last executing test programs: 6.043019488s ago: executing program 1 (id=270): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x484, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) 5.855320087s ago: executing program 1 (id=273): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 4.715053107s ago: executing program 2 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [], @ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv6=@remote}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000200000000000011240000000000ae282714803944720000003ff5f5fc9a0d1a4cb2000000000200000000000008020000000000"], 0x0, 0x54}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0}, 0x90) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) unshare(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1ec, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1cf, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x76, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd5285"}, {0xdd, 0xbf, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389e8ac5150470ceda144758f"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1ec}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x250}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000a00)='syzkaller\x00'}, 0x90) 4.384933371s ago: executing program 3 (id=282): r0 = add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000002500)=""/240, 0xf0) 4.381963084s ago: executing program 1 (id=283): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x484, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) 4.21159044s ago: executing program 1 (id=286): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) 4.049237292s ago: executing program 1 (id=287): inotify_init1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x624200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0xfcd66a900070b059, 0x0, 0x0, {}, [{0x8}, {0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x44080, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000640)=ANY=[@ANYBLOB="ac1e0001ac14143901001414aae0000000000000ac1414bb7f0000013c2199129e539f97a3020804e4ebaa7bec7f00"/62], 0x2c) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 4.041458613s ago: executing program 3 (id=288): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000013923492791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000002280)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001100)={'#! ', './file1', [{0x20, '=]}\\$\x1b+$\\&,}{]]$]%$-.3\x04\xde\xdc\xae=\x9ft5eJ\xd4\xd7\xa4\xc3\xef\xfa\xa8V\x0f\x13\xee\x9f\xb4\xd6\xb3\xe4P\x15\xc5J\xb6\xde\xcbK\xc7\xe7\x87\xd3\x18W[H\xab\x92=\xa8>\xa3\x92\x18b<\x90>Av\xd1y\x8e\x844\xd6G\xab\xfd\x9f\x11?\xfc7\xdd\xe48\xf9\xafn5\xf5\xbe\xd8\x01\xeb\x9f=\xda\fE\xc0N\xeefvc\xf7\xc0\xd1%\v\x8c\xce\xa2\xaayK\xc4C\xe0\xdf\"+M\xac\xf2J\x13@\xb7\xdc\x8a5v\x89\xb6\xb2\xc3j\xa2\xb7Z\xaba<\xd5\xec\xcd\x97\x9b\xa1\x05\xc3\xdf\x14\x05\x1a\xc2\xba\xe7F\xa9|\xe3\xeb\xb31x\a\xc2\x1f\xa8\x9b\x06\xfasM\x10F\xfb\xe02\xa2\xec\xcfQ~\xf7\xfbm:7\x18\xbb\x02\x98'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}], 0xa, "a00715a84b3fea84873f63dd7fb4b5859bf413b051f49533e616e390747b9995a923d285b83468a29ae6ef99a77d4f32e946173b88721728db964d4d189e2bf60f8e37"}, 0x141) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000900)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x8, 0x6, 0x2, 0x7f0000, 0x8000]}, &(0x7f0000000980)=0x78) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r10}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x16, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x72, &(0x7f00000002c0)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x27, r1, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0xd9b, 0xa3f}, 0x10, r5, 0xffffffffffffffff, 0x9, &(0x7f0000000740)=[r6, r7], &(0x7f0000000780)=[{0x0, 0x3, 0x2, 0x4}, {0x0, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xb, 0xb}, {0x2, 0x2, 0x0, 0x1}, {0x1, 0x1, 0xd, 0x3}, {0x4, 0x2, 0x10, 0x9}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x3, 0xc, 0xa}, {0x2, 0x1, 0x9}], 0x10, 0x7fffffff}, 0x90) 3.654585245s ago: executing program 4 (id=289): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c064064000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.984649567s ago: executing program 2 (id=291): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000001f00)=ANY=[], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80047213, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x400, @remote}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) 2.983849614s ago: executing program 4 (id=292): ioprio_set$pid(0x2, 0x0, 0x4004) r0 = syz_io_uring_setup(0x1cb6, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.888989238s ago: executing program 3 (id=293): r0 = io_uring_setup(0x624f, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 2.846164898s ago: executing program 4 (id=294): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)) 2.746606094s ago: executing program 3 (id=295): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.70894775s ago: executing program 0 (id=296): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x484, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) 2.567508619s ago: executing program 4 (id=297): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_remount}, {@umask}, {@errors_remount}, {}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@gid}, {@discard}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.122481278s ago: executing program 0 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.829402541s ago: executing program 3 (id=299): r0 = eventfd(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000001340)={0x19980330}, &(0x7f0000001380)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000013c0)={0x20000000}) 1.707584358s ago: executing program 2 (id=300): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000800)={0xe, @pix_mp}) 1.598613996s ago: executing program 4 (id=301): clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) 1.594970768s ago: executing program 3 (id=302): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002140), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0xc, @sliced}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0505510, &(0x7f0000000080)) 1.565315301s ago: executing program 2 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [], @ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv6=@remote}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000200000000000011240000000000ae282714803944720000003ff5f5fc9a0d1a4cb2000000000200000000000008020000000000"], 0x0, 0x54}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0}, 0x90) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) unshare(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1ec, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1cf, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x76, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd5285"}, {0xdd, 0xbf, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389e8ac5150470ceda144758f"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1ec}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x250}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000a00)='syzkaller\x00'}, 0x90) 1.418029274s ago: executing program 0 (id=304): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000013923492791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000002280)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001100)={'#! ', './file1', [{0x20, '=]}\\$\x1b+$\\&,}{]]$]%$-.3\x04\xde\xdc\xae=\x9ft5eJ\xd4\xd7\xa4\xc3\xef\xfa\xa8V\x0f\x13\xee\x9f\xb4\xd6\xb3\xe4P\x15\xc5J\xb6\xde\xcbK\xc7\xe7\x87\xd3\x18W[H\xab\x92=\xa8>\xa3\x92\x18b<\x90>Av\xd1y\x8e\x844\xd6G\xab\xfd\x9f\x11?\xfc7\xdd\xe48\xf9\xafn5\xf5\xbe\xd8\x01\xeb\x9f=\xda\fE\xc0N\xeefvc\xf7\xc0\xd1%\v\x8c\xce\xa2\xaayK\xc4C\xe0\xdf\"+M\xac\xf2J\x13@\xb7\xdc\x8a5v\x89\xb6\xb2\xc3j\xa2\xb7Z\xaba<\xd5\xec\xcd\x97\x9b\xa1\x05\xc3\xdf\x14\x05\x1a\xc2\xba\xe7F\xa9|\xe3\xeb\xb31x\a\xc2\x1f\xa8\x9b\x06\xfasM\x10F\xfb\xe02\xa2\xec\xcfQ~\xf7\xfbm:7\x18\xbb\x02\x98'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}], 0xa, "a00715a84b3fea84873f63dd7fb4b5859bf413b051f49533e616e390747b9995a923d285b83468a29ae6ef99a77d4f32e946173b88721728db964d4d189e2bf60f8e37"}, 0x141) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000900)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x8, 0x6, 0x2, 0x7f0000, 0x8000]}, &(0x7f0000000980)=0x78) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r10}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x16, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x72, &(0x7f00000002c0)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x27, r1, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0xd9b, 0xa3f}, 0x10, r5, 0xffffffffffffffff, 0x9, &(0x7f0000000740)=[r6, r7], &(0x7f0000000780)=[{0x0, 0x3, 0x2, 0x4}, {0x0, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xb, 0xb}, {0x2, 0x2, 0x0, 0x1}, {0x1, 0x1, 0xd, 0x3}, {0x4, 0x2, 0x10, 0x9}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x3, 0xc, 0xa}, {0x2, 0x1, 0x9}], 0x10, 0x7fffffff}, 0x90) 425.604751ms ago: executing program 0 (id=305): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c064064000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 400.193308ms ago: executing program 4 (id=306): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0xdf9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{&(0x7f0000002d80)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x3fffffffffffe2e, 0x0) 327.255203ms ago: executing program 0 (id=307): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x3, 0x10, 0x10, &(0x7f00000002c0)="0000000014000000", &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 168.461105ms ago: executing program 2 (id=308): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x484, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) 141.991397ms ago: executing program 0 (id=309): r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x3b3642, 0x30) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e4b9", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x100010, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x8c}}, 0x0) faccessat2(r3, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8000}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000280)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket(0x1, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x80, &(0x7f0000000040)=ANY=[], 0x1, 0x14d2, &(0x7f0000002ac0)="$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") r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) getdents(r7, 0x0, 0x500) r8 = getpid() syz_pidfd_open(r8, 0x0) 9.202188ms ago: executing program 1 (id=310): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000540)="b800018ee80fc72c0f0150530f2294652e2e0f235f0f235a66aa0f0666b9970b000066b80f00008066ba000000000f300f20d86635200000000f22d8", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) capset(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004a4b0}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02160706090000002bbd7000ffdbdf2502000a0003000000070000000000140002001300cbca1f8e9613607034d30000010014000a00000002000b00210400"/72], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x10, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}, [@obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff9, 0x80, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x8b9b, 0x0, 0x20, 0x6, 0x3, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x40, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x400}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 2 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x38, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28d}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setfsuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 67.066648][ T5099] cgroup: Unknown subsys name 'net' [ 67.182029][ T5099] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.825157][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.222357][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.232865][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.242688][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.251669][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.259914][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.269896][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.271211][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.281041][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.293958][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.301164][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.305054][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.309404][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.315433][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.331655][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.333068][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.340777][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.346979][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.355097][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.363275][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.369637][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.373569][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.381484][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.388599][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.396038][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.401747][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.417134][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.424652][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.432360][ T5130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.440139][ T5130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.451181][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.577753][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590728][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.066061][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 72.133782][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 72.212659][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 72.279081][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 72.344601][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.352268][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.359765][ T5113] bridge_slave_0: entered allmulticast mode [ 72.368473][ T5113] bridge_slave_0: entered promiscuous mode [ 72.377495][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 72.436912][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.444359][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.451957][ T5113] bridge_slave_1: entered allmulticast mode [ 72.458983][ T5113] bridge_slave_1: entered promiscuous mode [ 72.489573][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.497026][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.504357][ T5111] bridge_slave_0: entered allmulticast mode [ 72.512019][ T5111] bridge_slave_0: entered promiscuous mode [ 72.576397][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.583791][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.592628][ T5111] bridge_slave_1: entered allmulticast mode [ 72.599661][ T5111] bridge_slave_1: entered promiscuous mode [ 72.622675][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.635348][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.663690][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.671299][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.678498][ T5109] bridge_slave_0: entered allmulticast mode [ 72.686757][ T5109] bridge_slave_0: entered promiscuous mode [ 72.699842][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.707637][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.715239][ T5109] bridge_slave_1: entered allmulticast mode [ 72.722845][ T5109] bridge_slave_1: entered promiscuous mode [ 72.745312][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.819995][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.869551][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.877213][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.885184][ T5110] bridge_slave_0: entered allmulticast mode [ 72.892793][ T5110] bridge_slave_0: entered promiscuous mode [ 72.902166][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.909328][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.916758][ T5110] bridge_slave_1: entered allmulticast mode [ 72.924476][ T5110] bridge_slave_1: entered promiscuous mode [ 72.944800][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.971411][ T5111] team0: Port device team_slave_0 added [ 72.981405][ T5113] team0: Port device team_slave_0 added [ 73.017540][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.028899][ T5111] team0: Port device team_slave_1 added [ 73.049856][ T5113] team0: Port device team_slave_1 added [ 73.068399][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.076091][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.084049][ T5108] bridge_slave_0: entered allmulticast mode [ 73.091924][ T5108] bridge_slave_0: entered promiscuous mode [ 73.173223][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.180381][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.206398][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.220835][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.228049][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.235920][ T5108] bridge_slave_1: entered allmulticast mode [ 73.244719][ T5108] bridge_slave_1: entered promiscuous mode [ 73.267671][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.280488][ T5109] team0: Port device team_slave_0 added [ 73.287558][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.294859][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.321161][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.333529][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.340901][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.366961][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.392968][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.404154][ T5109] team0: Port device team_slave_1 added [ 73.423431][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.430809][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.457035][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.481261][ T5128] Bluetooth: hci2: command tx timeout [ 73.481329][ T5114] Bluetooth: hci3: command tx timeout [ 73.487082][ T5128] Bluetooth: hci0: command tx timeout [ 73.492681][ T5121] Bluetooth: hci4: command tx timeout [ 73.518526][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.558762][ T5110] team0: Port device team_slave_0 added [ 73.564898][ T5121] Bluetooth: hci1: command tx timeout [ 73.597211][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.619350][ T5110] team0: Port device team_slave_1 added [ 73.656414][ T5111] hsr_slave_0: entered promiscuous mode [ 73.664029][ T5111] hsr_slave_1: entered promiscuous mode [ 73.677687][ T5113] hsr_slave_0: entered promiscuous mode [ 73.684841][ T5113] hsr_slave_1: entered promiscuous mode [ 73.691725][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.699600][ T5113] Cannot create hsr debugfs directory [ 73.717224][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.726606][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.753205][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.779142][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.786248][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.812718][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.852692][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.859681][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.885931][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.907410][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.914806][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.940890][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.967535][ T5108] team0: Port device team_slave_0 added [ 74.019320][ T5108] team0: Port device team_slave_1 added [ 74.070991][ T5109] hsr_slave_0: entered promiscuous mode [ 74.077490][ T5109] hsr_slave_1: entered promiscuous mode [ 74.084757][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.092777][ T5109] Cannot create hsr debugfs directory [ 74.125457][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.132568][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.158643][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.219967][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.227087][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.254419][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.277852][ T5110] hsr_slave_0: entered promiscuous mode [ 74.285288][ T5110] hsr_slave_1: entered promiscuous mode [ 74.293501][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.301193][ T5110] Cannot create hsr debugfs directory [ 74.448787][ T5108] hsr_slave_0: entered promiscuous mode [ 74.455791][ T5108] hsr_slave_1: entered promiscuous mode [ 74.463056][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.470782][ T5108] Cannot create hsr debugfs directory [ 74.765043][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.799825][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.815420][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.855069][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.907754][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.918638][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.933167][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.946256][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.034269][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.044894][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.057287][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.068812][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.150807][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.165706][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.177079][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.189167][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.289802][ T5108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.325301][ T5108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.338199][ T5108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.351812][ T5108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.502504][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.561662][ T5114] Bluetooth: hci4: command tx timeout [ 75.561682][ T5128] Bluetooth: hci3: command tx timeout [ 75.561722][ T5128] Bluetooth: hci2: command tx timeout [ 75.567266][ T5121] Bluetooth: hci0: command tx timeout [ 75.593545][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.619283][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.629865][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.641537][ T5121] Bluetooth: hci1: command tx timeout [ 75.663775][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.701550][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.709214][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.724473][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.731660][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.774625][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.788677][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.818684][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.849816][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.857150][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.868084][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.875301][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.904101][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.911373][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.924931][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.932190][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.968655][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.975918][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.987425][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.994715][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.085765][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.208321][ T5109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.229387][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.297178][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.353412][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.360646][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.494929][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.502168][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.586972][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.658224][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.796588][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.864172][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.886330][ T5111] veth0_vlan: entered promiscuous mode [ 76.983695][ T5111] veth1_vlan: entered promiscuous mode [ 77.042859][ T5110] veth0_vlan: entered promiscuous mode [ 77.067846][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.113273][ T5110] veth1_vlan: entered promiscuous mode [ 77.123553][ T5109] veth0_vlan: entered promiscuous mode [ 77.145073][ T5111] veth0_macvtap: entered promiscuous mode [ 77.169673][ T5109] veth1_vlan: entered promiscuous mode [ 77.222699][ T5111] veth1_macvtap: entered promiscuous mode [ 77.268381][ T5110] veth0_macvtap: entered promiscuous mode [ 77.302998][ T5110] veth1_macvtap: entered promiscuous mode [ 77.338733][ T5108] veth0_vlan: entered promiscuous mode [ 77.369488][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.392014][ T5109] veth0_macvtap: entered promiscuous mode [ 77.411957][ T5108] veth1_vlan: entered promiscuous mode [ 77.425721][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.459571][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.471449][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480192][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.493746][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505309][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.516953][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.528889][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.537588][ T5109] veth1_macvtap: entered promiscuous mode [ 77.583467][ T5113] veth0_vlan: entered promiscuous mode [ 77.594969][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.605994][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.618804][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.630923][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.639725][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.648546][ T5121] Bluetooth: hci2: command tx timeout [ 77.650926][ T5121] Bluetooth: hci0: command tx timeout [ 77.655077][ T5128] Bluetooth: hci4: command tx timeout [ 77.660100][ T54] Bluetooth: hci3: command tx timeout [ 77.669021][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679965][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.721329][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.721349][ T54] Bluetooth: hci1: command tx timeout [ 77.738747][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.749415][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.762694][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.774598][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.787572][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.798432][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.809744][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.820276][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.832501][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.849088][ T5113] veth1_vlan: entered promiscuous mode [ 77.875322][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.886691][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.896764][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.905558][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926340][ T5108] veth0_macvtap: entered promiscuous mode [ 77.971838][ T5108] veth1_macvtap: entered promiscuous mode [ 78.034453][ T2865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.057073][ T2865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.120031][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.132647][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.143055][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.157127][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.167277][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.177817][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.189295][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.205110][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.209854][ T5113] veth0_macvtap: entered promiscuous mode [ 78.226154][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.232831][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.244144][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.254835][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.266082][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.276356][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.287682][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.299575][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.324405][ T5113] veth1_macvtap: entered promiscuous mode [ 78.343403][ T5108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.353384][ T5108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.364121][ T5108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.373533][ T5108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.438790][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.451002][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.555686][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.574455][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.586138][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.599065][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.609727][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.621030][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.636657][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.648551][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.666794][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.695527][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.712528][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.723400][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.734141][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.744128][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.754672][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.771250][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.786070][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.806081][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.837059][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.856892][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.865318][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.876495][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.888400][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.898007][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.919108][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.974808][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.023386][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.123632][ T2808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.134649][ T2808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.161383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.219775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.234597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.260810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.380598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.439473][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.483415][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.519577][ T2865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.559000][ T2865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.722640][ T54] Bluetooth: hci4: command tx timeout [ 79.728076][ T54] Bluetooth: hci3: command tx timeout [ 79.730753][ T5121] Bluetooth: hci2: command tx timeout [ 79.735614][ T5114] Bluetooth: hci0: command tx timeout [ 79.800740][ T54] Bluetooth: hci1: command tx timeout [ 79.882089][ T2865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.902041][ T29] audit: type=1326 audit(1721128805.602:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe217b75bd9 code=0x0 [ 79.938076][ T2865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.815547][ T5228] process 'syz.4.13' launched './file0' with NULL argv: empty string added [ 80.996183][ T5235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.189525][ T5240] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.16'. [ 81.372537][ T5244] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 81.631046][ T29] audit: type=1326 audit(1721128807.362:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.3.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe217b75bd9 code=0x0 [ 82.666040][ T5275] loop4: detected capacity change from 0 to 4096 [ 82.808521][ T5275] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3). [ 82.818788][ T5275] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 83.420926][ T51] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.630569][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 83.670571][ T51] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 83.706250][ T51] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.760174][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.801236][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.816446][ T5300] loop2: detected capacity change from 0 to 64 [ 83.830666][ T51] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.850219][ T5299] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.881404][ T51] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.929821][ T29] audit: type=1326 audit(1721128809.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.46" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe217b75bd9 code=0x0 [ 83.933177][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.434568][ T5313] loop4: detected capacity change from 0 to 4096 [ 84.444933][ T5313] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3). [ 84.454252][ T5313] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 84.480675][ T51] usb 1-1: usb_control_msg returned -32 [ 84.486944][ T51] usbtmc 1-1:16.0: can't read capabilities [ 85.050520][ T51] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.138868][ T9] usb 1-1: USB disconnect, device number 2 [ 85.145097][ T5318] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 85.210561][ T5328] loop4: detected capacity change from 0 to 1024 [ 85.266809][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.496053][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.769507][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.088261][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.106245][ T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.116937][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.132921][ T51] usb 3-1: config 0 descriptor?? [ 86.159592][ T5328] hfsplus: bad catalog entry type [ 86.284999][ T29] audit: type=1326 audit(1721128812.012:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.3.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe217b75bd9 code=0x0 [ 86.635530][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.653302][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.661710][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.669178][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.677725][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.688567][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.858224][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.865979][ T51] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 86.883408][ T51] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 86.892701][ T5317] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.932393][ T25] cfg80211: failed to load regulatory.db [ 86.939065][ T5352] loop4: detected capacity change from 0 to 512 [ 86.973279][ T5352] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.987774][ T5352] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.004534][ T51] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.054335][ T5352] EXT4-fs (loop4): 1 truncate cleaned up [ 87.069431][ T5352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.256240][ T51] usb 3-1: USB disconnect, device number 2 [ 87.494544][ T5113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.833642][ T29] audit: type=1326 audit(1721128814.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.75" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feba7575bd9 code=0x0 [ 88.992237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.190632][ T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.561146][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 89.568960][ T51] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.583407][ T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.594002][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.604708][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.615648][ T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.629546][ T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.795262][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.195426][ T51] usb 3-1: usb_control_msg returned -32 [ 90.229791][ T51] usbtmc 3-1:16.0: can't read capabilities [ 90.992080][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.184650][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 91.221339][ T5164] usb 3-1: USB disconnect, device number 3 [ 91.340447][ T9] usb 2-1: device descriptor read/64, error -32 [ 91.644361][ T29] audit: type=1326 audit(1721128817.372:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe217b75bd9 code=0x0 [ 91.670609][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 91.756123][ T29] audit: type=1326 audit(1721128817.482:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5431 comm="syz.4.91" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e06d75bd9 code=0x0 [ 91.892521][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.929987][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.946567][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 91.956998][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.979059][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.990078][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.003697][ T9] usb 2-1: config 0 descriptor?? [ 92.457258][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.474143][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.488158][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.497674][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.502310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.514228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.532379][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.548652][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.558962][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.567902][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 92.613562][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 92.677173][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.710988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.756048][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 93.839508][ T5449] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 93.861891][ T5449] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 93.911069][ T931] usb 2-1: USB disconnect, device number 3 [ 94.379006][ T29] audit: type=1326 audit(1721128820.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.2.104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f469ad75bd9 code=0x0 [ 94.383753][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.412589][ T5162] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.580386][ T931] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.620461][ T5162] usb 4-1: Using ep0 maxpacket: 8 [ 94.631010][ T5162] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 94.640965][ T5162] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.653653][ T5162] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.664336][ T5162] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.680977][ T5162] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.727292][ T5162] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.749637][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.800411][ T931] usb 5-1: Using ep0 maxpacket: 16 [ 94.826096][ T931] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 94.840647][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.856037][ T931] usb 5-1: Product: syz [ 94.861658][ T931] usb 5-1: Manufacturer: syz [ 94.866604][ T931] usb 5-1: SerialNumber: syz [ 94.895565][ T931] usb 5-1: config 0 descriptor?? [ 94.919982][ T931] gspca_main: conex-2.14.0 probing 0572:0041 [ 94.981476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.031085][ T5162] usb 4-1: usb_control_msg returned -32 [ 95.036797][ T5162] usbtmc 4-1:16.0: can't read capabilities [ 95.197309][ T5478] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 95.324868][ T931] usb 5-1: USB disconnect, device number 2 [ 95.511073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.526476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.690421][ T931] usb 4-1: USB disconnect, device number 2 [ 95.691822][ T5486] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 95.758807][ T5495] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.083727][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 96.121878][ T5503] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 96.159601][ T5503] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 96.644884][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.661053][ T29] audit: type=1326 audit(1721128822.382:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9318575bd9 code=0x0 [ 96.725285][ T51] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 96.923557][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.974627][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.016223][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.035484][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.050788][ T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.073001][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.095239][ T51] usb 3-1: config 0 descriptor?? [ 97.342268][ T931] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.538585][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.548283][ T5528] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.556135][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.570629][ T931] usb 4-1: Using ep0 maxpacket: 16 [ 97.582169][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.587329][ T931] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 97.602525][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.609522][ T931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.610060][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.623623][ T931] usb 4-1: Product: syz [ 97.650956][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.655056][ T931] usb 4-1: Manufacturer: syz [ 97.658402][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.674852][ T931] usb 4-1: SerialNumber: syz [ 97.689668][ T51] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.707806][ T931] usb 4-1: config 0 descriptor?? [ 97.708643][ T51] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 97.733940][ T931] gspca_main: conex-2.14.0 probing 0572:0041 [ 97.754635][ T51] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.871936][ T5539] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 98.920277][ C1] sched: RT throttling activated [ 100.575499][ T5162] usb 3-1: USB disconnect, device number 4 [ 100.680611][ T931] usb 4-1: USB disconnect, device number 3 [ 101.110728][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.172922][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.198154][ T29] audit: type=1326 audit(1721128826.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5556 comm="syz.0.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9318575bd9 code=0x0 [ 101.375124][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 101.407981][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.432174][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.450196][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.493877][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.533915][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.578896][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.593349][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.667450][ T5574] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.826358][ T25] usb 2-1: usb_control_msg returned -32 [ 101.855251][ T25] usbtmc 2-1:16.0: can't read capabilities [ 102.301440][ T5572] syz.3.140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.650863][ T5203] usb 2-1: USB disconnect, device number 4 [ 105.221544][ T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.021800][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 106.050732][ T51] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 106.089112][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.119119][ T51] usb 5-1: Product: syz [ 106.147672][ T51] usb 5-1: Manufacturer: syz [ 106.165063][ T51] usb 5-1: SerialNumber: syz [ 106.197241][ T51] usb 5-1: config 0 descriptor?? [ 106.236445][ T51] gspca_main: conex-2.14.0 probing 0572:0041 [ 106.687988][ T51] usb 5-1: USB disconnect, device number 3 [ 106.806788][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.480638][ T29] audit: type=1326 audit(1721128833.202:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.1.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feba7575bd9 code=0x0 [ 107.570476][ T51] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.773185][ T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.815596][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.849767][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.888299][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.920459][ T51] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.928124][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 107.981405][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.020384][ T5632] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 108.052081][ T5632] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 108.077827][ T51] usb 5-1: config 0 descriptor?? [ 108.202345][ T5641] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 108.560129][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.594818][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.646094][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.713785][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.810364][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.840062][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.929341][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.950351][ T51] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.961339][ T51] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 109.021106][ T51] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 109.090711][ T51] usb 5-1: USB disconnect, device number 4 [ 109.444792][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.479390][ T29] audit: type=1326 audit(1721128836.202:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.4.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e06d75bd9 code=0x0 [ 110.635566][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 110.697662][ T5679] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 110.711526][ T5679] netlink: 'syz.0.176': attribute type 2 has an invalid length. [ 111.113367][ T5691] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 111.219549][ T5697] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 111.851606][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.034871][ T29] audit: type=1326 audit(1721128838.762:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.4.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e06d75bd9 code=0x0 [ 113.217128][ T5736] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 113.381209][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.390094][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.398037][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.406466][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.414105][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 113.421392][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.184974][ T5738] chnl_net:caif_netlink_parms(): no params data found [ 114.668193][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.730543][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.800704][ T5738] bridge_slave_0: entered allmulticast mode [ 114.833676][ T5738] bridge_slave_0: entered promiscuous mode [ 114.902097][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.909254][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.962978][ T5738] bridge_slave_1: entered allmulticast mode [ 114.992169][ T5738] bridge_slave_1: entered promiscuous mode [ 115.009536][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.455248][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.525256][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.560607][ T5114] Bluetooth: hci5: command tx timeout [ 115.868701][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.151832][ T5738] team0: Port device team_slave_0 added [ 116.275025][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.358127][ T5738] team0: Port device team_slave_1 added [ 116.513162][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.530078][ T5774] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 116.698822][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.802681][ T5778] netlink: 'syz.3.209': attribute type 9 has an invalid length. [ 116.829676][ T5778] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.209'. [ 116.845254][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.869812][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.918024][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.937990][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.960121][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.999702][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.060232][ T5780] netlink: 'syz.3.209': attribute type 9 has an invalid length. [ 117.078861][ T5780] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.209'. [ 117.340731][ T5738] hsr_slave_0: entered promiscuous mode [ 117.372894][ T5738] hsr_slave_1: entered promiscuous mode [ 117.409771][ T5738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.445094][ T5738] Cannot create hsr debugfs directory [ 117.640598][ T5114] Bluetooth: hci5: command tx timeout [ 117.905046][ T12] bridge_slave_1: left allmulticast mode [ 117.912351][ T12] bridge_slave_1: left promiscuous mode [ 117.919412][ T5792] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 117.929496][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.027322][ T12] bridge_slave_0: left allmulticast mode [ 118.074743][ T12] bridge_slave_0: left promiscuous mode [ 118.090515][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.720439][ T5114] Bluetooth: hci5: command tx timeout [ 120.215073][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.255218][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.284899][ T12] bond0 (unregistering): Released all slaves [ 121.509024][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.800615][ T5114] Bluetooth: hci5: command tx timeout [ 121.865441][ T5848] netlink: 'syz.4.227': attribute type 9 has an invalid length. [ 121.905282][ T5848] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.227'. [ 121.940662][ T12] hsr_slave_0: left promiscuous mode [ 121.973985][ T12] hsr_slave_1: left promiscuous mode [ 122.007253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.056548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.102679][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.135386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.422618][ T12] veth1_macvtap: left promiscuous mode [ 122.428705][ T12] veth0_macvtap: left promiscuous mode [ 122.438507][ T12] veth1_vlan: left promiscuous mode [ 122.452843][ T12] veth0_vlan: left promiscuous mode [ 123.579895][ T5877] capability: warning: `syz.0.236' uses deprecated v2 capabilities in a way that may be insecure [ 123.615464][ T5877] program syz.0.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.141122][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.197762][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.655693][ T5853] netlink: 'syz.4.227': attribute type 9 has an invalid length. [ 124.664034][ T5853] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.227'. [ 125.302247][ T5903] program syz.0.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.336193][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.404104][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.449045][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.525800][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.606307][ T5911] overlayfs: failed to resolve './file0': -2 [ 125.801709][ T5916] netlink: 'syz.1.252': attribute type 9 has an invalid length. [ 125.809443][ T5916] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.252'. [ 125.929829][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.060880][ T5921] netlink: 'syz.1.252': attribute type 9 has an invalid length. [ 126.138638][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.160366][ T5921] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.252'. [ 126.214728][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.222860][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.235043][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.242303][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.410719][ T5172] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 126.603231][ T5172] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.631660][ T5172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.684642][ T5172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.728238][ T5172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.782647][ T5172] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.835096][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.888816][ T5172] usb 5-1: config 0 descriptor?? [ 127.146613][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.343519][ T5738] veth0_vlan: entered promiscuous mode [ 127.435425][ T5738] veth1_vlan: entered promiscuous mode [ 127.474871][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.493650][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.501548][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.509004][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.516593][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.525123][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.533384][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.558615][ T5172] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.899440][ T5172] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 128.042504][ T5172] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.085835][ T5738] veth0_macvtap: entered promiscuous mode [ 128.193012][ T5738] veth1_macvtap: entered promiscuous mode [ 128.301881][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.330356][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.370901][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.410086][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.451514][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.480544][ T5972] overlayfs: failed to resolve './file0': -2 [ 128.491199][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.531029][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.545196][ T5163] usb 5-1: USB disconnect, device number 5 [ 128.575280][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.622900][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.645275][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.669719][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.710575][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.740340][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.755113][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.774565][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.788666][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.807147][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.827878][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.843974][ T1530] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.868437][ T5738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.887841][ T5738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.906784][ T5738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.926006][ T5738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.039723][ T5981] netlink: 'syz.1.265': attribute type 9 has an invalid length. [ 129.057829][ T2808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.064071][ T1530] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.070350][ T2808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.090429][ T5981] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.265'. [ 129.100648][ T1530] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.109707][ T1530] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 129.145270][ T1530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.160085][ T1530] usb 4-1: config 0 descriptor?? [ 129.208818][ T5982] netlink: 'syz.1.265': attribute type 9 has an invalid length. [ 129.230995][ T5982] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.265'. [ 129.243106][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.266344][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.496944][ T1530] usb 4-1: USB disconnect, device number 4 [ 130.879962][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.890769][ T6008] bridge0: entered allmulticast mode [ 130.933364][ T6008] pim6reg: entered allmulticast mode [ 130.939732][ T6012] netlink: 'syz.3.276': attribute type 11 has an invalid length. [ 130.949992][ T6012] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 130.973023][ T6012] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.276'. [ 131.196920][ T6016] netlink: 'syz.2.278': attribute type 9 has an invalid length. [ 131.227940][ T6016] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.278'. [ 131.400725][ T6020] netlink: 'syz.2.278': attribute type 9 has an invalid length. [ 131.408471][ T6020] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.278'. [ 132.092007][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.602657][ T6045] bridge0: entered allmulticast mode [ 132.638286][ T6047] netlink: 'syz.4.289': attribute type 11 has an invalid length. [ 132.658502][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.662242][ T6047] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 132.690381][ T6047] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.289'. [ 132.711323][ T51] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.722694][ T6045] pim6reg: entered allmulticast mode [ 132.739202][ T51] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 132.761446][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.787874][ T51] usb 2-1: config 0 descriptor?? [ 133.012477][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.019501][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.013718][ C1] eth0: bad gso: type: 1, size: 1408 [ 134.042942][ T6073] capability: warning: `syz.3.299' uses 32-bit capabilities (legacy support in use) [ 134.306947][ T6083] netlink: 'syz.2.303': attribute type 9 has an invalid length. [ 134.348369][ T6083] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.303'. [ 134.447752][ T1530] usb 2-1: USB disconnect, device number 5 [ 134.468163][ T6086] bridge0: entered allmulticast mode [ 134.471263][ T6084] netlink: 'syz.2.303': attribute type 9 has an invalid length. [ 134.474099][ T931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.487704][ T6084] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.303'. [ 135.245902][ T6089] pim6reg: entered allmulticast mode [ 135.340801][ T6092] netlink: 'syz.0.305': attribute type 11 has an invalid length. [ 135.351903][ T6092] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 135.359623][ T6092] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.305'. [ 135.700425][ T931] usb 4-1: Using ep0 maxpacket: 8 [ 135.712365][ T931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.747034][ T931] usb 4-1: config 0 has no interfaces? [ 135.872521][ T931] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 135.981939][ T931] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 136.083858][ T54] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:0[54] [ 136.083858][ T54] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 136.100015][ T54] 1 lock held by kworker/u9:0/54: [ 136.109055][ T54] #0: ffff888063c37518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 136.119771][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 136.129621][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.139722][ T54] Workqueue: hci0 hci_rx_work [ 136.144464][ T54] Call Trace: [ 136.147780][ T54] [ 136.150729][ T54] dump_stack_lvl+0x241/0x360 [ 136.155470][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.160695][ T54] ? skb_dequeue+0x113/0x150 [ 136.165355][ T54] process_scheduled_works+0x1121/0x1830 [ 136.171052][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.177078][ T54] ? assign_work+0x364/0x3d0 [ 136.181727][ T54] worker_thread+0x86d/0xd40 [ 136.186369][ T54] ? __kthread_parkme+0x169/0x1d0 [ 136.191462][ T54] ? __pfx_worker_thread+0x10/0x10 [ 136.196605][ T54] kthread+0x2f0/0x390 [ 136.200700][ T54] ? __pfx_worker_thread+0x10/0x10 [ 136.205859][ T54] ? __pfx_kthread+0x10/0x10 [ 136.210496][ T54] ret_from_fork+0x4b/0x80 [ 136.214959][ T54] ? __pfx_kthread+0x10/0x10 [ 136.219583][ T54] ret_from_fork_asm+0x1a/0x30 [ 136.224398][ T54] [ 136.320385][ T931] usb 4-1: Product: syz [ 136.325926][ T931] usb 4-1: SerialNumber: syz [ 136.341301][ T931] usb 4-1: config 0 descriptor?? [ 136.530932][ T54] [ 136.530946][ T54] ====================================================== [ 136.530953][ T54] WARNING: possible circular locking dependency detected [ 136.530962][ T54] 6.10.0-next-20240716-syzkaller #0 Not tainted [ 136.530974][ T54] ------------------------------------------------------ [ 136.530982][ T54] kworker/u9:0/54 is trying to acquire lock: [ 136.530993][ T54] ffff88807e695948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 136.531058][ T54] [ 136.531058][ T54] but task is already holding lock: [ 136.531064][ T54] ffff888063c37518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 136.531115][ T54] [ 136.531115][ T54] which lock already depends on the new lock. [ 136.531115][ T54] [ 136.531122][ T54] [ 136.531122][ T54] the existing dependency chain (in reverse order) is: [ 136.531128][ T54] [ 136.531128][ T54] -> #2 (&chan->lock/1){+.+.}-{3:3}: [ 136.531160][ T54] lock_acquire+0x1ed/0x550 [ 136.531188][ T54] __mutex_lock+0x136/0xd70 [ 136.531215][ T54] l2cap_recv_frame+0x7ce/0x10840 [ 136.531237][ T54] hci_rx_work+0x50f/0xca0 [ 136.531258][ T54] process_scheduled_works+0xa2c/0x1830 [ 136.531283][ T54] worker_thread+0x86d/0xd40 [ 136.531309][ T54] kthread+0x2f0/0x390 [ 136.531325][ T54] ret_from_fork+0x4b/0x80 [ 136.531352][ T54] ret_from_fork_asm+0x1a/0x30 [ 136.531397][ T54] [ 136.531397][ T54] -> #1 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}: [ 136.531426][ T54] lock_acquire+0x1ed/0x550 [ 136.531452][ T54] process_scheduled_works+0x963/0x1830 [ 136.531489][ T54] worker_thread+0x86d/0xd40 [ 136.531514][ T54] kthread+0x2f0/0x390 [ 136.531530][ T54] ret_from_fork+0x4b/0x80 [ 136.531556][ T54] ret_from_fork_asm+0x1a/0x30 [ 136.531584][ T54] [ 136.531584][ T54] -> #0 ((wq_completion)hci5#2){+.+.}-{0:0}: [ 136.531615][ T54] validate_chain+0x18ef/0x5920 [ 136.531634][ T54] __lock_acquire+0x1384/0x2050 [ 136.531659][ T54] lock_acquire+0x1ed/0x550 [ 136.531685][ T54] process_scheduled_works+0x91f/0x1830 [ 136.531709][ T54] worker_thread+0x86d/0xd40 [ 136.531735][ T54] kthread+0x2f0/0x390 [ 136.531750][ T54] ret_from_fork+0x4b/0x80 [ 136.531785][ T54] ret_from_fork_asm+0x1a/0x30 [ 136.531811][ T54] [ 136.531811][ T54] other info that might help us debug this: [ 136.531811][ T54] [ 136.531818][ T54] Chain exists of: [ 136.531818][ T54] (wq_completion)hci5#2 --> (work_completion)(&hdev->rx_work) --> &chan->lock/1 [ 136.531818][ T54] [ 136.531859][ T54] Possible unsafe locking scenario: [ 136.531859][ T54] [ 136.531865][ T54] CPU0 CPU1 [ 136.531871][ T54] ---- ---- [ 136.531877][ T54] lock(&chan->lock/1); [ 136.531894][ T54] lock((work_completion)(&hdev->rx_work)); [ 136.531910][ T54] lock(&chan->lock/1); [ 136.531929][ T54] lock((wq_completion)hci5#2); [ 136.531947][ T54] [ 136.531947][ T54] *** DEADLOCK *** [ 136.531947][ T54] [ 136.531953][ T54] 1 lock held by kworker/u9:0/54: [ 136.531965][ T54] #0: ffff888063c37518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 136.532020][ T54] [ 136.532020][ T54] stack backtrace: [ 136.532028][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 136.532049][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.532062][ T54] Workqueue: hci5 hci_conn_timeout [ 136.532082][ T54] Call Trace: [ 136.532091][ T54] [ 136.532099][ T54] dump_stack_lvl+0x241/0x360 [ 136.532133][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.532164][ T54] ? __pfx__printk+0x10/0x10 [ 136.532199][ T54] print_circular_bug+0x13a/0x1b0 [ 136.532224][ T54] check_noncircular+0x36a/0x4a0 [ 136.532248][ T54] ? __pfx_check_noncircular+0x10/0x10 [ 136.532270][ T54] ? lockdep_lock+0x123/0x2b0 [ 136.532298][ T54] ? validate_chain+0x11e/0x5920 [ 136.532318][ T54] ? __pfx_validate_chain+0x10/0x10 [ 136.532339][ T54] ? __pfx_validate_chain+0x10/0x10 [ 136.532362][ T54] validate_chain+0x18ef/0x5920 [ 136.532397][ T54] ? __pfx_validate_chain+0x10/0x10 [ 136.532417][ T54] ? mark_lock+0x9a/0x360 [ 136.532449][ T54] ? __lock_acquire+0x1384/0x2050 [ 136.532495][ T54] ? mark_lock+0x9a/0x360 [ 136.532524][ T54] ? debug_object_deactivate+0x2d5/0x390 [ 136.532548][ T54] __lock_acquire+0x1384/0x2050 [ 136.532586][ T54] lock_acquire+0x1ed/0x550 [ 136.532613][ T54] ? process_scheduled_works+0x90a/0x1830 [ 136.532641][ T54] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.532672][ T54] ? __pfx_lock_acquire+0x10/0x10 [ 136.532700][ T54] ? irqentry_exit+0x63/0x90 [ 136.532727][ T54] ? lockdep_hardirqs_on+0x99/0x150 [ 136.532775][ T54] process_scheduled_works+0x91f/0x1830 [ 136.532802][ T54] ? process_scheduled_works+0x90a/0x1830 [ 136.532845][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.532878][ T54] ? assign_work+0x364/0x3d0 [ 136.532908][ T54] worker_thread+0x86d/0xd40 [ 136.532944][ T54] ? __kthread_parkme+0x169/0x1d0 [ 136.532975][ T54] ? __pfx_worker_thread+0x10/0x10 [ 136.533003][ T54] kthread+0x2f0/0x390 [ 136.533021][ T54] ? __pfx_worker_thread+0x10/0x10 [ 136.533048][ T54] ? __pfx_kthread+0x10/0x10 [ 136.533068][ T54] ret_from_fork+0x4b/0x80 [ 136.533095][ T54] ? __pfx_kthread+0x10/0x10 [ 136.533113][ T54] ret_from_fork_asm+0x1a/0x30 [ 136.533149][ T54] [ 137.081953][ T54] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:0[54] [ 137.081953][ T54] preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_conn_timeout [ 137.091679][ T5172] usb 4-1: USB disconnect, device number 5 [ 137.098784][ T54] INFO: lockdep is turned off. [ 137.108056][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 137.117942][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.128026][ T54] Workqueue: hci5 hci_conn_timeout [ 137.133185][ T54] Call Trace: [ 137.136510][ T54] [ 137.139438][ T54] dump_stack_lvl+0x241/0x360 [ 137.144129][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.149361][ T54] ? __pfx__printk+0x10/0x10 [ 137.153985][ T54] process_scheduled_works+0x1121/0x1830 [ 137.159635][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.165636][ T54] ? assign_work+0x364/0x3d0 [ 137.170267][ T54] worker_thread+0x86d/0xd40 [ 137.174909][ T54] ? __kthread_parkme+0x169/0x1d0 [ 137.179998][ T54] ? __pfx_worker_thread+0x10/0x10 [ 137.185141][ T54] kthread+0x2f0/0x390 [ 137.189225][ T54] ? __pfx_worker_thread+0x10/0x10 [ 137.194347][ T54] ? __pfx_kthread+0x10/0x10 [ 137.198935][ T54] ret_from_fork+0x4b/0x80 [ 137.203358][ T54] ? __pfx_kthread+0x10/0x10 [ 137.207968][ T54] ret_from_fork_asm+0x1a/0x30 [ 137.212748][ T54] [ 137.370316][ T931] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.563036][ T931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.574069][ T931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.586062][ T931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.595204][ T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.604501][ T931] usb 2-1: Product: syz [ 137.608720][ T931] usb 2-1: Manufacturer: syz [ 137.613377][ T931] usb 2-1: SerialNumber: syz [ 138.631845][ T931] cdc_ncm 2-1:1.0: bind() failure [ 138.639742][ T931] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 138.646655][ T931] cdc_ncm 2-1:1.1: bind() failure [ 138.841828][ T5163] usb 2-1: USB disconnect, device number 6