last executing test programs: 16.199034793s ago: executing program 0 (id=156): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000a557d0427bd7000fcdbdf2508000100040000000800"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0xc5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xd) r4 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r5 = epoll_create(0x7) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000740)=[{r7}], 0x1, 0x0, 0x0, 0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000540)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="a40000000000000000000000000000009200008008000000", @ANYRES32, @ANYBLOB="08000000ac1414aa08000000859ed279a82a96bd39ed94941b999dee623e84557c44cbde326f04fd7fbb9e3ba3cd8663eff1bc1db8281acd85ddfc87ad61a1b9028e8ded18da7fbe390a0b9342518ee66790a959232b2de495675ba58fcd630d12d406", @ANYRES32=0xee00, @ANYBLOB="08000000ac1e00013329d1302563dd72e674ff69ee1c59ca417d70bd9650a4152616d40fc409d289b8287d66102a64956c23fad1d7cd5e1868cded9c558f60021d3ee53be443d8ebaa2fa4b19d4388e4fc852d80c8c5c0e46fe2610b0c68a332b63d632798251b3a7b1212114fcecaaa7ef8bc93886a0000"], 0xa4}], 0x1}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012000102000000000001040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x3, 0x7ff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000100)={0x2, 0x0, 0x0, 0xe05, 0x7, 0x1fd, 0x80000001}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.189897326s ago: executing program 0 (id=160): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') getdents64(r0, &(0x7f0000000140)=""/4087, 0x18) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r5, &(0x7f0000000340)='Wo', 0x2) readv(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0x40045402, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x80}}, 0x0) mmap(&(0x7f000029b000/0x1000)=nil, 0x1000, 0x280000b, 0x28011, r1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r7, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x30}}, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 14.630268534s ago: executing program 0 (id=162): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000000c0)={0x2}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1c9e72}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r9 = epoll_create1(0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000fffbffffffff86dd60010700000c1100fc01000000000000000000000002000000080000000000000000000100000e22000c9078010000000000000068fc55ddb79997117f4fe70f9b21c3dcc66d8921bdef25d0c2d31a557ca49cd02d17a79653cdb5c424db4869797e83b19fea9a6ed7f1e4f9d4c9700adad0f75f845dd88825a34f09d8a6295de21135a2b49d104283fedfa02eeeeb14d69dfedf4f700239fe1ea2ef04c8ea79a327c8616496991bb3ca52d48e4092ed06a7c4e574021197a0e070f8542f92e9856b6d9558bbd83e491e40b925e360c4a2a3d85684e302"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0x29, 0x0, 0x0) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 14.347914531s ago: executing program 0 (id=163): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x1000) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000a40)='./file0\x00', 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003900000000019078ac1e0001ac1414aa0300907803240000470000000000000007010000ac1414aaac14140086060000000000001d"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0", 0xa) write$P9_RSTAT(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xdd) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x30000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c23ab1cc6a0303030303030302831fb893930303030302c75736572df69643d00"/45, @ANYRES32, @ANYBLOB="642b116cf634f334644116b409c376f7551a327ef4414a915ca502e020af8d3e9ddc1f7e2ae60e42889c240373515286be35799c848942e2e7fba121e301e8766ce3147281f9982395a809438ae5d98fb14f3afd3a45dc882c95a4aaba31684ab415ed03268e04e38bc42c4202d39d2d73a8412aae76aecdc64f217816e586d9746bafe2a83def3c46aba36aacbb", @ANYRESDEC, @ANYRES64], 0x1, 0x0, &(0x7f0000000340)="c7c24599bdfff7675e0eacc1f5da1963c5e506ec4a8af4df9ab68f2e65138b813c96f1349de904aca6dfcfeb45e34a31bc3a88e51e886c7d66406dce04a67304f3ad40b72d4608295185773cbb68ec5036bfaae85818970799bb0a962aa9bdcd061257fb276f602a1dec9ce12048b0a9edabfe771df55f346d47a35799853a24ccd0b2f51b4f324599d0d43a3ff927dd6b14443c56c2849f28602b8dc8b4854e1be8cff6ac69bf6aa55a3c1816435419abd2639691f49e529e556e5ea2fb46") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x20, 0x0, 0x29, 0x0, @broadcast, @remote}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) 13.943877093s ago: executing program 0 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0x19) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x19033}], 0x1, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3]) ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000080030000000900010073797a300000000020000000000a01040000000000000000050000000900010073797a310000000014000000020a0101000000000000000000000000240000000c0a0102000000000001000003000000040003800900010073797a3000000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) r6 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000000b00000008000300b855954aff2c2dc08a911d3413d169466806a8c4085bb6cce64dd63a5c4f25f4290f60069147657551acd9fee7e0571a943e147bd5419fa1fe54bab5676a84f159e6639728bdf1b5b08ea46c5395deb5bbbb66cb5fab3b188c2e414f4d25ee0286071b6bcba79d1092a2c195229790d96b8f037cd45b937f4c2bbb6b4c9922995c4c207c47c1aac65ec363afd32e43eefd8fd4", @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) r7 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) 6.929610502s ago: executing program 4 (id=179): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xfff0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.66414777s ago: executing program 4 (id=180): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x80991add88fa0d28}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0x24, 0xffffffffffffffff, &(0x7f0000000200)) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 5.771512201s ago: executing program 4 (id=184): r0 = syz_open_dev$evdev(0x0, 0x0, 0x40000) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)) vmsplice(r0, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000680)=""/98, 0x62}], 0x4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 5.478843056s ago: executing program 3 (id=185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@multicast1, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @private=0xa010101, @private=0xa010102, @remote]}]}}}}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) r10 = dup(r8) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000004ac0)=[{&(0x7f0000002980)="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", 0x681}], 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r6, 0x0, 0x2}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 4.73560564s ago: executing program 2 (id=146): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff0a, &(0x7f0000000700)=0x200001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="000300000000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f000001aa80)=""/102392, 0x18ff8}], 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xc, 0x80000001, 0x3, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0xfffffffe, 0x1}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex=r3, 0xffffffffffffffff, 0x10, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 4.734838418s ago: executing program 4 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x80003, 0x6b) (async) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0xb000000, @private1}}}, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="9101000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5], 0x44}}, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 64) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x8048810) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9", 0x4d}], 0x3}, 0x0) (rerun: 64) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r9 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) (async) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32f, 0x0, 0x0, 0x3, 0x7, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549", [0xffff]}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4.480273094s ago: executing program 3 (id=187): r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0x5000, 0x16000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) listen(r0, 0x101) accept(r0, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4.087198726s ago: executing program 3 (id=188): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900c3ff13000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) 3.956334341s ago: executing program 1 (id=189): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000a557d0427bd7000fcdbdf2508000100040000000800"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0xc5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xd) r4 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r5 = epoll_create(0x7) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000740)=[{r7}], 0x1, 0x0, 0x0, 0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000540)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="a40000000000000000000000000000009200008008000000", @ANYRES32, @ANYBLOB="08000000ac1414aa08000000859ed279a82a96bd39ed94941b999dee623e84557c44cbde326f04fd7fbb9e3ba3cd8663eff1bc1db8281acd85ddfc87ad61a1b9028e8ded18da7fbe390a0b9342518ee66790a959232b2de495675ba58fcd630d12d406", @ANYRES32=0xee00, @ANYBLOB="08000000ac1e00013329d1302563dd72e674ff69ee1c59ca417d70bd9650a4152616d40fc409d289b8287d66102a64956c23fad1d7cd5e1868cded9c558f60021d3ee53be443d8ebaa2fa4b19d4388e4fc852d80c8c5c0e46fe2610b0c68a332b63d632798251b3a7b1212114fcecaaa7ef8bc93886a0000"], 0xa4}], 0x1}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012000102000000000001040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x3, 0x7ff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000100)={0x2, 0x0, 0x0, 0xe05, 0x7, 0x1fd, 0x80000001}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.912230866s ago: executing program 2 (id=190): r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)='M', 0x300, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa890d001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@delqdisc={0x50, 0x25, 0x20, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xfff2}, {0x2, 0x801c}, {0xffff, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe2, 0x2, 0x0, 0x2, 0x3, 0x1000, 0x81, 0x3}}, {0xa, 0x2, [0x81, 0x8, 0x5]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000000) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) listen(r4, 0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) unshare(0x40000000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="4dbf735ecaea8ec662aaae8b2d726c60ba92a9a984032aab8cf30a024d7001965f600f432a19730dd6667cf69cf990bdddb9fe91eb27878904d9c7b25c748658491e90b7ba9d893e7947fad4e2b7a512bed35020c69fc112b9ca579b3d6eb00fd6589c94e0987474bec61365e6242fc197702369dd387a1cbd4a6eb377e66c0425f703844f14c71e3539f1e89619e895bfd90c45cf9e250704cfa81a7c8708785a947aa3661d1fefbfaf0f20", &(0x7f0000000300)="6534865af02f32c8f334cd48dd95277aa9acecd14fc0bbf0f31abeec3b3ed9ae019a8cf942fc47d8b9bd1ee8586fde4f239a9738fc2af374feda57794e266d9dc4ac40eb0c1e7a50026c3c4a34ec00bc24aa837d1ee820304779590a7ac26b8408f97def59898a853dd0dc986bcacddc4eec9459e9f5"}}, &(0x7f0000000240)) timer_create(0x2, &(0x7f0000000540)={0x0, 0x400026, 0x2, @thr={&(0x7f0000000380)="02d8a1e02107068165ac39758fa0e52cead0b044d6fa9b4d5b8ed52121c78422b924f06f18a802e00673d5c36e4eec8614f099a457eebd62f59dfadba86ef4f154d1b53f4b99a1d00c65b9ca1c4eea01f2a15c31c59c78cc37879cc60136c5efc26d409bb6e3e61380fa2ef9d52ac29db3d6c0dbcc14ff7ced4d5fde8faeafd551fe9a2e38f8171e77617ff4a6aa3642e6cc8dd6c346b94f853c36633cc1deb4f4b7a4965975ea1832ab852b9d1e9ae06818840b99bb8d015dcb7723062e2472100104a7e11f49affb58e4f95a4bb347c5e60f4d2e574f70481ceaabe7", &(0x7f0000000480)="6a7fe49148e1f57e11a23e02aa411131f5730c06493862e117f9b296ec0b9b78aead3a7cc142420d8ac757f1735d36a0875ecec50cb29a752f1f6c1651658d3415d9389024a2a1e42913bd3884ac4f39f08273b79a189cab2d8b9267e0c5bbbfed1d7350a9e78107306fcb0376d2456884ae328ab3d136c02959113f817c79c270593cc0ece87f39020bb0ce969ae3ed6a02804190bc7d83a72539c58595129873ac8a2f5c6fadac73f1"}}, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000740)) timer_gettime(r7, &(0x7f0000000000)) getitimer(0x0, &(0x7f00000000c0)) socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(r0, 0x0) 3.871250266s ago: executing program 3 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000c40)=@ethtool_drvinfo={0x3, "6af47d71a88c0855f34ea5f38d11a7cc5040067cf0ad439507cd5f0374a71692", "f5de6bb45f00a1f7b6f310d076a7b2bc0ad5344f8a076505e5032e40dbabd19a", "9c98d0b496db700c165e3b48ef83761b0992657e2934206def7095d299c18c95", "aa5e0489fe633b62a915308583734b92e9539e362a908b00", "9c7fa9cef671388f693028c4a07dbb0060fc4375158db0c382649e1bd49044fd", "05007c6489dc405ad00b00"}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0xfffffffa, 0x3}, 0x100, './file0\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000910008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 2.929035513s ago: executing program 2 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="cd728da8a5535f0bb6825018b543b71cefb139297502bef38d6926dd4f9da72535d2e9a1198be98d8bbf91155a084b1a0a722f57131ae05e5830466cfd87d6872c9ab62ca83a172258eb77fcaf6600f69e542f68e4fcf7f45dd8f65b227e223bc23b2d337d79660711804c3678f3623f5a699e212ca42b0f803607944d95c5e38aee24dca9ee47995d4078ad6a0f318119e9dd09bb6b4d0a5b9d7048b22138c7d8aac6facf69cc554e688844e23bfab01dd290ae3fa2267c40a201ba77da504f53a1e01b55feb6b7d891179ee85d6c5e06b2bd2c0f0696fcfa8c60d8507452202ca2b83c52f374625cdc0d486a46f4ec8ae263d2ec92ce", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090e00000000009500000000000000be980000000000005608f8ff000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.742129094s ago: executing program 1 (id=193): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000800)='io#harset\xe1\xdco\x04Ohj+=\xf3\xcc\xb7}\x1d\xc1\xbf\x14V\x19\n\xe3\x90\xc9\xb0M|~\xd6\x12@\xe8\x03\x03\r\x8c\xf3\xed\xa0\x96\a\x99\\T)+\x80\x1e\x92\x02\xd2\x9c\xf6\x8f6\xdf\xca\b\xbd\xd5S\x83\x89\xbf\x85c\x93\x8b-\xdf\xba\xf9\xce;\xaf\xa7\xb5\xee\nd\x02\xf0H=\xdc\x8f\xf5\x85\xb68\xcc\x9ez\xe2\x92\xcb\xe4K\xe3\x04\xf1\xe0F\xa8\xfb\x02.jB\x1a\xf5\xe3\xe4\xf7.\xddw>\x1aH\x15\x8e', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB='\n'], 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/4135, 0x1027}, 0x40000122) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000580)=[{}, {}, {}], 0x3, &(0x7f0000000640)={r6, r7+60000000}, &(0x7f0000000740)={[0x8000000000000000]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000a00)) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r8 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000004c0), 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5, 0x401, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f67de5272232c32"}}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00'}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="3800128008000100736974"], 0x60}, 0x1, 0x4c00000000000000}, 0x0) 2.664248641s ago: executing program 2 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="14ffa60016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 2.558325156s ago: executing program 2 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000210001ffffe00000000000000a000000000000000000000008000a0020"], 0x38}}, 0x0) 2.393913941s ago: executing program 2 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000000000020000000c00024000000000000000010900010073797a3000000000090003"], 0x60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0xfc, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@loopback}, {@empty}, {@multicast1, 0xbfd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private}, {@rand_addr=0x64010104}, {@broadcast}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0xb, 0x0, [@multicast1, @remote]}]}}}}}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000005c0)={0x1, 0xc000000, 0x5, 0x7}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xda, 0x17, 0x65, 0x20, 0xe9c, 0x0, 0x7c4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7a, 0xd1}}]}}]}}, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x23b99e38478de29) msgctl$IPC_SET(0x0, 0xc, &(0x7f0000000080)={{0x3, 0x0, 0xee00, 0x0, 0xffffffffffffffff}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f00000000c0)={{0xc}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_MADVISE={0x19, 0x23, 0x0, 0x0, 0x0, &(0x7f0000947000/0x2000)=nil, 0x2000, 0x17, 0x1, {0x0, r7}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 1.72174165s ago: executing program 0 (id=165): prlimit64(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/89, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xff}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7bbf010000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10, @ANYBLOB="1a00040095c5fcb72f01b7c6040000"], 0x44}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1.656317863s ago: executing program 3 (id=197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000097c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 1.646168205s ago: executing program 1 (id=198): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0xffffffff) 1.479624518s ago: executing program 3 (id=199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}}, 0x20040080) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000600)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000800)={0x8f, 0x0, 0xa}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000900)="66b9800000c0cb326635008000000f3000ca66b8536c00000f23d80f21f86635000000800f23f86479c2c20fc7afc800b811008ee8ba200066ed66b99a08000066b8283a07d066ba000000000f3066b9310b00002f0f35", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0xfffffffffffffd77) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xf, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x8, 0x0, 0x3, 0x0, &(0x7f00000001c0)="f7cee7", 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x24}}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @multicast}, 0x8, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x23}}, 'veth0\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00002e000000325b03cc3776691230ec0a86c3069391ea70597f33a180c14c529b8fadba93881b3c1d873ce8acfc24f9b934e3fc9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) shutdown(r0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501", @ANYRES32=r9], 0x0) mmap$KVM_VCPU(&(0x7f000000b000/0x1000)=nil, 0x0, 0x2, 0x10, r3, 0x0) 1.396089873s ago: executing program 1 (id=200): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000a000048665c9e9f880000030007004c000000"], 0x18}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrlimit(0xc, &(0x7f0000000180)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="001000010000000000144400000000000a2c000000060e00000000000000000000000000001800048014000180"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400"], 0x44}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000001380), &(0x7f0000000000)=0xfcce) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0x0) 1.395821359s ago: executing program 4 (id=201): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x300, 0x0, 0x0, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) 554.416379ms ago: executing program 4 (id=202): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x4000000000000004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x7a3200, 0x0) sendmmsg$inet6(r4, &(0x7f00000024c0)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x818a, @loopback, 0x1}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000000c00)="cb832dd19ae6ec4bb7d0294e27063996f69d4ba62b2ffb6db4aee0243c91b161a2624ad8b42076a418e8519c760af2564cca98c810a82de12c0c162d39916a70823d03d8c845caa860930da684cdd27bc492b907e6344bee2e217f130e78964d6b31121ec5a06cfb579eb9ee4514322b23cf6e2b937ae3d2e0f9ffb980dcc9480f4ca161cf5f8c2d226c60b2550f5c9a0ce604041f421b04ba763c60c0094061061b3ddc4727918c1abd36012514ce7daa7b79b14a207493ac765eb99b95619257b1236348c23024314d84c343a68d81b348c7dc55c18c4b22ae7e0b73364fbe5d5e014df270f18698371be5deece4f927a34193", 0xf4}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000540)="31feeaaea85ce2d5dc68ec91", 0xc}, {&(0x7f0000000d00)="21e3b4beae2a010d069b21ae83fc06784fcf2ced38192f51e8454c88c591aef098a7fdd6c327ebf3b5c3f0d93b502faa8d2c6864bbdbe7d5390866a99c833b56f6fc123827179d42197d666fbfcf5b1565e7491189a44acbf725691510da34b7ce089018b308e19ee6f217fd5c7b37a612065a6720fd18bd1d84c2ba0eb669dd4f129ef4feef5bd4ac", 0x89}, {&(0x7f0000001e40)="681f69142edf9ad630ebb8128d8d7d5555db29f8c054cfa9be0f42bc527fd024ddbb40af43acb10ab7844c301da0836bc3602caa21491822ad8a0b51d83ec30d3a8791c0adf01f89a12bdb", 0x4b}, {&(0x7f0000001ec0)="19b29d763f9342905779cb0d16c244d5fb5967277605ec8251c4562fa46dc4778105f31bca1b5b71aef95dde48721d65107daccb913e9d796fdda6c07a7006259c684cc5209ca5cbd6b676ffad2385263dd6d18055514c78364370635ac03c6a44523ccd1849125b8bb9a40c96deb15d1196c319ff2c758a23315499c95a340fe443989cd2d58227bc19e769dc11fa7f24dc39", 0x93}, {&(0x7f0000001f80)="17a4996c20eb022e5d5cf1e50e5b1c406148f98bc8c34ea9ca3d2454c3b4c41b617f2553a599553a7875ed3c734bc38881a4160cabc321873a844c3b6189baa478358b621f8d524dcdd77f0aaec3d2d7c971ce84abb44d5222efbeaa542030792be8b0285acf5f73cbdf620738301405a7290236e6560f48207de4d2b4f2374208496aff241ad5e1d60b0f5101359204", 0x90}, {&(0x7f0000002040)="bf4c9298997ed852a872eb01e5448d4ba84635644317b668c5561d73bfbeb65d47a81a163da1833ef5d723e39aaba7f09a770d6d163967f677eadec7c2fe7d66e96d8baf843484d021763a3c247b10453a6200ef6bba1a4aa34925a2200f2949d15b56a7cff556bd673f9f1422a5af15f53217bbc5574707ea6ee7fc6837147a5d940cdeb8f24d352c353e06a96ccaadb466b09987b131e6c0d8fe0bbb1873b74c6b43db6fb8dfe5ac0ccf60286fcab5a0b0f58f19ada39a5d16", 0xba}, {&(0x7f0000002100)="ac094e3f6a002b3840e5d5dc86e569e4de23d9ee82c3726bd6e4a9cc61bdfe808bcaddaf18b6a30be2442bcb26a14543e4410032219f699cd59dd239aedeebf897d8f3290e67d72760a730ed0d42e4d6b1b2df724398c3b63a014415099f95232f5daff83352873c82dbc4a24de8dd21b0dd3fff7283f9ebd1ba36db6b17b6252a0320bba78ed0b1", 0x88}, {&(0x7f00000021c0)="5d9e61e3b3444f41bc1812f873fbb589c43d415697962a0aa318aa720cd1cb97f66edb6440997e07ef92d6c7aef592bf0a2d603bbaed7b668bf5e03a40eb951dd86ac33948e06e58ebc0eecd1b2236a072f94e881805f88351c0fc8e4ae5c3c8aad9d72a80453ba50ce5349d107e9c227e48dea4e2502ce49d098c078998d280d369e525582d45766f2a6d2f889431cae337a325cb2dd7aea2b1d06d3da8fb396c8126d85fffb01d83486df01c81cf819f16e929c6e7fb4eabf64327a42122d933", 0xc1}], 0xa, &(0x7f0000002380)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0x33, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x6, 0xc1, "0bdf860ac793c6521ce5e3fcd361ed844ab213265582cc1a68b58deacea35abf6f950245d57c6fa7bdfb86c3933065e487ff0e8d4fb1ac764c4e5efcaf3e269b25e1d251d87dee8ac33990ee13e29a22f6f7c6af0aa91368313387962d10fbe761dd16dd9962f674a8e20c08b6318637c64757c5766f72019ff35817ad357303294b32e552af6849652f6611d07cf73aaa8e0d00638c0393673b04621d5d014992652216b4c5515ed19fbceebb654e5c6da8a30a7b082621d6ca5d00223d4d9295"}, @ra={0x5, 0x2, 0xe70}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd}}], 0x110}}], 0x1, 0xc1) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940805891550f4a8000000006700008000f00002000009000080fff5dd00000010000100000467ad0612e5bffbf5737c", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x228002, 0x0) lseek(r5, 0xfffffffffffffffe, 0x1) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00247f0000007f070724fafd966ced10bd5334355e5c38826c51ca022509739c9ceb34af6f1e62b1ac7b1dbdf215d6e04a7682d7102bb5a4aa0bae0762f65cbaeafc9a053a13fe4658080d70af4e0ec0ba4665833c3029f8040b4d6d3f0a25cb7f3bd26e5766e0e48dc5a1b33e6a8f4ab2d7a35f14fc53634b7261171403d59e4715cef01a"], &(0x7f0000000200)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "05fde582227434669ff8be332e3b7945c5df4c106de2e55b4074d9efdff306cf91e9bedcf32475ec95c1967cfff9d6c45846f32dd45abf3ad3ce69a9f9a8701969a8e3160a28def14a459cf52b7cd1b1c9770531cb529efcfa03c92150f4e6e536f0cba0181fa4e9cbd525098dcf94b0cc326c73a53a6cd25efb"}}, &(0x7f0000000980)={0x0, 0xf, 0xfd, {0x5, 0xf, 0xfd, 0x1, [@generic={0xf8, 0x10, 0xa, "0647c44116c922f094eb1aafa937fb23818837dea53f109f027bc902b0600b5402a5bc8d6f8d5c062b9e597a9875ab66457f45a53584b555d591851e539495a488fc92b3e83d59ad2039272119bfad2f7f68aeca0874e4c0a93d156808a18c07fb3868df54d8c006023d5aa78fb8f7ba41a5299c8c93904a5a0fb3a660d1454e5661f97f8604b32b220cd26280495be615000000809cb3118d7654c87557ec67921944820ae1e69ad66ffc3c1b6461f57d488940adb738b761f6680059d9de320ec6b9b2a54c6a66443ee30cd6f27bfdcdb814689cb3541083823db30434f858ca0c5d9e1ce674787d50be99ceeda4232922042b2f"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x0, 0x7, 0x2, "35421818", "e6f1c4e4"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x60, 0x3, 0x80, 0x40, 0x3, 0x49}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000ac0)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r3], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x120}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0xb, 0x2, "9c36"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "4ebc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$CAPI_REGISTER(r5, 0x400c4301, &(0x7f0000000dc0)={0x7, 0x81, 0x3}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x591343, 0x0) 397.157243ms ago: executing program 1 (id=203): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x0) r2 = socket$rxrpc(0x21, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c83020001c0001000b0204004c00000002080400030003080303080000000200d3", @ANYRESOCT=0x0], 0x25) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRESOCT=r3, @ANYRES64=0xffffffffffffffff], 0x23) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102387, 0x18ff3}], 0x1, 0x1ffffc, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x2352a000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x100010, 0xffffffffffffffff, 0x841ea000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0), 0x4) sendmmsg(r2, 0x0, 0x2b, 0xc0c4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa4200, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x11c, 0x1, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRES16=r4], 0x9) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r5], 0x44}}, 0x24048050) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 1 (id=204): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="580000001400192340834b", 0xb}, {&(0x7f00000002c0)="db6dfa07d8098bd2ced64ad5edc54382ee45da9203efd5732acfcc727b53d3079ed06ecae1342e4ec9c8283311dceddf89948d3ef84ff58ffb015760e03187c365999492cb07f544c5f8e72917b4af1e3e47b4655360c078947e62afae62d2ec31a3e0043a888d2096a4fe21b43cef30a6299fda9e752ea4ac9bd768a5a01356f8f5d1dae5c092d7f0fba15747b05104819751a787c6202cca9911ddff6f00ddc9997b", 0xa3}], 0x100000e0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=@dellinkprop={0xb0, 0x6d, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40, 0x520}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0xc4}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_NET_NS_FD={0x8}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1e}, {0x8, 0xb, 0x0, 0x0, 0x10000}, {0x8, 0xd, 0x0, 0x0, 0x8}]}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wg1\x00'}]}, 0xb0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x4011, &(0x7f0000000180)={0x0, 0x6e42, 0x2000, 0x3, 0x3d7}) r5 = syz_io_uring_setup(0x8a5, &(0x7f0000000080)={0x0, 0xc524, 0x4, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x400000, 0x0) dup(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "85406704bbcd6043", "898e9d750bfd000000000400", "a22300", "8ce3a39e3181899b"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "3a997aae6644173f", "b9c0a8cd2707555d2fd4cc373ac51cf2", "1784fe44", "d3e69d47722a0439"}, 0x28) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000240)=0x10000) r10 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706fffffff7fffff40bfe338d969126b404301be4c9b597f365383707df02fa5d0e66b4e30717d764239253f8725c409a121146f72b25c9ff4947fb882d03e96bde4bdfafcef129385084ba6ba28954e526850310472c7bb936746d496efbb24da5bd8260aca749fca60ae19072d0de9ede84b9d616b56e61d5c4ca2d4ce6ec8b8542007f28cc035edac010c318d68f3a7f7eb1f33ac59018433e449b69c6ae81fae87873e447d536f86248ea1f9efc1689096f33835824831e249fc0b89a2d84baae8ce8ec727feace714980e07fed34422372a429ed49ce1c929b73ae96a8906485183e8886665f2e3e252fdfb3cef2"], 0x9) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 59.972019][ T5214] cgroup: Unknown subsys name 'net' [ 60.164469][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.613594][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.799432][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.840940][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.849113][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.863972][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.897100][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.925107][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.933249][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.933388][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.942068][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.949127][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.963246][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.963254][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.967402][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.979868][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.991491][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.992479][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.000238][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.014109][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.021542][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.051318][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.072204][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.084665][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.091908][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.100563][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.121760][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.129172][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.137235][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.147763][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.155743][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.163716][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.657084][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 64.718562][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 64.740802][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 64.862635][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 64.874606][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.882185][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.890560][ T5240] bridge_slave_0: entered allmulticast mode [ 64.898059][ T5240] bridge_slave_0: entered promiscuous mode [ 64.931357][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.938654][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.945777][ T5240] bridge_slave_1: entered allmulticast mode [ 64.952783][ T5240] bridge_slave_1: entered promiscuous mode [ 65.040622][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.047942][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.055151][ T5238] bridge_slave_0: entered allmulticast mode [ 65.062120][ T5238] bridge_slave_0: entered promiscuous mode [ 65.078110][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.091340][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.109903][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 65.120464][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.127823][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.134956][ T5238] bridge_slave_1: entered allmulticast mode [ 65.141979][ T5238] bridge_slave_1: entered promiscuous mode [ 65.219935][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.229994][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.238043][ T5239] bridge_slave_0: entered allmulticast mode [ 65.244773][ T5239] bridge_slave_0: entered promiscuous mode [ 65.254632][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.261859][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.269492][ T5239] bridge_slave_1: entered allmulticast mode [ 65.276287][ T5239] bridge_slave_1: entered promiscuous mode [ 65.293599][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.314323][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.321593][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.329343][ T5241] bridge_slave_0: entered allmulticast mode [ 65.336637][ T5241] bridge_slave_0: entered promiscuous mode [ 65.347996][ T5240] team0: Port device team_slave_0 added [ 65.376265][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.393280][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.401364][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.408640][ T5241] bridge_slave_1: entered allmulticast mode [ 65.415290][ T5241] bridge_slave_1: entered promiscuous mode [ 65.432471][ T5240] team0: Port device team_slave_1 added [ 65.485622][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.498220][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.513841][ T5238] team0: Port device team_slave_0 added [ 65.522120][ T5238] team0: Port device team_slave_1 added [ 65.539879][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.551142][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.587733][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.594700][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.621480][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.676317][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.683778][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.710977][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.732193][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.739356][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.766127][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.800529][ T5241] team0: Port device team_slave_0 added [ 65.809289][ T5239] team0: Port device team_slave_0 added [ 65.818192][ T5241] team0: Port device team_slave_1 added [ 65.835773][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.842855][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.869318][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.922273][ T5239] team0: Port device team_slave_1 added [ 65.931520][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.939116][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.946354][ T5243] bridge_slave_0: entered allmulticast mode [ 65.953475][ T5243] bridge_slave_0: entered promiscuous mode [ 65.962268][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.969534][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.976875][ T5243] bridge_slave_1: entered allmulticast mode [ 65.983678][ T5243] bridge_slave_1: entered promiscuous mode [ 66.006132][ T5240] hsr_slave_0: entered promiscuous mode [ 66.012827][ T5240] hsr_slave_1: entered promiscuous mode [ 66.088478][ T5231] Bluetooth: hci2: command tx timeout [ 66.088556][ T5225] Bluetooth: hci0: command tx timeout [ 66.099762][ T54] Bluetooth: hci1: command tx timeout [ 66.113066][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.120366][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.146655][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.160520][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.168801][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.194761][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.194769][ T5225] Bluetooth: hci3: command tx timeout [ 66.212409][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.219612][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.246043][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.251349][ T5225] Bluetooth: hci4: command tx timeout [ 66.259189][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.269412][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.295460][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.318457][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.330889][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.360299][ T5238] hsr_slave_0: entered promiscuous mode [ 66.367284][ T5238] hsr_slave_1: entered promiscuous mode [ 66.373336][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.381202][ T5238] Cannot create hsr debugfs directory [ 66.418847][ T5243] team0: Port device team_slave_0 added [ 66.461640][ T5243] team0: Port device team_slave_1 added [ 66.530608][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.538153][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.564722][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.581695][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.588922][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.614917][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.654804][ T5241] hsr_slave_0: entered promiscuous mode [ 66.661033][ T5241] hsr_slave_1: entered promiscuous mode [ 66.667272][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.674835][ T5241] Cannot create hsr debugfs directory [ 66.684452][ T5239] hsr_slave_0: entered promiscuous mode [ 66.691295][ T5239] hsr_slave_1: entered promiscuous mode [ 66.698430][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.705972][ T5239] Cannot create hsr debugfs directory [ 66.798008][ T5243] hsr_slave_0: entered promiscuous mode [ 66.804467][ T5243] hsr_slave_1: entered promiscuous mode [ 66.815311][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.823030][ T5243] Cannot create hsr debugfs directory [ 67.074847][ T5240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.132211][ T5240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.168407][ T5240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.178492][ T5240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.288339][ T5238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.304092][ T5238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.315163][ T5238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.331432][ T5238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.413878][ T5241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.434333][ T5241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.444294][ T5241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.453847][ T5241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.504614][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.560354][ T5243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.584639][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.595820][ T5243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.615539][ T5243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.629697][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.637080][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.657701][ T5243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.683927][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.691118][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.786311][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.796123][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.821895][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.842204][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.888892][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.945718][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.991076][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.998254][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.011382][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.018651][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.056341][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.156125][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.168063][ T5225] Bluetooth: hci0: command tx timeout [ 68.173507][ T5225] Bluetooth: hci1: command tx timeout [ 68.176512][ T54] Bluetooth: hci2: command tx timeout [ 68.194117][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.205544][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.212655][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.247891][ T54] Bluetooth: hci3: command tx timeout [ 68.257841][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.267119][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.274216][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.308814][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.327634][ T54] Bluetooth: hci4: command tx timeout [ 68.401127][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.420406][ T5240] veth0_vlan: entered promiscuous mode [ 68.439770][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.449945][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.464360][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.471469][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.483813][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490961][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.553918][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.561039][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.578683][ T5240] veth1_vlan: entered promiscuous mode [ 68.601136][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.608303][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.672811][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.755582][ T5240] veth0_macvtap: entered promiscuous mode [ 68.769698][ T5238] veth0_vlan: entered promiscuous mode [ 68.783825][ T5238] veth1_vlan: entered promiscuous mode [ 68.804775][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.824782][ T5240] veth1_macvtap: entered promiscuous mode [ 68.862809][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.900451][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.923277][ T5241] veth0_vlan: entered promiscuous mode [ 68.933164][ T5240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.944300][ T5240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.953271][ T5240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.962286][ T5240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001080][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.031844][ T5241] veth1_vlan: entered promiscuous mode [ 69.051645][ T5238] veth0_macvtap: entered promiscuous mode [ 69.092886][ T5238] veth1_macvtap: entered promiscuous mode [ 69.143631][ T5243] veth0_vlan: entered promiscuous mode [ 69.160186][ T5241] veth0_macvtap: entered promiscuous mode [ 69.174572][ T5241] veth1_macvtap: entered promiscuous mode [ 69.221899][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.233400][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.244871][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.257908][ T5243] veth1_vlan: entered promiscuous mode [ 69.273677][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.284434][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.295130][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.305765][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.317124][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.331404][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.344009][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.355060][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.369012][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.382455][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.384686][ T5239] veth0_vlan: entered promiscuous mode [ 69.399542][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.410780][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.421117][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.431887][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.442812][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.473253][ T5241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.485966][ T5241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.495881][ T5241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504932][ T5241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.544276][ T5238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.553698][ T5238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.564971][ T5238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.573853][ T5238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.617033][ T5239] veth1_vlan: entered promiscuous mode [ 69.625944][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.638856][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.710238][ T5243] veth0_macvtap: entered promiscuous mode [ 69.758431][ T5243] veth1_macvtap: entered promiscuous mode [ 69.840563][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.869230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.913576][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.924328][ T5239] veth0_macvtap: entered promiscuous mode [ 69.935007][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.974762][ T5239] veth1_macvtap: entered promiscuous mode [ 70.001098][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.036103][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.052075][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.072881][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.086425][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.102845][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.137907][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.163411][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.184210][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.188207][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.209823][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.222772][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.235807][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.247301][ T54] Bluetooth: hci1: command tx timeout [ 70.247321][ T5225] Bluetooth: hci2: command tx timeout [ 70.247340][ T5231] Bluetooth: hci0: command tx timeout [ 70.270345][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.274085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.285580][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.308468][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.327132][ T54] Bluetooth: hci3: command tx timeout [ 70.381902][ T5243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.392842][ T5243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.403551][ T5243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413047][ T54] Bluetooth: hci4: command tx timeout [ 70.420739][ T5243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.464136][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.491310][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.505912][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.526955][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.539900][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.564670][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.578134][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.592585][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.605353][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.619322][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.721902][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.751711][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.769515][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.782459][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.812151][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.863847][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.884350][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.900769][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.919120][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.935708][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.949480][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.972930][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.012351][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.027245][ T5299] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 71.105927][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.153594][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.271528][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.301748][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.315270][ T29] audit: type=1326 audit(1722809785.756:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.362574][ T29] audit: type=1326 audit(1722809785.756:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.387040][ T29] audit: type=1326 audit(1722809785.766:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2501777a33 code=0x7ffc0000 [ 71.482249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.535947][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.596907][ T29] audit: type=1326 audit(1722809785.766:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2501777a33 code=0x7ffc0000 [ 71.606906][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.707902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.728600][ T29] audit: type=1326 audit(1722809785.766:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.790956][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.802546][ T5224] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.804654][ T29] audit: type=1326 audit(1722809785.776:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.811666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.860166][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.871417][ T29] audit: type=1326 audit(1722809785.786:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.902422][ T29] audit: type=1326 audit(1722809785.786:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 71.960220][ T29] audit: type=1326 audit(1722809785.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 72.054237][ T29] audit: type=1326 audit(1722809785.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25017779f9 code=0x7ffc0000 [ 72.087218][ T5224] usb 2-1: device descriptor read/64, error -71 [ 72.280641][ T5328] tty tty27: ldisc open failed (-12), clearing slot 26 [ 72.327800][ T54] Bluetooth: hci1: command tx timeout [ 72.333245][ T54] Bluetooth: hci0: command tx timeout [ 72.338989][ T5231] Bluetooth: hci2: command tx timeout [ 72.408621][ T54] Bluetooth: hci3: command tx timeout [ 72.417316][ T5224] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.486953][ T54] Bluetooth: hci4: command tx timeout [ 72.554533][ T5338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.572521][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.582212][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.590189][ T5224] usb 2-1: device descriptor read/64, error -71 [ 72.641732][ T5340] fuse: Unknown parameter '0x000000000000000e' [ 72.717292][ T5224] usb usb2-port1: attempt power cycle [ 72.737325][ T5274] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.927515][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 72.939238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 72.993558][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.017305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.029051][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.039504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.060557][ T5274] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 73.084948][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.126001][ T5274] usb 4-1: config 0 descriptor?? [ 73.139714][ T5224] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.233894][ T5224] usb 2-1: device descriptor read/8, error -71 [ 73.290715][ T5354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 73.477640][ T5361] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.536958][ T5224] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 73.610828][ T5224] usb 2-1: device descriptor read/8, error -71 [ 73.640454][ T5274] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 73.692893][ T5274] apple 0003:05AC:0274.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.3-1/input0 [ 73.747138][ T5362] sctp: [Deprecated]: syz.4.16 (pid 5362) Use of int in max_burst socket option deprecated. [ 73.747138][ T5362] Use struct sctp_assoc_value instead [ 73.778663][ T5224] usb usb2-port1: unable to enumerate USB device [ 73.814338][ T5274] usb 4-1: USB disconnect, device number 2 [ 73.977058][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.143483][ T5375] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.187322][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 74.197124][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.214503][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.225666][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 74.254841][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.274352][ T5280] usb 5-1: config 0 descriptor?? [ 74.333762][ T5361] syz.2.17: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 74.410864][ T5361] CPU: 1 UID: 0 PID: 5361 Comm: syz.2.17 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 74.421427][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.431511][ T5361] Call Trace: [ 74.434819][ T5361] [ 74.437860][ T5361] dump_stack_lvl+0x241/0x360 [ 74.442598][ T5361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.447830][ T5361] ? __pfx__printk+0x10/0x10 [ 74.452454][ T5361] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 74.458894][ T5361] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 74.465423][ T5361] warn_alloc+0x278/0x410 [ 74.469787][ T5361] ? __pfx_warn_alloc+0x10/0x10 [ 74.474677][ T5361] ? translate_table+0x174/0x2260 [ 74.479720][ T5361] ? __get_vm_area_node+0x23d/0x270 [ 74.484927][ T5361] __vmalloc_node_range_noprof+0x69f/0x1460 [ 74.490830][ T5361] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 74.496658][ T5361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.502978][ T5361] ? rcu_is_watching+0x15/0xb0 [ 74.507739][ T5361] ? trace_kmalloc+0x1f/0xd0 [ 74.512319][ T5361] ? __kmalloc_node_noprof+0x247/0x440 [ 74.517768][ T5361] ? __kvmalloc_node_noprof+0x72/0x190 [ 74.523228][ T5361] __kvmalloc_node_noprof+0x142/0x190 [ 74.528600][ T5361] ? translate_table+0x174/0x2260 [ 74.533624][ T5361] translate_table+0x174/0x2260 [ 74.538491][ T5361] ? __pfx_translate_table+0x10/0x10 [ 74.543774][ T5361] ? __might_fault+0xaa/0x120 [ 74.548453][ T5361] ? __pfx_lock_release+0x10/0x10 [ 74.553478][ T5361] ? __might_fault+0xaa/0x120 [ 74.558150][ T5361] ? __might_fault+0xc6/0x120 [ 74.562822][ T5361] ? _copy_from_user+0xa6/0xe0 [ 74.567584][ T5361] ? copy_from_sockptr_offset+0x6b/0xb0 [ 74.573125][ T5361] do_ipt_set_ctl+0xe3d/0x1250 [ 74.577894][ T5361] ? __pfx___might_resched+0x10/0x10 [ 74.583175][ T5361] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 74.588366][ T5361] ? __pfx_lock_release+0x10/0x10 [ 74.593396][ T5361] ? __mutex_unlock_slowpath+0x21d/0x750 [ 74.599025][ T5361] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 74.604397][ T5361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.610374][ T5361] ? __pfx_aa_sk_perm+0x10/0x10 [ 74.615214][ T5361] ? module_put+0x13a/0x2d0 [ 74.619709][ T5361] nf_setsockopt+0x295/0x2c0 [ 74.624299][ T5361] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.630186][ T5361] do_sock_setsockopt+0x3af/0x720 [ 74.635205][ T5361] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 74.640737][ T5361] ? __fget_files+0x29/0x470 [ 74.645321][ T5361] ? __fget_files+0x3f6/0x470 [ 74.650001][ T5361] __sys_setsockopt+0x1ae/0x250 [ 74.654869][ T5361] __x64_sys_setsockopt+0xb5/0xd0 [ 74.659883][ T5361] do_syscall_64+0xf3/0x230 [ 74.664380][ T5361] ? clear_bhb_loop+0x35/0x90 [ 74.669048][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.674938][ T5361] RIP: 0033:0x7f48b43779f9 [ 74.679349][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.698959][ T5361] RSP: 002b:00007f48b5146048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.707974][ T5361] RAX: ffffffffffffffda RBX: 00007f48b4505f80 RCX: 00007f48b43779f9 [ 74.715935][ T5361] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.723895][ T5361] RBP: 00007f48b43e58ee R08: 0000000000000440 R09: 0000000000000000 [ 74.731858][ T5361] R10: 0000000020001880 R11: 0000000000000246 R12: 0000000000000000 [ 74.739815][ T5361] R13: 000000000000000b R14: 00007f48b4505f80 R15: 00007f48b462fa38 [ 74.747790][ T5361] [ 74.810396][ T5361] Mem-Info: [ 74.813557][ T5361] active_anon:4093 inactive_anon:0 isolated_anon:0 [ 74.813557][ T5361] active_file:1402 inactive_file:38131 isolated_file:0 [ 74.813557][ T5361] unevictable:768 dirty:1464 writeback:0 [ 74.813557][ T5361] slab_reclaimable:8762 slab_unreclaimable:93938 [ 74.813557][ T5361] mapped:21621 shmem:1243 pagetables:838 [ 74.813557][ T5361] sec_pagetables:0 bounce:0 [ 74.813557][ T5361] kernel_misc_reclaimable:0 [ 74.813557][ T5361] free:1381178 free_pcp:740 free_cma:0 [ 74.867952][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 74.950323][ T5361] Node 0 active_anon:16072kB inactive_anon:0kB active_file:5448kB inactive_file:152440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86224kB dirty:5852kB writeback:0kB shmem:3436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10148kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no [ 75.047285][ T5280] logitech 0003:046D:CA04.0002: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 75.068085][ T5280] logitech 0003:046D:CA04.0002: no inputs found [ 75.080910][ T5361] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.172483][ T5384] capability: warning: `syz.1.24' uses 32-bit capabilities (legacy support in use) [ 75.210248][ T5361] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.221583][ T5277] usb 5-1: USB disconnect, device number 2 [ 75.267142][ T5361] lowmem_reserve[]: 0 2561 2562 0 0 [ 75.308798][ T5361] Node 0 DMA32 free:1566216kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:16108kB inactive_anon:0kB active_file:5448kB inactive_file:151128kB unevictable:1536kB writepending:5872kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:652kB local_pcp:512kB free_cma:0kB [ 75.376214][ T5361] lowmem_reserve[]: 0 0 1 0 0 [ 75.386251][ T5361] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 75.435852][ T5390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 75.456066][ T5390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.508283][ T5361] lowmem_reserve[]: 0 0 0 0 0 [ 75.513118][ T5361] Node 1 Normal free:3946380kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:968kB local_pcp:148kB free_cma:0kB [ 75.552348][ T5361] lowmem_reserve[]: 0 0 0 0 0 [ 75.564270][ T5361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.601277][ T5361] Node 0 DMA32: 121*4kB (UM) 151*8kB (UME) 62*16kB (UME) 12*32kB (UE) 18*64kB (UME) 10*128kB (UME) 4*256kB (ME) 7*512kB (UME) 2*1024kB (M) 2*2048kB (M) 378*4096kB (UM) = 1564540kB [ 75.618795][ T5396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.621006][ T5361] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 75.657436][ T5361] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 6*16kB (UM) 5*32kB (U) 3*64kB (UM) 4*128kB (U) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 961*4096kB (M) = 3946484kB [ 75.685203][ T5361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.707882][ T5396] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 75.725922][ T5361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.743890][ T5361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.753957][ T5361] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.778828][ T5361] 40755 total pagecache pages [ 75.783546][ T5361] 0 pages in swap cache [ 75.850895][ T5361] Free swap = 124996kB [ 75.855104][ T5361] Total swap = 124996kB [ 75.916886][ T5361] 2097051 pages RAM [ 75.920741][ T5361] 0 pages HighMem/MovableOnly [ 75.925433][ T5361] 402772 pages reserved [ 75.954466][ T5361] 0 pages cma reserved [ 76.004929][ T5405] syz_tun: refused to change device tx_queue_len [ 76.563670][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 76.980480][ T5420] input: syz1 as /devices/virtual/input/input5 [ 77.741133][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 77.764968][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 77.781447][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 78.493293][ T5453] Zero length message leads to an empty skb [ 78.551887][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 3003 [ 78.569335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.708068][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 80.011943][ T5279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.224779][ T5483] input: syz0 as /devices/virtual/input/input6 [ 80.239362][ T5279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.268204][ T5279] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.322787][ T5279] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.352010][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.389982][ T5279] usb 1-1: SerialNumber: syz [ 80.402515][ T54] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 80.409428][ T54] Bluetooth: Wrong link type (-22) [ 80.462695][ T5485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.56'. [ 80.498099][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 80.509310][ T5492] netlink: 156 bytes leftover after parsing attributes in process `syz.4.58'. [ 80.544105][ T5492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.58'. [ 80.746444][ T5279] usb 1-1: 0:2 : does not exist [ 80.825065][ T5279] usb 1-1: USB disconnect, device number 2 [ 80.937386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.159499][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.244133][ T5507] Cannot find add_set index 0 as target [ 81.579544][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.65'. [ 81.963950][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 81.963967][ T29] audit: type=1800 audit(1722809796.406:79): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.65" name="/" dev="fuse" ino=1 res=0 errno=0 [ 82.027578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.066485][ T5538] input: syz0 as /devices/virtual/input/input8 [ 82.238352][ T5540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.72'. [ 82.548475][ T5280] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.662600][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.756855][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 82.769699][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.796022][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.800627][ T5280] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 82.812887][ T8] cfg80211: failed to load regulatory.db [ 82.835792][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.867380][ T5280] usb 5-1: Product: syz [ 82.872777][ T5280] usb 5-1: Manufacturer: syz [ 82.879479][ T5280] usb 5-1: SerialNumber: syz [ 82.905541][ T5280] usb 5-1: config 0 descriptor?? [ 82.931488][ T5280] usb 5-1: bad CDC descriptors [ 83.020325][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.172955][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.365262][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.373278][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.384104][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.393877][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.402803][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.410847][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.418754][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.565365][ T35] bridge_slave_1: left allmulticast mode [ 83.572321][ T35] bridge_slave_1: left promiscuous mode [ 83.581264][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.611069][ T35] bridge_slave_0: left allmulticast mode [ 83.627042][ T35] bridge_slave_0: left promiscuous mode [ 83.634333][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.647014][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.656229][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.681703][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 83.729768][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.759118][ T8] usb 2-1: config 0 descriptor?? [ 84.185652][ T8] vrc2 0003:07C0:1125.0003: fixing up VRC-2 report descriptor [ 84.224321][ T8] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0003/input/input9 [ 84.356691][ T8] vrc2 0003:07C0:1125.0003: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 84.387412][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.403026][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.417864][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.428322][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 84.436503][ T54] Bluetooth: hci3: hardware error 0x00 [ 84.490314][ T35] bond0 (unregistering): Released all slaves [ 84.506841][ T5280] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.700506][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 84.759481][ T5280] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 84.779336][ T5577] trusted_key: syz.3.84 sent an empty control message without MSG_MORE. [ 84.827073][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.871134][ T5280] usb 1-1: Product: syz [ 84.889014][ T5280] usb 1-1: Manufacturer: syz [ 84.907051][ T5280] usb 1-1: SerialNumber: syz [ 84.929580][ T5280] usb 1-1: config 0 descriptor?? [ 85.166974][ T5280] usb 1-1: USB disconnect, device number 3 [ 85.308791][ T5561] chnl_net:caif_netlink_parms(): no params data found [ 85.344661][ T8] usb 5-1: USB disconnect, device number 3 [ 85.431884][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.457120][ T5231] Bluetooth: hci2: command tx timeout [ 85.495419][ T35] hsr_slave_0: left promiscuous mode [ 85.505262][ T35] hsr_slave_1: left promiscuous mode [ 85.534796][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.545413][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.562568][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.571209][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.605997][ T35] veth1_macvtap: left promiscuous mode [ 85.613067][ T35] veth0_macvtap: left promiscuous mode [ 85.624097][ T35] veth1_vlan: left promiscuous mode [ 85.632794][ T35] veth0_vlan: left promiscuous mode [ 86.178479][ T5280] usb 2-1: USB disconnect, device number 6 [ 86.284326][ T5231] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 86.404390][ T5606] syz.1.88 (5606): attempted to duplicate a private mapping with mremap. This is not supported. [ 86.490870][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.611447][ T5608] input: syz0 as /devices/virtual/input/input10 [ 86.719103][ T35] team0 (unregistering): Port device team_slave_1 removed [ 86.767132][ T35] team0 (unregistering): Port device team_slave_0 removed [ 87.293673][ T5609] netlink: 44 bytes leftover after parsing attributes in process `syz.4.89'. [ 87.526893][ T54] Bluetooth: hci2: command tx timeout [ 87.596081][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.637146][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.673657][ T5561] bridge_slave_0: entered allmulticast mode [ 87.708417][ T5561] bridge_slave_0: entered promiscuous mode [ 87.717982][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 87.732383][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.745726][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.753248][ T5561] bridge_slave_1: entered allmulticast mode [ 87.763808][ T5561] bridge_slave_1: entered promiscuous mode [ 87.931767][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.991357][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.991480][ T5279] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.066464][ T5627] mmap: syz.1.93 (5627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.227033][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 88.283426][ T5279] usb 5-1: too many configurations: 205, using maximum allowed: 8 [ 88.303617][ T5279] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.326156][ T5561] team0: Port device team_slave_0 added [ 88.332919][ T5279] usb 5-1: can't read configurations, error -61 [ 88.383058][ T5561] team0: Port device team_slave_1 added [ 88.496921][ T5279] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.610700][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.633995][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.684039][ T5561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.708179][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 88.709735][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.728257][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.732076][ T5279] usb 5-1: too many configurations: 205, using maximum allowed: 8 [ 88.772593][ T5561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.822033][ T5279] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.829834][ T5279] usb 5-1: can't read configurations, error -61 [ 88.863461][ T5279] usb usb5-port1: attempt power cycle [ 88.909376][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.068778][ T5657] loop4: detected capacity change from 0 to 2 [ 89.106129][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.158086][ T5561] hsr_slave_0: entered promiscuous mode [ 89.173099][ T5561] hsr_slave_1: entered promiscuous mode [ 89.183375][ T5561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.202543][ T5561] Cannot create hsr debugfs directory [ 89.232214][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.307287][ T5279] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.348062][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 89.354818][ T5279] usb 5-1: too many configurations: 205, using maximum allowed: 8 [ 89.365859][ T5276] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.378994][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.388776][ C1] hrtimer: interrupt took 345226 ns [ 89.399052][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.408824][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.418290][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.428442][ T5279] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.436047][ T5279] usb 5-1: can't read configurations, error -61 [ 89.446894][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.457714][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.466460][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.608232][ T5231] Bluetooth: hci2: command tx timeout [ 89.617652][ T5279] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.627192][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 89.654102][ T5276] usb 2-1: config 0 has no interfaces? [ 89.665801][ T5276] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.693050][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 89.708590][ T5279] usb 5-1: too many configurations: 205, using maximum allowed: 8 [ 89.737575][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.750803][ T5279] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.773348][ T5279] usb 5-1: can't read configurations, error -61 [ 89.784599][ T5276] usb 2-1: config 0 descriptor?? [ 89.791729][ T5279] usb usb5-port1: unable to enumerate USB device [ 90.034325][ T35] bridge_slave_1: left allmulticast mode [ 90.045976][ T35] bridge_slave_1: left promiscuous mode [ 90.058567][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.075002][ T35] bridge_slave_0: left allmulticast mode [ 90.085659][ T35] bridge_slave_0: left promiscuous mode [ 90.092469][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.266926][ T5279] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.371154][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.383295][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.394373][ T35] bond0 (unregistering): Released all slaves [ 90.448339][ T5279] usb 1-1: Using ep0 maxpacket: 32 [ 90.495245][ T5279] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.534387][ T5279] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.562561][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.579745][ T5670] chnl_net:caif_netlink_parms(): no params data found [ 90.610215][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.631745][ T5279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.649326][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.668386][ T5279] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.678416][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.691165][ T5279] usb 1-1: config 0 descriptor?? [ 90.787266][ T5689] input: syz0 as /devices/virtual/input/input11 [ 90.791758][ T5561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.888829][ T5561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.940534][ T5279] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.002257][ T5693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.104'. [ 91.078804][ T5561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.096710][ T5561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.126732][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.156956][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.165479][ T5670] bridge_slave_0: entered allmulticast mode [ 91.179290][ T5670] bridge_slave_0: entered promiscuous mode [ 91.227749][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.249017][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.256550][ T5670] bridge_slave_1: entered allmulticast mode [ 91.290387][ T5670] bridge_slave_1: entered promiscuous mode [ 91.428674][ T35] hsr_slave_0: left promiscuous mode [ 91.460651][ T35] hsr_slave_1: left promiscuous mode [ 91.478840][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.486433][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.502667][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.511705][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.527206][ T5231] Bluetooth: hci3: command tx timeout [ 91.552045][ T35] veth1_macvtap: left promiscuous mode [ 91.564302][ T35] veth0_macvtap: left promiscuous mode [ 91.571462][ T35] veth1_vlan: left promiscuous mode [ 91.584729][ T35] veth0_vlan: left promiscuous mode [ 91.687077][ T5231] Bluetooth: hci2: command tx timeout [ 92.061888][ T5278] usb 2-1: USB disconnect, device number 7 [ 92.209734][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.553484][ T35] team0 (unregistering): Port device team_slave_1 removed [ 92.568706][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 92.615460][ T35] team0 (unregistering): Port device team_slave_0 removed [ 93.039691][ T5355] usb 1-1: USB disconnect, device number 4 [ 93.065002][ T5355] usblp0: removed [ 93.234332][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.282674][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.391693][ T5670] team0: Port device team_slave_0 added [ 93.405829][ T5670] team0: Port device team_slave_1 added [ 93.587439][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.607290][ T54] Bluetooth: hci3: command tx timeout [ 93.632139][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.673716][ T5277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.700590][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.722043][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.742608][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.776149][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.938197][ T5277] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.963429][ T5670] hsr_slave_0: entered promiscuous mode [ 93.970778][ T5277] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.987140][ T5277] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.998176][ T5670] hsr_slave_1: entered promiscuous mode [ 94.009394][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.021124][ T5670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.033943][ T5670] Cannot create hsr debugfs directory [ 94.034652][ T5715] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.065599][ T5277] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.255600][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.306577][ T5277] usb 5-1: USB disconnect, device number 8 [ 94.367879][ T5561] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.490362][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.497600][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.595421][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.602661][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.790334][ T5561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.917354][ T5277] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.963582][ T5751] input: syz0 as /devices/virtual/input/input12 [ 95.082210][ T5561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.117007][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 95.127223][ T5753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.113'. [ 95.130244][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 95.158485][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.178375][ T5277] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 95.192010][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.214385][ T5277] usb 5-1: config 0 descriptor?? [ 95.244647][ T5561] veth0_vlan: entered promiscuous mode [ 95.306268][ T5561] veth1_vlan: entered promiscuous mode [ 95.337821][ T9] usb 1-1: device descriptor read/64, error -71 [ 95.382288][ T5670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.413696][ T5561] veth0_macvtap: entered promiscuous mode [ 95.422466][ T5670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.441825][ T5670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.462733][ T5670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.485793][ T5561] veth1_macvtap: entered promiscuous mode [ 95.536458][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.556691][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.575322][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.586180][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.602370][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.625354][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.636956][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.637124][ T5715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.657003][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.666354][ T5715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.669665][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.687411][ T54] Bluetooth: hci3: command tx timeout [ 95.699447][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.723231][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.731887][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.744046][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.757571][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.772964][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.783410][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.793381][ T5277] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 95.805083][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.807277][ T5277] hid-generic 0003:0158:0100.0004: unexpected long global item [ 95.825073][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.829702][ T5277] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 95.842593][ T9] usb 1-1: device descriptor read/64, error -71 [ 95.884236][ T5561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.913683][ T5561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.933935][ T5561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.958480][ T5561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978030][ T9] usb usb1-port1: attempt power cycle [ 96.016151][ T5276] usb 5-1: USB disconnect, device number 9 [ 96.261380][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.274947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.307412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.391427][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.407440][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.436608][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.445871][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.463936][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.471159][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.479838][ T9] usb 1-1: device descriptor read/8, error -71 [ 96.524881][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.532095][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.759634][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.798278][ T9] usb 1-1: device descriptor read/8, error -71 [ 96.919744][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.928374][ T9] usb usb1-port1: unable to enumerate USB device [ 97.007196][ T5274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.034214][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.170611][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.203567][ T5274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.266801][ T5274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.297872][ T5274] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.327118][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.357193][ T5274] usb 3-1: SerialNumber: syz [ 97.403844][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.490344][ T5670] veth0_vlan: entered promiscuous mode [ 97.547979][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.624672][ T5670] veth1_vlan: entered promiscuous mode [ 97.663140][ T5274] usb 3-1: 0:2 : does not exist [ 97.727295][ T5274] usb 3-1: USB disconnect, device number 2 [ 97.767023][ T54] Bluetooth: hci3: command tx timeout [ 97.911315][ T5670] veth0_macvtap: entered promiscuous mode [ 98.017806][ T5670] veth1_macvtap: entered promiscuous mode [ 98.089034][ T11] bridge_slave_1: left allmulticast mode [ 98.094730][ T11] bridge_slave_1: left promiscuous mode [ 98.128187][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.138310][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.168986][ T11] bridge_slave_0: left allmulticast mode [ 98.184990][ T11] bridge_slave_0: left promiscuous mode [ 98.195348][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.279522][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.308970][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.330731][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.358839][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.368264][ T5276] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.391679][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.400001][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.578396][ T5276] usb 2-1: device descriptor read/64, error -71 [ 98.785884][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.797432][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.812064][ T11] bond0 (unregistering): Released all slaves [ 98.862431][ T5276] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.057183][ T5276] usb 2-1: device descriptor read/64, error -71 [ 99.136453][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.158891][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.174234][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.186988][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.197238][ T5276] usb usb2-port1: attempt power cycle [ 99.202176][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.265310][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.285138][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.295917][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.309040][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.415797][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.432409][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.442326][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.457332][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.473954][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.484718][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.495204][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.511373][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.524177][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.549949][ T5670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.574534][ T5670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583388][ T5670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.592628][ T5670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.620318][ T11] hsr_slave_0: left promiscuous mode [ 99.626149][ T11] hsr_slave_1: left promiscuous mode [ 99.633802][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.641301][ T5276] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.641360][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.658834][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.667625][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.686194][ T5276] usb 2-1: device descriptor read/8, error -71 [ 99.689188][ T11] veth1_macvtap: left promiscuous mode [ 99.698619][ T11] veth0_macvtap: left promiscuous mode [ 99.704192][ T11] veth1_vlan: left promiscuous mode [ 99.710026][ T11] veth0_vlan: left promiscuous mode [ 99.968176][ T5276] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.027284][ T5276] usb 2-1: device descriptor read/8, error -71 [ 100.084661][ T5865] binder_alloc: binder_alloc_mmap_handler: 5864 20ffd000-20fff000 already mapped failed -16 [ 100.148067][ T5276] usb usb2-port1: unable to enumerate USB device [ 100.288185][ T11] team0 (unregistering): Port device team_slave_1 removed [ 100.297029][ T5274] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.326232][ T11] team0 (unregistering): Port device team_slave_0 removed [ 100.457021][ T5224] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.489338][ T54] Bluetooth: hci0: command tx timeout [ 100.499908][ T5274] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 100.515697][ T5274] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 100.525792][ T5274] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 100.535097][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.546664][ T5274] usb 3-1: config 0 descriptor?? [ 100.649681][ T5224] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.659983][ T5224] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.671438][ T5224] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.680702][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.692103][ T5224] usb 1-1: SerialNumber: syz [ 100.858604][ T5274] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 100.879728][ T5274] asix 3-1:0.0: probe with driver asix failed with error -71 [ 100.952931][ T5274] usb 3-1: USB disconnect, device number 3 [ 101.046226][ T5224] usb 1-1: 0:2 : does not exist [ 101.111179][ T5224] usb 1-1: USB disconnect, device number 9 [ 101.126057][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.168130][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.232134][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 101.343586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.356167][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.423009][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.597095][ T5342] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 101.612417][ T5891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.620138][ T5891] IPv6: NLM_F_CREATE should be set when creating new route [ 101.627423][ T5891] IPv6: NLM_F_CREATE should be set when creating new route [ 101.703042][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 101.717363][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.734724][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.752355][ T5830] bridge_slave_0: entered allmulticast mode [ 101.788663][ T5830] bridge_slave_0: entered promiscuous mode [ 101.801362][ T5342] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 101.811267][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.834834][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.841441][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.868302][ T5830] bridge_slave_1: entered allmulticast mode [ 101.873684][ T5342] usb 2-1: config 0 descriptor?? [ 101.876125][ T5830] bridge_slave_1: entered promiscuous mode [ 101.896510][ T5342] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 102.021639][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.050395][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.133544][ T5830] team0: Port device team_slave_0 added [ 102.160469][ T5830] team0: Port device team_slave_1 added [ 102.263078][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.284580][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.322038][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.336841][ T5280] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.344429][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.353327][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.380897][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.521858][ T5280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.567320][ T54] Bluetooth: hci0: command tx timeout [ 102.572870][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 102.630387][ T5830] hsr_slave_0: entered promiscuous mode [ 102.637550][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 102.664799][ T5830] hsr_slave_1: entered promiscuous mode [ 102.697358][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.713486][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 102.736832][ T5830] Cannot create hsr debugfs directory [ 102.762168][ T5280] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 102.784320][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.833588][ T5280] usb 3-1: Product: syz [ 102.843574][ T5280] usb 3-1: Manufacturer: syz [ 102.867025][ T5280] usb 3-1: SerialNumber: syz [ 102.900351][ T5280] usb 3-1: config 0 descriptor?? [ 102.917151][ T5280] usb 3-1: ucan: probing device on interface #0 [ 102.951681][ T5280] usb 3-1: ucan: invalid endpoint configuration [ 102.979911][ T5280] usb 3-1: ucan: probe failed; try to update the device firmware [ 103.111094][ T5931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.138'. [ 103.170387][ T5280] usb 3-1: USB disconnect, device number 4 [ 103.305203][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 103.339439][ T5931] vlan2: entered promiscuous mode [ 103.353445][ T5931] bond0: entered promiscuous mode [ 103.363541][ T5931] bond_slave_0: entered promiscuous mode [ 103.375861][ T5931] bond_slave_1: entered promiscuous mode [ 103.392137][ T5931] vlan2: entered allmulticast mode [ 103.405957][ T5931] bond0: entered allmulticast mode [ 103.424933][ T5931] bond_slave_0: entered allmulticast mode [ 103.439793][ T5931] bond_slave_1: entered allmulticast mode [ 103.979529][ T5947] netlink: 'syz.2.141': attribute type 9 has an invalid length. [ 104.233298][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 104.369142][ T5355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.461591][ T5342] usb 2-1: USB disconnect, device number 12 [ 104.611058][ T5355] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.658849][ T54] Bluetooth: hci0: command tx timeout [ 104.687943][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.705064][ T5355] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.707345][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.774083][ T5355] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.775025][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.816029][ T5355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.866828][ T5355] usb 4-1: SerialNumber: syz [ 104.912582][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.010825][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.145476][ T5355] usb 4-1: 0:2 : does not exist [ 105.242911][ T5355] usb 4-1: USB disconnect, device number 3 [ 105.282377][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.511491][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.528789][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.759410][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.850809][ T5280] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 105.932934][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.016426][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.059338][ T5280] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 106.102409][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.132251][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.148246][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.158117][ T5280] usb 1-1: config 0 descriptor?? [ 106.164226][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.171414][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.182906][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.204414][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.219906][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.232010][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.242303][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.249491][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.303800][ T12] bridge_slave_1: left allmulticast mode [ 106.310222][ T12] bridge_slave_1: left promiscuous mode [ 106.316018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.332550][ T12] bridge_slave_0: left allmulticast mode [ 106.344513][ T12] bridge_slave_0: left promiscuous mode [ 106.358429][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.588024][ T5280] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 106.603648][ T5280] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 106.731436][ T54] Bluetooth: hci0: command tx timeout [ 106.839908][ T5997] input: syz0 as /devices/virtual/input/input13 [ 106.932047][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.944016][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.954769][ T12] bond0 (unregistering): Released all slaves [ 106.976953][ T5280] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 107.067367][ T6001] netlink: 'syz.3.152': attribute type 25 has an invalid length. [ 107.076013][ T6001] netlink: 'syz.3.152': attribute type 8 has an invalid length. [ 107.176961][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 107.184300][ T5280] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.201496][ T5280] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.243040][ T5280] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.256664][ T5280] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.324430][ T5280] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.372208][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.401232][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.555662][ T12] hsr_slave_0: left promiscuous mode [ 107.568574][ T12] hsr_slave_1: left promiscuous mode [ 107.578830][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.591989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.600896][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.615527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.629863][ T5280] usb 2-1: GET_CAPABILITIES returned 0 [ 107.640000][ T5280] usbtmc 2-1:16.0: can't read capabilities [ 107.651712][ T12] veth1_macvtap: left promiscuous mode [ 107.663422][ T12] veth0_macvtap: left promiscuous mode [ 107.679291][ T12] veth1_vlan: left promiscuous mode [ 107.684650][ T12] veth0_vlan: left promiscuous mode [ 108.022629][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.031753][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.184679][ T6034] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 108.330864][ T54] Bluetooth: hci2: command tx timeout [ 108.484739][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.535443][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.643318][ T5280] usb 1-1: USB disconnect, device number 10 [ 109.278307][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 109.460526][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 109.707144][ T5830] veth0_vlan: entered promiscuous mode [ 109.796650][ T5275] usb 2-1: USB disconnect, device number 13 [ 109.899043][ T5830] veth1_vlan: entered promiscuous mode [ 109.953784][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.012933][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.037555][ T5989] bridge_slave_0: entered allmulticast mode [ 110.060179][ T5989] bridge_slave_0: entered promiscuous mode [ 110.071305][ T6069] usb usb8: usbfs: process 6069 (syz.1.157) did not claim interface 0 before use [ 110.082820][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.109689][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.142601][ T5989] bridge_slave_1: entered allmulticast mode [ 110.164722][ T5989] bridge_slave_1: entered promiscuous mode [ 110.251504][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.270149][ T6065] bridge_slave_1: left allmulticast mode [ 110.291148][ T6065] bridge_slave_1: left promiscuous mode [ 110.309665][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.339982][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 110.360988][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.407094][ T54] Bluetooth: hci2: command tx timeout [ 110.407122][ T5275] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.460937][ T5989] team0: Port device team_slave_0 added [ 110.479626][ T5989] team0: Port device team_slave_1 added [ 110.515763][ T5830] veth0_macvtap: entered promiscuous mode [ 110.567033][ T5275] usb 4-1: device descriptor read/64, error -71 [ 110.593598][ T5830] veth1_macvtap: entered promiscuous mode [ 110.613812][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.630834][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.670245][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.686445][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.700296][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.740887][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.877228][ T5275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.947649][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.968626][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.992400][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.010944][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.024456][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.046460][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.057145][ T5275] usb 4-1: device descriptor read/64, error -71 [ 111.070031][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.088851][ T5989] hsr_slave_0: entered promiscuous mode [ 111.096422][ T5989] hsr_slave_1: entered promiscuous mode [ 111.111625][ T5989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.123080][ T5989] Cannot create hsr debugfs directory [ 111.161296][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.179997][ T5275] usb usb4-port1: attempt power cycle [ 111.185831][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.203130][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.216185][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.235071][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.251613][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.264517][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.362709][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.412675][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.422722][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.434223][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.480332][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 111.491404][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 111.621265][ T5275] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.670275][ T5275] usb 4-1: device descriptor read/8, error -71 [ 111.881515][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.921495][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.947042][ T5275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.998604][ T5275] usb 4-1: device descriptor read/8, error -71 [ 112.127124][ T5275] usb usb4-port1: unable to enumerate USB device [ 112.146809][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.154663][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.281605][ T3057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.487017][ T54] Bluetooth: hci2: command tx timeout [ 112.570614][ T3057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.723494][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.725918][ T3057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.751193][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.759203][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.770224][ T5275] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 112.780865][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.790599][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.798540][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.807019][ T5280] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.884213][ T3057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.966917][ T5275] usb 2-1: device descriptor read/64, error -71 [ 112.997604][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 113.026665][ T5280] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.053988][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.072503][ T5280] usb 5-1: Product: syz [ 113.076721][ T5280] usb 5-1: Manufacturer: syz [ 113.106683][ T5280] usb 5-1: SerialNumber: syz [ 113.107243][ T5989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.130617][ T5280] r8152-cfgselector 5-1: Unknown version 0x0000 [ 113.138201][ T5280] r8152-cfgselector 5-1: config 0 descriptor?? [ 113.247141][ T5275] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 113.273175][ T5989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.322472][ T5989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.397598][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 113.428739][ T5989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.439195][ T5275] usb 2-1: device descriptor read/64, error -71 [ 113.534238][ T3057] bridge_slave_1: left allmulticast mode [ 113.558158][ T5275] usb usb2-port1: attempt power cycle [ 113.558792][ T3057] bridge_slave_1: left promiscuous mode [ 113.592607][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.610631][ T3057] bridge_slave_0: left allmulticast mode [ 113.616462][ T3057] bridge_slave_0: left promiscuous mode [ 113.631950][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.826164][ T3057] bond0: left allmulticast mode [ 113.844818][ T3057] bond_slave_0: left allmulticast mode [ 113.853855][ T3057] bond_slave_1: left allmulticast mode [ 113.859941][ T3057] bond0: left promiscuous mode [ 113.864949][ T3057] bond_slave_0: left promiscuous mode [ 113.883404][ T3057] bond_slave_1: left promiscuous mode [ 113.982247][ T5275] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 114.024824][ T5275] usb 2-1: device descriptor read/8, error -71 [ 114.320068][ T5275] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.367525][ T5275] usb 2-1: device descriptor read/8, error -71 [ 114.497408][ T5275] usb usb2-port1: unable to enumerate USB device [ 114.567223][ T54] Bluetooth: hci2: command tx timeout [ 114.589606][ T3057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.617503][ T3057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.640846][ T3057] bond0 (unregistering): Released all slaves [ 114.887046][ T54] Bluetooth: hci4: command tx timeout [ 115.096265][ T6182] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 115.264116][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 115.298505][ T3057] hsr_slave_0: left promiscuous mode [ 115.308419][ T3057] hsr_slave_1: left promiscuous mode [ 115.326366][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.346367][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.370006][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.383584][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.454986][ T3057] veth1_macvtap: left promiscuous mode [ 115.470728][ T3057] veth0_macvtap: left promiscuous mode [ 115.504433][ T3057] veth1_vlan: left promiscuous mode [ 115.564659][ T3057] veth0_vlan: left promiscuous mode [ 115.968991][ T5278] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 116.197039][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 116.206144][ T5278] usb 2-1: too many configurations: 82, using maximum allowed: 8 [ 116.240228][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.249602][ T5278] usb 2-1: can't read configurations, error -61 [ 116.427786][ T5278] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 116.580446][ T3057] team0 (unregistering): Port device team_slave_1 removed [ 116.636892][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 116.652489][ T5278] usb 2-1: too many configurations: 82, using maximum allowed: 8 [ 116.671969][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.677641][ T3057] team0 (unregistering): Port device team_slave_0 removed [ 116.686858][ T5278] usb 2-1: can't read configurations, error -61 [ 116.687303][ T5278] usb usb2-port1: attempt power cycle [ 116.967307][ T54] Bluetooth: hci4: command tx timeout [ 117.122627][ T5278] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 117.157622][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 117.164809][ T5278] usb 2-1: too many configurations: 82, using maximum allowed: 8 [ 117.179156][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.187872][ T5278] usb 2-1: can't read configurations, error -61 [ 117.356988][ T5278] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 117.409762][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 117.415690][ T5278] usb 2-1: too many configurations: 82, using maximum allowed: 8 [ 117.436661][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.445170][ T5278] usb 2-1: can't read configurations, error -61 [ 117.456408][ T5278] usb usb2-port1: unable to enumerate USB device [ 117.548654][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.563086][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.571859][ T6131] bridge_slave_0: entered allmulticast mode [ 117.589706][ T6131] bridge_slave_0: entered promiscuous mode [ 117.637446][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.657295][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.687620][ T6131] bridge_slave_1: entered allmulticast mode [ 117.706585][ T6131] bridge_slave_1: entered promiscuous mode [ 117.814791][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.860534][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.013962][ T5280] r8152-cfgselector 5-1: Unknown version 0x0000 [ 118.031556][ T6131] team0: Port device team_slave_0 added [ 118.045665][ T5280] r8152-cfgselector 5-1: bad CDC descriptors [ 118.088014][ T5280] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 118.115666][ T6131] team0: Port device team_slave_1 added [ 118.129942][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.253343][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.267815][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.314554][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.350376][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.390424][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.399238][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.464870][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.554565][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.561848][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.617786][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.624893][ T5355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.712469][ T6131] hsr_slave_0: entered promiscuous mode [ 118.740951][ T6131] hsr_slave_1: entered promiscuous mode [ 118.766529][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.797449][ T6131] Cannot create hsr debugfs directory [ 118.952115][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 119.047293][ T54] Bluetooth: hci4: command tx timeout [ 119.148949][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.419557][ T6245] kvm: emulating exchange as write [ 119.525203][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 119.663341][ T6263] input: syz0 as /devices/virtual/input/input14 [ 119.691603][ T5989] veth0_vlan: entered promiscuous mode [ 119.850795][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.181'. [ 119.876635][ T5989] veth1_vlan: entered promiscuous mode [ 120.048614][ T5989] veth0_macvtap: entered promiscuous mode [ 120.074148][ T5989] veth1_macvtap: entered promiscuous mode [ 120.124639][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.136143][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.147950][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.158899][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.168984][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.179923][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.191402][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.235381][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.247975][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.275206][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.286568][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.296947][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.308736][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.321488][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.346912][ T5355] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 120.358180][ T6131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.381649][ T6131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.399599][ T5989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.412824][ T5989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.421941][ T5989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.431702][ T5989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.446348][ T6131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.463693][ T6131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.536955][ T5355] usb 2-1: Using ep0 maxpacket: 16 [ 120.561591][ T5355] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 120.606735][ T5355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.665019][ T5355] usb 2-1: Product: syz [ 120.691085][ T5355] usb 2-1: Manufacturer: syz [ 120.711892][ T5355] usb 2-1: SerialNumber: syz [ 120.732974][ T5355] r8152-cfgselector 2-1: Unknown version 0x0000 [ 120.748233][ T5355] r8152-cfgselector 2-1: config 0 descriptor?? [ 120.834581][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.862225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.009345][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.043760][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.127097][ T54] Bluetooth: hci4: command tx timeout [ 121.143419][ T6287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.196127][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.436652][ T5355] r8152-cfgselector 2-1: Unknown version 0x0000 [ 121.449274][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.472322][ T5355] r8152-cfgselector 2-1: bad CDC descriptors [ 121.486360][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 121.532313][ T5355] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 121.540119][ T6302] team_slave_0: entered promiscuous mode [ 121.546155][ T6302] team_slave_1: entered promiscuous mode [ 121.558685][ T6302] macvtap1: entered promiscuous mode [ 121.584154][ T6302] team0: entered promiscuous mode [ 121.612043][ T6302] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.639760][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.647000][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.675088][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.682333][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.786081][ T6131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.858760][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.291355][ T6131] veth0_vlan: entered promiscuous mode [ 122.401293][ T6131] veth1_vlan: entered promiscuous mode [ 122.508116][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 122.567857][ T5275] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.749487][ T6131] veth0_macvtap: entered promiscuous mode [ 122.761180][ T6131] veth1_macvtap: entered promiscuous mode [ 122.767049][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 122.775514][ T5275] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 122.795035][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.811125][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.827022][ T5275] usb 4-1: Product: syz [ 122.831242][ T5275] usb 4-1: Manufacturer: syz [ 122.835834][ T5275] usb 4-1: SerialNumber: syz [ 122.843825][ T5275] usb 4-1: config 0 descriptor?? [ 122.849993][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.861874][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.876677][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.890172][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.900888][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.911916][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.964770][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.009106][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.038310][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.083330][ T5275] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 008 [ 123.101356][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.186862][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.226946][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.262848][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.314604][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.346956][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.367354][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.405324][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.431388][ T6131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.472763][ T6131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.476843][ T6353] input: syz0 as /devices/virtual/input/input15 [ 123.506202][ T6131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.545946][ T6131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.580593][ T6327] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 123.637738][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.678214][ T6327] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.712570][ T6356] netlink: 44 bytes leftover after parsing attributes in process `syz.1.193'. [ 123.721087][ T25] usb 4-1: USB disconnect, device number 8 [ 124.067351][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.087663][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.152492][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.176571][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.237551][ T5280] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.428176][ T6370] delete_channel: no stack [ 124.447179][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 124.470873][ T5280] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=7c.4b [ 124.493604][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.515851][ T5280] usb 3-1: Product: syz [ 124.534657][ T5280] usb 3-1: Manufacturer: syz [ 124.556923][ T5280] usb 3-1: SerialNumber: syz [ 124.574538][ T5280] usb 3-1: config 0 descriptor?? [ 124.633958][ T5280] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 124.827063][ T5280] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.028045][ T5342] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.037161][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 125.053692][ T5280] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.101334][ T5280] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.133391][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.153811][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.182084][ T5280] hub 1-1:4.0: USB hub found [ 125.216834][ T5342] usb 4-1: device descriptor read/64, error -71 [ 125.402446][ T6383] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.425710][ T5280] hub 1-1:4.0: 2 ports detected [ 125.516946][ T5342] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.706576][ T54] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 125.714496][ T5342] usb 4-1: device descriptor read/64, error -71 [ 125.798383][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 125.848366][ T5342] usb usb4-port1: attempt power cycle [ 125.849110][ T6370] bridge1: entered promiscuous mode [ 125.907160][ T6370] bridge1: entered allmulticast mode [ 125.917013][ T5275] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.065827][ T54] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 126.077491][ T54] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 54, name: kworker/u9:0 [ 126.088326][ T54] preempt_count: 0, expected: 0 [ 126.093284][ T54] RCU nest depth: 1, expected: 0 [ 126.098487][ T54] 4 locks held by kworker/u9:0/54: [ 126.103689][ T54] #0: ffff88806421b948 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.116292][ T54] #1: ffffc90000be7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 126.136807][ T54] #2: ffff8880247f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 126.147663][ T54] #3: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 126.159226][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 126.170010][ T5275] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 126.170095][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.189206][ T54] Workqueue: hci1 hci_rx_work [ 126.193920][ T54] Call Trace: [ 126.197215][ T54] [ 126.200175][ T54] dump_stack_lvl+0x241/0x360 [ 126.204912][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.208133][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.210125][ T54] ? __pfx__printk+0x10/0x10 [ 126.210175][ T54] __might_resched+0x5d4/0x780 [ 126.227517][ T54] ? __mutex_lock+0x112/0xd70 [ 126.232316][ T54] ? __pfx___might_resched+0x10/0x10 [ 126.237621][ T54] __mutex_lock+0xc1/0xd70 [ 126.242048][ T54] ? __pfx_lock_acquire+0x10/0x10 [ 126.247091][ T54] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.253350][ T54] ? __pfx_lock_release+0x10/0x10 [ 126.258380][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 126.263412][ T54] ? trace_contention_end+0x3c/0x120 [ 126.268695][ T54] ? skb_pull_data+0x112/0x230 [ 126.273481][ T54] ? hci_conn_set_handle+0x9a/0x270 [ 126.278689][ T54] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.284755][ T54] ? __copy_skb_header+0x437/0x5b0 [ 126.289871][ T54] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 126.296037][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 126.303235][ T54] ? hci_le_meta_evt+0x366/0x580 [ 126.308173][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 126.314760][ T54] hci_event_packet+0xa55/0x1540 [ 126.319789][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 126.325083][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 126.330455][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 126.335664][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 126.340890][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 126.345942][ T54] hci_rx_work+0x3e8/0xca0 [ 126.350360][ T54] ? process_scheduled_works+0x945/0x1830 [ 126.356078][ T54] process_scheduled_works+0xa2c/0x1830 [ 126.361763][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.367753][ T54] ? assign_work+0x364/0x3d0 [ 126.372381][ T54] worker_thread+0x86d/0xd40 [ 126.376989][ T54] ? __kthread_parkme+0x169/0x1d0 [ 126.382015][ T54] ? __pfx_worker_thread+0x10/0x10 [ 126.387124][ T54] kthread+0x2f0/0x390 [ 126.391202][ T54] ? __pfx_worker_thread+0x10/0x10 [ 126.396318][ T54] ? __pfx_kthread+0x10/0x10 [ 126.400922][ T54] ret_from_fork+0x4b/0x80 [ 126.405448][ T54] ? __pfx_kthread+0x10/0x10 [ 126.410046][ T54] ret_from_fork_asm+0x1a/0x30 [ 126.414837][ T54] [ 126.433637][ T54] [ 126.435997][ T54] ============================= [ 126.440850][ T54] [ BUG: Invalid wait context ] [ 126.445704][ T54] 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 Tainted: G W [ 126.454293][ T54] ----------------------------- [ 126.459140][ T54] kworker/u9:0/54 is trying to lock: [ 126.464429][ T54] ffffffff8fdecfe8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.475069][ T54] other info that might help us debug this: [ 126.480960][ T54] context-{4:4} [ 126.484418][ T54] 4 locks held by kworker/u9:0/54: [ 126.489530][ T54] #0: ffff88806421b948 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 126.500587][ T54] #1: ffffc90000be7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 126.512635][ T54] #2: ffff8880247f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 126.523200][ T54] #3: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 126.533942][ T54] stack backtrace: [ 126.537662][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G W 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 126.549801][ T54] Tainted: [W]=WARN [ 126.553587][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.563630][ T54] Workqueue: hci1 hci_rx_work [ 126.568314][ T54] Call Trace: [ 126.571582][ T54] [ 126.574502][ T54] dump_stack_lvl+0x241/0x360 [ 126.579177][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.584372][ T54] ? __pfx__printk+0x10/0x10 [ 126.588959][ T54] __lock_acquire+0x153b/0x2040 [ 126.593819][ T54] lock_acquire+0x1ed/0x550 [ 126.598329][ T54] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.604570][ T54] ? __pfx_lock_acquire+0x10/0x10 [ 126.609589][ T54] ? __mutex_lock+0x112/0xd70 [ 126.614263][ T54] ? __pfx___might_resched+0x10/0x10 [ 126.619548][ T54] __mutex_lock+0x136/0xd70 [ 126.624044][ T54] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.630295][ T54] ? __pfx_lock_acquire+0x10/0x10 [ 126.635319][ T54] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.641635][ T54] ? __pfx_lock_release+0x10/0x10 [ 126.646740][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 126.651768][ T54] ? trace_contention_end+0x3c/0x120 [ 126.657042][ T54] ? skb_pull_data+0x112/0x230 [ 126.661796][ T54] ? hci_conn_set_handle+0x9a/0x270 [ 126.666989][ T54] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 126.673047][ T54] ? __copy_skb_header+0x437/0x5b0 [ 126.678153][ T54] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 126.684309][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 126.690888][ T54] ? hci_le_meta_evt+0x366/0x580 [ 126.695815][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 126.702398][ T54] hci_event_packet+0xa55/0x1540 [ 126.707333][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 126.712609][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 126.717965][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 126.723169][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 126.728375][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 126.733402][ T54] hci_rx_work+0x3e8/0xca0 [ 126.737817][ T54] ? process_scheduled_works+0x945/0x1830 [ 126.743570][ T54] process_scheduled_works+0xa2c/0x1830 [ 126.749143][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.755133][ T54] ? assign_work+0x364/0x3d0 [ 126.759717][ T54] worker_thread+0x86d/0xd40 [ 126.764307][ T54] ? __kthread_parkme+0x169/0x1d0 [ 126.769342][ T54] ? __pfx_worker_thread+0x10/0x10 [ 126.774453][ T54] kthread+0x2f0/0x390 [ 126.778519][ T54] ? __pfx_worker_thread+0x10/0x10 [ 126.783630][ T54] ? __pfx_kthread+0x10/0x10 [ 126.788227][ T54] ret_from_fork+0x4b/0x80 [ 126.792648][ T54] ? __pfx_kthread+0x10/0x10 [ 126.797243][ T54] ret_from_fork_asm+0x1a/0x30 [ 126.802014][ T54] [ 126.826383][ T5275] usb 5-1: config 0 descriptor?? [ 126.851988][ T5280] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 126.856655][ T54] ================================================================== [ 126.859954][ T5280] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 126.866415][ T54] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0x383/0xae0 [ 126.866450][ T54] Read of size 8 at addr ffff888063bc4000 by task kworker/u9:0/54 [ 126.866464][ T54] [ 126.866474][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G W 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 126.866504][ T54] Tainted: [W]=WARN [ 126.866510][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.866522][ T54] Workqueue: hci1 hci_rx_work [ 126.866542][ T54] Call Trace: [ 126.866550][ T54] [ 126.866557][ T54] dump_stack_lvl+0x241/0x360 [ 126.934525][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.939746][ T54] ? __pfx__printk+0x10/0x10 [ 126.944353][ T54] ? _printk+0xd5/0x120 [ 126.948516][ T54] ? __virt_addr_valid+0x183/0x530 [ 126.953638][ T54] ? __virt_addr_valid+0x183/0x530 [ 126.958763][ T54] print_report+0x169/0x550 [ 126.963296][ T54] ? __virt_addr_valid+0x183/0x530 [ 126.968400][ T54] ? __virt_addr_valid+0x183/0x530 [ 126.973509][ T54] ? __virt_addr_valid+0x45f/0x530 [ 126.978621][ T54] ? __phys_addr+0xba/0x170 [ 126.983126][ T54] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 126.989373][ T54] kasan_report+0x143/0x180 [ 126.993873][ T54] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 127.000103][ T54] hci_le_create_big_complete_evt+0x383/0xae0 [ 127.006170][ T54] ? __copy_skb_header+0x437/0x5b0 [ 127.011280][ T54] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 127.017450][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 127.024047][ T54] ? hci_le_meta_evt+0x366/0x580 [ 127.028994][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 127.035594][ T54] hci_event_packet+0xa55/0x1540 [ 127.040523][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 127.045892][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 127.051258][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 127.056468][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 127.061672][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 127.066697][ T54] hci_rx_work+0x3e8/0xca0 [ 127.071108][ T54] ? process_scheduled_works+0x945/0x1830 [ 127.076841][ T54] process_scheduled_works+0xa2c/0x1830 [ 127.082485][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.088465][ T54] ? assign_work+0x364/0x3d0 [ 127.093062][ T54] worker_thread+0x86d/0xd40 [ 127.097646][ T54] ? __kthread_parkme+0x169/0x1d0 [ 127.102678][ T54] ? __pfx_worker_thread+0x10/0x10 [ 127.107787][ T54] kthread+0x2f0/0x390 [ 127.111876][ T54] ? __pfx_worker_thread+0x10/0x10 [ 127.116977][ T54] ? __pfx_kthread+0x10/0x10 [ 127.121562][ T54] ret_from_fork+0x4b/0x80 [ 127.125982][ T54] ? __pfx_kthread+0x10/0x10 [ 127.130570][ T54] ret_from_fork_asm+0x1a/0x30 [ 127.135343][ T54] [ 127.138362][ T54] [ 127.140690][ T54] Allocated by task 54: [ 127.144842][ T54] kasan_save_track+0x3f/0x80 [ 127.149512][ T54] __kasan_kmalloc+0x98/0xb0 [ 127.154084][ T54] __kmalloc_cache_noprof+0x19c/0x2c0 [ 127.159463][ T54] __hci_conn_add+0x2f9/0x1850 [ 127.164229][ T54] hci_le_big_sync_established_evt+0x414/0xc20 [ 127.170388][ T54] hci_event_packet+0xa55/0x1540 [ 127.175330][ T54] hci_rx_work+0x3e8/0xca0 [ 127.179751][ T54] process_scheduled_works+0xa2c/0x1830 [ 127.185284][ T54] worker_thread+0x86d/0xd40 [ 127.189865][ T54] kthread+0x2f0/0x390 [ 127.193937][ T54] ret_from_fork+0x4b/0x80 [ 127.198355][ T54] ret_from_fork_asm+0x1a/0x30 [ 127.203135][ T54] [ 127.205457][ T54] Freed by task 54: [ 127.209266][ T54] kasan_save_track+0x3f/0x80 [ 127.213958][ T54] kasan_save_free_info+0x40/0x50 [ 127.218983][ T54] poison_slab_object+0xe0/0x150 [ 127.224001][ T54] __kasan_slab_free+0x37/0x60 [ 127.228774][ T54] kfree+0x149/0x360 [ 127.232678][ T54] device_release+0x99/0x1c0 [ 127.237296][ T54] kobject_put+0x22f/0x480 [ 127.241733][ T54] hci_conn_del+0x8c4/0xc40 [ 127.246240][ T54] hci_le_create_big_complete_evt+0x619/0xae0 [ 127.252301][ T54] hci_event_packet+0xa55/0x1540 [ 127.257226][ T54] hci_rx_work+0x3e8/0xca0 [ 127.261642][ T54] process_scheduled_works+0xa2c/0x1830 [ 127.267192][ T54] worker_thread+0x86d/0xd40 [ 127.271785][ T54] kthread+0x2f0/0x390 [ 127.275846][ T54] ret_from_fork+0x4b/0x80 [ 127.280272][ T54] ret_from_fork_asm+0x1a/0x30 [ 127.285036][ T54] [ 127.287359][ T54] The buggy address belongs to the object at ffff888063bc4000 [ 127.287359][ T54] which belongs to the cache kmalloc-8k of size 8192 [ 127.301409][ T54] The buggy address is located 0 bytes inside of [ 127.301409][ T54] freed 8192-byte region [ffff888063bc4000, ffff888063bc6000) [ 127.315109][ T54] [ 127.317438][ T54] The buggy address belongs to the physical page: [ 127.323851][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63bc0 [ 127.332619][ T54] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.341096][ T54] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 127.348642][ T54] page_type: 0xfdffffff(slab) [ 127.353322][ T54] raw: 00fff00000000040 ffff888015842280 ffffea00008fc400 dead000000000004 [ 127.361923][ T54] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 127.370501][ T54] head: 00fff00000000040 ffff888015842280 ffffea00008fc400 dead000000000004 [ 127.379160][ T54] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 127.387822][ T54] head: 00fff00000000003 ffffea00018ef001 ffffffffffffffff 0000000000000000 [ 127.396496][ T54] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 127.405161][ T54] page dumped because: kasan: bad access detected [ 127.411576][ T54] page_owner tracks the page as allocated [ 127.417281][ T54] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6062, tgid 6056 (syz.0.156), ts 109985930089, free_ts 109932779510 [ 127.439953][ T54] post_alloc_hook+0x1f3/0x230 [ 127.444731][ T54] get_page_from_freelist+0x2e4c/0x2f10 [ 127.450293][ T54] __alloc_pages_noprof+0x256/0x6c0 [ 127.455502][ T54] alloc_slab_page+0x5f/0x120 [ 127.460183][ T54] allocate_slab+0x5a/0x2f0 [ 127.464680][ T54] ___slab_alloc+0xcd1/0x14b0 [ 127.469355][ T54] __slab_alloc+0x58/0xa0 [ 127.473690][ T54] __kmalloc_noprof+0x25a/0x400 [ 127.478527][ T54] n_hdlc_alloc_buf+0x8e/0x250 [ 127.483312][ T54] n_hdlc_tty_open+0x283/0x480 [ 127.488067][ T54] tty_ldisc_open+0xa6/0x110 [ 127.492653][ T54] tty_set_ldisc+0x389/0x560 [ 127.497236][ T54] tty_ioctl+0xbdc/0xdc0 [ 127.501487][ T54] __se_sys_ioctl+0xfc/0x170 [ 127.506080][ T54] do_syscall_64+0xf3/0x230 [ 127.510578][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.516485][ T54] page last free pid 4682 tgid 4682 stack trace: [ 127.522803][ T54] free_unref_page+0xd22/0xea0 [ 127.527575][ T54] __put_partials+0xeb/0x130 [ 127.532173][ T54] put_cpu_partial+0x17c/0x250 [ 127.536937][ T54] __slab_free+0x2ea/0x3d0 [ 127.541341][ T54] qlist_free_all+0x9e/0x140 [ 127.545940][ T54] kasan_quarantine_reduce+0x14f/0x170 [ 127.551384][ T54] __kasan_slab_alloc+0x23/0x80 [ 127.556244][ T54] __kmalloc_noprof+0x1a6/0x400 [ 127.561083][ T54] tomoyo_realpath_from_path+0xcf/0x5e0 [ 127.566648][ T54] tomoyo_path_perm+0x2b7/0x740 [ 127.571498][ T54] security_inode_getattr+0xd8/0x130 [ 127.576792][ T54] vfs_getattr+0x45/0x430 [ 127.581140][ T54] vfs_fstatat+0xe4/0x190 [ 127.585456][ T54] __x64_sys_newfstatat+0x11d/0x1a0 [ 127.590654][ T54] do_syscall_64+0xf3/0x230 [ 127.595153][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.601034][ T54] [ 127.603345][ T54] Memory state around the buggy address: [ 127.608969][ T54] ffff888063bc3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.617025][ T54] ffff888063bc3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.625077][ T54] >ffff888063bc4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.633208][ T54] ^ [ 127.637267][ T54] ffff888063bc4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.645314][ T54] ffff888063bc4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.653527][ T54] ================================================================== [ 127.670711][ T5342] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 127.677611][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.677629][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G W 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 127.677654][ T54] Tainted: [W]=WARN [ 127.677660][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.677672][ T54] Workqueue: hci1 hci_rx_work [ 127.677700][ T54] Call Trace: [ 127.677708][ T54] [ 127.677715][ T54] dump_stack_lvl+0x241/0x360 [ 127.677743][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.677766][ T54] ? __pfx__printk+0x10/0x10 [ 127.677786][ T54] ? rcu_is_watching+0x15/0xb0 [ 127.677810][ T54] ? preempt_schedule+0xe1/0xf0 [ 127.677834][ T54] ? vscnprintf+0x5d/0x90 [ 127.677852][ T54] panic+0x349/0x860 [ 127.677874][ T54] ? check_panic_on_warn+0x21/0xb0 [ 127.677897][ T54] ? __pfx_panic+0x10/0x10 [ 127.677921][ T54] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 127.677947][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.677968][ T54] ? print_report+0x502/0x550 [ 127.677993][ T54] check_panic_on_warn+0x86/0xb0 [ 127.678011][ T54] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 127.678033][ T54] end_report+0x77/0x160 [ 127.678056][ T54] kasan_report+0x154/0x180 [ 127.678080][ T54] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 127.678106][ T54] hci_le_create_big_complete_evt+0x383/0xae0 [ 127.678127][ T54] ? __copy_skb_header+0x437/0x5b0 [ 127.678148][ T54] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 127.678171][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 127.678193][ T54] ? hci_le_meta_evt+0x366/0x580 [ 127.678213][ T54] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 127.678236][ T54] hci_event_packet+0xa55/0x1540 [ 127.678255][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 127.678277][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 127.678293][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 127.863205][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 127.868418][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 127.873451][ T54] hci_rx_work+0x3e8/0xca0 [ 127.877869][ T54] ? process_scheduled_works+0x945/0x1830 [ 127.883597][ T54] process_scheduled_works+0xa2c/0x1830 [ 127.889159][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.895142][ T54] ? assign_work+0x364/0x3d0 [ 127.899726][ T54] worker_thread+0x86d/0xd40 [ 127.904313][ T54] ? __kthread_parkme+0x169/0x1d0 [ 127.909341][ T54] ? __pfx_worker_thread+0x10/0x10 [ 127.914443][ T54] kthread+0x2f0/0x390 [ 127.918505][ T54] ? __pfx_worker_thread+0x10/0x10 [ 127.923605][ T54] ? __pfx_kthread+0x10/0x10 [ 127.928189][ T54] ret_from_fork+0x4b/0x80 [ 127.932618][ T54] ? __pfx_kthread+0x10/0x10 [ 127.937201][ T54] ret_from_fork_asm+0x1a/0x30 [ 127.941968][ T54] [ 127.945234][ T54] Kernel Offset: disabled [ 127.949554][ T54] Rebooting in 86400 seconds..