last executing test programs: 50m46.383070767s ago: executing program 3 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x100000000}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 50m45.03646869s ago: executing program 3 (id=1282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) 50m42.930835856s ago: executing program 3 (id=1291): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000240), 0x0, 0x111900) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x4, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r3) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r3) socket(0x10, 0x3, 0x0) 50m38.902494822s ago: executing program 3 (id=1297): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) eventfd2(0xb, 0x1) 50m34.703783164s ago: executing program 3 (id=1307): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r0, 0x0, 0x0, 0x8f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0x626, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 50m33.063139476s ago: executing program 3 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0xffffffff, 0x40000a, 0x6, 0x6, 0x9, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x6, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x0, 0x6, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x4040000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 50m17.880238173s ago: executing program 32 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0xffffffff, 0x40000a, 0x6, 0x6, 0x9, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x6, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x0, 0x6, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x4040000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 34m28.537921613s ago: executing program 0 (id=3785): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x401, 0x6, 0x0, 0x5}, 0x7, 0x40}, [{0x9, 0xa, 0x6, 0x0, 0x6, 0x7}, {0x4, 0x200, 0x10, 0x0, 0x80000000, 0x6}, {0x7, 0x1, 0x7, 0x0, 0xf32, 0x800}, {0x4, 0xf, 0x2, 0x10, 0x4, 0x6}, {0x40, 0x7f, 0x80000000, 0x8, 0x4, 0x7}, {0x5, 0x80000001, 0x10000, 0xf, 0xea, 0x10000}, {0x7, 0x59, 0x3, 0x7fffffff, 0x401, 0xc}, {0x2, 0x1, 0xeb7, 0x2, 0x7, 0x4}, {0xc81, 0xb, 0xfffeffff, 0x7fff, 0x6, 0x5}, {0x1, 0x10, 0x5, 0x18, 0x0, 0x1}, {0xb2, 0x3, 0x1, 0x1, 0x10000, 0x400}, {0x3, 0xffffffc0, 0x4, 0x6, 0x7, 0xb4000000}, {0x800, 0xff, 0xffffff81, 0x10000, 0x7, 0x2}, {0xa7b4, 0x1, 0x8, 0x1, 0x2, 0x8}, {0x80000000, 0x1ff, 0x8, 0x0, 0x2, 0x8ef}, {0x5, 0x3, 0x8, 0xa, 0x1, 0x10}, {0x400, 0x1, 0x1, 0x4, 0xc, 0x1}, {0x0, 0x5, 0x7fffffff, 0x9, 0x5d55, 0x6}, {0xc3, 0x9, 0x5, 0x6, 0x1000, 0x3a}, {0x8000, 0x5, 0x24, 0x9, 0x2, 0x80000001}, {0x6, 0x8d12, 0x5, 0x3, 0x40, 0x1}, {0x5, 0x9, 0x2b17, 0x4, 0xf2, 0x38ae6c5e}, {0x5, 0xffffd1c8, 0x3, 0x0, 0x6, 0x6}, {0xfff, 0xc, 0x1, 0xf1, 0xf1da, 0x7}, {0x200, 0x6, 0x5, 0xb6, 0x5}, {0x80000001, 0xff, 0x2, 0x0, 0x4, 0x9}, {0x0, 0x1484, 0x9, 0x80, 0x80000000, 0x1}, {0x0, 0x9, 0x7, 0x1, 0x89a, 0xce}, {0x0, 0x81, 0x2, 0x5, 0x2, 0x4}, {0x8000, 0xff, 0x3, 0x9, 0x9, 0x9}, {0x401, 0x7, 0x7, 0x5, 0x5, 0x5}, {0x200, 0x7fffffff, 0x8f1b, 0x80000001, 0xbf3, 0xb4f}, {0x3, 0x9, 0x10, 0x6, 0x5, 0x3}, {0x400, 0xfb, 0x1, 0x1, 0x262, 0x473}, {0x5, 0x9, 0x1, 0x10, 0x3, 0x3}, {0x1, 0x6, 0xd432, 0x4, 0x7, 0xd}, {0xfffffffa, 0x5, 0x8, 0x9, 0x2, 0x3}, {0x3, 0x101, 0x3, 0x3, 0x5}, {0xd, 0x81, 0x7ff, 0x5, 0x9, 0x2}, {0x9, 0x5, 0x2, 0x0, 0x5, 0x8c}, {0x5, 0x3, 0xc0000000, 0x4, 0x8, 0x9b18}, {0x2, 0x8, 0xffffffff, 0x8, 0x39b2b5f9, 0x8}, {0xc, 0x0, 0x2, 0xb, 0x9, 0x1}, {0x1, 0x6959, 0x13e, 0x5, 0x2, 0xffffff80}, {0x2, 0x5, 0x5, 0x5, 0x80, 0x8}, {0x1ff, 0x7, 0xd2bc, 0x8000, 0x4, 0x1}, {0xffffffff, 0x1ff, 0x3, 0x0, 0x1, 0x6}, {0xd59, 0x0, 0x81, 0x10001, 0x9, 0x9}, {0x8, 0xc6, 0x1, 0x10, 0x5e08}, {0x9, 0x1e000, 0xffffffff, 0x4800000, 0x0, 0x28}, {0x4, 0x3, 0x64f, 0x4, 0xf}, {0x6, 0x1300, 0x9, 0x4, 0x0, 0x400}, {0x1, 0x0, 0x6, 0x0, 0x5, 0x4}, {0x6, 0x2, 0x4, 0x8, 0xba000000, 0x401}, {0xfffff1b8, 0x3, 0x0, 0x1, 0x6, 0x8}, {0x9c8, 0xfb, 0x10001, 0x7, 0xd, 0xfffffff9}, {0x1000, 0xe, 0xffffe3e9, 0xff, 0xffffffff, 0x771}, {0xd, 0x2, 0x7, 0x1, 0x7fff, 0xd0c}, {0x3, 0x7308, 0x27, 0xa, 0x2, 0xffffff81}, {0x3, 0xabe5, 0x0, 0xf, 0x1, 0xd}, {0x0, 0xb, 0x7, 0x81d8, 0x10, 0x1}, {0x80000000, 0x4, 0xdb, 0x1, 0x7, 0x4}, {0x3, 0x0, 0x9, 0x7, 0x7, 0xa}, {0x8, 0x1, 0x3c, 0x6, 0x3, 0x3}, {0x4, 0xfffffffb, 0x1, 0x4, 0x9}, {0x7, 0x401, 0x1, 0x3, 0x1}, {0xf2e, 0xf4, 0x2, 0x0, 0x10001, 0x8}, {0x9, 0x3, 0x8001, 0x3, 0x4, 0x907d}, {0x10, 0xffffffff, 0x6, 0x9, 0x42, 0xfd6d}, {0x923f, 0x1, 0x8000, 0x4, 0x709, 0x5}, {0x6, 0x8000, 0x9, 0x7fff, 0x6, 0xc63}, {0x5, 0xc4, 0xffffffff, 0x52c, 0x80000000, 0x1}, {0x40, 0x2, 0x47, 0x8, 0xf, 0x90c}, {0x6, 0xef55, 0x88, 0x2, 0x3, 0x2}, {0x1, 0x4, 0x800, 0x5, 0x5, 0x4}, {0x1, 0x8, 0x3ff, 0x1ff, 0xa, 0x4}, {0x5, 0x8, 0xffffa548, 0x7, 0x6, 0x3}, {0x6, 0x40, 0x7, 0x4, 0x0, 0x78}, {0x4, 0x5, 0xff, 0x8, 0x9, 0x1}, {0x8, 0xfffffbff, 0x3, 0x9, 0x8, 0x6}, {0x9, 0x7, 0x9033, 0x1, 0x9, 0x9}, {0xd8fd92f, 0x3, 0x80000001, 0x3, 0x2, 0xc}, {0x3, 0x44, 0x5, 0x53, 0x8, 0x7}, {0x9, 0x59, 0x1, 0xca3b, 0x0, 0xffffffff}, {0x12, 0x9, 0xe, 0x4, 0x9, 0x101}, {0x8, 0x0, 0x3, 0x10008d, 0xe, 0xffffffff}, {0xffffffff, 0x68e2a0bf, 0x4, 0x10000, 0x1, 0x40}, {0x50d, 0x2, 0x0, 0x3, 0x0, 0x8000}, {0x80000, 0x3, 0x8, 0x8, 0x9}, {0x3, 0x4, 0xfffffffa, 0xffff0000, 0x5, 0x7}, {0x1ff, 0x8d, 0x101, 0x7, 0x9e64, 0x5}, {0x7, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x81, 0xa0000, 0x5, 0xfffffffa, 0x1}, {0xbb, 0x164, 0x2, 0xe7, 0x2, 0x7ff}, {0x400, 0x3, 0x7774, 0x2, 0x9, 0x5d}, {0x9, 0x5, 0x4, 0x1, 0xa700, 0x2}, {0x0, 0x7, 0x7fffffff, 0x1, 0x3, 0x5}, {0x4, 0x8, 0x10, 0x100, 0x81, 0x8}, {0x8, 0xfffff434, 0x4, 0x100, 0x7, 0x1}, {0x6, 0x2, 0x0, 0x0, 0x5, 0x4}, {0x63, 0x100003ff, 0x4, 0x8000, 0x0, 0x1}, {0x6, 0x9, 0x4bda, 0x8, 0x10, 0x3}, {0x10, 0x5, 0x9, 0x0, 0x2, 0x4}, {0xffffffff, 0x2, 0xfffeffff, 0x5, 0x0, 0x8}, {0x5, 0x527, 0x6, 0x63724abb, 0xb5e, 0xfff}, {0x1, 0x9, 0x9, 0x0, 0xc, 0x9}, {0x1, 0x2, 0x1ff, 0x0, 0x9, 0xd0cc}, {0xfffff319, 0x4, 0x10000, 0x6, 0x1, 0x7}, {0x4, 0x800, 0x9, 0x3ff, 0x1, 0x9}, {0xfffffffd, 0x4, 0x1000, 0x7f, 0xffffff57, 0x8}, {0x0, 0x5, 0x8, 0x80000000, 0xe0a, 0xdea}, {0x7ff, 0x8, 0x6, 0x7fffffff, 0x1, 0x7}, {0x0, 0x40000000, 0x3, 0x20000, 0x2, 0x2219ba8a}, {0x400, 0x100, 0x7fffffff, 0x200, 0x0, 0x8}, {0xe, 0x80, 0x7, 0x400, 0x0, 0x4}, {0x0, 0x7fffffff, 0x3d, 0x7, 0x0, 0xff}, {0xd60, 0x6, 0x8, 0xa2dd, 0x0, 0xe4}, {0x5, 0x7, 0x3, 0x9, 0x5, 0xfff}, {0x3, 0x8, 0x5, 0x9, 0x2, 0x8000}, {0x100, 0x8, 0x9, 0x9, 0x7, 0xfffffdb7}, {0xc00000, 0x6, 0x80, 0xcf4, 0x5}, {0x2, 0x8, 0x1, 0x4, 0x0, 0x3}, {0x3, 0x8e, 0x8000, 0xfffffffc, 0xf2b, 0x7}, {0x6, 0xd7d, 0x769, 0x9, 0x1, 0x3}, {0x9, 0xaa4e, 0x938, 0x8, 0xffffff7c, 0x8e90}, {0xaa, 0x400, 0x200, 0x200, 0x7, 0x5}, {0x7, 0x3816c528, 0x4, 0x5, 0xc0000000, 0x6fb1}, {0xffffff01, 0x5, 0x10000, 0x8, 0xfffffffb, 0xff}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0xe422f9593938532}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 34m27.824624489s ago: executing program 0 (id=3788): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002540)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) 34m26.797315022s ago: executing program 0 (id=3790): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000000000000"], 0xfdef) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r3}}, 0x18) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 34m25.522543181s ago: executing program 0 (id=3795): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) 34m22.997833599s ago: executing program 0 (id=3798): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002540)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) 34m19.535850717s ago: executing program 0 (id=3804): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc8) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xe, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x20, 0x2, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, 0xffffffffffffffff, 0x7, '\x00', r8, r1, 0x3, 0x0, 0x3, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 34m18.299834306s ago: executing program 33 (id=3804): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc8) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xe, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x20, 0x2, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, 0xffffffffffffffff, 0x7, '\x00', r8, r1, 0x3, 0x0, 0x3, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 31m14.064490661s ago: executing program 1 (id=4282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 31m12.960316397s ago: executing program 1 (id=4285): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0x3, 0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x184, 0x80000004, 0x2, 0x3fd, 0xe, 0x800003, 0x75d, 0x3, 0x4, 0x8, 0x4, 0x1, 0x1, 0x1, 0x9, 0x0, 0x2000008, 0x7c, 0xfffffffc, 0x6fb9, 0x1, 0x7713, 0x0, 0x0, 0x0, 0x7a, 0x1a, 0x8, 0x8, 0x7, 0x1]}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0xffffffffffffff0d}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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") 31m11.788600586s ago: executing program 1 (id=4288): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0x3, 0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x184, 0x80000004, 0x2, 0x3fd, 0xe, 0x800003, 0x75d, 0x3, 0x4, 0x8, 0x4, 0x1, 0x1, 0x1, 0x9, 0x0, 0x2000008, 0x7c, 0xfffffffc, 0x6fb9, 0x1, 0x7713, 0x0, 0x0, 0x0, 0x7a, 0x1a, 0x8, 0x8, 0x7, 0x1]}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0xffffffffffffff0d}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000180)={0x8, r7}) 31m10.772542881s ago: executing program 1 (id=4290): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r0, 0x0, 0x0) 31m10.668542923s ago: executing program 1 (id=4292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 31m9.661084697s ago: executing program 1 (id=4295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}, 0x9}], 0x2, 0x20, 0x0) 30m54.502664037s ago: executing program 34 (id=4295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}, 0x9}], 0x2, 0x20, 0x0) 7.960749881s ago: executing program 2 (id=9460): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.671654908s ago: executing program 2 (id=9465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0xd4, 0x65, 0x100, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0xa4, 0x2, [@TCA_TCINDEX_ACT={0xa0, 0x7, [@m_xt={0x9c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x71, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd4}}, 0x0) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x2}, 0x3}], 0x1, 0x3, 0x0) 7.516417042s ago: executing program 2 (id=9468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) 6.685872073s ago: executing program 2 (id=9470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) 6.512567157s ago: executing program 2 (id=9473): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 6.461142479s ago: executing program 2 (id=9476): creat(&(0x7f0000000000)='./file0\x00', 0x78) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.612860535s ago: executing program 5 (id=9495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 2.344363751s ago: executing program 5 (id=9497): symlink(0x0, &(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.850793083s ago: executing program 5 (id=9498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 1.722642977s ago: executing program 5 (id=9500): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15", 0x32}], 0x1, 0x0, 0x5) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x1100, 0x1f, 0x1, 0x202, 0x8, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) 1.432036434s ago: executing program 6 (id=9503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) setns(0xc9, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) capset(&(0x7f0000000380)={0x20080522}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) close_range(r2, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1.310484997s ago: executing program 4 (id=9504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) 1.270731768s ago: executing program 6 (id=9505): symlink(0x0, &(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.112381752s ago: executing program 4 (id=9506): symlink(0x0, &(0x7f0000000240)='./file0\x00') kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f4069", 0x1d}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.078365533s ago: executing program 5 (id=9507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 1.057236593s ago: executing program 4 (id=9508): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) 900.872827ms ago: executing program 4 (id=9509): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r1, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001"], 0x54}}, 0x0) 897.286228ms ago: executing program 5 (id=9510): symlink(0x0, &(0x7f0000000240)='./file0\x00') kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edb", 0x47, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}], 0x68, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 709.348652ms ago: executing program 6 (id=9511): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x1d4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_ACT={0x1a4, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x44, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa43"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 634.184254ms ago: executing program 4 (id=9512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) setns(0xc9, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) capset(&(0x7f0000000380)={0x20080522}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) close_range(r2, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 451.188609ms ago: executing program 6 (id=9513): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) 450.866009ms ago: executing program 4 (id=9514): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) 260.235574ms ago: executing program 6 (id=9515): symlink(0x0, &(0x7f0000000240)='./file0\x00') kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f4069", 0x1d}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 6 (id=9516): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) kernel console output (not intermixed with test programs): ce number 26 using dummy_hcd [ 2712.964966][T31285] usb 7-1: device descriptor read/64, error -71 [ 2713.422313][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.428759][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.436421][T31305] tipc: Failed to remove unknown binding: 66,0,0/0:3875870296/3875870298 [ 2713.466138][T31305] tipc: Failed to remove unknown binding: 66,0,0/0:3875870296/3875870297 [ 2713.665168][ T27] audit: type=1326 audit(1786723257.864:516): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=31297 comm="syz.4.6942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7fc00000 [ 2714.815883][T31285] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2714.977112][T31285] usb 7-1: device descriptor read/64, error -71 [ 2715.102816][T31285] usb usb7-port1: attempt power cycle [ 2715.831543][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6950'. [ 2718.924684][ T27] audit: type=1326 audit(1786723263.145:517): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=31345 comm="syz.6.6956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7fc00000 [ 2719.164173][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 2719.175269][T10514] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2720.064588][T10514] usb 6-1: device descriptor read/64, error -71 [ 2723.352601][T10514] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2723.819424][T31393] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2727.635930][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2729.957140][ T27] audit: type=1326 audit(1786723274.185:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2729.981365][ C1] vkms_vblank_simulate: vblank timer overrun [ 2730.060860][T31444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6979'. [ 2730.153116][ T27] audit: type=1326 audit(1786723274.185:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.453450][ T27] audit: type=1326 audit(1786723274.185:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.748958][ T27] audit: type=1326 audit(1786723274.185:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.775335][ T27] audit: type=1326 audit(1786723274.225:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.799412][ C1] vkms_vblank_simulate: vblank timer overrun [ 2730.805692][ T27] audit: type=1326 audit(1786723274.225:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.829778][ C1] vkms_vblank_simulate: vblank timer overrun [ 2730.836826][ T27] audit: type=1326 audit(1786723274.225:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2730.861079][ C1] vkms_vblank_simulate: vblank timer overrun [ 2730.903441][ T27] audit: type=1326 audit(1786723274.245:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2731.004793][ T27] audit: type=1326 audit(1786723274.245:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2731.048267][ T27] audit: type=1326 audit(1786723274.245:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31440 comm="syz.6.6975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 2734.912140][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6990'. [ 2735.842106][ T51] Bluetooth: Wrong link type (-57) [ 2738.780831][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 2740.852488][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7002'. [ 2741.463427][T31285] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2741.689077][T31285] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2741.745107][T31285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.799240][T31285] usb 6-1: config 0 descriptor?? [ 2741.811765][T31285] cp210x 6-1:0.0: cp210x converter detected [ 2742.851339][T31285] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2743.910464][T31587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7013'. [ 2744.656978][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 2744.663308][T14436] usb 6-1: USB disconnect, device number 56 [ 2744.689435][T14436] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2744.733985][T14436] cp210x 6-1:0.0: device disconnected [ 2747.750734][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7023'. [ 2747.892984][T14436] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2749.567447][T14436] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2749.582867][T14436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2749.632402][T14436] usb 3-1: config 0 descriptor?? [ 2749.653570][T14436] cp210x 3-1:0.0: cp210x converter detected [ 2749.871256][T14436] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2750.565616][ T51] Bluetooth: Wrong link type (-57) [ 2752.448784][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 2752.454951][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 2752.540070][T14436] usb 3-1: USB disconnect, device number 7 [ 2752.712261][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7033'. [ 2753.395315][T14436] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2753.403936][T14436] cp210x 3-1:0.0: device disconnected [ 2756.416972][T31695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7032'. [ 2758.951241][T31709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7044'. [ 2765.305545][T31753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7054'. [ 2769.557302][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2769.570037][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7053'. [ 2774.867505][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.981113][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2779.176999][T31844] tty tty33: ldisc open failed (-12), clearing slot 32 [ 2781.491371][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2782.321754][T14436] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2782.777053][T14436] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2782.796744][T14436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2782.835054][T14436] usb 3-1: config 0 descriptor?? [ 2782.859970][T14436] cp210x 3-1:0.0: cp210x converter detected [ 2783.872592][T14436] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2783.885428][T14436] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 2783.915923][T14436] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 2783.935269][T14436] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2783.948810][T14436] usb 3-1: USB disconnect, device number 8 [ 2783.958346][T14436] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2783.968357][T14436] cp210x 3-1:0.0: device disconnected [ 2790.050797][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2797.481531][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2803.064777][T32053] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2803.170007][T14063] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2805.204472][T14063] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2805.239898][T14063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.262871][T14063] usb 3-1: config 0 descriptor?? [ 2805.286356][T14063] cp210x 3-1:0.0: cp210x converter detected [ 2806.029872][T14063] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2806.037507][T14063] cp210x 3-1:0.0: querying part number failed [ 2806.630099][T14063] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2806.973830][T14063] usb 3-1: USB disconnect, device number 9 [ 2806.982540][T14063] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2806.991399][T14063] cp210x 3-1:0.0: device disconnected [ 2814.269282][T32068] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2815.351478][T32068] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2815.365311][T32068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.407619][T32068] usb 3-1: config 0 descriptor?? [ 2815.439021][T32068] cp210x 3-1:0.0: cp210x converter detected [ 2817.052007][T32068] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2817.149123][T32068] cp210x 3-1:0.0: querying part number failed [ 2817.165410][T32068] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2817.174375][T32068] usb 3-1: USB disconnect, device number 10 [ 2817.186837][T32068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2817.197043][T32068] cp210x 3-1:0.0: device disconnected [ 2819.009108][T28881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2819.409318][T28881] usb 3-1: Using ep0 maxpacket: 8 [ 2819.439384][T28881] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2819.460959][T28881] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2819.508983][T28881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2819.528427][T28881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.573477][T28881] usbtmc 3-1:16.0: bulk endpoints not found [ 2823.024263][T28136] usb 3-1: USB disconnect, device number 11 [ 2827.278974][T14063] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2827.509778][T14063] usb 5-1: Using ep0 maxpacket: 8 [ 2828.350712][T14063] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2828.361416][T14063] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2828.378477][T14063] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2828.388693][T14063] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2828.401731][T14063] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2828.411643][T14063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.423597][T14063] usbtmc 5-1:16.0: bulk endpoints not found [ 2831.027578][T14063] usb 5-1: USB disconnect, device number 81 [ 2832.508330][ T5874] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2832.722326][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2832.791295][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2832.827752][ T5874] usb 5-1: config 0 descriptor?? [ 2832.840367][ T5874] cp210x 5-1:0.0: cp210x converter detected [ 2833.255104][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2833.285823][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 2833.302636][ T5874] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 2833.313442][ T5874] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2833.593812][ T5859] usb 5-1: USB disconnect, device number 82 [ 2833.792736][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2833.905138][ T5859] cp210x 5-1:0.0: device disconnected [ 2837.030851][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.157957][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2843.217652][T32068] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2847.114910][T32359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2849.097698][T14063] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2849.329424][T14063] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2849.351946][T14063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.459618][T14063] usb 5-1: config 0 descriptor?? [ 2849.495570][T14063] cp210x 5-1:0.0: cp210x converter detected [ 2850.498944][T14063] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2850.525170][T14063] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 2850.535030][T14063] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 2850.546305][T14063] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2850.734251][T28136] usb 5-1: USB disconnect, device number 83 [ 2850.754829][T28136] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2850.784808][T28136] cp210x 5-1:0.0: device disconnected [ 2851.627390][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7222'. [ 2853.895483][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7225'. [ 2854.124563][T32433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2857.901684][T32497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7235'. [ 2859.293619][T31653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2859.307033][T31653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2859.323374][T31653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2859.335076][T31653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2859.344510][T31653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2859.354789][T31653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2859.814327][T32524] chnl_net:caif_netlink_parms(): no params data found [ 2859.974813][T32524] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.999993][T32524] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.008734][T32524] bridge_slave_0: entered allmulticast mode [ 2860.016168][T32524] bridge_slave_0: entered promiscuous mode [ 2860.025994][T32524] bridge0: port 2(bridge_slave_1) entered blocking state [ 2860.041340][T32524] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.075698][T32524] bridge_slave_1: entered allmulticast mode [ 2860.093356][T32524] bridge_slave_1: entered promiscuous mode [ 2860.141212][T32524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2860.163023][T32524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2860.211246][T32524] team0: Port device team_slave_0 added [ 2860.227816][T32524] team0: Port device team_slave_1 added [ 2860.300206][T32524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2860.316902][T32524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2860.346835][T32524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2860.359916][T32524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2860.386258][T32524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2860.456525][T32524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2860.558776][T32524] hsr_slave_0: entered promiscuous mode [ 2860.576391][T32524] hsr_slave_1: entered promiscuous mode [ 2861.408703][T26145] Bluetooth: hci1: command tx timeout [ 2861.646919][T32512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2861.928582][T32524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.003616][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7247'. [ 2862.175815][T32524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.164521][T32524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.299092][T32524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.486465][T26145] Bluetooth: hci1: command tx timeout [ 2864.446823][T32524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2864.593108][T32524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2864.613580][T32524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2865.373259][T32524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2865.566748][T26145] Bluetooth: hci1: command tx timeout [ 2867.443439][T32571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2867.649549][T26145] Bluetooth: hci1: command tx timeout [ 2867.703136][T32524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2867.727271][T32524] 8021q: adding VLAN 0 to HW filter on device team0 [ 2867.827071][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 2867.834295][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2868.564157][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 2868.571388][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2871.671451][T32524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2871.926236][T32524] veth0_vlan: entered promiscuous mode [ 2872.014849][T32524] veth1_vlan: entered promiscuous mode [ 2872.177748][T32524] veth0_macvtap: entered promiscuous mode [ 2872.237239][T32524] veth1_macvtap: entered promiscuous mode [ 2872.318690][T32524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.349580][T32524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.388380][T32524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.422671][T32524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.460825][T32524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2872.487131][T32524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.515954][T32524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.535945][T32524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.550742][T32524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.577867][T32524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2872.715307][T32524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.724298][T32524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.744969][T32524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.769200][T32524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2875.218990][T32634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2876.155509][T28833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2876.201083][T28833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2876.324030][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2876.348807][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2880.952752][T32688] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2882.702275][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7280'. [ 2884.926438][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2885.050113][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7289'. [ 2885.483076][T32749] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2885.875803][T32751] 9pnet_fd: Insufficient options for proto=fd [ 2887.540786][ T1017] hsr_slave_0: left promiscuous mode [ 2887.689672][ T1017] hsr_slave_1: left promiscuous mode [ 2887.766553][ T1017] veth1_vlan: left promiscuous mode [ 2887.787625][ T1017] veth0_vlan: left promiscuous mode [ 2890.175002][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2892.594063][ T329] 9pnet_fd: Insufficient options for proto=fd [ 2894.036348][ C1] vkms_vblank_simulate: vblank timer overrun [ 2894.542311][ T1017] bond0 (unregistering): Released all slaves [ 2894.687144][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7294'. [ 2894.717657][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7300'. [ 2895.119806][ T355] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2897.057584][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 2897.073907][ T360] 9pnet_fd: Insufficient options for proto=fd [ 2897.755079][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.761466][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.204748][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7321'. [ 2900.252872][ T396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7320'. [ 2901.914162][ T409] 9pnet_fd: Insufficient options for proto=fd [ 2903.115770][ T424] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2903.844592][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7332'. [ 2906.648597][ T461] 9pnet_fd: Insufficient options for proto=fd [ 2907.936285][ T476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7342'. [ 2911.250594][ T498] 9pnet_fd: Insufficient options for proto=fd [ 2913.185150][ T512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7355'. [ 2915.932069][T26145] Bluetooth: Wrong link type (-57) [ 2916.912016][ T541] udevd[541]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 2918.189649][ T550] 9pnet_fd: Insufficient options for proto=fd [ 2924.818258][T26145] Bluetooth: Wrong link type (-57) [ 2924.988501][ T614] 9pnet_fd: Insufficient options for proto=fd [ 2927.230794][ T625] udevd[625]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 2932.490655][ T663] 9pnet_fd: Insufficient options for proto=fd [ 2932.642659][T10514] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2933.398160][ T27] kauditd_printk_skb: 121 callbacks suppressed [ 2933.398177][ T27] audit: type=1326 audit(1786723477.637:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.452181][ T27] audit: type=1326 audit(1786723477.637:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.525837][ T27] audit: type=1326 audit(1786723477.667:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.554993][T10514] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2933.576784][T10514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2933.607152][ T27] audit: type=1326 audit(1786723477.667:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.634211][T10514] usb 6-1: config 0 descriptor?? [ 2933.652135][T10514] cp210x 6-1:0.0: cp210x converter detected [ 2933.671619][ T27] audit: type=1326 audit(1786723477.667:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.730668][ T27] audit: type=1326 audit(1786723477.667:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.771190][ T27] audit: type=1326 audit(1786723477.667:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2933.839627][ T27] audit: type=1326 audit(1786723477.667:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2934.006047][ T27] audit: type=1326 audit(1786723477.667:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2934.082871][ T27] audit: type=1326 audit(1786723477.667:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.4.7394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2935.587090][T10514] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 2935.601670][T10514] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2935.621974][T10514] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2935.728750][ T681] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2935.778473][T10514] usb 6-1: USB disconnect, device number 58 [ 2936.010845][T10514] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2936.138189][T10514] cp210x 6-1:0.0: device disconnected [ 2936.499868][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7397'. [ 2938.637295][ T698] 9pnet_fd: Insufficient options for proto=fd [ 2940.315337][ T27] kauditd_printk_skb: 119 callbacks suppressed [ 2940.315353][ T27] audit: type=1326 audit(1786723484.557:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2940.388029][ T27] audit: type=1326 audit(1786723484.577:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2940.458153][ T27] audit: type=1326 audit(1786723484.597:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2940.515588][ T27] audit: type=1326 audit(1786723484.607:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2940.570080][ T27] audit: type=1326 audit(1786723484.607:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2941.860342][ T27] audit: type=1326 audit(1786723484.607:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2941.898395][ T27] audit: type=1326 audit(1786723484.607:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2941.928404][ T27] audit: type=1326 audit(1786723484.607:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2941.956233][ T725] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2941.956233][ T725] The task syz.6.7400 (725) triggered the difference, watch for misbehavior. [ 2941.978183][ T27] audit: type=1326 audit(1786723484.607:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2942.009032][ T27] audit: type=1326 audit(1786723484.607:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.4.7405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2943.163633][T26145] Bluetooth: Wrong link type (-57) [ 2943.582945][ T734] 9pnet_fd: Insufficient options for proto=fd [ 2944.815199][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7409'. [ 2946.696222][ T761] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2950.261272][ T782] 9pnet_fd: Insufficient options for proto=fd [ 2951.493008][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7423'. [ 2952.358141][T26145] Bluetooth: Wrong link type (-57) [ 2955.072951][ T818] 9pnet_fd: Insufficient options for proto=fd [ 2956.125867][ T824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7433'. [ 2958.561813][T15546] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2958.759675][T15546] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2958.791412][T15546] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2958.811666][T15546] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2958.820778][T15546] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.771492][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.778606][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.842121][T15546] usb 7-1: config 0 descriptor?? [ 2959.861156][T15546] usb 7-1: can't set config #0, error -71 [ 2959.892349][T15546] usb 7-1: USB disconnect, device number 29 [ 2959.991427][ T849] 9pnet_fd: Insufficient options for proto=fd [ 2960.983288][ T853] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2970.130194][ T935] 9pnet_fd: Insufficient options for proto=fd [ 2971.174161][ T941] netlink: 'syz.5.7460': attribute type 1 has an invalid length. [ 2976.659040][ T1003] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f [ 2978.312859][ T5874] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2978.561942][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2978.653878][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.802119][ T5874] usb 5-1: config 0 descriptor?? [ 2978.991102][ T5874] cp210x 5-1:0.0: cp210x converter detected [ 2979.350386][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2979.366063][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 2979.384151][ T5874] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 2979.580750][ T5874] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2979.592984][ T5874] usb 5-1: USB disconnect, device number 84 [ 2979.602330][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2979.612255][ T5874] cp210x 5-1:0.0: device disconnected [ 2982.498008][T31653] Bluetooth: hci1: command 0x0406 tx timeout [ 2982.505346][ T1027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2982.714445][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2985.180104][ T27] kauditd_printk_skb: 129 callbacks suppressed [ 2985.180118][ T27] audit: type=1326 audit(1786723529.420:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.237708][ T27] audit: type=1326 audit(1786723529.450:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.289795][T10514] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2985.297690][ T27] audit: type=1326 audit(1786723529.460:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.355203][ T27] audit: type=1326 audit(1786723529.460:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.399987][ T27] audit: type=1326 audit(1786723529.460:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.459766][ T27] audit: type=1326 audit(1786723529.460:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.509721][ T27] audit: type=1326 audit(1786723529.460:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.551141][T10514] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2985.561119][T10514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2985.582890][T10514] usb 5-1: config 0 descriptor?? [ 2985.588155][ T27] audit: type=1326 audit(1786723529.460:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.631107][T10514] cp210x 5-1:0.0: cp210x converter detected [ 2985.639671][ T27] audit: type=1326 audit(1786723529.460:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.672218][ T27] audit: type=1326 audit(1786723529.470:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.7497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcad619e0d9 code=0x7ffc0000 [ 2985.821791][T10514] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2986.941940][ T5874] usb 5-1: USB disconnect, device number 85 [ 2986.955539][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2986.965487][ T5874] cp210x 5-1:0.0: device disconnected [ 2990.574801][ T1128] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2994.053097][ T27] kauditd_printk_skb: 133 callbacks suppressed [ 2994.053112][ T27] audit: type=1326 audit(1786723538.290:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.094426][ T27] audit: type=1326 audit(1786723538.290:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.140816][ T27] audit: type=1326 audit(1786723538.330:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.186918][ T27] audit: type=1326 audit(1786723538.330:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.242330][ T27] audit: type=1326 audit(1786723538.330:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.267140][ T27] audit: type=1326 audit(1786723538.330:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.292193][ T27] audit: type=1326 audit(1786723538.330:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.316434][ T27] audit: type=1326 audit(1786723538.330:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.369575][ T27] audit: type=1326 audit(1786723538.330:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.399242][ T27] audit: type=1326 audit(1786723538.330:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1152 comm="syz.4.7505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd19e0d9 code=0x7ffc0000 [ 2994.624109][ T1167] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3003.817845][ T1230] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3006.243757][ T1243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3006.251964][ T1243] IPv6: NLM_F_CREATE should be set when creating new route [ 3006.345711][ T1223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3011.410616][T26145] Bluetooth: Wrong link type (-57) [ 3011.420191][T26145] Bluetooth: hci3: link tx timeout [ 3011.426162][T26145] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 3013.889463][T26145] Bluetooth: hci3: command 0x0406 tx timeout [ 3014.337276][ T1288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3014.583810][ T1317] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.3442140381), cmd(3) [ 3020.133454][ T1342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3020.602219][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.617577][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3027.289363][ T1402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3034.007670][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7598'. [ 3038.417531][ T1530] UBIFS error (pid: 1530): cannot open "(null)", error -22 [ 3038.463052][ T1487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3048.576043][T28136] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3048.768124][T28136] usb 3-1: Using ep0 maxpacket: 8 [ 3048.792729][T28136] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 3048.801862][T28136] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3048.823461][T28136] usb 3-1: config 2 has no interface number 0 [ 3048.846016][T28136] usb 3-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3048.946322][T28136] usb 3-1: config 2 interface 31 has no altsetting 0 [ 3048.990315][T28136] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3049.027959][T28136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.114864][T28136] usb 3-1: Product: syz [ 3049.155149][T28136] usb 3-1: Manufacturer: syz [ 3049.195269][T28136] usb 3-1: SerialNumber: syz [ 3049.327549][T28136] ch9200: probe of 3-1:2.31 failed with error -22 [ 3049.539671][ T5859] usb 3-1: USB disconnect, device number 12 [ 3052.829505][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'. [ 3054.492999][T31653] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3056.027787][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7670'. [ 3060.037245][ T1760] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3060.805448][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7679'. [ 3066.168203][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7690'. [ 3068.366427][ T1827] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3070.576886][ T1836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7699'. [ 3073.558436][ T27] kauditd_printk_skb: 129 callbacks suppressed [ 3073.558478][ T27] audit: type=1326 audit(1786723617.805:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3073.588921][ C1] vkms_vblank_simulate: vblank timer overrun [ 3074.037873][ T27] audit: type=1326 audit(1786723617.855:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.319612][ T27] audit: type=1326 audit(1786723617.855:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.343843][ T27] audit: type=1326 audit(1786723617.865:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.368767][ T27] audit: type=1326 audit(1786723617.865:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.393442][ T27] audit: type=1326 audit(1786723617.875:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.418016][ T27] audit: type=1326 audit(1786723617.905:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.442492][ T27] audit: type=1326 audit(1786723617.905:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.467549][ T27] audit: type=1326 audit(1786723617.905:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3074.491904][ T27] audit: type=1326 audit(1786723617.925:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1866 comm="syz.6.7707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3076.056668][T31653] Bluetooth: Wrong link type (-57) [ 3079.767045][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7713'. [ 3079.979683][T31653] Bluetooth: Wrong link type (-57) [ 3079.994313][T31653] Bluetooth: hci0: link tx timeout [ 3080.000372][T31653] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 3081.495948][ T27] kauditd_printk_skb: 138 callbacks suppressed [ 3081.495964][ T27] audit: type=1326 audit(1786723625.745:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.531378][ T1939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3081.566761][ T27] audit: type=1326 audit(1786723625.745:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.628237][ T27] audit: type=1326 audit(1786723625.745:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.652339][ C0] vkms_vblank_simulate: vblank timer overrun [ 3081.667837][ T27] audit: type=1326 audit(1786723625.745:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.701667][ T27] audit: type=1326 audit(1786723625.745:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.726260][ T27] audit: type=1326 audit(1786723625.745:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.750341][ C0] vkms_vblank_simulate: vblank timer overrun [ 3081.775291][ T27] audit: type=1326 audit(1786723625.745:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3081.799516][ C0] vkms_vblank_simulate: vblank timer overrun [ 3082.959889][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.962157][T26145] Bluetooth: hci0: command 0x0401 tx timeout [ 3082.966627][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.001726][ T27] audit: type=1326 audit(1786723625.745:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3083.150406][ T27] audit: type=1326 audit(1786723625.745:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3083.238506][ T27] audit: type=1326 audit(1786723625.745:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1938 comm="syz.2.7724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3083.262607][ C0] vkms_vblank_simulate: vblank timer overrun [ 3085.107274][ T1968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7734'. [ 3090.895565][ T2009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3096.666240][ T2073] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3104.583664][ T2144] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3107.793498][ T2187] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3108.018917][ T2195] 9pnet_fd: Insufficient options for proto=fd [ 3108.929744][ T2197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7798'. [ 3111.384794][ T2237] 9pnet_fd: Insufficient options for proto=fd [ 3112.311456][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7803'. [ 3112.348067][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7810'. [ 3113.804194][ T2272] 9pnet_fd: Insufficient options for proto=fd [ 3114.613478][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7821'. [ 3114.939026][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7822'. [ 3115.152513][T19989] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 3115.360777][T19989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3115.926363][T19989] usb 6-1: config 0 has no interfaces? [ 3115.942602][T19989] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3115.962693][T19989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.987521][T19989] usb 6-1: config 0 descriptor?? [ 3116.705134][ T2313] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3117.042960][ T2321] xt_TCPMSS: Only works on TCP SYN packets [ 3118.287969][T14063] usb 6-1: USB disconnect, device number 59 [ 3118.352277][T19989] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 3118.415764][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7834'. [ 3118.505110][ T27] kauditd_printk_skb: 169 callbacks suppressed [ 3118.505125][ T27] audit: type=1326 audit(1786723662.757:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3118.549113][ T27] audit: type=1326 audit(1786723662.757:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3118.585998][T19989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3118.645282][ T27] audit: type=1326 audit(1786723662.757:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3118.686245][T19989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3118.712186][T19989] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3118.733874][T19989] usb 5-1: New USB device found, idVendor=05ba, idProduct=0007, bcdDevice=3e.97 [ 3118.743343][T19989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.751449][T19989] usb 5-1: Product: syz [ 3118.755757][T19989] usb 5-1: Manufacturer: syz [ 3118.771533][T19989] usb 5-1: SerialNumber: syz [ 3118.837271][ T27] audit: type=1326 audit(1786723662.757:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3118.996514][ T27] audit: type=1326 audit(1786723662.757:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.099900][ T27] audit: type=1326 audit(1786723662.757:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.229333][ T27] audit: type=1326 audit(1786723662.757:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.260792][ T27] audit: type=1326 audit(1786723662.757:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.288316][ T27] audit: type=1326 audit(1786723662.757:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.313907][ T27] audit: type=1326 audit(1786723662.757:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2327 comm="syz.6.7836" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3119.752171][T28881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3119.952283][T28881] usb 3-1: Using ep0 maxpacket: 8 [ 3119.965879][T28881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3119.979220][T28881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3120.001048][T28881] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 3120.021355][T28881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3120.039002][T28136] usb 5-1: USB disconnect, device number 86 [ 3120.090725][T28881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3120.112244][T19989] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 3120.115379][T28881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.156604][T28881] usbtmc 3-1:16.0: bulk endpoints not found [ 3120.355576][T19989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3120.435490][T19989] usb 7-1: config 0 has no interfaces? [ 3120.441089][T19989] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3120.528614][T19989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.574704][T19989] usb 7-1: config 0 descriptor?? [ 3120.822377][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7846'. [ 3122.956976][T19989] usb 7-1: USB disconnect, device number 30 [ 3123.174088][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7855'. [ 3123.410048][T28136] usb 3-1: USB disconnect, device number 13 [ 3123.484809][T31653] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3125.535786][ T27] kauditd_printk_skb: 177 callbacks suppressed [ 3125.535796][ T27] audit: type=1326 audit(1786723669.787:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.641889][ T27] audit: type=1326 audit(1786723669.787:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.733602][ T27] audit: type=1326 audit(1786723669.787:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.820650][ T27] audit: type=1326 audit(1786723669.787:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.862261][ T27] audit: type=1326 audit(1786723669.817:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.915660][ T27] audit: type=1326 audit(1786723669.817:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3125.981713][ T27] audit: type=1326 audit(1786723669.817:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3126.032074][ T27] audit: type=1326 audit(1786723669.817:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3126.071710][ T5874] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3126.100735][ T27] audit: type=1326 audit(1786723669.817:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3126.158999][ T27] audit: type=1326 audit(1786723669.817:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2429 comm="syz.6.7863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3b59e0d9 code=0x7ffc0000 [ 3126.288157][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.320833][ T5874] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3126.396351][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3126.431227][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3126.468995][ T5874] usb 5-1: config 0 descriptor?? [ 3126.565488][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7866'. [ 3126.713303][ T2458] netlink: 'syz.2.7867': attribute type 39 has an invalid length. [ 3128.501779][ T2505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7876'. [ 3129.433674][T28881] usb 5-1: USB disconnect, device number 87 [ 3132.361651][ T2539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7885'. [ 3134.501573][T32068] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 3134.812588][T32068] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3134.851226][T32068] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3134.905989][T32068] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3134.920451][T32068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3134.956665][T32068] usb 6-1: config 0 descriptor?? [ 3137.280878][T28136] usb 6-1: USB disconnect, device number 60 [ 3138.536880][ T2610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'. [ 3140.662970][ T2654] overlayfs: failed to resolve './bus': -2 [ 3143.500305][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.507181][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3149.366313][ T2788] 9pnet_fd: Insufficient options for proto=fd [ 3150.587219][ T2793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7941'. [ 3151.816519][ T2805] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3152.110328][ T5874] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3152.382403][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 3152.434417][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.555092][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3152.589109][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3152.671474][ T5874] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3152.736528][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.788505][ T5874] usb 3-1: config 0 descriptor?? [ 3152.857095][ T2847] 9pnet_fd: Insufficient options for proto=fd [ 3154.968592][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 3154.991599][ T5874] usbhid: probe of 3-1:0.0 failed with error -71 [ 3155.020382][ T5874] usb 3-1: USB disconnect, device number 14 [ 3155.221514][ T2861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7958'. [ 3157.212422][ T2888] 9pnet_fd: Insufficient options for proto=fd [ 3158.102730][ T2894] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3159.710969][ T2902] overlayfs: failed to resolve './bus': -2 [ 3160.809837][T10655] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 3161.023501][T10655] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3161.101527][T10655] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3161.207621][T10655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3161.355972][T10655] usb 7-1: config 0 descriptor?? [ 3162.448670][ T2931] 9pnet_fd: Insufficient options for proto=fd [ 3163.319823][T28136] usb 7-1: USB disconnect, device number 31 [ 3166.157621][ T2965] 9pnet_fd: Insufficient options for proto=fd [ 3167.999388][T10514] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 3169.825139][T10514] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3169.983593][T10514] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3169.995212][T10514] usb 7-1: config 0 descriptor?? [ 3170.015503][T10514] cp210x 7-1:0.0: cp210x converter detected [ 3170.133398][ T3016] 9pnet_fd: Insufficient options for proto=fd [ 3170.251765][T10514] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 3170.358446][ T2986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3170.991178][T10514] cp210x 7-1:0.0: querying part number failed [ 3171.000861][T10514] usb 7-1: cp210x converter now attached to ttyUSB0 [ 3171.293854][T28136] usb 7-1: USB disconnect, device number 32 [ 3171.315617][T28136] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3171.335487][T28136] cp210x 7-1:0.0: device disconnected [ 3173.979037][ T5874] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 3174.172447][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3174.192115][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.225381][ T5874] usb 5-1: config 0 descriptor?? [ 3174.246988][ T5874] cp210x 5-1:0.0: cp210x converter detected [ 3174.456111][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 3174.482553][ T5874] cp210x 5-1:0.0: querying part number failed [ 3174.536802][ T5874] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3177.293570][T28136] usb 5-1: USB disconnect, device number 88 [ 3177.364041][T28136] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3177.426498][T28136] cp210x 5-1:0.0: device disconnected [ 3179.639102][T10514] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3179.928859][T10514] usb 3-1: Using ep0 maxpacket: 16 [ 3180.080005][T10514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3180.240819][T10514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3180.252456][T10514] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3180.275811][T10514] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3180.330202][T10514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.374519][T10514] usb 3-1: config 0 descriptor?? [ 3180.489631][ T3111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3180.538982][ T3143] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3181.277891][T10514] usbhid 3-1:0.0: can't add hid device: -71 [ 3181.284159][T10514] usbhid: probe of 3-1:0.0 failed with error -71 [ 3181.295070][T10514] usb 3-1: USB disconnect, device number 15 [ 3182.567960][ T3163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8046'. [ 3184.348412][ T3182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 3184.493634][ T3190] syz_tun: entered allmulticast mode [ 3184.518013][ T3189] syz_tun: left allmulticast mode [ 3184.523296][ T3118] IPVS: starting estimator thread 0... [ 3184.628651][ T3193] IPVS: using max 22 ests per chain, 52800 per kthread [ 3184.692821][ T3197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8057'. [ 3184.728364][ T3118] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 3185.663009][ T3118] usb 5-1: Using ep0 maxpacket: 16 [ 3185.729877][ T3118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.836138][ T3118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3185.934951][ T3118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3186.060575][ T3118] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3186.153813][ T3118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.341405][ T3118] usb 5-1: config 0 descriptor?? [ 3187.275637][ T3118] usbhid 5-1:0.0: can't add hid device: -71 [ 3187.281928][ T3118] usbhid: probe of 5-1:0.0 failed with error -71 [ 3187.302375][ T3118] usb 5-1: USB disconnect, device number 89 [ 3189.022980][ T3238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8068'. [ 3189.612631][ T3208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3191.873690][ T3262] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3192.207916][T10655] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 3192.410979][T10655] usb 6-1: Using ep0 maxpacket: 16 [ 3192.430075][T10655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3192.452669][T10655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3192.473648][T10655] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3192.507005][T10655] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3192.527525][T10655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.551799][T10655] usb 6-1: config 0 descriptor?? [ 3192.660766][ T3280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8081'. [ 3192.975705][T10655] usbhid 6-1:0.0: can't add hid device: -71 [ 3192.984516][T10655] usbhid: probe of 6-1:0.0 failed with error -71 [ 3192.997365][T10655] usb 6-1: USB disconnect, device number 61 [ 3194.248018][ T3298] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3195.655287][ T3273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3196.800926][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8100'. [ 3198.022702][ T3346] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3198.358733][ T3357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8109'. [ 3200.538332][ T3389] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3200.713106][ T3395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8119'. [ 3200.728320][ T3394] overlayfs: missing 'lowerdir' [ 3201.538161][T31653] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3202.779091][ T3426] overlayfs: missing 'lowerdir' [ 3202.883112][ T3432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8130'. [ 3204.115265][ T3455] overlayfs: missing 'lowerdir' [ 3204.913382][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.919830][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.520301][ T3412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3205.865834][ T3488] overlayfs: missing 'lowerdir' [ 3207.834762][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8156'. [ 3208.325031][ T3521] overlayfs: missing 'lowerdir' [ 3209.972670][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8168'. [ 3210.264302][ T3558] overlayfs: missing 'lowerdir' [ 3211.244400][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8178'. [ 3211.853821][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8179'. [ 3213.024241][ T3550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3213.239109][ T3589] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3213.269872][ T3589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3214.673270][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8188'. [ 3214.742585][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8189'. [ 3215.054952][ T3617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3215.876808][ T3617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3216.077902][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8201'. [ 3216.101754][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8202'. [ 3216.744113][ T3652] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3216.754901][ T3652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3217.730598][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8212'. [ 3217.769684][ T3657] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3221.484673][ T3740] overlayfs: failed to clone upperpath [ 3221.637873][ T3746] netlink: 356 bytes leftover after parsing attributes in process `syz.6.8247'. [ 3221.850441][ T3755] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3232.618631][ T3986] overlayfs: missing 'workdir' [ 3245.835192][T10514] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 3246.053639][T10514] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3246.084287][T10514] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.122612][T10514] usb 7-1: config 0 descriptor?? [ 3246.138813][T10514] cp210x 7-1:0.0: cp210x converter detected [ 3246.393758][T10514] usb 7-1: cp210x converter now attached to ttyUSB0 [ 3248.903337][T14436] usb 7-1: USB disconnect, device number 33 [ 3248.926799][T14436] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3248.979369][T14436] cp210x 7-1:0.0: device disconnected [ 3250.355919][ T4241] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3251.332871][ T4245] 9pnet_fd: Insufficient options for proto=fd [ 3254.225614][T14063] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 3254.228695][ T4287] 9pnet_fd: Insufficient options for proto=fd [ 3254.248886][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8433'. [ 3254.518683][T14063] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3254.531717][T14063] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3254.546601][T14063] usb 7-1: config 0 descriptor?? [ 3254.558137][T14063] cp210x 7-1:0.0: cp210x converter detected [ 3254.958845][T14063] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3254.974832][T14063] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 3255.004359][T14063] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 3255.015825][T14063] usb 7-1: cp210x converter now attached to ttyUSB0 [ 3255.037594][T14063] usb 7-1: USB disconnect, device number 34 [ 3255.053433][T14063] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3255.072773][T14063] cp210x 7-1:0.0: device disconnected [ 3259.417973][ T4378] 9pnet_fd: Insufficient options for proto=fd [ 3262.525388][ T4396] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3263.475773][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8477'. [ 3266.354203][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.368129][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.207490][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3269.020342][T14436] IPVS: starting estimator thread 0... [ 3269.143645][ T4499] IPVS: using max 20 ests per chain, 48000 per kthread [ 3269.186158][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8501'. [ 3271.520951][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8513'. [ 3273.274450][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'. [ 3274.085180][ T5859] IPVS: starting estimator thread 0... [ 3274.193382][ T4577] IPVS: using max 21 ests per chain, 50400 per kthread [ 3274.742730][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8539'. [ 3276.650350][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8548'. [ 3282.685523][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8595'. [ 3288.789725][T24989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3288.892262][T28956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3288.905361][T28956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3288.914567][T28956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3288.923964][T28956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3288.932847][T28956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3288.940269][T28956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3289.153361][T24989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.537790][T24989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.692233][T24989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.969401][ T4822] chnl_net:caif_netlink_parms(): no params data found [ 3290.982455][T31653] Bluetooth: hci0: command tx timeout [ 3291.389950][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 3291.402483][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 3291.410123][ T4822] bridge_slave_0: entered allmulticast mode [ 3291.423767][ T4822] bridge_slave_0: entered promiscuous mode [ 3291.434846][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 3291.452121][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 3291.478515][ T4822] bridge_slave_1: entered allmulticast mode [ 3291.487134][ T4822] bridge_slave_1: entered promiscuous mode [ 3292.426046][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3292.549366][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3292.676519][ T4822] team0: Port device team_slave_0 added [ 3292.771628][ T4822] team0: Port device team_slave_1 added [ 3292.879642][ T4879] Bluetooth: MGMT ver 1.22 [ 3292.984467][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3293.001790][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3293.052904][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3293.072392][T31653] Bluetooth: hci0: command tx timeout [ 3293.233944][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3293.240949][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3293.302067][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3293.497490][ T4822] hsr_slave_0: entered promiscuous mode [ 3293.510840][ T4822] hsr_slave_1: entered promiscuous mode [ 3293.517860][ T4822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3293.526955][ T4822] Cannot create hsr debugfs directory [ 3294.268623][T24989] hsr_slave_0: left promiscuous mode [ 3294.295617][T24989] hsr_slave_1: left promiscuous mode [ 3294.376339][T24989] veth1_macvtap: left promiscuous mode [ 3294.382096][T24989] veth0_macvtap: left promiscuous mode [ 3294.392328][T24989] veth1_vlan: left promiscuous mode [ 3294.397751][T24989] veth0_vlan: left promiscuous mode [ 3295.158921][T31653] Bluetooth: hci0: command tx timeout [ 3296.935230][T24989] bond0 (unregistering): Released all slaves [ 3297.232061][T31653] Bluetooth: hci0: command tx timeout [ 3298.086766][T24989] IPVS: stop unused estimator thread 0... [ 3298.496844][ T4822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3298.513428][ T4822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3298.528553][ T4822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3298.548062][ T4822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3298.683686][ T4994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3298.761625][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3298.806402][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 3298.826478][T24989] bridge0: port 1(bridge_slave_0) entered blocking state [ 3298.833698][T24989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3298.880886][T24989] bridge0: port 2(bridge_slave_1) entered blocking state [ 3298.888224][T24989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3300.428283][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3302.040322][ T4822] veth0_vlan: entered promiscuous mode [ 3302.210647][ T4822] veth1_vlan: entered promiscuous mode [ 3302.596519][ T4822] veth0_macvtap: entered promiscuous mode [ 3302.674849][ T4822] veth1_macvtap: entered promiscuous mode [ 3302.784936][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3302.801021][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3302.811399][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3302.822157][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3302.871653][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3302.889338][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3302.913591][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3302.957508][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3302.988871][ T4822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.009684][ T4822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.018948][ T4822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.028072][ T4822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.184980][T28828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3303.212190][T28828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3303.276573][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3303.294028][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3303.534874][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8696'. [ 3305.376113][ T5859] IPVS: starting estimator thread 0... [ 3305.526247][ T5122] IPVS: using max 21 ests per chain, 50400 per kthread [ 3305.827869][ T5144] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3306.674315][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8706'. [ 3322.276920][ T5355] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3325.249526][ T5395] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3325.999962][T14063] IPVS: starting estimator thread 0... [ 3326.180579][ T5404] IPVS: using max 24 ests per chain, 57600 per kthread [ 3326.826892][T28828] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3326.839388][T28956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3326.852599][T28956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3326.870380][T28956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3326.881924][T28956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3326.896289][T28956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3326.905005][T28956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3327.101242][T28828] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3327.295579][T28828] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3327.415087][T28828] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3327.568361][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 3327.750644][ T5433] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3327.786005][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.916824][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.747903][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 3328.768202][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 3328.797852][ T5409] bridge_slave_0: entered allmulticast mode [ 3328.806518][ T5409] bridge_slave_0: entered promiscuous mode [ 3328.841364][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 3328.851744][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 3328.879332][ T5409] bridge_slave_1: entered allmulticast mode [ 3328.891612][ T5409] bridge_slave_1: entered promiscuous mode [ 3328.992795][T28956] Bluetooth: hci2: command tx timeout [ 3329.021654][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3329.093189][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3329.868795][ T5409] team0: Port device team_slave_0 added [ 3329.896365][ T5409] team0: Port device team_slave_1 added [ 3330.066546][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3330.076105][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3330.125547][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3330.297597][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3330.372734][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3330.885634][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3331.065425][T28956] Bluetooth: hci2: command tx timeout [ 3331.308973][ T5409] hsr_slave_0: entered promiscuous mode [ 3331.326846][ T5409] hsr_slave_1: entered promiscuous mode [ 3331.342396][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3331.360118][ T5409] Cannot create hsr debugfs directory [ 3332.080956][ T27] kauditd_printk_skb: 146 callbacks suppressed [ 3332.080972][ T27] audit: type=1326 audit(1786723876.339:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.140601][ T27] audit: type=1326 audit(1786723876.339:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.218534][ T27] audit: type=1326 audit(1786723876.379:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.256331][ T27] audit: type=1326 audit(1786723876.379:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.553203][ T27] audit: type=1326 audit(1786723876.379:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.826714][ T27] audit: type=1326 audit(1786723876.379:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3332.980965][T28828] hsr_slave_0: left promiscuous mode [ 3332.987387][ T27] audit: type=1326 audit(1786723876.379:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3333.013419][ T27] audit: type=1326 audit(1786723876.379:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3333.038110][T28828] hsr_slave_1: left promiscuous mode [ 3333.046695][T28828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3333.070936][T28828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3333.079778][ T27] audit: type=1326 audit(1786723876.379:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3333.110619][ T27] audit: type=1326 audit(1786723876.379:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.5.8799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3333.135827][T28828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3333.142972][T28956] Bluetooth: hci2: command tx timeout [ 3333.270408][T28828] veth1_macvtap: left promiscuous mode [ 3333.279088][T28828] veth0_macvtap: left promiscuous mode [ 3333.297404][T28828] veth1_vlan: left promiscuous mode [ 3333.327668][T28828] veth0_vlan: left promiscuous mode [ 3335.220025][T28956] Bluetooth: hci2: command tx timeout [ 3336.193228][T28828] team0 (unregistering): Port device team_slave_1 removed [ 3336.283330][T28828] team0 (unregistering): Port device team_slave_0 removed [ 3336.361943][T28828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3336.463254][T28828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3338.222758][T28828] bond0 (unregistering): Released all slaves [ 3341.116384][T28828] IPVS: stop unused estimator thread 0... [ 3341.550362][ T5409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3341.583123][ T5409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3341.611215][ T5409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3341.637352][ T5409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3341.827824][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3341.851151][ T5613] fuse: Bad value for 'fd' [ 3341.892935][ T5409] 8021q: adding VLAN 0 to HW filter on device team0 [ 3341.930351][T24989] bridge0: port 1(bridge_slave_0) entered blocking state [ 3341.937668][T24989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3342.008397][T28837] bridge0: port 2(bridge_slave_1) entered blocking state [ 3342.015636][T28837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3344.721118][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3345.383302][ T5671] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3346.807797][ T5409] veth0_vlan: entered promiscuous mode [ 3346.904701][ T5409] veth1_vlan: entered promiscuous mode [ 3347.054588][ T5409] veth0_macvtap: entered promiscuous mode [ 3347.108175][ T5409] veth1_macvtap: entered promiscuous mode [ 3347.206876][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3347.221852][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3347.234682][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3347.247570][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3347.388230][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3347.571670][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3347.820496][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3347.926878][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3347.937866][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3347.963041][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3348.013195][ T5409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.030554][ T5409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.052038][ T5409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.071797][ T5409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.178534][ T5693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8841'. [ 3349.200886][T21852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3349.229160][T21852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3349.253961][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3349.284348][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3352.918899][T10655] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 3353.114636][T10655] usb 6-1: Using ep0 maxpacket: 16 [ 3353.152112][T10655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3353.181954][T10655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3353.216009][T10655] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3353.258906][T10655] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3353.268101][T10655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.325542][T10655] usb 6-1: config 0 descriptor?? [ 3353.936814][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.155411][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.319334][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.326804][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.390799][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.431252][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.448423][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.476698][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.487150][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.511969][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.528938][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.546638][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.607724][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.681751][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.790514][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3354.905247][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3355.033125][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3355.253192][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3355.370825][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3355.443716][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3355.458853][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3356.328150][T10655] hid-generic 0003:0457:07DA.0021: unknown main item tag 0x0 [ 3356.349360][T10655] hid-generic 0003:0457:07DA.0021: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 3356.382394][T10655] usb 6-1: USB disconnect, device number 62 [ 3356.536211][ T5787] fido_id[5787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 3356.705134][ T5793] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3359.501387][ T5833] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3362.161501][ T5872] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3368.318042][T14436] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 3368.587990][T14436] usb 6-1: Using ep0 maxpacket: 8 [ 3368.595978][T14436] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3368.606328][T14436] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3368.615594][T14436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3368.627139][T14436] usb 6-1: config 0 descriptor?? [ 3368.636514][T14436] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3369.170332][T14436] gspca_vc032x: reg_r err -110 [ 3369.635383][T14436] vc032x: probe of 6-1:0.0 failed with error -110 [ 3370.619665][T10655] usb 6-1: USB disconnect, device number 63 [ 3374.688521][ T6050] overlayfs: failed to resolve './bus': -2 [ 3375.004971][ T27] kauditd_printk_skb: 156 callbacks suppressed [ 3375.004986][ T27] audit: type=1326 audit(1786723919.261:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3375.038906][ T27] audit: type=1326 audit(1786723919.301:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3375.092810][ T27] audit: type=1326 audit(1786723919.331:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3375.119319][ T27] audit: type=1326 audit(1786723919.331:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3375.265499][ T27] audit: type=1326 audit(1786723919.331:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3375.303385][ T27] audit: type=1326 audit(1786723919.331:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3376.207700][ T27] audit: type=1326 audit(1786723919.331:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3376.237061][ T27] audit: type=1326 audit(1786723919.331:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3376.263516][ T27] audit: type=1326 audit(1786723919.331:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3376.296068][ T27] audit: type=1326 audit(1786723919.331:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.8944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3378.245503][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8957'. [ 3380.556139][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8968'. [ 3382.060417][T10655] IPVS: starting estimator thread 0... [ 3382.157314][ T6165] IPVS: using max 36 ests per chain, 86400 per kthread [ 3389.499493][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.505840][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.857101][T14436] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 3390.067075][T14436] usb 7-1: Using ep0 maxpacket: 16 [ 3390.079687][T14436] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3390.109382][T14436] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3390.134782][T14436] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3390.168196][T14436] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 3390.192651][T14436] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.236360][T14436] usb 7-1: config 0 descriptor?? [ 3390.999363][T14436] hid-generic 0003:0457:07DA.0022: unknown main item tag 0x0 [ 3391.050380][T14436] hid-generic 0003:0457:07DA.0022: unknown main item tag 0x0 [ 3391.072129][T14436] hid-generic 0003:0457:07DA.0022: unknown main item tag 0x0 [ 3391.096448][T14436] hid-generic 0003:0457:07DA.0022: unknown main item tag 0x0 [ 3391.127903][T14436] hid-generic 0003:0457:07DA.0022: unknown main item tag 0x0 [ 3391.186935][T14436] hid-generic 0003:0457:07DA.0022: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 3391.228918][T14436] usb 7-1: USB disconnect, device number 35 [ 3391.340271][ T6252] fido_id[6252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 3393.515311][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9022'. [ 3412.115708][ T6488] Bluetooth: hci0: command 0x0406 tx timeout [ 3412.482100][ T6506] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 3413.490042][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9105'. [ 3417.102817][ T27] kauditd_printk_skb: 293 callbacks suppressed [ 3417.102832][ T27] audit: type=1326 audit(1786723961.364:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.202574][ T27] audit: type=1326 audit(1786723961.404:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.255424][ T27] audit: type=1326 audit(1786723961.404:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.287642][ T27] audit: type=1326 audit(1786723961.404:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.315332][ T27] audit: type=1326 audit(1786723961.404:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.340531][ T27] audit: type=1326 audit(1786723961.404:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.369250][ T27] audit: type=1326 audit(1786723961.414:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3417.401332][ T27] audit: type=1326 audit(1786723961.414:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3418.675185][ T27] audit: type=1326 audit(1786723961.414:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3418.749545][ T27] audit: type=1326 audit(1786723961.414:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.9115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf8b59e0d9 code=0x7ffc0000 [ 3420.916396][ T6576] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3421.728505][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9125'. [ 3426.618670][ T6646] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9146'. [ 3428.484234][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9157'. [ 3434.542503][ T6762] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 3436.931643][T28881] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 3437.057850][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9205'. [ 3437.134128][T28881] usb 7-1: Using ep0 maxpacket: 8 [ 3437.159648][T28881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3437.174839][T28881] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3437.204144][T28881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3437.225357][T28881] usb 7-1: config 0 descriptor?? [ 3437.272109][T28881] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3438.403367][T28881] gspca_vc032x: reg_r err -110 [ 3438.409360][T28881] vc032x: probe of 7-1:0.0 failed with error -110 [ 3438.863022][T28881] usb 7-1: USB disconnect, device number 36 [ 3440.604061][ T5859] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 3440.844779][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 3440.899190][ T5859] usb 6-1: no configurations [ 3440.918849][ T5859] usb 6-1: can't read configurations, error -22 [ 3441.184191][ T5859] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3441.417196][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 3441.456162][ T5859] usb 6-1: no configurations [ 3441.474207][ T5859] usb 6-1: can't read configurations, error -22 [ 3441.489787][ T5859] usb usb6-port1: attempt power cycle [ 3441.925269][ T5859] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 3441.974755][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 3441.985684][ T5859] usb 6-1: no configurations [ 3441.996186][ T5859] usb 6-1: can't read configurations, error -22 [ 3442.154344][ T5859] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 3442.219501][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 3442.237913][ T5859] usb 6-1: no configurations [ 3442.863790][ T5859] usb 6-1: can't read configurations, error -22 [ 3442.876578][ T5859] usb usb6-port1: unable to enumerate USB device [ 3450.702686][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.709697][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 3452.327314][ T27] kauditd_printk_skb: 144 callbacks suppressed [ 3452.327330][ T27] audit: type=1326 audit(1786723996.596:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.393011][ T27] audit: type=1326 audit(1786723996.626:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.533363][ T27] audit: type=1326 audit(1786723996.626:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.607363][ T27] audit: type=1326 audit(1786723996.636:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.636070][ T27] audit: type=1326 audit(1786723996.636:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.675686][ T27] audit: type=1326 audit(1786723996.636:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.714341][ T27] audit: type=1326 audit(1786723996.636:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.783029][ T27] audit: type=1326 audit(1786723996.636:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.820167][ T6488] Bluetooth: hci2: command 0x0406 tx timeout [ 3452.840018][ T27] audit: type=1326 audit(1786723996.646:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.873746][ T27] audit: type=1326 audit(1786723996.646:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.9283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f047e79e0d9 code=0x7ffc0000 [ 3452.921573][ T6488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3452.935767][ T6488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3452.952292][ T6488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3453.114586][ T6488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3453.122529][ T6488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3453.130229][ T6488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3453.346386][T24989] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3453.654821][T24989] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3453.827731][T24989] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3453.943495][ T5859] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3454.056456][T24989] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3454.099237][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 3454.143125][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 3454.167823][ T5859] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 3454.193173][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.213231][ T5859] usb 6-1: Product: syz [ 3454.220401][ T5859] usb 6-1: Manufacturer: syz [ 3454.234614][ T5859] usb 6-1: SerialNumber: syz [ 3454.253532][ T5859] usb 6-1: config 0 descriptor?? [ 3454.275140][ T5859] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3454.335101][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 3454.342747][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 3454.351750][ T7032] bridge_slave_0: entered allmulticast mode [ 3454.359491][ T7032] bridge_slave_0: entered promiscuous mode [ 3454.368704][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 3454.376321][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 3454.384012][ T7032] bridge_slave_1: entered allmulticast mode [ 3454.391364][ T7032] bridge_slave_1: entered promiscuous mode [ 3454.550133][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3454.596036][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3454.666825][ T7032] team0: Port device team_slave_0 added [ 3454.689050][ T7032] team0: Port device team_slave_1 added [ 3454.830996][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3454.844743][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3454.896905][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3454.958078][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3454.966284][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3454.998802][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3455.137794][ T7032] hsr_slave_0: entered promiscuous mode [ 3455.151378][ T7032] hsr_slave_1: entered promiscuous mode [ 3455.163355][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3455.172605][ T7032] Cannot create hsr debugfs directory [ 3455.213218][T28956] Bluetooth: hci3: command tx timeout [ 3455.736252][ T5859] gspca_sonixj: i2c_w8 err -71 [ 3455.803773][ T5859] sonixj: probe of 6-1:0.0 failed with error -71 [ 3455.838510][ T5859] usb 6-1: USB disconnect, device number 68 [ 3457.151044][T24989] hsr_slave_0: left promiscuous mode [ 3457.167432][T24989] hsr_slave_1: left promiscuous mode [ 3457.203112][T24989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3457.210862][T24989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3457.244629][T24989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3457.263806][T24989] bridge_slave_1: left allmulticast mode [ 3457.279153][T24989] bridge_slave_1: left promiscuous mode [ 3457.293082][T28956] Bluetooth: hci3: command tx timeout [ 3457.307179][T24989] bridge0: port 2(bridge_slave_1) entered disabled state [ 3457.331047][T24989] bridge_slave_0: left allmulticast mode [ 3457.354266][T24989] bridge_slave_0: left promiscuous mode [ 3457.365507][T24989] bridge0: port 1(bridge_slave_0) entered disabled state [ 3457.421543][T24989] veth1_macvtap: left promiscuous mode [ 3457.429053][T24989] veth0_macvtap: left promiscuous mode [ 3457.434925][T24989] veth1_vlan: left promiscuous mode [ 3457.440389][T24989] veth0_vlan: left promiscuous mode [ 3458.487923][ T3118] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 3458.628736][T24989] team0 (unregistering): Port device team_slave_1 removed [ 3458.697572][ T3118] usb 6-1: Using ep0 maxpacket: 8 [ 3458.705848][T24989] team0 (unregistering): Port device team_slave_0 removed [ 3458.708475][ T3118] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 3458.727016][ T3118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.740140][ T3118] usb 6-1: Product: syz [ 3458.745046][ T3118] usb 6-1: Manufacturer: syz [ 3458.750062][ T3118] usb 6-1: SerialNumber: syz [ 3458.771296][ T3118] usb 6-1: config 0 descriptor?? [ 3458.790182][ T3118] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3458.801370][T24989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3458.880225][T24989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3459.386352][T28956] Bluetooth: hci3: command tx timeout [ 3459.500911][T24989] bond0 (unregistering): Released all slaves [ 3459.799363][ T7032] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3459.855895][ T7032] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3459.896956][ T7032] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3459.933272][ T7032] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3460.044915][ T3118] gspca_sonixj: reg_w1 err -71 [ 3460.105785][ T3118] sonixj: probe of 6-1:0.0 failed with error -71 [ 3460.107670][ T27] kauditd_printk_skb: 263 callbacks suppressed [ 3460.107685][ T27] audit: type=1326 audit(1786724004.366:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.131295][ T3118] usb 6-1: USB disconnect, device number 69 [ 3460.237547][ T27] audit: type=1326 audit(1786724004.366:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.335732][ T27] audit: type=1326 audit(1786724004.386:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.360114][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3460.393620][ T27] audit: type=1326 audit(1786724004.386:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.429994][T24989] IPVS: stop unused estimator thread 0... [ 3460.454923][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 3460.474826][ T27] audit: type=1326 audit(1786724004.416:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.478096][T28837] bridge0: port 1(bridge_slave_0) entered blocking state [ 3460.506296][T28837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3460.533539][ T27] audit: type=1326 audit(1786724004.416:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.534253][T28837] bridge0: port 2(bridge_slave_1) entered blocking state [ 3460.564972][T28837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3460.594517][ T27] audit: type=1326 audit(1786724004.416:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.670226][ T7032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3460.696366][ T27] audit: type=1326 audit(1786724004.426:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.755413][ T27] audit: type=1326 audit(1786724004.426:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3460.892472][ T27] audit: type=1326 audit(1786724004.446:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.2.9312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18eb59e0d9 code=0x7ffc0000 [ 3462.263408][T28956] Bluetooth: hci3: command tx timeout [ 3462.491837][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3462.539368][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9316'. [ 3463.636122][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 3463.644964][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 3465.970026][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3466.731503][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3467.136149][ T7178] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3467.149366][ T7178] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3467.161473][ T7178] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3467.170734][ T7178] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3467.418073][ T7032] veth0_vlan: entered promiscuous mode [ 3467.451618][ T7032] veth1_vlan: entered promiscuous mode [ 3467.567463][ T7032] veth0_macvtap: entered promiscuous mode [ 3467.627295][ T7032] veth1_macvtap: entered promiscuous mode [ 3467.687860][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3467.698714][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3467.709414][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3468.216409][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3468.319868][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3468.405373][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3468.511152][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3468.523233][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3468.537241][ T7032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3468.546205][ T7032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3468.555206][ T7032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3468.568076][ T7032] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3468.748693][ T8804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3468.787804][ T8804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3468.846843][T28837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3468.860186][T28837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3469.342422][ T5874] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3469.560788][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 3469.578902][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3469.608811][ T5874] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3469.624317][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3469.654622][ T5874] usb 6-1: config 0 descriptor?? [ 3469.715031][ T5874] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3470.233004][ T5874] gspca_vc032x: reg_r err -110 [ 3470.295192][ T5874] vc032x: probe of 6-1:0.0 failed with error -110 [ 3470.855326][ T7273] gre1: entered promiscuous mode [ 3470.860335][ T7273] gre1: entered allmulticast mode [ 3472.101351][ T7190] usb 6-1: USB disconnect, device number 70 [ 3472.382134][T32068] IPVS: starting estimator thread 0... [ 3472.522202][ T7297] IPVS: using max 21 ests per chain, 50400 per kthread [ 3473.302296][ T7190] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 3473.585775][ T7190] usb 7-1: Using ep0 maxpacket: 8 [ 3473.607522][ T7190] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3473.623134][ T7190] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3473.632960][ T7190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3473.644679][ T7190] usb 7-1: config 0 descriptor?? [ 3473.654611][ T7190] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3474.163358][ T7190] gspca_vc032x: reg_r err -110 [ 3474.170549][ T7190] vc032x: probe of 7-1:0.0 failed with error -110 [ 3474.271421][ T7345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3475.265372][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9378'. [ 3475.803760][ T5859] usb 7-1: USB disconnect, device number 37 [ 3489.623220][T32068] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 3489.829519][T32068] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3489.901479][T32068] usb 7-1: can't read configurations, error -71 [ 3493.770258][ T7595] netlink: 'syz.6.9458': attribute type 11 has an invalid length. [ 3493.780751][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9458'. [ 3495.194967][ T6488] Bluetooth: hci2: unexpected subevent 0x12 length: 30 > 5 [ 3497.524938][T28956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3497.539215][T28956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3497.550472][ T7666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3497.559257][ T7666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3497.569807][ T7666] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3497.578754][ T7666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3497.972270][T28837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3498.869203][T28837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.022856][T28837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.185544][T28837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.239038][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 3499.426312][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 3499.447352][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 3499.464293][ T7664] bridge_slave_0: entered allmulticast mode [ 3499.488565][ T7664] bridge_slave_0: entered promiscuous mode [ 3499.540984][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 3499.554576][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 3499.563958][ T7664] bridge_slave_1: entered allmulticast mode [ 3499.583099][ T7664] bridge_slave_1: entered promiscuous mode [ 3499.610921][ T6488] Bluetooth: hci4: command tx timeout [ 3499.733754][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3499.763624][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3499.909503][ T7664] team0: Port device team_slave_0 added [ 3499.935412][ T7664] team0: Port device team_slave_1 added [ 3500.202256][ T7725] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 3500.216157][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3500.231057][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3500.268099][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3500.356072][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3500.363506][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3500.441332][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3500.685795][ T7744] 9pnet_virtio: no channels available for device syz [ 3500.851474][ T7750] netlink: 'syz.4.9509': attribute type 11 has an invalid length. [ 3500.869352][ T7664] hsr_slave_0: entered promiscuous mode [ 3500.874335][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9509'. [ 3500.897197][ T7664] hsr_slave_1: entered promiscuous mode [ 3500.924422][ T7664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3500.945177][ T7664] Cannot create hsr debugfs directory [ 3501.700687][ T6488] Bluetooth: hci4: command tx timeout [ 3501.814959][ T7769] [ 3501.817353][ T7769] ====================================================== [ 3501.824378][ T7769] WARNING: possible circular locking dependency detected [ 3501.831405][ T7769] syzkaller #0 Not tainted [ 3501.835830][ T7769] ------------------------------------------------------ [ 3501.842862][ T7769] syz.6.9516/7769 is trying to acquire lock: [ 3501.848953][ T7769] ffff888148c47910 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 3501.860610][ T7769] [ 3501.860610][ T7769] but task is already holding lock: [ 3501.868002][ T7769] ffff888030818520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 3501.877217][ T7769] [ 3501.877217][ T7769] which lock already depends on the new lock. [ 3501.877217][ T7769] [ 3501.887634][ T7769] [ 3501.887634][ T7769] the existing dependency chain (in reverse order) is: [ 3501.896684][ T7769] [ 3501.896684][ T7769] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 3501.904358][ T7769] __mutex_lock+0x135/0xc80 [ 3501.909412][ T7769] tcm_set_name+0x2a/0x90 [ 3501.914296][ T7769] function_make+0x199/0x350 [ 3501.919465][ T7769] configfs_mkdir+0x515/0x9e0 [ 3501.924703][ T7769] vfs_mkdir+0x2a5/0x470 [ 3501.929526][ T7769] do_mkdirat+0x1dc/0x450 [ 3501.934403][ T7769] __x64_sys_mkdirat+0x89/0xa0 [ 3501.939719][ T7769] do_syscall_64+0x55/0xb0 [ 3501.944695][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3501.951135][ T7769] [ 3501.951135][ T7769] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 3501.959409][ T7769] __mutex_lock+0x135/0xc80 [ 3501.964464][ T7769] configfs_rmdir+0x63c/0x980 [ 3501.969696][ T7769] vfs_rmdir+0x352/0x4b0 [ 3501.974491][ T7769] do_rmdir+0x29f/0x590 [ 3501.979192][ T7769] __x64_sys_rmdir+0x49/0x50 [ 3501.984324][ T7769] do_syscall_64+0x55/0xb0 [ 3501.989288][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3501.995749][ T7769] [ 3501.995749][ T7769] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 3502.004472][ T7769] __lock_acquire+0x37ef/0x7d80 [ 3502.010482][ T7769] lock_acquire+0x19e/0x420 [ 3502.015545][ T7769] down_write+0x97/0x200 [ 3502.020343][ T7769] configfs_depend_item_unlocked+0x157/0x430 [ 3502.026961][ T7769] usbg_make_tpg+0x1f7/0x580 [ 3502.032112][ T7769] target_fabric_make_tpg+0xa4/0x6d0 [ 3502.037996][ T7769] configfs_mkdir+0x515/0x9e0 [ 3502.043222][ T7769] vfs_mkdir+0x2a5/0x470 [ 3502.048007][ T7769] do_mkdirat+0x1dc/0x450 [ 3502.052885][ T7769] __x64_sys_mkdirat+0x89/0xa0 [ 3502.058198][ T7769] do_syscall_64+0x55/0xb0 [ 3502.063163][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3502.069697][ T7769] [ 3502.069697][ T7769] other info that might help us debug this: [ 3502.069697][ T7769] [ 3502.079936][ T7769] Chain exists of: [ 3502.079936][ T7769] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 3502.079936][ T7769] [ 3502.094662][ T7769] Possible unsafe locking scenario: [ 3502.094662][ T7769] [ 3502.102127][ T7769] CPU0 CPU1 [ 3502.107509][ T7769] ---- ---- [ 3502.112892][ T7769] lock(&opts->dep_lock); [ 3502.117336][ T7769] lock(gadget_subsys.su_mutex); [ 3502.124904][ T7769] lock(&opts->dep_lock); [ 3502.131871][ T7769] lock(&sb->s_type->i_mutex_key#22); [ 3502.137361][ T7769] [ 3502.137361][ T7769] *** DEADLOCK *** [ 3502.137361][ T7769] [ 3502.145511][ T7769] 5 locks held by syz.6.9516/7769: [ 3502.150611][ T7769] #0: ffff88801b698418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 3502.159841][ T7769] #1: ffff88807f0c5fc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 3502.170660][ T7769] #2: ffffffff8db2ae90 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 3502.180397][ T7769] #3: ffffffff8de58768 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 3502.190051][ T7769] #4: ffff888030818520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 3502.199546][ T7769] [ 3502.199546][ T7769] stack backtrace: [ 3502.205448][ T7769] CPU: 0 PID: 7769 Comm: syz.6.9516 Not tainted syzkaller #0 [ 3502.212828][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3502.222918][ T7769] Call Trace: [ 3502.226224][ T7769] [ 3502.229172][ T7769] dump_stack_lvl+0x18c/0x250 [ 3502.233848][ T7769] ? load_image+0x420/0x420 [ 3502.238374][ T7769] ? show_regs_print_info+0x20/0x20 [ 3502.243584][ T7769] ? print_circular_bug+0x12b/0x1a0 [ 3502.248794][ T7769] check_noncircular+0x2fc/0x400 [ 3502.253734][ T7769] ? look_up_lock_class+0x75/0x140 [ 3502.258854][ T7769] ? print_deadlock_bug+0x5d0/0x5d0 [ 3502.264046][ T7769] ? lockdep_lock+0xf5/0x230 [ 3502.268630][ T7769] ? __lock_acquire+0x357f/0x7d80 [ 3502.273651][ T7769] ? _find_first_zero_bit+0xd6/0x100 [ 3502.279091][ T7769] __lock_acquire+0x37ef/0x7d80 [ 3502.283980][ T7769] ? asan.module_dtor+0x20/0x20 [ 3502.288887][ T7769] ? verify_lock_unused+0x140/0x140 [ 3502.294100][ T7769] lock_acquire+0x19e/0x420 [ 3502.298605][ T7769] ? configfs_depend_item_unlocked+0x157/0x430 [ 3502.304769][ T7769] ? trace_raw_output_contention_end+0xd0/0xd0 [ 3502.310925][ T7769] ? __might_sleep+0xe0/0xe0 [ 3502.315624][ T7769] ? rcu_is_watching+0x15/0xb0 [ 3502.320435][ T7769] ? read_lock_is_recursive+0x20/0x20 [ 3502.325826][ T7769] ? trace_contention_end+0x39/0xe0 [ 3502.331560][ T7769] ? __mutex_lock+0x30d/0xc80 [ 3502.336246][ T7769] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3502.342257][ T7769] down_write+0x97/0x200 [ 3502.346499][ T7769] ? configfs_depend_item_unlocked+0x157/0x430 [ 3502.352648][ T7769] ? down_read_killable+0x340/0x340 [ 3502.357850][ T7769] configfs_depend_item_unlocked+0x157/0x430 [ 3502.363849][ T7769] usbg_make_tpg+0x1f7/0x580 [ 3502.368454][ T7769] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3502.374612][ T7769] ? usbg_drop_tport+0x20/0x20 [ 3502.379455][ T7769] ? x86_verw_sel+0x1/0x40 [ 3502.383872][ T7769] target_fabric_make_tpg+0xa4/0x6d0 [ 3502.389171][ T7769] ? target_fabric_release_wwn+0xb0/0xb0 [ 3502.394812][ T7769] configfs_mkdir+0x515/0x9e0 [ 3502.399480][ T7769] vfs_mkdir+0x2a5/0x470 [ 3502.403715][ T7769] do_mkdirat+0x1dc/0x450 [ 3502.408032][ T7769] ? vfs_mkdir+0x470/0x470 [ 3502.412458][ T7769] __x64_sys_mkdirat+0x89/0xa0 [ 3502.417244][ T7769] do_syscall_64+0x55/0xb0 [ 3502.421665][ T7769] ? clear_bhb_loop+0x40/0x90 [ 3502.426341][ T7769] ? clear_bhb_loop+0x40/0x90 [ 3502.431019][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3502.437093][ T7769] RIP: 0033:0x7ff808f9e0d9 [ 3502.441503][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3502.461273][ T7769] RSP: 002b:00007ff8071f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3502.469712][ T7769] RAX: ffffffffffffffda RBX: 00007ff809225fa0 RCX: 00007ff808f9e0d9 [ 3502.477675][ T7769] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 3502.485685][ T7769] RBP: 00007ff809035024 R08: 0000000000000000 R09: 0000000000000000 [ 3502.493756][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3502.501770][ T7769] R13: 00007ff809226038 R14: 00007ff809225fa0 R15: 00007ffd61b9dcf8 [ 3502.509763][ T7769] [ 3502.610106][T28837] hsr_slave_0: left promiscuous mode [ 3502.624470][T28837] hsr_slave_1: left promiscuous mode [ 3502.632216][T28837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3502.639714][T28837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3502.647952][T28837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3502.655847][T28837] bridge_slave_1: left allmulticast mode [ 3502.661657][T28837] bridge_slave_1: left promiscuous mode [ 3502.667431][T28837] bridge0: port 2(bridge_slave_1) entered disabled state [ 3502.676897][T28837] bridge_slave_0: left allmulticast mode [ 3502.682759][T28837] bridge_slave_0: left promiscuous mode [ 3502.688450][T28837] bridge0: port 1(bridge_slave_0) entered disabled state [ 3502.698241][T28837] veth1_macvtap: left promiscuous mode [ 3502.703826][T28837] veth0_macvtap: left promiscuous mode [ 3502.709363][T28837] veth1_vlan: left promiscuous mode [ 3502.715308][T28837] veth0_vlan: left promiscuous mode [ 3503.006669][T28837] team0 (unregistering): Port device team_slave_1 removed [ 3503.044085][T28837] team0 (unregistering): Port device team_slave_0 removed [ 3503.088858][T28837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3503.128738][T28837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3503.250186][T28837] bond0 (unregistering): Released all slaves [ 3503.621168][ T7664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3503.631671][ T7664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3503.641833][ T7664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3503.672196][ T7664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3503.712292][T28837] IPVS: stop unused estimator thread 0... [ 3503.769562][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3503.777344][ T6488] Bluetooth: hci4: command tx timeout [ 3503.794563][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 3503.807513][T29279] bridge0: port 1(bridge_slave_0) entered blocking state [ 3503.814647][T29279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3503.828254][T28837] bridge0: port 2(bridge_slave_1) entered blocking state [ 3503.835402][T28837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3504.041698][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3504.087822][ T7664] veth0_vlan: entered promiscuous mode [ 3504.108364][ T7664] veth1_vlan: entered promiscuous mode [ 3504.146840][ T7664] veth0_macvtap: entered promiscuous mode [ 3504.156621][ T7664] veth1_macvtap: entered promiscuous mode [ 3504.177134][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3504.189844][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3504.202102][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3504.218269][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3504.233159][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3504.243412][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3504.257719][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3504.268270][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3504.280478][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3504.292232][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3504.308867][ T7664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3504.318504][ T7664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3504.331700][ T7664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3504.341419][ T7664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3504.382241][ T7664] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 3504.411043][T21852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3504.421410][ T7664] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 3504.429263][T21852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3504.458530][T21852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3504.466994][T21852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3505.850307][ T6488] Bluetooth: hci4: command tx timeout