last executing test programs: 19.520147849s ago: executing program 2 (id=3752): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x4, 0x0, "54e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 17.287613226s ago: executing program 2 (id=3773): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 17.162763637s ago: executing program 2 (id=3776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 16.708997371s ago: executing program 2 (id=3780): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r2}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="4dfcda61763dff617b1f46968be03364c1a5ec05a16d333afaa5aca8cf08ff05a8173fe045dec66e41cec09164fbb0c7af9bc9cc05405b27631c130aadcefdec09d8a74cffb008a66428467570a1ef35f547b0cba721820a50c1925fb4725aebb7c20f79cffe830a3580282b70ef9e7ebf2bb49d5df2f619cb426c715b0d43ecab560d49ef462341279bc66d8ace0f4ebd553d770752ddb410a997bce7a0272051a323a351c82c61834a7e1c2b3c35b8034feed988af4add368bec1088f509f0d73de4eb3e6ad53c44f90dc645a0fbf5221c1d8d0ccf837c923531451032a26260ce7305cf685ad6ea3b3c4c964d7ab4a7bd31dfacb2eb655e997da4d8cb4d58244a7e971003d0e060cb21c8207e34a862e97478eb677ebbbc58e75bcc2408cd6444b5e8977714fdcf28f02ef79061211e4aea477da56c45ec813eca35a0d51b5404e210bc8c311c546922a4d099370ef4cc438f2c428708166931f339d91b92d334221e7cef3255026ab85c2abf9597b3d0616e6040238585a260fb4ffa388fb89f96727d501dd391cd2b9500fbe4749723059c4af6ddcc7b4d3eee4fbdbce89e8ed0d6fd7d7751c48a5f867a12a9edf431e9565700ee4998cea1cc31bef0ea7e0c95342ad46c74ed824341dfe9a79b19a4af2b95c2eacf49ff2cdc14e4dbe48a51d60bf09a4d96a1cc7a34a9405c4d2985333fa02e4272bf467d5cb20031a3a013d65dd077af5249c5242b7a404bbe6ac01df468365d27b8c695468204cb42585e83c97345fc456e5f7d6ab84325a8ce170a4630d3dd6d0c683f6a7506afa655de3c25d39407f9055685a637c02af3b424731ffe1d268217ff22ed277917840ace2ebacc2ba402275c00bdd36d3edc38c039c38cb0292dfbae12876429c53eaff3b1a64c26ae65544633c4f600c1e82a826b9cb2d87781efa5d8d964fde7ee4d3f6f044c529c42f5c2c3af903ef2b1304e5a77f78088c81357e914f9d5fe60af04aab855db0b23c9c0f911bcd03caf1633aaf32620ee38b75af49e4f23d652f126ee9f72b804116a106cb7ab2432983ac7c8dd5dcd4f5e40388962d5d161aef04c288508cd8fc6bd3e62a898e7b835f38eed5e0d1a55e6dd35d6ad20843023fb4fac5c5e3e72a221c68cdae67dfaed5e76ec9098f6c18f7aa0a58e9d5aa58676421cd9af8baac8a948b5d5b7f0bb566386bde8d8bffa669383fb5d7185194f3e32bb8422cefe874d38c8426b5b21796e7e4619224be6605a0fb8cce1dc3ba321eda8d13aa0adf856ecdd0918c64ae388993a2e4cb96c9be793116965cb1c16ed0d932729e4f5ccea1149a8729c0bdcbb90ce9c46d35ab3ab26b5fd88abd1c6e5526dd7672ad58a32cbb314d48f6cb13010720bf9796191c62abb490cf55ff54fada5274343f47f06e2f0f49a33976e76f6c338954f857f5fa8febc75670dd0270b9dc65bd51f14e9a0bf03747fbe56dfdaa38085f71627945e0a946789d2374188c21733798f43692077b697c71f49c7ab7b411e490dbba14ea3a1bec162843f3481dd2ae68d635cf4d44ecef9a8ce0baa82bc07f2fe690e26a467d5e9935b6a39e48e608811442cb7ae769dbd44830f5c2623ba80f6b74de37f4a47369e79d8f148ba5f1f9055c0d879700f07840aba2b34d8a5180eb9619556530fc76ca0c1c5bf0ec354b372f16c3949298fbfd03a602c91454f660ccc0cff70218a2016aae94b9bc8ead58110abe4896bc7880a861f16f9879058d1394452183d9acd1ba4e1b7bf31a8dfb5d8f9eeb149cedd8a78ba4a5800bac4e425debb54f28222e4ade6fa108b32927a4223588ffa67183d1f81829547e39d326cd2b4b9d873df6e5a8a93f95b911be0e88e70c664a439e96aec7ce93821b1469e5dbfc6d96d1a1070b64aedfa225b78cb0e054ec6f15a9c4c0812deaa7a45cd9ce557aa2030a8991b342f8b8997b9bba771cf3d4e8e1e87ea5798f1a9b66eef7a0265cefacee040d2bbb885622d22177ddabe66c84124fcf0c581e1b120af0bf5656616cbb48efb4cd605e4644fe0b701166b0e43ca1ed0267fae98cdbdba46f5edcaaace42dffe02f5e44e5f43d7b445944f6acc42048f94f1026de6af4b3091c878c665a66aaaf72ef0519a3489aebd174e6bde887d56b5df1004789e43c648e962547d65e5ca970be1733cf686aff66f862ef0fe5edd757c8240e4e5e53ea1f720e03bcc2efe908c59e9c01d6ed0fd1fe789494524107ecc958c72bc22e10aa3d77dbbc49988961014bf2c2da1b7298e525afa70dc900733eedf3d7fa2bb21caca7ab6d3c181a7eacf6eb4ca8e2e6e5ce9cc29de868773beb4b583a0bf4e19b20637c621c6600fad6fcc6a38f9d710f1b9fc961a18a8eb4efdd7ce70e9c365217c7c272ac6633171a2acc83e840b00cab4351074829aa5cf930dd762b9efdea67d41f7d72588090a0d0f20df02e6fea364686812c6ee5a28199fce56fa2597c5df96a16abcdc80ddab618c77040b090a3987cdeab024d62c079669a8edea44146a5e334b283f1b75eed3582c11353381338ce43d361f2bc39c27c3a20352bbf5e0a7b9111408c7c0174b2bba67f6e985808ba7c3d6b41da685e07a18eea715503825231761c9f2368cc7345172fbdbf954214c994e1242e068157af111c696e5e245dc1d558a7702447912cff9e4de795ac5e2cf11e0032a80165252fcfa012316c13f094ce01206b710479e81a7dc8a796adbff0a304c8b96a7ed1c7e9735d0b8926ab12a885e353bf7fa2ae9b5d16b70426e82c6126b44504d260d0c21f05774d465b80d9eced55a1da5901d6061aee3cccf165e0fe0a2fcb6c58ece7ce863725f36485299aa13ad7cccf06d7800552ba7d7c567aca102be5c823c83fa717021053c5be5fdfbdb106be54a60ef01af22ae29511b4fbec90dbc9112720623fe2c01cfc33b38150f11fc6a9a5649e70a5faceabda0a9fac92dfefa76eaf8bf624be632126dcee30ef71f1403c7abbf63bb17ada06e17a9023a05667818bbe43d4ed2873164e51d2454a50b00a007351c14d3433afaca06fa43285ff80d9bdcff5a959110cda16d5c144033c022fa1ae8ac6007631acbada7932acd69808c4bb407352e7588a141604bc2d48fd4a826872ab303464232bc4d1578779de50b7f9ce626152f046efc3bb20417b43c7a7ed9239eb3ec40815d838bddbd65de371367e5a9ee95766ebc4f6e66efbf66de6da16009794ff13ee7a7ea7cecb5b3d2997cd253d19d29991e44ae869b074783c525a63179bff68bcc8fe9e8cd9f3a3e957ef01a864eda255accd82e9b93f870aa8766941495b196612faee05265c0ee0ec6a10017a79a2187a62bba75ff82f403f8e919d0e23743faeba561c802ee0bc02ac1ee63d6e0898c97d6923177ad4c3c18ca320fbd518fa9b94b17470e535cfc15c4cde45843c18a1e456ee2c7eef7205d8b025967c5eb47f33d8e592168374a520ecf77682d0c02396fc77c40645b85a0d553ce7d87ca82aa76c5b4e5566a8d08cc06d058d0b93401c728487181c384da61c8f6261008987d51045714af3d9d949b62a7ffcc52871494d27c3e0dbbc18cd2c0a9f8c6c3fa53f75c836e569bae2634cabba4d84f73229fe5a6d56a853e0abe40d598af95dd6e91d594a72938da3afa0cea875dc46127ac8e78eb009bec784bc031e45ebac856839ebc690fe1d41de79ddd672e5ba90fab7bd0bfddc044396d78c67e543b234602aef6f8f9f36524fe2575b6df331f0b578aac28f2efbbe3d9ea407e269e539a5367a5a37dd04a691a99f54af6669fbbb5b6b19e573a665cc2ae8a84023e8bb81c3fe4cdc0ad596b43bd15c735a9fa3f13529220cd279b056abb70e57fd70f3c3ed53f94fb4999d4725c853363a4efd64f81c654ed8c86a1db1041cb23d7b377292720560c5ec3df70f2d9c4c87d64adbd84c5790ec9264af4a3c6c1cb7afa1a3f623cfdca586fc9c10036329a08244515ccec57167c22d9da3810fdd6949d899a16828ce0ea212431d470da06acd08f73a98ad022a712fed8adf82a08ba48ec0569f357221303d1223956a8531b0a37bd725d23487d83342760eccea51503948c98308492773c168d3f15ef187280d2cc9eb63e7cbe190b5678e56b42acc208f32529e766876eacfd5f391aa4806b2cc8effb9e142858b1fe2e2ea7e058964e9b081b718d6501075cda5624a689e4b773923e67c1c3a64384149f4c0b30959fa0db54802c8e525df3cd92506f0c6fe6cf704cede138626306811ad6c30c5e3aed978f1ab0e9a24a6fc069858daef5f8e50bee0e4d2cbb4ee2c95a9faf0f70a23b17a62db1581c34196c0bf4cecdb469e2bba2a15950f8441d907ebdfd1cb29a0bcab242c1a485efe0ab91e1b60b9564b1e387044f65c483ed27fb81e29e292194cabd390dc03bae6180adc57c90cfdcbf81a80112e49fd592cc321d6b4d6f019340e0b4bef7a4b8fee204c41e1937a279336e9a0ad082fb5763d7c585f5e111a86145df7657f8131740ff422fa3d36e976c1029825300b96c2f4398d56cd7eecb85580a80e9463f4fdb955c038a6742c96cc8f932d19f6f802359ab60cad0e7666a8b385a27e8a569f9cb7f7f2a3bec2a4c03466fe8712b48334cb8efc3a7c24e7514cabe2ca17cfdfccb103d63c814f19f36e654174564f9f9456bc319671138cad9aebca798ff0bf7909049aa4e83f4cd3874554d5d86f08a528bcbde0af33f22509debf2246aa1a2c3e162ecf2011bd11e9fce474661ff2176b4b86a82bf8bd139936212453476c7ebc3ff474be7a65944cb03340a30512742794077ab0e3efb7e735981ad61d6c8fecd25909384cd7f97f731e1d07ef00fdfdb59bba2d2b8fcbf4e842bf5b3cfc83ddd72558555ba323168868955d1c1106b08fc7790d8d88bc3333d862523f3c3d796b4dfa3946028a9a188041e6d9f3ca93b72061ef3dafaf05a716ee82dae9613711ee19d9c851ca807f773323f1d4e650d2b41332f1154336acedd946f8a824ef0395bf070b1491328f316dd9faa2ba3ac69d3b1631c0d11c34c561fa23e501eebf5a8d1daa377329b7163eb1d14aa439cc0de4aef5f484d6402a7ab515482dbc1983ac4d9638b1032d54d562bebbc7886eec027e098abebcf887092b52168a70463ae6368cb7ae087c01e6027fed0679bd36fe987ff4d87f6241f68249d5d1b1046f4e08dcae09dd7c452c6caf15486fbe9d72a9e4f7fc2599bb6d1b02981f196e6ef2054b63f000fb449afe2dbcb491f7c9c77191f786c3f28c237b6516ed5e898cc544f5a818cd517dd5bb7ef25e042e423e037d541dc67982cbc1c50a401c854a9a998264894fa2bf46a4090855c9866fff245fdcbfc1f5ef0874a7f1d9194b0ffb0cb9b227eb6bece97019ece1b235d1049bbf50a54931239552d7b4088a636d0157bcfe4074395ecc59fc597fb7fb5c58f37442eaf8cc25a085417df2ac3c7fcca743c638fbd4d74d2f385a03bcb853ffd124e7755ce5e77c95327b7cdb5e9b6d5187fce9240e6ced58caf66d46b1dcac09c33a4289d2f581d6c1e8e61b04622f3dd5537c2dd4382a659aeefe8e7ef50e71fb01b7e88cae9bc676cb535e9e8dcd846706d1e90a0e117d1d2a036aa0169afac25efd36221fa7d25a9c78e4866c8841e7364446f7332f389de93e7165f43db924bd9f5e656c43e3180eef305d377a8aeb76c390d4969abad2c30805b83f77c6194e697192620a73a08cd63ceeeeb55ad782f3383a9b4c1485aeb258e0c41d788565e55bb3de3f28ac47564cf0201a5aae39eabdc9730a7f569247bfaad55c4ef76c03f79b27d197336d9081a6053621454ed36a700f59926a27cec5605fa2cdcc970cd5e9be1e35d75d390742675afaf5c62a049e43c17747eca6336889b19f1269092de97067014ddce51ca13eea46313653f9a001a753117622b218e90115226a39cc485eed3fadc8ab08022b32a4aabc04d54d62114a824e43c23aa0fbd71f25c3da701339739397aa4995865d27a260677938182217bf6106262b84f4f836bfb5a688fdc5690e6faa42e0a40d1a573e8b1b9381c8f308607eadcdcfe16f72d79c5d5c41b1ad42e1dc6664aa44b32a195f54c63d503830552eddf6b66047426e46e5b45e16b12b730d3be5a6090310ae3346c99999be1b0a4b849f3e3387aecc0064409544df79a6aecd0a456edeb380bba6b6d1cbeaaf992716f1a539860e0500c9597883f194334109d55b5c6c7fe47278c2d32e3822b91f7ee856f30a5bab0f5b2823a6992b5077199079e17e9d62dd427cb5ca636abd84d078fa326e992c3f202f5086e8c114125f21e59054eb6b660e93958e2599a175536c01fc679c1018fabcba0743c5ff19a25d97f283c3f849c2376d6c0469f0ee5c2631801051e4ea3a6eb9eef400a57c1a984ac2da5ba2ed99dea3535057fcee1937ff16082c0f2717ba3f484fbe6bbf0d2b9b54487654c0a66b7dcecec7565c8c8d0f950702275f81646e0faad4a949b53a8f08478d86a53e28e396a49a69f47320235f3dc0affc98a31d8ca1cd0a3aa8bc19c91f0e725ce50aeb40179271ac570c720b882d1cf24e18b1556c7775c61605a6f01108f13d3b54958d09a0469c21dde2c3e1c265303646f1fbca7f79060f9ef2b1a1444668d8de32a30d2b630011feecb8e8da915a686a5e4d0dc0fb4f3ae5af2b87ad6c96af2f78e2e1109fe972aed4a35cebe8414fbca1cb5582d2b8c7bab70ce23dc614a73e7e215f306c22723c1f3714ecdd163342ae6ea9d14f1d8f9b1087c156b5ee9a3c061d006a235784f3995ff534856f25e8cbe30118f304f0347aa3c0b420d46479cb89ca8e022df9ae2772637e3a2f40b9a4e1526661afe212da274777799087999685cf0beadf654a3f773f07333d2e2bee5ca50434ace5173d3da67c4bbb901a7c0085023ba808689d794be69adfa926bc8893097ee81101412535a17c61c88b68f985c19643cccc65fe327f4fe6f1996b46b88cbd8271c7e6f5e48005bbf9cfd0b016d4cb0d954dd28a506d44baa97e13021ca3da301a576dcb7c698648013a3638eca6e81230d01f35298cbe25e017b37a872451a9ceddfb3123416e510412ead9fe0e9241a12ebdb1689d4d214cdae5074cafa785c2ec1d9dd477ba2f92e90d01d967662f9689cd7f10fd85d60deac2feee248c72897a93ee3b509a93f2cb66e17cb29e56610230d24fe0dd1b911e811f4fc997b48b81a0ab366bb80c66ae25a95b5344cdc62392fa892c61a3ff41889a867487f567a00d09d2e1e4cd0bd18f4eb491f25dd4d43d3559b5936375cf62bbcee0c138d3a3bce5ff90b7313b16f58b5ff9560b7520a658375d010dd6268b13ce3f0b5b8e4bd4ad7bc9148e0fe5201fe1128120a2951714b6947cae5f174c827d111f63c9af06e188c2ba29c584be3aa49e50314c8c62f5f8896bd450c29fa2a0627cfe17e7c0204e2ac9e98a75a4bd1addb07377a1a1dd03987194a8060eb5597704a1e093d05ef5aef615ff7f7df232bfbfc984bfa4f66865d22289e1361ac2d4b6910545a5452c7d84350586ddb40f7e0dff215e1df0da2391ea40a486bc744f7b6601280f23100605745a0f4fd05fbbfc19e09ac8b5881381eb4f051cdf7a9a70c458e6ab64413f1afbe0056e88f4a9dc0cf9010ff24e58511ab5d7c48067b7a6f2924f77fdf98a99f7ed41493d49d11ebae6fb16205429cff7faeff857e1c199481e4f47edcfa0ed88977cac5a2fa91e7095bdc313b4bef642b9fe41c51425bf6647efd2cd8102500cc8db17d194a8c917dc572852d813a26350821d5134138671329da198a764fb245fc9bc256446b639ca7dd6029f9e11bb82f5cc5d49d850324b5ea7865d09447b6488b6258a2474a9efb31e20cc4a699f8412718aa60cffca20e27b116ffeadd35cc02a22b1aae6f761147aded1daa3645cb8f154d86117ccdd1c8f41323884a5fd3b8e84cb06911c84cee967b05d27425f4f169c700731bf060e289d2d423314d45c16e646e0ca075e1665bc61d70528d6a2f44cbd712c55878cff4b52e8ec53d61cc93133060e17f4c321c7eec6a62b166e6088f6e1859a4c87a65c8c0c2636a6208943ab268f6f7bb149c10a3144ecda100722dea79e762092c795f5998c0224394cf6671683843a75153c831465d5cc2b96d6c265e1accb993d17e38f54ed7a560d6d4a9a2efb91d8e5d8f5a872d15aeadd8a547f923485af2b51dbb41c1190b305bd6fcb0902d752735e2ad9a7a382b11b233699883e58f69496f386742f24424d1628f63e3c4683d863aadbd2fea5fc62da953ea90edf3144b9099bc42de9f1761c3298e49f7e7ef982d9a3dd2cac0be0d7fbcfa871a0551def16a66326c1cd31494c2fc0c66eab049102ff64cd060a66d9bafd71cf4cf36b8239f61c1aafb456f3cabb704da3a57dc97ef4c33d086cd93d80ae6c0f4003f631cde44af03a563eb044e2fb7635154d3e600df7654bb2f003ee1bfad84617158af0252d24e248a90bdcaab49787309505fe56b431e9e8c9b4ae1e1915d3b2730eb71d1c43171568d0b7d110d897d1b99141b3875fcd72adef2ed3d23d4ad9b6b579d3210a4df7450d3362f027f258b2d000c206c61fd27829e31f2140e2ba2ff4508ad6607e9a92afdc0fb1649581496cba95e9d4a141a38139af7770c9f82c7fd8a60032b86211d7114b68738ca533e4471b474723b65ebfe492db2fee1605569c2e2f41b552216afc60699824ce85da297045f7494357d7564bf9e1a8e9cc649fa0d2c19d202d2884a1f4e2e3c7d23d6cdd6a68c391192f64e2884d6a22e6a001f39ab06886e1a44411cae0de297ba69ef5369a4f40f2beb776a1f1745da26a70a312cbb1529936e4b82348febbd38762054e03d7d685567cf9003c14768bf7eedaaa8a5ea32a0cbaac361de9057a51d55d3822b1779e6fc24d6b6d604e2e45ad67ea2d7056c64915ae435dee84aac0f6cec00b2a552a23b4c1e920cab9fea8799cd42b0f5cd8ef3066a36bb607e6a318c650a29c05715515bdac7d0dd2a93cfc0f73642aaeaeee1b589b0959bfc112184b775b2d95fc7656a37ffe12a7f70f98632ce7fa2973be8afda5b2726164302043c1a202c085680484aec29ec9557950adaf7a49865970dd94783075815d774062af88be0ffac2573da0c4142880dbc9310b446a49bd4bc84971f6cc63b5c053df2036cc596edd73ec936b35ec08825d021bf857709a3eee884d10ac78fea569d57028d6282c54346677604c5a3e1d7d7e2ffdb82eda5011ed46a3e1924ffaeca217a2f737e0aaab16bb7611ef474836105d6288e027d352bdb39072ad7c9e4394dd25d0706ab46500868975041faaf613f3b243c350f6ce696970516fbfecff3ddebe03c911770d598c871e2906adb0351977b7f4e639362686444eb763eaf0736f40d6d89dddc1fd95d5e300754ae54955c55262a32fe956db7246c58807d19f294cca724356ddbc3e886ca265c4bb06a4404c95705167b5f93443e826001f4a7240bbed179310450542289201361d409567fadfe70c0dcfa12d79580cd7e710882f0ab909a1ee9369601cc1ca41ee7320d598edb46b4ded84b829cbc62202a2f9653baf57e07ad879e5fa68ed8e564ca70d490340b0f639496b381e97aaead7e6f38ec15e4f32aa3ab0d6c84241ee77628039d8ec24cc7607899f9d85d63d6caa9cb37b9eef59f4bf27fe2507fd4166509e8879b75f6c88597535489b71b03427db98d929cdffdea57df6dd57aeb7a9b83d613dc5cc233367758c988aebfaf857caef5664a876a193f6827d0d0152da90df97ad11a37c054b845a8dd16c09b554701a7c8657e1c277a62c357e01a4b5ca38a9a36183bd8117e49043458e9b0ba94055cdfa860f0432f706ed15121f92aeacff5adb22fbbb4e5f01f9a4198184abb30de7463dbf8dbdc3d57067a53b140872487e77849f8445ebc180f1ea85b02523961e45c8ffeca013718f3526cfa21d42fb95202584f318ef6757d02de105c5651d43c597ee970d5d93b8fa60dbe62c413d4c1d2688b490f7149c8896210ebe2ed9a8b650115fd14d75982fe2d85965020d4dba7d6797156b90ecca71d2c18f36b6a4cdfbb5e3f8a5df735608ffd021effa63294bbb4682871036d84450df5cbf6541d870e2eeb98954c3d0b0fc486ae0bb1739b7662a4206940f1b40962000714ff25186b4029eb0887a38c7800d6798437b7354b15b42c905ec227d3f7363ddf1bb2a6edd4a18361da6e105b3a47361453bf720ac954881be7ac815957ed385758d389d109181216f87349962d759fe25a1072f849af004895d8839446450c2f49bd55530ce1ca28e3745bcf139f071c9066fbd8ee920e3fba79f546141f2c9300338406a8a454171688dfd7e866db034f45fc3678fb476b5a090d1815405370a36edfbb9f224bdc8dede771951e4471c9e13f43d96180b094bca2285d1be90b1553e3555e18d1fc47e7b20be79cec83a0765c424ff4f30b4772e40d0d6c3b0b158b26be5f5f7695f5288b6cbc35f9688517694e6ea784916ea9a1e2da6e51e5c5a0693bc2542302babfc5ca6f6be88fb0751ce1f0d87c40913ebe90bb7d8f0716d49632366c939a66d8ada16f7a0c50bb7774da244bf94cea882ebfe0b6f62b7a9e46dc2408bdafebb7c1af0365e7b229730b4926c15ebbf40f34e4eb747747aabf8f8f1fc312c49f76f2cff0e9d0a66661f92e648b2acf5d3b5e0b8aa8a463fb38c7eb1b1e037c110c9aef71feee2240b2633fbb8e9473b25820f821a396b977b221f41254389f71d45cbf589d65db581bb7d700fdde63ecac964273e757a55625703e0ddb9999a4e6299d49314aa25d18ab3286ec0f467a4ac5c2683deec1bffaf445b225ce2e9bed80a270d27f10cce8f3b2086fd0bf5e7e8b9c579f2293f3ea187f4c837ede136dd626782a8f26c06c77e3ac180e32cf61ddf1e262d753dc8f307a217a367476f2cdbc93d97d363aab8f4b9b5fdd9707ea1eba973a71616e4286a3c5bce14689f597f3468fc2a79e1615a9814472fda19fc123af0a7ae7d841de4b7311cae55e808835bb65f8aefee00ba4434c547086c74ae9052ec8eb590c4fcdcfe7ed043e6d969853c0bcf8236e439040a33aea289265f2dca95647f5c9846c58cea58de7fbef4e6dc186f1c9eaab6aa4129dce77f569a30465cdae98ad6fc3b9cb25c2d8477caae17b04e80c51fd5fd01b1a5312992d3ebc76c44ad6e21e54d6da0426cf5921ae2943403d06bb306d41fa912837a80596e3c342237eaca492d4534b5ead45f020bb9b10eb74332df1e0cc34139bb59533416236a579a4c2d5fb7d155619826dc48ecfe578ca38d1806f14867de65a00db28cee493c16169efaa11f4d3c09356daf090a3f678d890f54a4a4d50f02ad87261987487480851d8fea4472cbd666a318f98992a5cf423cf23ef515c241d1143b24a6d0f8295134210d7e7ba493468ba64127f8463cde77319c834d78c6d2d774f49ec37976a4b6799fd5325a2ea426858c45b7fba0013aa2db789999c1ce0dbc2e40931b0587acb2eb6d73d456ac4", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) 15.699048405s ago: executing program 2 (id=3795): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) 15.501376772s ago: executing program 1 (id=3798): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.42698314s ago: executing program 1 (id=3800): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) read(r0, &(0x7f00000004c0)=""/4096, 0x1000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2$9p(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4070d0903001f00000000000005000000000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x454, 0x30, 0x12f, 0x0, 0x0, {}, [{0x440, 0x1, [@m_police={0x43c, 0x1, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9825, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0x5, 0x5bb1, 0x0, 0x4, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xb70, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x454}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 15.402304412s ago: executing program 2 (id=3801): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000002, 0x0, 0x5}]}) 13.664653276s ago: executing program 1 (id=3803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000005540)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18b600000000000000000000000c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bind$inet6(r1, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) 13.663244376s ago: executing program 4 (id=3805): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x8, 0x0, {{0x40}}}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000fc0)=""/4095, 0xfff}], 0x3}}], 0x1, 0x40002181, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x4, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109021b00010000000009040000015883b20009058501"], 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_mark(0xffffffffffffffff, 0x79acfb0cb6b458e7, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505331, &(0x7f0000000300)={0x2000000}) 13.546256645s ago: executing program 1 (id=3806): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r2}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) 12.575393924s ago: executing program 1 (id=3811): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000ddff00406112180000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.339774146s ago: executing program 0 (id=3812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12.27541883s ago: executing program 4 (id=3813): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000002, 0x0, 0x5}]}) 11.163133819s ago: executing program 0 (id=3814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="92f2703ff0c7"]}]}, 0x28}, 0x1, 0x3000000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_emit_ethernet(0x38e, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x358, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c69"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0x5452, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="d89264097aae8af0d6d156a6ee2e70673843875f29b268e2801764dea64abbad3401007fac9583ba296622446160f6a2613d605006f1c85d0dfd6a00bb8af2103d99bac9851a80fba8c98d49ed384f9ec6459b"], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r8], 0x3c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000000c0019800800010002000000180001801400018008", @ANYBLOB="b0650ec8"], 0x38}}, 0x80) 10.907283492s ago: executing program 4 (id=3816): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 10.879424215s ago: executing program 3 (id=3817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r1, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x24}}, 0x4000000) r2 = socket(0x31, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000400), &(0x7f00000004c0)=0x30) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) memfd_create(0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x16}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 10.829771685s ago: executing program 1 (id=3818): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x83, 0x731000) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x98b}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000140)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0684113, &(0x7f0000000380)={0x1, 0xa, 0x0, 0x1001, 0x8000, 0x0, 0xffffffed, 0xb, 0x0, 0x0, 0xfffffff9, 0x1}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x400c4150, &(0x7f0000000000)={0x0, &(0x7f0000000240)="85", 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) 10.829149383s ago: executing program 4 (id=3819): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c004) timer_create(0xfffffffffffffffc, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0) 10.324168062s ago: executing program 0 (id=3821): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 10.323032741s ago: executing program 3 (id=3822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80)={0x5, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x5000, 0x4a, &(0x7f00000005c0)=""/74}, {0x2000, 0x80, &(0x7f0000000880)=""/128}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b40)) capget(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a80008000400104004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000440)='contention_begin\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50f7ff0090780000c4bfde8651fb39f84616c223809a3d5e53ef29bd"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000bc0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\"/', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x18, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x0, 0x8, 0x1000}}]}}, 0x15) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x200000) 10.322466475s ago: executing program 4 (id=3823): r0 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x40401, 0x22, 0xa}, 0x18) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = epoll_create1(0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0)="a50676830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x20000014}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x9f, 0xbd8, 0x9, 0x9}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "803586f3"}]}}, 0x0}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f00000000c0)={0xc0002015}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fc00000000000000000000000000ef38aac3dabda87b8dc679435a2300001400060000000000ffffffff"], 0x40}}, 0x0) 9.943077506s ago: executing program 3 (id=3824): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c0000040000001400018008001800000000000600060008060000080002"], 0x1034}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0485510, &(0x7f0000000240)={0x8, 0x1, 0x9, 0x1, &(0x7f0000000000)=[{}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xfffffffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x80}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c013) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmmsg$alg(r7, &(0x7f0000007680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}], 0x1, 0x0) io_submit(r8, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000340), 0xfdef}]) 9.405468095s ago: executing program 3 (id=3825): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000002, 0x0, 0x5}]}) 9.34935521s ago: executing program 0 (id=3826): socketpair(0x8, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r4) socket$inet6(0xa, 0x806, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$int_in(r5, 0x5452, 0x0) r6 = dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_control(r7, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030015000020000002000000e00000010000000000000000"], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000540)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xd, @private0, 0x7}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x400}], 0x94) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x810) 9.052420277s ago: executing program 0 (id=3827): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xc4, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) openat$vsock(0xffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x40, 0x8, 0x10000000}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="08040a0000000000"], 0x20}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xd4}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="4d00c34b21428fff07d408f8cf01a27355c95511c8deca362457c161772b951b97c8e89fb383dcffb98bb6360d85ae0292d5f49f70da1ef5684e4d9b21df"}, {&(0x7f0000000040)="65034d3b8f63a65aaa6851c541ed904a9dda2240e424f51786e1948dc5b3cc6b24c3f3413b1871"}, {&(0x7f00000000c0)="83fb97c76c43fbc3e956b75fd9390502f7e5b949fbec9b023ce54fafe52767e334469475e0111db55521debf52b31197a9e9164b"}, {&(0x7f00000006c0)="ec3b8c75d8ee624e7ae44ce625f184f6e62b80f22eb6281f4e81adee12e1cee0008d906879565844e533c0c745a1c9a7e33cacf8920c3c8b76d39e5323557a16b6531cc01ec310bd8ec7adf3bcbd55abc9766406c453ba91b2201dfdb1252c25642e45e1"}]}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="23532b57212bf9f11ba954b6261ceadfebeb0caf4060447d4b876c335d3f0002077447d97b07bb36b4aefb2f6c9afa69b74f41cca9ee0549b99146b6a85e01b59da9d317892706bdd6d7f546f29b89ed64d3e3c38cd5a13fe70aad3f18b960656ccd296486935fac14eec6fc034c80956e19ccd9e12785e2ed89a8de1f02de6f5782047aa94f9be4eab50d744aee36d544b5c6aa9716e36d0df03f25679e690a8b1ec09b34bae31feb710c584672e624aa8018e78cc975f41104a3d37d3535ff552bec"}], 0x0, &(0x7f0000000640)}}], 0x3b, 0x2000004d) fsopen(&(0x7f0000000740)='ocfs2_dlmfs\x00', 0x0) 8.737037521s ago: executing program 3 (id=3828): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a82", 0x31}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec263", 0x4f}], 0x2}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000180)='lo\x00'}) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f00000001c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r7, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250281ff000a0009f832086625f4bf00007c0f0000000000dfaf002e00010c00000500380000000000080004000910000005003000010001005d370800390001"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = io_uring_setup(0x616e, &(0x7f0000000a40)) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x16, &(0x7f0000000080), 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) write$binfmt_aout(r10, &(0x7f0000000480)=ANY=[], 0x9cf) 7.944485063s ago: executing program 0 (id=3829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x4, 0x12) r4 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x42) r5 = open(&(0x7f0000000080)='./file0\x00', 0x20001, 0x14) unshare(0x8040480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) shutdown(r6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r8 = openat$zero(0xffffff9c, &(0x7f00000003c0), 0x400000, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0xfffffffffffffed9) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0xc, '\x00', r7, r3, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0xfcf, 0x100, 0x6, 0x4081, 0xffffffffffffffff, 0xb07, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc6}}, @jmp={0x5, 0x1, 0x5, 0x6, 0x4, 0xfffffffffffffff0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3117695b0ef3eacf, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0xbe, &(0x7f0000000280)=""/190, 0x41000, 0x10, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xf, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r9, r11, r12], &(0x7f0000000640)=[{0x4, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x10, 0x7}, {0x2, 0x1, 0xb, 0x10}, {0x5, 0x5, 0x4, 0x3}, {0x4, 0x3, 0xc, 0x1}, {0x40, 0x3, 0x0, 0x9}, {0x0, 0x2, 0xf, 0xb}], 0x10, 0x9, @void, @value}, 0x94) 7.937699175s ago: executing program 4 (id=3830): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x3fffffff}) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x80, 0x0, "d0f5a5c9", "705133f6"}}, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet(0x2, 0x3, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005400)=[{{0x0, 0x80101, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x8031e}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894) 0s ago: executing program 3 (id=3831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x2271, 0x0) listen(r1, 0x3) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20048004, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 8206] ip6gretap0: entered allmulticast mode [ 1116.690362][T18233] IPv4: Oversized IP packet from 172.20.20.24 [ 1116.699808][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1116.706781][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1116.860638][ T8] usb 4-1: USB disconnect, device number 42 [ 1117.035868][ T5264] Bluetooth: hci2: command tx timeout [ 1117.272568][ T5407] hsr_slave_0: left promiscuous mode [ 1117.279252][ T5407] hsr_slave_1: left promiscuous mode [ 1117.326040][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.333541][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.399123][T18239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.399774][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.431166][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.530559][ T5407] veth1_macvtap: left promiscuous mode [ 1117.547752][ T5407] veth0_macvtap: left promiscuous mode [ 1117.555998][ T5407] veth1_vlan: left promiscuous mode [ 1117.564225][ T5407] veth0_vlan: left promiscuous mode [ 1117.570855][T18242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.005335][ T5258] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1118.952452][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1119.058803][ T5407] team0 (unregistering): Port device team_slave_0 removed [ 1119.115469][ T5258] Bluetooth: hci2: command tx timeout [ 1120.045939][ T5307] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1120.226572][ T5307] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1120.235716][ T5307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.261432][ T5307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1120.286520][ T5307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.300467][ T5307] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1120.326111][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1120.346270][ T5307] usb 4-1: Product: syz [ 1120.364677][ T5307] usb 4-1: Manufacturer: syz [ 1120.390902][ T5307] cdc_wdm 4-1:1.0: skipping garbage [ 1120.404641][ T5307] cdc_wdm 4-1:1.0: skipping garbage [ 1120.419137][ T5307] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1120.434213][ T5307] cdc_wdm 4-1:1.0: Unknown control protocol [ 1120.598467][ C0] wdm_int_callback: 147 callbacks suppressed [ 1120.598495][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.611258][ C0] wdm_int_callback: 147 callbacks suppressed [ 1120.611278][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.623761][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.630408][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.636767][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.643515][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.649824][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.656454][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.662860][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.669589][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.675911][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.682595][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.688899][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.695546][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.701848][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.708485][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.714791][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.721482][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.727794][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1120.734433][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1120.746095][ T5249] usb 4-1: USB disconnect, device number 43 [ 1120.752069][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1121.171906][T18202] chnl_net:caif_netlink_parms(): no params data found [ 1121.197984][ T5258] Bluetooth: hci2: command tx timeout [ 1121.546796][T18202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.566408][T18202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.573702][T18202] bridge_slave_0: entered allmulticast mode [ 1121.616014][T18202] bridge_slave_0: entered promiscuous mode [ 1121.640098][T18202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.664877][T18202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.672281][T18202] bridge_slave_1: entered allmulticast mode [ 1121.722541][T18202] bridge_slave_1: entered promiscuous mode [ 1121.744692][ T5307] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1121.811244][ T5264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1121.843613][ T5264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1121.857921][T18202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.869706][ T5264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1121.880064][ T5264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1121.890191][ T5264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1121.898316][ T5264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1121.924719][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 1121.932884][T18202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.984890][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.041032][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1122.114862][ T5307] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1122.153786][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.178730][T18202] team0: Port device team_slave_0 added [ 1122.199065][ T5307] usb 1-1: config 0 descriptor?? [ 1122.250274][T18202] team0: Port device team_slave_1 added [ 1122.453170][T18202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.485254][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.573447][T18202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.614516][ T5307] microsoft 0003:045E:07DA.0033: No inputs registered, leaving [ 1122.638418][ T5307] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1122.674696][ T5307] microsoft 0003:045E:07DA.0033: no inputs found [ 1122.701456][ T5307] microsoft 0003:045E:07DA.0033: could not initialize ff, continuing anyway [ 1122.820524][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.995136][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.059685][T18202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.080451][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.130264][T18202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.259813][ T8] usb 1-1: USB disconnect, device number 38 [ 1123.275395][ T5264] Bluetooth: hci2: command tx timeout [ 1123.328928][ T5407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.424354][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1123.496408][ T5407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.532279][T18202] hsr_slave_0: entered promiscuous mode [ 1123.574346][T18202] hsr_slave_1: entered promiscuous mode [ 1123.588765][T18202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.607575][T18352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1123.627945][T18202] Cannot create hsr debugfs directory [ 1123.741037][ T5407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.923855][ T5407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.995468][ T5264] Bluetooth: hci4: command tx timeout [ 1124.466559][T18309] chnl_net:caif_netlink_parms(): no params data found [ 1125.390812][ T5407] bridge_slave_1: left allmulticast mode [ 1125.399095][ T5407] bridge_slave_1: left promiscuous mode [ 1125.411742][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.424537][ T5407] bridge_slave_0: left allmulticast mode [ 1125.480275][ T5407] bridge_slave_0: left promiscuous mode [ 1125.495318][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.593071][T18397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1126.075546][ T5264] Bluetooth: hci4: command tx timeout [ 1126.101490][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.115887][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.128405][ T5407] bond0 (unregistering): Released all slaves [ 1126.139955][T18386] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3341'. [ 1126.282180][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1126.306116][T18402] netlink: 'syz.0.3347': attribute type 4 has an invalid length. [ 1126.325387][T18402] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1126.363637][T18309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.391535][T18309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.435050][T18309] bridge_slave_0: entered allmulticast mode [ 1126.475998][T18309] bridge_slave_0: entered promiscuous mode [ 1126.501518][T18309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.514979][T18309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.522328][T18309] bridge_slave_1: entered allmulticast mode [ 1126.572283][T18309] bridge_slave_1: entered promiscuous mode [ 1126.994519][T18309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.029089][T18309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.077408][ T5407] hsr_slave_0: left promiscuous mode [ 1127.096134][ T5407] hsr_slave_1: left promiscuous mode [ 1127.109764][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.137052][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.159917][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.173251][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.247558][ T5407] veth1_macvtap: left promiscuous mode [ 1127.264602][ T5407] veth0_macvtap: left promiscuous mode [ 1127.295648][ T5407] veth1_vlan: left promiscuous mode [ 1127.304529][ T5407] veth0_vlan: left promiscuous mode [ 1127.644383][T18427] TCP: TCP_TX_DELAY enabled [ 1128.014802][T18438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1128.165377][ T5264] Bluetooth: hci4: command tx timeout [ 1128.823037][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1129.679031][T18309] team0: Port device team_slave_0 added [ 1129.694544][T18309] team0: Port device team_slave_1 added [ 1129.882688][T18202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1129.936595][T18309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.943585][T18309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.033340][T18309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.061373][T18202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1130.070816][T18202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1130.107604][T18309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.124760][T18309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.179504][T18309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.200855][T18202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1130.235114][ T1175] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1130.243120][ T5264] Bluetooth: hci4: command tx timeout [ 1130.348147][T18309] hsr_slave_0: entered promiscuous mode [ 1130.376909][T18309] hsr_slave_1: entered promiscuous mode [ 1130.383220][T18309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.394949][T18309] Cannot create hsr debugfs directory [ 1130.395432][ T1175] usb 2-1: Using ep0 maxpacket: 16 [ 1130.416954][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.437119][ T1175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1130.460172][ T1175] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1130.480673][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.511480][ T1175] usb 2-1: config 0 descriptor?? [ 1130.924108][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.933633][T18202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.977139][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.992819][T18202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.201361][ T1175] usbhid 2-1:0.0: can't add hid device: -71 [ 1131.208761][ T1175] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1131.228474][ T1175] usb 2-1: USB disconnect, device number 37 [ 1131.475444][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1131.523168][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.530433][ T5407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.562191][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.569513][ T5407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.839874][T18504] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1132.115929][T18309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1132.184287][T18309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1132.248189][T18309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1132.281707][T18309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1132.370341][T18202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.435860][ T1175] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1132.608523][ T1175] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1132.630375][ T1175] usb 2-1: not running at top speed; connect to a high speed hub [ 1132.647541][T18309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.668628][ T1175] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1132.677238][T18202] veth0_vlan: entered promiscuous mode [ 1132.695665][ T1175] usb 2-1: string descriptor 0 read error: -22 [ 1132.706712][ T1175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1132.734090][ T1175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.737568][T18202] veth1_vlan: entered promiscuous mode [ 1132.830028][T18309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.881486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.888711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.933077][T18202] veth0_macvtap: entered promiscuous mode [ 1132.967558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.968832][ T5249] usb 2-1: USB disconnect, device number 38 [ 1132.974752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.040300][T18202] veth1_macvtap: entered promiscuous mode [ 1133.117744][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.148789][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.179213][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.198682][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.218993][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.241065][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.262093][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.283803][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.296263][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.307253][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.323491][T18202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.344425][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.362028][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.374356][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.387445][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.398442][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.410164][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.435960][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.453016][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.468439][T18202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.480269][T18202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.492814][T18202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.558273][T18202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.603943][T18202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.635685][T18202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.644468][T18202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.814302][ T5407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.833358][T18309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.846533][ T5407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.915321][ T5303] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1133.955257][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.963140][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.014399][T18309] veth0_vlan: entered promiscuous mode [ 1134.052008][T18309] veth1_vlan: entered promiscuous mode [ 1134.075463][ T5303] usb 2-1: Using ep0 maxpacket: 16 [ 1134.082508][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.126075][ T5303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1134.170062][T18309] veth0_macvtap: entered promiscuous mode [ 1134.181922][ T5303] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1134.213847][T18309] veth1_macvtap: entered promiscuous mode [ 1134.219210][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.259823][ T5303] usb 2-1: config 0 descriptor?? [ 1134.306062][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.339470][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.366095][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.395790][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.428069][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.464725][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.496168][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.518391][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.539156][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.561256][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.597707][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.630266][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.671871][T18309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.716703][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.752716][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.784865][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.820347][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.853417][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.864520][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.882468][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.907283][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.942963][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.975583][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.005440][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.045634][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.076030][T18552] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1135.077325][T18309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.083226][T18552] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1135.139812][T18552] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1135.150562][T18309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.169840][T18309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.205435][T18309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.214477][T18309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.272559][T18552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1135.285627][T18552] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1135.327051][T18552] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1135.445406][T18552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1135.451463][T18552] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.511799][T18552] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.543200][T18552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1135.557818][T18552] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.571537][T18552] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.587114][T18542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.646198][T18542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.737290][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.778730][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.900047][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.911262][ T5303] usbhid 2-1:0.0: can't add hid device: -71 [ 1135.939145][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.962509][ T5303] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1136.015601][ T5303] usb 2-1: USB disconnect, device number 39 [ 1136.396519][ T5264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1136.645611][ T5304] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1136.857299][ T5304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1136.902847][ T5304] usb 4-1: not running at top speed; connect to a high speed hub [ 1136.944425][ T5304] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1136.975415][ T5304] usb 4-1: string descriptor 0 read error: -22 [ 1136.998862][ T5304] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1137.035769][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.277741][ T5264] Bluetooth: hci1: command 0x0c1a tx timeout [ 1137.286850][ T5259] usb 4-1: USB disconnect, device number 44 [ 1137.515669][ T5264] Bluetooth: hci2: command 0x0c1a tx timeout [ 1137.595495][ T5264] Bluetooth: hci4: command 0x0c1a tx timeout [ 1137.955301][ T5304] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1138.188701][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.230864][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.283506][ T5304] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1138.315501][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.357928][ T5304] usb 2-1: config 0 descriptor?? [ 1138.477391][ T5264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1138.773236][ T5304] pyra 0003:1E7D:2CF6.0034: item fetching failed at offset 5/7 [ 1138.808090][ T5304] pyra 0003:1E7D:2CF6.0034: parse failed [ 1138.845808][ T5304] pyra 0003:1E7D:2CF6.0034: probe with driver pyra failed with error -22 [ 1138.992156][ T5304] usb 2-1: USB disconnect, device number 40 [ 1139.295458][ T5259] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1139.357652][ T5264] Bluetooth: hci1: command 0x0c1a tx timeout [ 1139.496246][ T5259] usb 3-1: Using ep0 maxpacket: 16 [ 1139.535762][ T5259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.598288][ T5264] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.615890][ T5259] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1139.665306][ T5259] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1139.675732][ T5264] Bluetooth: hci4: command 0x0c1a tx timeout [ 1139.685268][ T5259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.704520][ T5259] usb 3-1: config 0 descriptor?? [ 1139.945952][ T5304] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1140.117640][T18660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.133420][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.150133][T18660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.177831][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.213800][ T5304] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1140.243349][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.284528][ T5304] usb 2-1: config 0 descriptor?? [ 1140.402874][ T5259] usbhid 3-1:0.0: can't add hid device: -71 [ 1140.418159][ T5259] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1140.454189][ T5259] usb 3-1: USB disconnect, device number 37 [ 1140.555280][ T5264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1140.975422][ T5304] usbhid 2-1:0.0: can't add hid device: -71 [ 1141.024451][ T5304] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1141.095582][ T5304] usb 2-1: USB disconnect, device number 41 [ 1141.414018][ T29] audit: type=1326 audit(1726627727.994:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1141.428105][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 1141.446292][ T5264] Bluetooth: hci1: command 0x0c1a tx timeout [ 1141.553488][T18704] netlink: 341 bytes leftover after parsing attributes in process `syz.3.3417'. [ 1141.567139][T18618] syz.0.3394 (18618): drop_caches: 1 [ 1141.580979][ T29] audit: type=1326 audit(1726627727.994:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1141.614790][T18704] netlink: 341 bytes leftover after parsing attributes in process `syz.3.3417'. [ 1141.647024][ T29] audit: type=1326 audit(1726627728.004:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1141.676104][ T5264] Bluetooth: hci2: command 0x0c1a tx timeout [ 1141.760775][ T5264] Bluetooth: hci4: command 0x0c1a tx timeout [ 1141.883470][ T29] audit: type=1326 audit(1726627728.004:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1141.922206][T18715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3422'. [ 1141.984847][ T29] audit: type=1326 audit(1726627728.004:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.039260][ T29] audit: type=1326 audit(1726627728.004:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.119881][ T29] audit: type=1326 audit(1726627728.004:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.187092][ T29] audit: type=1326 audit(1726627728.004:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.217287][ T29] audit: type=1326 audit(1726627728.004:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.282623][ T29] audit: type=1326 audit(1726627728.004:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.2.3416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 1142.365427][ T5304] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1142.515301][ T5304] usb 4-1: Using ep0 maxpacket: 16 [ 1142.522656][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.555608][ T5304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1142.595402][ T5249] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1142.612178][ T5304] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1142.649737][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.686321][ T5304] usb 4-1: config 0 descriptor?? [ 1142.757297][ T5249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.771846][ T5249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.846817][ T5249] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1142.883534][ T5249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.929217][ T5249] usb 2-1: config 0 descriptor?? [ 1143.119808][T18718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.147114][T18718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.360923][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1143.381039][ T5304] usbhid 4-1:0.0: can't add hid device: -71 [ 1143.407155][ T5304] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1143.410242][T18747] netlink: 341 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1143.429361][T18747] netlink: 341 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1143.482580][ T5304] usb 4-1: USB disconnect, device number 45 [ 1143.625416][ T5249] usbhid 2-1:0.0: can't add hid device: -71 [ 1143.637531][ T5249] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1143.655355][T18749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3436'. [ 1143.670975][ T5249] usb 2-1: USB disconnect, device number 42 [ 1143.681824][T18749] bridge_slave_0: left allmulticast mode [ 1143.697131][T18749] bridge_slave_0: left promiscuous mode [ 1143.719900][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.921612][T18757] input: syz0 as /devices/virtual/input/input38 [ 1144.405875][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1144.423274][T18774] netlink: 341 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1145.154950][ T5233] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1145.324765][ T5233] usb 1-1: Using ep0 maxpacket: 16 [ 1145.344718][ T5233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.364623][ T5233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1145.385491][ T5303] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1145.394820][ T5233] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1145.403914][ T5233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.426686][ T5233] usb 1-1: config 0 descriptor?? [ 1145.557074][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.577986][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.599401][ T5303] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1145.613105][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.637749][ T5303] usb 2-1: config 0 descriptor?? [ 1145.846614][T18786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.861802][T18786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.088171][ T5233] usbhid 1-1:0.0: can't add hid device: -71 [ 1146.103422][ T5233] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1146.116491][ T5233] usb 1-1: USB disconnect, device number 39 [ 1146.184941][T15158] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1146.284412][ T5303] usbhid 2-1:0.0: can't add hid device: -71 [ 1146.300761][ T5303] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1146.313893][ T5303] usb 2-1: USB disconnect, device number 43 [ 1146.365446][T15158] usb 4-1: Using ep0 maxpacket: 8 [ 1146.372114][T15158] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.382287][T15158] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1146.392433][T15158] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1146.411511][T15158] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.430890][T15158] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1146.441181][T15158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.659482][T15158] usb 4-1: usb_control_msg returned -32 [ 1146.670370][T15158] usbtmc 4-1:16.0: can't read capabilities [ 1146.951478][T18812] __nla_validate_parse: 4 callbacks suppressed [ 1146.951501][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1147.930529][ T5407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.182549][ T5407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.363353][ T5407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.588021][ T5407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.882152][ T5407] bridge_slave_1: left allmulticast mode [ 1148.908930][ T5407] bridge_slave_1: left promiscuous mode [ 1148.927437][ T5258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.940826][ T5258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1148.949704][ T5258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1148.954854][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.962222][ T5258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1148.971042][T15158] usb 4-1: USB disconnect, device number 46 [ 1148.981225][ T5258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1148.989618][ T5258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1149.023268][ T5407] bridge_slave_0: left allmulticast mode [ 1149.063040][ T5407] bridge_slave_0: left promiscuous mode [ 1149.094063][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.309384][T15158] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1150.471531][T15158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.493643][T15158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.505221][T15158] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1150.535518][T15158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.551643][T15158] usb 4-1: config 0 descriptor?? [ 1150.589936][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.609018][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.623429][ T5407] bond0 (unregistering): Released all slaves [ 1151.035313][ T5258] Bluetooth: hci4: command tx timeout [ 1151.182862][T18858] binder: 18850:18858 ioctl c0306201 0 returned -14 [ 1151.234326][T15158] usbhid 4-1:0.0: can't add hid device: -71 [ 1151.244977][T15158] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1151.282745][T15158] usb 4-1: USB disconnect, device number 47 [ 1151.639107][ T5407] hsr_slave_0: left promiscuous mode [ 1151.712983][ T5407] hsr_slave_1: left promiscuous mode [ 1151.726902][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.765327][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.826248][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.864158][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.879398][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1151.879414][ T29] audit: type=1326 audit(1726627738.464:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18879 comm="syz.0.3482" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 1151.990841][ T5407] veth1_macvtap: left promiscuous mode [ 1152.015832][ T5407] veth0_macvtap: left promiscuous mode [ 1152.054833][ T5407] veth1_vlan: left promiscuous mode [ 1152.060210][ T5407] veth0_vlan: left promiscuous mode [ 1153.115529][ T5258] Bluetooth: hci4: command tx timeout [ 1153.654287][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1153.747057][ T29] audit: type=1326 audit(1726627740.334:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1153.796185][ T29] audit: type=1326 audit(1726627740.354:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1153.803312][ T5407] team0 (unregistering): Port device team_slave_0 removed [ 1153.845330][ T29] audit: type=1326 audit(1726627740.354:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1153.919420][ T29] audit: type=1326 audit(1726627740.354:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1153.947797][ T29] audit: type=1326 audit(1726627740.364:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1153.995671][ T29] audit: type=1326 audit(1726627740.364:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1154.019346][ T29] audit: type=1326 audit(1726627740.364:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1154.043084][ T29] audit: type=1326 audit(1726627740.364:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1154.071646][ T29] audit: type=1326 audit(1726627740.364:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.1.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1155.005404][T18834] chnl_net:caif_netlink_parms(): no params data found [ 1155.195346][ T5258] Bluetooth: hci4: command tx timeout [ 1155.252609][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.260566][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.268633][T18834] bridge_slave_0: entered allmulticast mode [ 1155.275958][T18834] bridge_slave_0: entered promiscuous mode [ 1155.285683][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.302832][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.310613][T18834] bridge_slave_1: entered allmulticast mode [ 1155.328407][T18834] bridge_slave_1: entered promiscuous mode [ 1155.425103][ T5303] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1155.465461][T18928] input: syz0 as /devices/virtual/input/input39 [ 1155.495810][T18834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.538227][T18834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.587949][ T5303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.615054][ T5303] usb 5-1: config 0 has no interfaces? [ 1155.636765][ T5303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.667180][ T5303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.698076][ T5303] usb 5-1: config 0 descriptor?? [ 1155.703987][T18834] team0: Port device team_slave_0 added [ 1155.747982][T18834] team0: Port device team_slave_1 added [ 1155.846208][T18834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.853219][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.912998][T18834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.969261][T18834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.011987][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.097467][ T5233] usb 5-1: USB disconnect, device number 33 [ 1156.137477][T18834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.270300][ T5307] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1156.309023][T18944] QAT: Device 0 not found [ 1156.327130][ T5307] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1156.389035][T18834] hsr_slave_0: entered promiscuous mode [ 1156.435652][T18834] hsr_slave_1: entered promiscuous mode [ 1156.465991][T18834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.492274][T18834] Cannot create hsr debugfs directory [ 1157.275715][ T5258] Bluetooth: hci4: command tx timeout [ 1157.981448][T18834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1158.046164][T18834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1158.088073][T18834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1158.113718][T18834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1158.136160][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1158.195461][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1158.195483][ T29] audit: type=1326 audit(1726627744.774:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.280433][ T29] audit: type=1326 audit(1726627744.774:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.370004][ T29] audit: type=1326 audit(1726627744.774:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.393930][ T29] audit: type=1326 audit(1726627744.814:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.418884][ T29] audit: type=1326 audit(1726627744.814:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.442977][ T29] audit: type=1326 audit(1726627744.814:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.485154][ T29] audit: type=1326 audit(1726627744.814:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.505050][T18834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.524141][ T29] audit: type=1326 audit(1726627744.814:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.580527][ T29] audit: type=1326 audit(1726627744.814:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.603580][T18834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.634115][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.641355][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.673391][ T29] audit: type=1326 audit(1726627744.814:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.0.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 1158.716926][T18338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.724142][T18338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.895149][T18834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.038213][T18834] veth0_vlan: entered promiscuous mode [ 1159.091168][T18834] veth1_vlan: entered promiscuous mode [ 1159.211531][T18834] veth0_macvtap: entered promiscuous mode [ 1159.261222][T18834] veth1_macvtap: entered promiscuous mode [ 1159.339334][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.370596][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.394879][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.423775][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.473886][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.503579][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.540910][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.581875][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.612743][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.641562][T19027] fuse: Unknown parameter 'use00000000000000000000' [ 1159.647300][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.684704][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.723445][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.778937][T18834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.858404][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.894885][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.922500][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.957131][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.994894][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.041772][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.084967][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.112446][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.129811][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.159503][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.186942][T18834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.212728][T18834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.243970][T18834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.281181][T18834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.304692][T18834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.332924][T18834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.362566][T18834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.768138][T18338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.807301][T18338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.947197][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.974646][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.498030][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1161.566499][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1161.580501][T19073] fuse: Unknown parameter 'use00000000000000000000' [ 1161.845532][T19087] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1162.754439][T18338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.993442][T18338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.311026][T18338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.617480][T18338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.843610][ T5264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1163.859991][ T5264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1163.870073][ T5264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1163.882569][ T5264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1163.891148][ T5264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1163.899254][ T5264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1163.991059][T19137] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1164.068972][T18338] bridge_slave_1: left allmulticast mode [ 1164.091940][T18338] bridge_slave_1: left promiscuous mode [ 1164.119416][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.694763][ T5304] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1165.876609][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.891326][T18338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.898169][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.918357][ T5264] Bluetooth: hci1: command tx timeout [ 1165.943437][T18338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.946315][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1165.979362][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1165.990058][T18338] bond0 (unregistering): Released all slaves [ 1166.005421][ T5304] usb 3-1: string descriptor 0 read error: -22 [ 1166.018297][ T5304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.037577][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.068804][T19175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1166.094954][T19175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1166.165666][ T5304] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1166.225401][T19162] bond0: (slave wlan1): Releasing backup interface [ 1166.765739][T18338] hsr_slave_0: left promiscuous mode [ 1166.817943][T18338] hsr_slave_1: left promiscuous mode [ 1166.840959][T18338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.861451][T18338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.905456][T18338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.912998][T18338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.043130][T18338] veth1_macvtap: left promiscuous mode [ 1167.054124][T18338] veth0_macvtap: left promiscuous mode [ 1167.068471][T18338] veth1_vlan: left promiscuous mode [ 1167.073866][T18338] veth0_vlan: left promiscuous mode [ 1167.514712][ T5264] Bluetooth: hci4: command 0x0406 tx timeout [ 1167.946953][T18338] team0 (unregistering): Port device team_slave_1 removed [ 1167.995833][ T5258] Bluetooth: hci1: command tx timeout [ 1168.017320][T18338] team0 (unregistering): Port device team_slave_0 removed [ 1168.401468][ T5303] usb 3-1: USB disconnect, device number 38 [ 1168.984864][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1169.415600][T19138] chnl_net:caif_netlink_parms(): no params data found [ 1170.075751][ T5258] Bluetooth: hci1: command tx timeout [ 1170.204022][T19138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.232804][T19138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.254876][T19138] bridge_slave_0: entered allmulticast mode [ 1170.278849][T19138] bridge_slave_0: entered promiscuous mode [ 1170.292600][T19138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.315037][T19138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.332666][T19138] bridge_slave_1: entered allmulticast mode [ 1170.353285][T19138] bridge_slave_1: entered promiscuous mode [ 1170.445176][T19138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.477759][T19138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.495119][T15158] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1170.592681][T19138] team0: Port device team_slave_0 added [ 1170.638473][T19138] team0: Port device team_slave_1 added [ 1170.662007][T15158] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1170.685421][T15158] usb 5-1: not running at top speed; connect to a high speed hub [ 1170.715206][T15158] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1170.727463][T15158] usb 5-1: string descriptor 0 read error: -22 [ 1170.733758][T15158] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1170.744418][T15158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.754789][T19138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.761775][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.795482][T19138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.831996][T19138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.854256][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.890820][T19138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.911989][T19268] netlink: 'syz.2.3575': attribute type 5 has an invalid length. [ 1170.921962][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1171.003930][T19138] hsr_slave_0: entered promiscuous mode [ 1171.023882][T15158] usb 5-1: USB disconnect, device number 34 [ 1171.055373][T19138] hsr_slave_1: entered promiscuous mode [ 1172.108615][T19299] program syz.3.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.132356][T19310] fuse: Unknown parameter 'user_id00000000000000000000' [ 1172.148441][ T5258] Bluetooth: hci5: unexpected event for opcode 0x0407 [ 1172.155476][ T5264] Bluetooth: hci1: command tx timeout [ 1172.755734][ T58] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1172.852276][T19138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1172.904781][ T5304] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1172.933407][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1172.941507][T19138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1172.959541][ T58] usb 5-1: not running at top speed; connect to a high speed hub [ 1172.962602][T19138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1172.995234][ T58] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1173.007818][T19138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1173.025925][ T58] usb 5-1: string descriptor 0 read error: -22 [ 1173.032550][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1173.050844][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.065538][ T5304] usb 3-1: Using ep0 maxpacket: 8 [ 1173.085993][ T5304] usb 3-1: config 0 has no interfaces? [ 1173.095504][ T5304] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1173.136019][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.170652][ T5304] usb 3-1: config 0 descriptor?? [ 1173.295323][T15158] usb 5-1: USB disconnect, device number 35 [ 1173.374157][T19138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.398869][T19138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.475709][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.482912][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.539999][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.547258][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.796381][T19138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.936572][T19138] veth0_vlan: entered promiscuous mode [ 1173.975525][T19138] veth1_vlan: entered promiscuous mode [ 1173.993243][ T5304] usb 3-1: USB disconnect, device number 39 [ 1174.063311][T19138] veth0_macvtap: entered promiscuous mode [ 1174.094731][T15158] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1174.098471][T19138] veth1_macvtap: entered promiscuous mode [ 1174.164154][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.183915][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.212835][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.243886][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.279473][T15158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1174.294552][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.305500][T15158] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1174.326783][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.345485][T15158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1174.363671][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.374424][T15158] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1174.395851][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.422641][T15158] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1174.434615][T15158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.442769][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.469352][T15158] usb 1-1: Product: syz [ 1174.473590][T15158] usb 1-1: Manufacturer: syz [ 1174.479021][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.494627][T15158] usb 1-1: SerialNumber: syz [ 1174.505554][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.518675][T15158] usb 1-1: config 0 descriptor?? [ 1174.526869][T15158] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1174.544951][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.563460][T19138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.577750][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.588428][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.598961][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.611266][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.622783][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.633812][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.645239][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.656518][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.668092][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.683076][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.693540][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.704719][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.717315][T19138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.740336][T15158] scsi host1: usb-storage 1-1:0.0 [ 1174.754150][T19138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.773622][T15158] usb 1-1: USB disconnect, device number 40 [ 1174.785654][T19138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.809372][T19138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.818707][T19138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.900485][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1175.002730][T19377] fuse: Unknown parameter 'user_id00000000000000000000' [ 1175.060600][ T5407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.085280][ T5407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.136083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.161419][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.423830][T19387] loop7: detected capacity change from 0 to 16384 [ 1175.435472][ T5258] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1175.507593][ T5249] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1175.555069][T19387] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0 [ 1175.598188][T19387] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 1175.649636][T19387] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1175.665725][ T5249] usb 3-1: device descriptor read/64, error -71 [ 1175.682774][T19387] Buffer I/O error on dev loop7, logical block 288, async page read [ 1175.915871][ T5249] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1176.086258][ T5249] usb 3-1: device descriptor read/64, error -71 [ 1176.164934][ T5258] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1176.175262][ T5258] Bluetooth: hci5: Injecting HCI hardware error event [ 1176.184972][ T5258] Bluetooth: hci5: hardware error 0x00 [ 1176.215166][ T5249] usb usb3-port1: attempt power cycle [ 1176.564692][ T5249] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1176.613565][ T5249] usb 3-1: device descriptor read/8, error -71 [ 1176.733536][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1176.733557][ T29] audit: type=1326 audit(1726627763.314:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1176.807393][ T29] audit: type=1326 audit(1726627763.354:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1176.866515][ T5249] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1176.884368][ T29] audit: type=1326 audit(1726627763.354:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1176.935494][ T5249] usb 3-1: device descriptor read/8, error -71 [ 1176.943028][ T29] audit: type=1326 audit(1726627763.354:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.011200][ T29] audit: type=1326 audit(1726627763.354:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.074889][T19434] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1177.095203][ T5249] usb usb3-port1: unable to enumerate USB device [ 1177.101589][ T29] audit: type=1326 audit(1726627763.364:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.101637][ T29] audit: type=1326 audit(1726627763.364:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.350645][ T29] audit: type=1326 audit(1726627763.364:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.377894][ T29] audit: type=1326 audit(1726627763.364:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.494699][ T29] audit: type=1326 audit(1726627763.364:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.1.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1177.522684][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.532385][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.242520][ T5258] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1179.985012][T15158] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1180.124749][T15158] usb 5-1: device descriptor read/64, error -71 [ 1180.365394][T15158] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1180.514803][T15158] usb 5-1: device descriptor read/64, error -71 [ 1180.635629][T15158] usb usb5-port1: attempt power cycle [ 1180.994715][T15158] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1181.054951][T15158] usb 5-1: device descriptor read/8, error -71 [ 1181.294698][T15158] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1181.367487][T15158] usb 5-1: device descriptor read/8, error -71 [ 1181.486537][T15158] usb usb5-port1: unable to enumerate USB device [ 1182.021120][T19551] netlink: 1200 bytes leftover after parsing attributes in process `syz.0.3646'. [ 1182.782673][ T5407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.152470][ T5407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.347568][ T5407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.444971][ T5264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1183.456572][ T5264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.469769][ T5264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.478005][ T5264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.490688][ T5264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1183.499695][ T5264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.585756][ T5407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.690769][T19572] netlink: 'syz.4.3661': attribute type 3 has an invalid length. [ 1183.698843][T19572] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1183.840151][T19578] input: syz1 as /devices/virtual/input/input40 [ 1183.976992][ T5407] bridge_slave_1: left allmulticast mode [ 1183.995378][ T5407] bridge_slave_1: left promiscuous mode [ 1184.005506][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.027238][ T5407] bridge_slave_0: left allmulticast mode [ 1184.032949][ T5407] bridge_slave_0: left promiscuous mode [ 1184.050942][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.116431][ T5407] ip6gretap0: left allmulticast mode [ 1184.130601][ T5407] ip6gretap0: left promiscuous mode [ 1184.205629][ T5258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.218425][ T5258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.227102][ T5258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.240126][ T5258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.249152][ T5258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1184.257723][ T5258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1184.502636][ T5259] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1184.709088][ T5259] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.742958][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1184.773734][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1184.784184][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1184.795926][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1184.817138][ T5259] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.825090][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1184.843757][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1184.854189][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1184.874178][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1184.886370][ T5259] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.893853][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1184.913504][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1184.923957][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1184.944138][ T5259] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1184.957981][ T5259] usb 2-1: string descriptor 0 read error: -22 [ 1184.964349][ T5259] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1184.984080][ T5259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.996335][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.010933][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.020340][ T5259] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1185.039624][ T5407] bond0 (unregistering): Released all slaves [ 1185.270631][ T5249] usb 2-1: USB disconnect, device number 44 [ 1185.324081][T19569] chnl_net:caif_netlink_parms(): no params data found [ 1185.600786][ T5258] Bluetooth: hci0: command tx timeout [ 1185.782926][ T5407] hsr_slave_0: left promiscuous mode [ 1185.796999][ T5407] hsr_slave_1: left promiscuous mode [ 1185.814174][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.833263][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.874874][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.882371][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.925445][ T5264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1185.935368][ T5264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1185.954730][ T5264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1185.971698][ T5407] veth1_macvtap: left promiscuous mode [ 1185.977822][ T5264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1185.984996][ T5407] veth0_macvtap: left promiscuous mode [ 1185.993286][ T5407] veth1_vlan: left promiscuous mode [ 1186.003172][ T5264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1186.013301][ T5264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1186.020923][ T5407] veth0_vlan: left promiscuous mode [ 1186.314901][ T5264] Bluetooth: hci5: command tx timeout [ 1186.470757][ T5249] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1186.632052][ T5249] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1186.651915][ T5249] usb 2-1: not running at top speed; connect to a high speed hub [ 1186.683913][ T5249] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1186.707528][ T5249] usb 2-1: string descriptor 0 read error: -22 [ 1186.713933][ T5249] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1186.723407][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.880190][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1186.945653][ T5249] usb 2-1: USB disconnect, device number 45 [ 1186.947837][ T5407] team0 (unregistering): Port device team_slave_0 removed [ 1187.664021][T19569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.678007][ T5264] Bluetooth: hci0: command tx timeout [ 1187.694370][T19569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.713335][T19569] bridge_slave_0: entered allmulticast mode [ 1187.720741][T19569] bridge_slave_0: entered promiscuous mode [ 1187.783420][T19587] chnl_net:caif_netlink_parms(): no params data found [ 1187.859327][T19569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.892390][T19569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.911011][T19569] bridge_slave_1: entered allmulticast mode [ 1187.951262][T19636] syz.1.3679 (19636): /proc/19635/oom_adj is deprecated, please use /proc/19635/oom_score_adj instead. [ 1187.956563][T19569] bridge_slave_1: entered promiscuous mode [ 1188.074840][ T5264] Bluetooth: hci4: command tx timeout [ 1188.108998][T19569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.244302][T19638] netlink: 'syz.4.3680': attribute type 10 has an invalid length. [ 1188.286432][T19638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.322902][T19638] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1188.366411][T19569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.397355][ T5264] Bluetooth: hci5: command tx timeout [ 1188.513324][T19569] team0: Port device team_slave_0 added [ 1188.617405][T19569] team0: Port device team_slave_1 added [ 1188.824201][T19569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.842673][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.924530][T19569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.991826][T19587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.021238][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.033902][T19587] bridge_slave_0: entered allmulticast mode [ 1189.057643][T19587] bridge_slave_0: entered promiscuous mode [ 1189.066251][T19669] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1189.096184][T19587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.103554][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.132944][T19587] bridge_slave_1: entered allmulticast mode [ 1189.152110][T19587] bridge_slave_1: entered promiscuous mode [ 1189.252431][T19569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.264821][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.311816][T19569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.376223][T19679] vxcan1: tx address claim with dest, not broadcast [ 1189.515801][T19587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.552068][T19587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.623877][T19569] hsr_slave_0: entered promiscuous mode [ 1189.647455][T19569] hsr_slave_1: entered promiscuous mode [ 1189.736536][T19569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.744233][T19569] Cannot create hsr debugfs directory [ 1189.754901][ T5264] Bluetooth: hci0: command tx timeout [ 1189.923892][T19618] chnl_net:caif_netlink_parms(): no params data found [ 1190.101347][ T5407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.161903][ T5264] Bluetooth: hci4: command tx timeout [ 1190.262012][T19587] team0: Port device team_slave_0 added [ 1190.317062][T19587] team0: Port device team_slave_1 added [ 1190.474844][ T5264] Bluetooth: hci5: command tx timeout [ 1190.488953][ T5407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.688821][T19587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.704809][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.731308][T19587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.748622][T19587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.756247][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.806285][T19587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.891550][ T5407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.128429][ T5407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.196386][T19618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.214102][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.223368][T19618] bridge_slave_0: entered allmulticast mode [ 1191.237253][T19618] bridge_slave_0: entered promiscuous mode [ 1191.256357][T19714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1191.281781][T19618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.304311][T19618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.312265][T19618] bridge_slave_1: entered allmulticast mode [ 1191.325963][T19618] bridge_slave_1: entered promiscuous mode [ 1191.400681][T19618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.413127][T19618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.424294][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1191.424311][ T29] audit: type=1326 audit(1726627778.004:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19713 comm="syz.4.3696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1191.514043][T19587] hsr_slave_0: entered promiscuous mode [ 1191.521606][T19587] hsr_slave_1: entered promiscuous mode [ 1191.523029][ T29] audit: type=1326 audit(1726627778.104:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19713 comm="syz.4.3696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1191.525396][T19587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.525454][T19587] Cannot create hsr debugfs directory [ 1191.663962][ T29] audit: type=1326 audit(1726627778.244:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19719 comm="syz.1.3698" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x0 [ 1191.685568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.703512][T19618] team0: Port device team_slave_0 added [ 1191.835544][ T5264] Bluetooth: hci0: command tx timeout [ 1191.871775][T19618] team0: Port device team_slave_1 added [ 1191.970419][ T29] audit: type=1326 audit(1726627778.554:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19713 comm="syz.4.3696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1192.210009][T19618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.225629][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.235987][ T5264] Bluetooth: hci4: command tx timeout [ 1192.251855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.285473][T19618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.298611][T19618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.306595][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.338575][T19618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.467900][ T5407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.554708][ T5264] Bluetooth: hci5: command tx timeout [ 1192.676905][ T5407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.719982][T19618] hsr_slave_0: entered promiscuous mode [ 1192.735906][T19618] hsr_slave_1: entered promiscuous mode [ 1192.743711][T19618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.759210][T19618] Cannot create hsr debugfs directory [ 1192.900787][ T5407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.911692][ T29] audit: type=1326 audit(1726627779.484:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19732 comm="syz.4.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1192.939911][ T29] audit: type=1326 audit(1726627779.484:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19732 comm="syz.4.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1192.977985][ T29] audit: type=1326 audit(1726627779.494:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19732 comm="syz.4.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1193.012809][ T29] audit: type=1326 audit(1726627779.494:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19732 comm="syz.4.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1193.219340][ T5407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.252645][T19569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.281290][T19569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1193.324708][ T5249] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1193.332596][T19569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1193.407506][T19569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1193.504947][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 1193.512337][ T5249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.547322][ T5249] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1193.597373][ T5249] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1193.641011][ T5249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.658363][ T5249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1193.668337][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.694922][ T5303] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1193.718918][ T5407] bridge_slave_1: left allmulticast mode [ 1193.724960][ T5407] bridge_slave_1: left promiscuous mode [ 1193.730764][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.750658][ T5407] bridge_slave_0: left allmulticast mode [ 1193.764637][ T5407] bridge_slave_0: left promiscuous mode [ 1193.775883][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.805777][ T5407] bridge_slave_1: left allmulticast mode [ 1193.813405][ T5407] bridge_slave_1: left promiscuous mode [ 1193.820343][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.830235][ T5407] bridge_slave_0: left allmulticast mode [ 1193.846680][ T5407] bridge_slave_0: left promiscuous mode [ 1193.852521][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.862232][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.873927][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.895341][ T5249] usb 5-1: usb_control_msg returned -32 [ 1193.901013][ T5249] usbtmc 5-1:16.0: can't read capabilities [ 1193.908090][ T5303] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1193.920738][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.940496][ T5303] usb 2-1: config 0 descriptor?? [ 1194.314807][ T5264] Bluetooth: hci4: command tx timeout [ 1194.601871][ T5303] usbhid 2-1:0.0: can't add hid device: -71 [ 1194.612868][ T5303] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1194.624450][ T5303] usb 2-1: USB disconnect, device number 46 [ 1194.818954][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.831380][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.843033][ T5407] bond0 (unregistering): Released all slaves [ 1195.018729][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.029772][ T5407] bond0 (unregistering): Released all slaves [ 1195.685407][T19569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.805367][ T5407] hsr_slave_0: left promiscuous mode [ 1195.815023][ T5407] hsr_slave_1: left promiscuous mode [ 1195.828184][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.841419][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.861679][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.877371][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.914474][ T5407] hsr_slave_0: left promiscuous mode [ 1195.946155][ T5407] hsr_slave_1: left promiscuous mode [ 1195.990116][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.009061][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.042191][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.070234][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.112390][T15158] usb 5-1: USB disconnect, device number 40 [ 1196.339024][ T5407] veth1_macvtap: left promiscuous mode [ 1196.367865][ T5407] veth0_macvtap: left promiscuous mode [ 1196.390835][ T5407] veth1_vlan: left promiscuous mode [ 1196.411948][ T5407] veth0_vlan: left promiscuous mode [ 1196.439556][ T5407] veth1_macvtap: left promiscuous mode [ 1196.452065][ T5407] veth0_macvtap: left promiscuous mode [ 1196.472289][ T5407] veth1_vlan: left promiscuous mode [ 1196.494968][ T5407] veth0_vlan: left promiscuous mode [ 1197.385154][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1197.441469][ T5407] team0 (unregistering): Port device team_slave_0 removed [ 1198.570125][ T5407] team0 (unregistering): Port device team_slave_1 removed [ 1198.632567][ T5407] team0 (unregistering): Port device team_slave_0 removed [ 1199.273834][T19587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1199.554004][T19587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1199.581171][T19587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1199.599837][T19587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1199.697865][T19569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.775343][ T5233] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1199.802992][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.810191][ T5416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.848025][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.855213][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.946253][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.965617][ T5304] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1199.984212][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.011592][T19587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.034752][ T5233] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1200.043864][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.079493][ T5233] usb 5-1: config 0 descriptor?? [ 1200.108115][T19587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.124931][ T5304] usb 2-1: Using ep0 maxpacket: 16 [ 1200.151135][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.173416][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1200.191500][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.198745][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.224893][ T5304] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1200.230147][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.241303][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.244251][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.287197][ T5304] usb 2-1: config 0 descriptor?? [ 1200.369120][T19618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1200.399707][T19618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1200.445338][T19618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1200.473541][T19569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.533645][T19618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1200.634395][T19587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.738436][T19569] veth0_vlan: entered promiscuous mode [ 1200.753293][ T5304] microsoft 0003:045E:07DA.0036: No inputs registered, leaving [ 1200.765608][ T5233] usbhid 5-1:0.0: can't add hid device: -71 [ 1200.771665][ T5233] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1200.789360][T19569] veth1_vlan: entered promiscuous mode [ 1200.812607][ T5304] microsoft 0003:045E:07DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1200.825798][ T5233] usb 5-1: USB disconnect, device number 41 [ 1200.844769][ T5304] microsoft 0003:045E:07DA.0036: no inputs found [ 1200.854888][ T5304] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 1200.923616][T19587] veth0_vlan: entered promiscuous mode [ 1200.957036][T19587] veth1_vlan: entered promiscuous mode [ 1200.967791][T19569] veth0_macvtap: entered promiscuous mode [ 1200.990654][T19618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.006968][T19569] veth1_macvtap: entered promiscuous mode [ 1201.017108][T19817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.050430][T19618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.065365][T19817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.079865][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.087142][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.127181][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.145040][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.155667][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.166484][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.184286][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.203214][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.214368][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.232513][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.243858][T19569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.270940][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.278109][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.300987][T19587] veth0_macvtap: entered promiscuous mode [ 1201.328552][ T1175] usb 2-1: USB disconnect, device number 47 [ 1201.407551][T19587] veth1_macvtap: entered promiscuous mode [ 1201.428233][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.451087][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.472893][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.492606][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.504251][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.524921][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.555170][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.584992][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.606867][T19569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.654012][T19569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.674513][T19822] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 1201.694854][T19569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.703746][T19569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.731849][T19569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.850948][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.880399][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.931883][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.997573][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.065249][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.099590][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.114913][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.134982][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.151349][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.170836][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.190497][T19587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.203585][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.215211][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.232330][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.249994][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.263608][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.278123][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.303283][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.323219][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.348221][T19587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.370159][T19587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.393951][T19587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.417634][T19618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.458623][T19587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.477292][T19587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.504189][T19587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.513538][T19587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.760597][T19618] veth0_vlan: entered promiscuous mode [ 1202.776087][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.783961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.838838][ T5233] IPVS: starting estimator thread 0... [ 1202.860526][T19618] veth1_vlan: entered promiscuous mode [ 1202.867599][T19850] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 1202.966542][T19852] IPVS: using max 21 ests per chain, 50400 per kthread [ 1203.005972][T19618] veth0_macvtap: entered promiscuous mode [ 1203.041029][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.059820][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.096589][T19618] veth1_macvtap: entered promiscuous mode [ 1203.141158][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.187000][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.218108][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.251085][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.277522][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.304647][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.321253][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.332246][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.346232][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.367136][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.387609][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.410280][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.437569][T19618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.462951][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.534592][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.572508][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.614748][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.634754][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.662869][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.687391][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.714673][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.725026][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.736114][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.748932][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.762437][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.776443][T19618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.837109][T19618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.839941][T18338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.874415][T19618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.895402][T19618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.914818][T15158] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1203.922554][T18338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.922619][T19618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.021740][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.051482][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.097629][T15158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.137134][T15158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.185640][T15158] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1204.206697][T15158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.219817][ T5411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.245602][ T5233] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1204.265119][ T5411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.273333][T15158] usb 4-1: config 0 descriptor?? [ 1204.333462][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.379269][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.444802][ T5233] usb 5-1: Using ep0 maxpacket: 16 [ 1204.462175][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.482692][ T5233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1204.508794][ T5233] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1204.520165][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.535525][ T5233] usb 5-1: config 0 descriptor?? [ 1204.760677][T19897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1204.970388][ T5233] microsoft 0003:045E:07DA.0037: No inputs registered, leaving [ 1205.004785][T15158] usbhid 4-1:0.0: can't add hid device: -71 [ 1205.028060][T15158] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1205.039826][ T5233] microsoft 0003:045E:07DA.0037: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1205.082888][T15158] usb 4-1: USB disconnect, device number 48 [ 1205.089517][ T5233] microsoft 0003:045E:07DA.0037: no inputs found [ 1205.113484][ T5233] microsoft 0003:045E:07DA.0037: could not initialize ff, continuing anyway [ 1205.236142][T19917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.265595][T19917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.285398][ T5304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1205.315650][ T5304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1205.340068][ T5304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1205.367866][ T5304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1205.400334][ T5304] rtc rtc0: __rtc_set_alarm: err=-22 [ 1205.514913][ T1175] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1205.553189][ T5304] usb 5-1: USB disconnect, device number 42 [ 1205.694964][ T1175] usb 1-1: Using ep0 maxpacket: 32 [ 1205.707416][ T1175] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1205.742513][ T1175] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1205.775475][ T1175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.808693][ T1175] usb 1-1: Product: syz [ 1205.812940][ T1175] usb 1-1: Manufacturer: syz [ 1205.844610][ T1175] usb 1-1: SerialNumber: syz [ 1205.866132][ T1175] usb 1-1: config 0 descriptor?? [ 1205.885323][T19919] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1205.911959][ T1175] hub 1-1:0.0: bad descriptor, ignoring hub [ 1205.932242][ T1175] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1205.969169][ T1175] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 1206.169031][T15158] usb 1-1: USB disconnect, device number 41 [ 1206.169149][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1207.694715][ T5304] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1207.716034][T19994] fuse: Unknown parameter 'fd0x0000000000000003' [ 1207.896611][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.928227][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.968944][ T5304] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1208.003569][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.037499][ T5304] usb 3-1: config 0 descriptor?? [ 1208.254851][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'. [ 1208.288020][T20007] netlink: 'syz.4.3759': attribute type 25 has an invalid length. [ 1208.323243][T20007] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.332672][T20007] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.341493][T20007] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.350421][T20007] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.487380][ T5304] hid-led 0003:0FC5:B080.0038: unknown main item tag 0x0 [ 1208.886143][ T5304] hid-led 0003:0FC5:B080.0038: probe with driver hid-led failed with error -71 [ 1208.923349][ T5304] usb 3-1: USB disconnect, device number 44 [ 1209.166588][T20025] fuse: Unknown parameter 'fd0x0000000000000003' [ 1209.355671][T20033] team_slave_0: Caught tx_queue_len zero misconfig [ 1209.492215][T20035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3771'. [ 1209.954222][ T29] audit: type=1326 audit(1726627796.534:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.029041][ T29] audit: type=1326 audit(1726627796.534:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.115870][ T29] audit: type=1326 audit(1726627796.664:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.157654][ T29] audit: type=1326 audit(1726627796.734:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.220987][ T29] audit: type=1326 audit(1726627796.734:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.254139][ T29] audit: type=1326 audit(1726627796.744:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.279432][ T29] audit: type=1326 audit(1726627796.784:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.320231][ T29] audit: type=1326 audit(1726627796.784:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20048 comm="syz.3.3777" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 1210.363556][ T29] audit: type=1326 audit(1726627796.934:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1210.528648][T20073] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1210.590127][T20073] bridge_slave_0: entered promiscuous mode [ 1211.061760][T20089] input: syz0 as /devices/virtual/input/input44 [ 1211.324813][T15158] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1211.520235][T15158] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1211.542791][T15158] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1211.561785][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.591018][T15158] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1211.612868][T15158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1211.644625][T15158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1211.675302][T15158] usb 5-1: string descriptor 0 read error: -22 [ 1211.689586][T15158] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1211.704149][T15158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.720494][T15158] usb 5-1: config 0 descriptor?? [ 1211.730186][T15158] hub 5-1:0.0: bad descriptor, ignoring hub [ 1211.747499][T15158] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1211.772508][T15158] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 1211.831536][T15158] input: failed to attach handler mousedev to device input45, error: -5 [ 1211.856503][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.950392][T15158] usb 5-1: USB disconnect, device number 43 [ 1212.042380][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.172975][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.392511][ T12] bridge_slave_1: left allmulticast mode [ 1212.398551][ T12] bridge_slave_1: left promiscuous mode [ 1212.404441][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.416621][ T12] bridge_slave_0: left allmulticast mode [ 1212.422313][ T12] bridge_slave_0: left promiscuous mode [ 1212.429234][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.872667][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.891891][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.903881][ T12] bond0 (unregistering): Released all slaves [ 1213.044959][ T5258] Bluetooth: hci4: command 0x0405 tx timeout [ 1213.494766][ T5259] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1213.518685][ T12] hsr_slave_0: left promiscuous mode [ 1213.554098][ T12] hsr_slave_1: left promiscuous mode [ 1213.578427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.609795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.656799][ T5259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1213.669445][ T5259] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1213.687641][ T5259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.701271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.733117][ T5259] usb 5-1: config 0 descriptor?? [ 1213.741681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.802273][T20139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1213.813636][T20139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1213.822907][T20139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1213.833349][T20139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1213.845208][T20139] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1213.854245][T20139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1213.865802][ T12] veth1_macvtap: left promiscuous mode [ 1213.907131][ T12] veth0_macvtap: left promiscuous mode [ 1213.926060][ T12] veth1_vlan: left promiscuous mode [ 1213.940385][ T12] veth0_vlan: left promiscuous mode [ 1213.966388][ T5259] usb 5-1: USB disconnect, device number 44 [ 1214.786149][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1214.885432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1215.693710][ T5264] Bluetooth: hci5: command 0x0405 tx timeout [ 1215.881732][T20157] netlink: 'syz.0.3814': attribute type 10 has an invalid length. [ 1215.904784][T20155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1215.916354][ T5258] Bluetooth: hci4: command tx timeout [ 1215.939102][T20157] geneve0: entered promiscuous mode [ 1215.982919][T20157] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1216.125204][T20165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1216.494306][T20140] chnl_net:caif_netlink_parms(): no params data found [ 1216.670219][T20185] netlink: 'syz.3.3822': attribute type 21 has an invalid length. [ 1216.690354][T20185] IPv6: NLM_F_CREATE should be specified when creating new route [ 1216.816151][T20140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.843675][T20140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.853788][T20140] bridge_slave_0: entered allmulticast mode [ 1216.862904][T20140] bridge_slave_0: entered promiscuous mode [ 1216.871762][T20140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.879544][T20140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.887266][T20140] bridge_slave_1: entered allmulticast mode [ 1216.894515][T20140] bridge_slave_1: entered promiscuous mode [ 1216.914727][ T5259] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1216.980620][T20198] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1216.990575][T20198] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 1217.067469][ T5264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1217.080448][ T5264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1217.089342][ T5264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1217.099414][ T5264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1217.106615][ T5259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.120064][ T5264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1217.129014][ T5259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.134779][ T5264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1217.138960][ T5259] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 1217.155314][ T5259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.191155][ T5259] usb 5-1: config 0 descriptor?? [ 1217.236093][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.280973][T20140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.307431][T20140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.393146][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.604152][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.679394][ T5259] wacom 0003:056A:00B0.0039: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 1217.713046][ T5259] wacom 0003:056A:00B0.0039: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.4-1/input0 [ 1217.738073][ T5259] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B0.0039/input/input46 [ 1217.983125][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.994831][ T5264] Bluetooth: hci4: command tx timeout [ 1218.097124][T20140] team0: Port device team_slave_0 added [ 1218.107991][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3823'. [ 1218.125411][ T5304] usb 5-1: USB disconnect, device number 45 [ 1218.230142][T20140] team0: Port device team_slave_1 added [ 1218.358824][T20140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.414744][T20140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.442605][T20140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.540969][T20140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.558601][T20140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.597689][T20140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.821307][T20140] hsr_slave_0: entered promiscuous mode [ 1218.846424][T20140] hsr_slave_1: entered promiscuous mode [ 1218.884378][T20140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.919419][T20140] Cannot create hsr debugfs directory [ 1219.382221][ T5264] Bluetooth: hci1: command tx timeout [ 1220.083835][ T5264] Bluetooth: hci4: command tx timeout [ 1221.632835][ T5264] Bluetooth: hci1: command 0x041b tx timeout [ 1222.163318][ T5258] Bluetooth: hci4: command tx timeout [ 1223.701515][ T5258] Bluetooth: hci1: command 0x041b tx timeout [ 1225.938560][ T5258] Bluetooth: hci1: command 0x041b tx timeout [ 1228.595849][ T5258] Bluetooth: hci1: command 0x041b tx timeout [ 1239.378262][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.509773][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.778384][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.210070][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.158869][T10107] Bluetooth: hci0: command 0x0406 tx timeout [ 1308.731953][T10107] Bluetooth: hci5: command 0x0405 tx timeout [ 1339.757236][ T5264] Bluetooth: hci4: command 0x0406 tx timeout [ 1343.523273][T20139] Bluetooth: hci1: command 0x041b tx timeout [ 1362.009981][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.028082][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1384.221907][ T30] INFO: task kworker/u8:1:12 blocked for more than 145 seconds. [ 1384.237039][ T30] Not tainted 6.11.0-syzkaller-04107-g194fcd20ebcc #0 [ 1384.244380][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1384.664670][ T30] task:kworker/u8:1 state:D stack:21264 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1384.844670][ T30] Workqueue: netns cleanup_net [ 1384.849560][ T30] Call Trace: [ 1384.852876][ T30] [ 1385.024662][ T30] __schedule+0x1800/0x4a60 [ 1385.029285][ T30] ? __pfx___schedule+0x10/0x10 [ 1385.034195][ T30] ? __pfx_lock_release+0x10/0x10 [ 1385.235365][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1385.240933][ T30] ? kthread_data+0x52/0xd0 [ 1385.363408][ T30] ? schedule+0x90/0x320 [ 1385.414606][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1385.419825][ T30] ? schedule+0x90/0x320 [ 1385.424128][ T30] schedule+0x14b/0x320 [ 1385.554594][ T30] schedule_preempt_disabled+0x13/0x30 [ 1385.560149][ T30] __mutex_lock+0x6a4/0xd70 [ 1385.692473][ T30] ? __mutex_lock+0x527/0xd70 [ 1385.746014][ T30] ? nsim_create+0x408/0x890 [ 1385.750700][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1385.874666][ T30] ? kmemdup_noprof+0x45/0x60 [ 1385.879441][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 1385.984914][ T30] nsim_create+0x408/0x890 [ 1385.989516][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 1386.104375][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 1386.155092][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 1386.160674][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 1386.284552][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1386.290461][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1386.434983][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 1386.440559][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 1386.544661][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1386.550336][ T30] devlink_reload+0x478/0x870 [ 1386.663988][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 1386.724562][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 1386.730127][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1386.864649][ T30] ? class_remove_file_ns+0x121/0x160 [ 1386.870126][ T30] cleanup_net+0x615/0xcc0 [ 1386.956434][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1386.961483][ T30] ? process_scheduled_works+0x945/0x1830 [ 1387.044617][ T30] process_scheduled_works+0xa2c/0x1830 [ 1387.050290][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1387.136590][ T30] ? assign_work+0x364/0x3d0 [ 1387.141282][ T30] worker_thread+0x870/0xd30 [ 1387.234284][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1387.274761][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1387.279964][ T30] kthread+0x2f0/0x390 [ 1387.284068][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1387.394657][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.399348][ T30] ret_from_fork+0x4b/0x80 [ 1387.403832][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.524540][ T30] ret_from_fork_asm+0x1a/0x30 [ 1387.529411][ T30] [ 1387.584705][ T30] INFO: task kworker/u8:5:1064 blocked for more than 148 seconds. [ 1387.592675][ T30] Not tainted 6.11.0-syzkaller-04107-g194fcd20ebcc #0 [ 1387.714600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1387.723338][ T30] task:kworker/u8:5 state:D stack:20792 pid:1064 tgid:1064 ppid:2 flags:0x00004000 [ 1387.866576][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 1387.872699][ T30] Call Trace: [ 1387.944588][ T30] [ 1387.947603][ T30] __schedule+0x1800/0x4a60 [ 1387.952175][ T30] ? __pfx___schedule+0x10/0x10 [ 1388.034600][ T30] ? __pfx_lock_release+0x10/0x10 [ 1388.039718][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1388.134525][ T30] ? kthread_data+0x52/0xd0 [ 1388.139120][ T30] ? schedule+0x90/0x320 [ 1388.143405][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1388.244650][ T30] ? schedule+0x90/0x320 [ 1388.248988][ T30] schedule+0x14b/0x320 [ 1388.253211][ T30] schedule_preempt_disabled+0x13/0x30 [ 1388.354624][ T30] __mutex_lock+0x6a4/0xd70 [ 1388.359299][ T30] ? mark_lock+0x9a/0x360 [ 1388.363684][ T30] ? __mutex_lock+0x527/0xd70 [ 1388.490295][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 1388.525043][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1388.530178][ T30] addrconf_dad_work+0xd0/0x16f0 [ 1388.594569][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1388.600216][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1388.704930][ T30] ? process_scheduled_works+0x945/0x1830 [ 1388.710750][ T30] process_scheduled_works+0xa2c/0x1830 [ 1388.814567][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1388.820771][ T30] ? assign_work+0x364/0x3d0 [ 1388.914635][ T30] worker_thread+0x870/0xd30 [ 1388.919429][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1388.994958][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1389.024590][ T30] kthread+0x2f0/0x390 [ 1389.028746][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1389.033909][ T30] ? __pfx_kthread+0x10/0x10 [ 1389.144598][ T30] ret_from_fork+0x4b/0x80 [ 1389.149205][ T30] ? __pfx_kthread+0x10/0x10 [ 1389.153839][ T30] ret_from_fork_asm+0x1a/0x30 [ 1389.264622][ T30] [ 1389.293657][ T30] [ 1389.293657][ T30] Showing all locks held in the system: [ 1389.404964][ T30] 6 locks held by kworker/u8:1/12: [ 1389.410160][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1389.624651][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1389.774622][ T30] #2: ffffffff8fcb40d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1389.784220][ T30] #3: ffff88806d80b0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1390.024804][ T30] #4: ffff88805ae88250 (&devlink->lock_key#62){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1390.134571][ T30] #5: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 1390.143766][ T30] 1 lock held by khungtaskd/30: [ 1390.331982][ T30] #0: ffffffff8e938a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1390.436505][ T30] 2 locks held by kswapd0/90: [ 1390.441297][ T30] 3 locks held by syslogd/4663: [ 1390.564602][ T30] 1 lock held by klogd/4670: [ 1390.569266][ T30] 5 locks held by udevd/4681: [ 1390.573987][ T30] 3 locks held by dhcpcd/4894: [ 1390.735947][ T30] #0: ffffffff8fd268f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1390.814590][ T30] #1: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 1390.823967][ T30] #2: ffff8880b893e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1391.034198][ T30] 2 locks held by getty/4983: [ 1391.055024][ T30] #0: ffff88803020f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1391.153492][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1391.274788][ T30] 3 locks held by kworker/1:5/5307: [ 1391.280058][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1391.484533][ T30] #1: ffffc9000434fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1391.648755][ T30] #2: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1391.754585][ T30] 2 locks held by kworker/1:6/5308: [ 1391.759898][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1391.974564][ T30] #1: ffffc9000435fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1392.144620][ T30] 6 locks held by kworker/0:6/5323: [ 1392.149908][ T30] 2 locks held by kworker/0:7/15584: [ 1392.284592][ T30] 2 locks held by syz-executor/18202: [ 1392.290053][ T30] 3 locks held by kworker/u8:0/18338: [ 1392.393105][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1392.524583][ T30] #1: ffffc90003327d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1392.664657][ T30] #2: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1392.775191][ T30] 2 locks held by syz-executor/19569: [ 1392.780646][ T30] 1 lock held by syz-executor/19587: [ 1392.894551][ T30] #0: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1392.903672][ T30] 1 lock held by syz-executor/20140: [ 1393.043942][ T30] #0: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1393.174622][ T30] 1 lock held by syz-executor/20201: [ 1393.179977][ T30] #0: ffffffff8fcc0bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1393.356098][ T30] 4 locks held by kworker/1:7/20237: [ 1393.361458][ T30] 4 locks held by syz-executor/20242: [ 1393.494544][ T30] 2 locks held by syz-executor/20243: [ 1393.544736][ T30] [ 1393.547137][ T30] ============================================= [ 1393.547137][ T30] [ 1393.704624][ T30] NMI backtrace for cpu 1 [ 1393.709120][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-04107-g194fcd20ebcc #0 [ 1393.719314][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1393.729405][ T30] Call Trace: [ 1393.732713][ T30] [ 1393.735676][ T30] dump_stack_lvl+0x241/0x360 [ 1393.740589][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.745834][ T30] ? __pfx__printk+0x10/0x10 [ 1393.750482][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1393.755476][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1393.760997][ T30] ? _printk+0xd5/0x120 [ 1393.765210][ T30] ? __pfx__printk+0x10/0x10 [ 1393.769854][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1393.774754][ T30] ? __pfx__printk+0x10/0x10 [ 1393.779393][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1393.784476][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1393.790595][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1393.796712][ T30] watchdog+0xff4/0x1040 [ 1393.800999][ T30] ? watchdog+0x1ea/0x1040 [ 1393.805459][ T30] ? __pfx_watchdog+0x10/0x10 [ 1393.810172][ T30] kthread+0x2f0/0x390 [ 1393.814278][ T30] ? __pfx_watchdog+0x10/0x10 [ 1393.818997][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.823620][ T30] ret_from_fork+0x4b/0x80 [ 1393.828082][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.832707][ T30] ret_from_fork_asm+0x1a/0x30 [ 1393.837531][ T30] [ 1393.841365][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1393.847021][ C0] NMI backtrace for cpu 0 [ 1393.847038][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-04107-g194fcd20ebcc #0 [ 1393.847059][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1393.847072][ C0] Workqueue: events nsim_dev_trap_report_work [ 1393.847105][ C0] RIP: 0010:unwind_next_frame+0x5/0x22d0 [ 1393.847136][ C0] Code: 80 e1 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 03 f8 b9 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fd 49 bc 00 [ 1393.847153][ C0] RSP: 0000:ffffc90000006b30 EFLAGS: 00000202 [ 1393.847169][ C0] RAX: 0000000000000001 RBX: ffffc90000006b40 RCX: ffffffff9179c000 [ 1393.847183][ C0] RDX: dffffc0000000000 RSI: ffffffff817f79c8 RDI: ffffc90000006b40 [ 1393.847198][ C0] RBP: ffffc90000006bd0 R08: 0000000000000000 R09: ffffc90000006c30 [ 1393.847211][ C0] R10: ffffc90000006b90 R11: ffffffff817f7a90 R12: ffff88801cecda00 [ 1393.847226][ C0] R13: ffffffff817f7a90 R14: ffffc90000006c20 R15: 0000000000000000 [ 1393.847239][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1393.847255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1393.847268][ C0] CR2: 00000000f7109150 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1393.847285][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1393.847296][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1393.847308][ C0] Call Trace: [ 1393.847315][ C0] [ 1393.847323][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1393.847342][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1393.847369][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1393.847387][ C0] ? nmi_handle+0x2a/0x5a0 [ 1393.847412][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1393.847436][ C0] ? nmi_handle+0x14f/0x5a0 [ 1393.847453][ C0] ? nmi_handle+0x2a/0x5a0 [ 1393.847471][ C0] ? unwind_next_frame+0x5/0x22d0 [ 1393.847518][ C0] ? default_do_nmi+0x63/0x160 [ 1393.847537][ C0] ? exc_nmi+0x123/0x1f0 [ 1393.847554][ C0] ? end_repeat_nmi+0xf/0x53 [ 1393.847579][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1393.847612][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1393.847640][ C0] ? __init_begin+0x41000/0x41000 [ 1393.847659][ C0] ? stack_trace_save+0x118/0x1d0 [ 1393.847684][ C0] ? unwind_next_frame+0x5/0x22d0 [ 1393.847712][ C0] ? unwind_next_frame+0x5/0x22d0 [ 1393.847740][ C0] ? unwind_next_frame+0x5/0x22d0 [ 1393.847767][ C0] [ 1393.847774][ C0] [ 1393.847780][ C0] arch_stack_walk+0x11c/0x150 [ 1393.847802][ C0] ? stack_trace_save+0x118/0x1d0 [ 1393.847829][ C0] stack_trace_save+0x118/0x1d0 [ 1393.847855][ C0] ? __lock_acquire+0x1384/0x2050 [ 1393.847881][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1393.847913][ C0] kasan_save_track+0x3f/0x80 [ 1393.847956][ C0] __kasan_slab_alloc+0x66/0x80 [ 1393.847974][ C0] ? __alloc_skb+0x1c3/0x440 [ 1393.847998][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 1393.848025][ C0] __alloc_skb+0x1c3/0x440 [ 1393.848052][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1393.848081][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 1393.848110][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1393.848133][ C0] ? synproxy_pernet+0x45/0x270 [ 1393.848158][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 1393.848184][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1393.848208][ C0] ? nf_ip_checksum+0x13a/0x500 [ 1393.848234][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 1393.848260][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1393.848282][ C0] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 1393.848309][ C0] ? ip_vs_conn_out_get+0xba6/0xc00 [ 1393.848337][ C0] nft_do_chain+0x4ad/0x1da0 [ 1393.848363][ C0] ? tcp_conn_schedule+0x45e/0x880 [ 1393.848387][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1393.848424][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1393.848449][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1393.848477][ C0] nft_do_chain_inet+0x418/0x6b0 [ 1393.848501][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1393.848533][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1393.848555][ C0] nf_hook_slow+0xc3/0x220