365058644s ago: executing program 2 (id=95): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', <r1=>0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x9, 0x3, 0x8, 0xa6, 0x7ff, 0x3, 0x4, 0x80006, 0x5d01, 0x9, 0x1a31200, 0x6, 0x1ff, 0x8000, 0x9, 0xfffffffa, 0x200, 0xfff, 0x1, 0x4, 0x6, 0x3, 0xb, 0x4, 0x5fe, 0x4, 0x9, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x84, 0x9, 0x8000, 0x9, 0x2ff5, 0xffff, 0x7, 0x4, 0xd5, 0x4, 0x5, 0x8, 0x3ff, 0x4, 0x1, 0x8001, 0x8, 0xa85, 0x4, 0x7, 0x7, 0x1, 0x0, 0x0, 0xffff7fff, 0x1, 0xff, 0x7, 0x1, 0x4, 0x6, 0x1, 0xe6, 0x4, 0x1a, 0x1ff, 0xe, 0x55, 0x7, 0x6, 0x8000008, 0x400, 0x6, 0xffffffff, 0xfffffffe, 0x7, 0x0, 0x5, 0x400000, 0x6, 0x401, 0x3, 0x200, 0x1, 0x0, 0x6852, 0x10001, 0x0, 0x3, 0x4, 0xcb, 0xb0, 0xae, 0x8, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x8, 0x245, 0xfc, 0x8b, 0x80000000, 0x0, 0x5, 0x80000000, 0x5, 0x80000000, 0xa976362a, 0x9, 0x9, 0x8, 0xff, 0x80000000, 0x9, 0x8, 0xc869, 0xffff8001, 0xf7, 0x8, 0x40, 0x8, 0x1, 0xf1, 0x6, 0x7, 0x200, 0x2, 0x200, 0x8, 0x5, 0x8, 0x5, 0x7, 0x1, 0x9, 0x918, 0xc035, 0xe, 0x2, 0x3, 0x4, 0x5, 0x5, 0x7a60, 0x9d, 0xfffffffb, 0x1, 0x0, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x6, 0xc93, 0x13e, 0xff, 0x4, 0x2, 0x7, 0xcd3, 0x6, 0x4, 0xe, 0xffffa776, 0x401, 0x4, 0x8000, 0x3, 0xdbf, 0x10001, 0x0, 0x4, 0x5683e473, 0x13, 0x81, 0xa187, 0x4, 0x1ff, 0x66c, 0x7ff, 0x3610, 0xfffffffd, 0x5, 0x0, 0x9, 0x5, 0xfffff801, 0x0, 0x81, 0xfffffffb, 0x401, 0x80, 0x6, 0xe, 0x101, 0x4, 0x9, 0x9, 0x97c, 0xdb, 0x1, 0x8, 0x7, 0x8, 0x4fbf, 0x160, 0x2, 0x1, 0x5, 0x3, 0x3, 0xfffffff9, 0x5, 0x8, 0x3, 0x4, 0xa, 0x4, 0x6, 0x400, 0x0, 0x9, 0x2d29, 0x1, 0xffffffff, 0x8001, 0x5, 0x7, 0x9, 0xa, 0xec, 0x5, 0x9, 0xffff8acb, 0x4, 0x8, 0x4, 0x2, 0xffffff35, 0x9, 0x8, 0x5, 0x9, 0x7fff, 0x1, 0x6b, 0x81, 0x1, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x8001, 0x7f5}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) getsockname(r2, 0x0, &(0x7f0000000600)=0xfffffffffffffde9) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001540)=[{r5, 0x440}], 0x1, &(0x7f0000001580)={0x0, 0x3938700}, 0x0, 0x0) 3.313763559s ago: executing program 6 (id=96): write(0xffffffffffffffff, &(0x7f00000000c0)="822a", 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5423, &(0x7f00000000c0)) (fail_nth: 2) 2.326191869s ago: executing program 3 (id=97): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x0, 0x3, 0xd5}, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa3, 0xc5, 0x72, 0x10, 0xeb1a, 0xe300, 0xbd41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x2, 0x1, 0xe9, 0x67, 0x19, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20}}]}}]}}]}}, 0x0) 1.855860483s ago: executing program 6 (id=98): socket$can_j1939(0x1d, 0x2, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000101010400000000141a0000020000002400018014000180080003"], 0x64}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) execve(0x0, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 1.728197772s ago: executing program 0 (id=99): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a0000180905810310008000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0xa, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x7, 0xf}, {0x6, 0x24, 0x1a, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x80, 0x7d}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xa2, 0x6, 0x9, 0x0, 0x6}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0xf, 0x5c6}]}, 0x1, [{0x91, &(0x7f0000000100)=@string={0x91, 0x3, "092180ee9933ef20736331fd68ef8f30b58d14a912cb4bfca8b81f3bb5963e5adbaa6036d7da8faddd0a632d3841b402074bab608fff69233a781c790d9f08eaf037fb3732c04ffb3e5b43eb253dc79bbcd6c76ea470d54b41fa598a02c6b896776df7868b230baeb3fb0fb3b311be8bc3293c2cd3b27b52ee87601a429afd99843805fcd0e6b3a9012ab1d4fea200"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400205000000d55882"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.574749291s ago: executing program 6 (id=100): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x82, &(0x7f0000000040)={0xeed5}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) 1.315086834s ago: executing program 6 (id=101): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xa7c, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20004010, &(0x7f0000000600)={0x2, 0x4e24, @empty}, 0x10) 1.274846249s ago: executing program 5 (id=102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) flock(r6, 0x2) 982.761862ms ago: executing program 6 (id=103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c", 0xb}], 0x2, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 471.661889ms ago: executing program 2 (id=104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xf0b, 0x2, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9df}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x401}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7fff}]}}]}, 0x48}}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="b283", 0x2}], 0x1}, 0x8000) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) sendfile(r4, r5, 0x0, 0x3e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./bus\x00', 0x2000, 0x1) execve(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)={[&(0x7f0000000040)='#\x00', &(0x7f0000000080)='(/\x00', &(0x7f0000000100)=',#\x00']}, &(0x7f00000002c0)={[&(0x7f00000001c0)='/!}^^^:,[^:*#:&@\x00', &(0x7f0000000240)='/{,{\"\x00']}) mknod$loop(&(0x7f0000000200)='./bus\x00', 0x208c, 0x0) 177.84384ms ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) (fail_nth: 9) 0s ago: executing program 5 (id=106): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000400)={0x5, 0x0, "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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 71.691326][ T5823] cgroup: Unknown subsys name 'net' [ 71.841195][ T5823] cgroup: Unknown subsys name 'cpuset' [ 71.849832][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.393487][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.761729][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.773486][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.777160][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.781526][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.791706][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.795738][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.803549][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.809766][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.820044][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.823863][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.837891][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.845264][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.853919][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.858068][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.861659][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.876282][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.884048][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.891429][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.892603][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.898865][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.907293][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.915288][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.920408][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.928019][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.937379][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.941038][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.959426][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.962772][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.969263][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.981227][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.406186][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 76.517732][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 76.581260][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 76.600456][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 76.629674][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.637438][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.645142][ T5850] bridge_slave_0: entered allmulticast mode [ 76.652310][ T5850] bridge_slave_0: entered promiscuous mode [ 76.680347][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.687526][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.695443][ T5850] bridge_slave_1: entered allmulticast mode [ 76.703021][ T5850] bridge_slave_1: entered promiscuous mode [ 76.833035][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.852580][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.859875][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.867062][ T5852] bridge_slave_0: entered allmulticast mode [ 76.874287][ T5852] bridge_slave_0: entered promiscuous mode [ 76.881812][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.889475][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.896667][ T5852] bridge_slave_1: entered allmulticast mode [ 76.903752][ T5852] bridge_slave_1: entered promiscuous mode [ 76.933476][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.019433][ T5850] team0: Port device team_slave_0 added [ 77.027264][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.040259][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.069049][ T5850] team0: Port device team_slave_1 added [ 77.074934][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 77.094349][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.101876][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.110137][ T5855] bridge_slave_0: entered allmulticast mode [ 77.116883][ T5855] bridge_slave_0: entered promiscuous mode [ 77.125454][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.132720][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.140477][ T5855] bridge_slave_1: entered allmulticast mode [ 77.147211][ T5855] bridge_slave_1: entered promiscuous mode [ 77.154747][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.162070][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.170191][ T5856] bridge_slave_0: entered allmulticast mode [ 77.177272][ T5856] bridge_slave_0: entered promiscuous mode [ 77.185305][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.192657][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.200062][ T5856] bridge_slave_1: entered allmulticast mode [ 77.206786][ T5856] bridge_slave_1: entered promiscuous mode [ 77.272886][ T5852] team0: Port device team_slave_0 added [ 77.284888][ T5852] team0: Port device team_slave_1 added [ 77.312404][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.323231][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.349817][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.379405][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.394456][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.406189][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.416676][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.424320][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.451041][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.503140][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.534594][ T5856] team0: Port device team_slave_0 added [ 77.553822][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.561184][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.588205][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.620066][ T5856] team0: Port device team_slave_1 added [ 77.628649][ T5855] team0: Port device team_slave_0 added [ 77.642664][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.650010][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.676443][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.700931][ T5855] team0: Port device team_slave_1 added [ 77.771404][ T5850] hsr_slave_0: entered promiscuous mode [ 77.778018][ T5850] hsr_slave_1: entered promiscuous mode [ 77.794276][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.801577][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.809510][ T5854] bridge_slave_0: entered allmulticast mode [ 77.816274][ T5854] bridge_slave_0: entered promiscuous mode [ 77.823892][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.831151][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.838497][ T5854] bridge_slave_1: entered allmulticast mode [ 77.845734][ T5854] bridge_slave_1: entered promiscuous mode [ 77.863649][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.870820][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.897438][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.910160][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.917131][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.944036][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.956514][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.963792][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.990244][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.018665][ T5146] Bluetooth: hci2: command tx timeout [ 78.021610][ T5839] Bluetooth: hci0: command tx timeout [ 78.024257][ T5846] Bluetooth: hci1: command tx timeout [ 78.035871][ T5842] Bluetooth: hci3: command tx timeout [ 78.046099][ T5852] hsr_slave_0: entered promiscuous mode [ 78.052658][ T5852] hsr_slave_1: entered promiscuous mode [ 78.059044][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.066826][ T5852] Cannot create hsr debugfs directory [ 78.087866][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.094859][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.121091][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.131732][ T5842] Bluetooth: hci4: command tx timeout [ 78.145623][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.158600][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.206915][ T5854] team0: Port device team_slave_0 added [ 78.254437][ T5854] team0: Port device team_slave_1 added [ 78.288139][ T5856] hsr_slave_0: entered promiscuous mode [ 78.294647][ T5856] hsr_slave_1: entered promiscuous mode [ 78.301060][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.308685][ T5856] Cannot create hsr debugfs directory [ 78.334806][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.341906][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.368161][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.393151][ T5855] hsr_slave_0: entered promiscuous mode [ 78.400022][ T5855] hsr_slave_1: entered promiscuous mode [ 78.407156][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.414881][ T5855] Cannot create hsr debugfs directory [ 78.435771][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.442908][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.469218][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.647188][ T5854] hsr_slave_0: entered promiscuous mode [ 78.656971][ T5854] hsr_slave_1: entered promiscuous mode [ 78.663975][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.672031][ T5854] Cannot create hsr debugfs directory [ 78.838040][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.850236][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.881016][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.908659][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.970798][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.005767][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.028831][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.044787][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.059513][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.071906][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.081602][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.114825][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.171281][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.194509][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.205505][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.245853][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.315884][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.330728][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.349989][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.360425][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.375209][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.411906][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.437988][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.445316][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.475806][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.482996][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.544939][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.570304][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.603558][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.657326][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.664483][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.675519][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.682759][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.694933][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.725807][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.764734][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.771899][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.812012][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.819172][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.855821][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.885133][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.926118][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.933273][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.944697][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.951862][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.995866][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.051772][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.074745][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.098401][ T5842] Bluetooth: hci3: command tx timeout [ 80.098471][ T5846] Bluetooth: hci0: command tx timeout [ 80.103832][ T5842] Bluetooth: hci1: command tx timeout [ 80.109617][ T5846] Bluetooth: hci2: command tx timeout [ 80.142760][ T5850] veth0_vlan: entered promiscuous mode [ 80.154990][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.162145][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.172741][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.179948][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.187423][ T5846] Bluetooth: hci4: command tx timeout [ 80.212254][ T5850] veth1_vlan: entered promiscuous mode [ 80.255270][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.295630][ T5856] veth0_vlan: entered promiscuous mode [ 80.343950][ T5856] veth1_vlan: entered promiscuous mode [ 80.375344][ T5850] veth0_macvtap: entered promiscuous mode [ 80.387116][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.406611][ T5850] veth1_macvtap: entered promiscuous mode [ 80.449411][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.476408][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.496154][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.509356][ T5856] veth0_macvtap: entered promiscuous mode [ 80.540154][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549546][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.560248][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.569274][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.596652][ T5852] veth0_vlan: entered promiscuous mode [ 80.605595][ T5856] veth1_macvtap: entered promiscuous mode [ 80.638263][ T5854] veth0_vlan: entered promiscuous mode [ 80.652701][ T5852] veth1_vlan: entered promiscuous mode [ 80.687118][ T5852] veth0_macvtap: entered promiscuous mode [ 80.705694][ T5854] veth1_vlan: entered promiscuous mode [ 80.725518][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.736622][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.756595][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.773316][ T5855] veth0_vlan: entered promiscuous mode [ 80.782529][ T5852] veth1_macvtap: entered promiscuous mode [ 80.822300][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.833817][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.845032][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.855853][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.864901][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.875271][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884541][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.904367][ T5855] veth1_vlan: entered promiscuous mode [ 80.910561][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.923475][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.923578][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.935580][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951842][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.962625][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.974072][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.999460][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.011060][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.024333][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.036788][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.049150][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.087220][ T5854] veth0_macvtap: entered promiscuous mode [ 81.109326][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.119291][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128662][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.137399][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.157943][ T5854] veth1_macvtap: entered promiscuous mode [ 81.165358][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.173736][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.237471][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.255264][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.273174][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.293391][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.305890][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.316796][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.332240][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.364289][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.395386][ T5855] veth0_macvtap: entered promiscuous mode [ 81.410106][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.421360][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.431689][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.442270][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.452395][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.464292][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.475231][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.504377][ T5855] veth1_macvtap: entered promiscuous mode [ 81.534154][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.544556][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.553929][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.563060][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.576740][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.596339][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.615523][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.621590][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.654874][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.665840][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.677302][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.688121][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703634][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.726878][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.748034][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.844558][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.861909][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.872229][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.883757][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.894136][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.905253][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.915852][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.926370][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.936351][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.947696][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.962167][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.983751][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.992713][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.002467][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.011333][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.023680][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.050980][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.086882][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.101248][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.163605][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.179764][ T5846] Bluetooth: hci1: command tx timeout [ 82.185844][ T5146] Bluetooth: hci0: command tx timeout [ 82.185913][ T5839] Bluetooth: hci2: command tx timeout [ 82.197032][ T5842] Bluetooth: hci3: command tx timeout [ 82.199304][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.259634][ T5842] Bluetooth: hci4: command tx timeout [ 82.377409][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.403310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.553517][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.597718][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.640213][ T5911] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 82.779627][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.794223][ T5914] mmap: syz.4.5 (5914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.809794][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.842042][ T5917] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 82.850161][ T5917] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.904040][ T5917] team0: Port device virt_wifi0 added [ 83.208763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.659593][ T5929] openvswitch: netlink: IP tunnel dst address not specified [ 83.738281][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.778402][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.987436][ T5888] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 84.012287][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.069925][ T5888] usb 2-1: Product: syz [ 84.076205][ T5888] usb 2-1: Manufacturer: syz [ 84.083681][ T5888] usb 2-1: SerialNumber: syz [ 84.114153][ T5888] usb 2-1: config 0 descriptor?? [ 84.258437][ T5839] Bluetooth: hci2: command tx timeout [ 84.258609][ T5846] Bluetooth: hci1: command tx timeout [ 84.264620][ T5839] Bluetooth: hci0: command tx timeout [ 84.278203][ T5842] Bluetooth: hci3: command tx timeout [ 84.339193][ T5842] Bluetooth: hci4: command tx timeout [ 84.351974][ T5888] hso 2-1:0.0: Can't find BULK IN endpoint [ 84.372388][ T5888] usb-storage 2-1:0.0: USB Mass Storage device detected [ 84.419049][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.561721][ T5890] usb 2-1: USB disconnect, device number 2 [ 84.609080][ T5889] usb 4-1: config index 0 descriptor too short (expected 1063, got 36) [ 84.647900][ T5889] usb 4-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 84.656660][ T5889] usb 4-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 84.686375][ T5889] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 84.696657][ T5889] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 84.706029][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.708695][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 84.735634][ T5950] team0: entered promiscuous mode [ 84.745615][ T5950] team_slave_0: entered promiscuous mode [ 84.755347][ T5950] team_slave_1: entered promiscuous mode [ 84.764243][ T5950] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 84.779529][ T5950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.788421][ T5950] team0: left promiscuous mode [ 84.793285][ T5950] team_slave_0: left promiscuous mode [ 84.799080][ T5950] team_slave_1: left promiscuous mode [ 84.804637][ T5950] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 84.909059][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.948055][ T5889] usb 4-1: string descriptor 0 read error: -71 [ 84.975136][ T5889] usb 4-1: USB disconnect, device number 2 [ 85.003962][ T30] audit: type=1326 audit(1742785408.741:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.045013][ T30] audit: type=1326 audit(1742785408.741:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.067352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.103866][ T30] audit: type=1326 audit(1742785408.741:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.128499][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.156397][ T30] audit: type=1326 audit(1742785408.741:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.165018][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.178853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 85.257548][ T30] audit: type=1326 audit(1742785408.741:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.284326][ T5891] usb 5-1: New USB device found, idVendor=056a, idProduct=0042, bcdDevice= 0.00 [ 85.299293][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.333984][ T5891] usb 5-1: config 0 descriptor?? [ 85.360351][ T30] audit: type=1326 audit(1742785408.741:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.386441][ T30] audit: type=1326 audit(1742785408.741:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.409609][ T30] audit: type=1326 audit(1742785408.741:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.432550][ T30] audit: type=1326 audit(1742785408.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.503655][ T30] audit: type=1326 audit(1742785408.741:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f946f129359 code=0x7ffc0000 [ 85.667662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.686605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.771259][ T5891] wacom 0003:056A:0042.0001: item fetching failed at offset 10/11 [ 85.780890][ T5891] wacom 0003:056A:0042.0001: parse failed [ 85.800800][ T5891] wacom 0003:056A:0042.0001: probe with driver wacom failed with error -22 [ 85.995162][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 86.071329][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.088048][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'. [ 86.096077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.338724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.418382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.871063][ T5974] geneve1: entered allmulticast mode [ 86.920634][ T5974] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 87.598721][ T3589] usb 5-1: USB disconnect, device number 2 [ 88.108305][ T3589] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.219956][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.263843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.299358][ T3589] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 88.331119][ T3589] usb 5-1: config 0 has no interface number 0 [ 88.337382][ T3589] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.413152][ T3589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.475070][ T5890] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 88.556289][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.581860][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.604232][ T5890] usb 2-1: config 0 descriptor?? [ 88.627545][ T3589] usb 5-1: config 0 descriptor?? [ 88.644623][ T3589] cp210x 5-1:0.32: cp210x converter detected [ 88.645461][ T5890] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 88.689076][ T5890] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 88.746647][ T10] usb 1-1: config index 0 descriptor too short (expected 1063, got 36) [ 88.760553][ T10] usb 1-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 88.783122][ T10] usb 1-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 88.866937][ T10] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 88.866987][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 88.867014][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.977632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.018540][ T5997] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 89.047162][ T3589] cp210x 5-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 89.092242][ T10] usb 1-1: string descriptor 0 read error: -71 [ 89.099189][ T10] usb 1-1: USB disconnect, device number 2 [ 89.272200][ T3589] cp210x 5-1:0.32: GPIO initialisation failed: -19 [ 89.305134][ T3589] usb 5-1: cp210x converter now attached to ttyUSB0 [ 89.847404][ T6005] @�: renamed from bond_slave_0 (while UP) [ 90.023144][ T3589] usb 5-1: USB disconnect, device number 3 [ 90.050310][ T3589] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 90.212599][ T6007] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 90.224004][ T3589] cp210x 5-1:0.32: device disconnected [ 90.387754][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.572156][ T6007] Zero length message leads to an empty skb [ 90.685066][ T967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.940837][ T5890] usb 3-1: config 0 has no interfaces? [ 90.958718][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.968219][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.003456][ T5890] usb 3-1: Product: syz [ 91.059063][ T5890] usb 3-1: Manufacturer: syz [ 91.069092][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 91.089403][ T5890] usb 3-1: SerialNumber: syz [ 91.112290][ T967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.168250][ T5890] usb 3-1: config 0 descriptor?? [ 91.360919][ T5890] usb 2-1: USB disconnect, device number 3 [ 91.551902][ T967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.661460][ T967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.902463][ T6022] FAULT_INJECTION: forcing a failure. [ 91.902463][ T6022] name failslab, interval 1, probability 0, space 0, times 1 [ 91.998003][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.022775][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.1.42 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 92.022803][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.022820][ T6022] Call Trace: [ 92.022831][ T6022] <TASK> [ 92.022840][ T6022] dump_stack_lvl+0x241/0x360 [ 92.022910][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.022934][ T6022] ? __pfx__printk+0x10/0x10 [ 92.022956][ T6022] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 92.022988][ T6022] ? __pfx___might_resched+0x10/0x10 [ 92.023019][ T6022] should_fail_ex+0x40a/0x550 [ 92.023054][ T6022] should_failslab+0xac/0x100 [ 92.023081][ T6022] kmem_cache_alloc_node_noprof+0x77/0x380 [ 92.023111][ T6022] ? __alloc_skb+0x1c3/0x440 [ 92.023134][ T6022] __alloc_skb+0x1c3/0x440 [ 92.023159][ T6022] ? __pfx___alloc_skb+0x10/0x10 [ 92.023185][ T6022] ? netlink_ack_tlv_len+0x6e/0x200 [ 92.023213][ T6022] netlink_ack+0x145/0xa60 [ 92.023235][ T6022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.023270][ T6022] ? ref_tracker_free+0x643/0x7e0 [ 92.023296][ T6022] netlink_rcv_skb+0x294/0x480 [ 92.023322][ T6022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.023352][ T6022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.023398][ T6022] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.023426][ T6022] netlink_unicast+0x7f6/0x990 [ 92.023457][ T6022] ? __pfx_netlink_unicast+0x10/0x10 [ 92.023477][ T6022] ? __virt_addr_valid+0x45f/0x530 [ 92.023498][ T6022] ? __phys_addr_symbol+0x2f/0x70 [ 92.023527][ T6022] ? __check_object_size+0x47a/0x730 [ 92.023559][ T6022] netlink_sendmsg+0x8de/0xcb0 [ 92.023595][ T6022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.023625][ T6022] ? aa_sock_msg_perm+0x91/0x160 [ 92.023663][ T6022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.023687][ T6022] __sock_sendmsg+0x221/0x270 [ 92.023718][ T6022] ____sys_sendmsg+0x53a/0x860 [ 92.023749][ T6022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.023771][ T6022] ? __fget_files+0x2a/0x410 [ 92.023804][ T6022] ? __fget_files+0x2a/0x410 [ 92.023841][ T6022] __sys_sendmsg+0x269/0x350 [ 92.023868][ T6022] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.023902][ T6022] ? do_sys_openat2+0x17a/0x1d0 [ 92.023957][ T6022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.023990][ T6022] ? do_syscall_64+0x100/0x230 [ 92.024012][ T6022] ? do_syscall_64+0xb6/0x230 [ 92.024034][ T6022] do_syscall_64+0xf3/0x230 [ 92.024052][ T6022] ? clear_bhb_loop+0x35/0x90 [ 92.024085][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.024112][ T6022] RIP: 0033:0x7fadaaf8d169 [ 92.024137][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.024153][ T6022] RSP: 002b:00007fada8df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.024175][ T6022] RAX: ffffffffffffffda RBX: 00007fadab1a5fa0 RCX: 00007fadaaf8d169 [ 92.024190][ T6022] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 92.024203][ T6022] RBP: 00007fada8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.024216][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.024228][ T6022] R13: 0000000000000000 R14: 00007fadab1a5fa0 R15: 00007fadab2cfa28 [ 92.024257][ T6022] </TASK> [ 92.170116][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 92.388345][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.409217][ T47] cfg80211: failed to load regulatory.db [ 92.427078][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.435759][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 92.446473][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.466189][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 92.476549][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 92.486720][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 92.496184][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.506634][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.515293][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.527755][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.536106][ T5891] usb 1-1: config 0 descriptor?? [ 92.720421][ T967] bridge_slave_1: left allmulticast mode [ 92.743650][ T967] bridge_slave_1: left promiscuous mode [ 92.745839][ T5891] hdpvr 1-1:0.0: firmware version 0x8 dated �)�#���jn�� [ 92.829920][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.880508][ T967] bridge_slave_0: left allmulticast mode [ 92.880554][ T967] bridge_slave_0: left promiscuous mode [ 92.880753][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.211478][ T5891] hdpvr 1-1:0.0: Could not setup controls [ 93.247237][ T5891] hdpvr 1-1:0.0: registering videodev failed [ 93.288266][ T5934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.311211][ T5891] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 93.362543][ T5891] usb 1-1: USB disconnect, device number 3 [ 93.503765][ T5934] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 93.523534][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.559768][ T5934] usb 4-1: config 0 has no interface number 0 [ 93.582157][ T5934] usb 4-1: too many endpoints for config 0 interface 6 altsetting 223: 144, using maximum allowed: 30 [ 93.615012][ T5934] usb 4-1: config 0 interface 6 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 93.654304][ T5934] usb 4-1: config 0 interface 6 has no altsetting 0 [ 93.669180][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.685743][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.708572][ T5934] usb 4-1: config 0 descriptor?? [ 93.920760][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.934061][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.961039][ T10] usb 3-1: USB disconnect, device number 2 [ 94.000735][ T30] kauditd_printk_skb: 1839 callbacks suppressed [ 94.000754][ T30] audit: type=1326 audit(1742785417.741:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.060336][ T5934] usb 4-1: string descriptor 0 read error: -32 [ 94.073160][ T30] audit: type=1326 audit(1742785417.741:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.098682][ T30] audit: type=1326 audit(1742785417.741:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.121574][ T30] audit: type=1326 audit(1742785417.741:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.144503][ T30] audit: type=1326 audit(1742785417.741:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.166949][ T30] audit: type=1326 audit(1742785417.741:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.187838][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.199938][ T30] audit: type=1326 audit(1742785417.741:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.222458][ T30] audit: type=1326 audit(1742785417.751:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f317258cd6b code=0x7ffc0000 [ 94.245683][ T30] audit: type=1326 audit(1742785417.751:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f317258cd6b code=0x7ffc0000 [ 94.268844][ T30] audit: type=1326 audit(1742785417.751:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 94.337088][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.357115][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.370226][ T967] bond0 (unregistering): Released all slaves [ 94.380143][ T5891] usb 1-1: config index 0 descriptor too short (expected 1063, got 36) [ 94.388627][ T5891] usb 1-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 94.410499][ T5891] usb 1-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 94.428575][ T5891] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 94.443590][ T5891] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 94.453283][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.577896][ T5839] Bluetooth: hci2: command tx timeout [ 94.721676][ T5891] usb 1-1: string descriptor 0 read error: -71 [ 94.758027][ T5891] usb 1-1: USB disconnect, device number 4 [ 94.769888][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.808208][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.853287][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 95.032143][ T967] hsr_slave_0: left promiscuous mode [ 95.048564][ T967] hsr_slave_1: left promiscuous mode [ 95.058728][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.077205][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.098387][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.105895][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.131189][ T6049] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 95.166221][ T967] veth1_macvtap: left promiscuous mode [ 95.175863][ T967] veth0_macvtap: left promiscuous mode [ 95.188315][ T967] veth1_vlan: left promiscuous mode [ 95.193992][ T967] veth0_vlan: left promiscuous mode [ 95.555675][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.570720][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.580063][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.588515][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.597198][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.605671][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.912695][ T5887] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 96.076314][ T3589] usb 4-1: USB disconnect, device number 3 [ 96.091162][ T5887] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 96.114880][ T5887] usb 1-1: config 0 has no interface number 0 [ 96.121812][ T5887] usb 1-1: config 0 interface 29 has no altsetting 0 [ 96.142015][ T5887] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 96.168574][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.178664][ T967] team0 (unregistering): Port device team_slave_1 removed [ 96.188171][ T5887] usb 1-1: Product: syz [ 96.192392][ T5887] usb 1-1: Manufacturer: syz [ 96.197028][ T5887] usb 1-1: SerialNumber: syz [ 96.214258][ T5887] usb 1-1: config 0 descriptor?? [ 96.246740][ T967] team0 (unregistering): Port device team_slave_0 removed [ 96.664877][ T5842] Bluetooth: hci2: command tx timeout [ 97.137749][ T5887] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 97.244053][ T5887] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 97.250409][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.265569][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.273028][ T6026] bridge_slave_0: entered allmulticast mode [ 97.290050][ T6026] bridge_slave_0: entered promiscuous mode [ 97.298643][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.305766][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.313357][ T6026] bridge_slave_1: entered allmulticast mode [ 97.323754][ T6026] bridge_slave_1: entered promiscuous mode [ 97.508607][ T5887] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 97.544817][ T5887] usb 1-1: USB disconnect, device number 5 [ 97.649232][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.684785][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.703343][ T5842] Bluetooth: hci3: command tx timeout [ 97.908394][ T6026] team0: Port device team_slave_0 added [ 97.957333][ T6026] team0: Port device team_slave_1 added [ 98.065314][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 98.747909][ T5842] Bluetooth: hci2: command tx timeout [ 98.805372][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.830892][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.979540][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.078939][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.105971][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.193754][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.288181][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.505045][ T5891] usb 1-1: config index 0 descriptor too short (expected 1063, got 36) [ 99.547937][ T5891] usb 1-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 99.631591][ T5891] usb 1-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 99.707689][ T5891] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 99.723327][ T6026] hsr_slave_0: entered promiscuous mode [ 99.730168][ T5891] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 99.760985][ T6026] hsr_slave_1: entered promiscuous mode [ 99.767167][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.775148][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.787714][ T5842] Bluetooth: hci3: command tx timeout [ 99.803840][ T6026] Cannot create hsr debugfs directory [ 99.893486][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.908504][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.997908][ T6062] bridge_slave_0: entered allmulticast mode [ 100.019330][ T6062] bridge_slave_0: entered promiscuous mode [ 100.114878][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.172359][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.204282][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.268287][ T6062] bridge_slave_1: entered allmulticast mode [ 100.286704][ T6062] bridge_slave_1: entered promiscuous mode [ 100.311393][ T5891] usb 1-1: string descriptor 0 read error: -71 [ 100.371616][ T5891] usb 1-1: USB disconnect, device number 6 [ 100.463883][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.514736][ T6125] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.689597][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.709947][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.772929][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.879920][ T5839] Bluetooth: hci2: command tx timeout [ 100.969174][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.093106][ T6062] team0: Port device team_slave_0 added [ 101.134812][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.230630][ T6062] team0: Port device team_slave_1 added [ 101.451912][ T5890] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 101.531019][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.539423][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.539441][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.539466][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.577716][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.595752][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.613027][ T5890] usb 3-1: config 0 descriptor?? [ 101.621381][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.647997][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.684988][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.701735][ T5890] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 101.710429][ T5890] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 101.808792][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.839013][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 101.858553][ T5839] Bluetooth: hci3: command tx timeout [ 101.891249][ T6062] hsr_slave_0: entered promiscuous mode [ 101.899948][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 101.939275][ T6062] hsr_slave_1: entered promiscuous mode [ 101.950393][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 101.970843][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.978618][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 101.997115][ T6062] Cannot create hsr debugfs directory [ 102.026209][ T26] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 102.026242][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.035638][ T26] usb 1-1: config 0 descriptor?? [ 102.069924][ T1145] bridge_slave_1: left allmulticast mode [ 102.076751][ T1145] bridge_slave_1: left promiscuous mode [ 102.087932][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.105971][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.127417][ T1145] bridge_slave_0: left allmulticast mode [ 102.145602][ T1145] bridge_slave_0: left promiscuous mode [ 102.157903][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.267722][ T10] usb 4-1: device descriptor read/64, error -71 [ 102.303416][ T26] hdpvr 1-1:0.0: firmware version 0x8 dated �)�#���jn�� [ 102.391255][ T10] usb usb4-port1: attempt power cycle [ 102.525208][ T1145] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 102.733543][ T26] hdpvr 1-1:0.0: Could not setup controls [ 102.740767][ T26] hdpvr 1-1:0.0: registering videodev failed [ 102.792535][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.815387][ T26] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 102.844935][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.870647][ T26] usb 1-1: USB disconnect, device number 7 [ 102.933874][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.995095][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.021155][ T1145] bond0 (unregistering): Released all slaves [ 103.124697][ T6026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.132210][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.155105][ T6026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.164302][ T10] usb 4-1: device descriptor read/8, error -71 [ 103.208250][ T6026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.251212][ T6026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.278254][ T10] usb usb4-port1: unable to enumerate USB device [ 103.454943][ T1145] hsr_slave_0: left promiscuous mode [ 103.475292][ T1145] hsr_slave_1: left promiscuous mode [ 103.489612][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.526557][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.552414][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.562077][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.645188][ T1145] veth1_macvtap: left promiscuous mode [ 103.656269][ T1145] veth0_macvtap: left promiscuous mode [ 103.665197][ T1145] veth1_vlan: left promiscuous mode [ 103.690257][ T1145] veth0_vlan: left promiscuous mode [ 103.965609][ T5839] Bluetooth: hci3: command tx timeout [ 104.064197][ T10] usb 3-1: USB disconnect, device number 3 [ 104.627665][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 104.627685][ T30] audit: type=1326 audit(1742785428.341:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 104.675539][ T30] audit: type=1326 audit(1742785428.341:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f946f18bad0 code=0x7ffc0000 [ 104.733863][ T30] audit: type=1326 audit(1742785428.341:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f946f18bad0 code=0x7ffc0000 [ 104.851151][ T30] audit: type=1326 audit(1742785428.341:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.006159][ T30] audit: type=1326 audit(1742785428.341:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.087069][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.087755][ T30] audit: type=1326 audit(1742785428.341:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.168061][ T30] audit: type=1326 audit(1742785428.341:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.207450][ T30] audit: type=1326 audit(1742785428.341:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.267504][ T30] audit: type=1326 audit(1742785428.341:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.298722][ T30] audit: type=1326 audit(1742785428.341:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946f18d169 code=0x7ffc0000 [ 105.331051][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 105.344427][ T26] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 105.372654][ T26] usb 1-1: config 0 has no interface number 0 [ 105.380497][ T26] usb 1-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.417117][ T26] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 105.436697][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.446110][ T26] usb 1-1: Product: syz [ 105.461422][ T26] usb 1-1: Manufacturer: syz [ 105.466061][ T26] usb 1-1: SerialNumber: syz [ 105.494101][ T26] usb 1-1: config 0 descriptor?? [ 105.504848][ T26] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 105.516482][ T26] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 105.720435][ T26] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 105.863635][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 105.935366][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.948123][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.049182][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 106.205578][ T26] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 106.810819][ T6197] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.037954][ T5891] usb 1-1: USB disconnect, device number 8 [ 107.044219][ T5891] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 107.161888][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.175077][ T6062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.201088][ T6062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.254329][ T6062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.271485][ T6062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.340323][ T10] usb 3-1: config index 0 descriptor too short (expected 1063, got 36) [ 107.367931][ T10] usb 3-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 107.384344][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.397516][ T10] usb 3-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 107.427834][ T10] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 107.448768][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.457540][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 107.474793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.507749][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.515757][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.535502][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.542719][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.769409][ T10] usb 3-1: string descriptor 0 read error: -71 [ 107.788333][ T10] usb 3-1: USB disconnect, device number 4 [ 107.844027][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.974507][ T6201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.990747][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.016612][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.086604][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.093788][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.159219][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.176406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.183581][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.286695][ T6026] veth0_vlan: entered promiscuous mode [ 108.303672][ T6026] veth1_vlan: entered promiscuous mode [ 108.357141][ T5887] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 108.384614][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.406784][ T5887] usb 1-1: config 0 descriptor?? [ 108.450408][ T5887] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 108.467375][ T5887] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 108.483392][ T6026] veth0_macvtap: entered promiscuous mode [ 108.621596][ T6026] veth1_macvtap: entered promiscuous mode [ 108.806914][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.953321][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.017755][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.049400][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.085687][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.100270][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.111848][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.194849][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.215336][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 109.246917][ T5934] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 109.258652][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.270083][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.303631][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.325259][ T5934] usb 4-1: Product: syz [ 109.332216][ T5934] usb 4-1: Manufacturer: syz [ 109.339222][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.357724][ T5934] usb 4-1: SerialNumber: syz [ 109.375164][ T5934] usb 4-1: config 0 descriptor?? [ 109.386163][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.527291][ T5934] viperboard 4-1:0.0: version 0.00 found at bus 004 address 008 [ 109.558021][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.581251][ T5934] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 109.595917][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.660562][ T5934] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 109.685541][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.718952][ T5934] usb 4-1: USB disconnect, device number 8 [ 109.725144][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.813350][ T6026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.839153][ T6026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.863453][ T6026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.878366][ T6026] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.150201][ T6062] veth0_vlan: entered promiscuous mode [ 110.409621][ T6062] veth1_vlan: entered promiscuous mode [ 110.909756][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.921006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.121449][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 111.121464][ T30] audit: type=1326 audit(1742785434.821:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 111.317804][ T30] audit: type=1326 audit(1742785434.821:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 111.354564][ T30] audit: type=1326 audit(1742785435.081:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 111.363419][ T6062] veth0_macvtap: entered promiscuous mode [ 111.377423][ T30] audit: type=1326 audit(1742785435.081:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 111.406343][ T30] audit: type=1326 audit(1742785435.081:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317258d169 code=0x7ffc0000 [ 111.429150][ T30] audit: type=1326 audit(1742785435.081:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f317258f087 code=0x7ffc0000 [ 111.475398][ T30] audit: type=1326 audit(1742785435.081:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f317258effc code=0x7ffc0000 [ 111.506268][ T30] audit: type=1326 audit(1742785435.241:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f317258ef34 code=0x7ffc0000 [ 111.604899][ T5887] usb 1-1: USB disconnect, device number 9 [ 111.611100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.663970][ T30] audit: type=1326 audit(1742785435.241:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f317258ef34 code=0x7ffc0000 [ 111.702734][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.733145][ T6062] veth1_macvtap: entered promiscuous mode [ 111.747267][ T30] audit: type=1326 audit(1742785435.241:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f317258bdca code=0x7ffc0000 [ 111.843946][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.864130][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.896486][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.927633][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.967754][ T5934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.993727][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.006880][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.038730][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.054239][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.066542][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.112408][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.127802][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.128216][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 112.145657][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.161122][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.173782][ T5934] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.173813][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.173838][ T5934] usb 3-1: Product: syz [ 112.192278][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.216008][ T5934] usb 3-1: Manufacturer: syz [ 112.236387][ T5934] usb 3-1: SerialNumber: syz [ 112.242540][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.250670][ T5934] r8152-cfgselector 3-1: Unknown version 0x0000 [ 112.259939][ T5934] r8152-cfgselector 3-1: config 0 descriptor?? [ 112.282682][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.294568][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.326138][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.361737][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.384344][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.397764][ T5887] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 112.406861][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.434745][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.477037][ T5887] usb 1-1: config 0 descriptor?? [ 112.494311][ T6062] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.567773][ T6062] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.576568][ T6062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.644733][ T6062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.981332][ T5889] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 112.989681][ T5887] hid-led 0003:04D8:F372.0002: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 112.992551][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.054821][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.153242][ T5887] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 113.180948][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.201525][ T5887] usb 1-1: USB disconnect, device number 10 [ 113.220604][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.258802][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.271448][ T6195] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 113.333726][ T6195] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 113.393359][ T12] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 113.422713][ T1145] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 113.472281][ T1145] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 113.502312][ T47] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 113.522779][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.533061][ T1145] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 113.580148][ T47] usb 6-1: Product: syz [ 113.581945][ T967] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 113.592543][ T47] usb 6-1: Manufacturer: syz [ 113.592568][ T47] usb 6-1: SerialNumber: syz [ 113.603600][ T47] usb 6-1: config 0 descriptor?? [ 113.655441][ T47] ch341 6-1:0.0: ch341-uart converter detected [ 113.717355][ T967] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 113.777954][ T967] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 113.838439][ T1145] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 113.877420][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.916649][ T967] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 113.963036][ T6283] FAULT_INJECTION: forcing a failure. [ 113.963036][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 113.976285][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.001605][ T967] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 114.016157][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.031848][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.041038][ T1145] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 114.081678][ T6195] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 114.107754][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.6.49 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 114.107784][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.107796][ T6283] Call Trace: [ 114.107804][ T6283] <TASK> [ 114.107812][ T6283] dump_stack_lvl+0x241/0x360 [ 114.107844][ T6283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.107868][ T6283] ? __pfx__printk+0x10/0x10 [ 114.107891][ T6283] ? fs_reclaim_acquire+0x93/0x130 [ 114.107913][ T6283] ? __pfx___might_resched+0x10/0x10 [ 114.107939][ T6283] ? dynamic_dname+0x144/0x1b0 [ 114.107963][ T6283] should_fail_ex+0x40a/0x550 [ 114.107999][ T6283] should_failslab+0xac/0x100 [ 114.108028][ T6283] __kmalloc_noprof+0xdd/0x4c0 [ 114.108056][ T6283] ? tomoyo_encode+0x26f/0x540 [ 114.108081][ T6283] tomoyo_encode+0x26f/0x540 [ 114.108103][ T6283] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 114.108133][ T6283] tomoyo_realpath_from_path+0x59e/0x5e0 [ 114.108166][ T6283] tomoyo_path_number_perm+0x239/0x770 [ 114.108195][ T6283] ? __lock_acquire+0x1397/0x2100 [ 114.108227][ T6283] ? tomoyo_path_number_perm+0x209/0x770 [ 114.108258][ T6283] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.108325][ T6283] ? __fget_files+0x2a/0x410 [ 114.108359][ T6283] ? __fget_files+0x2a/0x410 [ 114.108400][ T6283] security_file_ioctl+0xc6/0x2a0 [ 114.108429][ T6283] __se_sys_ioctl+0x46/0x170 [ 114.108455][ T6283] do_syscall_64+0xf3/0x230 [ 114.108477][ T6283] ? clear_bhb_loop+0x35/0x90 [ 114.108510][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.108538][ T6283] RIP: 0033:0x7fd6bd98d169 [ 114.108557][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.108573][ T6283] RSP: 002b:00007fd6be72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.108595][ T6283] RAX: ffffffffffffffda RBX: 00007fd6bdba6080 RCX: 00007fd6bd98d169 [ 114.108610][ T6283] RDX: 0000200000001180 RSI: 000000008208ae63 RDI: 0000000000000004 [ 114.108624][ T6283] RBP: 00007fd6be72d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.108636][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.108648][ T6283] R13: 0000000000000000 R14: 00007fd6bdba6080 R15: 00007fd6bdccfa28 [ 114.108679][ T6283] </TASK> [ 114.108696][ T6283] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.208221][ T6195] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 114.364799][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 114.377908][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 114.436860][ T967] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 114.505651][ T6195] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 114.575676][ T6195] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 114.690251][ T6299] bridge0: port 3(vlan2) entered blocking state [ 114.735506][ T6299] bridge0: port 3(vlan2) entered disabled state [ 114.742856][ T47] usb 6-1: failed to receive control message: -110 [ 114.765078][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 114.790045][ T6299] vlan2: entered allmulticast mode [ 114.799332][ T6302] loop8: detected capacity change from 0 to 1 [ 114.808854][ T47] usb 6-1: USB disconnect, device number 2 [ 114.826001][ T6299] vlan2: entered promiscuous mode [ 114.837191][ T47] ch341 6-1:0.0: device disconnected [ 114.851102][ T6302] Dev loop8: unable to read RDB block 1 [ 114.893179][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 114.923960][ T6302] loop8: unable to read partition table [ 114.934268][ T6302] loop8: partition table beyond EOD, truncated [ 114.937726][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.962099][ T6302] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5) [ 115.140686][ T5887] usb 1-1: config index 0 descriptor too short (expected 1063, got 36) [ 115.158714][ T5887] usb 1-1: config 3 has too many interfaces: 181, using maximum allowed: 32 [ 115.204569][ T5887] usb 1-1: config 3 has an invalid descriptor of length 190, skipping remainder of the config [ 115.235460][ T5887] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 181 [ 115.327885][ T5887] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 115.354421][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.427376][ T6318] FAULT_INJECTION: forcing a failure. [ 115.427376][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 115.484084][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.2.89 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 115.484113][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.484125][ T6318] Call Trace: [ 115.484133][ T6318] <TASK> [ 115.484142][ T6318] dump_stack_lvl+0x241/0x360 [ 115.484173][ T6318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.484198][ T6318] ? __pfx__printk+0x10/0x10 [ 115.484231][ T6318] should_fail_ex+0x40a/0x550 [ 115.484268][ T6318] should_failslab+0xac/0x100 [ 115.484298][ T6318] __kmalloc_cache_noprof+0x70/0x390 [ 115.484327][ T6318] ? sctp_add_bind_addr+0x89/0x3a0 [ 115.484378][ T6318] sctp_add_bind_addr+0x89/0x3a0 [ 115.484412][ T6318] sctp_copy_local_addr_list+0x311/0x500 [ 115.484446][ T6318] ? sctp_copy_local_addr_list+0xab/0x500 [ 115.484479][ T6318] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 115.484514][ T6318] ? sctp_v6_is_any+0x60/0x70 [ 115.484537][ T6318] ? sctp_copy_one_addr+0x94/0x360 [ 115.484573][ T6318] sctp_bind_addr_copy+0xad/0x3b0 [ 115.484604][ T6318] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 115.484637][ T6318] sctp_connect_new_asoc+0x2f3/0x6c0 [ 115.484665][ T6318] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 115.484687][ T6318] ? sctp_sendmsg+0xf1a/0x35d0 [ 115.484716][ T6318] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 115.484739][ T6318] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 115.484771][ T6318] sctp_sendmsg+0x1f64/0x35d0 [ 115.484811][ T6318] ? __pfx_sctp_sendmsg+0x10/0x10 [ 115.484837][ T6318] ? aa_sk_perm+0x96d/0xab0 [ 115.484879][ T6318] ? inet_sendmsg+0x330/0x390 [ 115.484914][ T6318] __sock_sendmsg+0x1a6/0x270 [ 115.484947][ T6318] ____sys_sendmsg+0x53a/0x860 [ 115.484979][ T6318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.484999][ T6318] ? __fget_files+0x2a/0x410 [ 115.485033][ T6318] ? __fget_files+0x2a/0x410 [ 115.485072][ T6318] __sys_sendmmsg+0x36a/0x720 [ 115.485107][ T6318] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.485143][ T6318] ? __pfx_lock_release+0x10/0x10 [ 115.485172][ T6318] ? kstrtouint_from_user+0x128/0x190 [ 115.485220][ T6318] ? ksys_write+0x22a/0x2b0 [ 115.485243][ T6318] ? __pfx_lock_release+0x10/0x10 [ 115.485280][ T6318] ? sb_end_write+0xe9/0x1c0 [ 115.485310][ T6318] ? vfs_write+0x7fa/0xd10 [ 115.485345][ T6318] ? __mutex_unlock_slowpath+0x227/0x800 [ 115.485406][ T6318] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.485441][ T6318] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.485474][ T6318] ? do_syscall_64+0x100/0x230 [ 115.485498][ T6318] __x64_sys_sendmmsg+0xa0/0xb0 [ 115.485525][ T6318] do_syscall_64+0xf3/0x230 [ 115.485544][ T6318] ? clear_bhb_loop+0x35/0x90 [ 115.485577][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.485605][ T6318] RIP: 0033:0x7f946f18d169 [ 115.485623][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.485639][ T6318] RSP: 002b:00007f94700ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.485662][ T6318] RAX: ffffffffffffffda RBX: 00007f946f3a5fa0 RCX: 00007f946f18d169 [ 115.485678][ T6318] RDX: 0000000000000001 RSI: 0000200000007cc0 RDI: 0000000000000003 [ 115.485690][ T6318] RBP: 00007f94700ab090 R08: 0000000000000000 R09: 0000000000000000 [ 115.485703][ T6318] R10: 931766f6319eed40 R11: 0000000000000246 R12: 0000000000000002 [ 115.485716][ T6318] R13: 0000000000000000 R14: 00007f946f3a5fa0 R15: 00007f946f4cfa28 [ 115.485746][ T6318] </TASK> [ 115.986286][ T5887] usb 1-1: string descriptor 0 read error: -71 [ 116.025841][ T5887] usb 1-1: USB disconnect, device number 11 [ 116.492131][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.90'. [ 116.557845][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.90'. [ 116.566783][ T6330] netlink: 'syz.5.90': attribute type 20 has an invalid length. [ 116.587902][ T6329] netlink: 'syz.2.91': attribute type 2 has an invalid length. [ 116.698724][ T6333] usb usb1: usbfs: process 6333 (syz.2.91) did not claim interface 0 before use [ 116.754218][ T6333] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.812223][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.6.92'. [ 116.866931][ T6329] ������: renamed from macvlan1 (while UP) [ 116.961935][ T6339] vlan3: entered promiscuous mode [ 116.997916][ T6339] team0: entered promiscuous mode [ 117.050583][ T6339] team_slave_0: entered promiscuous mode [ 117.097907][ T6339] team_slave_1: entered promiscuous mode [ 117.406693][ T6356] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 117.535810][ T6361] FAULT_INJECTION: forcing a failure. [ 117.535810][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 117.622522][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.6.96 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 117.622543][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.622552][ T6361] Call Trace: [ 117.622557][ T6361] <TASK> [ 117.622563][ T6361] dump_stack_lvl+0x241/0x360 [ 117.622586][ T6361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.622602][ T6361] ? __pfx__printk+0x10/0x10 [ 117.622618][ T6361] ? fs_reclaim_acquire+0x93/0x130 [ 117.622634][ T6361] ? __pfx___might_resched+0x10/0x10 [ 117.622656][ T6361] should_fail_ex+0x40a/0x550 [ 117.622682][ T6361] should_failslab+0xac/0x100 [ 117.622703][ T6361] __kmalloc_noprof+0xdd/0x4c0 [ 117.622723][ T6361] ? tomoyo_encode+0x26f/0x540 [ 117.622741][ T6361] tomoyo_encode+0x26f/0x540 [ 117.622759][ T6361] tomoyo_realpath_from_path+0x59e/0x5e0 [ 117.622783][ T6361] tomoyo_path_number_perm+0x239/0x770 [ 117.622803][ T6361] ? __lock_acquire+0x1397/0x2100 [ 117.622827][ T6361] ? tomoyo_path_number_perm+0x209/0x770 [ 117.622849][ T6361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.622897][ T6361] ? __fget_files+0x2a/0x410 [ 117.622927][ T6361] ? __fget_files+0x2a/0x410 [ 117.622952][ T6361] security_file_ioctl+0xc6/0x2a0 [ 117.622973][ T6361] __se_sys_ioctl+0x46/0x170 [ 117.622992][ T6361] do_syscall_64+0xf3/0x230 [ 117.623006][ T6361] ? clear_bhb_loop+0x35/0x90 [ 117.623030][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.623050][ T6361] RIP: 0033:0x7fd6bd98d169 [ 117.623062][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.623074][ T6361] RSP: 002b:00007fd6be72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.623091][ T6361] RAX: ffffffffffffffda RBX: 00007fd6bdba6080 RCX: 00007fd6bd98d169 [ 117.623102][ T6361] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 117.623112][ T6361] RBP: 00007fd6be72d090 R08: 0000000000000000 R09: 0000000000000000 [ 117.623129][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.623138][ T6361] R13: 0000000000000000 R14: 00007fd6bdba6080 R15: 00007fd6bdccfa28 [ 117.623158][ T6361] </TASK> [ 117.623171][ T6361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.007664][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.179493][ T5889] usb 3-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 118.190204][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.226183][ T5889] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 118.300271][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.373351][ T5889] usb 3-1: Product: syz [ 118.470284][ T5889] usb 3-1: Manufacturer: syz [ 118.487997][ T5889] usb 3-1: SerialNumber: syz [ 118.511532][ T5889] usb 3-1: config 0 descriptor?? [ 118.533905][ T5889] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 118.606060][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.799024][ T5889] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 118.844817][ T5889] usb 3-1: media controller created [ 118.888017][ T5887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.951118][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.048621][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 119.060530][ T5887] usb 4-1: config 4 has an invalid interface number: 5 but max is 0 [ 119.075947][ T5887] usb 4-1: config 4 has no interface number 0 [ 119.085494][ T5889] DVB: Unable to find symbol tda10046_attach() [ 119.107349][ T5889] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 119.110078][ T5887] usb 4-1: config 4 interface 5 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 119.135199][ T5889] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 119.177960][ T3589] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 119.247694][ T5887] usb 4-1: config 4 interface 5 has no altsetting 0 [ 119.258204][ T5889] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 119.282551][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 119.294302][ T5887] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e300, bcdDevice=bd.41 [ 119.311787][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.331923][ T5889] usb 3-1: USB disconnect, device number 6 [ 119.354562][ T5887] usb 4-1: Product: syz [ 119.362529][ T3589] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.375274][ T3589] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.397681][ T3589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.407729][ T5887] usb 4-1: Manufacturer: syz [ 119.412379][ T5887] usb 4-1: SerialNumber: syz [ 119.447521][ T3589] usb 1-1: Product: syz [ 119.462357][ T3589] usb 1-1: Manufacturer: syz [ 119.467026][ T3589] usb 1-1: SerialNumber: syz [ 119.478847][ T6369] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.494043][ T5887] em28xx 4-1:4.5: New device syz syz @ 480 Mbps (eb1a:e300, interface 5, class 5) [ 119.517709][ T5887] em28xx 4-1:4.5: Video interface 5 found: bulk [ 119.748670][ T5887] em28xx 4-1:4.5: unknown em28xx chip ID (0) [ 119.951830][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.971573][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.018024][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.112198][ T5887] em28xx 4-1:4.5: reading from i2c device at 0xa0 failed (error=-5) [ 120.120757][ T5887] em28xx 4-1:4.5: board has no eeprom [ 120.189227][ T5887] em28xx 4-1:4.5: Identified as KWorld PVRTV 300U (card=39) [ 120.207176][ T5887] em28xx 4-1:4.5: [ 120.207176][ T5887] [ 120.207176][ T5887] The support for this board weren't valid yet. [ 120.207176][ T5887] Please send a report of having this working [ 120.207176][ T5887] not to V4L mailing list (and/or to other addresses) [ 120.207176][ T5887] [ 120.241156][ T5889] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 120.277255][ T5889] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.290268][ T3589] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 120.312467][ T3589] cdc_ncm 1-1:1.0: bind() failure [ 120.327797][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.354444][ T5887] em28xx 4-1:4.5: analog set to bulk mode. [ 120.382730][ T5889] usb 7-1: Product: syz [ 120.397742][ T5889] usb 7-1: Manufacturer: syz [ 120.403588][ T5889] usb 7-1: SerialNumber: syz [ 120.455660][ T5889] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.455766][ T3589] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 120.478902][ T47] em28xx 4-1:4.5: Registering V4L2 extension [ 120.490206][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.514166][ T6407] FAULT_INJECTION: forcing a failure. [ 120.514166][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 120.521614][ T5887] usb 4-1: USB disconnect, device number 9 [ 120.587783][ T3589] cdc_ncm 1-1:1.1: bind() failure [ 120.599432][ T5887] em28xx 4-1:4.5: Disconnecting em28xx [ 120.642973][ T6405] process 'syz.2.104' launched './file2' with NULL argv: empty string added [ 120.650190][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.105 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 120.650226][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.650240][ T6407] Call Trace: [ 120.650248][ T6407] <TASK> [ 120.650257][ T6407] dump_stack_lvl+0x241/0x360 [ 120.650298][ T6407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.650322][ T6407] ? __pfx__printk+0x10/0x10 [ 120.650347][ T6407] ? __kmalloc_noprof+0xb5/0x4c0 [ 120.650378][ T6407] ? __pfx___might_resched+0x10/0x10 [ 120.650413][ T6407] should_fail_ex+0x40a/0x550 [ 120.650452][ T6407] should_failslab+0xac/0x100 [ 120.650483][ T6407] __kmalloc_noprof+0xdd/0x4c0 [ 120.650512][ T6407] ? rfkill_alloc+0xb0/0x2e0 [ 120.650546][ T6407] rfkill_alloc+0xb0/0x2e0 [ 120.650582][ T6407] wiphy_new_nm+0x1084/0x19a0 [ 120.650604][ T6407] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 120.650635][ T6407] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 120.650666][ T6407] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 120.650702][ T6407] mac80211_hwsim_new_radio+0x203/0x4a40 [ 120.650744][ T6407] ? __lock_acquire+0x1397/0x2100 [ 120.650778][ T6407] ? __pfx_stack_trace_save+0x10/0x10 [ 120.650811][ T6407] ? stack_depot_save_flags+0x37/0x940 [ 120.650849][ T6407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 120.650892][ T6407] hwsim_new_radio_nl+0xece/0x2290 [ 120.650934][ T6407] ? __pfx___nla_validate_parse+0x10/0x10 [ 120.650964][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.651027][ T6407] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 120.651082][ T6407] genl_rcv_msg+0xb1f/0xec0 [ 120.651126][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.651189][ T6407] ? __pfx_lock_acquire+0x10/0x10 [ 120.651222][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.651250][ T6407] ? __pfx___might_resched+0x10/0x10 [ 120.651291][ T6407] netlink_rcv_skb+0x206/0x480 [ 120.651318][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.651353][ T6407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.651394][ T6407] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 120.651437][ T6407] genl_rcv+0x28/0x40 [ 120.651467][ T6407] netlink_unicast+0x7f6/0x990 [ 120.651500][ T6407] ? __pfx_netlink_unicast+0x10/0x10 [ 120.651521][ T6407] ? __virt_addr_valid+0x45f/0x530 [ 120.651543][ T6407] ? __phys_addr_symbol+0x2f/0x70 [ 120.651562][ T6407] ? __check_object_size+0x47a/0x730 [ 120.651597][ T6407] netlink_sendmsg+0x8de/0xcb0 [ 120.651638][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.651670][ T6407] ? aa_sock_msg_perm+0x91/0x160 [ 120.651706][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.651728][ T6407] __sock_sendmsg+0x221/0x270 [ 120.651758][ T6407] ____sys_sendmsg+0x53a/0x860 [ 120.651789][ T6407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.651809][ T6407] ? __fget_files+0x2a/0x410 [ 120.651841][ T6407] ? __fget_files+0x2a/0x410 [ 120.651880][ T6407] __sys_sendmsg+0x269/0x350 [ 120.651907][ T6407] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.651944][ T6407] ? do_sys_openat2+0x17a/0x1d0 [ 120.652008][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.652044][ T6407] ? do_syscall_64+0x100/0x230 [ 120.652077][ T6407] ? do_syscall_64+0xb6/0x230 [ 120.652100][ T6407] do_syscall_64+0xf3/0x230 [ 120.652121][ T6407] ? clear_bhb_loop+0x35/0x90 [ 120.652156][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.652186][ T6407] RIP: 0033:0x7f317258d169 [ 120.652205][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.652222][ T6407] RSP: 002b:00007f31703f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.652246][ T6407] RAX: ffffffffffffffda RBX: 00007f31727a5fa0 RCX: 00007f317258d169 [ 120.652262][ T6407] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 120.652276][ T6407] RBP: 00007f31703f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.652289][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.652302][ T6407] R13: 0000000000000000 R14: 00007f31727a5fa0 R15: 00007f31728cfa28 [ 120.652335][ T6407] </TASK> [ 120.653563][ T6407] INFO: trying to register non-static key. [ 120.678266][ T3589] usb 1-1: USB disconnect, device number 12 [ 120.678778][ T6407] The code is fine but needs lockdep annotation, or maybe [ 120.846416][ T6411] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.107' sets config #0 [ 120.849359][ T6407] you didn't initialize this object before use? [ 120.849369][ T6407] turning off the locking correctness validator. [ 120.849379][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.105 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 120.849401][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.849412][ T6407] Call Trace: [ 120.849420][ T6407] <TASK> [ 120.849427][ T6407] dump_stack_lvl+0x241/0x360 [ 120.849456][ T6407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.849480][ T6407] ? __pfx__printk+0x10/0x10 [ 120.849502][ T6407] ? __is_module_percpu_address+0x213/0x370 [ 120.849530][ T6407] ? __is_kernel_percpu_address+0x115/0x250 [ 120.849562][ T6407] assign_lock_key+0x241/0x280 [ 120.849586][ T6407] ? __pfx_assign_lock_key+0x10/0x10 [ 120.849612][ T6407] register_lock_class+0x1cf/0x980 [ 120.849647][ T6407] ? __pfx_register_lock_class+0x10/0x10 [ 120.849684][ T6407] __lock_acquire+0xf3/0x2100 [ 120.849720][ T6407] ? mark_lock+0x9a/0x360 [ 120.849740][ T6407] lock_acquire+0x1ed/0x550 [ 120.849770][ T6407] ? cfg80211_dev_free+0x33/0x2d0 [ 120.849793][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.849826][ T6407] ? __pfx_lock_acquire+0x10/0x10 [ 120.849868][ T6407] _raw_spin_lock_irqsave+0xd5/0x120 [ 120.849897][ T6407] ? cfg80211_dev_free+0x33/0x2d0 [ 120.849918][ T6407] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 120.849945][ T6407] ? devres_release_all+0x1eb/0x250 [ 120.849972][ T6407] ? device_release+0x66/0x1c0 [ 120.849997][ T6407] ? __pfx_wiphy_dev_release+0x10/0x10 [ 120.850031][ T6407] cfg80211_dev_free+0x33/0x2d0 [ 120.850053][ T6407] ? trace_kmalloc+0x1f/0xd0 [ 120.850080][ T6407] ? __pfx_wiphy_dev_release+0x10/0x10 [ 120.850106][ T6407] device_release+0x99/0x1c0 [ 120.850132][ T6407] kobject_put+0x22f/0x480 [ 120.850155][ T6407] wiphy_new_nm+0x16ea/0x19a0 [ 120.850175][ T6407] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 120.850203][ T6407] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 120.850231][ T6407] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 120.850261][ T6407] mac80211_hwsim_new_radio+0x203/0x4a40 [ 120.850295][ T6407] ? __lock_acquire+0x1397/0x2100 [ 120.850326][ T6407] ? __pfx_stack_trace_save+0x10/0x10 [ 120.850354][ T6407] ? stack_depot_save_flags+0x37/0x940 [ 120.850390][ T6407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 120.850423][ T6407] hwsim_new_radio_nl+0xece/0x2290 [ 120.850456][ T6407] ? __pfx___nla_validate_parse+0x10/0x10 [ 120.850481][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.850523][ T6407] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 120.850561][ T6407] genl_rcv_msg+0xb1f/0xec0 [ 120.850595][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.850639][ T6407] ? __pfx_lock_acquire+0x10/0x10 [ 120.850669][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.850696][ T6407] ? __pfx___might_resched+0x10/0x10 [ 120.850728][ T6407] netlink_rcv_skb+0x206/0x480 [ 120.850754][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.850785][ T6407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.850816][ T6407] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 120.850848][ T6407] genl_rcv+0x28/0x40 [ 120.850878][ T6407] netlink_unicast+0x7f6/0x990 [ 120.850905][ T6407] ? __pfx_netlink_unicast+0x10/0x10 [ 120.850926][ T6407] ? __virt_addr_valid+0x45f/0x530 [ 120.850947][ T6407] ? __phys_addr_symbol+0x2f/0x70 [ 120.850967][ T6407] ? __check_object_size+0x47a/0x730 [ 120.850997][ T6407] netlink_sendmsg+0x8de/0xcb0 [ 120.851035][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.851063][ T6407] ? aa_sock_msg_perm+0x91/0x160 [ 120.851099][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.851123][ T6407] __sock_sendmsg+0x221/0x270 [ 120.851154][ T6407] ____sys_sendmsg+0x53a/0x860 [ 120.851181][ T6407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.851203][ T6407] ? __fget_files+0x2a/0x410 [ 120.851234][ T6407] ? __fget_files+0x2a/0x410 [ 120.851267][ T6407] __sys_sendmsg+0x269/0x350 [ 120.851293][ T6407] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.851320][ T6407] ? do_sys_openat2+0x17a/0x1d0 [ 120.851363][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.851395][ T6407] ? do_syscall_64+0x100/0x230 [ 120.851416][ T6407] ? do_syscall_64+0xb6/0x230 [ 120.851437][ T6407] do_syscall_64+0xf3/0x230 [ 120.851456][ T6407] ? clear_bhb_loop+0x35/0x90 [ 120.851487][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.851516][ T6407] RIP: 0033:0x7f317258d169 [ 120.851534][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.851551][ T6407] RSP: 002b:00007f31703f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.851575][ T6407] RAX: ffffffffffffffda RBX: 00007f31727a5fa0 RCX: 00007f317258d169 [ 120.851590][ T6407] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 120.851605][ T6407] RBP: 00007f31703f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.851617][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.851630][ T6407] R13: 0000000000000000 R14: 00007f31727a5fa0 R15: 00007f31728cfa28 [ 120.851652][ T6407] </TASK> [ 120.852729][ T6407] ------------[ cut here ]------------ [ 121.556474][ T6407] WARNING: CPU: 0 PID: 6407 at net/wireless/core.c:1197 cfg80211_dev_free+0x2ba/0x2d0 [ 121.566031][ T6407] Modules linked in: [ 121.569931][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.105 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 121.580519][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.590578][ T6407] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 121.596324][ T6407] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 121.615962][ T6407] RSP: 0018:ffffc9000b806e20 EFLAGS: 00010093 [ 121.622052][ T6407] RAX: ffffffff8b4e5f39 RBX: ffff888033fe86a8 RCX: ffff888032f63c00 [ 121.630115][ T6407] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b806d00 [ 121.638103][ T6407] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff52001700da0 [ 121.646077][ T6407] R10: dffffc0000000000 R11: fffff52001700da0 R12: ffff888033fe86b8 [ 121.654051][ T6407] R13: dffffc0000000000 R14: ffff888033fe8000 R15: 0000000000000246 [ 121.662027][ T6407] FS: 00007f31703f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 121.670971][ T6407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.677649][ T6407] CR2: 00007f03e00d56c0 CR3: 00000000294b8000 CR4: 00000000003526f0 [ 121.685625][ T6407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.693607][ T6407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.701583][ T6407] Call Trace: [ 121.704865][ T6407] <TASK> [ 121.707803][ T6407] ? __warn+0x165/0x4d0 [ 121.712003][ T6407] ? cfg80211_dev_free+0x2ba/0x2d0 [ 121.717118][ T6407] ? report_bug+0x2b3/0x500 [ 121.721630][ T6407] ? cfg80211_dev_free+0x2ba/0x2d0 [ 121.726768][ T6407] ? handle_bug+0x60/0x90 [ 121.731131][ T6407] ? exc_invalid_op+0x1a/0x50 [ 121.735827][ T6407] ? asm_exc_invalid_op+0x1a/0x20 [ 121.740868][ T6407] ? cfg80211_dev_free+0x2b9/0x2d0 [ 121.745986][ T6407] ? cfg80211_dev_free+0x2ba/0x2d0 [ 121.751098][ T6407] ? trace_kmalloc+0x1f/0xd0 [ 121.755691][ T6407] ? __pfx_wiphy_dev_release+0x10/0x10 [ 121.761190][ T6407] device_release+0x99/0x1c0 [ 121.765793][ T6407] kobject_put+0x22f/0x480 [ 121.770213][ T6407] wiphy_new_nm+0x16ea/0x19a0 [ 121.774888][ T6407] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 121.781396][ T6407] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 121.786772][ T6407] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 121.792583][ T6407] mac80211_hwsim_new_radio+0x203/0x4a40 [ 121.798222][ T6407] ? __lock_acquire+0x1397/0x2100 [ 121.803253][ T6407] ? __pfx_stack_trace_save+0x10/0x10 [ 121.808629][ T6407] ? stack_depot_save_flags+0x37/0x940 [ 121.814099][ T6407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 121.820178][ T6407] hwsim_new_radio_nl+0xece/0x2290 [ 121.825298][ T6407] ? __pfx___nla_validate_parse+0x10/0x10 [ 121.831024][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 121.836585][ T6407] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 121.842930][ T6407] genl_rcv_msg+0xb1f/0xec0 [ 121.847465][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.852510][ T6407] ? __pfx_lock_acquire+0x10/0x10 [ 121.857544][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 121.863118][ T6407] ? __pfx___might_resched+0x10/0x10 [ 121.868413][ T6407] netlink_rcv_skb+0x206/0x480 [ 121.873190][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.878220][ T6407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.883512][ T6407] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 121.888975][ T6407] genl_rcv+0x28/0x40 [ 121.892961][ T6407] netlink_unicast+0x7f6/0x990 [ 121.897727][ T6407] ? __pfx_netlink_unicast+0x10/0x10 [ 121.903011][ T6407] ? __virt_addr_valid+0x45f/0x530 [ 121.908125][ T6407] ? __phys_addr_symbol+0x2f/0x70 [ 121.913145][ T6407] ? __check_object_size+0x47a/0x730 [ 121.918438][ T6407] netlink_sendmsg+0x8de/0xcb0 [ 121.923212][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.928499][ T6407] ? aa_sock_msg_perm+0x91/0x160 [ 121.933444][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.938738][ T6407] __sock_sendmsg+0x221/0x270 [ 121.943421][ T6407] ____sys_sendmsg+0x53a/0x860 [ 121.948187][ T6407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.953471][ T6407] ? __fget_files+0x2a/0x410 [ 121.958083][ T6407] ? __fget_files+0x2a/0x410 [ 121.962681][ T6407] __sys_sendmsg+0x269/0x350 [ 121.967281][ T6407] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.972394][ T6407] ? do_sys_openat2+0x17a/0x1d0 [ 121.977262][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.983599][ T6407] ? do_syscall_64+0x100/0x230 [ 121.988371][ T6407] ? do_syscall_64+0xb6/0x230 [ 121.993046][ T6407] do_syscall_64+0xf3/0x230 [ 121.997548][ T6407] ? clear_bhb_loop+0x35/0x90 [ 122.002239][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.008140][ T6407] RIP: 0033:0x7f317258d169 [ 122.012556][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.032170][ T6407] RSP: 002b:00007f31703f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.040591][ T6407] RAX: ffffffffffffffda RBX: 00007f31727a5fa0 RCX: 00007f317258d169 [ 122.048654][ T6407] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 122.056632][ T6407] RBP: 00007f31703f6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.064623][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.072594][ T6407] R13: 0000000000000000 R14: 00007f31727a5fa0 R15: 00007f31728cfa28 [ 122.080575][ T6407] </TASK> [ 122.083610][ T6407] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.090888][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.105 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 122.101473][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.111527][ T6407] Call Trace: [ 122.114834][ T6407] <TASK> [ 122.117768][ T6407] dump_stack_lvl+0x241/0x360 [ 122.122456][ T6407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.127658][ T6407] ? __pfx__printk+0x10/0x10 [ 122.132277][ T6407] ? _printk+0xd5/0x120 [ 122.136451][ T6407] ? __init_begin+0x41000/0x41000 [ 122.141655][ T6407] ? vscnprintf+0x5d/0x90 [ 122.146029][ T6407] panic+0x349/0x880 [ 122.149929][ T6407] ? __warn+0x174/0x4d0 [ 122.154096][ T6407] ? __pfx_panic+0x10/0x10 [ 122.158522][ T6407] __warn+0x344/0x4d0 [ 122.162515][ T6407] ? cfg80211_dev_free+0x2ba/0x2d0 [ 122.167633][ T6407] report_bug+0x2b3/0x500 [ 122.171972][ T6407] ? cfg80211_dev_free+0x2ba/0x2d0 [ 122.177084][ T6407] handle_bug+0x60/0x90 [ 122.181241][ T6407] exc_invalid_op+0x1a/0x50 [ 122.185746][ T6407] asm_exc_invalid_op+0x1a/0x20 [ 122.190612][ T6407] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 122.196334][ T6407] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 122.215943][ T6407] RSP: 0018:ffffc9000b806e20 EFLAGS: 00010093 [ 122.222016][ T6407] RAX: ffffffff8b4e5f39 RBX: ffff888033fe86a8 RCX: ffff888032f63c00 [ 122.229987][ T6407] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b806d00 [ 122.237959][ T6407] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff52001700da0 [ 122.245932][ T6407] R10: dffffc0000000000 R11: fffff52001700da0 R12: ffff888033fe86b8 [ 122.253905][ T6407] R13: dffffc0000000000 R14: ffff888033fe8000 R15: 0000000000000246 [ 122.261885][ T6407] ? cfg80211_dev_free+0x2b9/0x2d0 [ 122.267011][ T6407] ? trace_kmalloc+0x1f/0xd0 [ 122.271608][ T6407] ? __pfx_wiphy_dev_release+0x10/0x10 [ 122.277070][ T6407] device_release+0x99/0x1c0 [ 122.281683][ T6407] kobject_put+0x22f/0x480 [ 122.286129][ T6407] wiphy_new_nm+0x16ea/0x19a0 [ 122.290803][ T6407] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 122.297308][ T6407] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 122.302690][ T6407] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 122.308510][ T6407] mac80211_hwsim_new_radio+0x203/0x4a40 [ 122.314156][ T6407] ? __lock_acquire+0x1397/0x2100 [ 122.319193][ T6407] ? __pfx_stack_trace_save+0x10/0x10 [ 122.324575][ T6407] ? stack_depot_save_flags+0x37/0x940 [ 122.330046][ T6407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 122.336125][ T6407] hwsim_new_radio_nl+0xece/0x2290 [ 122.341251][ T6407] ? __pfx___nla_validate_parse+0x10/0x10 [ 122.346981][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 122.352547][ T6407] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 122.358893][ T6407] genl_rcv_msg+0xb1f/0xec0 [ 122.363412][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.368482][ T6407] ? __pfx_lock_acquire+0x10/0x10 [ 122.373511][ T6407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 122.379071][ T6407] ? __pfx___might_resched+0x10/0x10 [ 122.384365][ T6407] netlink_rcv_skb+0x206/0x480 [ 122.389132][ T6407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.394165][ T6407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.399465][ T6407] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 122.404970][ T6407] genl_rcv+0x28/0x40 [ 122.408965][ T6407] netlink_unicast+0x7f6/0x990 [ 122.413761][ T6407] ? __pfx_netlink_unicast+0x10/0x10 [ 122.419075][ T6407] ? __virt_addr_valid+0x45f/0x530 [ 122.424184][ T6407] ? __phys_addr_symbol+0x2f/0x70 [ 122.429205][ T6407] ? __check_object_size+0x47a/0x730 [ 122.434498][ T6407] netlink_sendmsg+0x8de/0xcb0 [ 122.439270][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.444586][ T6407] ? aa_sock_msg_perm+0x91/0x160 [ 122.449535][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.454825][ T6407] __sock_sendmsg+0x221/0x270 [ 122.459528][ T6407] ____sys_sendmsg+0x53a/0x860 [ 122.464312][ T6407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.469599][ T6407] ? __fget_files+0x2a/0x410 [ 122.474199][ T6407] ? __fget_files+0x2a/0x410 [ 122.478803][ T6407] __sys_sendmsg+0x269/0x350 [ 122.483414][ T6407] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.488532][ T6407] ? do_sys_openat2+0x17a/0x1d0 [ 122.493395][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.499734][ T6407] ? do_syscall_64+0x100/0x230 [ 122.504498][ T6407] ? do_syscall_64+0xb6/0x230 [ 122.509176][ T6407] do_syscall_64+0xf3/0x230 [ 122.513683][ T6407] ? clear_bhb_loop+0x35/0x90 [ 122.518372][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.524271][ T6407] RIP: 0033:0x7f317258d169 [ 122.528685][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.548291][ T6407] RSP: 002b:00007f31703f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.556714][ T6407] RAX: ffffffffffffffda RBX: 00007f31727a5fa0 RCX: 00007f317258d169 [ 122.564719][ T6407] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 122.572693][ T6407] RBP: 00007f31703f6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.580675][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.588654][ T6407] R13: 0000000000000000 R14: 00007f31727a5fa0 R15: 00007f31728cfa28 [ 122.596638][ T6407] </TASK> [ 122.599975][ T6407] Kernel Offset: disabled [ 122.604301][ T6407] Rebooting in 86400 seconds..